From 5d92939d918927defe8226b763a82b3eb78accb9 Mon Sep 17 00:00:00 2001
From: somew1nd <wfq559@outlook.com>
Date: Wed, 9 Sep 2026 21:32:24 -0700
Subject: [PATCH] refactor: unify agent history and harden runtime diagnostics

Preserve user guidance through history compression, stabilize Flash index targets, and retire withdrawn checks without applying stale verdicts.

Improve runtime diagnostics, tool responses, and history rendering. Simplify documentation and comments.

Validation: 2076 tests passed in the full suite; 381 affected tests and 26 frontend tests passed after cleanup. Ruff and the quality ratchet passed.
---
 README.md                                     |   31 +-
 README_CN.md                                  |   33 +-
 .../agent-stream/agent-stream.component.html  |    5 +-
 .../agent-stream/agent-stream.component.ts    |   17 +
 .../src/app/pages/home/home.component.html    |    8 +-
 .../src/app/pages/home/home.component.scss    |    4 +-
 .../src/app/utils/tool-formatter.util.spec.ts |   63 +-
 .../src/app/utils/tool-formatter.util.ts      |   71 +-
 artemis/agents/checker/checker.json           |    6 +-
 artemis/agents/checker/checker.py             |   66 +-
 artemis/agents/diagnoser/diagnoser.py         |    7 +-
 artemis/agents/explorer/tool_declarations.py  |    4 +-
 artemis/agents/flash/context_compressor.py    |  367 ++++--
 artemis/agents/flash/flash_runner.md          |   15 +-
 artemis/agents/flash/runner.py                |  401 ++++--
 artemis/agents/flash/summarizer.py            |   84 +-
 artemis/agents/operator/operator.json         |    2 +-
 artemis/agents/operator/operator.py           |  151 ++-
 artemis/agents/operator/prompts.py            |  287 +++--
 artemis/agents/outputter/outputter.md         |    2 +-
 artemis/agents/planner/planner.json           |    2 +-
 artemis/agents/planner/planner.py             |   31 +-
 artemis/agents/summarizer/summarizer.md       |   35 -
 artemis/agents/summarizer/summarizer.py       |    2 +-
 artemis/config/agent.py                       |  101 +-
 artemis/context.py                            |   12 +
 artemis/core/diagnostics/__init__.py          |   18 +
 artemis/core/diagnostics/device_smoke.py      |  359 ++++++
 artemis/core/diagnostics/engine.py            |   84 +-
 .../diagnostics/probes/credentials_probe.py   |    2 +-
 artemis/core/diagnostics/probes/host_probe.py |  427 ++++++
 artemis/core/diagnostics/readiness.py         |   83 ++
 artemis/data_engine/engine.py                 |   11 +-
 artemis/data_engine/trace.py                  |   64 +-
 artemis/drivers/android/adb_driver.py         |    2 +-
 artemis/graph/checkpoints.py                  |  176 ++-
 artemis/graph/graph.py                        |   78 +-
 artemis/graph/perception.py                   |   31 +
 artemis/graph/visibility.py                   |    2 +-
 artemis/interfaces/cli/commands/doctor.py     |  638 ++++-----
 artemis/interfaces/cli/commands/mcp.py        |    1 +
 artemis/mcp/action_executor.py                |  217 +++-
 artemis/mcp/action_specs.py                   |  484 ++-----
 artemis/memory/chunking.py                    |  460 +++++--
 artemis/memory/step_capsule.md                |    6 +-
 artemis/memory/step_memory.py                 |   29 +-
 artemis/memory/transcript.py                  |  354 ++++-
 artemis/resources/config/artemis.jsonc        |   28 +-
 artemis/runtime/__init__.py                   |    2 +
 artemis/runtime/daemon_client.py              |   26 +
 artemis/services/token_meter.py               |  127 +-
 artemis/tools/command_tool.py                 |   68 +-
 artemis/tools/explorer_tool.py                |   43 +-
 artemis/tools/history/replay.py               |   12 +-
 artemis/tools/history/screenshot.py           |   31 +-
 artemis/tools/history/search.py               |  179 ++-
 artemis/tools/mobile/search_logs.py           |   25 +-
 artemis/tools/scratchpad.py                   |   22 +-
 artemis/tools/video_tool.py                   |    2 +-
 artemis/utils/app_launch_utils.py             |  226 +++-
 artemis/utils/credentials_validator.py        |   12 +-
 artemis/utils/notes.py                        |   11 +-
 artemis/utils/plan_grammar.py                 |   80 +-
 artemis/utils/task_tree.py                    |  158 ++-
 config/artemis.jsonc                          |   28 +-
 mcp_server/README.md                          |    7 +-
 mcp_server/base.py                            |    4 +-
 mcp_server/rules.md                           |   16 +-
 mcp_server/tools/__init__.py                  |    2 +
 mcp_server/tools/diagnose.py                  | 1060 +++++++++++++++
 scripts/run_edge_case_part.py                 |    4 +-
 scripts/run_ui.py                             |    2 +-
 .../action_surfaces/tool_declarations.json    |  150 ++-
 .../agents/flash/test_turn_index_snapshot.py  |  302 +++++
 .../unit/agents/test_check_prompt_assembly.py |   66 +-
 tests/unit/agents/test_checker.py             |   85 +-
 tests/unit/agents/test_diagnoser.py           |   36 +
 .../agents/test_execution_incident_prompt.py  |   16 +-
 tests/unit/agents/test_flash_runner.py        |  318 ++++-
 tests/unit/agents/test_flash_runner_ledger.py |  313 ++++-
 tests/unit/agents/test_flash_scrub_edge.py    |  405 +++++-
 .../unit/agents/test_flash_step_summarizer.py |  105 +-
 tests/unit/agents/test_history_analyzer.py    |   11 +-
 tests/unit/agents/test_operator.py            |  120 +-
 .../agents/test_operator_prompt_estimate.py   |  122 ++
 .../test_operator_reasoning_reminder.py       |  147 +++
 tests/unit/agents/test_operator_transcript.py |   57 +-
 tests/unit/agents/test_outputter.py           |    2 +-
 tests/unit/agents/test_summarizer.py          |    2 +-
 tests/unit/core/test_device_smoke.py          |  364 ++++++
 tests/unit/core/test_diagnostics.py           |   84 ++
 tests/unit/core/test_host_probe.py            |  471 +++++++
 tests/unit/core/test_readiness.py             |  157 +++
 tests/unit/data_engine/test_engine.py         |    2 +-
 .../test_trace_detached_lens_calls.py         |   79 ++
 tests/unit/graph/test_checkpoints.py          |  353 +++++
 tests/unit/graph/test_guidance_plan_edit.py   |   95 ++
 .../mcp/test_action_executor_helper_tools.py  |    5 +
 .../mcp/test_action_executor_semantics.py     |  129 +-
 tests/unit/mcp/test_action_specs.py           |  103 +-
 tests/unit/mcp/test_diagnose_tool.py          | 1141 +++++++++++++++++
 tests/unit/mcp/test_mcp_stdio_lifecycle.py    |    1 +
 tests/unit/mcp/test_mcp_tools.py              |    3 +-
 tests/unit/memory/test_history_chunking.py    |  843 +++++++++++-
 tests/unit/memory/test_step_memory_service.py |   78 +-
 tests/unit/memory/test_transcript_ledger.py   |  354 ++++-
 tests/unit/services/test_token_meter_ratio.py |  111 ++
 tests/unit/test_cli.py                        |  360 ++++++
 tests/unit/test_memory_config.py              |   88 +-
 tests/unit/test_token_meter.py                |    1 +
 tests/unit/tools/history/test_replay.py       |   36 +-
 tests/unit/tools/history/test_screenshot.py   |   61 +-
 tests/unit/tools/history/test_search.py       |   95 ++
 .../unit/tools/test_append_note_pure_tool.py  |    8 +-
 tests/unit/tools/test_append_note_tool.py     |   12 +-
 tests/unit/tools/test_command_tool.py         |   55 +-
 tests/unit/tools/test_explorer_tool.py        |   40 +-
 tests/unit/tools/test_read_note_pure_tool.py  |    8 +-
 tests/unit/tools/test_read_note_tool.py       |   12 +-
 tests/unit/tools/test_save_note_pure_tool.py  |    6 +-
 tests/unit/tools/test_save_note_tool.py       |   10 +-
 tests/unit/tools/test_search_logs.py          |   26 +
 .../unit/tools/test_update_note_pure_tool.py  |    8 +-
 tests/unit/tools/test_update_note_tool.py     |   12 +-
 tests/unit/utils/test_app_launch_utils.py     |  519 ++++++--
 tests/unit/utils/test_plan_grammar.py         |   34 +-
 tests/unit/utils/test_task_tree.py            |  197 ++-
 127 files changed, 13738 insertions(+), 1988 deletions(-)
 delete mode 100644 artemis/agents/summarizer/summarizer.md
 create mode 100644 artemis/core/diagnostics/device_smoke.py
 create mode 100644 artemis/core/diagnostics/probes/host_probe.py
 create mode 100644 artemis/core/diagnostics/readiness.py
 create mode 100644 mcp_server/tools/diagnose.py
 create mode 100644 tests/unit/agents/flash/test_turn_index_snapshot.py
 create mode 100644 tests/unit/agents/test_operator_prompt_estimate.py
 create mode 100644 tests/unit/agents/test_operator_reasoning_reminder.py
 create mode 100644 tests/unit/core/test_device_smoke.py
 create mode 100644 tests/unit/core/test_host_probe.py
 create mode 100644 tests/unit/core/test_readiness.py
 create mode 100644 tests/unit/data_engine/test_trace_detached_lens_calls.py
 create mode 100644 tests/unit/graph/test_guidance_plan_edit.py
 create mode 100644 tests/unit/mcp/test_diagnose_tool.py
 create mode 100644 tests/unit/services/test_token_meter_ratio.py

diff --git a/README.md b/README.md
index d1bec9f..49a3108 100644
--- a/README.md
+++ b/README.md
@@ -33,17 +33,17 @@
 
 ## Key Highlights
 
-* **Cross-App Automation & Autonomous AI Assistant**: Operates not just as a robust testing framework, but as an autonomous agent capable of handling complex cross-app workflows and daily tasks via natural language;
-* **Zero-Maintenance Test Automation**: Built upon a "Dynamic-First, Coordinate-Fallback" multimodal locating engine, eliminating fragile XPath/ID selector maintenance and remaining resilient to UI redesigns, system updates, and resolution drift;
-* **One-Click Bug Repro & Logcat Diagnostics in IDE**: Native **Model Context Protocol (MCP)** integration allows **Antigravity, Claude Code, and Windsurf** to drive physical test devices via natural language, automatically capturing crash stacks from **Logcat** and keyframe screenshots;
-* **Ultra-Fast Execution (3–5s per Step)**: Pioneered an **Optimistic Asynchronous Pipeline** that completely decouples UI interaction from heavy LLM reasoning, achieving rapid regression throughput in Flash mode;
-* **Popup Self-Healing & 10+ Hour Exploration**: Proprietary **Safety Net** double-checks targets before action execution to intercept and clear interfering system popups; Pro mode supports **10+ hours** of continuous exploratory & monkey-plus stability testing;
-* **Industry-Leading SOTA**: Achieved **99%+ task completion** on Google Research's **AndroidWorld** benchmark (100+ complex multi-step tasks).
+* **Cross-App Automation**: Executes testing workflows and everyday tasks on Android from natural language instructions.
+* **Multimodal Targeting**: Uses element indices when available, with coordinate and visual locating fallbacks for custom interfaces.
+* **IDE Diagnostics**: **Model Context Protocol (MCP)** integration lets **Antigravity, Claude Code, and Windsurf** drive test devices and collect **Logcat** output and screenshots.
+* **Flash Execution**: A reactive observe-and-act loop with asynchronous history summaries, typically **3–5s per step**.
+* **Pro Exploration**: Checks targets before individual actions and returns blocked actions to the Operator for recovery. Supports long-running exploratory and stability tests.
+* **AndroidWorld Results**: **99%+ task completion** on Google Research's **AndroidWorld** benchmark (100+ multi-step tasks).
 
 <a id="workflow-showcase"></a>
 ## Antigravity × ARTEMIS: Autonomous Testing Workflow
 
-Experience seamless collaboration between **Antigravity** and **ARTEMIS** via native MCP integration — taking you from a natural language requirement to a production-grade diagnostic report in four automated steps:
+**Antigravity** uses **ARTEMIS** through MCP to turn a test request into a plan, device execution, and a diagnostic report:
 
 <table width="100%">
   <tr>
@@ -65,7 +65,7 @@ Experience seamless collaboration between **Antigravity** and **ARTEMIS** via na
       <img src="./docs/assets/workflow-3-exec.png" width="100%" alt="Step 3: Autonomous Test Execution" />
     </td>
     <td width="50%" align="center">
-      <b>4. Comprehensive Final Report</b><br>
+      <b>4. Final Report</b><br>
       <sub>Delivers structured audit findings, metric tables, and raw datasets</sub><br><br>
       <img src="./docs/assets/workflow-4-report.png" width="100%" alt="Step 4: Final Report" />
     </td>
@@ -159,7 +159,8 @@ PYTHONPATH = "/path/to/artemis"
         "mobile_run_task": { "eager": true },
         "mobile_manage_task": { "eager": true },
         "mobile_get_device_state": { "eager": true },
-        "mobile_inspect_trace": { "eager": true }
+        "mobile_inspect_trace": { "eager": true },
+        "mobile_diagnose": { "eager": true }
       }
     }
   }
@@ -246,14 +247,14 @@ if __name__ == "__main__":
 </p>
 
 * **Web Visual Test Console (`uv run artemis ui`)**: Real-time screen projection and interactive panel, supporting natural language test dispatch, live reasoning telemetry, action trajectories, and execution replay; manage server lifecycle anytime from any terminal using `uv run artemis restart`, `uv run artemis stop`, and `uv run artemis status`;
-* **Native MCP Protocol (IDE Collaboration)**: Operates as a standard MCP server seamlessly integrating with **Antigravity, Claude Code, Windsurf**, etc., directly driving real devices inside the IDE to verify bugs and run test cases;
+* **MCP Server**: Connects **Antigravity, Claude Code, Windsurf**, and other MCP clients to real devices for bug reproduction and test execution;
 * **Developer CLI (`uv run artemis run`)**: Direct terminal execution for automated test cases, exploratory stability inspection, or AndroidWorld benchmarks with high-fidelity structured terminal output;
 * **Python SDK**: Integrates as a standard Python library into existing automated testing frameworks (e.g., pytest) or CI/CD pipelines with strongly typed Pydantic structured outputs and assertion support.
 
 <a id="benchmarks"></a>
 ## Benchmarks: AndroidWorld (SOTA 99%+)
 
-Evaluated on [AndroidWorld](https://github.com/google-research/android_world) — Google Research's gold-standard benchmark spanning 20+ real apps and 100+ complex multi-step tasks: **Artemis demonstrated exceptional robustness across the entire benchmark suite, achieving a 99%+ completion rate.**
+Artemis achieved a **99%+ completion rate** on [AndroidWorld](https://github.com/google-research/android_world), Google Research's benchmark spanning 20+ apps and 100+ multi-step tasks.
 
 <p align="center">
   <img src="./docs/assets/androidworld_leaderboard.png?v=2" alt="AndroidWorld Benchmark Comparison" width="100%" />
@@ -261,9 +262,9 @@ Evaluated on [AndroidWorld](https://github.com/google-research/android_world) 
 
 ## How ARTEMIS is Architected
 
-* **Pre-Touch Pixel Gate & Speculative Chaining**: Eliminates "silent misclicks" from inference latency race conditions. Milliseconds before dispatch, a local UI guard intercepts unexpected dialogs (0 tokens, 0 cloud wait), a Micro-ROI gate verifies target stability, and speculative chained taps hit transient UI (e.g. auto-fading video controls) before they expire;
-* **Three-Layer Progressive Grounding Engine**: Fuses local OCR with accessibility hierarchies (~150ms, 0 tokens) to drive 85%+ of standard actions via drift-free numeric indices, gracefully falling back to spatial vision models for custom Canvas/Compose/Flutter UI and sandboxed CV probing for subtle pixel states;
-* **Elastic Dual Engine with In-Flight Context Compactor**: Seamlessly toggles between high-throughput reactive CI loops (Flash Mode, 3–5s/step) and multi-step cognitive state graphs (Pro Mode), using background visual deltas and DOM pruning to slash token consumption by >70% for 10+ hours of continuous, unattended soak testing.
+* **Pre-Execution Checks and Action Bursts**: Pro checks the target against the live UI tree and pixels before dispatching an individual action. Action bursts handle transient controls without waiting for another model turn.
+* **Element Locating**: Combines accessibility hierarchies and OCR with visual models for custom Canvas, Compose, and Flutter interfaces.
+* **Shared History Compression**: Flash and Pro replace older screenshots with visual summaries and compress completed steps into searchable history chunks. Context thresholds control when raw turns are replaced.
 
 <p align="center">
   <img src="./docs/assets/artemis_architecture_diagram.png" alt="ARTEMIS System Architecture Diagram" width="100%" />
@@ -274,7 +275,7 @@ Evaluated on [AndroidWorld](https://github.com/google-research/android_world) 
 ARTEMIS supports two execution profiles tailored for different automation requirements:
 
 * **Flash Profile (`--profile flash`)**: Fast and token-efficient reactive loop (~3–5s per step): one model observes the live screen, thinks, and acts, with no graph orchestration. Ideal for routine, deterministic UI tasks. The loop is unbounded by default (`agent.flash.max_turns`, 0 = unlimited) because history is compressed rather than capped: Flash shares the Pro session transcript ledger (session-relative `T+mm:ss` clock, screenshots folded into visual summaries, older steps chunked into eras and recallable on demand via `search_history` / `replay_steps`) and can query the session recording through `video_analyzer`. Transient UI (auto-fading control bars, toasts) is handled by chaining taps into one `click_sequence`. *Limitations*: No task plan or notes, no pre-execution safety net, no checkpoint verification or final report, and no ADB shell.
-* **Pro Profile (`--profile pro`)**: Our most capable architecture (~15–40s per step), built as a multi-agent graph. A **Planner** maintains a living Markdown task plan with milestones and `verify` / `assert` check items; the **Operator** executes it with the full toolset (Explorer grounding whose `flash` / `pro` / `ultra` tier is a user setting per profile — `pro.explorer.mode` / `flash.explorer_mode` in `config/artemis.jsonc` or `--explorer-pro-mode` — never chosen by the agent; notes, history recall, video analysis, ADB diagnostics). Every single action passes a pre-execution **Safety Net** (XML-first, pixel fallback), while multi-action **fast-action bursts** fire back to back to beat turn latency on transient UI. A blocked or failed action opens an **execution incident** that stays in the Operator's context until a later action succeeds, so recovery is handled by the Operator itself with no separate repair agent. A read-only **Checker** verifies plan checkpoints and runs an exit final review against the original goal (`--verification-level`: `off` / `final` (default) / `checkpoints` / `strict`), and plan milestone edits get an advisory review. Handles 100+ step long-horizon workflows, `[Loop:continuous]` monitoring, and an optional written report.
+* **Pro Profile (`--profile pro`)**: A planning and verification workflow (~15–40s per step), built as a multi-agent graph. A **Planner** maintains a living Markdown task plan with milestones and `verify` / `assert` check items; the **Operator** executes it with the full toolset (Explorer grounding whose `flash` / `pro` / `ultra` tier is a user setting per profile — `pro.explorer.mode` / `flash.explorer_mode` in `config/artemis.jsonc` or `--explorer-pro-mode` — never chosen by the agent; notes, history recall, video analysis, ADB diagnostics). Every single action passes a pre-execution **Safety Net** (XML-first, pixel fallback), while multi-action **fast-action bursts** fire back to back to beat turn latency on transient UI. A blocked or failed action opens an **execution incident** that stays in the Operator's context until a later action succeeds, so recovery is handled by the Operator itself with no separate repair agent. A read-only **Checker** verifies plan checkpoints and runs an exit final review against the original goal (`--verification-level`: `off` / `final` (default) / `checkpoints` / `strict`), and plan milestone edits get an advisory review. Handles 100+ step long-horizon workflows, `[Loop:continuous]` monitoring, and an optional written report.
 
 ## Roadmap
 
diff --git a/README_CN.md b/README_CN.md
index 9da5721..84c1eb0 100644
--- a/README_CN.md
+++ b/README_CN.md
@@ -33,18 +33,18 @@
 
 ## 核心亮点
 
-* **跨 App 复杂自动化与 AI 个人助理**：不仅能执行严格的自动化测试用例，更具备接管真机的自主决策与长流程操作能力，一句话处理跨应用复杂业务与任务；
-* **零脚本维护自动化测试**：基于“动态优先、坐标兜底”的多模态语义定位，彻底告别传统 XPath / 控件 ID 频繁失效的痛点，无惧 App 改版、分辨率差异与系统升级；
-* **IDE 内一键 Bug 复现与 Logcat 诊断**：原生支持 **MCP 协议**，可在 **Antigravity、Claude Code、Windsurf** 中直接用自然语言驱动真机复现缺陷，自动抓取关键帧截图与 **Logcat 崩溃堆栈**，完成研发测试闭环；
-* **极速执行吞吐（单步 3–5 秒）**：首创**全链路乐观异步流水线 (Optimistic Async Pipeline)**，解耦重度推理与页面操作，在 Flash 模式下实现丝滑的高频交互与快速回归验证；
-* **干扰弹窗自愈与超长程巡检**：独创 **Safety Net** 执行前校验机制，自动识别并清除系统权限弹窗、通知遮挡等异常；Pro 模式支持连续 **10+ 小时** 无人值守稳定性巡检与探索性测试 (Exploratory / Monkey-plus Testing)；
-* **业界顶尖 SOTA**：在 Google Research **AndroidWorld** 基准评测（100+ 复杂长程系统与应用交互任务）中取得 **99%+ 任务完成率**。
+* **跨 App 自动化**：根据自然语言指令，在 Android 上执行测试流程和日常任务。
+* **多模态定位**：优先使用元素索引，对自绘界面提供坐标和视觉定位兜底。
+* **IDE 内诊断**：通过 **MCP 协议**，让 **Antigravity、Claude Code、Windsurf** 操作测试设备，收集 **Logcat** 输出和截图。
+* **Flash 执行**：使用观察、执行循环和异步历史摘要，单步通常约 **3–5 秒**。
+* **Pro 探索**：单个动作执行前校验目标，被拦截的动作交回 Operator 处理。支持长时间探索和稳定性测试。
+* **AndroidWorld 结果**：在 Google Research **AndroidWorld** 基准评测（100+ 多步任务）中取得 **99%+ 任务完成率**。
 
 <a id="workflow-showcase"></a>
 <a id="全流程演示"></a>
 ## Antigravity × ARTEMIS：全流程自主测试演示
 
-通过原生 MCP 协议，**Antigravity** 与 **ARTEMIS** 深度协同——只需一句自然语言指令，即可自动完成从需求理解、测试规划、真机执行到深度报告输出的完整闭环：
+**Antigravity** 通过 MCP 调用 **ARTEMIS**，将测试需求转为计划、真机操作和诊断报告：
 
 <table width="100%">
   <tr>
@@ -161,7 +161,8 @@ PYTHONPATH = "/path/to/artemis"
         "mobile_run_task": { "eager": true },
         "mobile_manage_task": { "eager": true },
         "mobile_get_device_state": { "eager": true },
-        "mobile_inspect_trace": { "eager": true }
+        "mobile_inspect_trace": { "eager": true },
+        "mobile_diagnose": { "eager": true }
       }
     }
   }
@@ -247,15 +248,15 @@ if __name__ == "__main__":
 </p>
 
 * **Web 可视化测试控制台 (`uv run artemis ui`)**：集成设备实时投屏与交互面板，支持通过自然语言下发测试用例，实时观测推理步骤、操作轨迹、截图留存与异常状态回放；支持在任意终端使用 `uv run artemis restart`、`uv run artemis stop`、`uv run artemis status` 一键重启、关停或查看服务状态；
-* **原生 MCP 协议 (IDE 协同)**：作为标准 MCP 服务器无缝接入 **Antigravity、Claude Code、Windsurf** 等开发环境，在 IDE 中直接驱动真机完成自动化测试与 Bug 复现验证；
+* **原生 MCP 协议 (IDE 协同)**：作为标准 MCP 服务器接入 **Antigravity、Claude Code、Windsurf** 等开发环境，在 IDE 中直接驱动真机完成自动化测试与 Bug 复现验证；
 * **开发者命令行 CLI (`uv run artemis run`)**：支持通过终端直接执行自动化测试用例、探索性稳定性巡检或 AndroidWorld 基准评测，提供高保真结构化终端输出；
-* **Python SDK**：作为标准 Python 库无缝集成至现有自动化测试框架（如 pytest）或 CI/CD 流水线，提供基于 Pydantic 的强类型结构化结果与断言支持。
+* **Python SDK**：作为标准 Python 库集成至现有自动化测试框架（如 pytest）或 CI/CD 流水线，提供基于 Pydantic 的强类型结构化结果与断言支持。
 
 <a id="benchmarks"></a>
 <a id="基准评测"></a>
 ## 基准评测：AndroidWorld (SOTA 99%+)
 
-在 Google Research 发布的业界基准评测 [AndroidWorld](https://github.com/google-research/android_world)（涵盖 20+ 款常用应用与 100+ 项复杂多步长程任务）中：**Artemis 在全套长程任务评测中展现了高鲁棒性，取得了超过 99% 的任务完成率。**
+Artemis 在 Google Research 发布的 [AndroidWorld](https://github.com/google-research/android_world) 基准评测中取得 **99%+ 任务完成率**。该评测涵盖 20+ 款应用与 100+ 项多步任务。
 
 <p align="center">
   <img src="./docs/assets/androidworld_leaderboard.png?v=2" alt="AndroidWorld 评测基准对比" width="100%" />
@@ -263,9 +264,9 @@ if __name__ == "__main__":
 
 ## ARTEMIS 是如何建构的
 
-* **Pre-Touch 触控前像素守门与预测性连点**：彻底杜绝大模型推理延迟造成的「静默误触」。动作下发前毫秒级拦截意外弹窗（0 Token、0 云端等待），Micro-ROI 局部校验目标稳定性；针对视频全屏等瞬态控件，结合历史先验毫秒级连击唤醒，在淡出窗口期内瞬时闭环；
-* **三层递进式目标定位引擎 (Progressive Grounding)**：首层通过本地 OCR 与无障碍树几何融合（~150ms、0 Token），以无偏移数字索引承载 85%+ 常见交互；二层对 Flutter/Compose/Canvas 等自绘组件自动回退至空间视觉模型，三层辅以沙箱 CV 探针核验细微像素状态；
-* **弹性双执行引擎与运行时上下文动态压缩**：兼顾 3–5 秒秒级响应的 CI 高吞吐回归（Flash 模式）与深度长程认知状态图探索（Pro 模式），后台异步生成视觉增量并剪除冗余 DOM，长程任务 Token 消耗锐降 70%+，支持 10+ 小时无人值守稳定性压测。
+* **执行前校验与动作序列**：Pro 在下发单个动作前，通过实时 UI 树和像素校验目标。快速动作序列用于处理瞬态控件，无需等待下一轮模型响应。
+* **元素定位**：结合无障碍树、OCR 和视觉模型，支持 Canvas、Compose、Flutter 等自绘界面。
+* **共享历史压缩**：Flash 和 Pro 将较早的截图替换为视觉摘要，并把已完成步骤压缩为可检索的历史分块。上下文阈值决定何时替换原始记录。
 
 <p align="center">
   <img src="./docs/assets/artemis_architecture_diagram.png" alt="ARTEMIS 架构系统示意图" width="100%" />
@@ -275,8 +276,8 @@ if __name__ == "__main__":
 
 ARTEMIS 提供两种运行模式以适应不同的自动化需求：
 
-* **Flash 模式 (`--profile flash`)**：轻量极速且省 Token 的响应式循环（单步约 3–5 秒）：单个模型观察实时屏幕、思考、执行，不经过图编排，适合常规确定性 UI 操作。默认不限步数（`agent.flash.max_turns`，0 表示不限），因为历史是被压缩而不是被截断：Flash 与 Pro 共用同一套会话记录账本（相对测试时间 `T+mm:ss`、截图折叠为视觉摘要、更早的步骤分块归档并可通过 `search_history` / `replay_steps` 按需召回），并可调用 `video_analyzer` 分析整段会话录屏；对自动消失的控制栏、toast 等瞬态控件，用 `click_sequence` 把多次点击串成一个原子序列。*局限性*：没有任务计划与笔记、没有执行前安全网、没有检查点校验与最终报告、不能执行 ADB 命令。
-* **Pro 模式 (`--profile pro`)**：最强大的架构（单步约 15–40 秒），由多智能体图编排：**Planner** 维护一份带里程碑和 `verify` / `assert` 检查项的 Markdown 任务计划；**Operator** 按计划执行，拥有全套工具（Explorer 元素定位，其 `flash` / `pro` / `ultra` 三档感知深度是按运行模式设置的用户配置——`config/artemis.jsonc` 里的 `pro.explorer.mode` / `flash.explorer_mode` 或 `--explorer-pro-mode`——智能体自身不会选择档位；笔记、历史召回、视频分析、ADB 诊断）。单个动作执行前都经过 **Safety Net** 校验（XML 优先、像素兜底），而一轮里的多个动作则作为**快速动作序列 (fast-action burst)** 连发，赶在瞬态控件消失前完成操作。动作被拦截或失败时会打开一条**执行事故 (execution incident)**，持续留在 Operator 的上下文里直到后续动作执行成功，恢复由 Operator 自己完成，不再有独立的修复智能体。只读的 **Checker** 校验计划中的检查点，并在退出前对照原始目标做终审（`--verification-level`：`off` / `final`（默认）/ `checkpoints` / `strict`），计划里程碑的改动会得到建议式复核。支持 100+ 步的长程复杂业务流、`[Loop:continuous]` 持续监控以及可选的书面报告。
+* **Flash 模式 (`--profile flash`)**：使用历史压缩的响应式循环（单步约 3–5 秒）：单个模型观察实时屏幕、思考、执行，不经过图编排，适合常规确定性 UI 操作。默认不限步数（`agent.flash.max_turns`，0 表示不限），因为历史是被压缩而不是被截断：Flash 与 Pro 共用同一套会话记录账本（相对测试时间 `T+mm:ss`、截图折叠为视觉摘要、更早的步骤分块归档并可通过 `search_history` / `replay_steps` 按需召回），并可调用 `video_analyzer` 分析整段会话录屏；对自动消失的控制栏、toast 等瞬态控件，用 `click_sequence` 把多次点击串成一个原子序列。*局限性*：没有任务计划与笔记、没有执行前安全网、没有检查点校验与最终报告、不能执行 ADB 命令。
+* **Pro 模式 (`--profile pro`)**：包含计划和校验的执行流程（单步约 15–40 秒），由多智能体图编排：**Planner** 维护一份带里程碑和 `verify` / `assert` 检查项的 Markdown 任务计划；**Operator** 按计划执行，拥有全套工具（Explorer 元素定位，其 `flash` / `pro` / `ultra` 三档感知深度是按运行模式设置的用户配置——`config/artemis.jsonc` 里的 `pro.explorer.mode` / `flash.explorer_mode` 或 `--explorer-pro-mode`——智能体自身不会选择档位；笔记、历史召回、视频分析、ADB 诊断）。单个动作执行前都经过 **Safety Net** 校验（XML 优先、像素兜底），而一轮里的多个动作则作为**快速动作序列 (fast-action burst)** 连发，赶在瞬态控件消失前完成操作。动作被拦截或失败时会打开一条**执行事故 (execution incident)**，持续留在 Operator 的上下文里直到后续动作执行成功，恢复由 Operator 自己完成，不再有独立的修复智能体。只读的 **Checker** 校验计划中的检查点，并在退出前对照原始目标做终审（`--verification-level`：`off` / `final`（默认）/ `checkpoints` / `strict`），计划里程碑的改动会得到建议式复核。支持 100+ 步的长程复杂业务流、`[Loop:continuous]` 持续监控以及可选的书面报告。
 
 ## 路线图
 
diff --git a/apps/showcase_ui/src/app/components/agent-stream/agent-stream.component.html b/apps/showcase_ui/src/app/components/agent-stream/agent-stream.component.html
index cde5cfc..cca9489 100644
--- a/apps/showcase_ui/src/app/components/agent-stream/agent-stream.component.html
+++ b/apps/showcase_ui/src/app/components/agent-stream/agent-stream.component.html
@@ -1070,13 +1070,14 @@ limitations under the License.
                                 <!-- Generic Tool Calls (Text format for note tools, video analyzer, and other sub-agents) -->
                                 @if (shouldShowTool(item.data, block.data) && !isDeviceActionTool(item.data)) {
                                   <div class="step-generic-tool"
-                                    [class.is-running]="isItemRunning(item, block)"
+                                    [class.is-running]="isToolLineRunning(item, block)"
                                     [class.is-note-tool]="isNoteTool(item.data)"
                                     [class.is-video-tool]="isVideoTool(item.data)"
                                     [class.is-video-attention]="isVideoTool(item.data) && isVideoAnalysisAttention(item.data)"
+                                    [attr.title]="getCompressionPhaseTitle(item.data)"
                                     >
                                     <div class="tool-call-label">
-                                      <span class="stream-status-dot" [class.streaming]="isItemRunning(item, block)"></span>
+                                      <span class="stream-status-dot" [class.streaming]="isToolLineRunning(item, block)"></span>
                                       <div class="tool-call-text">
                                         <span>{{ isVideoTool(item.data) ? getVideoAnalysisLabel(item.data) : getToolDisplayLabel(item.data) }}{{ ((isNoteTool(item.data) && getToolKey(item.data)) || isVideoTool(item.data)) ? ':' : '' }}</span>
                                         <!-- Note Tool Pill -->
diff --git a/apps/showcase_ui/src/app/components/agent-stream/agent-stream.component.ts b/apps/showcase_ui/src/app/components/agent-stream/agent-stream.component.ts
index 9a63e6a..5601311 100644
--- a/apps/showcase_ui/src/app/components/agent-stream/agent-stream.component.ts
+++ b/apps/showcase_ui/src/app/components/agent-stream/agent-stream.component.ts
@@ -172,6 +172,9 @@ import {
   getUniqueGenericTools,
   getToolKey,
   getToolDisplayLabel,
+  isCompressionTool,
+  isCompressionWaiting,
+  getCompressionPhaseLabel,
   getToolIcon,
   getToolTitle,
   getToolTargetText,
@@ -1465,6 +1468,20 @@ export class AgentStreamComponent implements AfterViewInit {
     return getToolDisplayLabel(tool, this.isFirstSaveNoteForKey(tool));
   }
 
+  /** Short plain-language phase for a compress_history line (hover title). */
+  public getCompressionPhaseTitle(tool: any): string | null {
+    return isCompressionTool(tool) ? getCompressionPhaseLabel(tool) : null;
+  }
+
+  /**
+   * A generic tool line pulses only while work is in flight. A compression
+   * whose summary is ready but held back by the context gate is waiting, not
+   * running, even though its trace status is still `running`.
+   */
+  public isToolLineRunning(item: any, block: any): boolean {
+    return this.isItemRunning(item, block) && !isCompressionWaiting(item?.data);
+  }
+
   public isNoteTool(tool: any): boolean {
     return isNoteTool(tool);
   }
diff --git a/apps/showcase_ui/src/app/pages/home/home.component.html b/apps/showcase_ui/src/app/pages/home/home.component.html
index e2c6819..060a01d 100644
--- a/apps/showcase_ui/src/app/pages/home/home.component.html
+++ b/apps/showcase_ui/src/app/pages/home/home.component.html
@@ -29,7 +29,7 @@
   <!-- Main Content Layout -->
   <main class="home-content">
     
-    <!-- Hero Intent Section (Modern Linear / Claude Style) -->
+    <!-- Task entry section -->
     <section class="hero-section">
       <h1 class="hero-title">
         What would you like to do on your phone?
@@ -1718,7 +1718,7 @@
           </div>
         }
 
-        <!-- Unified Intelligent Composer Surface (Apple / Linear / Claude Grade) -->
+        <!-- Task composer -->
         <div class="composer-card" [class.is-pro-active]="selectedProfile() === 'pro'">
           
           <!-- Smart Intent Recommendation Strip (if detected) -->
@@ -1737,7 +1737,7 @@
             </div>
           }
 
-          <!-- Borderless Seamless Textarea Input Area -->
+          <!-- Borderless task input -->
           <div class="composer-input-area">
             <textarea
               id="task-input-field"
@@ -1768,7 +1768,7 @@
                 <p class="desc-line">
                   <span class="mode-name">Pro</span>
                   <span class="bullet">·</span>
-                  <span>Our most powerful mode. Plans first, checks its own results and recovers when a tap is blocked. Handles <strong>100+ step</strong> workflows and live phone monitoring (<strong>15–40s</strong> / step).</span>
+                  <span>Plans first, checks its results and recovers when a tap is blocked. Handles <strong>100+ step</strong> workflows and live phone monitoring (<strong>15–40s</strong> / step).</span>
                 </p>
               }
             </div>
diff --git a/apps/showcase_ui/src/app/pages/home/home.component.scss b/apps/showcase_ui/src/app/pages/home/home.component.scss
index dbfde67..c1a5e68 100644
--- a/apps/showcase_ui/src/app/pages/home/home.component.scss
+++ b/apps/showcase_ui/src/app/pages/home/home.component.scss
@@ -353,7 +353,7 @@ $text-light: #94a3b8;
     flex-direction: column;
     gap: 18px;
 
-    /* Hero Section (Modern Linear / Claude Style) */
+    /* Hero section */
     .hero-section {
       text-align: center;
       padding: 16px 0 6px;
@@ -3819,7 +3819,7 @@ $text-light: #94a3b8;
         }
       }
 
-      /* Unified Sculptured Composer (Linear / Claude / ChatGPT Grade) */
+      /* Task composer */
       .composer-card {
         background: rgba(255, 255, 255, 0.88);
         backdrop-filter: blur(16px) saturate(190%);
diff --git a/apps/showcase_ui/src/app/utils/tool-formatter.util.spec.ts b/apps/showcase_ui/src/app/utils/tool-formatter.util.spec.ts
index aeda673..2c5d92f 100644
--- a/apps/showcase_ui/src/app/utils/tool-formatter.util.spec.ts
+++ b/apps/showcase_ui/src/app/utils/tool-formatter.util.spec.ts
@@ -2,6 +2,9 @@ import {
   cleanErrorMessage,
   extractToolExtraParams,
   getCompressionLabel,
+  getCompressionPhase,
+  getCompressionPhaseLabel,
+  isCompressionWaiting,
   getToolDisplayLabel,
   getToolIcon,
   getToolTargetText,
@@ -35,6 +38,22 @@ describe('compress_history timeline line', () => {
       .toBe('Condensing step 5 into a short memory to free up room…');
   });
 
+  it('says the summary is ready but held while working memory is still small', () => {
+    const held = trace('running', {
+      start_step: 1,
+      end_step: 4,
+      note: 'held',
+      context_tokens: 20000,
+      context_budget: 80000,
+      swap_at_tokens: 28000
+    });
+    expect(getCompressionLabel(held)).toBe(
+      'Short memory for steps 1–4 is ready; keeping the full record until working memory fills up · ≈ 20k of 28k tokens'
+    );
+    expect(getCompressionLabel(trace('running', { start_step: 1, end_step: 4, note: 'held' })))
+      .toBe('Short memory for steps 1–4 is ready; keeping the full record until working memory fills up');
+  });
+
   it('reports the size reduction and the working memory once done', () => {
     const done = trace('success', {
       start_step: 12,
@@ -54,13 +73,53 @@ describe('compress_history timeline line', () => {
     expect(getCompressionLabel(done)).toBe('Steps 1–4 condensed into a short memory · 3k → 1.5k tokens (2× smaller)');
   });
 
-  it('explains a forced snapshot and a failed attempt in plain words', () => {
+  it('explains a forced recap and a failed attempt in plain words', () => {
     const forced = trace('success', { start_step: 1, end_step: 4, forced: true, context_tokens: 70000, context_budget: 80000 });
     expect(getCompressionLabel(forced))
-      .toBe('Steps 1–4 replaced by a brief snapshot (memory was nearly full) · working memory ≈ 70k of 80k tokens');
+      .toBe('Steps 1–4 condensed into a recap to free up memory · working memory ≈ 70k of 80k tokens');
     expect(getCompressionLabel(trace('failed', { start_step: 1, end_step: 4 })))
       .toBe("Couldn't condense steps 1–4 yet; keeping the full record and retrying later");
   });
+
+  describe('phase (args.phase from the backend)', () => {
+    it('reads the declared phase and maps it to one short plain-language label', () => {
+      const cases: Array<[string, string, string]> = [
+        ['running', 'summarizing', 'Summarizing this stretch'],
+        ['running', 'ready', 'Summary ready; kept in reserve until the context fills up'],
+        ['success', 'applied', 'Replaced this stretch with its summary'],
+        ['failed', 'failed', 'Summary failed; full record kept']
+      ];
+      for (const [status, phase, label] of cases) {
+        const tool = trace(status, { start_step: 1, end_step: 4, phase });
+        expect(getCompressionPhase(tool)).toBe(phase as any);
+        expect(getCompressionPhaseLabel(tool)).toBe(label);
+      }
+    });
+
+    it('falls back to status and note on traces that carry no phase', () => {
+      expect(getCompressionPhase(trace('running', { start_step: 1, end_step: 4 }))).toBe('summarizing');
+      expect(getCompressionPhase(trace('running', { start_step: 1, end_step: 4, note: 'retrying' }))).toBe('summarizing');
+      expect(getCompressionPhase(trace('running', { start_step: 1, end_step: 4, note: 'held' }))).toBe('ready');
+      expect(getCompressionPhase(trace('success', { start_step: 1, end_step: 4 }))).toBe('applied');
+      expect(getCompressionPhase(trace('failed', { start_step: 1, end_step: 4 }))).toBe('failed');
+      expect(getCompressionPhase(trace('running', { start_step: 1, end_step: 4, phase: 'bogus' }))).toBe('summarizing');
+    });
+
+    it('drives the timeline line from the phase even without a note', () => {
+      expect(getCompressionLabel(trace('running', { start_step: 1, end_step: 4, phase: 'ready' })))
+        .toBe('Short memory for steps 1–4 is ready; keeping the full record until working memory fills up');
+      expect(getCompressionLabel(trace('running', { start_step: 1, end_step: 4, phase: 'summarizing' })))
+        .toBe('Condensing steps 1–4 into a short memory to free up room…');
+    });
+
+    it('treats a ready-but-held summary as waiting, not running', () => {
+      expect(isCompressionWaiting(trace('running', { start_step: 1, end_step: 4, phase: 'ready' }))).toBeTrue();
+      expect(isCompressionWaiting(trace('running', { start_step: 1, end_step: 4, note: 'held' }))).toBeTrue();
+      expect(isCompressionWaiting(trace('running', { start_step: 1, end_step: 4, phase: 'summarizing' }))).toBeFalse();
+      expect(isCompressionWaiting(trace('success', { start_step: 1, end_step: 4, phase: 'applied' }))).toBeFalse();
+      expect(isCompressionWaiting({ type: 'tool', name: 'save_note', status: 'running', payload: { args: { phase: 'ready' } } })).toBeFalse();
+    });
+  });
 });
 
 describe('cleanErrorMessage', () => {
diff --git a/apps/showcase_ui/src/app/utils/tool-formatter.util.ts b/apps/showcase_ui/src/app/utils/tool-formatter.util.ts
index 9642e7f..d0181c2 100644
--- a/apps/showcase_ui/src/app/utils/tool-formatter.util.ts
+++ b/apps/showcase_ui/src/app/utils/tool-formatter.util.ts
@@ -725,21 +725,31 @@ export function getCompressionLabel(tool: any): string {
     : 'earlier steps';
   const rangeCapitalized = range.charAt(0).toUpperCase() + range.slice(1);
   const status = String(tool?.status || '').toLowerCase();
+  const phase = getCompressionPhase(tool);
 
-  if (status === 'failed') {
+  if (status === 'failed' || phase === 'failed') {
     return `Couldn't condense ${range} yet; keeping the full record and retrying later`;
   }
   if (status !== 'success') {
-    return String(args.note || '').toLowerCase() === 'retrying'
-      ? `Retrying the memory summary for ${range}…`
-      : `Condensing ${range} into a short memory to free up room…`;
+    const note = String(args.note || '').toLowerCase();
+    if (note === 'retrying') return `Retrying the memory summary for ${range}…`;
+    if (note === 'held' || phase === 'ready') {
+      const swapAt = Number(args.swap_at_tokens);
+      const heldContext = Number(args.context_tokens);
+      const heldParts = [`Short memory for ${range} is ready; keeping the full record until working memory fills up`];
+      if (heldContext > 0 && swapAt > 0) {
+        heldParts.push(`≈ ${formatTokenFigure(heldContext)} of ${formatTokenFigure(swapAt)} tokens`);
+      }
+      return heldParts.join(' · ');
+    }
+    return `Condensing ${range} into a short memory to free up room…`;
   }
 
   const parts: string[] = [];
   const source = Number(args.source_tokens);
   const summary = Number(args.summary_tokens);
   if (args.forced) {
-    parts.push(`${rangeCapitalized} replaced by a brief snapshot (memory was nearly full)`);
+    parts.push(`${rangeCapitalized} condensed into a recap to free up memory`);
   } else {
     parts.push(`${rangeCapitalized} condensed into a short memory`);
     if (source > 0 && summary > 0) {
@@ -758,6 +768,57 @@ export function getCompressionLabel(tool: any): string {
   return parts.join(' · ');
 }
 
+/**
+ * Plain-language phases of one compress_history line. Mirrors
+ * COMPRESSION_PHASES in artemis/memory/chunking.py: the backend writes
+ * `args.phase`; the trace `status` (running/success/failed) is left alone.
+ */
+export type CompressionPhase = 'summarizing' | 'ready' | 'applied' | 'failed';
+
+const COMPRESSION_PHASES: readonly CompressionPhase[] = ['summarizing', 'ready', 'applied', 'failed'];
+
+export function isCompressionTool(tool: any): boolean {
+  const name = String(tool?.name || '').toLowerCase().replace(/^(_)?exec_/, '');
+  return name === 'compress_history';
+}
+
+/**
+ * Phase of a compress_history line. Prefers the backend's `args.phase`;
+ * older traces without it fall back to status + note (`held` ⇒ ready).
+ */
+export function getCompressionPhase(tool: any): CompressionPhase {
+  const args = getToolArgs(tool) || {};
+  const declared = String(args.phase || '').toLowerCase() as CompressionPhase;
+  if (COMPRESSION_PHASES.includes(declared)) return declared;
+  const status = String(tool?.status || '').toLowerCase();
+  if (status === 'failed') return 'failed';
+  if (status === 'success') return 'applied';
+  if (String(args.note || '').toLowerCase() === 'held') return 'ready';
+  return 'summarizing';
+}
+
+/** One short, non-technical label per compression phase. */
+export function getCompressionPhaseLabel(tool: any): string {
+  switch (getCompressionPhase(tool)) {
+    case 'ready':
+      return 'Summary ready; kept in reserve until the context fills up';
+    case 'applied':
+      return 'Replaced this stretch with its summary';
+    case 'failed':
+      return 'Summary failed; full record kept';
+    default:
+      return 'Summarizing this stretch';
+  }
+}
+
+/**
+ * A ready-but-held summary is waiting, not working: the card must not keep
+ * its running pulse even though the trace status is still `running`.
+ */
+export function isCompressionWaiting(tool: any): boolean {
+  return isCompressionTool(tool) && getCompressionPhase(tool) === 'ready';
+}
+
 /**
  * Get Material Symbol icon for tools
  */
diff --git a/artemis/agents/checker/checker.json b/artemis/agents/checker/checker.json
index d418a92..097ed24 100644
--- a/artemis/agents/checker/checker.json
+++ b/artemis/agents/checker/checker.json
@@ -1,9 +1,9 @@
 {
   "system": "You are a precise, evidence-driven verification expert (Checker). You audit declared check items against recorded execution evidence and issue verdicts. You never operate the device, never modify any state, and never negotiate with the executing agent — you only observe, probe read-only state where allowed, and judge.",
   "base_rules": "# Verdict Rules (always apply)\n- Quote every check item verbatim in `item_text` — never paraphrase.\n- Every verdict MUST carry concrete evidence: a specific probe output, a specific note excerpt, or a specific on-screen/screenshot observation. A `failed` verdict without concrete evidence is invalid and will be downgraded.\n- `inconclusive` means the evidence needed for a judgment was never captured or is genuinely ambiguous. When evidence was never collected, output `inconclusive` and state explicitly that the evidence is missing — do NOT output `failed` for lack of evidence.\n- Judge only what the check item declares. Do not invent additional criteria and do not relax the declared ones.",
-  "verify_semantics": "# `verify` items (completion acceptance criteria)\n- A `verify` item asks: was the anchored subgoal actually accomplished to this standard?\n- `failed` verify verdicts trigger a repair loop, so a failed verdict MUST include a `suggestion`: a concrete, actionable hint telling the executor what is missing or wrong.\n- The release decision (whether execution proceeds) is computed outside of you and is fail-open on errors; your job is only the truthful verdict value.",
-  "assert_semantics": "# `assert` items (test assertions)\n- An `assert` item is a test expectation, not an instruction. A failed assertion is a legitimate, valuable test result: record it truthfully with evidence. Nothing will (or should) try to repair it.\n- Never mark an assert `failed` merely because evidence is absent — absence of captured evidence is `inconclusive` with an explicit note that the evidence is missing.\n- `suggestion` is not needed for assert verdicts.",
+  "verify_semantics": "# `verify` items (completion acceptance criteria)\n- A `verify` item asks: was the anchored subgoal actually accomplished to this standard?\n- A `failed` verify verdict can send its milestone back for repair, so it must include a `suggestion`: a concrete, actionable hint telling the executor what is missing or wrong.\n- The release decision (whether execution proceeds) is computed outside of you and is fail-open on errors; your job is only the truthful verdict value.",
+  "assert_semantics": "# `assert` items (test assertions)\n- An `assert` item is a test expectation, not an instruction. A failed assertion is a legitimate, valuable test result: record it truthfully with evidence. Nothing will (or should) try to repair it.\n- Never mark an assert `failed` merely because evidence is absent — absence of captured evidence is `inconclusive` with an explicit note that the evidence is missing.\n- Precondition first: before judging an assert, confirm from the execution history (step replay, notes, anchor evidence) that the action(s) meant to trigger the asserted behavior were actually and correctly performed by the executor (the toggle was really tapped, the intended screen was really reached).\n- If that precondition is not established — the executor never performed the trigger, performed the wrong action, or the evidence cannot show it — output `inconclusive` and state explicitly that the precondition failed / the triggering action is not confirmed as executed. Never output `failed` here: a failed assert is attributed to the device under test, and an execution problem must not be reported as a device defect.\n- Output `failed` only when the precondition is established AND the device state, probe output, or recorded evidence still contradicts the expectation. The evidence must cite the concrete step(s) that performed the trigger plus the probe output / observation that contradicts the expectation, so the verdict reads as a device-defect diagnosis.\n- `suggestion` is not needed for assert verdicts.",
   "anchor_guide": "# Evidence anchoring (checkpoint audit)\n- You are auditing a subgoal at its completion moment. The authoritative evidence is the execution history around the anchor step (the anchor step's pre-action screenshot and the preceding step's post-action state) plus persistently probeable device state.\n- For transient expectations (toasts, dialogs, momentary states) and ordering expectations, you MUST inspect the recorded history near the anchor step — the live device has already moved on and is NOT valid evidence for them.\n- Prefer persistent state probes and recorded notes over inference from summaries.",
-  "final_guide": "# Final review (task exit audit)\n- Audit against the USER'S ORIGINAL GOAL, not merely the plan's checkboxes.\n- `@end` items: judge them using the FINAL device state provided to you.\n- `on_complete` items: cite the verdict ledger — an already-recorded PASS/FAIL from the item's checkpoint attempt is authoritative (an assert that ever failed stays failed). For items never checked, judge from the historical evidence near their subgoal's completion; if that evidence was never captured, output `inconclusive` stating the evidence is missing. NEVER re-judge an `on_complete` item from the current screen: the current screen only proves the present, not the past moment the item was declared for.\n- `unmet_subgoals`: list, verbatim, any plan subgoal marked complete whose verify criteria are demonstrably not met. Leave it empty otherwise; failed asserts alone do NOT make a subgoal unmet.",
+  "final_guide": "# Final review (task exit audit)\n- Audit against the user's original goal as amended by the user guidance received during the run (listed in the prompt), not merely the plan's checkboxes. Guidance outranks the plan and its check lines: judge a check line the guidance retired or changed by the guidance, not by its original wording.\n- `@end` items: judge them using the FINAL device state provided to you.\n- `on_complete` items: cite the verdict ledger — an already-recorded PASS/FAIL from the item's checkpoint attempt is authoritative (an assert that ever failed stays failed). For items never checked, judge from the historical evidence near their subgoal's completion; if that evidence was never captured, output `inconclusive` stating the evidence is missing. NEVER re-judge an `on_complete` item from the current screen: the current screen only proves the present, not the past moment the item was declared for.\n- `unmet_subgoals`: list, verbatim, any plan subgoal marked complete whose verify criteria are demonstrably not met. Leave it empty otherwise; failed asserts alone do NOT make a subgoal unmet.",
   "probe_guide": "# Device probes (read-only)\n- `probe_device` runs a fixed, enumerated set of read-only state probes. Prefer probing persistent state over inferring it: alarms (`alarms`), battery status (`battery`), foreground activities (`foreground`), notifications (`notifications`), a settings value (`setting` with `namespace` + `key`), a content provider query (`content` with `uri`), installed packages (`packages`), a system property (`prop` with `key`).\n- Probes outside this table do not exist; you cannot run arbitrary commands."
 }
diff --git a/artemis/agents/checker/checker.py b/artemis/agents/checker/checker.py
index fbc2a01..40a90e2 100644
--- a/artemis/agents/checker/checker.py
+++ b/artemis/agents/checker/checker.py
@@ -319,21 +319,54 @@ def build_checker_tools(
 # --- History formatting --------------------------------------------------------------
 
 
-def _format_history(ctx: ArtemisContext, limit: int = 60) -> str:
+def _load_steps(ctx: ArtemisContext) -> list[dict] | str:
+    """The agent-friendly step records, or the reason they are unavailable."""
     if not ctx.data_engine:
         return "No execution history available."
     try:
-        steps = ctx.data_engine.get_agent_friendly_steps() or []
+        return list(ctx.data_engine.get_agent_friendly_steps() or [])
     except Exception as e:
         return f"Failed to load execution history: {e}"
+
+
+def _step_offset_label(step: dict, session_start: float | None) -> str:
+    """Session-relative ``T+mm:ss`` label of a step: the clock every agent shares.
+
+    The recorded timestamp against the session start is authoritative; a
+    record that only carries the engine's ``"97.7s"`` label is converted.
+    """
+    from artemis.memory.transcript import format_session_offset
+
+    ts = step.get("timestamp")
+    if isinstance(session_start, (int, float)) and isinstance(ts, (int, float)):
+        return format_session_offset(float(ts) - float(session_start))
+    rel = str(step.get("relative_time") or "").strip()
+    if rel.startswith("T+"):
+        return rel
+    if rel.endswith("s"):
+        try:
+            return format_session_offset(float(rel[:-1]))
+        except ValueError:
+            pass
+    return "T+??:??"
+
+
+def _format_history(ctx: ArtemisContext, limit: int = 60, steps: list[dict] | None = None) -> str:
+    if steps is None:
+        steps = _load_steps(ctx)
+    if isinstance(steps, str):
+        return steps
     if not steps:
         return "No execution history available."
+    session_start = getattr(ctx.data_engine, "session_start_time", None)
     lines = []
     for s in steps[-limit:]:
         num = s.get("step_number")
-        rel = s.get("relative_time", "")
-        summary = s.get("summary") or ""
+        summary = (s.get("summary") or "").strip()
         action = s.get("action_taken")
+        if not summary and not action:
+            # Nothing to audit on this step: an empty row is only noise.
+            continue
         action_str = ""
         if action and not summary:
             # The shared renderer keeps the target's provenance visible: a
@@ -343,8 +376,25 @@ def _format_history(ctx: ArtemisContext, limit: int = 60) -> str:
                 action_str = format_actions_clean(action)[:160]
             except Exception:
                 action_str = str(action)[:160]
-        lines.append(f"- Step {num} ({rel}): {summary or action_str}".rstrip())
-    return "\n".join(lines)
+        label = _step_offset_label(s, session_start)
+        lines.append(f"- Step {num} ({label}): {summary or action_str}".rstrip())
+    return "\n".join(lines) or "No execution history available."
+
+
+def _format_user_guidance(ctx: ArtemisContext, steps: list[dict] | None = None) -> str:
+    """Every mid-run user instruction, read from the step it was stamped on."""
+    if steps is None:
+        steps = _load_steps(ctx)
+    if isinstance(steps, str) or not steps:
+        return "(none)"
+    session_start = getattr(ctx.data_engine, "session_start_time", None)
+    lines = []
+    for s in steps:
+        instruction = (s.get("extra_metadata") or {}).get("injected_instruction")
+        if isinstance(instruction, str) and instruction.strip():
+            label = _step_offset_label(s, session_start)
+            lines.append(f'- Step {s.get("step_number")} ({label}): "{instruction.strip()}"')
+    return "\n".join(lines) or "(none)"
 
 
 def _format_check_items(check_items: list) -> str:
@@ -773,14 +823,16 @@ async def run_final_check(
     )
 
     screenshot_b64, minimal_list = await _capture_final_screen(ctx)
+    steps = _load_steps(ctx)
 
     human_text = (
         f"# User's Original Goal\n{goal}\n\n"
+        f"# User guidance received during the run\n{_format_user_guidance(ctx, steps)}\n\n"
         f"# Final Task Plan\n{plan_text or '(no plan)'}\n\n"
         f"# Declared Check Items\n{_format_check_items(items)}\n\n"
         f"# Verdict Ledger (checkpoint results, authoritative for on_complete"
         f" items)\n{_format_ledger(ledger)}\n\n"
-        f"# Execution History (summaries)\n{_format_history(ctx)}\n\n"
+        f"# Execution History (summaries)\n{_format_history(ctx, steps=steps)}\n\n"
         f"# Final Screen Elements\n{minimal_list}"
     )
 
diff --git a/artemis/agents/diagnoser/diagnoser.py b/artemis/agents/diagnoser/diagnoser.py
index cbb4acf..bb62ff3 100644
--- a/artemis/agents/diagnoser/diagnoser.py
+++ b/artemis/agents/diagnoser/diagnoser.py
@@ -356,9 +356,10 @@ class Diagnoser:
         if submit_tool:
             submit_tool.invoke(args)
 
-        outcome = f"Analysis: {analysis} | Actionable Steps: "
-        for step in steps:
-            outcome += f"{step} "
+        outcome = f"Analysis: {analysis}"
+        if steps:
+            numbered = "\n".join(f"{i}. {step}" for i, step in enumerate(steps, start=1))
+            outcome += f"\nActionable steps:\n{numbered}"
         return outcome
 
     def _max_iteration_outcome(self, response, outcome: str) -> str:
diff --git a/artemis/agents/explorer/tool_declarations.py b/artemis/agents/explorer/tool_declarations.py
index 16141df..52251a9 100644
--- a/artemis/agents/explorer/tool_declarations.py
+++ b/artemis/agents/explorer/tool_declarations.py
@@ -61,7 +61,7 @@ UNIVERSAL_EXPLORER_TOOLS = [
         "function": {
             "name": "detect_objects",
             "description": (
-                "[Perception] Locates elements, shapes and more using powerful VLM."
+                "[Perception] Locates elements, shapes and more using a vision-language model."
                 " Returns their normalized coordinates (0-1000 scale) with label dots."
             ),
             "parameters": {
@@ -235,7 +235,7 @@ NATIVE_EXPLORER_TOOL_DECLARATIONS = [
     types.FunctionDeclaration(
         name="detect_objects",
         description=(
-            "[Perception] Locates elements, shapes and more using powerful"
+            "[Perception] Locates elements, shapes and more using a"
             " VLM. Returns their normalized coordinates (in a [0, 1000]"
             " scale) labeled with [D1], [D2] etc. in the text output, along"
             " with an annotated image containing corresponding visual label"
diff --git a/artemis/agents/flash/context_compressor.py b/artemis/agents/flash/context_compressor.py
index 0052de4..35b494b 100644
--- a/artemis/agents/flash/context_compressor.py
+++ b/artemis/agents/flash/context_compressor.py
@@ -14,10 +14,14 @@
 
 """Context compression shared by Flash and Pro.
 
-:class:`ScrubEdgeCompressor` strips XML at depth 1 and resolves screenshots
-at depth K, then freezes the message. A late summary never backfills a frozen
-message. FlashRunner uses this implementation; the Pro transcript ledger
-reuses it over its active region (see the class docstring).
+:class:`ScrubEdgeCompressor` maintains two edges over the observation history:
+a shallow text edge (``xml_scrub_depth``, default 1: as soon as a newer
+observation exists) where the heavy text blocks and the per-turn ephemeral
+blocks leave, and the screenshot edge at depth K where the image is resolved
+in place into its visual summary. A message past both edges is frozen; a late
+summary never backfills a frozen message. FlashRunner uses this implementation;
+the Pro transcript ledger reuses it over its active region (see the class
+docstring).
 """
 
 from typing import Any, Callable
@@ -25,6 +29,7 @@ from typing import Any, Callable
 from langchain_core.messages import BaseMessage
 
 from artemis.memory.step_memory import StepMemoryService
+from artemis.memory.transcript import EPHEMERAL_BLOCKS_KEY
 from artemis.utils.logger import get_logger
 
 logger = get_logger(__name__)
@@ -35,6 +40,15 @@ HISTORY_SUMMARY_PREFIX = "--- Historical Visual Transition ---\n"
 _HISTORY_SUMMARY_PREFIX = HISTORY_SUMMARY_PREFIX
 _UI_LIST_MARKER = "--- UI Element List ---"
 
+#: Text of the label block both observation shapes place directly above the
+#: screenshot. It only makes sense next to an image, so it leaves together
+#: with the image it labels (the visual summary carries its own header).
+SCREENSHOT_LABEL = "--- Current Screenshot ---"
+
+#: Sentinel: the screenshot stays for now (summary pending inside the grace
+#: window); the message is revisited for the image swap only.
+_KEEP_IMAGE = object()
+
 
 def _without_marked_suffix(text: str, markers: tuple[str, ...] = (_UI_LIST_MARKER,)) -> str:
     """Remove a marked heavy block without discarding text before its marker."""
@@ -49,22 +63,32 @@ def _without_marked_suffix(text: str, markers: tuple[str, ...] = (_UI_LIST_MARKE
 
 
 class ScrubEdgeCompressor:
-    """Replace older observation details with summaries near the message tail.
+    """Replace older observation details with summaries at two scrub edges.
 
-    Mutation discipline — every message is touched at most twice, always near
-    the tail, and is then frozen forever:
+    Depth 1 == the most recent image-bearing message. Messages newer than an
+    edge are byte-identical to what the model was first shown. Each message
+    is edited at most twice and is then frozen:
 
-    1. Depth 1 (XML): once a newer observation exists, historical UI Element
-       lists are stripped (same semantics as the legacy ``prune_history_xml``).
-    2. Depth K (image, ``image_scrub_depth``): the K-th most recent
-       image-bearing message has its screenshot resolved — replaced by the
-       ready visual summary; if the summary is still pending the image is
-       retained for up to ``pending_grace_steps`` further image-depths, after
-       which it is replaced by a pending placeholder. A failed summary is
-       replaced by an unavailable placeholder immediately. Both placeholders
-       carry the DataEngine step reference.
-    3. Frozen: after resolution the message is never read or written again —
-       a late summary never backfills a frozen message.
+    1. Text edge (depth > ``xml_scrub_depth``, default 1, i.e. as soon as a
+       newer observation exists), one pass, exactly once per message: the
+       heavy blocks behind ``strip_markers`` (the UI element list; for Pro
+       also the plan recitation) are cut at their marker with the text before
+       the marker kept, and every content block whose index is listed under
+       :data:`~artemis.memory.transcript.EPHEMERAL_BLOCKS_KEY` in the
+       message's ``additional_kwargs`` (reminders, hints, per-turn notices)
+       is removed. Only the live observation therefore ever carries an
+       indexed element list: a stale ``[n]`` index from an older screen can
+       never be picked up as a target.
+    2. Screenshot edge (depth >= ``image_scrub_depth``), IN PLACE: the ready
+       visual summary block takes the image block's position and the
+       :data:`SCREENSHOT_LABEL` block above it is removed. A failed summary
+       becomes an unavailable placeholder immediately; a summary still
+       pending keeps the image (and its label) for up to
+       ``pending_grace_steps`` further depths, after which a pending
+       placeholder replaces it. Both placeholders carry the DataEngine step
+       reference. An image with no summary job at all is dropped silently.
+    3. Frozen: after the image is resolved the message is never read or
+       written again; a late summary never backfills a frozen message.
 
     Contract: the message list is append-only (FlashRunner never removes or
     reorders entries), so bookkeeping is index-based and each pass only
@@ -72,15 +96,14 @@ class ScrubEdgeCompressor:
     whole history.
 
     The Pro transcript ledger uses this discipline over its active region.
-    Its observation messages carry no
-    ``tool_call_id``, so ``summary_key_getter`` supplies the summary-job key
-    (the DataEngine step id) per message; ``strip_markers`` extends the
-    depth-1 strip to the Pro tail blocks (UI element list + plan recitation);
-    and ``tail_offset=1`` accounts for the live observation living outside
-    the tracked list (the ledger renders it as a separate tail), so depth
-    arithmetic and the keep-window stay aligned with the Flash semantics
-    where the live observation is *inside* the list. Defaults leave the
-    Flash behavior byte-identical.
+    Its observation messages carry no ``tool_call_id``, so
+    ``summary_key_getter`` supplies the summary-job key (the DataEngine step
+    id) per message; ``strip_markers`` extends the strip to the Pro tail
+    blocks (UI element list + plan recitation); and ``tail_offset=1``
+    accounts for the live observation living outside the tracked list (the
+    ledger renders it as a separate tail), so depth arithmetic stays aligned
+    with the Flash semantics where the live observation is *inside* the
+    list.
     """
 
     def __init__(
@@ -90,7 +113,7 @@ class ScrubEdgeCompressor:
         prune_history_xml: bool = True,
         image_scrub_depth: int = 3,
         pending_grace_steps: int = 3,
-        xml_scrub_depth: int = 1,
+        xml_scrub_depth: int | None = 1,
         summary_key_getter: Callable[[BaseMessage], str | None] | None = None,
         strip_markers: tuple[str, ...] = (_UI_LIST_MARKER,),
         tail_offset: int = 0,
@@ -99,7 +122,9 @@ class ScrubEdgeCompressor:
         self._prune_history_xml = prune_history_xml
         self._image_scrub_depth = max(1, image_scrub_depth)
         self._pending_grace_steps = max(0, pending_grace_steps)
-        self._xml_scrub_depth = max(1, xml_scrub_depth)
+        # Text edge: the heavy text blocks and ephemeral blocks leave once a
+        # message is deeper than this (None keeps the default of 1).
+        self._xml_scrub_depth = max(1, int(xml_scrub_depth)) if xml_scrub_depth is not None else 1
         self._summary_key_getter = summary_key_getter
         self._strip_markers = tuple(strip_markers) or (_UI_LIST_MARKER,)
         self._tail_offset = max(0, tail_offset)
@@ -110,15 +135,28 @@ class ScrubEdgeCompressor:
         # {"idx", "key" (str tool_call_id | None), "legacy" (ordinal | None), "is_tool"}
         self._tracked: list[dict[str, Any]] = []
         self._frozen: set[int] = set()
+        # Messages whose one-time text edits (strip + ephemeral deletion) are
+        # done; a message inside the pending-grace window sits here unfrozen.
+        self._text_scrubbed: set[int] = set()
+        # Strip-marker carriers without an image (e.g. a step whose screenshot
+        # failed); they are stripped when the edge passes their position.
         self._xml_candidates: list[int] = []
 
-    def compress(self, messages: list[BaseMessage]) -> None:
-        """Advance the scrub edge over newly appended messages in-place."""
+    def compress(
+        self, messages: list[BaseMessage], *, image_scrub_depth: int | None = None
+    ) -> None:
+        """Advance the scrub edge over newly appended messages in-place.
+
+        ``image_scrub_depth`` overrides the constructor depth for this pass
+        (the transcript ledger passes its occupancy-driven depth). Because a
+        scrubbed message is frozen, a deeper pass after a shallower one never
+        backfills anything: relaxing the depth only lets *new* images live
+        longer, tightening it scrubs the extra depths once.
+        """
         self._discover(messages)
-        if not self._tracked:
+        if not self._tracked and not self._xml_candidates:
             return
-        self._scrub_xml(messages)
-        self._scrub_images(messages)
+        self._scrub_edge(messages, image_scrub_depth)
 
     # ------------------------------------------------------------------
     # Discovery (incremental; frozen prefix is never rescanned)
@@ -144,8 +182,6 @@ class ScrubEdgeCompressor:
                 elif block.get("type") == "text" and self._has_strip_marker(block.get("text", "")):
                     has_xml = True
 
-            if has_xml:
-                self._xml_candidates.append(idx)
             if has_image:
                 key = str(tool_call_id) if tool_call_id is not None else None
                 if key is None and self._summary_key_getter is not None:
@@ -163,62 +199,24 @@ class ScrubEdgeCompressor:
                         "is_tool": tool_call_id is not None,
                     }
                 )
+            elif has_xml:
+                self._xml_candidates.append(idx)
         self._scanned_until = len(messages)
 
     def _has_strip_marker(self, text: str) -> bool:
         return any(marker in text for marker in self._strip_markers)
 
     # ------------------------------------------------------------------
-    # Depth-1 XML scrub
+    # The edges: text strip + ephemeral deletion (shallow), image swap (K)
     # ------------------------------------------------------------------
 
-    def _scrub_xml(self, messages: list[BaseMessage]) -> None:
-        if not self._prune_history_xml:
-            return
-        # Keep the UI list only in the newest xml_scrub_depth observation
-        # messages; everything older (or non-image XML carriers) is stripped.
-        # With a live tail outside the tracked list (tail_offset > 0) the tail
-        # itself occupies the newest slots of the keep window.
-        keep_count = max(0, self._xml_scrub_depth - self._tail_offset)
-        keep_indices = {rec["idx"] for rec in self._tracked[-keep_count:]} if keep_count else set()
-        still_pending: list[int] = []
-        for idx in self._xml_candidates:
-            if idx in keep_indices:
-                still_pending.append(idx)
-                continue
-            if idx in self._frozen:
-                continue
-            self._strip_xml_blocks(messages[idx])
-        self._xml_candidates = still_pending
-
-    def _strip_xml_blocks(self, msg: BaseMessage) -> None:
-        content = getattr(msg, "content", None)
-        if not isinstance(content, list):
-            return
-        new_blocks: list[Any] = []
-        for block in content:
-            if (
-                isinstance(block, dict)
-                and block.get("type") == "text"
-                and self._has_strip_marker(block.get("text", ""))
-            ):
-                retained_text = _without_marked_suffix(block.get("text", ""), self._strip_markers)
-                if retained_text:
-                    retained_block = dict(block)
-                    retained_block["text"] = retained_text
-                    new_blocks.append(retained_block)
-                continue
-            new_blocks.append(block)
-        msg.content = new_blocks
-
-    # ------------------------------------------------------------------
-    # Depth-K image scrub
-    # ------------------------------------------------------------------
-
-    def _scrub_images(self, messages: list[BaseMessage]) -> None:
+    def _scrub_edge(
+        self, messages: list[BaseMessage], image_scrub_depth: int | None = None
+    ) -> None:
         total = len(self._tracked)
-        scrub_depth = self._image_scrub_depth
+        scrub_depth = max(1, int(image_scrub_depth or self._image_scrub_depth))
         grace_limit = scrub_depth + self._pending_grace_steps
+        text_depth = self._xml_scrub_depth
 
         for pos, rec in enumerate(self._tracked):
             if rec["idx"] in self._frozen:
@@ -226,12 +224,25 @@ class ScrubEdgeCompressor:
             # 1 == most recent image-bearing message; a live tail outside the
             # tracked list (tail_offset > 0) counts as the newest depths.
             depth = total - pos + self._tail_offset
-            if depth < scrub_depth:
-                continue  # active window
             if self._tail_offset == 0 and pos == total - 1:
                 continue  # the live observation is never scrubbed
+            past_text_edge = depth > text_depth
+            past_image_edge = depth >= scrub_depth
+            if not past_text_edge and not past_image_edge:
+                continue  # newer than both edges: byte-identical
+            if not past_image_edge:
+                # Past the text edge only: strip once, keep the screenshot.
+                if rec["idx"] not in self._text_scrubbed:
+                    self._rewrite(
+                        messages[rec["idx"]],
+                        rec["idx"],
+                        replacement=_KEEP_IMAGE,
+                        is_tool=rec["is_tool"],
+                    )
+                continue
 
             summary, pending, failed, step_no = self._lookup(rec)
+            replacement: Any
             if summary is not None:
                 replacement = {
                     "type": "text",
@@ -243,7 +254,7 @@ class ScrubEdgeCompressor:
                     "text": f"[visual summary unavailable; evidence at DataEngine step {step_no}]",
                 }
             elif pending and depth <= grace_limit:
-                continue  # grace period: retain the image, revisit next pass
+                replacement = _KEEP_IMAGE  # grace: text edits now, image swap later
             elif pending:
                 replacement = {
                     "type": "text",
@@ -252,7 +263,26 @@ class ScrubEdgeCompressor:
             else:
                 replacement = None  # no summary job exists; drop the image silently
 
-            self._resolve(messages, rec, replacement)
+            self._resolve(messages, rec, replacement, text_edits=past_text_edge)
+
+        if self._xml_candidates:
+            # Imageless strip-marker carriers (a step whose screenshot failed)
+            # follow the same text edge, counted over every observation —
+            # image-bearing or not — plus the live tail: with the default
+            # depth 1 the list leaves as soon as any newer observation exists,
+            # so only the live observation ever carries an indexed element
+            # list. A carrier that is itself the newest observation stays.
+            observations = sorted({rec["idx"] for rec in self._tracked} | set(self._xml_candidates))
+            remaining: list[int] = []
+            for idx in self._xml_candidates:
+                newer = sum(1 for other in observations if other > idx) + self._tail_offset
+                if newer < text_depth:
+                    remaining.append(idx)
+                    continue
+                if idx not in self._frozen:
+                    self._rewrite(messages[idx], idx, replacement=None, is_tool=False)
+                    self._frozen.add(idx)
+            self._xml_candidates = remaining
 
     def _lookup(self, rec: dict[str, Any]) -> tuple[str | None, bool, bool, int | None]:
         """Mirror the legacy keying: tool_call_id first, ordinal fallback."""
@@ -280,42 +310,143 @@ class ScrubEdgeCompressor:
         self,
         messages: list[BaseMessage],
         rec: dict[str, Any],
-        replacement: dict[str, Any] | None,
+        replacement: Any,
+        *,
+        text_edits: bool = True,
     ) -> None:
-        """Replace the message's image blocks and freeze it permanently."""
-        msg = messages[rec["idx"]]
-        content = getattr(msg, "content", None)
-        new_blocks: list[Any] = []
-        if isinstance(content, list):
-            for block in content:
-                if isinstance(block, dict) and block.get("type") in ("image_url", "image"):
-                    continue
-                if (
-                    self._prune_history_xml
-                    and isinstance(block, dict)
-                    and block.get("type") == "text"
-                    and self._has_strip_marker(block.get("text", ""))
-                ):
-                    # Freezing implies fully scrubbed: no stale UI list survives
-                    # even when xml_scrub_depth exceeds the image depth.
-                    retained_text = _without_marked_suffix(
-                        block.get("text", ""), self._strip_markers
-                    )
-                    if retained_text:
-                        retained_block = dict(block)
-                        retained_block["text"] = retained_text
-                        new_blocks.append(retained_block)
-                    continue
-                new_blocks.append(block)
+        """Rewrite one image-bearing message at the screenshot edge; freeze it
+        unless the screenshot is kept for the pending-grace window. With a text
+        edge deeper than the screenshot edge the text edits wait for their own
+        edge (``text_edits=False``); the message is then frozen only once both
+        have happened."""
+        idx = rec["idx"]
+        self._rewrite(
+            messages[idx],
+            idx,
+            replacement=replacement,
+            is_tool=rec["is_tool"],
+            text_edits=text_edits,
+        )
+        if not text_edits:
+            return  # text edge still ahead: revisit for the strip
+        if replacement is not _KEEP_IMAGE:
+            self._frozen.add(idx)
 
-        if replacement is not None:
-            new_blocks.append(replacement)
+    def _rewrite(
+        self,
+        msg: BaseMessage,
+        idx: int,
+        *,
+        replacement: Any,
+        is_tool: bool,
+        text_edits: bool = True,
+    ) -> None:
+        """The single-pass edit of one message (see the class docstring).
+
+        ``replacement`` is the block that takes the first image's place (a
+        summary or placeholder), ``None`` to drop the image, or
+        :data:`_KEEP_IMAGE` to leave the image and its label in place. The
+        text edits (strip + ephemeral deletion) run only the first time the
+        message is rewritten and consume the ephemeral indices exactly once.
+        Any rewrite that happens *before* that first edit (the image swap when
+        the screenshot edge is shallower than the text edge, or a summary
+        arriving inside the grace window) can remove the label and the image
+        and so shift every later block; the surviving ephemeral indices are
+        then remapped to the new layout in ``additional_kwargs`` so the later
+        text edit still deletes the blocks that were marked, never a
+        neighbour that slid into their old position.
+        """
+        content = getattr(msg, "content", None)
+        if not isinstance(content, list):
+            self._text_scrubbed.add(idx)
+            return
+
+        first_edit = idx not in self._text_scrubbed and text_edits
+        ephemeral: set[int] = set()
+        if first_edit:
+            ephemeral = self._ephemeral_indices(msg)
+        keep_image = replacement is _KEEP_IMAGE
+
+        new_blocks: list[Any] = []
+        # old position -> new position of every block that survives as itself
+        # (a replacement block takes the image's slot but is not the image).
+        position_map: dict[int, int] = {}
+        image_placed = False
+        for position, block in enumerate(content):
+            if position in ephemeral:
+                continue
+            if isinstance(block, dict):
+                kind = block.get("type")
+                if kind in ("image_url", "image"):
+                    if keep_image:
+                        position_map[position] = len(new_blocks)
+                        new_blocks.append(block)
+                    elif replacement is not None and not image_placed:
+                        new_blocks.append(replacement)  # in place of the image
+                        image_placed = True
+                    continue
+                if kind == "text":
+                    text = block.get("text", "")
+                    if not keep_image and text.strip() == SCREENSHOT_LABEL:
+                        continue  # the label leaves with the image it labelled
+                    if first_edit and self._prune_history_xml and self._has_strip_marker(text):
+                        retained_text = _without_marked_suffix(text, self._strip_markers)
+                        if retained_text:
+                            retained_block = dict(block)
+                            retained_block["text"] = retained_text
+                            position_map[position] = len(new_blocks)
+                            new_blocks.append(retained_block)
+                        continue
+            position_map[position] = len(new_blocks)
+            new_blocks.append(block)
 
         # Defensive fallback: never leave ToolMessage or HumanMessage content empty
         if not new_blocks:
-            new_blocks = [{"type": "text", "text": "Action dispatched." if rec["is_tool"] else ""}]
+            new_blocks = [{"type": "text", "text": "Action dispatched." if is_tool else ""}]
+            position_map = {}
 
         msg.content = new_blocks
-        self._frozen.add(rec["idx"])
-        if rec["idx"] in self._xml_candidates:
-            self._xml_candidates.remove(rec["idx"])
+        if first_edit:
+            self._text_scrubbed.add(idx)
+            if ephemeral:
+                # Consumed: the indices no longer describe the block layout.
+                msg.additional_kwargs.pop(EPHEMERAL_BLOCKS_KEY, None)
+        else:
+            self._remap_ephemeral(msg, position_map)
+
+    @staticmethod
+    def _remap_ephemeral(msg: BaseMessage, position_map: dict[int, int]) -> None:
+        """Rewrite the not-yet-consumed ephemeral indices of ``msg`` through
+        ``position_map`` (old block position -> new block position); indices of
+        blocks that did not survive are dropped and the key is removed when
+        nothing survives. Only ``additional_kwargs`` is touched, the content
+        blocks sent to the provider stay exactly as assembled."""
+        kwargs = getattr(msg, "additional_kwargs", None)
+        if not isinstance(kwargs, dict) or EPHEMERAL_BLOCKS_KEY not in kwargs:
+            return
+        remapped: list[int] = []
+        for value in kwargs.get(EPHEMERAL_BLOCKS_KEY) or []:
+            try:
+                old_position = int(value)
+            except (TypeError, ValueError):
+                continue
+            new_position = position_map.get(old_position)
+            if new_position is not None and new_position not in remapped:
+                remapped.append(new_position)
+        if remapped:
+            kwargs[EPHEMERAL_BLOCKS_KEY] = remapped
+        else:
+            kwargs.pop(EPHEMERAL_BLOCKS_KEY, None)
+
+    @staticmethod
+    def _ephemeral_indices(msg: BaseMessage) -> set[int]:
+        kwargs = getattr(msg, "additional_kwargs", None)
+        if not isinstance(kwargs, dict):
+            return set()
+        indices: set[int] = set()
+        for value in kwargs.get(EPHEMERAL_BLOCKS_KEY) or []:
+            try:
+                indices.add(int(value))
+            except (TypeError, ValueError):
+                continue
+        return indices
diff --git a/artemis/agents/flash/flash_runner.md b/artemis/agents/flash/flash_runner.md
index 3947377..3c21cf8 100644
--- a/artemis/agents/flash/flash_runner.md
+++ b/artemis/agents/flash/flash_runner.md
@@ -6,9 +6,9 @@ You are an autonomous and highly efficient Android Device Execution Agent. Your
 ---
 
 # 1. COGNITIVE PROTOCOL
-You operate in a dynamic observation-reasoning-execution loop. **CRITICAL RULE: YOU MUST NEVER INVOKE A TOOL SILENTLY!** In every single turn, you **MUST FIRST output a natural language reasoning paragraph BEFORE generating any tool call.**
+In every turn, think through observation, planning and action in that order. Before calling an action tool or `report_task_status` (the Turn-Ending Action), your reply carries one short paragraph of connected prose reflecting those three phases; that written text is kept in the execution history and shown to the user.
 
-- **Turn 1 Only (Initial Planning)**: Briefly decompose the overall `{{ goal }}` into high-level visual **Milestones** in your text output. Do not repeat this macro breakdown in subsequent turns.
+- **Turn 1 Only (Initial Planning)**: Briefly decompose the objective into high-level visual **Milestones** in your text output. Do not repeat this macro breakdown in subsequent turns.
 
 ---
 
@@ -23,7 +23,7 @@ Keep in mind that the mobile device is an asynchronous, constantly evolving envi
 ---
 
 # 3. READING YOUR HISTORY & THE SESSION CLOCK
-- **Conversation = execution history**: The earlier turns of this conversation are your raw execution history. Each observation opens with `# CURRENT OBSERVATION [T+mm:ss]`, and each turn that executed a device action ends with an `--- Action Execution Result (T+mm:ss) ---` message (`Status: dispatched` means the device accepted the action; whether it had the intended effect is yours to judge from the observation that follows. `Status: failed` carries the `Error:` line). Every timestamp is a session-relative `T+mm:ss` offset from the start of this session; it is the only clock you have, for pacing waits as well as for reasoning about elapsed time.
+- **Conversation = execution history**: The earlier turns of this conversation are your raw execution history. Each observation opens with `# CURRENT OBSERVATION [T+mm:ss]`. Every device action runs immediately and its tool result states what the device did (e.g. `Swiped up.`); whether it had the intended effect is yours to judge from the observation that follows. Only a turn whose action failed ends with an `--- Action Execution Result (T+mm:ss) ---` message (`Status: failed` with the `Error:` line). Every timestamp is a session-relative `T+mm:ss` offset from the start of this session; it is the only clock you have, for pacing waits as well as for reasoning about elapsed time.
 - **Compression**: Screenshots older than a few turns are replaced by short `--- Historical Visual Transition ---` summaries and old `--- Visible UI Elements ---` lists are dropped. Long spans render as `[Era N | Steps a–b | T+.. → T+..]` blocks (a merged synopsis, segment titles, and a per-step action ledger). Because of this, if you spot critical text that you will need later (e.g., verification codes, specific titles, search lists), **you must explicitly verbalize and write those details into your text reasoning** so they persist across turns.
 {% if "search_history" in available_tools %}- **History Lookup (`search_history`)**: Compressed history keeps the step numbers and `T+` offsets but not every detail. When you need exactly what you did or saw at an earlier step (a value you read, the result of an action, which screen you were on), call `search_history` with keywords and/or the `[start, end]` step range shown in a chunk block; it searches the full stored history (screen descriptions, actions, results, reasoning, tool calls, notes, on-screen text) and every hit carries its step number. It is a pre-decision helper: read its answer, then act.{% endif %}
 {% if "replay_steps" in available_tools %}- **Step Replay (`replay_steps`)**: Replays one earlier step (or a short range) exactly as your context showed it — screen description, reasoning, tool calls with their results, the action and its execution result. Use the step numbers shown in the compressed history{% if "search_history" in available_tools %} or returned by `search_history`{% endif %}.{% endif %}
@@ -39,12 +39,13 @@ Keep in mind that the mobile device is an asynchronous, constantly evolving envi
 ---
 
 # 5. ACTION RULES
-1. **Normalized Coordinates (`0-1000` Scale)**: Always use normalized `[x, y]` coordinates in `0-1000` scale for any location-based target (e.g., `target=[500, 600]` or `click_sequence=[[300, 400], [500, 600]]`). Every coordinate target must carry `target_description` (one entry per point for `click_sequence`): a short, meaningful name for what you are aiming at, as a user would call it (e.g. 'play button', 'video body'), never a generic 'element' or 'button'. Nothing is inferred on your behalf: it is recorded as your own statement, and your history shows it marked as self-described.
-2. **Do not determine element coordinates based on guesswork.** If the element is visible in the screenshot but its coordinates are missing from the provided `--- Visible UI Elements ---` list, please use the `ask_explorer` tool to locate the element first.
-{% if "manage_app" in available_tools %}3. **App Launching**: To start or reset an application, always use `manage_app(action="launch", app_name="...")` or `action="stop"`. Do not manually swipe across home screens.{% endif %}
+1. **Prefer the element index.** The `--- Visible UI Elements ---` list numbers every element it found (`[3] Text: 'Wi-Fi' | Bounds: ...`). When your target is listed, address it by that index (`target=3`, a bare integer) with `click`, `long_press` or `input_text`: the tap lands on the element's center and the element's own text and bounds are recorded with the action. Heed the overlap warnings in the list; an overlapped element may not receive the tap. Indices belong to the screen they were listed on: swiping, scrolling or a page update renumbers them, so only ever use an index from the list in the current observation, never one remembered from an earlier turn. Within one turn, every index you call (even after an earlier action in the same turn) refers to the list in the current observation, not to the screen your earlier action produced.
+2. **Normalized Coordinates (`0-1000` Scale) otherwise.** When the target is visible but not listed, use normalized `[x, y]` coordinates in `0-1000` scale (e.g., `target=[500, 600]`; `click_sequence` always takes coordinate pairs, e.g. `sequence=[[300, 400], [500, 600]]`). Every coordinate target must carry `target_description` (one entry per point for `click_sequence`): a short, meaningful name for what you are aiming at, as a user would call it (e.g. 'play button', 'video body'), never a generic 'element' or 'button'. Nothing is inferred on your behalf: it is recorded as your own statement, and your history shows it marked as self-described.
+3. **Do not determine element coordinates based on guesswork.** If the element is visible in the screenshot but neither listed nor safely locatable from the screenshot, use the `ask_explorer` tool to locate it first; its candidates join the element list and can be addressed by index or by coordinate.
+{% if "manage_app" in available_tools %}4. **App Launching**: To start or reset an application, always use `manage_app(action="launch", app_name="...")` or `action="stop"`. Do not manually swipe across home screens.{% endif %}
 
 ---
 
 # 6. TERMINATION PROTOCOL (`report_task_status`)
-- **Completion (`status="completed"`)**: ONLY call `report_task_status(status="completed", ...)` after you have **visually verified** from the latest screen that the user's objective (`{{ goal }}`) is fully achieved.
+- **Completion (`status="completed"`)**: ONLY call `report_task_status(status="completed", ...)` after you have **visually verified** from the latest screen that the objective is fully achieved.
 - **Failure (`status="failed"`)**: If the task is genuinely impossible due to paywalls, unrecoverable crashes, or hitting an absolute dead end after sensible fallbacks, call `report_task_status(status="failed", ...)` with the exact blocking reason.
diff --git a/artemis/agents/flash/runner.py b/artemis/agents/flash/runner.py
index a6e23ae..936f606 100644
--- a/artemis/agents/flash/runner.py
+++ b/artemis/agents/flash/runner.py
@@ -22,10 +22,19 @@ the prompt is built every turn from a session :class:`TranscriptLedger` —
 a byte-stable system prefix, the committed earlier turns (append-only; old UI
 lists stripped at depth 1, screenshots resolved to visual summaries at depth
 K, long spans chunk-compressed), and a fresh tail carrying the current
-observation under a ``# CURRENT OBSERVATION [T+mm:ss]`` header. Each
-committed turn ends with an ``--- Action Execution Result (T+mm:ss) ---``
-message, so every timestamp the model sees is a session-relative offset — the
-same clock the video analyzer uses for the session recording.
+observation under a ``# CURRENT OBSERVATION [T+mm:ss]`` header. Actions run
+synchronously and their tool messages already carry the outcome; only a turn
+whose action failed ends with an ``--- Action Execution Result (T+mm:ss) ---``
+message (it carries the error). Every timestamp the model sees is a
+session-relative offset — the same clock the video analyzer uses for the
+session recording.
+
+Per-turn notices on the tail (the reasoning reminder after a silent turn, the
+no-tool-call nudge, the final-turn warning, the user-guidance wrapper) are
+marked ephemeral: the ledger's scrub edge deletes them once the message leaves
+the recent window, so they never reach the frozen history or a chunk capsule.
+The verbatim body of a user instruction is the exception: it stays in the
+active window until its turn is chunked, whose user lines then carry it on.
 """
 
 import asyncio
@@ -45,9 +54,12 @@ from langchain_core.messages import (
 )
 
 from artemis.agents.flash.summarizer import VisualStepSummarizer, build_focus_context
+from artemis.agents.operator.prompts import REASONING_REMINDER, UserGuidance, render_user_guidance
 from artemis.agents.validator.tool_declarations import (
     ASK_EXPLORER_TOOL,
     CLICK_SEQUENCE_TOOL,
+    LIST_NOTES_TOOL,
+    READ_NOTE_TOOL,
     REPORT_TASK_STATUS_TOOL,
     VALIDATOR_TOOLS_DECLARATION,
     capture_screenshot_and_parse_ui,
@@ -66,7 +78,8 @@ from artemis.graph.perception import _check_injected_instruction_file
 from artemis.graph.state import State
 from artemis.llm.structured import ParseFailure, parse_structured
 from artemis.mcp.action_executor import McpActionExecutor
-from artemis.memory.transcript import PRO_UI_LIST_MARKER, TranscriptLedger
+from artemis.mcp.observation import observe
+from artemis.memory.transcript import PRO_UI_LIST_MARKER, TranscriptLedger, mark_ephemeral
 from artemis.services.llm import (
     RobustChatModelWrapper,
     acomplete,
@@ -85,12 +98,6 @@ from artemis.utils.logger import get_logger
 
 logger = get_logger(__name__)
 
-#: Reminder carried by the first observation only (the system prompt states the rule).
-_REASONING_FIRST_REMINDER = (
-    "CRITICAL RULE: In every single turn, you MUST FIRST output a natural"
-    " language reasoning/explanation paragraph BEFORE invoking any tool call."
-)
-
 _NO_TOOL_CALL_NOTICE = (
     "You did not call any tools last turn. Please make progress by calling an"
     " action tool or 'report_task_status'."
@@ -116,17 +123,17 @@ class _TurnRecord:
     def result(self) -> dict | None:
         """The turn's execution result in the validator-report shape.
 
-        ``None`` when no device action ran (helper-only turns have no result
-        message, as in Pro).
+        ``None`` unless an action failed: Flash executes synchronously and each
+        action's tool message already carries its outcome, so a result message
+        would only repeat it. A failure is worth its own message because it
+        carries the error the turn ended on.
         """
-        if not self.actions:
-            return None
         for name, status, text in self.actions:
             if status != "success":
                 # Executor messages name the action themselves ("Error
                 # executing click: ..."); prefix only the ones that don't.
                 return {"status": "failed", "error": text if name in text else f"{name}: {text}"}
-        return {"status": "dispatched"}
+        return None
 
 
 class FlashRunner:
@@ -164,7 +171,7 @@ class FlashRunner:
             if self.step_summarizer_cfg.enabled
             else None
         )
-        # Publish the service on the composition root (ctx.step_memory, M2) so
+        # Publish the service on the composition root (ctx.step_memory) so
         # any co-resident consumer shares this run's summary runtime.
         if self.summarizer is not None and getattr(ctx, "step_memory", None) is None:
             try:
@@ -187,7 +194,13 @@ class FlashRunner:
         return getattr(setup, "video_recording_tools_enabled", False) is True
 
     def _get_tools(self) -> list:
-        tools = list(VALIDATOR_TOOLS_DECLARATION)
+        # Flash has no tool that writes notes and its prompt never teaches
+        # them, so the Validator set's note readers are left out here.
+        tools = [
+            t
+            for t in VALIDATOR_TOOLS_DECLARATION
+            if t is not READ_NOTE_TOOL and t is not LIST_NOTES_TOOL
+        ]
         tools.insert(1, CLICK_SEQUENCE_TOOL)
         tools.append(ASK_EXPLORER_TOOL)
         # Helper tools shared with the Pro operator: the history tools are
@@ -235,6 +248,9 @@ class FlashRunner:
             image_scrub_depth=getattr(cfg, "image_scrub_depth", 3),
             pending_grace_steps=getattr(cfg, "pending_grace_steps", 3),
             xml_scrub_depth=getattr(cfg, "xml_scrub_depth", 1),
+            image_scrub_depth_relaxed=getattr(cfg, "image_scrub_depth_relaxed", None),
+            context_budget_tokens=getattr(cfg, "context_budget_tokens", None),
+            start_ratio=getattr(cfg, "start_ratio", None),
             session_start=session_start if isinstance(session_start, (int, float)) else None,
         )
         if engine is not None:
@@ -286,14 +302,19 @@ class FlashRunner:
     # Per-turn helpers (observe / think)
     # ------------------------------------------------------------------
 
-    async def _read_injected_instruction(self) -> tuple[str | None, str | None]:
-        """Consumes this turn's injected instruction: ``(instruction, notice)``.
+    async def _read_injected_instruction(
+        self, offset_label: str | None = None
+    ) -> tuple[str | None, UserGuidance | None]:
+        """Consumes this turn's injected instruction: ``(instruction, guidance)``.
 
         ``instruction`` is the user's text verbatim — what the step record,
         the chunk ledger and the visual-transition lens receive (the same
-        shape Pro stamps). ``notice`` wraps it with the operator-facing
-        directive and rides only on the observation tail. Both are None
-        when nothing was injected.
+        shape Pro stamps). ``guidance`` is the shared user-guidance pair
+        (:func:`render_user_guidance`, the Pro rendering without a plan to
+        edit): the ephemeral ``--- User Guidance ---`` wrapper and the
+        persistent verbatim body, both riding on the observation tail.
+        ``offset_label`` stamps the body with the session offset. Both are
+        None when nothing was injected.
         """
         if not (self.ctx.data_engine and self.ctx.data_engine.base_dir):
             return None, None
@@ -308,18 +329,13 @@ class FlashRunner:
         if not (injected_payload and injected_payload.get("instruction")):
             return None, None
         instruction = str(injected_payload["instruction"])
-        notice = (
-            "[REAL-TIME INJECTED INSTRUCTION from user]:"
-            f" {instruction}\nYou MUST immediately"
-            " follow this instruction and adjust your plan/actions."
+        guidance = render_user_guidance(
+            instruction,
+            release_loop=bool(injected_payload.get("release_loop")),
+            has_plan=False,
+            offset_label=offset_label,
         )
-        if injected_payload.get("release_loop"):
-            notice += (
-                "\nThe user has explicitly authorized stopping any"
-                " ongoing monitoring loop; you may now wrap up and"
-                " complete the task."
-            )
-        return instruction, notice
+        return instruction, guidance
 
     def _build_tail(
         self,
@@ -328,19 +344,28 @@ class FlashRunner:
         img_bytes,
         xml_list,
         *,
-        injected: str | None = None,
+        injected: UserGuidance | None = None,
         notices: list[str] | None = None,
         is_final: bool = False,
+        previous_turn_silent: bool = False,
     ) -> HumanMessage:
         """Builds this turn's observation tail (Pro observation shape).
 
         Header, screenshot and UI list carry the same markers as the Pro
-        operator's tail so the ledger's scrub edge treats both alike.
+        operator's tail so the ledger's scrub edge treats both alike. The
+        objective is stated once, in the system prompt; the tail never repeats
+        it. Every per-turn notice (nudges, the user-guidance wrapper, the
+        final-turn warning, the reasoning reminder after a silent turn) is
+        marked ephemeral so it leaves the transcript with the recent window.
+        The verbatim body of an injected instruction is the one exception: it
+        is a regular block, so a standing instruction stays in the active
+        window until the turn is chunked (the chunk's user lines carry it on).
         """
-        blocks: list[dict] = []
-        if turns == 1:
-            blocks.append({"type": "text", "text": f"Your objective is: {self.goal}"})
-        blocks.append({"type": "text", "text": f"# CURRENT OBSERVATION [{ledger.elapsed_label()}]"})
+        # ``turns`` is kept for call-site symmetry: the tail has the same shape
+        # on every turn.
+        blocks: list[dict] = [
+            {"type": "text", "text": f"# CURRENT OBSERVATION [{ledger.elapsed_label()}]"}
+        ]
         if img_bytes:
             img_b64 = base64.b64encode(img_bytes).decode("utf-8")
             blocks.append({"type": "text", "text": "--- Current Screenshot ---"})
@@ -349,15 +374,26 @@ class FlashRunner:
             )
         if xml_list:
             blocks.append({"type": "text", "text": f"{PRO_UI_LIST_MARKER}\n{xml_list}"})
-        for notice in notices or []:
-            blocks.append({"type": "text", "text": notice})
+        ephemeral: list[int] = []
+        # (text, ephemeral) in tail order.
+        per_turn: list[tuple[str, bool]] = [(text, True) for text in (notices or [])]
         if injected:
-            blocks.append({"type": "text", "text": injected})
+            # The wrapper is per-turn; the verbatim body right after it is a
+            # regular block that stays until the turn is chunked.
+            per_turn.append((injected.wrapper, True))
+            per_turn.append((injected.body, False))
         if is_final:
-            blocks.append({"type": "text", "text": _FINAL_TURN_WARNING})
-        if turns == 1:
-            blocks.append({"type": "text", "text": _REASONING_FIRST_REMINDER})
-        return HumanMessage(content=blocks)
+            per_turn.append((_FINAL_TURN_WARNING, True))
+        if previous_turn_silent:
+            per_turn.append((REASONING_REMINDER, True))
+        for text, is_ephemeral in per_turn:
+            if is_ephemeral:
+                ephemeral.append(len(blocks))
+            blocks.append({"type": "text", "text": text})
+        tail = HumanMessage(content=blocks)
+        if ephemeral:
+            mark_ephemeral(tail, ephemeral)
+        return tail
 
     def _extract_response_text(self, response) -> str:
         """Extracts the natural-language thought text from the model response."""
@@ -368,6 +404,22 @@ class FlashRunner:
             )
         return raw_text
 
+    def _extract_response_thinking(self, response) -> str:
+        """Extracts the model's native thinking blocks (thought summaries), if any.
+
+        Providers running with ``include_thoughts`` return them as ``thinking``
+        content blocks next to the ``text`` blocks; they are recorded on the step
+        as ``operator_native_thinking`` and never fed back as reply text.
+        """
+        if not isinstance(response.content, list):
+            return ""
+        parts = [
+            str(b.get("thinking") or "")
+            for b in response.content
+            if isinstance(b, dict) and b.get("type") == "thinking"
+        ]
+        return "\n".join(p for p in parts if p.strip())
+
     def _token_usage_from_response(self, response) -> dict | None:
         """Extracts token usage metadata from the model response, if present."""
         step_token_usage = None
@@ -435,12 +487,20 @@ class FlashRunner:
             "total_tokens": max(1, prompt_tokens + completion_tokens),
         }
 
-    def _resolve_token_usage(self, response, messages: list[BaseMessage], raw_text: str) -> dict:
-        """Extracts token usage from response metadata, estimating as fallback."""
+    def _resolve_token_usage(
+        self, response, messages: list[BaseMessage], raw_text: str
+    ) -> tuple[dict, bool]:
+        """Token usage for the call and whether the provider measured it.
+
+        Falls back to an estimate when the response carries no usage
+        metadata; the flag lets the caller keep an estimate out of the
+        ledger's chars-per-token calibration (an estimate is itself derived
+        from character counts, so calibrating on it would be circular).
+        """
         step_token_usage = self._token_usage_from_response(response)
-        if not step_token_usage or step_token_usage.get("total_tokens", 0) <= 0:
-            step_token_usage = self._estimate_token_usage(messages, raw_text)
-        return step_token_usage
+        if step_token_usage and step_token_usage.get("total_tokens", 0) > 0:
+            return step_token_usage, True
+        return self._estimate_token_usage(messages, raw_text), False
 
     def _record_llm_trace(self, step_token_usage: dict, raw_text: str) -> None:
         """Records the llm_call trace for this turn in the DataEngine."""
@@ -490,6 +550,7 @@ class FlashRunner:
         pre_screenshot_bytes,
         xml_list,
         messages: list[BaseMessage],
+        native_text: str | None = None,
     ) -> dict:
         """Records the final step, acknowledges the tool call, and flushes."""
         final_report = args
@@ -502,6 +563,7 @@ class FlashRunner:
                     ui_tree=xml_list,
                     action_taken={"action": "report_task_status", "args": args},
                     operator_raw_thinking=raw_text,
+                    operator_native_thinking=native_text or None,
                     last_execution_result={"result": "Task completed with final report."},
                     extra_metadata={"token_usage": step_token_usage},
                 )
@@ -519,25 +581,56 @@ class FlashRunner:
             await self.summarizer.flush()
         return final_report
 
-    async def _capture_post_screenshot(self, exec_result, name: str, action_names):
-        """Returns the post-action screenshot, capturing a fallback if needed."""
+    async def _capture_post_screenshot(
+        self, exec_result, name: str, action_names, state: State | None = None
+    ):
+        """Returns the post-action screenshot, capturing a fallback if needed.
+
+        When a device action produced no observation (a failed action, an
+        unknown tool, ...) the screen is observed through the very same
+        pipeline the executor's success path uses (:func:`observe`), so the
+        next observation tail carries the indexed minimal UI list and
+        ``state`` gets the same refreshed screenshot path and indexed
+        elements. Nothing is captured for non-action tools.
+        """
         post_img_bytes = exec_result.screenshot_bytes
-        if not post_img_bytes and name in action_names:
-            try:
-                controller = UnifiedMobileController(self.ctx)
-                screen_data = await controller.get_screen_data()
-                post_img_bytes = base64.b64decode(screen_data.base64)
-                if not exec_result.ui_elements_text:
-                    exec_result.ui_elements_text = screen_data.elements
-            except Exception as shot_err:
-                logger.warning(f"Failed to capture fallback screenshot in FlashRunner: {shot_err}")
+        if post_img_bytes or name not in action_names:
+            return post_img_bytes
+        try:
+            obs, screenshot_bytes = await observe(self.ctx, self.controller, settle_ms=0)
+        except Exception as shot_err:
+            logger.warning(f"Failed to capture fallback screenshot in FlashRunner: {shot_err}")
+            return post_img_bytes
+        if not obs.ok:
+            logger.warning(f"Failed to capture fallback screenshot in FlashRunner: {obs.message}")
+            return post_img_bytes
+        post_img_bytes = screenshot_bytes
+        if not exec_result.ui_elements_text:
+            exec_result.ui_elements_text = obs.elements_text
+        if not exec_result.screenshot_path and obs.screenshot_path:
+            exec_result.screenshot_path = obs.screenshot_path
+        if state is not None:
+            if obs.hierarchy_ok:
+                state.indexed_points = [el["center"] for el in obs.elements]
+                state.indexed_elements = obs.elements
+            if obs.screenshot_path:
+                state.latest_screenshot = obs.screenshot_path
         return post_img_bytes
 
-    def _extract_normalized_coordinates(self, name: str, args: dict):
-        """Extracts and enriches coordinate metadata for the recorded action."""
+    def _extract_normalized_coordinates(self, name: str, args: dict, resolved=None):
+        """Extracts and enriches coordinate metadata for the recorded action.
+
+        ``resolved`` is the normalized point the executor sent a point action
+        to; it is the coordinate of record when the model addressed an element
+        by index (the arguments then carry no point at all).
+        """
         norm_coords = None
         norm_start = None
         norm_end = None
+        if name in ("click", "tap", "long_press", "input_text") and (
+            isinstance(resolved, (list, tuple)) and len(resolved) == 2
+        ):
+            return [int(resolved[0]), int(resolved[1])], None, None
         if name == "swipe":
             kind, target_val, _ = parse_swipe_parameters(args)
             if kind == "coords" and isinstance(target_val, list) and len(target_val) == 4:
@@ -567,6 +660,40 @@ class FlashRunner:
                     norm_coords = [int(float(nums[0])), int(float(nums[1]))]
         return norm_coords, norm_start, norm_end
 
+    def _build_action_record(self, name: str, args: dict, exec_result) -> dict:
+        """The action as the step record and the visual lens see it.
+
+        Flash records the model's own 0–1000 coordinates verbatim (an index
+        target records the point the executor resolved it to); the explicit
+        space marker keeps every later normalization pass (agent-friendly
+        steps, MCP inspector) a no-op on this record. The tool arguments ride
+        along under ``args``, and the target semantics the executor validated
+        (observed element fields for an index, the model's own
+        ``target_description`` for a point) land top level in the shape Pro
+        records.
+        """
+        metadata = getattr(exec_result, "metadata", None) or {}
+        resolved = metadata.get("target_coordinates")
+        norm_coords, norm_start, norm_end = self._extract_normalized_coordinates(
+            name, args, resolved=resolved
+        )
+        given = args.get("target") or args.get("coordinates") or args.get("sequence")
+        if isinstance(given, (int, float)) and not isinstance(given, bool):
+            given = None  # An element index is not a coordinate.
+        action_dict = {
+            "action": name,
+            "coordinates": given or norm_coords,
+            COORDINATE_SPACE_KEY: COORDINATE_SPACE_NORMALIZED,
+            "args": args,
+        }
+        if norm_coords:
+            action_dict["normalized_coordinates"] = norm_coords
+        if norm_start and norm_end:
+            action_dict["normalized_start_coordinates"] = norm_start
+            action_dict["normalized_end_coordinates"] = norm_end
+        action_dict.update(metadata.get("target_semantics") or {})
+        return action_dict
+
     def _record_action_step(
         self,
         name: str,
@@ -578,6 +705,8 @@ class FlashRunner:
         xml_list,
         post_img_bytes,
         injected: str | None = None,
+        native_text: str | None = None,
+        action_dict: dict | None = None,
     ):
         """Records telemetry / step in DataEngine; returns the step id or None."""
         recorded_step_id = None
@@ -585,31 +714,8 @@ class FlashRunner:
             if self.ctx.data_engine.current_step_id is None:
                 self.ctx.data_engine.allocate_step_id()
 
-            norm_coords, norm_start, norm_end = self._extract_normalized_coordinates(name, args)
-
-            # Flash records the model's own 0–1000 coordinates verbatim; the
-            # explicit space marker keeps every later normalization pass
-            # (agent-friendly steps, MCP inspector) a no-op on this record.
-            action_dict = {
-                "action": name,
-                "coordinates": (
-                    args.get("target")
-                    or args.get("coordinates")
-                    or args.get("sequence")
-                    or norm_coords
-                ),
-                COORDINATE_SPACE_KEY: COORDINATE_SPACE_NORMALIZED,
-                "args": args,
-            }
-            if norm_coords:
-                action_dict["normalized_coordinates"] = norm_coords
-            if norm_start and norm_end:
-                action_dict["normalized_start_coordinates"] = norm_start
-                action_dict["normalized_end_coordinates"] = norm_end
-
-            # The model's own statement of what it aimed at (target_description),
-            # validated and shaped by the executor into the fields Pro records.
-            action_dict.update((exec_result.metadata or {}).get("target_semantics") or {})
+            if action_dict is None:
+                action_dict = self._build_action_record(name, args, exec_result)
 
             succeeded = exec_result.status == "success"
             last_execution_result = {
@@ -631,6 +737,7 @@ class FlashRunner:
                 ui_tree=(exec_result.ui_elements_text or xml_list),
                 action_taken=action_dict,
                 operator_raw_thinking=raw_text,
+                operator_native_thinking=native_text or None,
                 last_execution_result=last_execution_result,
                 extra_metadata=extra_metadata,
             )
@@ -664,21 +771,35 @@ class FlashRunner:
         action_sequence: int,
         turn: _TurnRecord,
         injected: str | None = None,
+        native_text: str | None = None,
+        index_elements: list[dict] | None = None,
     ):
         """Executes one tool call, records it, and updates loop state.
 
         The tool message carries the outcome text only; the post-action
         screenshot and UI list become the next turn's observation tail.
-        Returns the (possibly updated) pre_screenshot_bytes, xml_list, and
-        action_sequence for the next iteration.
+        ``index_elements`` is the turn's element snapshot index targets
+        resolve against (see :meth:`_process_tool_calls`); ``None`` resolves
+        against the state's current list. Returns the (possibly updated)
+        pre_screenshot_bytes, xml_list, and action_sequence for the next
+        iteration.
         """
         # Dynamic dispatch set: manifest device actions plus any backend
         # extension tools, so extension steps are recorded like actions.
         action_names = self.executor.action_tool_names
         try:
-            exec_result = await self.executor.execute(name, args, tc_id, state)
+            exec_result = await self.executor.execute(
+                name, args, tc_id, state, index_elements=index_elements
+            )
 
-            post_img_bytes = await self._capture_post_screenshot(exec_result, name, action_names)
+            post_img_bytes = await self._capture_post_screenshot(
+                exec_result, name, action_names, state
+            )
+
+            # One record shape for the DataEngine step and the visual lens.
+            action_dict = (
+                self._build_action_record(name, args, exec_result) if name in action_names else None
+            )
 
             # Record telemetry / step in DataEngine
             recorded_step_id = None
@@ -693,6 +814,8 @@ class FlashRunner:
                     xml_list,
                     post_img_bytes,
                     injected=injected,
+                    native_text=native_text,
+                    action_dict=action_dict,
                 )
 
             if name in action_names:
@@ -705,7 +828,9 @@ class FlashRunner:
                 self.summarizer.dispatch(
                     step_number=action_sequence,
                     action_name=name,
-                    action_args=args,
+                    # The recorded action minus its verb: the same shape the Pro
+                    # summarizer hands the lens, so the phrase renders alike.
+                    action_args={k: v for k, v in action_dict.items() if k != "action"},
                     pre_img_bytes=pre_screenshot_bytes,
                     post_img_bytes=post_img_bytes,
                     exec_outcome=exec_result.text_summary,
@@ -780,12 +905,33 @@ class FlashRunner:
         action_sequence: int,
         turn: _TurnRecord,
         injected: str | None = None,
+        native_text: str | None = None,
     ):
         """Dispatches the turn's tool calls.
 
+        Every index target of the turn resolves against the element list the
+        model decided on: the list of the observation this turn was built
+        from, snapshotted here before the first action. Each action still
+        refreshes ``state.indexed_elements`` (that refreshed list is what the
+        next observation shows), so without the snapshot ``click(5)`` after
+        ``click(3)`` would be resolved against the screen after the first
+        click.
+
+        The snapshot is the very list object the observation left on the
+        state (not a copy), and observations replace the state's list rather
+        than mutating it, so ``ask_explorer`` candidates registered before
+        any action land in the snapshot by construction. When a helper tool
+        appends candidates after an action has already replaced the state's
+        list, the explorer numbered them against that replaced list, so the
+        snapshot is re-taken from it: indices the explorer just handed out
+        resolve correctly, at the cost of the pre-action numbering (mixing
+        the two in one turn is the model's error, not a supported case).
+
         Returns (final_report, pre_screenshot_bytes, xml_list, action_sequence);
         final_report is non-None only when 'report_task_status' was called.
         """
+        action_names = self.executor.action_tool_names
+        index_elements = self._turn_index_snapshot(state)
         for tc in tool_calls:
             name = tc["name"].split(":")[-1] if ":" in tc["name"] else tc["name"]
             args = tc.get("args") or {}
@@ -802,9 +948,12 @@ class FlashRunner:
                     pre_screenshot_bytes,
                     xml_list,
                     messages,
+                    native_text=native_text,
                 )
                 return final_report, pre_screenshot_bytes, xml_list, action_sequence
 
+            elements_before = getattr(state, "indexed_elements", None)
+            before_len = len(elements_before) if isinstance(elements_before, list) else 0
             pre_screenshot_bytes, xml_list, action_sequence = await self._execute_and_record_action(
                 name,
                 args,
@@ -818,9 +967,46 @@ class FlashRunner:
                 action_sequence,
                 turn,
                 injected=injected,
+                native_text=native_text,
+                index_elements=index_elements,
             )
+            if name not in action_names:
+                index_elements = self._extend_index_snapshot(state, index_elements, before_len)
         return None, pre_screenshot_bytes, xml_list, action_sequence
 
+    @staticmethod
+    def _turn_index_snapshot(state: State) -> list[dict]:
+        """The element list this turn's index targets resolve against.
+
+        The state's list object itself, so in-place appends (explorer
+        candidates) before any action join the snapshot; an empty list is
+        installed on the state when there is none, for the same reason.
+        """
+        elements = getattr(state, "indexed_elements", None)
+        if not isinstance(elements, list):
+            elements = []
+            try:
+                state.indexed_elements = elements
+            except (AttributeError, TypeError, ValueError):
+                pass
+        return elements
+
+    @staticmethod
+    def _extend_index_snapshot(state: State, snapshot: list[dict], before_len: int) -> list[dict]:
+        """Re-takes the snapshot after a helper tool appended candidates to a
+        list that is no longer the snapshot (an action replaced it first).
+
+        Appends into the snapshot itself need nothing: the explorer numbered
+        them against the snapshot. Only growth of a different list object
+        moves the snapshot, since that is the list the new numbers refer to.
+        """
+        current = getattr(state, "indexed_elements", None)
+        if not isinstance(current, list) or current is snapshot:
+            return snapshot
+        if len(current) > before_len:
+            return current
+        return snapshot
+
     async def _prepare_conversation(self, state: State, tools_declaration: list):
         """Installs the static prefix and captures the initial device state."""
         ledger = self._build_ledger()
@@ -883,8 +1069,10 @@ class FlashRunner:
             previous_turn = None
 
             # Check for real-time injected instructions: the verbatim text
-            # is stamped on the step, the wrapped notice goes to the tail.
-            injected, injected_notice = await self._read_injected_instruction()
+            # is stamped on the step, the guidance pair goes to the tail.
+            injected, injected_guidance = await self._read_injected_instruction(
+                ledger.elapsed_label()
+            )
 
             # Tool restriction on the final turn (bounded loops only)
             is_final = limit is not None and turns == limit
@@ -893,9 +1081,12 @@ class FlashRunner:
                 turns,
                 current_pre_screenshot_bytes,
                 current_xml_list,
-                injected=injected_notice,
+                injected=injected_guidance,
                 notices=pending_notices,
                 is_final=is_final,
+                # The ledger judged the turn it just committed: a bare tool
+                # call (or thinking only) earns a one-line reminder, no bounce.
+                previous_turn_silent=bool(getattr(ledger, "last_turn_silent", False)),
             )
             pending_notices = []
 
@@ -913,9 +1104,20 @@ class FlashRunner:
 
             # Extract thought and tool calls
             raw_text = self._extract_response_text(response)
+            native_text = self._extract_response_thinking(response)
 
             # Extract token usage metadata from response
-            step_token_usage = self._resolve_token_usage(response, messages, raw_text)
+            step_token_usage, measured = self._resolve_token_usage(response, messages, raw_text)
+            # The ledger's compaction thresholds read the runner's own prompt
+            # size, never the session-wide meter (which any agent overwrites).
+            # The prompt as sent (``messages`` minus the just-appended reply)
+            # rides along so the ledger can calibrate its chars-per-token
+            # ratio — only from a provider measurement, never from the
+            # estimate (same as the Pro operator).
+            ledger.record_prompt_tokens(
+                step_token_usage.get("prompt_tokens"),
+                messages=messages[:-1] if measured else None,
+            )
 
             self._record_llm_trace(step_token_usage, raw_text)
 
@@ -952,6 +1154,7 @@ class FlashRunner:
                 action_sequence,
                 turn,
                 injected=injected,
+                native_text=native_text,
             )
             ledger.stage_turn(messages[turn_base:])
             previous_turn = turn
diff --git a/artemis/agents/flash/summarizer.py b/artemis/agents/flash/summarizer.py
index 22c0093..56c5e09 100644
--- a/artemis/agents/flash/summarizer.py
+++ b/artemis/agents/flash/summarizer.py
@@ -260,24 +260,83 @@ class VisualStepSummarizer(StepMemoryService):
     def _action_phrase(action_name: str, action_args: dict[str, Any] | None) -> str:
         """The action as every other history reader sees it (``format_actions_clean``).
 
-        A described coordinate target renders as ``'play button' (self-described)``,
-        an observed element as ``'Play'``; a Pro burst lists every member.
+        ``action_args`` is the recorded action minus its verb (what the Pro
+        summarizer extracts from ``action_taken`` and what the Flash runner
+        builds from the same record shape). The action name always wins over
+        an argument of the same key: ``manage_app``'s own ``action="launch"``
+        argument becomes the ``intent`` the renderer reads, never the verb. A
+        described coordinate target renders as ``'play button'
+        (self-described)``, an observed element as ``'Play'``; a Pro burst
+        lists every member.
         """
         args = dict(action_args or {})
         extra = args.pop("additional_actions", None)
+        own_verb = args.pop("action", None)
+        if own_verb is not None and own_verb != action_name:
+            args.setdefault("intent", own_verb)
         # Flash's coordinate swipe names its points ``start``/``end``; the
         # history renderer reads ``start_coordinates``/``end_coordinates``.
-        if action_name == "swipe" and "start" in args and "end" in args:
-            args.setdefault("start_coordinates", args["start"])
-            args.setdefault("end_coordinates", args["end"])
+        if action_name == "swipe":
+            raw = args.get("args") if isinstance(args.get("args"), dict) else {}
+            start = args.get("start", raw.get("start"))
+            end = args.get("end", raw.get("end"))
+            if start is not None and end is not None:
+                args.setdefault("start_coordinates", start)
+                args.setdefault("end_coordinates", end)
         try:
-            first = {"action": action_name, **args}
+            first = {**args, "action": action_name}
             actions = [first, *extra] if isinstance(extra, list) and extra else first
             return format_actions_clean(actions)
         except Exception as exc:
             logger.debug(f"Action phrase rendering fell back to raw args: {exc}", exc_info=True)
             return f"{action_name}({action_args})"
 
+    @staticmethod
+    def _verbatim_args(action_args: dict[str, Any] | None) -> dict[str, Any]:
+        """The agent-facing arguments of the action.
+
+        A Flash record keeps the tool call's arguments under ``args``; a Pro
+        record is the arguments themselves. Bookkeeping keys never count.
+        """
+        args = action_args or {}
+        raw = args.get("args")
+        if isinstance(raw, dict):
+            return dict(raw)
+        internal = {
+            "additional_actions",
+            "coordinate_space",
+            "normalized_coordinates",
+            "normalized_start_coordinates",
+            "normalized_end_coordinates",
+        }
+        return {k: v for k, v in args.items() if k not in internal}
+
+    @staticmethod
+    def _phrase_carries(phrase: str, args: dict[str, Any]) -> bool:
+        """Whether every argument value is visible in the rendered phrase.
+
+        Booleans and ``None`` never count (the phrase spells their effect, not
+        their value); everything else must appear verbatim, so an index
+        target, a repeat count or a duration the phrase folded away keeps the
+        verbatim argument line.
+        """
+        haystack = phrase.lower()
+
+        def _shown(value: Any) -> bool:
+            if isinstance(value, (list, tuple)):
+                # A point renders whole (``at [880, 410]``); a sequence or a
+                # description list renders member by member.
+                return str(list(value)).lower() in haystack or (
+                    bool(value) and all(_shown(v) for v in value)
+                )
+            return str(value).lower() in haystack
+
+        return all(
+            _shown(value)
+            for value in args.values()
+            if value is not None and not isinstance(value, bool)
+        )
+
     def _meter_lens_call(self, response: Any) -> None:
         """Meter one raw-model lens call as an ``llm_usage`` trace, best-effort.
 
@@ -338,11 +397,14 @@ class VisualStepSummarizer(StepMemoryService):
             dual = bool(pre_bytes) and bool(post_bytes)
             template = self._prompt_template if dual else self._single_prompt_template
             rendered_prompt = Template(template).render(step_number=step_number)
-            lead_lines = [
-                f"Step {step_number} Physical Action: {self._action_phrase(action_name, action_args)}",
-                f"Action arguments (verbatim): {action_name}({action_args})",
-                f"Controller Outcome: {exec_outcome}",
-            ]
+            phrase = self._action_phrase(action_name, action_args)
+            lead_lines = [f"Step {step_number} Physical Action: {phrase}"]
+            # The verbatim arguments are worth a line only when the phrase
+            # folded some of them away (an index target, a repeat count, ...).
+            verbatim = self._verbatim_args(action_args)
+            if verbatim and not self._phrase_carries(phrase, verbatim):
+                lead_lines.append(f"Action arguments (verbatim): {action_name}({verbatim})")
+            lead_lines.append(f"Controller Outcome: {exec_outcome}")
             focus = input_data.get("focus")
             if isinstance(focus, dict) and focus:
                 lead_lines.extend(["", render_focus_block(focus, dual=dual)])
diff --git a/artemis/agents/operator/operator.json b/artemis/agents/operator/operator.json
index bd0b2c2..7fbad91 100644
--- a/artemis/agents/operator/operator.json
+++ b/artemis/agents/operator/operator.json
@@ -1,3 +1,3 @@
 {
-  "main_template": "# ROLE\nYou are the Android Device Operator. Your priority is execution accuracy. You must operate the device step-by-step to achieve the goal, avoiding blind attempts or loops.\n\n# OPERATIONAL PRINCIPLES\n- **Action Scope & Interaction Precision**: Always select gestures whose scope of effect matches the boundaries of the target element. Avoid shortcuts or batch actions from popups or menus if they risk affecting non-target UI components on the screen.\n- **Vision-First Priority**: The screenshot is the primary source of truth for the real device state. Always visually inspect the screen state and layout on the screenshot before referencing the element list. Use the 'Visible UI Elements' list strictly as an auxiliary lookup table to retrieve target element indices and coordinates.\n[% if \"wait_for_delay\" in available_tools %]- **Loading & Transitions**: When entering page transitions (e.g., app launching, web page loading, or progress indicators), use `wait_for_delay` to let the screen settle before executing target actions. Some transition states are difficult to discern, such as a thin progress line at the top of the browser screen during webpage loads. Before questioning whether an error has occurred, you can first adopt a waiting strategy to see how the device state evolves. If the state remains ambiguous after waiting, certain UI components might be malfunctioning or failing to load; in this case, consider retrying the action or pivoting to an alternative path.\n[% endif %]- **Large List & Long Text Exploration Strategy (Zero-Miss, Zero-Duplication Single-Pass Principle)**: When traversing large lists, browsing long text bodies, or scanning continuous content feeds, strictly adhere to the single-pass exploration standard:\n  1. **Unidirectional Anchor-Based Traversal (Zero-Miss)**: Maintain a consistent, unidirectional scan (e.g., uniform downward scrolling). Before each scroll, identify the bottom-most visible item/text segment as your visual anchor and carry that anchor plus the scan direction in short-term memory or the traversal ledger. After the scroll, evaluate this handoff before doing anything unrelated: if the anchor remains visible with new content beyond it, record the new content and continue in the same direction without scrolling back to verify; if the anchor is missing, continuity is uncertain, so perform at most one minimal reverse recovery to re-establish overlap, then resume the original direction. While the traversal's declared exit condition remains unresolved, keep this traversal active and do not advance to another milestone or mark it complete.\n  2. **Boundary-Proven Completion**: A single scroll that reveals no new content is not sufficient evidence that the list is complete. For an exhaustive traversal, stop only when an explicit end-of-list indicator is visible, or when one additional successful swipe in the same direction and within the same list container leaves the same final anchor visible with no new items and no loading state. This boundary probe must remain unidirectional; never reverse direction merely to prove completion. If the task declares an earlier exit condition (for example, find one verified match or process N items), that explicit condition may end the traversal without reaching the list boundary.\n  3. **Memory & Plan-Driven Deduplication (Zero-Duplication)**: Systematically log extracted item names, identifiers, or processing states into notes or memory as you progress. After every screen transition, cross-reference visible items against your recorded ledger and strictly interact only with newly surfaced, unrecorded items to eliminate redundant actions on overlapping elements. Proactively maintain subtasks in `task_plan` (e.g., segmenting by batch, category, or alphabetical ranges like `a-d`), tracking exact paths and progress to prevent backtracking.\n  4. **Single-Pass Trust & Anti-Oscillation (No Over-Verification)**: Treat recorded notes as verified ground truth. Once a segment is traversed with confirmed anchor continuity and logged, consider it permanently resolved. Do NOT scroll back-and-forth or perform redundant re-scans for \"double-checking\", even if older execution history has been pruned. Resume from the last recorded anchor and direction. Only the single bounded recovery above, or a refreshed/mutated list, permits limited re-verification; otherwise continue the single pass over new content.\n- **Dynamic Monitoring & Reactive Loop Protocol (Monitor-Trigger-Action)**: When executing an active milestone matching `[Loop] <Goal> into note <TargetNote> (Exit: <ExitCondition>; Interval: <Interval>)` or `[Loop:continuous] <Goal> into note <TargetNote> (Interval: <Interval>)` (the milestone grammar itself is defined under Task Plan Grammar below), run this 5-step cyclic state machine:\n  - **Step 1 (Baseline Sync)**: On the initial cycle, observe all visible entries/metrics in the primary monitoring view and save the full snapshot into `<TargetNote>`; that note is the persistent baseline and diffing ledger you cross-reference and append to on every later cycle.\n  - **Step 2 (Pacing & Refresh)**: Adhere strictly to the exact duration declared in `<Interval>`, then execute a refresh action (e.g., pull-to-refresh, sync, or reload) on the primary monitoring view. Every turn adds seconds to tens of seconds of inference and transport on top of any explicit wait, so calibrate against the `T+` offsets of the previous checks: shorten the explicit wait by the overhead you observe, so that consecutive checks land on the declared cadence instead of drifting later each cycle.\n  - **Step 3 (Incremental Diff)**: Cross-reference refreshed screen items against `<TargetNote>`. If Zero Delta (no new events), append a timestamped check entry to `<TargetNote>` and skip to Step 5. If Positive Delta (new events found), proceed to Step 4.\n  - **Step 4 (Atomic Trigger & Return-to-Base)**: Interact with newly surfaced items to handle the triggered sub-action, append extracted details to `<TargetNote>`, and **immediately navigate back to the primary monitoring view**.\n  - **Step 5 (Ledger Advance)**: In `task_plan`, mark current check subtask as `[x]` (e.g., `  - [x] Polling Check #N: ...`), initialize next check as `[/]` (e.g., `  - [/] Polling Check #(N+1): ...`), and preserve parent `[Loop]` milestone as `[/]`.\n\n# SYSTEM WORKFLOW: SAFETY NET & EXECUTION INCIDENTS\nYour decisions pass through downstream pipeline guardians. Understanding them tells you how to read your history and how to recover:\n- **Pre-Execution Safety Net (vetted single actions only)**: Before a single Turn-Ending Action fires, the system re-checks the live screen for your target (element tree first, pixel comparison as fallback) and self-corrects small coordinate drift. If the target has disappeared, shifted beyond tolerance, or is covered by another element, the action is NOT executed.\n- **Execution Incident (yours to resolve)**: When an action is intercepted, rejected by the device, or a burst aborts midway, no other agent repairs it. The system opens an Execution Incident and shows it to you as an `--- Execution Incident (OPEN) ---` block above your observation: the facts (what was blocked, why, the recorded target, the likely trigger action) and category-specific evidence. The incident stays open, escalating on each consecutive failed turn, until one of your Turn-Ending Actions is dispatched without error; closing means the execution channel works again, not that the blocked intent was achieved, and a one-turn `--- Execution Incident (CLOSED ...) ---` notice then asks you to settle that intent against the plan. Treat the block as the first thing to read in the turn, then re-observe the live screen. Often the right move is not a repair at all: if the screen has moved past the blocked action (an ad finished, a dialog closed by itself), continue with the plan. If the intent is still pending, diagnose the cause explicitly in your reasoning and act on it; a verbatim retry of the blocked action is not a diagnosis. Two exceptions: if the target is visibly still on screen, the safety net misfired and one vetted retry is fine; and the recorded target coordinates may be reused inside a Fast-Action Burst as an acceptable guess.\n{% if transcript_history %}- **Reading Your History**: The earlier turns of this conversation are your raw execution history. Each committed turn ends with a `--- Action Execution Result (T+mm:ss) ---` message: `Status: dispatched` means the device accepted your Turn-Ending Action (whether it had the intended effect is yours to judge from the next observation); `Status: failed` with an `Error:` line (starting `Intercepted by Pre-Execution Safety Net` or `Execution failed`) is an execution incident, and for a burst it names which member failed and that the rest were not executed. Screenshots older than a few turns are replaced by short visual summaries and old UI element lists are dropped. Compressed spans render as `[Era N | Steps a–b | T+.. → T+..]` blocks: ① a merged synopsis (entry/exit state, verified facts, unresolved items, failed paths, entities), ② segment titles, ③ a per-step action ledger; a recall-only era shows a period paragraph plus a `(Step-level ledger via search_history for steps a–b)` line[% if \"search_history\" in available_tools %]; query that step range with `search_history` for the full per-step ledger[% endif %]. After a process restart a `[Restored history]` block precedes the conversation. Every timestamp is a session-relative `T+mm:ss` offset.\n{% else %}- **History Markers**: In '--- Execution History ---', an intercepted step shows `(Intercepted by Pre-Execution Safety Net)`, a burst shows `[Planned Fast-Action Burst]` with each member's outcome, and a blocked step's `[Result]` line starts with `Error:`. Use them to trace how the current screen state was reached. Step times are session-relative offsets.\n{% endif %}\n# OBJECTIVE & PLAN\nInitial Goal: {{ initial_goal }}\n\n## Current Plan & Execution History\n{{ plan_and_history }}\n\n# TOOL USE PROTOCOL: PRE-DECISION EXPLORATION VS. TURN-ENDING ACTIONS\nYou operate within a multi-step framework that splits tools into two distinct classes. You must understand this flow to gather details safely before committing to physical actions:\n1. **Result-Dependent Pre-Decision Tools**:\n   - *What they are*: Helper/Subagent tools ([[ tool_enum(helper_tools) ]]), ADB/task tools ([[ tool_enum(adb_tools) ]]), and memory tools whose result must be inspected ([[ tool_enum(memory_tools) ]]).\n   - *How they work*: Invoke these without a Turn-Ending Action, inspect the returned result, and then decide. Never submit them in the same tool-call list as a Turn-Ending Action: the action is rejected and nothing executes.\n   - *Per-turn budget*: one turn allows at most {{ max_tool_calls }} tool calls in total; a system message warns you at the last one. Pace exploration so that a Turn-Ending Action, or at least a note save, fits before the budget runs out.\n2. **Write-Through Memory Tools** (`save_note`, `update_note`, `append_note`):\n   - May run alongside the turn's Turn-Ending Action (or Fast-Action Burst) only when recording facts already observed in the current context. If the note content depends on the action's result, wait for the next observation before writing it. Never write an action's expected outcome as if it had already been observed.\n3. **Turn-Ending Actions**:\n   - *What they are*: Physical device actions ([[ tool_enum(physical_actions) ]]).\n   - *How they work*: These tools interact with the physical device or alter the operational flow. Executing any of these tools terminates your turn. A turn ends in exactly one of two execution tiers:\n     - **Vetted Single Action (default)**: one Turn-Ending Action, vetted by the Pre-Execution Safety Net; a flaky dispatch is retried once. Use this for every ordinary step.\n     - **Fast-Action Burst (time-critical only)**: two to {{ max_burst_actions }} Turn-Ending Actions submitted in the same tool-call list, in execution order. They fire back to back with NO safety net, NO retries and NO screenshot in between; the first failure aborts the rest. This is your instrument against turn latency: every decision turn costs several seconds of model inference and transport while the device keeps moving, so a target that exists only in a short window after a summoning action (auto-dismissing overlays, temporary message bars, snackbar buttons, menus or media control bars with short timeouts) WILL be gone if you tap the trigger and wait for the next turn to tap the target. Recognize these situations proactively from the screen (a bar that fades, a countdown, a toast with a button) and emit the summoning action and the target action together as one burst, summoning action first. Use a burst only for such transient targets or when sub-second sequencing is itself the requirement[% if \"wait_for_delay\" in available_tools %]; it may include `wait_for_delay` to pace the sequence[% endif %]. Coordinates normally must come from the live screen data; the single exception is the transient target inside a burst, which is invisible by definition at decision time: there you may reuse the coordinates recorded for it in your history (or in an open Execution Incident) exactly as they were observed, provided the summoning action in the same burst restores the state they belonged to. Because nothing is vetted, you own the risk: justify every burst member in your reasoning, and never use a burst to batch ordinary steps for speed.\n\n# THE THREE-PHASE COGNITIVE PROTOCOL\nIn every turn, proceed through these three phases in sequence.\n\n## Phase 1: Observation & Diagnosis\n1. **Visual Observation & State Verification**: You must first examine the screenshot and describe the visual screen state in your raw thinking before evaluating actions.\n   - *Visual Description*: Describe the current visual layout, key visible UI components, active screen state, and any unexpected popups or overlays shown on the screenshot.\n   - *State Verification*: Compare the observed visual state against the intended outcome of the previous action to confirm whether the transition succeeded.\n   - *Side-Effect & Anomaly Check*: Verify whether any unintended screen changes, unwanted dialogs, or unexpected UI state alterations occurred.\n   - *Drift/Regression Audit*: Has the UI drifted to an incorrect screen, or Regressed back to a previous screen (e.g. from an accidental browser back-navigation)?\n   - *Stuck/Transition state*: Is there a loading progress indicator (active transition) or is it a frozen screen (static stuck)?\n2. **Path Decision (Recover vs. Adapt)**: Encourage flexible problem-solving. First, evaluate if the current path can still be recovered or advanced (e.g., dismissing a blocker, retrying, or restoring the view). If the current approach is blocked or unreliable, do not get stuck—flexibly pivot to alternative solutions or different UI paths to achieve the same goal.\n3. **Verify & Diagnose (Recommended Diagnosis Triggers & Loop Exemptions)**: Consider the diagnostic tool (`ask_diagnoser`) during the Pre-Decision Exploration stage if you detect any of the following symptoms:\n   - **Action Loop or State Stagnation**: You are about to execute the exact same physical action or click the same target for a 3rd consecutive time, or you find yourself alternating between the same actions (e.g., swiping up then down repeatedly) in a cyclical loop. This also applies if the current screen and 'Visible UI Elements' list are virtually identical to the previous step, or oscillating between two identical states, even though you executed a physical action.[% if \"search_history\" in available_tools %] Choose the tool by the question you need answered: `ask_diagnoser` when the question is why the action is not taking effect (logs, video), `search_history` when the question is what exactly you did or saw earlier (it returns step numbers[% if \"replay_steps\" in available_tools %]; `replay_steps` then gives the full record of a step[% endif %][% if \"get_step_screenshot\" in available_tools %]; `get_step_screenshot` its stored screenshot[% endif %]).[% endif %]\n     *EXEMPTION FOR PLANNED LOOPS*: Periodic pull-to-refresh actions (with planned wait intervals), standard \"inspect candidate -> return to list\" navigations across distinct items, and purposeful continuous swipes (e.g., scrolling to drain battery or traverse long content) are valid planned operations and do NOT call for diagnosis, provided you are making progress or adhering to the planned loop pacing.\n{% if verification_active %}   - **Ambiguous Verification Finding**: Use `ask_diagnoser` only when a finding's cause is unclear, the evidence conflicts, or no safe local correction is evident. A verification finding alone is not a diagnosis trigger.\n{% endif %}   - **Unexpected UI Drift or App Crash**: An unexpected OS popup, permissions dialog, system crash box, or redirect to home screen occurred.\n   - **Visual Discrepancies/Uncertainty**: You see a loading progress spinner for more than 2 consecutive steps, or you are unsure why an action failed to trigger the expected screen change.\n\n## Phase 2: Planning & Memory Preservation\n1. **Live Sub-goal Ledger**: `task_plan` has two layers. The top-level milestones are the Planner's strategy: change only their status, or their text when you deliberately replan. Everything nested beneath them is YOUR ledger of what you are doing right now, written as you go, never reconstructed at milestone completion. Invariant: the active milestone `[/]` always carries exactly one `[/]` sub-goal naming the current sub-goal; when that sub-goal itself takes several actions, nest a `[/]` sub-sub-goal (4 spaces) under it for the current action. Write the ledger at sub-goal boundaries, with `update_note` in the same tool-call list as the Turn-Ending Action: when a sub-goal ends, settle its leaf against what this screen shows (`[x]` achieved, `[!]` blocked with a one-line reason) and open the `[/]` leaf for the next one, phrased as the outcome you expect (e.g., `  - [/] Open route options for SFO` / `    - [/] Tap \"Directions\" so the transit/driving tabs appear`). Turns that stay inside the same sub-goal (waiting for a load, a retry after an intercepted action, consecutive scrolls) need no plan write; settled leaves stay in the plan as the record. The system only intervenes when the ledger is structurally broken (no `[/]` leaf under the active milestone) or stale (several action turns without any plan change): the action is bounced back once so you can record the ledger first. Mark a milestone `[x]` only after visual confirmation and only once its leaves are settled. Keep the plan a pure Markdown checklist; its grammar is machine-enforced:\n{{ plan_grammar }}\n   - *Surgical Plan Edits*: Modify `task_plan` with targeted `update_note` (target/replacement) edits. A full `save_note` rewrite that rewords historical top-level milestones whose status you did not change is automatically rejected by the system.\n   - *Loop Form of the Ledger*: When executing a `[Loop]` milestone (e.g., candidate iteration or periodic monitoring), the sub-goals are the iteration items: log each concrete iteration in `task_plan` as you proceed (e.g., `  - [x] Candidate #1 (Subject/ID): Verified and logged`, and add `  - [/] Candidate #2: Inspecting...`). In monitoring tasks, log each cycle with the session-relative time from the `# CURRENT OBSERVATION [T+mm:ss]` header (e.g., `  - [x] Polling Check #1 (T+12:30): Refreshed, no new items, waiting 5m`); those offsets are the only clock you have, for pacing as well as for timestamps. This live ledger prevents you from losing state or repeating past items.\n   - *Loop Exit Evaluation*: In every turn of a bounded `[Loop]`, evaluate whether its Exit Condition has been satisfied (e.g., required data completely found, candidate inspection cap reached, battery threshold hit); once it is legitimately met, mark the top-level `[Loop]` milestone as `[x]` to seamlessly transition to the next phase.\n   **CRITICAL: When all top-level tasks are marked as completed (`[x]`) using the note tool, the system will automatically judge the task as finished. At this point, you do not need to output a Turn-Ending Action.**{% if checks_active %} The system may then run a final review: if acceptance criteria are unmet, it sets the affected milestone back to `[/]` and returns control to you with `[final check]` / `[unmet subgoal]` findings — that is the plan reopening, not an error.{% endif %}\n2. **Preserve Memory & Pre-Action Snapshotting**: The note tools are the only reliable way to persist memory, and using them is zero-cost: saving more notes never burdens you, while forgetting creates risk. Before any UI interaction, perform this risk assessment: \"Will this action irreversibly alter the screen and erase potentially useful information?\" If this risk exists, even if you are not yet certain you will need these details, immediately save the visible critical values to the notes. Likewise, when you find information on the screen that might be relevant to the task, save it before exploring further; use `append_note` to add new information to an existing note, and consolidate lists or information spread across multiple screens into one note for unified processing. Clearly annotate the context in which each piece of information was obtained and organize the data in clear key-value structures. Pay attention to verification when writing notes, but once a final answer is determined, it should be trusted unless there is clear evidence that the existing note is incorrect or outdated.\n3. **Background Tasks & Instrumentation (Optional)**: If the current subgoal requires measuring performance, logging power consumption, or recording traces, you may use ADB tools to start these background processes during the Pre-Decision Exploration stage, prior to physical execution. You have full control over all ADB tasks. If a background task has finished, you must understand the original purpose of starting that task, and record the task's results or relevant extracted data in your notes as needed.\n\n## Phase 3: Target Selection & Physical Execution\n1. **Target Resolution & Index Safety**: The indexed list coordinates are generally accurate, but sometimes they include elements that are not fully visible or are obscured on the screen. You must first analyze the current screenshot to determine which indexes are actually interactable, and prioritize using element indexes (e.g., `target=3`) over raw coordinates or cached state whenever possible. If the target is not present in the indexed list or the bounds are incorrect, use `ask_explorer` first during the Pre-Decision Exploration stage. Remember that swiping, scrolling, or page updates shift indexes and coordinates; always retrieve the fresh index from the latest screen data. A coordinate target must carry `target_description`: a short, meaningful name for what you are aiming at, as a user would call it (e.g. 'play button', 'search input', 'video body'), never a generic 'element' or 'button'. Nothing is inferred on your behalf: it is recorded as your own statement, and later readers see it marked as self-described.\n2. **Action Selection**: Before calling any Turn-Ending Action ([[ tool_enum(turn_ending_actions, \"or\") ]]), state in your reasoning why this specific tool/target is the safest, most accurate next step, and the exact immediate screen change you expect as proof of success."
+  "main_template": "# ROLE\nYou are the Android Device Operator. Your priority is execution accuracy. You must operate the device step-by-step to achieve the goal, avoiding blind attempts or loops.\n\n# OPERATIONAL PRINCIPLES\n- **Action Scope & Interaction Precision**: Always select gestures whose scope of effect matches the boundaries of the target element. Avoid shortcuts or batch actions from popups or menus if they risk affecting non-target UI components on the screen.\n- **Vision-First Priority**: The screenshot is the primary source of truth for the real device state. Always visually inspect the screen state and layout on the screenshot before referencing the element list. Use the 'Visible UI Elements' list strictly as an auxiliary lookup table to retrieve target element indices and coordinates.\n[% if \"wait_for_delay\" in available_tools %]- **Loading & Transitions**: When entering page transitions (e.g., app launching, web page loading, or progress indicators), use `wait_for_delay` to let the screen settle before executing target actions. Some transition states are difficult to discern, such as a thin progress line at the top of the browser screen during webpage loads. Before questioning whether an error has occurred, you can first adopt a waiting strategy to see how the device state evolves. If the state remains ambiguous after waiting, certain UI components might be malfunctioning or failing to load; in this case, consider retrying the action or pivoting to an alternative path.\n[% endif %]- **Large List & Long Text Exploration Strategy (Zero-Miss, Zero-Duplication Single-Pass Principle)**: When traversing large lists, browsing long text bodies, or scanning continuous content feeds, strictly adhere to the single-pass exploration standard:\n  1. **Unidirectional Anchor-Based Traversal (Zero-Miss)**: Maintain a consistent, unidirectional scan (e.g., uniform downward scrolling). Before each scroll, identify the bottom-most visible item/text segment as your visual anchor and carry that anchor plus the scan direction in short-term memory or the traversal ledger. After the scroll, evaluate this handoff before doing anything unrelated: if the anchor remains visible with new content beyond it, record the new content and continue in the same direction without scrolling back to verify; if the anchor is missing, continuity is uncertain, so perform at most one minimal reverse recovery to re-establish overlap, then resume the original direction. While the traversal's declared exit condition remains unresolved, keep this traversal active and do not advance to another milestone or mark it complete.\n  2. **Boundary-Proven Completion**: A single scroll that reveals no new content is not sufficient evidence that the list is complete. For an exhaustive traversal, stop only when an explicit end-of-list indicator is visible, or when one additional successful swipe in the same direction and within the same list container leaves the same final anchor visible with no new items and no loading state. This boundary probe must remain unidirectional; never reverse direction merely to prove completion. If the task declares an earlier exit condition (for example, find one verified match or process N items), that explicit condition may end the traversal without reaching the list boundary.\n  3. **Memory & Plan-Driven Deduplication (Zero-Duplication)**: Systematically log extracted item names, identifiers, or processing states into notes or memory as you progress. After every screen transition, cross-reference visible items against your recorded ledger and strictly interact only with newly surfaced, unrecorded items to eliminate redundant actions on overlapping elements. Proactively maintain subtasks in `task_plan` (e.g., segmenting by batch, category, or alphabetical ranges like `a-d`), tracking exact paths and progress to prevent backtracking.\n  4. **Single-Pass Trust & Anti-Oscillation (No Over-Verification)**: Treat recorded notes as verified ground truth. Once a segment is traversed with confirmed anchor continuity and logged, consider it permanently resolved. Do NOT scroll back-and-forth or perform redundant re-scans for \"double-checking\", even if older execution history has been pruned. Resume from the last recorded anchor and direction. Only the single bounded recovery above, or a refreshed/mutated list, permits limited re-verification; otherwise continue the single pass over new content.\n- **Dynamic Monitoring & Reactive Loop Protocol (Monitor-Trigger-Action)**: When executing an active milestone matching `[Loop] <Goal> into note <TargetNote> (Exit: <ExitCondition>; Interval: <Interval>)` or `[Loop:continuous] <Goal> into note <TargetNote> (Interval: <Interval>)` (the milestone grammar itself is defined under Task Plan Grammar below), run this 5-step cyclic state machine:\n  - **Step 1 (Baseline Sync)**: On the initial cycle, observe all visible entries/metrics in the primary monitoring view and save the full snapshot into `<TargetNote>`; that note is the persistent baseline and diffing ledger you cross-reference and append to on every later cycle.\n  - **Step 2 (Pacing & Refresh)**: Adhere strictly to the exact duration declared in `<Interval>`, then execute a refresh action (e.g., pull-to-refresh, sync, or reload) on the primary monitoring view. Every turn adds seconds to tens of seconds of inference and transport on top of any explicit wait, so calibrate against the `T+` offsets of the previous checks: shorten the explicit wait by the overhead you observe, so that consecutive checks land on the declared cadence instead of drifting later each cycle.\n  - **Step 3 (Incremental Diff)**: Cross-reference refreshed screen items against `<TargetNote>`. If Zero Delta (no new events), append a timestamped check entry to `<TargetNote>` and skip to Step 5. If Positive Delta (new events found), proceed to Step 4.\n  - **Step 4 (Atomic Trigger & Return-to-Base)**: Interact with newly surfaced items to handle the triggered sub-action, append extracted details to `<TargetNote>`, and **immediately navigate back to the primary monitoring view**.\n  - **Step 5 (Ledger Advance)**: In `task_plan`, mark current check subtask as `[x]` (e.g., `  - [x] Polling Check #N: ...`), initialize next check as `[/]` (e.g., `  - [/] Polling Check #(N+1): ...`), and preserve parent `[Loop]` milestone as `[/]`.\n\n# SYSTEM WORKFLOW: SAFETY NET & EXECUTION INCIDENTS\nYour decisions pass through downstream pipeline guardians. Understanding them tells you how to read your history and how to recover:\n- **Pre-Execution Safety Net (vetted single actions only)**: Before a single Turn-Ending Action fires, the system re-checks the live screen for your target (element tree first, pixel comparison as fallback) and self-corrects small coordinate drift. If the target has disappeared, shifted beyond tolerance, or is covered by another element, the action is NOT executed.\n- **Execution Incident (yours to resolve)**: When an action is intercepted, rejected by the device, or a burst aborts midway, no other agent repairs it. The system opens an Execution Incident and shows it to you as an `--- Execution Incident (OPEN) ---` block above your observation: the facts (what was blocked, why, the recorded target, the likely trigger action) and category-specific evidence. The incident stays open, escalating on each consecutive failed turn, until one of your Turn-Ending Actions is dispatched without error; closing means the execution channel works again, not that the blocked intent was achieved, and a one-turn `--- Execution Incident (CLOSED ...) ---` notice then asks you to settle that intent against the plan. Treat the block as the first thing to read in the turn, then re-observe the live screen. Often the right move is not a repair at all: if the screen has moved past the blocked action (an ad finished, a dialog closed by itself), continue with the plan. If the intent is still pending, diagnose the cause explicitly in your reasoning and act on it; a verbatim retry of the blocked action is not a diagnosis. Two exceptions: if the target is visibly still on screen, the safety net misfired and one vetted retry is fine; and the recorded target coordinates may be reused inside a Fast-Action Burst as an acceptable guess.\n- **User Guidance**: A `--- User Guidance ---` block in your observation is an instruction from the user watching the run, relayed by the system as an external interruption like the stop signal. It outranks the task plan and its check lines: edit the plan to match, check lines included.\n{% if transcript_history %}- **Reading Your History**: The earlier turns of this conversation are your raw execution history. Each committed turn ends with a `--- Action Execution Result (T+mm:ss) ---` message: `Status: dispatched` means the device accepted your Turn-Ending Action (whether it had the intended effect is yours to judge from the next observation); `Status: failed` with an `Error:` line (starting `Intercepted by Pre-Execution Safety Net` or `Execution failed`) is an execution incident, and for a burst it names which member failed and that the rest were not executed. Screenshots older than a few turns are replaced by a `--- Historical Visual Transition ---` summary of what changed on screen, and old UI element lists are dropped. Compressed spans render as `[Era N | Steps a–b | T+.. → T+..]` blocks: ① a merged synopsis (entry/exit state, verified facts, unresolved items, failed paths, entities), ② segment titles, ③ a per-step action ledger; a recall-only era shows a period paragraph plus a `(Step-level ledger via search_history for steps a–b)` line[% if \"search_history\" in available_tools %]; query that step range with `search_history` for the full per-step ledger[% endif %]. After a process restart a `[Restored history]` block precedes the conversation. Every timestamp is a session-relative `T+mm:ss` offset.\n{% else %}- **History Markers**: In '--- Execution History ---', an intercepted step shows `(Intercepted by Pre-Execution Safety Net)`, a burst shows `[Fast-Action Burst]` with each member's outcome, and a blocked step's `[Result]` line starts with `Error:`. Use them to trace how the current screen state was reached. Step times are session-relative offsets.\n{% endif %}\n# OBJECTIVE & PLAN\nInitial Goal: {{ initial_goal }}\n\n## Current Plan & Execution History\n{{ plan_and_history }}\n\n# TOOL USE PROTOCOL: PRE-DECISION EXPLORATION VS. TURN-ENDING ACTIONS\nYou operate within a multi-step framework that splits tools into two distinct classes. You must understand this flow to gather details safely before committing to physical actions:\n1. **Result-Dependent Pre-Decision Tools**:\n   - *What they are*: Helper/Subagent tools ([[ tool_enum(helper_tools) ]]), ADB/task tools ([[ tool_enum(adb_tools) ]]), and memory tools whose result must be inspected ([[ tool_enum(memory_tools) ]]).\n   - *How they work*: Invoke these without a Turn-Ending Action, inspect the returned result, and then decide. Never submit them in the same tool-call list as a Turn-Ending Action: the action is rejected and nothing executes.\n   - *Per-turn budget*: one turn allows at most {{ max_tool_calls }} tool calls in total; a system message warns you at the last one. Pace exploration so that a Turn-Ending Action, or at least a note save, fits before the budget runs out.\n2. **Write-Through Memory Tools** (`save_note`, `update_note`, `append_note`):\n   - May run alongside the turn's Turn-Ending Action (or Fast-Action Burst) only when recording facts already observed in the current context. If the note content depends on the action's result, wait for the next observation before writing it. Never write an action's expected outcome as if it had already been observed.\n3. **Turn-Ending Actions**:\n   - *What they are*: Physical device actions ([[ tool_enum(physical_actions) ]]).\n   - *How they work*: These tools interact with the physical device or alter the operational flow. Executing any of these tools terminates your turn. A turn ends in exactly one of two execution tiers:\n     - **Vetted Single Action (default)**: one Turn-Ending Action, vetted by the Pre-Execution Safety Net; a flaky dispatch is retried once. Use this for every ordinary step.\n     - **Fast-Action Burst (time-critical only)**: two to {{ max_burst_actions }} Turn-Ending Actions submitted in the same tool-call list, in execution order. They fire back to back with NO safety net, NO retries and NO screenshot in between; the first failure aborts the rest. This is your instrument against turn latency: every decision turn costs several seconds of model inference and transport while the device keeps moving, so a target that exists only in a short window after a summoning action (auto-dismissing overlays, temporary message bars, snackbar buttons, menus or media control bars with short timeouts) WILL be gone if you tap the trigger and wait for the next turn to tap the target. Recognize these situations proactively from the screen (a bar that fades, a countdown, a toast with a button) and emit the summoning action and the target action together as one burst, summoning action first. Use a burst only for such transient targets or when sub-second sequencing is itself the requirement[% if \"wait_for_delay\" in available_tools %]; it may include `wait_for_delay` to pace the sequence[% endif %]. Coordinates normally must come from the live screen data; the single exception is the transient target inside a burst, which is invisible by definition at decision time: there you may reuse the coordinates recorded for it in your history (or in an open Execution Incident) exactly as they were observed, provided the summoning action in the same burst restores the state they belonged to. Because nothing is vetted, you own the risk: justify every burst member in your reasoning, and never use a burst to batch ordinary steps for speed.\n\n# THE THREE-PHASE COGNITIVE PROTOCOL\nIn every turn, think through these three phases in this order. Before calling a Turn-Ending Action, your reply carries one short paragraph of connected prose reflecting these three phases; that written text is kept in the execution history and shown to the user.\n\n## Phase 1: Observation & Diagnosis\n1. **Visual Observation & State Verification**: You must first examine the screenshot and describe the visual screen state before evaluating actions.\n   - *Visual Description*: Describe the current visual layout, key visible UI components, active screen state, and any unexpected popups or overlays shown on the screenshot.\n   - *State Verification*: Compare the observed visual state against the intended outcome of the previous action to confirm whether the transition succeeded.\n   - *Side-Effect & Anomaly Check*: Verify whether any unintended screen changes, unwanted dialogs, or unexpected UI state alterations occurred.\n   - *Drift/Regression Audit*: Has the UI drifted to an incorrect screen, or Regressed back to a previous screen (e.g. from an accidental browser back-navigation)?\n   - *Stuck/Transition state*: Is there a loading progress indicator (active transition) or is it a frozen screen (static stuck)?\n2. **Path Decision (Recover vs. Adapt)**: Encourage flexible problem-solving. First, evaluate if the current path can still be recovered or advanced (e.g., dismissing a blocker, retrying, or restoring the view). If the current approach is blocked or unreliable, do not get stuck—flexibly pivot to alternative solutions or different UI paths to achieve the same goal.\n3. **Verify & Diagnose (Recommended Diagnosis Triggers & Loop Exemptions)**: Consider the diagnostic tool (`ask_diagnoser`) during the Pre-Decision Exploration stage if you detect any of the following symptoms:\n   - **Action Loop or State Stagnation**: You are about to execute the exact same physical action or click the same target for a 3rd consecutive time, or you find yourself alternating between the same actions (e.g., swiping up then down repeatedly) in a cyclical loop. This also applies if the current screen and 'Visible UI Elements' list are virtually identical to the previous step, or oscillating between two identical states, even though you executed a physical action.[% if \"search_history\" in available_tools %] Choose the tool by the question you need answered: `ask_diagnoser` when the question is why the action is not taking effect (logs, video), `search_history` when the question is what exactly you did or saw earlier (it returns step numbers[% if \"replay_steps\" in available_tools %]; `replay_steps` then gives the full record of a step[% endif %][% if \"get_step_screenshot\" in available_tools %]; `get_step_screenshot` its stored screenshot[% endif %]).[% endif %]\n     *EXEMPTION FOR PLANNED LOOPS*: Periodic pull-to-refresh actions (with planned wait intervals), standard \"inspect candidate -> return to list\" navigations across distinct items, and purposeful continuous swipes (e.g., scrolling to drain battery or traverse long content) are valid planned operations and do NOT call for diagnosis, provided you are making progress or adhering to the planned loop pacing.\n{% if verification_active %}   - **Ambiguous Verification Finding**: Use `ask_diagnoser` only when a finding's cause is unclear, the evidence conflicts, or no safe local correction is evident. A verification finding alone is not a diagnosis trigger.\n{% endif %}   - **Unexpected UI Drift or App Crash**: An unexpected OS popup, permissions dialog, system crash box, or redirect to home screen occurred.\n   - **Visual Discrepancies/Uncertainty**: You see a loading progress spinner for more than 2 consecutive steps, or you are unsure why an action failed to trigger the expected screen change.\n\n## Phase 2: Planning & Memory Preservation\n1. **Live Sub-goal Ledger**: `task_plan` has two layers. The top-level milestones are the Planner's strategy: change only their status, or their text when you deliberately replan. Everything nested beneath them is YOUR ledger of what you are doing right now, written as you go, never reconstructed at milestone completion. Invariant: the active milestone `[/]` always carries exactly one `[/]` sub-goal naming the current sub-goal; when that sub-goal itself takes several actions, nest a `[/]` sub-sub-goal (4 spaces) under it for the current action. Write the ledger at sub-goal boundaries, with `update_note` in the same tool-call list as the Turn-Ending Action: when a sub-goal ends, settle its leaf against what this screen shows (`[x]` achieved, `[!]` blocked with a one-line reason) and open the `[/]` leaf for the next one, phrased as the outcome you expect (e.g., `  - [/] Open route options for SFO` / `    - [/] Tap \"Directions\" so the transit/driving tabs appear`). Turns that stay inside the same sub-goal (waiting for a load, a retry after an intercepted action, consecutive scrolls) need no plan write; settled leaves stay in the plan as the record. The system only intervenes when the ledger is structurally broken (no `[/]` leaf under the active milestone) or stale (several action turns without any plan change): the action is bounced back once so you can record the ledger first. Mark a milestone `[x]` only after visual confirmation and only once its leaves are settled. Keep the plan a pure Markdown checklist; its grammar is machine-enforced:\n{{ plan_grammar }}\n{% if checks_active %}   - *Check Lines*: `verify:` lines tell you what counts as complete; the judgment itself belongs to the system, so never declare a check passed or record a conclusion on its behalf. Take no extra actions for `assert:` lines and never construct state to satisfy one. Keep existing check lines verbatim when you rewrite the plan: the system restores deleted ones unless user guidance called for the change, and adding new ones is fine. Mark completions per the grammar as usual; checking runs in the background and never blocks you.{% if midway_checks_active %} A failed `verify:` reopens its milestone at most {{ checkpoint_max_repairs }} times; once that budget is spent, its `finding:` line disappears and the failure stands as the recorded result, so stop repairing it.{% endif %}\n{% endif %}   - *Surgical Plan Edits*: Modify `task_plan` with targeted `update_note` (target/replacement) edits. A full `save_note` rewrite that rewords historical top-level milestones whose status you did not change is automatically rejected by the system.\n   - *Loop Form of the Ledger*: When executing a `[Loop]` milestone (e.g., candidate iteration or periodic monitoring), the sub-goals are the iteration items: log each concrete iteration in `task_plan` as you proceed (e.g., `  - [x] Candidate #1 (Subject/ID): Verified and logged`, and add `  - [/] Candidate #2: Inspecting...`). In monitoring tasks, log each cycle with the session-relative time from the `# CURRENT OBSERVATION [T+mm:ss]` header (e.g., `  - [x] Polling Check #1 (T+12:30): Refreshed, no new items, waiting 5m`); those offsets are the only clock you have, for pacing as well as for timestamps. This live ledger prevents you from losing state or repeating past items.\n   - *Loop Exit Evaluation*: In every turn of a bounded `[Loop]`, evaluate whether its Exit Condition has been satisfied (e.g., required data completely found, candidate inspection cap reached, battery threshold hit); once it is legitimately met, mark the top-level `[Loop]` milestone as `[x]` to seamlessly transition to the next phase.\n   **CRITICAL: When all top-level tasks are marked as completed (`[x]`) using the note tool, the system will automatically judge the task as finished. At this point, you do not need to output a Turn-Ending Action.**{% if checks_active %} The system may then run a final review: if acceptance criteria are unmet, it sets the affected milestone back to `[/]` and returns control to you with `[final check]` / `[unmet subgoal]` findings — that is the plan reopening, not an error.{% endif %}\n2. **Preserve Memory & Pre-Action Snapshotting**: The note tools are the only reliable way to persist memory, and using them is zero-cost: saving more notes never burdens you, while forgetting creates risk. Before any UI interaction, perform this risk assessment: \"Will this action irreversibly alter the screen and erase potentially useful information?\" If this risk exists, even if you are not yet certain you will need these details, immediately save the visible critical values to the notes. Likewise, when you find information on the screen that might be relevant to the task, save it before exploring further; use `append_note` to add new information to an existing note, and consolidate lists or information spread across multiple screens into one note for unified processing. Clearly annotate the context in which each piece of information was obtained and organize the data in clear key-value structures. Pay attention to verification when writing notes, but once a final answer is determined, it should be trusted unless there is clear evidence that the existing note is incorrect or outdated.\n3. **Background Tasks & Instrumentation (Optional)**: If the current subgoal requires measuring performance, logging power consumption, or recording traces, you may use ADB tools to start these background processes during the Pre-Decision Exploration stage, prior to physical execution. You have full control over all ADB tasks. If a background task has finished, you must understand the original purpose of starting that task, and record the task's results or relevant extracted data in your notes as needed.\n\n## Phase 3: Target Selection & Physical Execution\n1. **Target Resolution & Index Safety**: The indexed list coordinates are generally accurate, but sometimes they include elements that are not fully visible or are obscured on the screen. You must first analyze the current screenshot to determine which indexes are actually interactable, and prioritize using element indexes (e.g., `target=3`) over raw coordinates or cached state whenever possible. If the target is not present in the indexed list or the bounds are incorrect, use `ask_explorer` first during the Pre-Decision Exploration stage. Remember that swiping, scrolling, or page updates shift indexes and coordinates; always retrieve the fresh index from the latest screen data. A coordinate target must carry `target_description`: a short, meaningful name for what you are aiming at, as a user would call it (e.g. 'play button', 'search input', 'video body'), never a generic 'element' or 'button'. Nothing is inferred on your behalf: it is recorded as your own statement, and later readers see it marked as self-described.\n2. **Action Selection**: Before calling any Turn-Ending Action ([[ tool_enum(turn_ending_actions, \"or\") ]]), state in your reasoning why this specific tool/target is the safest, most accurate next step, and the exact immediate screen change you expect as proof of success."
 }
diff --git a/artemis/agents/operator/operator.py b/artemis/agents/operator/operator.py
index 578cc98..dd1a32d 100644
--- a/artemis/agents/operator/operator.py
+++ b/artemis/agents/operator/operator.py
@@ -71,6 +71,9 @@ DEFERRING_TOOLS = {
     "ask_explorer",
 }
 
+# Bare key names press_key accepts (case-insensitive, optional KEYCODE_ prefix).
+SUPPORTED_PRESS_KEYS = ("ENTER", "BACK", "HOME", "APP_SWITCH")
+
 from artemis.agents.operator.prompts import (
     OPERATOR_MAX_TOOL_ITERATIONS,
     PromptBuilder,
@@ -82,9 +85,9 @@ from artemis.agents.operator.prompts import (
     HistoricalStateHintPromptComponent,
     FeedbackPromptComponent,
     ExecutionIncidentPromptComponent,
-    CheckItemsExplainerPromptComponent,
     BackgroundTasksPromptComponent,
     render_plan_ledger_bounce,
+    ReasoningReminderPromptComponent,
     unwritten_action_streak,
     ToolLimitWarningPromptComponent,
     InjectedInstructionPromptComponent,
@@ -137,6 +140,24 @@ class OperatorNode:
         self._transcript_turn_base: int | None = None
         self._turn_plan_baseline: str | None = None
         self._turn_ledger_streak: int = 0
+        # Whether the previous turn's replies carried no visible reasoning text;
+        # the next observation tail then carries a one-line reminder (no extra
+        # model call). Legacy-path fallback only: with a transcript ledger the
+        # ledger's own ``last_turn_silent`` is authoritative.
+        self._previous_turn_silent: bool = False
+
+    def _previous_turn_was_silent(self) -> bool:
+        """Whether the previous turn carried no visible reasoning text.
+
+        The transcript ledger judges its committed turns itself; the local flag
+        only serves the legacy path, which has no ledger.
+        """
+        from artemis.memory import TranscriptLedger
+
+        ledger = getattr(self.ctx, "transcript_ledger", None)
+        if isinstance(ledger, TranscriptLedger):
+            return bool(ledger.last_turn_silent)
+        return self._previous_turn_silent
 
     def _available_device_actions(self) -> frozenset[str]:
         """Device actions the installed actuator backend provides.
@@ -225,7 +246,6 @@ class OperatorNode:
                     TemplatePromptComponent(),
                     {"template_name": "main_template"},
                 ),
-                (CheckItemsExplainerPromptComponent(), {}),
                 (ExecutionIncidentPromptComponent(), {}),
                 (ObservationPromptComponent(), {}),
                 (ScreenshotSimilarityPromptComponent(), {}),
@@ -233,10 +253,14 @@ class OperatorNode:
                 (InjectedInstructionPromptComponent(), {}),
                 (BackgroundTasksPromptComponent(), {}),
                 (FeedbackPromptComponent(), {}),
+                (ReasoningReminderPromptComponent(), {}),
                 (ToolLimitWarningPromptComponent(), {}),
             ]
         else:
-            components = [(c, {}) for c in components] + [(ToolLimitWarningPromptComponent(), {})]
+            components = [(c, {}) for c in components] + [
+                (ReasoningReminderPromptComponent(), {}),
+                (ToolLimitWarningPromptComponent(), {}),
+            ]
 
         # Active and finished tasks are now passed as arguments
         active_tasks = active_background_tasks or []
@@ -252,6 +276,7 @@ class OperatorNode:
                 "current_step_num": current_step_num,
                 "active_background_tasks": active_tasks,
                 "newly_finished_tasks": newly_finished,
+                "previous_turn_silent": self._previous_turn_was_silent(),
                 "steps": steps,
             }
             kwargs_to_pass.update(extra_kwargs)
@@ -280,6 +305,9 @@ class OperatorNode:
             image_scrub_depth=getattr(cfg, "image_scrub_depth", 3),
             pending_grace_steps=getattr(cfg, "pending_grace_steps", 3),
             xml_scrub_depth=getattr(cfg, "xml_scrub_depth", 1),
+            image_scrub_depth_relaxed=getattr(cfg, "image_scrub_depth_relaxed", None),
+            context_budget_tokens=getattr(cfg, "context_budget_tokens", None),
+            start_ratio=getattr(cfg, "start_ratio", None),
             session_start=session_start if isinstance(session_start, (int, float)) else None,
         )
         # L2/L3 chunk compression (M3) rides the same flag; without a
@@ -337,6 +365,8 @@ class OperatorNode:
         """
         from langchain_core.messages import HumanMessage
 
+        from artemis.memory.transcript import mark_ephemeral
+
         ledger = self._ensure_transcript_ledger(state)
 
         # 1. S region: rendered exactly once per session.
@@ -387,7 +417,6 @@ class OperatorNode:
         builder.add_human_content(f"# CURRENT OBSERVATION [{ledger.elapsed_label()}]")
         components = [
             (PlanRecitationPromptComponent(), {}),
-            (CheckItemsExplainerPromptComponent(), {}),
             (ExecutionIncidentPromptComponent(), {}),
             (ObservationPromptComponent(), {}),
             (ScreenshotSimilarityPromptComponent(), {}),
@@ -395,6 +424,7 @@ class OperatorNode:
             (InjectedInstructionPromptComponent(), {}),
             (BackgroundTasksPromptComponent(), {}),
             (FeedbackPromptComponent(), {}),
+            (ReasoningReminderPromptComponent(), {}),
             (ToolLimitWarningPromptComponent(), {}),
         ]
         for component, extra_kwargs in components:
@@ -407,6 +437,7 @@ class OperatorNode:
                 "active_background_tasks": active_background_tasks or [],
                 "newly_finished_tasks": newly_finished_tasks or [],
                 "steps": steps,
+                "previous_turn_silent": self._previous_turn_was_silent(),
             }
             kwargs_to_pass.update(extra_kwargs)
             await component(builder, state, self.ctx, **kwargs_to_pass)
@@ -418,6 +449,10 @@ class OperatorNode:
             else:
                 tail_content.append(part)
         tail = HumanMessage(content=tail_content)
+        # Per-turn notices (reminders, hints, guidance, incident blocks) are
+        # deleted by the scrub edge once the turn leaves the recent window.
+        if builder.ephemeral_indices:
+            mark_ephemeral(tail, builder.ephemeral_indices)
 
         messages = ledger.render([tail])
         self._transcript_turn_base = len(messages) - 1
@@ -471,12 +506,27 @@ class OperatorNode:
             response = await invoke_llm_with_timeout_message(acomplete(bound_llm, current_messages))
 
             usage = usage_from_message(response)
+            # The ledger's compaction thresholds read the operator's own
+            # prompt size, never the session-wide meter (which the
+            # Planner/Checker/sub-agent calls overwrite). The messages ride
+            # along so the ledger can calibrate its chars-per-token ratio.
+            transcript_ledger = getattr(self.ctx, "transcript_ledger", None)
             if usage is not None:
                 logger.info(
                     f"LLM usage: prompt_tokens={usage['prompt_tokens']}"
                     f" (cached={usage['cached_tokens']}),"
                     f" completion_tokens={usage['completion_tokens']}"
                 )
+                if hasattr(transcript_ledger, "record_prompt_tokens"):
+                    transcript_ledger.record_prompt_tokens(
+                        usage.get("prompt_tokens"), messages=current_messages
+                    )
+            elif hasattr(transcript_ledger, "record_prompt_tokens"):
+                # No usage metadata from the provider: record an estimate so
+                # the start gate and thresholds still see a context base.
+                from artemis.memory.transcript import estimate_prompt_tokens
+
+                transcript_ledger.record_prompt_tokens(estimate_prompt_tokens(current_messages))
 
             if response.content:
                 if isinstance(response.content, str):
@@ -638,18 +688,22 @@ class OperatorNode:
                             "Scratchpad/helper tool call failed. Deferring"
                             f" screen actions: {other_tool_failure_msg}"
                         )
-                        for tc in action_calls:
+                        # Every rejected call needs its own ToolMessage, but the
+                        # full explanation travels once; the rest point at it.
+                        for idx, tc in enumerate(action_calls):
                             tool_outputs.append(
                                 ToolMessage(
                                     tool_call_id=tc["id"],
+                                    name=normalize_name(tc["name"]),
                                     content=(
-                                        "This screen action was rejected"
-                                        " because an accompanying tool call"
-                                        " failed. Error:"
-                                        f" {other_tool_failure_msg}. Currently,"
-                                        " no screen actions have been"
-                                        " executed. Please correct the error"
-                                        " and try again."
+                                        "Not executed: this screen action was"
+                                        " rejected because an accompanying tool"
+                                        f" call failed. Error: {other_tool_failure_msg}."
+                                        " No screen action ran this turn. Correct"
+                                        " the error, then re-issue the action."
+                                        if idx == 0
+                                        else "Not executed: see the accompanying"
+                                        " tool-call error above."
                                     ),
                                     status="error",
                                 )
@@ -667,25 +721,23 @@ class OperatorNode:
                             " Deferring terminal actions."
                         )
 
-                        for tc in action_calls:
+                        for idx, tc in enumerate(action_calls):
                             tool_outputs.append(
                                 ToolMessage(
                                     tool_call_id=tc["id"],
+                                    name=normalize_name(tc["name"]),
                                     content=(
-                                        "Your pre-decision tools have been"
-                                        " successfully processed. However, the"
-                                        " screen action you attempted to"
-                                        " execute was rejected because you are"
-                                        " not allowed to simultaneously"
-                                        " use result-dependent pre-decision"
-                                        " tools and execute physical actions in"
-                                        " the same turn."
-                                        " Currently, no screen actions have"
-                                        " been executed. Please review your"
-                                        " updated context and re-output your"
-                                        " intended screen action."
+                                        "Not executed: this screen action was"
+                                        " deferred because the same turn also"
+                                        " called a result-dependent pre-decision"
+                                        " tool. No screen action ran this turn."
+                                        " Read the tool results above, then"
+                                        " re-issue the action."
+                                        if idx == 0
+                                        else "Not executed: deferred for the same"
+                                        " reason as the screen action above."
                                     ),
-                                    status="success",
+                                    status="error",
                                 )
                             )
 
@@ -713,24 +765,36 @@ class OperatorNode:
                     logger.info(f"Plan ledger gate: bouncing action. {bounce}")
                     for tc in action_calls:
                         tool_outputs.append(
-                            ToolMessage(tool_call_id=tc["id"], content=bounce, status="error")
+                            ToolMessage(
+                                tool_call_id=tc["id"],
+                                name=normalize_name(tc["name"]),
+                                content=bounce,
+                                status="error",
+                            )
                         )
                     action_calls_to_translate = []
                 elif len(action_calls) > burst_cap:
                     # A multi-action turn is a fast-action burst that the Validator
                     # fires without the safety net; cap its length before it runs.
                     validation_errors = True
-                    for tc in action_calls:
+                    burst_error = (
+                        f"Error: {len(action_calls)} Turn-Ending Actions in one"
+                        " turn exceed the fast-action burst limit of"
+                        f" {burst_cap}. Nothing was executed. Re-issue at most"
+                        f" {burst_cap} actions (a burst is for sub-second"
+                        " sequences on transient UI, not for batching normal"
+                        " steps), or a single vetted action."
+                    )
+                    # One ToolMessage per rejected call, full text only on the first.
+                    for idx, tc in enumerate(action_calls):
                         tool_outputs.append(
                             ToolMessage(
                                 tool_call_id=tc["id"],
+                                name=normalize_name(tc["name"]),
                                 content=(
-                                    f"Error: {len(action_calls)} Turn-Ending Actions in one"
-                                    " turn exceed the fast-action burst limit of"
-                                    f" {burst_cap}. Nothing was executed. Re-issue at most"
-                                    f" {burst_cap} actions (a burst is for sub-second"
-                                    " sequences on transient UI, not for batching normal"
-                                    " steps), or a single vetted action."
+                                    burst_error
+                                    if idx == 0
+                                    else "Not executed: see the burst-limit error above."
                                 ),
                                 status="error",
                             )
@@ -750,6 +814,7 @@ class OperatorNode:
                         tool_outputs.append(
                             ToolMessage(
                                 tool_call_id=tc["id"],
+                                name=normalize_name(tc["name"]),
                                 content=error,
                                 status="error",
                             )
@@ -759,6 +824,7 @@ class OperatorNode:
                         tool_outputs.append(
                             ToolMessage(
                                 tool_call_id=tc["id"],
+                                name=normalize_name(tc["name"]),
                                 content="Action Recorded",
                                 status="success",
                             )
@@ -896,6 +962,7 @@ class OperatorNode:
             new_subagent_calls=new_subagent_calls,
             state=state,
         )
+        self._previous_turn_silent = not (raw_thinking and raw_thinking.strip())
 
         # 8b. Transcript path: hold this turn's messages (observation tail +
         # tool-loop products) for commit at the next build, when the turn's
@@ -1276,6 +1343,10 @@ class OperatorNode:
                     "normalized_start_coordinates": [nx1, ny1],
                     "normalized_end_coordinates": [nx2, ny2],
                     "duration": duration,
+                    # A directional scroll keeps the direction the agent issued so
+                    # history and replays render "Swiped up (...)" rather than a
+                    # bare coordinate path.
+                    **({"direction": str(target)} if kind == "direction" else {}),
                     **({"target_description": described} if described else {}),
                 }
             ], None
@@ -1290,9 +1361,15 @@ class OperatorNode:
                     f"Error: 'key' must be a string, got {type(key).__name__}.",
                 )
 
-            normalized_key = key[8:] if key.startswith("KEYCODE_") else key
-            if normalized_key not in ["ENTER", "BACK", "HOME", "APP_SWITCH"]:
-                return [], f"Error: Unsupported key '{key}'."
+            normalized_key = key.strip().upper()
+            if normalized_key.startswith("KEYCODE_"):
+                normalized_key = normalized_key[len("KEYCODE_") :]
+            if normalized_key not in SUPPORTED_PRESS_KEYS:
+                return (
+                    [],
+                    f"Error: Unsupported key '{key}'. Supported keys:"
+                    f" {', '.join(SUPPORTED_PRESS_KEYS)}.",
+                )
             return [{"action": "press_key", "keycode": f"KEYCODE_{normalized_key}"}], None
 
         elif tool_name == "manage_app":
diff --git a/artemis/agents/operator/prompts.py b/artemis/agents/operator/prompts.py
index 2c3f3e9..258ffb4 100644
--- a/artemis/agents/operator/prompts.py
+++ b/artemis/agents/operator/prompts.py
@@ -17,6 +17,7 @@ from functools import lru_cache
 import io
 import json
 from pathlib import Path
+from typing import NamedTuple
 
 from jinja2 import Environment, StrictUndefined, Template
 from langchain_core.messages import HumanMessage, SystemMessage
@@ -31,9 +32,8 @@ from artemis.tools.command_tool import (
     _is_output_long,
 )
 from artemis.utils.logger import get_logger
-from artemis.utils.notes import get_note_file_path
 from artemis.utils.plan_grammar import parse_plan, render_plan_grammar_spec
-from artemis.utils.task_tree import SELF_DESCRIBED_MARKER
+from artemis.utils.task_tree import SELF_DESCRIBED_MARKER, action_intent_phrase
 
 logger = get_logger(__name__)
 
@@ -149,11 +149,19 @@ class PromptBuilder:
         self.system_parts = []
         self.human_parts = []
         self.human_footer = None
+        #: Indices into ``human_parts`` of blocks that only matter this turn (see
+        #: ``artemis.memory.transcript.EPHEMERAL_BLOCKS_KEY``).
+        self.ephemeral_indices: list[int] = []
 
     def add_system_text(self, text: str):
         self.system_parts.append(text)
 
-    def add_human_content(self, content: str | dict):
+    def add_human_content(self, content: str | dict, *, ephemeral: bool = False):
+        """Append a block to the observation. ``ephemeral=True`` marks it as valid
+        for this turn only: the transcript scrub edge deletes it at depth K, so it
+        never reaches the frozen history or a chunk capsule."""
+        if ephemeral:
+            self.ephemeral_indices.append(len(self.human_parts))
         self.human_parts.append(content)
 
     def set_human_footer(self, content: str):
@@ -171,10 +179,12 @@ class PromptBuilder:
         if self.human_footer:
             human_content.append({"type": "text", "text": self.human_footer})
 
-        return [
-            SystemMessage(content=system_content),
-            HumanMessage(content=human_content),
-        ]
+        human = HumanMessage(content=human_content)
+        if self.ephemeral_indices:
+            from artemis.memory.transcript import mark_ephemeral
+
+            mark_ephemeral(human, self.ephemeral_indices)
+        return [SystemMessage(content=system_content), human]
 
 
 class PromptComponent:
@@ -221,18 +231,42 @@ def resolve_operator_prompt_tools(ctx: ArtemisContext) -> frozenset[str]:
     return frozenset(available)
 
 
-def _operator_grammar_flags(ctx: ArtemisContext) -> tuple[bool, bool]:
-    """(include_checks, verification_active) for the template render."""
+def _operator_grammar_flags(ctx: ArtemisContext) -> tuple[bool, bool, bool]:
+    """(midway_checks, final_check, verification_active) for the template render.
+
+    The two check gates are read separately so the grammar and the check-line
+    guidance are worded for what actually runs: with midway checks off there is
+    no repair loop to teach, and with both off the check-line grammar never
+    enters any prompt.
+    """
     setup = getattr(ctx, "execution_setup", None)
-    # Grammar spec assembly is a function of configuration: with both check
-    # gates disabled, the check-line grammar never enters any prompt.
-    include_checks = bool(setup and getattr(setup, "checks_enabled", False))
+    midway = bool(setup and getattr(setup, "midway_checks_enabled", False))
+    final = bool(setup and getattr(setup, "final_check_enabled", False))
     # The rejection/finding diagnosis trigger only exists while a mechanism
     # that can produce rejections or findings is active.
-    verification_active = include_checks or bool(
-        setup and not getattr(setup, "disable_planner_validation", True)
+    verification_active = (
+        midway or final or bool(setup and not getattr(setup, "disable_planner_validation", True))
     )
-    return include_checks, verification_active
+    return midway, final, verification_active
+
+
+def _checkpoint_max_repairs(ctx: ArtemisContext) -> int:
+    """The midway repair budget recited in the static prompt."""
+    setup = getattr(ctx, "execution_setup", None)
+    max_repairs = getattr(setup, "checkpoint_max_repairs", None)
+    return max_repairs if isinstance(max_repairs, int) else 2
+
+
+def _grammar_render_context(ctx: ArtemisContext) -> dict:
+    """Template variables shared by the static and legacy system renders."""
+    midway, final, verification_active = _operator_grammar_flags(ctx)
+    return {
+        "plan_grammar": render_plan_grammar_spec(midway=midway, final=final),
+        "verification_active": verification_active,
+        "checks_active": midway or final,
+        "midway_checks_active": midway,
+        "checkpoint_max_repairs": _checkpoint_max_repairs(ctx),
+    }
 
 
 # --- M2 template split -----------------------------------------------------------
@@ -282,18 +316,15 @@ def render_transcript_static_system(
 
     available = resolve_operator_prompt_tools(ctx)
     static_template = apply_operator_prompt_contract(static_template, available_tools=available)
-    include_checks, verification_active = _operator_grammar_flags(ctx)
     return Template(static_template).render(
         initial_goal=state.initial_goal,
         subgoals_status="",
         plan_and_history="",
         unified_history="",
-        plan_grammar=render_plan_grammar_spec(include_checks),
-        verification_active=verification_active,
-        checks_active=include_checks,
         transcript_history=True,
         max_burst_actions=_max_burst_actions_for_prompt(),
         max_tool_calls=OPERATOR_MAX_TOOL_ITERATIONS,
+        **_grammar_render_context(ctx),
     )
 
 
@@ -326,19 +357,15 @@ class TemplatePromptComponent(PromptComponent):
 
         plan_and_history = kwargs.get("plan_and_history", "No plan or history yet.")
 
-        include_checks, verification_active = _operator_grammar_flags(ctx)
-
         full_prompt = Template(prompt_template).render(
             initial_goal=state.initial_goal,
             subgoals_status="",
             plan_and_history=plan_and_history,
             unified_history="",
-            plan_grammar=render_plan_grammar_spec(include_checks),
-            verification_active=verification_active,
-            checks_active=include_checks,
             transcript_history=False,
             max_burst_actions=_max_burst_actions_for_prompt(),
             max_tool_calls=OPERATOR_MAX_TOOL_ITERATIONS,
+            **_grammar_render_context(ctx),
         )
 
         parts = full_prompt.split("# CURRENT OBSERVATION")
@@ -400,7 +427,8 @@ class FeedbackPromptComponent(PromptComponent):
             " address any reverted subgoal accordingly; do not re-litigate"
             " them. [planner] findings are advisory: a lightweight reviewer"
             " had a concern about a plan change that stayed applied — weigh"
-            " the reason against your own observations."
+            " the reason against your own observations.",
+            ephemeral=True,
         )
 
 
@@ -472,7 +500,9 @@ def render_execution_incident(incident: dict, steps: list) -> str:
     kind = incident.get("kind") or "exec_error"
     category = str(incident.get("category") or "general")
     consecutive = int(incident.get("consecutive_failures") or 1)
-    description = incident.get("action_description") or "the planned action"
+    # Intent form ("launch app 'X'"): the action did not happen, so the
+    # past-tense outcome phrase would misreport it as done.
+    description = action_intent_phrase(incident.get("action_description") or "the planned action")
     reason = str(incident.get("reason") or "").strip()
     burst_size = int(incident.get("burst_size") or 1)
     index = int(incident.get("action_index") or 0)
@@ -505,8 +535,8 @@ def render_execution_incident(incident: dict, steps: list) -> str:
         )
     else:
         lines.append(
-            f"What happened: your planned action `{description}` was dispatched, but the"
-            f" device/executor reported: {reason}"
+            f"What happened: your planned action `{description}` could"
+            f" not be executed; the device/executor reported: {reason}"
         )
 
     # --- Category-specific evidence -------------------------------------------------
@@ -547,7 +577,7 @@ def render_closed_incident(closed: dict) -> str:
     """One-turn notice after an incident closes: settle the original intent."""
     opened = closed.get("step_number")
     closed_at = closed.get("closed_at_step")
-    description = closed.get("action_description") or "the blocked action"
+    description = action_intent_phrase(closed.get("action_description") or "the blocked action")
     header = (
         f"--- Execution Incident (CLOSED at Step {closed_at}) ---"
         if closed_at
@@ -567,61 +597,22 @@ class ExecutionIncidentPromptComponent(PromptComponent):
     then a one-turn CLOSED notice asking the Operator to settle the intent.
 
     Reads ``state.open_incident`` / ``state.last_closed_incident`` (both written
-    by the Validator). The block is its own text part of the observation tail,
-    so the transcript ledger keeps it verbatim: the whole resolution effort
-    stays legible across turns.
+    by the Validator). Both blocks are ephemeral: the open block is re-rendered
+    every turn the incident stays open, and the step record already carries the
+    failed execution result, so older copies add nothing to the history.
     """
 
     async def __call__(self, builder: PromptBuilder, state: State, ctx: ArtemisContext, **kwargs):
         incident = getattr(state, "open_incident", None)
         if isinstance(incident, dict) and incident.get("reason"):
             builder.add_human_content(
-                render_execution_incident(incident, kwargs.get("steps") or [])
+                render_execution_incident(incident, kwargs.get("steps") or []),
+                ephemeral=True,
             )
             return
         closed = getattr(state, "last_closed_incident", None)
         if isinstance(closed, dict) and closed.get("kind"):
-            builder.add_human_content(render_closed_incident(closed))
-
-
-class CheckItemsExplainerPromptComponent(PromptComponent):
-    """Behavioral guidance for check lines, rendered iff the CURRENT plan
-    actually contains check lines (content-driven, not switch-driven: a resumed
-    plan carrying check lines still gets the explanation)."""
-
-    async def __call__(self, builder: PromptBuilder, state: State, ctx: ArtemisContext, **kwargs):
-        if not ctx or not getattr(ctx, "data_engine", None):
-            return
-        try:
-            task_plan_path = get_note_file_path(ctx.data_engine.base_dir, "task_plan")
-            if not task_plan_path.exists():
-                return
-            snapshot = parse_plan(task_plan_path.read_text(encoding="utf-8"))
-        except Exception as e:
-            logger.error(f"Failed to parse plan for check-items explainer: {e}")
-            return
-        if not snapshot.all_check_items:
-            return
-        setup = getattr(ctx, "execution_setup", None)
-        max_repairs = getattr(setup, "checkpoint_max_repairs", None)
-        if not isinstance(max_repairs, int):
-            max_repairs = 2
-        builder.add_human_content(
-            "--- About the plan's check lines ---\n"
-            "The task plan declares `- verify:` / `- assert:` check lines (see Task"
-            " Plan Grammar). Use `verify:` lines to confirm your work is complete,"
-            " but never declare a check passed yourself or record conclusions on"
-            " its behalf. Take NO extra actions for `assert:` lines and never"
-            " construct or fake state to satisfy one. Check lines must not be"
-            " deleted or reworded (deletions are automatically restored by the"
-            " system); keep them verbatim when rewriting the plan — adding new ones"
-            " is allowed. Simply mark completions per the plan grammar as usual;"
-            " checking runs asynchronously in the background and does not block you."
-            f" A failed `verify:` reopens its milestone at most {max_repairs} time(s);"
-            " once that repair budget is exhausted, its standing `finding:` line"
-            " disappears and the failure stands as the recorded result — do not"
-            " keep repairing it."
-        )
+            builder.add_human_content(render_closed_incident(closed), ephemeral=True)
 
 
 class BackgroundTasksPromptComponent(PromptComponent):
@@ -700,6 +691,26 @@ _LEDGER_BOUNCE_TAIL = (
 )
 
 
+#: One-line tail notice for the turn after a turn whose replies carried no visible
+#: reasoning text. Thinking-mode models satisfy "reason first" inside their thought
+#: channel and emit bare tool calls; the reminder costs no extra model call.
+REASONING_REMINDER = (
+    "--- Reminder ---\n"
+    "Your previous turn carried no visible reasoning text (internal thinking is not"
+    " shown). This turn, write one short paragraph of plain prose before calling a"
+    " Turn-Ending Action: what the screen shows, whether the last action worked, and"
+    " what you do next and why."
+)
+
+
+class ReasoningReminderPromptComponent(PromptComponent):
+    """Renders :data:`REASONING_REMINDER` when the previous turn was silent."""
+
+    async def __call__(self, builder: PromptBuilder, state: State, ctx: ArtemisContext, **kwargs):
+        if kwargs.get("previous_turn_silent"):
+            builder.add_human_content(REASONING_REMINDER, ephemeral=True)
+
+
 def render_plan_ledger_bounce(task_plan: str, streak: int, stale_turns: int) -> str | None:
     """Return a plan-ledger validation error, if any."""
     snapshot = parse_plan(task_plan or "")
@@ -735,27 +746,128 @@ class ToolLimitWarningPromptComponent(PromptComponent):
                 "\nWarning: your last turn used up its tool-call budget without a"
                 " Turn-Ending Action. Re-examine the task goal and your plan;"
                 " the current approach may not be the right path. If the cause"
-                " is unclear, ask_diagnoser can help."
+                " is unclear, ask_diagnoser can help.",
+                ephemeral=True,
             )
 
 
+#: Header of the user-guidance block (shared by the Flash runner and the Pro
+#: operator; the operator's static prompt explains the channel once).
+USER_GUIDANCE_MARKER = "--- User Guidance ---"
+
+
+#: Prefix of the persistent user-instruction line (see :func:`render_user_guidance`).
+USER_INSTRUCTION_PREFIX = "User instruction"
+
+
+class UserGuidance(NamedTuple):
+    """The two observation blocks delivering a mid-run user instruction.
+
+    ``wrapper`` is the per-turn ``--- User Guidance ---`` framing (relay
+    notice, rank, release-loop wording): it is marked ephemeral and leaves
+    with the recent window. ``body`` is the verbatim instruction as one
+    self-contained line; it is added as a regular block so it stays in the
+    active window until the turn is chunk-compressed, at which point the
+    chunk's ``user_lines`` carry it verbatim. Standing instructions remain
+    visible after the turn in which they arrived.
+    """
+
+    body: str
+    wrapper: str
+
+
+def render_user_instruction(instruction: str, *, offset_label: str | None = None) -> str:
+    """The persistent one-line body: ``User instruction (T+mm:ss): "..."``.
+
+    ``offset_label`` is the session-relative time the instruction was
+    delivered when the call site has it; omitted otherwise.
+    """
+    when = f" ({offset_label})" if offset_label else ""
+    return f'{USER_INSTRUCTION_PREFIX}{when}: "{instruction}"'
+
+
+def render_user_guidance(
+    instruction: str,
+    *,
+    release_loop: bool = False,
+    has_plan: bool = True,
+    offset_label: str | None = None,
+) -> UserGuidance:
+    """The observation blocks delivering a mid-run user instruction.
+
+    One rendering for both profiles: the instruction is stated as what it is (an
+    external interruption from the user, relayed by the system) rather than as
+    advice to be weighed, and it explicitly outranks the plan and its check lines.
+    Returns ``(body, wrapper)``; callers add ``wrapper`` with ``ephemeral=True``
+    and ``body`` without (see :class:`UserGuidance`).
+    """
+    rank = (
+        " It outranks the task plan and its check lines: edit the plan to match,"
+        " check lines included."
+        if has_plan
+        else " It outranks your current milestones: adjust them to match."
+    )
+    lines = [
+        USER_GUIDANCE_MARKER,
+        "The user watching this run sent the instruction quoted below; the system"
+        " relays it as an external interruption, like a stop signal." + rank,
+        "Act on it from this turn: reconcile it with the current screen and recent"
+        " history, then choose the next action. The quoted line stays in your"
+        " history as a standing instruction until the user sends another.",
+    ]
+    if release_loop:
+        lines.append(
+            "The user has explicitly authorized stopping any ongoing monitoring loop;"
+            " you may now wrap up and complete the task."
+        )
+    return UserGuidance(
+        body=render_user_instruction(instruction, offset_label=offset_label),
+        wrapper=chr(10).join(lines),
+    )
+
+
+def add_user_guidance(builder: PromptBuilder, guidance: UserGuidance) -> None:
+    """Adds the two guidance blocks: the wrapper ephemeral, the body persistent."""
+    builder.add_human_content(guidance.wrapper, ephemeral=True)
+    builder.add_human_content(guidance.body)
+
+
 class InjectedInstructionPromptComponent(PromptComponent):
+    """The mid-run user instruction: an ephemeral wrapper plus the persistent
+    verbatim body (:class:`UserGuidance`).
+
+    The step record also keeps the instruction verbatim (``extra_metadata``),
+    which is what the chunk ledger renders once the turn is compressed.
+    """
+
     async def __call__(self, builder: PromptBuilder, state: State, ctx: ArtemisContext, **kwargs):
         injected = getattr(state, "injected_instruction", None)
         if injected:
-            builder.add_human_content(
-                f"\n--- User Guidance ---\n"
-                f"The user observing your progress has provided the following"
-                f" feedback or correction:\n"
-                f'"{injected}"\n\n'
-                f"Please review this guidance, evaluate it against your current"
-                f" screen state and recent history, "
-                f"and integrate it into your reasoning. Use it to refine your"
-                f" task plan and determine the "
-                f"most appropriate next action."
+            release_loop = bool(getattr(state, "user_stop_requested", False))
+            add_user_guidance(
+                builder,
+                render_user_guidance(
+                    injected,
+                    release_loop=release_loop,
+                    has_plan=True,
+                    offset_label=_session_offset_label(ctx),
+                ),
             )
 
 
+def _session_offset_label(ctx: ArtemisContext | None) -> str | None:
+    """The transcript ledger's ``T+mm:ss`` label when a ledger is attached."""
+    ledger = getattr(ctx, "transcript_ledger", None) if ctx is not None else None
+    elapsed_label = getattr(ledger, "elapsed_label", None)
+    if ledger is None or not callable(elapsed_label):
+        return None
+    try:
+        label = elapsed_label()
+    except Exception:
+        return None
+    return label if isinstance(label, str) and label else None
+
+
 class ScreenshotSimilarityPromptComponent(PromptComponent):
     """Background check: compare current screen against post-action screenshots of the last few steps.
 
@@ -824,7 +936,7 @@ class ScreenshotSimilarityPromptComponent(PromptComponent):
         if matched_step_nums:
             steps_str = ", ".join(matched_step_nums)
             note_text = f"Note: the screen is unchanged since step {steps_str} (pixel-identical)."
-            builder.add_human_content(note_text)
+            builder.add_human_content(note_text, ephemeral=True)
 
     def _count_differing_pixels(
         self,
@@ -947,5 +1059,6 @@ class HistoricalStateHintPromptComponent(PromptComponent):
             builder.add_human_content(
                 f"Historical state hint: current screen closely resembles the"
                 f" post-action screen from Step {best_step_number}. Use"
-                " search_history / replay_steps only if its details are needed."
+                " search_history / replay_steps only if its details are needed.",
+                ephemeral=True,
             )
diff --git a/artemis/agents/outputter/outputter.md b/artemis/agents/outputter/outputter.md
index 8b17501..8a21164 100644
--- a/artemis/agents/outputter/outputter.md
+++ b/artemis/agents/outputter/outputter.md
@@ -21,7 +21,7 @@ The user explicitly requested to extract the following information:
 # Instruction
 
 1. **Assess Confidence & Verify**: Based on the execution history, final state, and the target information to extract, determine if you can confidently formulate the final answer. If the current evidence is insufficient or you require more granular proof, you **MUST** actively gather information and details using your tools first. If your tools fail (e.g., return errors or time out), or if the steps were skipped/not observed, you **MUST** report this lack of evidence honestly. Do not assume, guess, or fabricate any unobserved steps.
-2. **Write Persistent Report**: Once your investigation is complete, you **MUST** synthesize your findings into a beautifully formatted Markdown summary report (detailing Status [SUCCESS/FAILED/PARTIAL], Evidence, and a clear explanation). You must write this report to persistent memory under the key "output" by calling:
+2. **Write Persistent Report**: Once your investigation is complete, you **MUST** synthesize your findings into a Markdown summary report (detailing Status [SUCCESS/FAILED/PARTIAL], Evidence, and a clear explanation). You must write this report to persistent memory under the key "output" by calling:
    `save_note(key="output", content="...your markdown report...")`
 3. **Final Response**: Only after saving the report, write a direct, helpful, and jargon-free final summary response to the user. Do not use any XML tags, code block wrappers, or special delimiters—just state the conclusion clearly and naturally, ensuring any extracted target information is clearly presented.
 
diff --git a/artemis/agents/planner/planner.json b/artemis/agents/planner/planner.json
index 2c9a9fb..452e598 100644
--- a/artemis/agents/planner/planner.json
+++ b/artemis/agents/planner/planner.json
@@ -5,7 +5,7 @@
     "capabilities_operator": "## Execution Capabilities\n\nThe execution agent primarily interacts with the mobile device and analyzes screen recordings and logs. It can perform the following types of actions:\n- **UI Interaction**: Tapping, swiping, and entering text on the screen.\n- **App Management**: Launching and stopping specific applications.\n- **Information Retrieval & Analysis**: Reading on-screen text and UI hierarchy, searching the web for external information, querying system logs, and analyzing screen recordings.\n- **Terminal & Background Operations**: Executing arbitrary ADB shell commands on the device for exploration. It is capable of running long-running ADB commands asynchronously in the background as tasks.\n\n### Capability Boundaries & Planning Rules\n- **Cross-App Operations**: When a task requires interacting with multiple applications, split the operations into distinct milestones for each app. Avoid mixing actions for different apps in a single milestone.",
     "output_protocol_initial": "## Task Plan & Scratchpad Protocol\n\n1. **Articulate Thinking**: Begin by reasoning through the 5-step **Systematic Thinking Process** to establish your strategy, funnel approach, bounds, and pre-mortem checks.\n2. **Designate Notes in Milestones & Pre-generate Answer Cards**: If the task involves collecting findings, logging periodic monitoring events, recording candidates, or analytical summaries, designate clear, descriptive note names directly in the milestone descriptions (e.g., `candidates_list`, `monitoring_log`, `schedule_summary`). You can and should invoke the `save_note` tool to pre-generate these structured template files (answer card / scratchpad skeletons with Markdown headers, sections, or tables) before submitting `task_plan`. This provides downstream executors with a clear, ready-to-fill schema.\n3. **Submit Plan**: Submit your initial plan by invoking the `save_note` tool with `key='task_plan'`. Avoid writing the plan only in your text response, as it will only be recognized by the system if submitted via the tool.\n\n### Plan Formatting Rules\n- Format the plan strictly as a Markdown task list starting with `- [ ]` for uncompleted items.\n{{ plan_grammar }}\n- For linear macro-milestones: `- [ ] <Phase Description>`\n- For bounded repetitive, iterative, or periodic polling milestones, tag the item with `[Loop]` and declare its Exit Boundary and Interval (e.g., `- [ ] [Loop] <Overall Loop / Monitoring Goal> (Exit: <Condition>; Interval: <e.g., every 5 minutes>)`).\n- For unbounded continuous monitoring that only the user can stop, tag the item with `[Loop:continuous]` instead (e.g., `- [ ] [Loop:continuous] <Monitoring Goal> (Interval: <e.g., every 5 minutes>)`); never declare a self-serve exit condition for it.\n- **Strict Two-Tier Hierarchy & Loop Subtask Contract**:\n  1. **Subtask Nesting Rule**: ALL individual iteration instances, polling checks, candidate inspections, or baseline setups MUST be formatted as 2-space indented sub-tasks (`  - [ ]`) directly nested under their parent `[Loop]` milestone.\n  2. **Mandatory First-Instance Initialization**: Every `[Loop]` milestone MUST be initialized with its first concrete child sub-task (e.g., `  - [ ] Inspect Candidate #1: ...` or `  - [ ] Polling Check #1 (Baseline & Initial Sync): ...`).\n  3. **No Flattened Cycles**: NEVER elevate individual checks, recurring polling cycles, or candidate inspections to top-level milestones outside the `[Loop]`. Top-level items are reserved exclusively for strategic macro-phases.\n- Ensure the content of the `task_plan` note contains only the task list, excluding introductions, explanations, conversational text, or headers.",
     "examples_initial": "## Master Example: Demonstrating the Complete Cognitive Paradigm\n\n**Goal**: \"Find and summarize all schedule arrangements and venue details for the upcoming November tech conference from my emails.\"\n\n### Naive / Incorrect Approaches:\n1. *Flawed Semantics & Too Granular*:\n- [ ] Tap search icon in Gmail\n- [ ] Type \"November\"\n- [ ] Open first email and tap back\n*(Fails: Micromanages atomic UI taps; assumes emails for November arrangements must have \"November\" in the title or be received in November)*\n2. *Vague & Unbounded Trap*:\n- [ ] Open email and check all emails for conference details\n*(Fails: Unbounded scan trap; causes infinite scrolling and step budget exhaustion on mobile)*\n\n---\n\n### Correct Approach (Full Cognitive Thinking & Robust Plan):\n\n#### Step-by-Step Thinking:\n1. **Intent & Semantic Expansion**:\n   - *Core Objective*: Extract confirmed schedule dates, sessions, and venue info for the November tech conference.\n   - *Semantic Insight*: Conference communications are often sent months in advance (e.g., ticket confirmations or registration emails in August/September). The subject line may say \"Global Developer Summit\", \"Tech Expo Agenda\", or \"Registration Confirmed\" rather than literally \"November conference\".\n   - *Task Composition*: Linear setup (open email app and search) -> Iterative candidate inspection loop (examine each promising email) -> Final consolidation.\n2. **Visual Grounding**:\n   - The device screenshot shows the Home screen with the Gmail app icon visible. The plan must start by opening the email client.\n3. **Tiered Strategy, Funnel Approach & Safeguards**:\n   - *Tier 1 (Optimal)*: Use in-app search with rich semantic keywords (\"conference\", \"summit\", \"schedule\", \"agenda\", \"venue\", \"November\").\n   - *Tier 2 (Fallback)*: If search is unavailable or yields zero results, fallback to chronological scanning of recent 3 months.\n   - *Funnel (Broad Gathering -> Deep Inspection)*: Gather candidate emails from search results; do not discard candidates based solely on list previews. Open each candidate thread to inspect full body details.\n   - *Feasibility Boundary*: Cap the candidate email inspection pool at top 15 emails to prevent infinite scrolling.\n4. **Risk Pre-mortem**:\n   - *Risks*: Promotional marketing spam; conflicting drafts with preliminary dates; cancelled sessions.\n   - *Defensive Check*: Instruct downstream executor to filter out promotional newsletters, verify session timestamps, and confirm final venue address.\n5. **Milestone Granularity & Scratchpad Blueprint**:\n   - Focus milestones on business outcomes (search, inspect candidates, consolidate), avoiding micromanaged click-by-click steps.\n   - Use indented sub-tasks to guide the loop of inspecting each candidate email, initializing with Item #1 and adding subsequent items as they are identified. This prevents the agent from losing state or re-inspecting the same items.\n   - Designate note `november_conference_summary` as the destination for recording findings and pre-generate the structured template note.\n\n#### Tool Invocation:\n1. Pre-generate designated answer card note template:\n`save_note(key='november_conference_summary', content='# November Tech Conference Summary\\n\\n## Key Details\\n- Conference Name: \\n- Dates: \\n- Venue / Address: \\n\\n## Daily Schedule & Sessions\\n(To be populated during email inspection)\\n')`\n\n2. Submit milestone plan:\n`save_note(key='task_plan', content='- [ ] Open email application and search for candidate emails regarding the November tech conference (Search targeted keywords like \"conference\", \"summit\", \"agenda\", \"venue\"; if search is unavailable, fallback to scanning recent 3 months, capped at top 15 emails)\\n- [ ] [Loop] Inspect candidate emails and record verified schedule sessions and venue details into note `november_conference_summary` (Exit: All key conference details identified OR candidate pool exhausted / max 15 inspected)\\n  - [ ] Inspect Candidate #1: Open candidate, filter out non-relevant content, check body for scheduling/venue, and log findings if present\\n- [ ] Review and consolidate all extracted information in `november_conference_summary` into a clear, finalized conference itinerary')`\n\n#### Content of `task_plan` Note:\n- [ ] Open email application and search for candidate emails regarding the November tech conference (Search targeted keywords like \"conference\", \"summit\", \"agenda\", \"venue\"; if search is unavailable, fallback to scanning recent 3 months, capped at top 15 emails)\n- [ ] [Loop] Inspect candidate emails and record verified schedule sessions and venue details into note `november_conference_summary` (Exit: All key conference details identified OR candidate pool exhausted / max 15 inspected)\n  - [ ] Inspect Candidate #1: Open candidate, filter out non-relevant content, check body for scheduling/venue, and log findings if present\n- [ ] Review and consolidate all extracted information in `november_conference_summary` into a clear, finalized conference itinerary",
-    "check_generation": "## Declaring Verification Standards (check lines)\nYou may attach check lines to the plan; an independent Checker judges them asynchronously.\n\n- **User-declared expectations become `- assert:` lines.** Whenever the user's goal states an explicit expectation (\"should show X\", \"must not crash\", \"the toast Y should appear\"), declare it as an assert line preserving the user's wording verbatim. Expectations about the whole run or the final state use the `@end` suffix (task-level lines at the end of the plan).\n- **`- verify:` lines only for milestones that genuinely need acceptance checks** — completion points of irreversible operations, or milestones that directly contribute to the final goal. Do NOT attach a verify line to every subgoal: restraint is an explicit requirement (checking cost scales with the number of check lines).\n- **Do not fabricate assertions** for subgoals that have nothing verifiable. Rewrite transient expectations as persistently probeable state wherever possible (e.g., \"alarm exists in the alarm list\" instead of \"a toast flashed\") — evidence for transient moments only exists if the execution history happened to capture it.\n- **Ordering requirements are post-hoc.** If the user demands \"A must be confirmed before B runs\", still generate the assertion preserving their semantics, but annotate in the plan that ordering is verified retroactively from history — the system performs post-hoc audits and CANNOT block B from executing. Never silently promise enforcement that does not exist.",
+    "check_generation": "## Declaring Verification Standards (check lines)\nYou may attach check lines to the plan. {% if midway_checks %}An independent Checker judges each line in the background when its milestone completes, and a failed verify reopens that milestone for repair{% if final_check %}; a final review at task exit then audits the whole run against the user's goal{% endif %}.{% else %}A final review at task exit judges every line once, from the recorded evidence around each milestone's completion; there is no midway repair loop.{% endif %}\n\n- **User-declared expectations become `- assert:` lines.** Whenever the user's goal states an explicit expectation (\"should show X\", \"must not crash\", \"the toast Y should appear\"), declare it as an assert line preserving the user's wording verbatim. Expectations about the whole run or the final state use the `@end` suffix (task-level lines at the end of the plan).\n- **`- verify:` lines only for milestones that genuinely need acceptance checks** — completion points of irreversible operations, or milestones that directly contribute to the final goal. Do NOT attach a verify line to every subgoal: restraint is an explicit requirement (checking cost scales with the number of check lines).\n- **Do not fabricate assertions** for subgoals that have nothing verifiable. Rewrite transient expectations as persistently probeable state wherever possible (e.g., \"alarm exists in the alarm list\" instead of \"a toast flashed\") — evidence for transient moments only exists if the execution history happened to capture it.\n- **Ordering requirements are post-hoc.** If the user demands \"A must be confirmed before B runs\", still generate the assertion preserving their semantics, but annotate in the plan that ordering is verified retroactively from history — the system performs post-hoc audits and CANNOT block B from executing. Never silently promise enforcement that does not exist.",
     "check_audit": "- **Check Standard Protection**: Check lines (`- verify:` / `- assert:`) declared in the plan are the task's verification standards. FLAG any proposed plan that deletes, weakens, or rewords existing check lines — softening a declared standard is never an acceptable adaptation. Adding new check lines is allowed.",
     "role_validator": "## Role\nYou are the Task Plan Reviewer, a fast advisory second opinion. The Operator has modified the top-level task plan and the change is already applied. Your job is to spot a concrete concern — goal drift, a broken loop contract, a weakened check standard, a logical dead end — and, if there is one, state it with its reason so the Operator can decide. You never block or roll back anything.",
     "validator_guidelines": "## Validation Principles\n- **Goal Alignment**: Ensure the new plan ultimately accomplishes the `Initial Goal` requested by the user. If the Operator has abandoned the core objective or fundamentally altered it, flag the plan.\n- **Logical Coherence**: Verify that the proposed milestones form a logical, achievable sequence to reach the goal. Support valid ongoing iteration/polling subgoals and trigger branches without misconstruing periodic checks as infinite loops. Flag the plan if it introduces contradictory steps, unhandled deadlocks, or obvious logical fallacies.\n{{ plan_grammar }}\n- **Loop & Monitoring Protection**: If the existing plan contains an active `[Loop]` or `[Loop:continuous]` milestone, you MUST FLAG any proposed plan that deletes the milestone or removes its loop tag, as well as any plan that marks a `[Loop:continuous]` continuous monitoring milestone as completed (`[x]`) without an explicit external user stop signal.\n- **Adaptive Acceptance**: The Operator operates in a dynamic environment and may encounter unexpected UI states or dynamic event triggers. You should approve alternative strategies, extra intermediate steps, loop status tracking, or necessary workarounds as long as they serve the primary goal effectively.\n- **Advisory Verdict & Constructive Feedback**: Your verdict is advisory — the change stays applied whether or not you approve it. Approve unless you have a concrete, evidence-backed concern; a vague unease is not a concern. If you flag the plan, give one or two sentences naming the flaw or goal deviation and the correction you suggest, concrete enough for the Operator to weigh it against its own observations."
diff --git a/artemis/agents/planner/planner.py b/artemis/agents/planner/planner.py
index 98f91f9..9a46038 100644
--- a/artemis/agents/planner/planner.py
+++ b/artemis/agents/planner/planner.py
@@ -82,11 +82,19 @@ def validate_plan_format(content: str) -> tuple[bool, str]:
     return True, ""
 
 
-def _checks_enabled(ctx: ArtemisContext) -> bool:
-    """Config-driven prompt assembly gate: with both check gates disabled, no
-    check-related instruction reaches any planner prompt."""
+def _check_gates(ctx: ArtemisContext) -> tuple[bool, bool]:
+    """(midway_checks, final_check): the two check gates, read separately so
+    the planner is taught the judgment moment that actually applies. With both
+    disabled, no check-related instruction reaches any planner prompt."""
     setup = getattr(ctx, "execution_setup", None)
-    return bool(setup and getattr(setup, "checks_enabled", False))
+    midway = bool(setup and getattr(setup, "midway_checks_enabled", False))
+    final = bool(setup and getattr(setup, "final_check_enabled", False))
+    return midway, final
+
+
+def _checks_enabled(ctx: ArtemisContext) -> bool:
+    """Config-driven prompt assembly gate (either check gate active)."""
+    return any(_check_gates(ctx))
 
 
 def build_planner_system_blocks(prompts_data: dict, mode: str, include_checks: bool) -> list[str]:
@@ -152,12 +160,15 @@ async def run_async_planner_validation(
         with open(prompts_path, encoding="utf-8") as f:
             prompts_data = json.load(f)
 
-        include_checks = _checks_enabled(ctx)
+        midway, final = _check_gates(ctx)
+        include_checks = midway or final
         mode_config = prompts_data["modes"]["validator"]
         system_blocks = build_planner_system_blocks(prompts_data, "validator", include_checks)
         system_content = "\n\n".join(prompts_data["blocks"][block] for block in system_blocks)
         system_message = Template(system_content).render(
-            plan_grammar=render_plan_grammar_spec(include_checks)
+            plan_grammar=render_plan_grammar_spec(midway=midway, final=final),
+            midway_checks=midway,
+            final_check=final,
         )
 
         history_str = "No history available."
@@ -228,15 +239,19 @@ class PlannerNode:
         mode = "initial_plan"
         mode_config = prompts_data["modes"][mode]
 
-        include_checks = _checks_enabled(self.ctx)
+        midway, final = _check_gates(self.ctx)
+        include_checks = midway or final
         # Assembly point (not in-template conditionals): check-generation
         # instructions only mount while the checking feature is active, so a
         # fully-disabled configuration yields a byte-identical planner prompt.
+        # Inside the mounted block, the judgment moment is worded per gate.
         system_blocks = build_planner_system_blocks(prompts_data, mode, include_checks)
         system_content = "\n\n".join(prompts_data["blocks"][block] for block in system_blocks)
 
         system_message = Template(system_content).render(
-            plan_grammar=render_plan_grammar_spec(include_checks)
+            plan_grammar=render_plan_grammar_spec(midway=midway, final=final),
+            midway_checks=midway,
+            final_check=final,
         )
 
         # Get screenshot
diff --git a/artemis/agents/summarizer/summarizer.md b/artemis/agents/summarizer/summarizer.md
deleted file mode 100644
index 8a9d6d1..0000000
--- a/artemis/agents/summarizer/summarizer.md
+++ /dev/null
@@ -1,35 +0,0 @@
-# ROLE
-You are the Summarizer Agent for a mobile automation system. Your task is to summarize the latest execution step, providing a high-information-density and succinct history summary of the current step without losing any information.
-
-# OUTPUT FORMAT
-- **Format Constraint**: You MUST output the summary as a **single, continuous paragraph**.
-- **Prohibited Formats**: Do NOT use bullet points, numbered lists, markdown formatting, or multiple paragraphs.
-- **Goal**: Maintain a consistent, easily parsable narrative for the Operator's historical record.
-
-# CORE PHILOSOPHY & RULES
-
-1. **Perspective**: You MUST write the summary from the Operator's first-person perspective using "I" (e.g., "I intended to...", "I clicked..."). NEVER use third-person terms like "The operator" or "The agent", nor second-person terms like "You" when referring to the Operator. For other agents (e.g., Explorer, Diagnoser), you can use their names.
-2. **Zero Subjective Validation**: Absolutely avoid declaring semantic success, completion, or failure. In historical compression, any subjective validation will cause future planners to falsely believe a goal was definitively met or permanently broken.
-   - **BANNED WORDS**: "successfully", "completed", "entered", "navigated to", "failed", "unsuccessful", "could not", "achieved".
-3. **Focus on Intent & Strategy**: The specific physical action (exact coordinates, swipes) is now recorded automatically. Focus primarily on the high-level Intent and reasoning. If you realize the Operator is on the wrong path and needs to backtrack or pivot, describe this as a shift in strategy.
-4. **Intended Context Transitions**: Describe the intended navigation path ("From Where -> Intended Where"). Do not declare that the transition actually happened. (e.g., "From the Home screen, I intended to open the Network Settings view").
-5. **Preserve Verifications & Iteration Progress**: If the Operator verified any state in this step, processed a specific candidate item/polling round, or explicitly mentioned what prerequisites or items are still missing, you MUST succinctly preserve these concrete progress details and verified items in the summary.
-6. **Objective Incident Logs**: If the safety net intercepted the action, the device rejected it, or a fast-action burst aborted midway (an `[Result]` line starting with "Error:" / an execution incident), faithfully record what was blocked and the stated reason, without judging whether the Operator's next move will resolve it.
-
-# LOOP & STAGNATION DETECTION
-Use the `RECENT 10 STEPS HISTORY` to intelligently detect loops or stagnation:
-1. **Physical Action Loops vs. Planned Iterations**:
-   - *Planned Iterations / Monitoring (Valid Progress)*: If the Operator is systematically processing different candidate items in a loop, or executing planned periodic polling cycles with wait intervals under a `[Loop]` milestone, record this objectively as planned progress (e.g., "Inspected Candidate #2", "Completed Polling Round #2 for new messages"). Do NOT flag planned iterations across different items or spaced polling as abnormal loops.
-   - *Unintended Action Loops (Anomalies)*: If the Operator is repeatedly clicking the exact same target, failing to progress on the same item, or oscillating blindly between identical states without updating progress notes, explicitly record the anomalous loop pattern and iteration count (e.g., "This is the 3rd cycle of failing to open the same folder").
-2. **Cognitive Stagnation**: While you generally ignore internal background tool calls (e.g., reading logs, checking states) when counting physical action loops, if you detect continuous multiple steps of purely internal tool calls without any physical actions or note updates, objectively record this "stagnation" or "analysis loop".
-
-# INPUT STRUCTURE
-You will receive:
-- **CURRENT PLAN & TASK PLAN**: The current task plan including milestones, active subgoals, and live iteration checklists to help you understand the strategic context and loop phase.
-- **RECENT 10 STEPS HISTORY**: A brief history of the last 10 steps to help you detect loops and stagnation patterns.
-- **CHRONOLOGICAL STEP TRACE (CURRENT STEP)**: The step-by-step chronological history of the current execution turn, including:
-  - `[Operator Monologue] / [Operator Native Thought]`: The operator's planning, intentions, progress counting, reasoning, verified states, and explicit mentions of missing prerequisites.
-  - `[Operator Tool Call] / [Operator Final Action]`: The actual action(s) planned and executed.
-  - `[Planned Fast-Action Burst]`: A multi-action turn executed back to back without the safety net, with each member's outcome.
-  - `[Pre-Execution Safety Net]`: Validation checks prior to action execution.
-  - `[Result]`: The Validator's execution outcome; an "Error:" line here is an execution incident the Operator must resolve.
diff --git a/artemis/agents/summarizer/summarizer.py b/artemis/agents/summarizer/summarizer.py
index 52dad3c..efbbd16 100644
--- a/artemis/agents/summarizer/summarizer.py
+++ b/artemis/agents/summarizer/summarizer.py
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-"""Pro-graph step summarizer node (M2: visual-transition lens dispatch).
+"""Pro step summarizer dispatching visual-transition summaries.
 
 Per the history-module redesign §5 (single step-level lens, confirmed
 2026-08-31) this node no longer generates a per-step text capsule with its own
diff --git a/artemis/config/agent.py b/artemis/config/agent.py
index db774a3..d075d16 100644
--- a/artemis/config/agent.py
+++ b/artemis/config/agent.py
@@ -460,8 +460,20 @@ class MemoryTranscriptConfig(BaseModel):
         default=3,
         ge=1,
         description=(
-            "Depth K of the screenshot scrub edge: the K-th most recent"
-            " historical screenshot is replaced by its visual summary."
+            "Depth K of the screenshot scrub edge from the start gate up: the"
+            " K-th most recent screenshot (the live one counts as depth 1) is"
+            " replaced by its visual summary."
+        ),
+    )
+    image_scrub_depth_relaxed: int = Field(
+        default=6,
+        ge=1,
+        description=(
+            "Screenshot scrub depth while the operator's measured context is"
+            " below budget*start_ratio (nothing is being replaced yet, so"
+            " more raw screenshots stay in view). Must be >= image_scrub_depth;"
+            " set equal to it to disable the occupancy-driven depth. A change"
+            " of depth never rewrites an already-scrubbed message."
         ),
     )
     pending_grace_steps: int = Field(
@@ -473,13 +485,17 @@ class MemoryTranscriptConfig(BaseModel):
             " image is replaced by a placeholder referencing the DataEngine step."
         ),
     )
-    xml_scrub_depth: int = Field(
+    xml_scrub_depth: int | None = Field(
         default=1,
         ge=1,
         description=(
-            "How many of the most recent observations keep their UI Element"
-            " list; older lists are stripped (depth 1 matches the legacy"
-            " prune_history_xml semantics)."
+            "Text edge of the scrub: once a message is deeper than this many"
+            " image-bearing observations (1 = as soon as a newer observation"
+            " exists) its UI element list, plan recitation and per-turn"
+            " ephemeral blocks are removed. Kept shallow on purpose: only the"
+            " live observation carries an indexed element list, so a stale"
+            " [n] index can never be picked up as a target. Screenshots follow"
+            " image_scrub_depth / image_scrub_depth_relaxed."
         ),
     )
     context_budget_tokens: int = Field(
@@ -491,14 +507,27 @@ class MemoryTranscriptConfig(BaseModel):
             " ratios below are applied against this budget."
         ),
     )
+    start_ratio: float = Field(
+        default=0.35,
+        ge=0.0,
+        lt=1.0,
+        description=(
+            "Start gate: below budget*start_ratio of the operator's measured"
+            " prompt size, closed segments only prepare their capsule in the"
+            " background — the original turns stay in the transcript. Ready"
+            " chunks replace their turns once the measured context reaches"
+            " this ratio (the hard threshold overrides it). 0 restores"
+            " swap-as-soon-as-ready."
+        ),
+    )
     soft_ratio: float = Field(
         default=0.7,
         gt=0.0,
         lt=1.0,
         description=(
-            "Soft threshold: when the last measured prompt size reaches"
-            " budget*soft_ratio, the oldest open segment is chunk-compressed"
-            " (L2)."
+            "Soft threshold: when the operator's last measured prompt size"
+            " reaches budget*soft_ratio, the oldest open segment is"
+            " chunk-compressed (L2)."
         ),
     )
     hard_ratio: float = Field(
@@ -506,9 +535,13 @@ class MemoryTranscriptConfig(BaseModel):
         gt=0.0,
         le=1.0,
         description=(
-            "Hard threshold: when the last measured prompt size reaches"
-            " budget*hard_ratio, the frozen region collapses to the L3 session"
-            " snapshot (chunk headers merged; per-step index retained)."
+            "Hard threshold: when the operator's last measured prompt size"
+            " reaches budget*hard_ratio, ready chunks swap as L2 blocks first;"
+            " only if that would not bring the estimated context back under the"
+            " line does everything closed force-swap (pending chunks included)"
+            " and the whole frozen region fold into a recall-only era — L3: the"
+            " period paragraph with the per-step index. The fold is permanent;"
+            " later L2 chunks are appended after it."
         ),
     )
     min_active_steps: int = Field(
@@ -545,6 +578,23 @@ class MemoryTranscriptConfig(BaseModel):
     )
     model_config = {"extra": "allow"}
 
+    @model_validator(mode="after")
+    def _ratios_are_ordered(self) -> "MemoryTranscriptConfig":
+        """The three thresholds form a ladder against the same budget."""
+        if not (0.0 <= self.start_ratio <= self.soft_ratio <= self.hard_ratio <= 1.0):
+            raise ValueError(
+                "memory.transcript ratios must satisfy"
+                " 0 <= start_ratio <= soft_ratio <= hard_ratio <= 1"
+                f" (got start_ratio={self.start_ratio}, soft_ratio={self.soft_ratio},"
+                f" hard_ratio={self.hard_ratio})."
+            )
+        if self.image_scrub_depth_relaxed < self.image_scrub_depth:
+            raise ValueError(
+                "memory.transcript.image_scrub_depth_relaxed must be >= image_scrub_depth"
+                f" (got {self.image_scrub_depth_relaxed} < {self.image_scrub_depth})."
+            )
+        return self
+
 
 class MemoryRecallConfig(BaseModel):
     """search_history tool options (agent.memory.recall)."""
@@ -620,8 +670,21 @@ class MemoryChunkingConfig(BaseModel):
         default=2000,
         ge=128,
         description=(
-            "Size-threshold trigger: estimated source tokens (char/4 over the"
-            " open segment's transcript text) that force a chunk compression."
+            "Size-threshold trigger: estimated source tokens (transcript"
+            " characters through the session-calibrated ratio, 4 chars/token"
+            " by default) over the open segment's eligible portion that force"
+            " a chunk compression."
+        ),
+    )
+    min_steps: int = Field(
+        default=3,
+        ge=1,
+        description=(
+            "Minimum turns in a chunk closed by the size or pressure trigger:"
+            " below this the eligible turns keep accumulating instead of"
+            " becoming one-step chunks (each chunk costs a capsule call)."
+            " Milestone closes are exempt (a complete segment is a unit) and"
+            " the hard threshold waives it (emergency)."
         ),
     )
     model: str = Field(
@@ -646,6 +709,16 @@ class MemoryChunkingConfig(BaseModel):
             " behavior."
         ),
     )
+
+    @model_validator(mode="after")
+    def _min_steps_within_cap(self) -> "MemoryChunkingConfig":
+        if self.min_steps > self.max_steps:
+            raise ValueError(
+                "memory.chunking.min_steps must not exceed max_steps"
+                f" (got min_steps={self.min_steps}, max_steps={self.max_steps})."
+            )
+        return self
+
     model_config = {"extra": "allow"}
 
 
diff --git a/artemis/context.py b/artemis/context.py
index c65aabe..9e51ed7 100644
--- a/artemis/context.py
+++ b/artemis/context.py
@@ -221,6 +221,18 @@ class ArtemisContext(BaseModel):
     """Plan content currently under async planner validation; becomes the new
     baseline when the validator approves it."""
 
+    guidance_unprotected_checks: set[tuple[str, str]] = Field(default_factory=set)
+    """``(kind, text)`` of every check line that existed in the task plan when a
+    mid-run user instruction arrived. User guidance outranks the plan's declared
+    standards, so these lines lose their machine restoration for the rest of the
+    run (the Operator may drop or reword them at any later write); check lines
+    added afterwards stay protected until the next instruction."""
+    guidance_retired_checks: set[tuple[str, str]] = Field(default_factory=set)
+    """``(kind, text)`` of the check lines the Operator actually dropped under
+    that waiver. A verdict recorded for such a line before it was retired is a
+    result for a requirement the user withdrew: the run outcome reports it as
+    retired instead of counting it as a pass or failure."""
+
     _genai_client: Any | None = PrivateAttr(default=None)
     _video_blackboard: Any | None = PrivateAttr(default=None)
     _video_circuit_breaker: Any | None = PrivateAttr(default=None)
diff --git a/artemis/core/diagnostics/__init__.py b/artemis/core/diagnostics/__init__.py
index d0422bc..55a4664 100644
--- a/artemis/core/diagnostics/__init__.py
+++ b/artemis/core/diagnostics/__init__.py
@@ -20,6 +20,7 @@ from artemis.core.diagnostics.adb_keys import (
     heal_adb_keys,
     inspect_adb_keys,
 )
+from artemis.core.diagnostics.device_smoke import smoke_test_device
 from artemis.core.diagnostics.emulator_manager import (
     EmulatorLaunchStage,
     EmulatorLaunchState,
@@ -32,11 +33,20 @@ from artemis.core.diagnostics.probes.credentials_probe import (
     LLMCredentialsProbe,
     VisionOCRProbe,
 )
+from artemis.core.diagnostics.probes.host_probe import IntegrationHostProbe
 from artemis.core.diagnostics.probes.runtime_probe import (
     PythonRuntimeProbe,
     SystemConfigProbe,
 )
 from artemis.core.diagnostics.probes.toolchain_probe import ToolchainProbe
+from artemis.core.diagnostics.readiness import (
+    CHECK_ORDER,
+    Verdict,
+    adb_keys_corrupted,
+    base_verdict,
+    collect_readiness,
+    sort_by_fix_order,
+)
 from artemis.core.diagnostics.schema import (
     DeviceInfo,
     ProbeAction,
@@ -53,6 +63,7 @@ __all__ = [
     "EmulatorLaunchStage",
     "EmulatorLaunchState",
     "BaseProbe",
+    "IntegrationHostProbe",
     "PythonRuntimeProbe",
     "SystemConfigProbe",
     "AdbDeviceProbe",
@@ -69,4 +80,11 @@ __all__ = [
     "get_adb_key_paths",
     "inspect_adb_keys",
     "heal_adb_keys",
+    "smoke_test_device",
+    "CHECK_ORDER",
+    "Verdict",
+    "collect_readiness",
+    "base_verdict",
+    "adb_keys_corrupted",
+    "sort_by_fix_order",
 ]
diff --git a/artemis/core/diagnostics/device_smoke.py b/artemis/core/diagnostics/device_smoke.py
new file mode 100644
index 0000000..25c6cba
--- /dev/null
+++ b/artemis/core/diagnostics/device_smoke.py
@@ -0,0 +1,359 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""End-to-end device observation smoke test.
+
+The readiness ADB probe only proves that ``adb devices`` and ``dumpsys`` answer.
+The most common "device shows Connected but ARTEMIS cannot observe it" failure
+is UIAutomator not answering (screenshot / hierarchy dump hangs), which today
+only surfaces as a failed task. :func:`smoke_test_device` performs exactly the
+observation the ``mobile_get_device_state`` MCP tool performs -- build (or reuse)
+the cached device controller through ``artemis.mcp.adb_server._get_controller``
+and call ``controller.get_screen_data()`` -- and reports a structured verdict
+with concrete repair guidance instead of raising.
+
+Design notes
+------------
+* ``_get_controller`` is synchronous, caches one controller per serial for the
+  life of the process and never touches ``DeviceExecutionLock``. Its first call
+  for a serial blocks on ``UIAutomatorClient.get_screen_data()`` (three
+  ``u2.connect`` attempts plus a screenshot and hierarchy dump), so it runs on a
+  worker thread here.
+* ``AdbDriver.get_screen_data`` invokes the synchronous UIAutomator client on
+  the event-loop thread. A plain ``asyncio.wait_for`` around the coroutine can
+  therefore never fire while UIAutomator hangs. The coroutine is executed on a
+  dedicated daemon thread with its own event loop, and the deadline is enforced
+  on the join. A thread abandoned by a timeout finishes on its own once the
+  underlying adb / HTTP timeouts elapse; being a daemon it never delays
+  interpreter shutdown.
+* ``u2.connect`` restarts the on-device UIAutomator server when it believes the
+  server is unhealthy. Running that against a device another ARTEMIS process is
+  driving would break the running task's session, so a device with a live
+  ``DeviceExecutionLock`` owner is reported as busy instead of probed.
+* Nothing is left behind: no screenshot is written to disk, no lock is taken,
+  and -- mirroring ``mobile_get_device_state`` -- the cached controller is kept
+  for reuse rather than closed.
+"""
+
+from __future__ import annotations
+
+import asyncio
+import base64
+from collections.abc import Callable
+import os
+import threading
+import time
+from typing import Any, TypeVar
+
+from artemis.runtime.device_lock import DeviceExecutionLock
+from artemis.utils.logger import get_logger
+
+logger = get_logger(__name__)
+
+T = TypeVar("T")
+
+#: On-device packages installed by uiautomator2 (``python -m uiautomator2 init``).
+UIAUTOMATOR_PACKAGES: tuple[str, ...] = (
+    "com.github.uiautomator",
+    "com.github.uiautomator.test",
+)
+
+#: A real JPEG screenshot of any phone screen is tens of kilobytes; the Android
+#: driver substitutes a 1x1 PNG (~70 bytes) when every capture path failed.
+_MIN_PLAUSIBLE_SCREENSHOT_BYTES = 512
+
+_SERIAL_PLACEHOLDER = "<serial>"
+
+
+def _serial_or_placeholder(serial: str | None) -> str:
+    return serial or _SERIAL_PLACEHOLDER
+
+
+def _uiautomator_fix(serial: str | None) -> list[str]:
+    s = _serial_or_placeholder(serial)
+    force_stops = ", then ".join(
+        f"adb -s {s} shell am force-stop {pkg}" for pkg in UIAUTOMATOR_PACKAGES
+    )
+    return [
+        "Unlock the phone and keep the screen on (UIAutomator cannot dump a locked or sleeping screen).",
+        f"Restart the on-device UIAutomator server, then retry: {force_stops}",
+        (
+            "If it keeps failing, reinstall the UIAutomator server APKs: "
+            f"python -m uiautomator2 purge --serial {s}, then python -m uiautomator2 init --serial {s} "
+            "(run with the ARTEMIS virtualenv Python), or reboot the device."
+        ),
+    ]
+
+
+def fix_for_error(error: str | None, serial: str | None) -> list[str]:
+    """Map an error string to concrete repair steps (substring match, case-insensitive)."""
+    if not error:
+        return []
+    text = error.lower()
+    s = _serial_or_placeholder(serial)
+
+    if "busy" in text or "another task" in text:
+        return [
+            "Wait for the running task to finish, or stop it with mobile_manage_task(action='stop', ...).",
+            "Then rerun the smoke test.",
+        ]
+    if "unauthorized" in text:
+        return [
+            "Accept the 'Allow USB debugging' prompt on the phone (tick 'Always allow from this computer').",
+            f"If no prompt appears, re-plug the USB cable and run: adb -s {s} devices",
+        ]
+    if "offline" in text:
+        return [
+            "Re-plug the USB cable (try another port or cable).",
+            "Run: adb reconnect (or adb kill-server, then adb start-server) and check adb devices -l.",
+        ]
+    if "no android devices" in text or "no device" in text or "not found" in text:
+        return [
+            "Connect an Android device with USB debugging enabled, or start an emulator.",
+            "mobile_diagnose(launch_avd='<avd name>') boots a named AVD; adb devices -l lists what is attached.",
+        ]
+    if (
+        "timeout" in text
+        or "timed out" in text
+        or "uiautomator" in text
+        or "not responding" in text
+        or "did not respond" in text
+        or "hierarchy" in text
+        or "screenshot" in text
+        or "http" in text
+        or "deadobject" in text
+    ):
+        return _uiautomator_fix(serial)
+    return [
+        f"Check the raw hierarchy dump manually: adb -s {s} shell uiautomator dump, then adb -s {s} shell cat /sdcard/window_dump.xml",
+        f"Check the raw screenshot path: adb -s {s} exec-out screencap -p > screen.png",
+    ]
+
+
+#: Exceptions the smoke test must never swallow.
+_PASSTHROUGH_EXCEPTIONS: tuple[type[BaseException], ...] = (
+    KeyboardInterrupt,
+    SystemExit,
+    asyncio.CancelledError,
+)
+
+
+def _describe_failure(exc: BaseException) -> str:
+    """uiautomator2 errors derive from ``BaseException`` and often carry an empty message."""
+    text = str(exc).strip()
+    name = type(exc).__name__
+    if not text:
+        return name
+    return text if name in ("Exception", "RuntimeError") else f"{name}: {text}"
+
+
+def _resolve_requested_serial(device_serial: str | None) -> str | None:
+    """Mirror ``_get_controller``'s serial resolution (explicit arg, then env)."""
+    return (
+        device_serial or os.environ.get("ARTEMIS_DEVICE_ID") or os.environ.get("ADB_DEVICE_SERIAL")
+    )
+
+
+def _find_busy_owner(target_serial: str | None) -> tuple[str, Any] | None:
+    """Return ``(device_key, owner)`` when a live ARTEMIS process owns the target device.
+
+    With no target serial ``_get_controller`` would pick the first attached device,
+    which cannot be matched against lock records cheaply; any live owner is then
+    treated as busy to stay on the safe side.
+    """
+    try:
+        owners = DeviceExecutionLock.get_active_owners()
+    except Exception as exc:  # pylint: disable=broad-exception-caught
+        logger.debug(f"Device lock inspection failed, skipping busy guard: {exc}")
+        return None
+    if not owners:
+        return None
+    if target_serial is None:
+        key, owner = next(iter(owners.items()))
+        return key, owner
+    clean = DeviceExecutionLock._normalize_device_id(target_serial)
+    for key, owner in owners.items():
+        if key == clean or key.endswith(f"__{clean}"):
+            return key, owner
+    return None
+
+
+async def _run_in_daemon_thread(fn: Callable[[], T], timeout: float, what: str) -> T:
+    """Run ``fn`` on a daemon thread and wait at most ``timeout`` seconds.
+
+    Raises :class:`TimeoutError` on deadline. The thread keeps running until
+    ``fn`` returns on its own, but the caller is released immediately.
+    """
+    loop = asyncio.get_running_loop()
+    future: asyncio.Future[T] = loop.create_future()
+
+    def _deliver(setter: Callable[[], None]) -> None:
+        try:
+            loop.call_soon_threadsafe(setter)
+        except RuntimeError:
+            # Event loop already closed: the caller gave up on us.
+            pass
+
+    def _worker() -> None:
+        try:
+            value = fn()
+        except BaseException as exc:  # pylint: disable=broad-exception-caught
+            error: BaseException = exc
+
+            def _fail() -> None:
+                if not future.done():
+                    future.set_exception(error)
+
+            _deliver(_fail)
+            return
+
+        def _succeed() -> None:
+            if not future.done():
+                future.set_result(value)
+
+        _deliver(_succeed)
+
+    threading.Thread(target=_worker, name=f"artemis-smoke-{what}", daemon=True).start()
+    try:
+        return await asyncio.wait_for(future, timeout=timeout)
+    except TimeoutError:
+        logger.warning(f"Device smoke test: {what} did not finish within {timeout:.1f}s")
+        raise
+
+
+def _run_coroutine_blocking(coro_factory: Callable[[], Any]) -> Any:
+    """Execute a coroutine on a fresh event loop owned by the current thread."""
+    return asyncio.run(coro_factory())
+
+
+def _count_elements(elements: Any) -> int | None:
+    if elements is None:
+        return None
+    if isinstance(elements, str):
+        return elements.count("<node")
+    if isinstance(elements, dict):
+        return 1
+    try:
+        return len(elements)
+    except TypeError:
+        return None
+
+
+def _decoded_length(b64: Any) -> int | None:
+    if not isinstance(b64, str) or not b64:
+        return None
+    try:
+        return len(base64.b64decode(b64))
+    except (ValueError, TypeError):
+        return None
+
+
+async def smoke_test_device(
+    device_serial: str | None = None, timeout_seconds: float = 20.0
+) -> dict[str, Any]:
+    """Observe the device exactly like ``mobile_get_device_state`` and report a verdict.
+
+    Never raises. Returns::
+
+        {"ok": bool, "serial": str | None, "elapsed_seconds": float,
+         "screenshot_bytes": int | None, "element_count": int | None,
+         "error": str | None, "fix": list[str]}
+    """
+    started = time.monotonic()
+    requested_serial = _resolve_requested_serial(device_serial)
+    result: dict[str, Any] = {
+        "ok": False,
+        "serial": requested_serial,
+        "elapsed_seconds": 0.0,
+        "screenshot_bytes": None,
+        "element_count": None,
+        "error": None,
+        "fix": [],
+    }
+
+    def _finish(error: str | None = None, cause: str | None = None) -> dict[str, Any]:
+        """Record the verdict; ``cause`` is the raw failure text used to pick the fix."""
+        result["elapsed_seconds"] = round(time.monotonic() - started, 3)
+        result["error"] = error
+        result["ok"] = error is None
+        result["fix"] = fix_for_error(cause if cause is not None else error, result["serial"])
+        return result
+
+    busy = _find_busy_owner(requested_serial)
+    if busy is not None:
+        key, owner = busy
+        description = getattr(owner, "description", "") or "unknown task"
+        pid = getattr(owner, "pid", "?")
+        result["serial"] = requested_serial or getattr(owner, "device_id", None)
+        return _finish(
+            f"Device {key} is busy: another task is running on it ({description}, pid {pid});"
+            " skipping the screen capture so the running task is not disturbed."
+        )
+
+    try:
+        from artemis.mcp import adb_server
+
+        controller = await _run_in_daemon_thread(
+            lambda: adb_server._get_controller(device_serial=device_serial),
+            timeout_seconds,
+            "controller-init",
+        )
+    except TimeoutError:
+        return _finish(
+            f"UIAutomator/controller initialization did not respond within {timeout_seconds:g}s"
+        )
+    except _PASSTHROUGH_EXCEPTIONS:
+        raise
+    except BaseException as exc:  # pylint: disable=broad-exception-caught
+        cause = _describe_failure(exc)
+        return _finish(f"Failed to initialize Android device controller: {cause}", cause)
+
+    controller_ctx = getattr(controller, "ctx", None)
+    device = getattr(controller_ctx, "device", None)
+    device_id = getattr(device, "device_id", None)
+    if isinstance(device_id, str) and device_id:
+        result["serial"] = device_id
+
+    remaining = max(0.5, timeout_seconds - (time.monotonic() - started))
+    try:
+        device_data = await _run_in_daemon_thread(
+            lambda: _run_coroutine_blocking(controller.get_screen_data),
+            remaining,
+            "screen-data",
+        )
+    except TimeoutError:
+        return _finish(f"UIAutomator/screen capture did not respond within {timeout_seconds:g}s")
+    except _PASSTHROUGH_EXCEPTIONS:
+        raise
+    except BaseException as exc:  # pylint: disable=broad-exception-caught
+        cause = _describe_failure(exc)
+        return _finish(f"Screen capture failed: {cause}", cause)
+
+    result["screenshot_bytes"] = _decoded_length(getattr(device_data, "base64", None))
+    result["element_count"] = _count_elements(getattr(device_data, "elements", None))
+
+    if result["screenshot_bytes"] is None:
+        return _finish("Screen capture returned no screenshot data")
+    if result["screenshot_bytes"] < _MIN_PLAUSIBLE_SCREENSHOT_BYTES:
+        return _finish(
+            f"Screenshot capture failed (driver returned a {result['screenshot_bytes']}-byte placeholder image)"
+        )
+    if not result["element_count"]:
+        return _finish(
+            "UIAutomator hierarchy dump returned no UI elements (screenshot worked, hierarchy did not)"
+        )
+    return _finish(None)
+
+
+__all__ = ["UIAUTOMATOR_PACKAGES", "fix_for_error", "smoke_test_device"]
diff --git a/artemis/core/diagnostics/engine.py b/artemis/core/diagnostics/engine.py
index f09bcf4..39ca963 100644
--- a/artemis/core/diagnostics/engine.py
+++ b/artemis/core/diagnostics/engine.py
@@ -15,6 +15,7 @@
 """System Readiness & Diagnostic Orchestration Engine."""
 
 import asyncio
+import os
 import subprocess
 import time
 from typing import Any
@@ -33,6 +34,7 @@ from artemis.core.diagnostics.probes.runtime_probe import (
 from artemis.core.diagnostics.probes.toolchain_probe import ToolchainProbe
 from artemis.core.diagnostics.schema import (
     DeviceInfo,
+    ProbeAction,
     ProbeCategory,
     ProbeResult,
     ProbeStatus,
@@ -50,6 +52,13 @@ class ReadinessEngine:
 
     _REPORT_CACHE_TTL_SECONDS = 2.0
 
+    #: Deadline for one probe inside a report. The ADB probe shells out to
+    #: ``adb`` without a deadline of its own, and a wedged ADB server would
+    #: otherwise hang every surface that runs the report (``artemis doctor``,
+    #: the console wizard, ``mobile_diagnose``). A probe that overruns is
+    #: reported as a FAIL with the recovery steps instead.
+    PROBE_TIMEOUT_SECONDS = 30.0
+
     def __init__(self):
         self._probes: dict[str, BaseProbe] = {}
         self._python_probe = PythonRuntimeProbe()
@@ -178,11 +187,22 @@ class ReadinessEngine:
             if categories is None or probe.category in categories
         ]
 
-        # Concurrently execute probes
-        results: list[ProbeResult] = await asyncio.gather(
-            *[probe.probe() for probe in target_probes],
-            return_exceptions=False,
+        # Concurrently execute probes. A probe that raises must not take the
+        # whole report down with it: it becomes a structured FAIL so the
+        # remaining probes still reach the user and the verdict stays honest.
+        outcomes = await asyncio.gather(
+            *[
+                asyncio.wait_for(probe.probe(), timeout=self.PROBE_TIMEOUT_SECONDS)
+                for probe in target_probes
+            ],
+            return_exceptions=True,
         )
+        results: list[ProbeResult] = [
+            outcome
+            if isinstance(outcome, ProbeResult)
+            else self._crashed_probe_result(probe, outcome)
+            for probe, outcome in zip(target_probes, outcomes, strict=True)
+        ]
 
         blockers = [r for r in results if r.is_blocker]
         passed_blockers = [r for r in blockers if r.status == ProbeStatus.PASS]
@@ -211,6 +231,62 @@ class ReadinessEngine:
             timestamp=time.time(),
         )
 
+    @staticmethod
+    def _crashed_probe_result(probe: BaseProbe, exc: object) -> ProbeResult:
+        """Turn an exception escaping ``probe.probe()`` into a FAIL result.
+
+        Cancellation and other non-``Exception`` errors are re-raised: they are
+        not a diagnosis of the host, they are the event loop shutting us down.
+        """
+        if isinstance(exc, BaseException) and not isinstance(exc, Exception):
+            raise exc
+        if isinstance(exc, TimeoutError):
+            logger.warning(
+                f"[ReadinessEngine] Probe '{probe.probe_id}' did not finish within"
+                f" {ReadinessEngine.PROBE_TIMEOUT_SECONDS:.0f}s; reporting it as FAIL."
+            )
+            return ProbeResult(
+                id=probe.probe_id,
+                category=probe.category,
+                title=probe.probe_id.replace("_", " ").title(),
+                status=ProbeStatus.FAIL,
+                is_blocker=probe.is_blocker,
+                summary="Probe timed out",
+                description=(
+                    f"The '{probe.probe_id}' check did not finish within"
+                    f" {ReadinessEngine.PROBE_TIMEOUT_SECONDS:.0f}s. A hung ADB server is the"
+                    " usual cause: restart it and run the diagnosis again."
+                ),
+                actions=[
+                    ProbeAction(
+                        action_type="command",
+                        label="Restart ADB",
+                        payload="adb kill-server && adb start-server",
+                    ),
+                ],
+                metadata={
+                    "exception_type": "TimeoutError",
+                    "timeout_seconds": ReadinessEngine.PROBE_TIMEOUT_SECONDS,
+                },
+            )
+        logger.warning(
+            f"[ReadinessEngine] Probe '{probe.probe_id}' crashed; reporting it as FAIL: "
+            f"{type(exc).__name__}: {exc}"
+        )
+        return ProbeResult(
+            id=probe.probe_id,
+            category=probe.category,
+            title=probe.probe_id.replace("_", " ").title(),
+            status=ProbeStatus.FAIL,
+            is_blocker=probe.is_blocker,
+            summary="Probe crashed",
+            description=(
+                f"The '{probe.probe_id}' check raised {type(exc).__name__}: {exc}. "
+                "This is a diagnostics bug or a host permission problem, not a device fault."
+            ),
+            metadata={"exception_type": type(exc).__name__, "exception": str(exc)},
+        )
+
     async def heal_adb_keys(self, force: bool = False) -> dict[str, Any]:
         """Auto-heal corrupted or 0-byte ADB authentication keys."""
         from artemis.core.diagnostics.adb_keys import heal_adb_keys
diff --git a/artemis/core/diagnostics/probes/credentials_probe.py b/artemis/core/diagnostics/probes/credentials_probe.py
index effd0aa..683e216 100644
--- a/artemis/core/diagnostics/probes/credentials_probe.py
+++ b/artemis/core/diagnostics/probes/credentials_probe.py
@@ -284,7 +284,7 @@ class VisionOCRProbe(BaseProbe):
             status=ProbeStatus.PASS,
             is_blocker=False,
             summary="Not Configured (Optional)",
-            description="OCR_API_KEY is not set. Perception operates seamlessly in pure UI XML hierarchy mode.",
+            description="OCR_API_KEY is not set. Perception uses the UI XML hierarchy without OCR.",
             metadata={"configured": False},
             actions=[
                 ProbeAction(
diff --git a/artemis/core/diagnostics/probes/host_probe.py b/artemis/core/diagnostics/probes/host_probe.py
new file mode 100644
index 0000000..cff745c
--- /dev/null
+++ b/artemis/core/diagnostics/probes/host_probe.py
@@ -0,0 +1,427 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Integration-host probe: the process environment an IDE / MCP client launched us in.
+
+The standard readiness probes answer "can Artemis drive a phone on this
+machine?". This probe answers the question that precedes it when Artemis is
+embedded in an AI coding assistant (Claude Code, Cursor, Codex, Antigravity,
+...): "was the server launched the way the installer expects, and can it
+spawn a background runner?". The failure modes it covers are the ones users
+hit mostly through MCP, rarely from the CLI or the web console:
+
+* the MCP client started the server with a different interpreter than the
+  project virtualenv, so the spawned runner imports a different package set;
+* the ``.env`` file the settings loader reads is not where the user put the key;
+* the traces directory is not writable from the client's sandbox;
+* the daemon port is held by another process (a very common collision with
+  dev servers that also default to port 8000).
+
+The probe is not registered in the default :class:`ReadinessEngine` probe set:
+the web console has its own device wizard and would only render noise. The
+``mobile_diagnose`` MCP tool and ``artemis doctor`` run it explicitly.
+
+Only the unwritable-traces case blocks task execution; the result carries
+``is_blocker`` accordingly, so the WARN findings degrade the verdict without
+blocking it.
+"""
+
+from __future__ import annotations
+
+import os
+from pathlib import Path
+import sys
+import tempfile
+from typing import Any
+
+from artemis.core.diagnostics.probes.base import BaseProbe
+from artemis.core.diagnostics.schema import (
+    ProbeAction,
+    ProbeCategory,
+    ProbeResult,
+    ProbeStatus,
+)
+
+
+def _same_file(a: str | os.PathLike[str], b: str | os.PathLike[str]) -> bool:
+    """Compare two interpreter paths tolerantly (symlinks, case on Windows)."""
+    try:
+        return os.path.samefile(a, b)
+    except OSError:
+        return os.path.normcase(os.path.abspath(a)) == os.path.normcase(os.path.abspath(b))
+
+
+#: Client names accepted by ``artemis mcp --install`` (see interfaces/cli/commands/mcp.py).
+MCP_CLIENT_NAMES: tuple[str, ...] = (
+    "antigravity",
+    "claude",
+    "cursor",
+    "windsurf",
+    "vscode",
+    "cline",
+    "roo",
+    "openclaw",
+    "codex",
+)
+
+
+def _env_has_prefix(prefix: str, *, exclude: tuple[str, ...] = ()) -> bool:
+    return any(key.startswith(prefix) and key not in exclude for key in os.environ)
+
+
+def detect_mcp_client() -> str | None:
+    """Best-effort guess of which MCP client launched this process, from ``os.environ``.
+
+    Returns one of :data:`MCP_CLIENT_NAMES` or ``None`` when unsure. MCP hosts
+    spawn the server with their own process environment, so the variables the
+    IDE exports to its child processes leak through. Specific hosts are checked
+    before the generic VS Code markers because Cursor, Windsurf, Cline and Roo
+    are (or run inside) VS Code and inherit ``VSCODE_*`` / ``TERM_PROGRAM``.
+    """
+    # Antigravity injects its language-server endpoint and CSRF token
+    # (ANTIGRAVITY_LS_ADDRESS / ANTIGRAVITY_CSRF_TOKEN) so child processes can
+    # call `agentapi`; mcp_server/notifiers/agentapi.py relies on the same pair.
+    if _env_has_prefix("ANTIGRAVITY_"):
+        return "antigravity"
+    # Claude Code marks every child with CLAUDECODE=1 plus CLAUDE_CODE_* details
+    # (entrypoint, session id, ...). Claude Desktop shares the same installer
+    # target, so both map to "claude".
+    if os.environ.get("CLAUDECODE") == "1" or _env_has_prefix("CLAUDE_CODE_"):
+        return "claude"
+    # Cursor tags its integrated terminal and spawned processes with
+    # CURSOR_TRACE_ID (and CURSOR_AGENT in agent mode).
+    if "CURSOR_TRACE_ID" in os.environ or _env_has_prefix("CURSOR_"):
+        return "cursor"
+    # Windsurf (Codeium) exports WINDSURF_* to its child processes.
+    if _env_has_prefix("WINDSURF_"):
+        return "windsurf"
+    # Codex CLI sets CODEX_SANDBOX* / CODEX_* for the processes it runs.
+    # CODEX_HOME alone is excluded: users set it by hand to relocate the Codex
+    # config directory, so on its own it does not prove Codex launched us.
+    if _env_has_prefix("CODEX_", exclude=("CODEX_HOME",)):
+        return "codex"
+    # OPENCLAW_WEBHOOK_URL is a notifier setting users put in any host's env
+    # block (see mcp_server/notifiers/webhook.py); only other OPENCLAW_* vars
+    # indicate the OpenClaw runtime itself.
+    if _env_has_prefix("OPENCLAW_", exclude=("OPENCLAW_WEBHOOK_URL",)):
+        return "openclaw"
+    # Cline / Roo Code run as VS Code extensions; their own prefixes are rare
+    # but unambiguous when present, and must win over the generic VS Code check.
+    if _env_has_prefix("CLINE_"):
+        return "cline"
+    if _env_has_prefix("ROO_"):
+        return "roo"
+    # Plain VS Code (Copilot agent mode) exports VSCODE_PID / VSCODE_IPC_HOOK
+    # and sets TERM_PROGRAM=vscode. Weakest signal, so it is checked last.
+    if (
+        "VSCODE_PID" in os.environ
+        or "VSCODE_IPC_HOOK" in os.environ
+        or os.environ.get("TERM_PROGRAM") == "vscode"
+    ):
+        return "vscode"
+    return None
+
+
+def mcp_install_actions(client: str | None) -> list[ProbeAction]:
+    """Actions that regenerate the MCP client config for ``client`` (or ask which one)."""
+    if client:
+        return [
+            ProbeAction(
+                action_type="command",
+                label="Regenerate MCP Config",
+                payload=f"uv run artemis mcp --install {client}",
+            )
+        ]
+    return [
+        ProbeAction(
+            action_type="hint",
+            label="Regenerate MCP Config",
+            payload=(
+                "Could not tell which MCP client launched this server. Ask the user which IDE"
+                " they are using, then run `uv run artemis mcp --install <client>` with"
+                " <client> being one of: " + ", ".join(MCP_CLIENT_NAMES) + "."
+            ),
+        )
+    ]
+
+
+def project_venv_python(project_root: Path) -> Path:
+    """Return the interpreter path the installer writes into MCP client configs."""
+    if sys.platform == "win32":
+        return project_root / ".venv" / "Scripts" / "python.exe"
+    return project_root / ".venv" / "bin" / "python"
+
+
+def directory_is_writable(path: Path) -> tuple[bool, str | None]:
+    """Try to create and delete a scratch file; return (ok, error)."""
+    try:
+        path.mkdir(parents=True, exist_ok=True)
+        with tempfile.NamedTemporaryFile(dir=path, prefix=".artemis-diag-", delete=True):
+            pass
+        return True, None
+    except OSError as exc:
+        return False, str(exc)
+
+
+def intended_traces_path() -> Path:
+    """Return the traces directory the settings loader *would* pick, without creating it.
+
+    Mirrors the selection order of :func:`artemis.config.paths.get_default_traces_path`
+    (``ARTEMIS_TRACES_DIR`` env, else the user app dir when the install mode
+    keeps mutable state there, else ``ROOT_DIR/traces``) minus its ``mkdir``.
+    Used only when that function raised, so the probe can still name the
+    offending directory in its FAIL result instead of crashing.
+    """
+    from artemis.config import paths as artemis_paths
+
+    env_traces = os.getenv(artemis_paths.ENV_ARTEMIS_TRACES_DIR)
+    if env_traces:
+        return Path(env_traces)
+    if artemis_paths._use_user_app_dir():
+        return artemis_paths.get_app_dir() / "traces"
+    return Path(artemis_paths.ROOT_DIR) / "traces"
+
+
+def resolve_traces_dir() -> tuple[Path, str | None]:
+    """Return ``(traces_dir, error)``; ``error`` is set when the directory could not be created.
+
+    ``get_default_traces_path`` creates the directory as a side effect, so on a
+    read-only parent it raises before :func:`directory_is_writable` ever runs.
+    Surface that as data rather than letting the probe itself crash.
+    """
+    from artemis.config.paths import get_default_traces_path
+
+    try:
+        return Path(get_default_traces_path()), None
+    except OSError as exc:
+        return intended_traces_path(), str(exc)
+
+
+class IntegrationHostProbe(BaseProbe):
+    """Probe verifying the MCP / IDE host process can actually run Artemis tasks."""
+
+    @property
+    def probe_id(self) -> str:
+        return "integration_host"
+
+    @property
+    def category(self) -> ProbeCategory:
+        return ProbeCategory.RUNTIME
+
+    @property
+    def is_blocker(self) -> bool:
+        return True
+
+    async def probe(self) -> ProbeResult:
+        # Lazy imports keep this module importable in stripped test environments
+        # and avoid a core -> runtime import at package import time.
+        from artemis.config.paths import ROOT_DIR, get_env_file, is_source_checkout
+        from artemis.runtime.daemon_client import (
+            DEFAULT_DAEMON_HOST,
+            DEFAULT_DAEMON_PORT,
+            daemon_log_path,
+            is_artemis_daemon,
+            is_standalone_forced,
+        )
+        from artemis.runtime.server_lifecycle import is_port_in_use
+
+        project_root = Path(ROOT_DIR)
+        source_checkout = is_source_checkout()
+        server_python = Path(sys.executable)
+        # A project virtualenv is only meaningful for a source checkout. In a
+        # wheel install ROOT_DIR is site-packages, which never carries a .venv;
+        # the current interpreter also runs background tasks.
+        venv_python: Path | None = project_venv_python(project_root) if source_checkout else None
+        venv_exists = venv_python is not None and venv_python.is_file()
+        runner_python = venv_python if venv_exists else server_python
+        interpreter_matches_venv = venv_exists and _same_file(server_python, venv_python)
+        mcp_client = detect_mcp_client()
+
+        env_file = Path(get_env_file())
+        traces_dir, traces_error = resolve_traces_dir()
+        if traces_error is None:
+            traces_writable, traces_error = directory_is_writable(traces_dir)
+        else:
+            traces_writable = False
+
+        standalone = is_standalone_forced()
+        # Identity, not liveness: a dev server squatting on the port answers
+        # HTTP too, and must show up as a hijacked port, not as the daemon.
+        daemon_reachable = False if standalone else is_artemis_daemon()
+        port_in_use = is_port_in_use(DEFAULT_DAEMON_PORT, DEFAULT_DAEMON_HOST)
+        port_hijacked = port_in_use and not daemon_reachable and not standalone
+
+        metadata: dict[str, Any] = {
+            "os": sys.platform,
+            "mcp_client": mcp_client,
+            "project_root": str(project_root),
+            "is_source_checkout": source_checkout,
+            "server_python": str(server_python),
+            "venv_python": str(venv_python) if venv_python is not None else None,
+            "venv_exists": venv_exists,
+            "interpreter_matches_venv": interpreter_matches_venv,
+            "runner_python": str(runner_python),
+            "env_file": str(env_file),
+            "env_file_exists": env_file.is_file(),
+            "traces_dir": str(traces_dir),
+            "traces_dir_writable": traces_writable,
+            "traces_dir_error": traces_error,
+            "daemon": {
+                "host": DEFAULT_DAEMON_HOST,
+                "port": DEFAULT_DAEMON_PORT,
+                "standalone_forced": standalone,
+                "reachable": daemon_reachable,
+                "port_in_use": port_in_use,
+                "port_held_by_other_process": port_hijacked,
+                "log_path": str(daemon_log_path()),
+            },
+        }
+
+        problems: list[str] = []
+        actions: list[ProbeAction] = []
+        status = ProbeStatus.PASS
+
+        if not traces_writable:
+            status = ProbeStatus.FAIL
+            problems.append(f"traces directory {traces_dir} is not writable ({traces_error})")
+            actions.append(
+                ProbeAction(
+                    action_type="hint",
+                    label="Fix Traces Directory",
+                    payload=(
+                        f"Make {traces_dir} writable for the user running the MCP server, or point "
+                        "ARTEMIS_TRACES_DIR at a writable directory in the MCP server's env block, "
+                        "then restart the MCP server."
+                    ),
+                )
+            )
+
+        if port_hijacked:
+            status = ProbeStatus.WARN if status is ProbeStatus.PASS else status
+            problems.append(
+                f"port {DEFAULT_DAEMON_PORT} is held by a process that is not the Artemis daemon"
+            )
+            actions.append(
+                ProbeAction(
+                    action_type="hint",
+                    label="Free the Daemon Port",
+                    payload=(
+                        f"Another program is listening on {DEFAULT_DAEMON_HOST}:{DEFAULT_DAEMON_PORT}"
+                        " (often a dev server). Stop it, or set ARTEMIS_DAEMON_PORT to a free port in"
+                        " the MCP server's env block and restart the MCP server. Tasks still run in"
+                        " standalone mode meanwhile, without the shared scheduler."
+                    ),
+                )
+            )
+
+        if not source_checkout:
+            # Wheel / frozen install: no virtualenv expectation, nothing to warn about.
+            pass
+        elif venv_exists and not interpreter_matches_venv:
+            status = ProbeStatus.WARN if status is ProbeStatus.PASS else status
+            problems.append(
+                f"MCP server runs on {server_python}, not the project virtualenv {venv_python}"
+            )
+            actions.extend(mcp_install_actions(mcp_client))
+            actions.append(
+                ProbeAction(
+                    action_type="hint",
+                    label="Interpreter Mismatch",
+                    payload=(
+                        "The MCP client config should point `command` at the .venv interpreter so the"
+                        " server and the background runner share one package set. Restart the MCP"
+                        " server after changing the config."
+                    ),
+                )
+            )
+        elif not venv_exists:
+            status = ProbeStatus.WARN if status is ProbeStatus.PASS else status
+            problems.append(
+                "no project virtualenv (.venv) found; runner falls back to the server interpreter"
+            )
+            actions.append(
+                ProbeAction(
+                    action_type="command",
+                    label="Create Virtualenv",
+                    payload="uv sync",
+                )
+            )
+
+        if not env_file.is_file():
+            actions.append(
+                ProbeAction(
+                    action_type="hint",
+                    label="Env File Location",
+                    payload=(
+                        f"No .env file at {env_file}. API keys are read from that file or from the MCP"
+                        " server's env block; the file is created by `artemis init`."
+                    ),
+                )
+            )
+
+        if not daemon_reachable and not port_hijacked:
+            actions.append(
+                ProbeAction(
+                    action_type="hint",
+                    label="Daemon Auto-Start",
+                    payload=(
+                        "Standalone mode is forced (ARTEMIS_STANDALONE=1); tasks run as detached"
+                        " runner processes."
+                        if standalone
+                        else "The Artemis daemon is not running; mobile_run_task starts it on the"
+                        f" first task. Its log is {daemon_log_path()}."
+                    ),
+                )
+            )
+
+        if status is ProbeStatus.PASS:
+            summary = "Host Ready"
+            description = (
+                f"MCP server runs on {server_python}; runner uses {runner_python}. "
+                f"Traces at {traces_dir}. "
+                + (
+                    "Daemon reachable."
+                    if daemon_reachable
+                    else "Daemon will auto-start on the first task."
+                )
+            )
+            actions.insert(
+                0,
+                ProbeAction(
+                    action_type="hint",
+                    label="Host OK",
+                    payload="Interpreter, traces directory and daemon port look consistent.",
+                ),
+            )
+        else:
+            summary = "Host Misconfigured" if status is ProbeStatus.FAIL else "Host Warning"
+            joined = "; ".join(problems)
+            description = joined[:1].upper() + joined[1:] + "."
+
+        # Only an unwritable traces directory stops tasks from running. The
+        # WARN findings (interpreter mismatch, missing venv, squatted port) are
+        # degradations the runner works around, so they must not turn the
+        # verdict into "blocked" — a pip/conda checkout without .venv would
+        # otherwise never leave that state.
+        return ProbeResult(
+            id=self.probe_id,
+            category=self.category,
+            title="MCP / IDE Integration Host",
+            status=status,
+            is_blocker=status is not ProbeStatus.WARN,
+            summary=summary,
+            description=description,
+            metadata=metadata,
+            actions=actions,
+        )
diff --git a/artemis/core/diagnostics/readiness.py b/artemis/core/diagnostics/readiness.py
new file mode 100644
index 0000000..8f8f085
--- /dev/null
+++ b/artemis/core/diagnostics/readiness.py
@@ -0,0 +1,83 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Readiness collection and verdict shared by every diagnosis entry point.
+
+``artemis doctor`` and the ``mobile_diagnose`` MCP tool must agree on which
+probes run, in which order they are fixed, and what "ready" means. This module
+holds exactly that common core; each entry point layers its own extra
+conditions, fix policy and rendering on top.
+"""
+
+from __future__ import annotations
+
+import asyncio
+from collections.abc import Sequence
+from typing import Literal
+
+from artemis.core.diagnostics.engine import readiness_engine
+from artemis.core.diagnostics.probes.host_probe import IntegrationHostProbe
+from artemis.core.diagnostics.schema import ProbeResult, ProbeStatus, SystemReadinessReport
+
+Verdict = Literal["ready", "degraded", "blocked"]
+
+#: Fix order. Runtime problems mask everything after them, credentials mask
+#: device problems (a task cannot start without a model), and the toolchain is
+#: optional.
+CHECK_ORDER: dict[str, int] = {
+    "python_runtime": 0,
+    "system_config": 1,
+    "integration_host": 2,
+    "gemini_api_key": 3,
+    "android_adb": 4,
+    "toolchain": 5,
+    "vision_ocr_key": 6,
+}
+
+
+def sort_by_fix_order(results: Sequence[ProbeResult]) -> list[ProbeResult]:
+    """Order probe results so the first problem listed is the one to fix first."""
+    return sorted(results, key=lambda r: CHECK_ORDER.get(r.id, len(CHECK_ORDER)))
+
+
+async def collect_readiness() -> tuple[SystemReadinessReport, ProbeResult]:
+    """Run the engine probes and the integration-host probe concurrently."""
+    report, host = await asyncio.gather(
+        readiness_engine.run_all(force_refresh=True),
+        IntegrationHostProbe().probe(),
+    )
+    return report, host
+
+
+def base_verdict(results: Sequence[ProbeResult]) -> Verdict:
+    """Verdict from probe results alone.
+
+    Blocked when there is no blocker at all (nothing was checked) or any
+    blocker is not PASS; degraded when only optional checks fail; ready
+    otherwise.
+    """
+    blockers = [r for r in results if r.is_blocker]
+    if not blockers or any(r.status is not ProbeStatus.PASS for r in blockers):
+        return "blocked"
+    if any(r.status is not ProbeStatus.PASS for r in results):
+        return "degraded"
+    return "ready"
+
+
+def adb_keys_corrupted(results: Sequence[ProbeResult]) -> bool:
+    """Whether the ADB probe reported corrupted RSA keys (the one self-heal both entry points share)."""
+    adb = next((r for r in results if r.id == "android_adb"), None)
+    if adb is None:
+        return False
+    return bool((adb.metadata.get("adb_keys") or {}).get("is_corrupted"))
diff --git a/artemis/data_engine/engine.py b/artemis/data_engine/engine.py
index 8a3567c..a1af9ba 100644
--- a/artemis/data_engine/engine.py
+++ b/artemis/data_engine/engine.py
@@ -666,6 +666,13 @@ class DataEngine:
         if session and session.end_time is not None and session.status not in ("running", "paused"):
             logger.debug(f"Session end already published for {session_id}; skipping duplicate")
             return
+        # Session-level LLM usage line (cache-hit ratios per source), best-effort.
+        try:
+            from artemis.services.token_meter import log_session_summary
+
+            log_session_summary(session_id)
+        except Exception as e:
+            logger.debug(f"Session usage summary skipped: {e}")
         if session:
             session.end_time = end_time
             session.status = status
@@ -877,7 +884,7 @@ class DataEngine:
         if pre_image_name and post_image_name and pre_image_name == post_image_name:
             post_image_name = None
 
-        # M5: persist the foreground app for the recall search surface (the
+        # Persist the foreground app for the recall search surface (the
         # parameter was historically accepted but never stored). The explicit
         # parameter wins; otherwise it is derived best-effort from the UI
         # tree's package attributes — a pure string scan, no device call.
@@ -889,7 +896,7 @@ class DataEngine:
         except (AttributeError, TypeError, ValueError):
             pass
 
-        # M4: stamp perceptual hashes for the local screen-similarity hint
+        # Stamp perceptual hashes for the local screen-similarity hint
         # (pure PIL dHash; best-effort, computed synchronously to keep the
         # record immutable once handed to the background writer).
         try:
diff --git a/artemis/data_engine/trace.py b/artemis/data_engine/trace.py
index 78d33d0..3bc4409 100644
--- a/artemis/data_engine/trace.py
+++ b/artemis/data_engine/trace.py
@@ -14,6 +14,7 @@
 
 import base64
 from collections.abc import Callable
+import contextlib
 import functools
 import hashlib
 import inspect
@@ -175,6 +176,20 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
     def on_tool_error(self, error: Any, *, run_id: uuid.UUID, **kwargs: Any) -> Any:
         pass
 
+    @staticmethod
+    def _detached_lens() -> bool:
+        """True inside ``detached_trace('lens:...')``: a background lens call
+        (visual summary, segment capsule) that belongs to no agent step."""
+        node_name = CURRENT_NODE_NAME.get() or ""
+        return CURRENT_TRACE_ID.get() is None and node_name.startswith("lens:")
+
+    def _current_step_id(self):
+        """The step a trace attaches to: the engine's current step, or None for
+        a detached lens call (its reply must never read as that step's work)."""
+        if self._detached_lens():
+            return None
+        return self.ctx.data_engine.current_step_id
+
     def on_llm_start(
         self,
         serialized: dict[str, Any],
@@ -200,7 +215,7 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
                 trace_id=run_id,
                 parent_trace_id=self._resolve_parent_id(parent_run_id, kwargs),
                 status="running",
-                step_id=self.ctx.data_engine.current_step_id,
+                step_id=self._current_step_id(),
             )
 
     def on_chat_model_start(
@@ -233,7 +248,7 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
                 trace_id=run_id,
                 parent_trace_id=self._resolve_parent_id(parent_run_id, kwargs),
                 status="running",
-                step_id=self.ctx.data_engine.current_step_id,
+                step_id=self._current_step_id(),
             )
 
     def _safe_uuid5(self, parent_id, name: str) -> uuid.UUID:
@@ -253,6 +268,11 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
     ) -> Any:
         """Run when LLM ends running."""
         if self.ctx.data_engine:
+            # A background lens call (see ``detached_trace``) belongs to no step:
+            # its reply is a compression product, never an agent's reasoning, so
+            # it is neither attached to the current step nor recorded as thinking.
+            detached = self._detached_lens()
+            step_id = self._current_step_id()
             generations = getattr(response, "generations", [])
             flat_generations = []
             if generations:
@@ -308,7 +328,7 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
                 parent_trace_id=self._resolve_parent_id(parent_run_id),
                 status="success",
                 duration=duration,
-                step_id=self.ctx.data_engine.current_step_id,
+                step_id=step_id,
             )
 
             native_thoughts = []
@@ -327,6 +347,8 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
                 elif gen_item.get("text") and str(gen_item.get("text")).strip():
                     raw_thoughts.append(str(gen_item.get("text")).strip())
 
+            if detached:
+                native_thoughts, raw_thoughts = [], []
             if native_thoughts:
                 self.ctx.data_engine.record_trace(
                     type="thinking",
@@ -335,7 +357,7 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
                     trace_id=self._safe_uuid5(run_id, "thinking"),
                     parent_trace_id=run_id,
                     status="success",
-                    step_id=self.ctx.data_engine.current_step_id,
+                    step_id=step_id,
                 )
             if raw_thoughts:
                 self.ctx.data_engine.record_trace(
@@ -345,7 +367,7 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
                     trace_id=self._safe_uuid5(run_id, "raw_thinking"),
                     parent_trace_id=run_id,
                     status="success",
-                    step_id=self.ctx.data_engine.current_step_id,
+                    step_id=step_id,
                 )
 
     def on_llm_error(
@@ -379,7 +401,7 @@ class DataEngineCallbackHandler(BaseCallbackHandler):
                 parent_trace_id=self._resolve_parent_id(parent_run_id),
                 status="failed",
                 duration=duration,
-                step_id=self.ctx.data_engine.current_step_id,
+                step_id=self._current_step_id(),
             )
 
     def _serialize_message(self, msg: BaseMessage) -> dict[str, Any]:
@@ -666,6 +688,36 @@ class TraceSpan:
             )
 
 
+@contextlib.contextmanager
+def detached_trace(node_name: str | None = None):
+    """Run a block outside the caller's trace span.
+
+    Background work (the step-memory lenses: visual-transition summaries,
+    segment capsules) is dispatched while an agent's step span is current, and
+    an ``asyncio`` task inherits that context. Every model call made inside
+    the block would then hang off the agent's span: the callback handler
+    records its reply as a ``thinking``/``raw_thinking`` child of that span, so
+    ``replay_steps``/``search_history`` later show a capsule JSON as the
+    operator's own reasoning, and the stream deltas surface under the
+    operator's timeline entry.
+
+    Inside the block :data:`CURRENT_TRACE_ID` is cleared (the block's traces
+    have no parent span and can never be attributed to the caller's step) and
+    :data:`CURRENT_NODE_NAME` is replaced by ``node_name`` (when given), so
+    usage metering labels the calls after the background job rather than the
+    agent that happened to dispatch it. Both are restored on exit, exceptions
+    included. Only the current task's context is touched.
+    """
+    token = CURRENT_TRACE_ID.set(None)
+    token_name = CURRENT_NODE_NAME.set(node_name) if node_name is not None else None
+    try:
+        yield
+    finally:
+        CURRENT_TRACE_ID.reset(token)
+        if token_name is not None:
+            CURRENT_NODE_NAME.reset(token_name)
+
+
 def trace_langchain_tool(tool: BaseTool, ctx: ArtemisContext) -> BaseTool:
     """Wraps a LangChain tool to trace its execution.
 
diff --git a/artemis/drivers/android/adb_driver.py b/artemis/drivers/android/adb_driver.py
index ef7c31a..4a54381 100644
--- a/artemis/drivers/android/adb_driver.py
+++ b/artemis/drivers/android/adb_driver.py
@@ -70,7 +70,7 @@ def _escape_for_adb_text(s: str) -> str:
 
 
 class AndroidAdbDriver(BaseDeviceDriver):
-    """Production-grade Android Device Driver powered by ADB and UIAutomator2."""
+    """Android device driver using ADB and UIAutomator2."""
 
     def __init__(
         self,
diff --git a/artemis/graph/checkpoints.py b/artemis/graph/checkpoints.py
index fe53d79..ae8ed4e 100644
--- a/artemis/graph/checkpoints.py
+++ b/artemis/graph/checkpoints.py
@@ -135,6 +135,10 @@ class TestSummary(BaseModel):
     inconclusive: int = 0
     unchecked: int = 0
     failed_items: list[dict] = Field(default_factory=list)
+    #: Check lines the user retired mid-run (dropped from the plan under user
+    #: guidance): their earlier verdicts are reported here, never as failures.
+    retired: int = 0
+    retired_items: list[dict] = Field(default_factory=list)
 
     @property
     def total(self) -> int:
@@ -506,6 +510,112 @@ def _finding_registry(ctx) -> dict:
     return registry
 
 
+def _finding_items(ctx) -> dict:
+    """checkpoint_id -> ``{(kind, item_text), ...}`` of the failed verify items
+    that produced the headline currently held in :func:`_finding_registry`.
+
+    Sibling map of the registry (same lifetime, same keys) so a headline can
+    be retired when user guidance withdraws every item behind it.
+    """
+    items = getattr(ctx, "checker_finding_items", None)
+    if not isinstance(items, dict):
+        items = {}
+        try:
+            ctx.checker_finding_items = items
+        except (AttributeError, TypeError, ValueError):
+            pass
+    return items
+
+
+def _register_finding(ctx, checkpoint_id: str, verify_failures: list) -> None:
+    _finding_registry(ctx)[checkpoint_id] = _render_finding_headline(checkpoint_id, verify_failures)
+    _finding_items(ctx)[checkpoint_id] = {
+        (str(getattr(v, "kind", "") or ""), str(getattr(v, "item_text", "") or ""))
+        for v in verify_failures
+    }
+
+
+def _clear_finding(ctx, checkpoint_id: str) -> bool:
+    """Drops a checkpoint's standing headline; True when one was registered."""
+    _finding_items(ctx).pop(checkpoint_id, None)
+    return _finding_registry(ctx).pop(checkpoint_id, None) is not None
+
+
+def _retired_checks(ctx) -> set[tuple[str, str]]:
+    retired = getattr(ctx, "guidance_retired_checks", None)
+    return retired if isinstance(retired, set) else set()
+
+
+def retire_check_items(ctx, items) -> None:
+    """Records ``(kind, text)`` check items the Operator dropped under user
+    guidance and withdraws their already-materialized findings.
+
+    Recording feeds the harvest gate (:func:`_active_verdicts`) and the run
+    outcome. Cleanup: every standing headline produced *only* by now-retired
+    items is popped and the plan's finding lines are re-projected; a headline
+    that still names a live item stays untouched.
+    """
+    incoming = {(str(kind), str(text)) for kind, text in items}
+    if not incoming:
+        return
+    retired = _retired_checks(ctx) | incoming
+    ctx.guidance_retired_checks = retired
+    registry = _finding_registry(ctx)
+    produced_by = _finding_items(ctx)
+    stale = [cid for cid in list(registry) if produced_by.get(cid) and produced_by[cid] <= retired]
+    for cid in stale:
+        _clear_finding(ctx, cid)
+        logger.info(
+            f"Checkpoint {cid}: standing finding headline withdrawn — every item"
+            " behind it was retired by user guidance."
+        )
+    if stale:
+        sync_finding_lines(ctx)
+
+
+def reinstate_check_items(ctx, items) -> None:
+    """Removes ``(kind, text)`` items from the retired set: the Operator has
+    declared them in the plan again, so their verdicts drive side effects
+    once more and the run outcome counts them normally. A no-op when none of
+    the given items is retired."""
+    retired = _retired_checks(ctx)
+    if not retired:
+        return
+    back = {(str(kind), str(text)) for kind, text in items} & retired
+    if not back:
+        return
+    ctx.guidance_retired_checks = retired - back
+    logger.info(
+        "Check line(s) retired under user guidance are declared again and"
+        f" reinstated: {sorted(back)}"
+    )
+
+
+def _active_verdicts(ctx, checkpoint, verdicts: list) -> list:
+    """The verdicts still allowed to drive side effects: those whose
+    ``(kind, item_text)`` was not retired by user guidance. Ledger recording is
+    never filtered — this gate only protects execution state."""
+    retired = _retired_checks(ctx)
+    if not retired:
+        return list(verdicts)
+    active: list = []
+    dropped: list = []
+    for v in verdicts:
+        key = (str(getattr(v, "kind", "") or ""), str(getattr(v, "item_text", "") or ""))
+        (dropped if key in retired else active).append(v)
+    if dropped:
+        logger.info(
+            f"Checkpoint {checkpoint.checkpoint_id}: {len(dropped)} verdict(s)"
+            " recorded but dropped from side effects — their check items were"
+            " retired by user guidance: "
+            + ", ".join(
+                f"[{k}] '{t}'"
+                for k, t in ((getattr(v, "kind", ""), getattr(v, "item_text", "")) for v in dropped)
+            )
+        )
+    return active
+
+
 def _render_finding_headline(checkpoint_id: str, verify_failures: list) -> str:
     first = verify_failures[0]
     evidence = str(getattr(first, "evidence", "") or "").strip()
@@ -778,16 +888,26 @@ def harvest_run(
     # Layer 3: the per-checkpoint repair log accumulates every booked attempt.
     _log_checker_note(ctx, run, verdicts)
 
+    # Guidance gate: a verdict for a check item the user retired mid-run (the
+    # Operator dropped its line under a guidance waiver) is a result for a
+    # withdrawn requirement — booked above, never a repair/halt trigger.
+    active = _active_verdicts(ctx, checkpoint, verdicts)
+    all_retired = bool(verdicts) and not active
+
     # Applicability gate for side effects: the verdict must belong to the
     # current attempt of its checkpoint AND the anchored subgoal's text must be
-    # unchanged in the current plan. Stale/mismatched verdicts are ledger-only.
-    applicable = allow_side_effects and _subgoal_still_current(ctx, checkpoint.checkpoint_id)
+    # unchanged in the current plan AND at least one verdict must still be
+    # live. Stale/mismatched/fully retired verdicts are ledger-only.
+    applicable = (
+        allow_side_effects
+        and not all_retired
+        and _subgoal_still_current(ctx, checkpoint.checkpoint_id)
+    )
     user_stopped = bool(state is not None and getattr(state, "user_stop_requested", False))
 
-    verify_failures = [v for v in verdicts if v.kind == "verify" and v.status == "failed"]
-    assert_failures = [v for v in verdicts if v.kind == "assert" and v.status == "failed"]
+    verify_failures = [v for v in active if v.kind == "verify" and v.status == "failed"]
+    assert_failures = [v for v in active if v.kind == "assert" and v.status == "failed"]
 
-    registry = _finding_registry(ctx)
     registry_changed = False
     reverted = False
 
@@ -799,9 +919,7 @@ def harvest_run(
             reverted = revert_subgoal_status(ctx, checkpoint.checkpoint_id)
             # Layer 2: register the standing plan headline for this unresolved
             # finding; the projection below renders it under the subgoal.
-            registry[checkpoint.checkpoint_id] = _render_finding_headline(
-                checkpoint.checkpoint_id, verify_failures
-            )
+            _register_finding(ctx, checkpoint.checkpoint_id, verify_failures)
             registry_changed = True
             for v in verify_failures:
                 suggestion = getattr(v, "suggestion", "") or ""
@@ -820,16 +938,18 @@ def harvest_run(
             # Quota exhausted: the run is settled for this checkpoint — the
             # standing headline is retired (the ledger and the checker note
             # keep the full record).
-            registry_changed = registry.pop(checkpoint.checkpoint_id, None) is not None
+            registry_changed = _clear_finding(ctx, checkpoint.checkpoint_id)
             logger.warning(
                 f"Checkpoint {checkpoint.checkpoint_id} exhausted its repair"
                 f" quota ({max_repairs}); verdict stays failed, no further"
                 " repair loop."
             )
-    elif not verify_failures:
+    elif not verify_failures and not all_retired:
         # A booked attempt without failed verify criteria resolves (or
-        # releases) the checkpoint: its standing headline is retired.
-        registry_changed = registry.pop(checkpoint.checkpoint_id, None) is not None
+        # releases) the checkpoint: its standing headline is retired. (A fully
+        # retired report says nothing about the checkpoint — its headline, if
+        # any, was already handled by ``retire_check_items``.)
+        registry_changed = _clear_finding(ctx, checkpoint.checkpoint_id)
 
     if registry_changed:
         sync_finding_lines(ctx)
@@ -842,11 +962,21 @@ def harvest_run(
                 "Assert failure under 'halt' policy: latching halt flag for exit settlement."
             )
 
+    # Event payload: ``verdicts`` carries every booked verdict (ledger view);
+    # ``applicable`` is False when nothing could take effect — including a
+    # report whose check items were all retired by user guidance; ``retired``
+    # lists the ``(kind, item_text)`` pairs of the verdicts dropped by that
+    # guidance gate (empty when none were).
     _event(
         "done",
         verdict_payloads(verdicts),
         applicable=bool(applicable),
         reverted=bool(reverted),
+        retired=[
+            {"kind": p["kind"], "item_text": p["item_text"]}
+            for p in verdict_payloads(verdicts)
+            if (p["kind"], p["item_text"]) in _retired_checks(ctx)
+        ],
         repairs_used=int(ctx.checkpoint_repairs.get(checkpoint.checkpoint_id, 0)),
     )
     return findings
@@ -1006,8 +1136,20 @@ def resolve_item_status(kind: str, records: list[dict]) -> str:
     return "unchecked"
 
 
-def compute_test_summary(check_items: list[CheckItem], records: list[dict]) -> TestSummary:
+def compute_test_summary(
+    check_items: list[CheckItem],
+    records: list[dict],
+    retired: set[tuple[str, str]] | None = None,
+) -> TestSummary:
+    """Folds the verdict ledger into pass/fail counts over the declared items.
+
+    ``retired`` names check lines the Operator dropped under user guidance; a
+    line that is retired and no longer declared in the plan is reported under
+    ``retired`` with its last recorded verdict, not as a pass or a failure —
+    the user withdrew that requirement.
+    """
     summary = TestSummary()
+    retired = retired or set()
     by_item: dict[tuple[str, str], list[dict]] = {}
     for r in records:
         by_item.setdefault((str(r.get("kind")), str(r.get("item_text"))), []).append(r)
@@ -1026,8 +1168,13 @@ def compute_test_summary(check_items: list[CheckItem], records: list[dict]) -> T
             seen.add(sig)
             all_items.append(sig)
 
+    declared = {(ci.kind, ci.text) for ci in check_items}
     for kind, text in all_items:
         status = resolve_item_status(kind, by_item.get((kind, text), []))
+        if (kind, text) in retired and (kind, text) not in declared:
+            summary.retired += 1
+            summary.retired_items.append({"item_text": text, "kind": kind, "last_status": status})
+            continue
         if status == "passed":
             summary.passed += 1
         elif status == "failed":
@@ -1052,6 +1199,7 @@ def compute_run_outcome(
     records: list[dict],
     *,
     verify_blocked: bool,
+    retired: set[tuple[str, str]] | None = None,
 ) -> RunOutcome:
     """Assembles the machine-readable run outcome.
 
@@ -1060,7 +1208,7 @@ def compute_run_outcome(
     completion. Assert failures never change ``task_status``: a finished task
     with failed assertions is ``completed`` with ``tests.failed > 0``.
     """
-    tests = compute_test_summary(list(snapshot.all_check_items), records)
+    tests = compute_test_summary(list(snapshot.all_check_items), records, retired=retired)
     if verify_blocked:
         task_status: Literal["completed", "partial", "blocked"] = "blocked"
     elif snapshot.all_top_level_done:
diff --git a/artemis/graph/graph.py b/artemis/graph/graph.py
index 9b959bd..32c138c 100644
--- a/artemis/graph/graph.py
+++ b/artemis/graph/graph.py
@@ -16,6 +16,7 @@ import asyncio
 import base64
 import functools
 import json
+from collections import Counter
 from typing import Annotated, Literal
 
 from langchain_core.messages import ToolMessage
@@ -49,6 +50,8 @@ from artemis.graph.checkpoints import (
     publish_checker_event,
     queue_checkpoints,
     read_ledger,
+    reinstate_check_items,
+    retire_check_items,
     revert_subgoal_status,
     settle_all_checkpoints,
     spawn_pending_checkpoints,
@@ -87,8 +90,10 @@ from artemis.utils.notes import (
 )
 from artemis.utils.plan_grammar import (
     milestones_changed,
+    missing_check_items,
     new_top_level_completions,
     parse_plan,
+    render_check_line,
     restore_missing_check_items,
     subgoal_hash,
     unintended_milestone_edits,
@@ -432,7 +437,13 @@ async def exit_settlement_node(state: State, ctx: ArtemisContext):
 
     # END path: assemble the machine-readable run outcome.
     records = read_ledger(base_dir)
-    outcome = compute_run_outcome(snapshot, records, verify_blocked=verify_blocked)
+    retired = getattr(ctx, "guidance_retired_checks", None)
+    outcome = compute_run_outcome(
+        snapshot,
+        records,
+        verify_blocked=verify_blocked,
+        retired=retired if isinstance(retired, set) else None,
+    )
     if snapshot.all_check_items or records or verify_blocked:
         update["run_outcome"] = outcome.model_dump()
         # BLOCKED/partial wrap-ups carry the last findings in the metadata file.
@@ -451,7 +462,8 @@ async def exit_settlement_node(state: State, ctx: ArtemisContext):
             f"Run outcome: task_status={outcome.task_status},"
             f" tests(passed={outcome.tests.passed}, failed={outcome.tests.failed},"
             f" inconclusive={outcome.tests.inconclusive},"
-            f" unchecked={outcome.tests.unchecked})"
+            f" unchecked={outcome.tests.unchecked},"
+            f" retired={outcome.tests.retired})"
         )
     return update
 
@@ -634,17 +646,59 @@ async def _process_plan_write(
     # deleted/rewritten check lines are merged back in a pure text operation.
     # This is content-driven and independent of any switch — a resumed plan
     # with check lines stays protected even when checking is disabled.
-    merged = restore_missing_check_items(content_before, content_after)
-    if merged is not None:
+    # The one exception is user guidance: it outranks the declared standards,
+    # so every check line that existed when an instruction arrived (recorded
+    # by perception in ``ctx.guidance_unprotected_checks``) may be dropped or
+    # reworded at any later write — the Operator usually re-plans over several
+    # surgical edits, turns after the guidance landed. Lines added after the
+    # instruction are protected again until the next one.
+    #
+    # ``missing_check_items`` diffs on the full signature (kind, when, text,
+    # parent hash), so rewording a milestone re-signs every check line under
+    # it. Such a line has merely moved: it is still declared, so it is neither
+    # merged back (that would duplicate it as a task-level ``@end`` orphan)
+    # nor retired (the ledger, the harvest gate and the run outcome all key a
+    # check item by ``(kind, text)``). Only a line whose ``(kind, text)`` is
+    # gone from the new plan counts as dropped.
+    before_snapshot = parse_plan(content_before)
+    after_snapshot = parse_plan(content_after)
+    missing = missing_check_items(before_snapshot, after_snapshot)
+    unprotected = getattr(ctx, "guidance_unprotected_checks", None)
+    if not isinstance(unprotected, set):
+        unprotected = set()
+    still_declared = Counter((ci.kind, ci.text) for ci in after_snapshot.check_items)
+    dropped: list = []
+    for ci in missing:
+        if still_declared.get((ci.kind, ci.text), 0) > 0:
+            still_declared[(ci.kind, ci.text)] -= 1
+            continue  # moved under a reworded milestone / re-timed: still declared
+        dropped.append(ci)
+    waived = [ci for ci in dropped if (ci.kind, ci.text) in unprotected]
+    protected = [ci for ci in dropped if (ci.kind, ci.text) not in unprotected]
+    if waived:
         logger.info(
-            "Plan write removed or rewrote declared check lines; merging them"
-            " back (check standards are protected deterministically)."
+            "Plan write dropped declared check lines because of user guidance"
+            f" (the change stands): {[render_check_line(ci).strip() for ci in waived]}"
         )
-        content_after = merged
-        try:
-            task_plan_path.write_text(content_after, encoding="utf-8")
-        except Exception as e:
-            logger.error(f"Failed to write merged check lines: {e}")
+        # Records the retirement (harvest gate + run outcome) and withdraws any
+        # standing finding headline those lines had already produced.
+        retire_check_items(ctx, [(ci.kind, ci.text) for ci in waived])
+    # A retired line the Operator declares again is live again: the harvest
+    # gate and the run outcome must agree with the plan on disk.
+    reinstate_check_items(ctx, [(ci.kind, ci.text) for ci in after_snapshot.check_items])
+    if protected:
+        merged = restore_missing_check_items(content_before, content_after, items=protected)
+        if merged is not None:
+            logger.info(
+                "Plan write removed or rewrote declared check lines; merging them"
+                " back (check standards are protected deterministically):"
+                f" {[render_check_line(ci).strip() for ci in protected]}"
+            )
+            content_after = merged
+            try:
+                task_plan_path.write_text(content_after, encoding="utf-8")
+            except Exception as e:
+                logger.error(f"Failed to write merged check lines: {e}")
 
     # Deterministic finding-line projection: unresolved verify findings are
     # re-rendered from the checkpoint repair state on every plan write, so a
@@ -653,7 +707,7 @@ async def _process_plan_write(
     # never influences the parses below.
     sync_finding_lines(ctx)
 
-    before = parse_plan(content_before)
+    before = before_snapshot
     after = parse_plan(content_after)
 
     # Ratchet baseline: judge the current plan against the last *validated*
diff --git a/artemis/graph/perception.py b/artemis/graph/perception.py
index 67dae2f..85a6d21 100644
--- a/artemis/graph/perception.py
+++ b/artemis/graph/perception.py
@@ -92,6 +92,29 @@ def _check_injected_instruction_file(base_dir: str) -> dict | None:
     return None
 
 
+def _unprotect_current_check_lines(ctx: ArtemisContext) -> None:
+    """Record the plan's current check lines as editable under user guidance."""
+    from artemis.utils.notes import get_note_file_path
+    from artemis.utils.plan_grammar import parse_plan
+
+    unprotected = getattr(ctx, "guidance_unprotected_checks", None)
+    if not isinstance(unprotected, set):
+        unprotected = set()
+    try:
+        plan_path = get_note_file_path(ctx.data_engine.base_dir, "task_plan")
+        text = plan_path.read_text(encoding="utf-8") if plan_path.exists() else ""
+    except Exception as e:
+        logger.warning(f"Could not read task_plan for the guidance check-line waiver: {e}")
+        text = ""
+    added = {(ci.kind, ci.text) for ci in parse_plan(text).check_items}
+    unprotected |= added
+    ctx.guidance_unprotected_checks = unprotected
+    logger.info(
+        f"User guidance received: {len(added)} declared check line(s) may now be edited"
+        " by the Operator."
+    )
+
+
 async def perception_node(state: State, ctx: ArtemisContext) -> dict:
     """Perception node (fast path): captures screenshot, extracts XML hierarchy, and performs OCR.
 
@@ -114,6 +137,14 @@ async def perception_node(state: State, ctx: ArtemisContext) -> dict:
         if injected_payload:
             injected_instruction = injected_payload.get("instruction")
             user_stop_requested = bool(injected_payload.get("release_loop"))
+            if isinstance(injected_instruction, str) and injected_instruction.strip():
+                # User guidance outranks the plan's declared standards: every
+                # check line that exists right now loses its machine
+                # restoration for the rest of the run (kept on the run context,
+                # not the per-turn State), so the Operator can drop or reword
+                # it in whichever later write it gets to it. Lines added after
+                # this moment stay protected until the next instruction.
+                _unprotect_current_check_lines(ctx)
 
     controller = UnifiedMobileController(ctx)
 
diff --git a/artemis/graph/visibility.py b/artemis/graph/visibility.py
index e41cb2c..65b8361 100644
--- a/artemis/graph/visibility.py
+++ b/artemis/graph/visibility.py
@@ -116,7 +116,7 @@ NODE_VISIBILITY: dict[str, NodeVisibility] = {
             "operator_native_thinking",
             "user_stop_requested",
             "initial_goal",
-            # M3: the turn's injected instruction is stamped verbatim onto the
+            # The turn's injected instruction is stamped verbatim onto the
             # step record so the chunk ledger can preserve it (never-evict).
             "injected_instruction",
         },
diff --git a/artemis/interfaces/cli/commands/doctor.py b/artemis/interfaces/cli/commands/doctor.py
index 0b7b682..49c9584 100644
--- a/artemis/interfaces/cli/commands/doctor.py
+++ b/artemis/interfaces/cli/commands/doctor.py
@@ -12,321 +12,155 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-"""System, environment, and device diagnostics (artemis doctor)."""
+"""System, environment, and device diagnostics (artemis doctor).
 
+The command renders the same readiness probes the web console's device wizard
+and the ``mobile_diagnose`` MCP tool run (:mod:`artemis.core.diagnostics`), so
+the terminal, the browser and the IDE agree on one verdict. Only two rows are
+CLI-specific and not engine probes: Node.js/npm and the Showcase UI build.
+"""
+
+from __future__ import annotations
+
+import asyncio
+from dataclasses import dataclass
+import json
 import platform as sys_platform
 import shutil
-import subprocess
-import sys
+from typing import Any
 
 from rich.console import Console
+from rich.markup import escape
 from rich.panel import Panel
 from rich.table import Table
 import typer
 
-from artemis.config import (
-    parse_llm_config,
-    settings,
-)
 from artemis.config.paths import ROOT_DIR
-from artemis.core.diagnostics.adb_keys import heal_adb_keys, inspect_adb_keys
+from artemis.core.diagnostics.engine import readiness_engine
+from artemis.core.diagnostics.readiness import (
+    Verdict,
+    adb_keys_corrupted,
+    base_verdict,
+    collect_readiness,
+    sort_by_fix_order,
+)
+from artemis.core.diagnostics.schema import ProbeResult, ProbeStatus
 from artemis.platform import OSType, platform
-from artemis.toolchain import toolchain
-from artemis.utils.ocr_api import is_ocr_configured
+from artemis.runtime.device_lock import DeviceExecutionLock
 
 
-def doctor_command(
-    fix: bool = typer.Option(
-        False,
-        "--fix",
-        "-f",
-        help="Automatically repair fixable environment issues (such as corrupted ADB authentication keys).",
-    ),
-) -> None:
-    """Run diagnostics to inspect system dependencies, device connectivity, and configuration."""
-    console = Console()
-    console.print()
-    os_name = sys_platform.system()
-    arch_name = sys_platform.machine()
-    console.print(
-        Panel(
-            f"[bold cyan]☕ Artemis System & Environment Doctor[/bold cyan]\n"
-            f"[dim]Platform: {os_name} ({arch_name}) | PAL: {platform.os_type.value}[/dim]",
-            expand=False,
+@dataclass(frozen=True)
+class ExtraRow:
+    """A CLI-only diagnostic row that is not backed by an engine probe."""
+
+    key: str
+    title: str
+    status: str  # "pass" | "missing"
+    status_markup: str
+    summary: str
+    detail: str
+
+
+@dataclass(frozen=True)
+class FixOutcome:
+    """Result of one ``--fix`` repair step."""
+
+    fix: str
+    success: bool
+    message: str
+
+
+# ---------------------------------------------------------------------------
+# Collection
+# ---------------------------------------------------------------------------
+
+
+async def _collect() -> list[ProbeResult]:
+    report, host = await collect_readiness()
+    return sort_by_fix_order([*report.probes, host])
+
+
+async def _apply_fixes(results: list[ProbeResult]) -> list[FixOutcome]:
+    """Repair corrupted ADB keys and sweep stale device locks left by dead runners."""
+    outcomes: list[FixOutcome] = []
+
+    if adb_keys_corrupted(results):
+        result = await readiness_engine.heal_adb_keys()
+        outcomes.append(
+            FixOutcome(
+                fix="heal_adb_keys",
+                success=bool(result.get("success")),
+                message=str(result.get("message") or "")
+                or ("Corrupted RSA keys regenerated." if result.get("success") else "Heal failed."),
+            )
+        )
+    else:
+        outcomes.append(
+            FixOutcome(
+                fix="heal_adb_keys",
+                success=True,
+                message="ADB authentication keys are healthy; nothing to repair.",
+            )
+        )
+
+    removed = await asyncio.to_thread(DeviceExecutionLock.cleanup_stale_locks)
+    outcomes.append(
+        FixOutcome(
+            fix="cleanup_stale_locks",
+            success=True,
+            message=(
+                f"Removed {removed} stale device lock(s)/queue ticket(s)."
+                if removed
+                else "No stale device locks or queue tickets found."
+            ),
         )
     )
+    return outcomes
 
-    table = Table(show_header=True, header_style="bold magenta")
-    table.add_column("Component", style="dim", width=22)
-    table.add_column("Status", width=12)
-    table.add_column("Details & Recommendations")
 
-    all_passed = True
+async def _diagnose(fix: bool) -> tuple[list[ProbeResult], list[FixOutcome]]:
+    results = await _collect()
+    fixes: list[FixOutcome] = []
+    if fix:
+        fixes = await _apply_fixes(results)
+        results = await _collect()
+    return results, fixes
 
-    # 1. Python Version
-    py_ver = f"{sys.version_info.major}.{sys.version_info.minor}.{sys.version_info.micro}"
-    if sys.version_info >= (3, 12):
-        table.add_row(
-            "Python Runtime",
-            "[bold green]✔ OK[/bold green]",
-            f"Python {py_ver} ({arch_name}, 64-bit)",
-        )
-    else:
-        all_passed = False
-        table.add_row(
-            "Python Runtime",
-            "[bold red]✖ Warning[/bold red]",
-            f"Python {py_ver} detected. Python >= 3.12 is strongly recommended.",
-        )
 
-    # 2. ADB Installation & Server
-    adb_path = toolchain.resolve("adb")
-    if adb_path:
-        try:
-            res = subprocess.run(
-                [adb_path, "version"],
-                capture_output=True,
-                text=True,
-                timeout=5,
-                encoding="utf-8",
-                errors="replace",
-            )
-            adb_info = res.stdout.splitlines()[0] if res.stdout else "Installed"
-            table.add_row(
-                "Android ADB", "[bold green]✔ OK[/bold green]", f"{adb_path} ({adb_info})"
-            )
-        except Exception:
-            table.add_row("Android ADB", "[bold green]✔ OK[/bold green]", f"{adb_path}")
-    else:
-        all_passed = False
-        hint = (
-            "Run: winget install Google.PlatformTools"
-            if platform.os_type == OSType.WINDOWS
-            else "Run: brew install android-platform-tools"
-            if platform.os_type == OSType.MACOS
-            else "Run: sudo apt-get install -y adb"
-        )
-        table.add_row(
-            "Android ADB",
-            "[bold red]✖ Missing[/bold red]",
-            f"adb not found in PATH or Android SDK. {hint}",
-        )
+# ---------------------------------------------------------------------------
+# CLI-only extra rows (not engine probes)
+# ---------------------------------------------------------------------------
 
-    # 2b. ADB Authentication RSA Keys Check
-    key_status = inspect_adb_keys()
-    if key_status.is_corrupted:
-        if fix:
-            heal_result = heal_adb_keys(adb_path=adb_path)
-            if heal_result.get("success"):
-                table.add_row(
-                    "ADB Auth Keys",
-                    "[bold green]✔ Repaired[/bold green]",
-                    "Corrupted RSA keys detected and automatically regenerated.",
-                )
-            else:
-                all_passed = False
-                table.add_row(
-                    "ADB Auth Keys",
-                    "[bold red]✖ Error[/bold red]",
-                    f"Failed to auto-heal keys: {heal_result.get('message')}",
-                )
-        else:
-            all_passed = False
-            table.add_row(
-                "ADB Auth Keys",
-                "[bold red]✖ Corrupted[/bold red]",
-                f"{key_status.error_reason} Run [bold cyan]artemis doctor --fix[/bold cyan] to auto-repair.",
-            )
-    elif key_status.exists:
-        table.add_row(
-            "ADB Auth Keys",
-            "[bold green]✔ OK[/bold green]",
-            f"{key_status.key_path} ({key_status.key_size_bytes} bytes RSA)",
-        )
-    else:
-        table.add_row(
-            "ADB Auth Keys",
-            "[bold cyan]○ Ready[/bold cyan]",
-            "Keys will be generated automatically on first device connection.",
-        )
 
-    # 3. Connected Android Devices
-    devices_info: list[tuple[str, str, str]] = []
-    if adb_path:
-        try:
-            res = subprocess.run(
-                [adb_path, "devices", "-l"],
-                capture_output=True,
-                text=True,
-                timeout=5,
-                encoding="utf-8",
-                errors="replace",
-            )
-            lines = [line_str.strip() for line_str in res.stdout.splitlines() if line_str.strip()]
-            for line in lines[1:]:  # skip 'List of devices attached'
-                parts = line.split()
-                if len(parts) >= 2:
-                    serial = parts[0]
-                    state = parts[1]
-                    extra = " ".join(parts[2:])
-                    devices_info.append((serial, state, extra))
-        except (OSError, subprocess.SubprocessError):
-            # adb probe failed or timed out; report as "no devices detected".
-            pass
-
-    if devices_info:
-        active_devices = [d for d in devices_info if d[1] == "device"]
-        if active_devices:
-            summary = "\n".join(
-                [
-                    f"• [bold cyan]{d[0]}[/bold cyan] ({d[2] or 'Authorized'})"
-                    for d in active_devices
-                ]
-            )
-            table.add_row("Android Devices", "[bold green]✔ Connected[/bold green]", summary)
-        else:
-            all_passed = False
-            table.add_row(
-                "Android Devices",
-                "[bold yellow]⚠ Unauthorized[/bold yellow]",
-                "Device detected but unauthorized. Check phone screen for USB Debugging prompt.",
-            )
-    else:
-        table.add_row(
-            "Android Devices",
-            "[bold yellow]⚠ None Found[/bold yellow]",
-            "No Android device or emulator detected. Connect phone via USB or start emulator.",
-        )
-
-    # 4. LLM & Vision OCR Key Configuration
-    gemini_key = settings.get_api_key("google")
-    ocr_key = settings.get_api_key("ocr")
-    openai_key = settings.get_api_key("openai")
-    claude_key = settings.get_api_key("anthropic")
-    openrouter_key = settings.get_api_key("openrouter")
-
-    configured_keys = []
-    if gemini_key:
-        val = gemini_key.get_secret_value()
-        masked = f"{val[:6]}...{val[-4:]}" if len(val) > 10 else "***"
-        configured_keys.append(f"Gemini LLM ({masked})")
-    if openai_key:
-        configured_keys.append("OpenAI")
-    if claude_key:
-        configured_keys.append("Anthropic")
-    if openrouter_key:
-        configured_keys.append("OpenRouter")
-
-    if configured_keys:
-        table.add_row(
-            "LLM Providers", "[bold green]✔ Configured[/bold green]", ", ".join(configured_keys)
-        )
-    else:
-        all_passed = False
-        table.add_row(
-            "LLM Providers",
-            "[bold red]✖ Missing[/bold red]",
-            "No LLM key found in .env. Run [bold cyan]artemis init[/bold cyan] to configure.",
-        )
-
-    # 5. Vision OCR Key Check (Optional)
-    if is_ocr_configured() and ocr_key:
-        val = ocr_key.get_secret_value()
-        masked = f"{val[:6]}...{val[-4:]}" if len(val) > 10 else "***"
-        table.add_row(
-            "Vision OCR",
-            "[bold green]✔ Configured[/bold green]",
-            f"Google Cloud Vision API ({masked})",
-        )
-    else:
-        table.add_row(
-            "Vision OCR",
-            "[bold cyan]○ Optional[/bold cyan]",
-            "OCR_API_KEY is not set. Perception operates in pure XML layout mode.",
-        )
-
-    # 6. Configuration File Health
-    try:
-        cfg = parse_llm_config()
-        planner_model = cfg.planner.model
-        table.add_row(
-            "Configuration",
-            "[bold green]✔ Valid[/bold green]",
-            f"config/artemis.jsonc parsed (Planner: {planner_model})",
-        )
-    except Exception as e:
-        all_passed = False
-        table.add_row(
-            "Configuration",
-            "[bold red]✖ Error[/bold red]",
-            f"Failed to parse config/artemis.jsonc: {e}",
-        )
-
-    # 7. Video Recording Tools (FFmpeg & scrcpy)
-    ffmpeg_path = toolchain.resolve("ffmpeg")
-    scrcpy_path = toolchain.resolve("scrcpy")
-
-    if ffmpeg_path:
-        table.add_row(
-            "FFmpeg Tools", "[bold green]✔ Installed[/bold green]", f"{ffmpeg_path} (Video ready)"
-        )
-    else:
-        hint = (
-            "winget install Gyan.FFmpeg"
-            if platform.os_type == OSType.WINDOWS
-            else "brew install ffmpeg"
-            if platform.os_type == OSType.MACOS
-            else "sudo apt-get install -y ffmpeg"
-        )
-        table.add_row(
-            "FFmpeg Tools",
-            "[dim]⚪ Optional[/dim]",
-            f"Not found. ({hint})",
-        )
-
-    if scrcpy_path:
-        table.add_row(
-            "Screen Recorder",
-            "[bold green]✔ Installed[/bold green]",
-            f"{scrcpy_path} (Live stream ready)",
-        )
-    else:
-        hint = (
-            "winget install Genymobile.scrcpy"
-            if platform.os_type == OSType.WINDOWS
-            else "brew install scrcpy"
-            if platform.os_type == OSType.MACOS
-            else "sudo apt-get install -y scrcpy"
-        )
-        table.add_row(
-            "Screen Recorder",
-            "[dim]⚪ Optional[/dim]",
-            f"scrcpy not found. ({hint})",
-        )
-
-    # 8. Node.js & npm (for UI compilation)
+def _npm_row() -> ExtraRow:
     npm_path = shutil.which("npm")
     if npm_path:
-        table.add_row(
-            "Node.js / npm",
-            "[bold green]✔ Installed[/bold green]",
-            f"{npm_path} (Ready to build Showcase UI)",
-        )
-    else:
-        hint = (
-            "winget install OpenJS.NodeJS.LTS"
-            if platform.os_type == OSType.WINDOWS
-            else "brew install node"
-            if platform.os_type == OSType.MACOS
-            else "sudo apt-get install -y nodejs npm"
-        )
-        table.add_row(
-            "Node.js / npm",
-            "[dim]⚪ Optional[/dim]",
-            f"Not found in PATH. ({hint})",
+        return ExtraRow(
+            key="nodejs_npm",
+            title="Node.js / npm",
+            status="pass",
+            status_markup="[bold green]✔ Installed[/bold green]",
+            summary="Installed",
+            detail=f"{npm_path} (Ready to build Showcase UI)",
         )
+    hint = (
+        "winget install OpenJS.NodeJS.LTS"
+        if platform.os_type == OSType.WINDOWS
+        else "brew install node"
+        if platform.os_type == OSType.MACOS
+        else "sudo apt-get install -y nodejs npm"
+    )
+    return ExtraRow(
+        key="nodejs_npm",
+        title="Node.js / npm",
+        status="missing",
+        status_markup="[dim]⚪ Optional[/dim]",
+        summary="Not Found",
+        detail=f"Not found in PATH. ({hint})",
+    )
 
-    # 9. Showcase UI Build Status
+
+def _showcase_row() -> ExtraRow:
     from artemis.resources import get_bundled_showcase_dist
 
     base_dist = ROOT_DIR / "apps" / "showcase_ui" / "dist"
@@ -342,22 +176,98 @@ def doctor_command(
         if bundled_showcase is not None:
             found_showcase = bundled_showcase / "index.html"
     if found_showcase:
-        table.add_row(
-            "Showcase UI",
-            "[bold green]✔ Compiled[/bold green]",
-            f"{found_showcase.parent} (Angular ready)",
-        )
-    else:
-        table.add_row(
-            "Showcase UI",
-            "[bold yellow]○ Not Compiled[/bold yellow]",
-            "Run ./start.sh or artemis ui to auto-compile.",
+        return ExtraRow(
+            key="showcase_ui",
+            title="Showcase UI",
+            status="pass",
+            status_markup="[bold green]✔ Compiled[/bold green]",
+            summary="Compiled",
+            detail=f"{found_showcase.parent} (Angular ready)",
         )
+    return ExtraRow(
+        key="showcase_ui",
+        title="Showcase UI",
+        status="missing",
+        status_markup="[bold yellow]○ Not Compiled[/bold yellow]",
+        summary="Not Compiled",
+        detail="Run ./start.sh or artemis ui to auto-compile.",
+    )
 
-    console.print(table)
+
+# ---------------------------------------------------------------------------
+# Rendering
+# ---------------------------------------------------------------------------
+
+
+def _status_markup(result: ProbeResult) -> str:
+    status = result.status
+    if status is ProbeStatus.PASS:
+        return "[bold green]✔ OK[/bold green]"
+    if status is ProbeStatus.SKIPPED:
+        return "[dim]○ Skipped[/dim]"
+    summary = escape(result.summary)
+    if status is ProbeStatus.WARN:
+        # A warning keeps its summary whether or not it blocks (the host
+        # probe's warnings degrade the verdict without blocking it).
+        return f"[bold yellow]⚠ {summary}[/bold yellow]"
+    if not result.is_blocker:
+        return "[dim]⚪ Optional[/dim]"
+    return f"[bold red]✖ {summary}[/bold red]"
+
+
+def _action_lines(result: ProbeResult) -> list[str]:
+    """One plain-text line per remediation; ``&&`` chains split for PowerShell 5.1."""
+    lines: list[str] = []
+    for action in result.actions:
+        payload = action.payload.strip()
+        if not payload:
+            continue
+        if action.action_type == "command":
+            for part in payload.split("&&"):
+                if part.strip():
+                    lines.append(f"Run: {part.strip()}")
+        else:
+            lines.append(payload)
+    return lines
+
+
+def _details_markup(result: ProbeResult) -> str:
+    # Only summary/description/actions are ever rendered. Probe metadata can
+    # carry raw credentials (the console prefills its settings form from it)
+    # and must never reach a terminal or a log.
+    parts = [escape(result.description)]
+    if result.status is not ProbeStatus.PASS:
+        for line in _action_lines(result):
+            if line.startswith("Run: "):
+                parts.append(f"[bold cyan]Run:[/bold cyan] {escape(line[len('Run: ') :])}")
+            else:
+                parts.append(escape(line))
+    return "\n".join(parts)
+
+
+def _render_table(results: list[ProbeResult], extras: list[ExtraRow]) -> Table:
+    table = Table(show_header=True, header_style="bold magenta")
+    table.add_column("Component", style="dim", min_width=22, max_width=30)
+    table.add_column("Status", min_width=12, max_width=28)
+    table.add_column("Details & Recommendations", overflow="fold")
+    for result in results:
+        table.add_row(escape(result.title), _status_markup(result), _details_markup(result))
+    for extra in extras:
+        table.add_row(extra.title, extra.status_markup, escape(extra.detail))
+    return table
+
+
+def _render_fixes(console: Console, fixes: list[FixOutcome]) -> None:
+    lines = []
+    for outcome in fixes:
+        mark = "[bold green]✔[/bold green]" if outcome.success else "[bold red]✖[/bold red]"
+        lines.append(f"{mark} {escape(outcome.fix)}: {escape(outcome.message)}")
+    console.print(Panel("\n".join(lines), title="Repairs (--fix)", expand=False))
     console.print()
 
-    if all_passed:
+
+def _render_footer(console: Console, verdict: Verdict, results: list[ProbeResult]) -> None:
+    if verdict == "ready":
         console.print(
             Panel(
                 "[bold green]🎉 All system checks passed![/bold green]\n\n"
@@ -367,12 +277,128 @@ def doctor_command(
                 expand=False,
             )
         )
-    else:
+        return
+
+    if verdict == "degraded":
         console.print(
             Panel(
-                "[bold yellow]💡 Tip:[/bold yellow] Run [bold cyan]artemis init[/bold cyan] to quickly set up your API key and device.",
-                title="Action Required",
+                "[bold green]Required checks passed.[/bold green] Optional components are "
+                "missing; tasks can run, but some features (video replay, OCR) are off.\n\n"
+                "Run your first automation task now:\n"
+                '  [bold cyan]artemis run "Open Settings and check Battery level"[/bold cyan]',
+                title="Status: Ready (optional gaps)",
                 expand=False,
             )
         )
-    console.print()
+        return
+
+    failing = [r.title for r in results if r.is_blocker and r.status is not ProbeStatus.PASS]
+    tips = [
+        "[bold yellow]💡 Blocking issues:[/bold yellow] " + escape(", ".join(failing)),
+        "",
+        "• API keys & device setup: run [bold cyan]artemis init[/bold cyan].",
+        "• Follow the [bold cyan]Run:[/bold cyan] lines above, then re-run "
+        "[bold cyan]artemis doctor[/bold cyan].",
+        "• Using an IDE (Claude Code, Cursor, ...)? Ask it to call "
+        "[bold cyan]mobile_diagnose[/bold cyan] - it runs these same checks and can "
+        "apply safe fixes from the assistant.",
+    ]
+    if adb_keys_corrupted(results):
+        tips.append(
+            "• Corrupted ADB keys detected: run [bold cyan]artemis doctor --fix[/bold cyan]."
+        )
+    console.print(Panel("\n".join(tips), title="Action Required", expand=False))
+
+
+def _json_document(
+    results: list[ProbeResult],
+    extras: list[ExtraRow],
+    fixes: list[FixOutcome],
+    verdict: Verdict,
+) -> dict[str, Any]:
+    # Metadata is intentionally omitted: it may hold raw API keys.
+    checks = [
+        {
+            "id": r.id,
+            "title": r.title,
+            "status": r.status.value,
+            "required": r.is_blocker,
+            "summary": r.summary,
+            "detail": r.description,
+            "fix": []
+            if r.status is ProbeStatus.PASS
+            else [
+                {"type": a.action_type, "label": a.label, "payload": a.payload} for a in r.actions
+            ],
+        }
+        for r in results
+    ]
+    return {
+        "verdict": verdict,
+        "checks": checks,
+        "extras": {
+            e.key: {
+                "title": e.title,
+                "status": e.status,
+                "summary": e.summary,
+                "detail": e.detail,
+            }
+            for e in extras
+        },
+        "fixes": [{"fix": f.fix, "success": f.success, "message": f.message} for f in fixes],
+    }
+
+
+# ---------------------------------------------------------------------------
+# Command
+# ---------------------------------------------------------------------------
+
+
+def doctor_command(
+    fix: bool = typer.Option(
+        False,
+        "--fix",
+        "-f",
+        help=(
+            "Automatically repair fixable environment issues (corrupted ADB authentication "
+            "keys, stale device locks left by crashed runners)."
+        ),
+    ),
+    json_output: bool = typer.Option(
+        False,
+        "--json",
+        help="Print the diagnosis as a JSON document instead of a table.",
+    ),
+) -> None:
+    """Run diagnostics to inspect system dependencies, device connectivity, and configuration."""
+    results, fixes = asyncio.run(_diagnose(fix))
+    extras = [_npm_row(), _showcase_row()]
+    verdict = base_verdict(results)
+
+    if json_output:
+        typer.echo(
+            json.dumps(
+                _json_document(results, extras, fixes, verdict), indent=2, ensure_ascii=False
+            )
+        )
+    else:
+        console = Console()
+        console.print()
+        os_name = sys_platform.system()
+        arch_name = sys_platform.machine()
+        console.print(
+            Panel(
+                f"[bold cyan]☕ Artemis System & Environment Doctor[/bold cyan]\n"
+                f"[dim]Platform: {os_name} ({arch_name}) | PAL: {platform.os_type.value}[/dim]",
+                expand=False,
+            )
+        )
+        if fixes:
+            _render_fixes(console, fixes)
+        console.print(_render_table(results, extras))
+        console.print()
+        _render_footer(console, verdict, results)
+        console.print()
+
+    if verdict == "blocked":
+        raise typer.Exit(code=1)
diff --git a/artemis/interfaces/cli/commands/mcp.py b/artemis/interfaces/cli/commands/mcp.py
index c732552..6a6ca35 100644
--- a/artemis/interfaces/cli/commands/mcp.py
+++ b/artemis/interfaces/cli/commands/mcp.py
@@ -41,6 +41,7 @@ ARTEMIS_MCP_TOOLS = (
     "mobile_manage_task",
     "mobile_get_device_state",
     "mobile_inspect_trace",
+    "mobile_diagnose",
 )
 
 
diff --git a/artemis/mcp/action_executor.py b/artemis/mcp/action_executor.py
index 8cd65b4..b3e565e 100644
--- a/artemis/mcp/action_executor.py
+++ b/artemis/mcp/action_executor.py
@@ -15,8 +15,16 @@
 """MCP-backed action executor for the FlashRunner.
 
 Device actions use the in-process MCP session. Argument normalization,
-coordinate descriptions, smart swipes, post-action observations, state updates,
-tracing, and helper tools are handled here on the agent side.
+element-index resolution, coordinate descriptions, smart swipes, post-action
+observations, state updates, tracing, and helper tools are handled here on the
+agent side.
+
+Flash binds the same agent dialect as the Pro Operator: a ``click``,
+``long_press`` or ``input_text`` target is either an element index into the
+indexed ``--- Visible UI Elements ---`` list (resolved here to the element's
+center, its observed text/bounds/id recorded) or a normalized ``[x, y]`` pair
+carrying the model's own ``target_description``. The wire only ever sees
+coordinates.
 
 Device action status comes from ``ActionResult.ok``; helper tools report failures
 through ``ToolFailure`` or an explicit status.
@@ -66,6 +74,9 @@ AGENT_TOOL_NAMES: frozenset[str] = (
     frozenset({"read_note", "list_notes", "ask_explorer", "video_analyzer"}) | HISTORY_TOOL_NAMES
 )
 
+#: Actions whose ``target`` is a single point: an element index or an [x, y] pair.
+_POINT_TARGET_ACTIONS: frozenset[str] = frozenset({"click", "long_press", "input_text"})
+
 
 class _ArgError(ValueError):
     """Argument-translation failure whose message is already fully formatted."""
@@ -108,15 +119,28 @@ class McpActionExecutor:
         args: dict[str, Any],
         tool_call_id: str,
         state: Any,
+        *,
+        index_elements: list[dict[str, Any]] | None = None,
     ) -> ToolExecutionResult:
-        """Executes the named tool and wraps the outcome for the calling agent."""
+        """Executes the named tool and wraps the outcome for the calling agent.
+
+        ``index_elements`` is the element list an index target (``click(3)``)
+        resolves against; ``None`` means ``state.indexed_elements`` at call
+        time. A multi-action turn passes the list from the observation the
+        model decided on, so its later indices are not resolved against the
+        list refreshed by its earlier actions (``state.indexed_elements`` is
+        still refreshed after every action: it is what the next observation
+        shows).
+        """
         raw_name = name.split(":")[-1] if ":" in name else name
 
         if raw_name in AGENT_TOOL_NAMES:
             return await self._execute_agent_tool(raw_name, name, args, tool_call_id, state)
 
         if raw_name in self.action_tool_names:
-            return await self._execute_device_action(raw_name, name, args, tool_call_id, state)
+            return await self._execute_device_action(
+                raw_name, name, args, tool_call_id, state, index_elements=index_elements
+            )
 
         return ToolExecutionResult(
             tool_call_id=tool_call_id,
@@ -134,6 +158,8 @@ class McpActionExecutor:
         args: dict[str, Any],
         tool_call_id: str,
         state: Any,
+        *,
+        index_elements: list[dict[str, Any]] | None = None,
     ) -> ToolExecutionResult:
         span = TraceSpan(name=raw_name, trace_type="action", ctx=self.ctx)
         span.payload = {"args": args}
@@ -144,12 +170,18 @@ class McpActionExecutor:
         shot_path: str | None = None
         xml_list: str | None = None
         target_semantics: dict[str, Any] = {}
+        target_coordinates: list[int] | None = None
         with span:
             try:
                 session = await self._session_or_start()
                 wire_name, wire_args, finalize, target_semantics = self._translate(
-                    raw_name, args, state
+                    raw_name, args, state, index_elements=index_elements
                 )
+                if raw_name in _POINT_TARGET_ACTIONS:
+                    # The normalized point the action was sent to: the recorded
+                    # coordinates of an index target (the model named an index,
+                    # not a point).
+                    target_coordinates = wire_args.get("target")
                 extension = raw_name not in (REQUIRED_ACTIONS | OPTIONAL_ACTIONS)
 
                 if extension:
@@ -214,6 +246,7 @@ class McpActionExecutor:
                 "code": res.code.value,
                 "normalized_coordinates": res.normalized_coordinates,
                 "target_semantics": target_semantics,
+                "target_coordinates": target_coordinates,
             },
         )
 
@@ -232,24 +265,35 @@ class McpActionExecutor:
     # --- Argument translation --------------------------------------------------------
 
     def _translate(
-        self, raw_name: str, args: dict[str, Any], state: Any
+        self,
+        raw_name: str,
+        args: dict[str, Any],
+        state: Any,
+        *,
+        index_elements: list[dict[str, Any]] | None = None,
     ) -> tuple[str, dict[str, Any], Any, dict[str, Any]]:
         """Maps agent-facing args to wire args; returns (name, args, finalize, recorded).
 
         ``finalize(res)`` adds client-side context to swipe result messages.
-        ``recorded`` contains validated target descriptions in the Pro Operator's
-        record format. Focused input and directional swipes have no coordinate
-        target, so they do not record a description.
+        ``recorded`` holds the target semantics in the Pro Operator's record
+        format: the observed element fields of an index target, or the validated
+        ``target_description`` of a coordinate target. Focused input and
+        directional swipes have no target, so they record nothing.
+        ``index_elements`` overrides the list index targets resolve against
+        (see :meth:`execute`).
         """
         if raw_name == "click":
-            target = self._require_pair(
-                args.get("target") or args.get("coordinates") or [], "click"
+            target, recorded = self._resolve_target(
+                args.get("target") or args.get("coordinates"),
+                "click",
+                args,
+                state,
+                index_elements=index_elements,
             )
-            recorded = self._require_description(args, "click")
             return (
                 "click",
                 {
-                    "target": list(target),
+                    "target": target,
                     "times": args.get("times", 1),
                     "delay_ms": args.get("delay_ms", 100),
                 },
@@ -258,14 +302,17 @@ class McpActionExecutor:
             )
 
         if raw_name == "long_press":
-            target = self._require_pair(
-                args.get("target") or args.get("coordinates") or [], "long press"
+            target, recorded = self._resolve_target(
+                args.get("target") or args.get("coordinates"),
+                "long press",
+                args,
+                state,
+                index_elements=index_elements,
             )
-            recorded = self._require_description(args, "long press")
             return (
                 "long_press",
                 {
-                    "target": list(target),
+                    "target": target,
                     "duration_ms": args.get("duration_ms", args.get("duration", 1000)),
                 },
                 None,
@@ -277,8 +324,9 @@ class McpActionExecutor:
             target = None
             recorded = {}
             if raw_target:
-                target = list(self._require_pair(raw_target, "input text"))
-                recorded = self._require_description(args, "input text")
+                target, recorded = self._resolve_target(
+                    raw_target, "input text", args, state, index_elements=index_elements
+                )
             return (
                 "input_text",
                 {
@@ -304,7 +352,7 @@ class McpActionExecutor:
             )
 
         if raw_name == "swipe":
-            return self._translate_swipe(args, state)
+            return self._translate_swipe(args, state, index_elements=index_elements)
 
         if raw_name == "press_key":
             return "press_key", {"key": args.get("key", "BACK")}, None, {}
@@ -338,17 +386,101 @@ class McpActionExecutor:
         # Backend extension: pass the arguments straight through.
         return raw_name, dict(args), None, {}
 
-    @staticmethod
-    def _require_pair(raw: Any, label: str) -> tuple[int, int]:
+    def _screen_size(self) -> tuple[int, int]:
+        """The device resolution the indexed element list was built against."""
+        device = getattr(self.ctx, "device", None)
+        width = getattr(device, "device_width", None) if device else None
+        height = getattr(device, "device_height", None) if device else None
+        return (
+            width if isinstance(width, int) and width > 0 else 1080,
+            height if isinstance(height, int) and height > 0 else 2400,
+        )
+
+    def _resolve_target(
+        self,
+        raw: Any,
+        label: str,
+        args: dict[str, Any],
+        state: Any,
+        *,
+        index_elements: list[dict[str, Any]] | None = None,
+    ) -> tuple[list[int], dict[str, Any]]:
+        """Resolves a point target to ``([x, y] normalized, recorded semantics)``.
+
+        An element index carries observed semantics (text, bounds, id, class
+        straight from the indexed list); a coordinate pair carries only the
+        model's own ``target_description``. The two never mix (Pro parity).
+        """
         target = normalize_coordinate_target(raw)
-        if not isinstance(target, (list, tuple)) or len(target) != 2:
-            prefix = {
-                "click": "Error during click",
-                "long press": "Error during long press",
-                "input text": "Error during input text",
-            }[label]
-            raise _ArgError(f"{prefix}: Invalid target format: {raw}")
-        return int(target[0]), int(target[1])
+        if isinstance(target, bool):
+            target = None
+        if isinstance(target, (int, float)):
+            return self._resolve_index(int(target), label, state, index_elements=index_elements)
+        if isinstance(target, (list, tuple)) and len(target) == 2:
+            recorded = self._require_description(args, label)
+            return [int(target[0]), int(target[1])], recorded
+        raise _ArgError(
+            f"Error during {label}: Invalid target format: {raw!r}. Use an element"
+            " index from the Visible UI Elements list (e.g. 3) or normalized [x, y]"
+            " coordinates with a target_description."
+        )
+
+    def _resolve_index(
+        self,
+        index: int,
+        label: str,
+        state: Any,
+        *,
+        index_elements: list[dict[str, Any]] | None = None,
+    ) -> tuple[list[int], dict[str, Any]]:
+        """Maps an element index onto the element's center (normalized 0-1000).
+
+        The recorded fields are what the Operator records for an index target,
+        with bounds normalized like every other Flash coordinate. The index is
+        resolved against ``index_elements`` when given, else against the
+        state's current list.
+        """
+        elements = self._index_elements(state, index_elements)
+        if not 1 <= index <= len(elements):
+            hint = (
+                " The list is empty on this screen."
+                if not elements
+                else f" Active index range is 1 to {len(elements)}."
+            )
+            raise _ArgError(
+                f"Error during {label}: Invalid target index {index}.{hint} Use an index"
+                " shown in the Visible UI Elements list, or normalized [x, y]"
+                " coordinates with a target_description (ask_explorer can locate an"
+                " element that is visible but not listed)."
+            )
+        element = elements[index - 1]
+        width, height = self._screen_size()
+
+        def _norm_x(v: Any) -> int:
+            return int(max(0, min(1000, round(float(v) * 1000 / max(1, width)))))
+
+        def _norm_y(v: Any) -> int:
+            return int(max(0, min(1000, round(float(v) * 1000 / max(1, height)))))
+
+        center = element.get("center")
+        if not (isinstance(center, (list, tuple)) and len(center) == 2):
+            raise _ArgError(f"Error during {label}: element [{index}] has no usable center.")
+        bounds = element.get("bounds")
+        norm_bounds = None
+        if isinstance(bounds, (list, tuple)) and len(bounds) == 4:
+            norm_bounds = [
+                _norm_x(bounds[0]),
+                _norm_y(bounds[1]),
+                _norm_x(bounds[2]),
+                _norm_y(bounds[3]),
+            ]
+        recorded = {
+            "target_text": element.get("text"),
+            "target_bounds": norm_bounds,
+            "target_resource_id": element.get("resource_id"),
+            "target_class": element.get("class"),
+        }
+        return [_norm_x(center[0]), _norm_y(center[1])], recorded
 
     @staticmethod
     def _require_description(args: dict[str, Any], label: str) -> dict[str, Any]:
@@ -414,11 +546,23 @@ class McpActionExecutor:
             resolved.append([nx, ny])
         return resolved
 
+    @staticmethod
+    def _index_elements(
+        state: Any, index_elements: list[dict[str, Any]] | None
+    ) -> list[dict[str, Any]]:
+        """The element list index targets resolve against (``None`` -> state)."""
+        if index_elements is not None:
+            return index_elements
+        return getattr(state, "indexed_elements", None) or []
+
     def _translate_swipe(
-        self, args: dict[str, Any], state: Any
+        self,
+        args: dict[str, Any],
+        state: Any,
+        *,
+        index_elements: list[dict[str, Any]] | None = None,
     ) -> tuple[str, dict[str, Any], Any, dict[str, Any]]:
-        width = getattr(self.ctx.device, "device_width", 1080) if self.ctx.device else 1080
-        height = getattr(self.ctx.device, "device_height", 2400) if self.ctx.device else 2400
+        width, height = self._screen_size()
         default_duration = args.get("duration", 400)
         kind, target, final_duration = parse_swipe_parameters(
             dict(args), default_duration=default_duration
@@ -429,7 +573,7 @@ class McpActionExecutor:
             x1, y1, x2, y2, smart_dur = compute_smart_swipe_coordinates(
                 direction=target,
                 target=args.get("target"),
-                indexed_elements=getattr(state, "indexed_elements", None) if state else None,
+                indexed_elements=self._index_elements(state, index_elements) if state else None,
                 ui_hierarchy=getattr(state, "latest_ui_hierarchy", None) if state else None,
                 width=width,
                 height=height,
@@ -608,6 +752,9 @@ class McpActionExecutor:
                 self.ctx, state, query, context_feedback or "", agent_name=self.agent_name
             )
             registered = register_candidates(self.ctx, state, outcome)
-            return render_text(query, outcome, registered), not outcome.error
+            # Candidates join ``state.indexed_elements``, and this executor's
+            # ``click`` resolves an index against that list (Pro parity), so the
+            # answer teaches the index syntax next to the coordinates.
+            return render_text(query, outcome, registered, index_targets=True), not outcome.error
         except Exception as e:
             return f"Error executing ask_explorer: {e}", False
diff --git a/artemis/mcp/action_specs.py b/artemis/mcp/action_specs.py
index 24eb1e5..1ea69a1 100644
--- a/artemis/mcp/action_specs.py
+++ b/artemis/mcp/action_specs.py
@@ -21,49 +21,46 @@ the declarations drifted apart (``click.target`` took an element index in one pl
 and only coordinates in another). This module is now the single place all three are
 *defined*; the historical sites import their surface from here, generated.
 
-An action has up to three dialects, and the differences between them are **deliberate
-and declared**, not accidental:
+An action has one agent-facing dialect and one wire dialect:
 
-* ``operator`` -- the LangChain shell tools the Operator binds. The Operator receives
-  an indexed "Visible UI Elements" list and its prompt teaches index-first targeting,
-  so target parameters accept ``int`` element indices as well as normalized
-  coordinates. The shells are declaration-only ("Action Recorded"): the Operator's
-  translate step lowers them into structured decisions.
-* ``declaration`` -- the JSON ``ToolDeclaration`` bound by the Validator's
-  FlashRunner. These agents act on coordinates directly (the
-  element list they see carries coordinates), so target parameters are coordinate
-  pairs and the wording teaches the act-then-observe loop ("The screen after X will
-  be returned automatically").
+* ``operator`` -- the agent dialect. Both profiles receive the same indexed
+  "Visible UI Elements" list, so target parameters accept ``int`` element indices
+  as well as normalized coordinates. The Pro Operator binds it as a LangChain shell
+  (declaration-only, "Action Recorded": the Operator's translate step lowers the
+  call into structured decisions); the FlashRunner binds the very same description
+  and parameters projected onto a JSON ``ToolDeclaration`` (:func:`tool_declaration`),
+  and ``McpActionExecutor`` resolves an index against the current element list.
+  One definition, two bindings: the two profiles can no longer drift apart.
+* ``declaration`` -- a JSON-only agent dialect, used solely for actions that have
+  no operator shell (``click_sequence`` is declared to Flash alone).
 * ``wire`` -- what the action MCP server serves, mirroring the actuator protocol
   one-to-one: normalized coordinates, millisecond durations, no addressing sugar.
-  The client-side executor (``McpActionExecutor``) lowers the
-  agent dialects onto it.
+  The client-side executor (``McpActionExecutor``) lowers the agent dialect onto it.
 
-A coordinate target names nothing by itself, so both agent dialects pair it with
+A coordinate target names nothing by itself, so the agent dialect pairs it with
 ``target_description`` (``target_descriptions`` for a ``click_sequence``): the
 model's own statement of what it is aiming at. It is required whenever the target
-is a coordinate (always, in the declaration dialect), recorded verbatim on the
-action, and never sent to the wire. An element index needs none -- its text,
-bounds and id are read from the indexed list -- and the recorded fields stay
-separate (``target_text``/``target_bounds``/... for observed elements,
-``target_description`` for described coordinates) so no reader can mistake the
-model's belief for an observation.
+is a coordinate, recorded verbatim on the action, and never sent to the wire. An
+element index needs none -- its text, bounds and id are read from the indexed
+list -- and the recorded fields stay separate (``target_text``/``target_bounds``/...
+for observed elements, ``target_description`` for described coordinates) so no
+reader can mistake the model's belief for an observation.
 
-Each ``ActionSpec.param_bridge`` maps operator parameter names onto declaration
-parameter names, so every rename (``duration`` -> ``duration_ms``, ``gesture`` ->
-``action``) is written down exactly once. ``tests/unit/mcp/test_action_specs.py``
-re-derives the bridge from the generated schemas, so an undeclared divergence --
-today's definition of drift -- fails CI instead of shipping.
+``tests/unit/mcp/test_action_specs.py`` pins the generated schema of every model
+surface and checks that the Flash declaration of each shared action is exactly the
+operator shell's schema, so a divergence between what one profile sees and what the
+other sees -- the historical definition of drift -- fails CI instead of shipping.
 
 The classification of actions (required/optional/internal) stays in
 ``action_manifest``; this module holds their schemas and teaching text.
 """
 
 from collections.abc import Awaitable, Callable
-from dataclasses import dataclass, field
+from dataclasses import dataclass
 from functools import cache
 import inspect
-from typing import Annotated, Any, Literal
+import types
+from typing import Annotated, Any, Literal, Union, get_args, get_origin
 
 from langchain_core.tools import StructuredTool
 from mcp.types import CallToolResult
@@ -105,7 +102,11 @@ class ParamSpec:
 
 @dataclass(frozen=True)
 class OperatorDialect:
-    """The Operator's LangChain shell: index-capable targets, declaration-only body."""
+    """The agent dialect: index-capable targets, one wording for both profiles.
+
+    Bound by the Pro Operator as a declaration-only LangChain shell and by the
+    FlashRunner as the JSON projection of the same parameters.
+    """
 
     description: str
     params: tuple[ParamSpec, ...]
@@ -113,7 +114,7 @@ class OperatorDialect:
 
 @dataclass(frozen=True)
 class DeclarationDialect:
-    """The Validator/Flash JSON declaration, wording preserved."""
+    """A JSON-only agent dialect, for actions without an operator shell."""
 
     description: str
     parameters: dict[str, Any]
@@ -139,57 +140,43 @@ class ActionSpec:
 
     Attributes:
         name: The canonical tool name every dialect shares.
-        operator: Operator shell dialect, or ``None`` when the Operator does not bind
-            this action.
-        declaration: Validator/Flash dialect, or ``None`` when no JSON declaration
-            exists (an action can be wire-only, reachable through executors but never
-            declared to a model directly).
+        operator: The agent dialect (Operator shell and, projected, the Flash
+            declaration), or ``None`` when neither profile binds this action as a
+            shell.
+        declaration: A JSON-only agent dialect for actions without an operator
+            shell, or ``None`` (an action can be wire-only, reachable through
+            executors but never declared to a model directly).
         wire: Action-server dialect; ``None`` only for purely virtual actions.
-        param_bridge: operator param name -> declaration param name, for every
-            operator param, when both dialects exist. Identical names map to
-            themselves; renames are the deliberate dialect differences.
-        differences: Human-readable record of every deliberate cross-dialect
-            divergence (semantics, not just spelling). Empty means the dialects
-            align modulo the documented dialect philosophy above.
+        differences: Human-readable record of every deliberate divergence between
+            the agent dialect and the wire (semantics, not just spelling). Empty
+            means the dialects align modulo the documented dialect philosophy above.
     """
 
     name: str
     operator: OperatorDialect | None = None
     declaration: DeclarationDialect | None = None
     wire: WireDialect | None = None
-    param_bridge: dict[str, str] = field(default_factory=dict)
     differences: str = ""
 
 
 # --- Shared type aliases -------------------------------------------------------------
 
-#: Operator-dialect target: element index into the indexed UI list, or a normalized
-#: [x, y] pair. Only the Operator sees this union; see the module docstring.
+#: Agent-dialect target: element index into the indexed UI list, or a normalized
+#: [x, y] pair.
 IndexOrCoords = int | list[int]
 
 Direction = Literal["up", "down", "left", "right"]
 
-_COORD_PAIR_JSON = {
-    "type": "array",
-    "items": {"type": "integer"},
-}
-
-#: Operator-dialect wording for the description that a coordinate target must carry.
-#: An element index already names its element (its text, id and bounds are recorded
-#: from the indexed list); a bare coordinate names nothing, so the model states what
-#: it is aiming at and that statement is recorded as ``target_description``.
-_OPERATOR_TARGET_DESCRIPTION = (
+#: Wording for the description that a coordinate target must carry. An element
+#: index already names its element (its text, id and bounds are recorded from the
+#: indexed list); a bare coordinate names nothing, so the model states what it is
+#: aiming at and that statement is recorded as ``target_description``.
+_TARGET_DESCRIPTION = (
     "What the target is, in a few words (e.g. 'play button', 'search input',"
     " 'video body'). REQUIRED when target is a coordinate pair; ignored for an"
     " element index."
 )
 
-#: Declaration-dialect wording (coordinates-only dialect: always required).
-_DECLARATION_TARGET_DESCRIPTION = (
-    "What the target is, in a few words (e.g. 'play button', 'search input',"
-    " 'video body'). Required: a coordinate names nothing by itself."
-)
-
 
 # --- Wire bindings -------------------------------------------------------------------
 # Each binding reproduces the exact conversion of the historical hand-written FastMCP
@@ -274,7 +261,7 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ParamSpec(
                     "target_description",
                     str | None,
-                    _OPERATOR_TARGET_DESCRIPTION,
+                    _TARGET_DESCRIPTION,
                     required=False,
                     default=None,
                 ),
@@ -296,39 +283,6 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ),
             ),
         ),
-        declaration=DeclarationDialect(
-            description=(
-                "[ACTION] Tap/click on the target coordinate on the screen. The screen"
-                " after click will be returned automatically. For buttons, checkboxes,"
-                " tabs, icons, items in a list, tap ON the element. For text fields /"
-                " search bars / input boxes, tap INSIDE the input box to focus it."
-            ),
-            parameters={
-                "type": "object",
-                "properties": {
-                    "target": {
-                        "type": "array",
-                        "items": {"type": "integer"},
-                        "description": "Normalized coordinates [x, y] in 0-1000 scale.",
-                    },
-                    "target_description": {
-                        "type": "string",
-                        "description": _DECLARATION_TARGET_DESCRIPTION,
-                    },
-                    "times": {
-                        "type": "integer",
-                        "description": (
-                            "Number of taps to perform (default 1). Set to 2 for double click."
-                        ),
-                    },
-                    "delay_ms": {
-                        "type": "integer",
-                        "description": "Delay between taps in milliseconds (default 100).",
-                    },
-                },
-                "required": ["target", "target_description"],
-            },
-        ),
         wire=WireDialect(
             description="Tap at a 0-1000 normalized [x, y] coordinate.",
             params=(
@@ -338,17 +292,11 @@ _SPECS: tuple[ActionSpec, ...] = (
             ),
             bind=_wire_click,
         ),
-        param_bridge={
-            "target": "target",
-            "target_description": "target_description",
-            "times": "times",
-            "delay_ms": "delay_ms",
-        },
         differences=(
-            "target: operator accepts an element index or a coordinate pair; the"
-            " declaration and wire dialects take coordinates only."
-            " target_description: recorded, never sent to the wire; the operator"
-            " requires it only for coordinate targets, the declaration always."
+            "target: the agent dialect accepts an element index or a coordinate pair"
+            " (an index is resolved client-side against the indexed element list); the"
+            " wire takes coordinates only. target_description: recorded, never sent"
+            " to the wire; required only for coordinate targets."
         ),
     ),
     ActionSpec(
@@ -407,6 +355,9 @@ _SPECS: tuple[ActionSpec, ...] = (
             " burst instead); sequence entries are normalized coordinate pairs in both"
             " dialects (an element index is refused, never resolved client-side)."
             " target_descriptions is recorded per entry and never sent to the wire."
+            " Unlike click, a burst is not resolved against the element list: its"
+            " whole point is to outrun a transient UI, and the list was captured"
+            " before the trigger tap."
         ),
     ),
     ActionSpec(
@@ -427,7 +378,7 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ParamSpec(
                     "target_description",
                     str | None,
-                    _OPERATOR_TARGET_DESCRIPTION,
+                    _TARGET_DESCRIPTION,
                     required=False,
                     default=None,
                 ),
@@ -440,31 +391,6 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ),
             ),
         ),
-        declaration=DeclarationDialect(
-            description=(
-                "[ACTION] Long press on a target coordinate on the screen. The screen"
-                " after long pressing will be returned automatically."
-            ),
-            parameters={
-                "type": "object",
-                "properties": {
-                    "target": {
-                        "type": "array",
-                        "items": {"type": "integer"},
-                        "description": "Normalized coordinates [x, y] in 0-1000 scale.",
-                    },
-                    "target_description": {
-                        "type": "string",
-                        "description": _DECLARATION_TARGET_DESCRIPTION,
-                    },
-                    "duration_ms": {
-                        "type": "integer",
-                        "description": "Duration of press in milliseconds (default 1000ms).",
-                    },
-                },
-                "required": ["target", "target_description"],
-            },
-        ),
         wire=WireDialect(
             description="Long-press at a 0-1000 normalized [x, y] coordinate.",
             params=(
@@ -473,19 +399,13 @@ _SPECS: tuple[ActionSpec, ...] = (
             ),
             bind=_wire_long_press,
         ),
-        param_bridge={
-            "target": "target",
-            "target_description": "target_description",
-            "duration": "duration_ms",
-        },
         differences=(
-            "target: operator accepts an element index or a coordinate pair."
-            " target_description: recorded, never sent to the wire; the operator"
-            " requires it only for coordinate targets, the declaration always."
-            " duration: the operator spells the duration parameter `duration` (its"
-            " structured decisions and recorded traces carry that key); the"
-            " declaration and wire dialects spell it `duration_ms`. Executors accept"
-            " both spellings."
+            "target: the agent dialect accepts an element index or a coordinate pair;"
+            " the wire takes coordinates only. target_description: recorded, never"
+            " sent to the wire; required only for coordinate targets."
+            " duration: the agent dialect spells the duration parameter `duration`"
+            " (structured decisions and recorded traces carry that key); the wire"
+            " spells it `duration_ms`. Executors accept both spellings."
         ),
     ),
     ActionSpec(
@@ -512,7 +432,7 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ParamSpec(
                     "target_description",
                     str | None,
-                    _OPERATOR_TARGET_DESCRIPTION,
+                    _TARGET_DESCRIPTION,
                     required=False,
                     default=None,
                 ),
@@ -527,39 +447,6 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ),
             ),
         ),
-        declaration=DeclarationDialect(
-            description=(
-                "[ACTION] Type text into an input field on the screen. The screen after"
-                " typing will be returned automatically. Automatically taps inside the"
-                " input box at target [x, y] to focus before typing."
-            ),
-            parameters={
-                "type": "object",
-                "properties": {
-                    "text": {
-                        "type": "string",
-                        "description": "Text to type into the focused input field.",
-                    },
-                    "target": {
-                        "type": "array",
-                        "items": {"type": "integer"},
-                        "description": "Coordinates [x, y] of the input box in 0-1000 scale.",
-                    },
-                    "target_description": {
-                        "type": "string",
-                        "description": _DECLARATION_TARGET_DESCRIPTION,
-                    },
-                    "clear_exist": {
-                        "type": "boolean",
-                        "description": (
-                            "Whether to clear existing text in the input box before typing"
-                            " (default True)."
-                        ),
-                    },
-                },
-                "required": ["text", "target", "target_description"],
-            },
-        ),
         wire=WireDialect(
             description=("Type text, optionally focusing a 0-1000 normalized [x, y] target first."),
             params=(
@@ -569,18 +456,11 @@ _SPECS: tuple[ActionSpec, ...] = (
             ),
             bind=_wire_input_text,
         ),
-        param_bridge={
-            "target": "target",
-            "target_description": "target_description",
-            "text": "text",
-            "clear_exist": "clear_exist",
-        },
         differences=(
-            "target: operator accepts an element index or a coordinate pair, and"
-            " requires a target; the wire dialect allows omitting the target to type"
-            " into the already-focused field. target_description: recorded, never"
-            " sent to the wire; the operator requires it only for coordinate targets,"
-            " the declaration always."
+            "target: the agent dialect accepts an element index or a coordinate pair,"
+            " and requires a target; the wire allows omitting the target to type into"
+            " the already-focused field. target_description: recorded, never sent to"
+            " the wire; required only for coordinate targets."
         ),
     ),
     ActionSpec(
@@ -662,70 +542,6 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ),
             ),
         ),
-        declaration=DeclarationDialect(
-            description=(
-                "[ACTION] Perform a swipe, drag, or slider-adjustment gesture on the screen. The screen and UI hierarchy after swipe will be returned automatically.\n\n"
-                "• Directional Scrolling ('direction' or 'action'): Recommended for general browsing and standard page scrolling in most scenarios. Automatically computes safe swipe vectors and adaptive duration, retains a ~40% visual overlap anchor for zero-omission traversal, and prevents inertial flings. Supports scoping to a sub-container via 'target'. If it fails on certain custom layouts, fall back to specifying exact coordinates ('start' and 'end') directly.\n"
-                "• Precise Coordinate Gestures ('start', 'end' or coordinates list): Best for local, fine-grained interactions such as adjusting sliders/SeekBars (e.g., volume, brightness, progress bars), drag-and-drop / list reordering, or as a reliable fallback when directional scrolling fails on specific containers. Always drag slightly PAST the target position to overcome touch slop and reliably trigger the update. When setting a slider to Maximum (100%) or Minimum (0%), swipe fully to the extreme boundary."
-            ),
-            parameters={
-                "type": "object",
-                "properties": {
-                    "direction": {
-                        "type": "string",
-                        "enum": ["up", "down", "left", "right"],
-                        "description": (
-                            "Direction for scrolling and swiping: 'up' (drags bottom-to-top, scrolling down to reveal content below),"
-                            " 'down' (drags top-to-bottom, scrolling up to reveal content above),"
-                            " 'left' (drags right-to-left, scrolling right),"
-                            " 'right' (drags left-to-right, scrolling left)."
-                        ),
-                    },
-                    "start": {
-                        "type": "array",
-                        "items": {"type": "integer"},
-                        "description": (
-                            "Start normalized coordinates [start_x, start_y] in 0-1000 scale."
-                        ),
-                    },
-                    "end": {
-                        "type": "array",
-                        "items": {"type": "integer"},
-                        "description": (
-                            "End normalized coordinates [end_x, end_y] in 0-1000 scale."
-                        ),
-                    },
-                    "target": {
-                        "description": (
-                            "Optional target element index (e.g. 2) or container bounds"
-                            " [left, top, right, bottom] to scope the directional swipe within."
-                        ),
-                    },
-                    "action": {
-                        "description": (
-                            "Backward-compatible swipe gesture: smart direction string ('up', 'down', 'left', 'right')"
-                            " OR precise custom coordinates [start_x, start_y, end_x, end_y] in 0-1000 scale."
-                        ),
-                    },
-                    "target_description": {
-                        "type": "string",
-                        "description": (
-                            "What is being dragged, in a few words (e.g. 'brightness slider"
-                            " knob'). Required for coordinate gestures ('start'/'end' or a"
-                            " coordinates list); ignored for directional scrolling."
-                        ),
-                    },
-                    "duration": {
-                        "type": "integer",
-                        "description": (
-                            "Optional swipe/drag duration in milliseconds (default 800). For drag-and-drop,"
-                            " list reordering, or sliding/adjusting sliders (e.g., volume, brightness, SeekBars),"
-                            " set duration >= 1000 (e.g. 1500). If omitted for directional swipe, duration is computed automatically."
-                        ),
-                    },
-                },
-            },
-        ),
         wire=WireDialect(
             description="Swipe between two 0-1000 normalized [x, y] points.",
             params=(
@@ -735,23 +551,12 @@ _SPECS: tuple[ActionSpec, ...] = (
             ),
             bind=_wire_swipe,
         ),
-        param_bridge={
-            "direction": "direction",
-            "start": "start",
-            "end": "end",
-            "target": "target",
-            "gesture": "action",
-            "target_description": "target_description",
-            "duration": "duration",
-        },
         differences=(
-            "target_description: recorded, never sent to the wire; required by both"
-            " agent dialects for coordinate gestures only."
-            " gesture/action: the legacy combined direction-or-coordinates parameter is"
-            " spelled `gesture` in the operator dialect and `action` in the"
-            " declaration dialect (`action` collides with the operator's structured"
-            " decision verb field). Smart directional swipes exist only in the agent"
-            " dialects; the wire takes a resolved start/end pair, and direction"
+            "target_description: recorded, never sent to the wire; required for"
+            " coordinate gestures only. gesture: the legacy combined"
+            " direction-or-coordinates parameter (executors also accept the older"
+            " `action` spelling). Smart directional swipes exist only in the agent"
+            " dialect; the wire takes a resolved start/end pair, and direction"
             " resolution happens client-side against the live UI tree."
         ),
     ),
@@ -770,24 +575,6 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ),
             ),
         ),
-        declaration=DeclarationDialect(
-            description=(
-                "[ACTION] Press a physical or virtual system button. The screen after"
-                " pressing will be returned automatically."
-            ),
-            parameters={
-                "type": "object",
-                "properties": {
-                    "key": {
-                        "type": "string",
-                        "description": (
-                            "Standard Android system button name (ENTER, BACK, HOME, APP_SWITCH)."
-                        ),
-                    }
-                },
-                "required": ["key"],
-            },
-        ),
         wire=WireDialect(
             description=(
                 "Press a device key (home, back, enter, delete, tab, search, menu, app_switch)."
@@ -795,13 +582,11 @@ _SPECS: tuple[ActionSpec, ...] = (
             params=(ParamSpec("key", str),),
             bind=_wire_press_key,
         ),
-        param_bridge={"key": "key"},
         differences=(
-            "key vocabulary: the operator dialect is a closed uppercase enum (its"
-            " translate step emits Android KEYCODE_* names); the declaration dialect"
-            " is an open string taught the same uppercase names; the wire takes the"
-            " actuator's bare lowercase key words. `to_canonical_call` and the"
-            " executors normalize between them."
+            "key vocabulary: the agent dialect is a closed uppercase enum (the"
+            " Operator's translate step emits Android KEYCODE_* names); the wire"
+            " takes the actuator's bare lowercase key words. `to_canonical_call` and"
+            " the executors normalize between them."
         ),
     ),
     ActionSpec(
@@ -817,26 +602,6 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ),
             ),
         ),
-        declaration=DeclarationDialect(
-            description=(
-                "[ACTION] Launch or force stop a specified application. The screen"
-                " after launch/stop will be returned automatically."
-            ),
-            parameters={
-                "type": "object",
-                "properties": {
-                    "action": {
-                        "type": "string",
-                        "description": "The action type ('launch' or 'stop').",
-                    },
-                    "app_name": {
-                        "type": "string",
-                        "description": "Display name or package name of the application.",
-                    },
-                },
-                "required": ["action", "app_name"],
-            },
-        ),
         wire=WireDialect(
             description="Launch or stop an app by human-readable name or package.",
             params=(
@@ -845,7 +610,6 @@ _SPECS: tuple[ActionSpec, ...] = (
             ),
             bind=_wire_manage_app,
         ),
-        param_bridge={"action": "action", "app_name": "app_name"},
     ),
     ActionSpec(
         name="wait_for_delay",
@@ -867,32 +631,11 @@ _SPECS: tuple[ActionSpec, ...] = (
                 ),
             ),
         ),
-        declaration=DeclarationDialect(
-            description=(
-                "[ACTION] Pause execution and wait for a specified duration in milliseconds."
-                " The screen after pause will be returned automatically."
-            ),
-            parameters={
-                "type": "object",
-                "properties": {
-                    "time_in_ms": {
-                        "type": "integer",
-                        "description": (
-                            "The exact duration to pause in milliseconds (e.g., 2000 for 2s,"
-                            " 60000 for 1 min, 180000 for 3 mins, 300000 for 5 mins)."
-                            " Convert any required waiting duration into milliseconds."
-                        ),
-                    }
-                },
-                "required": ["time_in_ms"],
-            },
-        ),
         wire=WireDialect(
             description="Wait for a fixed number of milliseconds.",
             params=(ParamSpec("time_in_ms", int),),
             bind=_wire_wait_for_delay,
         ),
-        param_bridge={"time_in_ms": "time_in_ms"},
     ),
     ActionSpec(
         name="wait_for_text",
@@ -1007,16 +750,73 @@ def operator_shell_tool(name: str) -> StructuredTool:
     )
 
 
+_SCALAR_JSON: dict[Any, dict[str, str]] = {
+    bool: {"type": "boolean"},
+    int: {"type": "integer"},
+    float: {"type": "number"},
+    str: {"type": "string"},
+}
+
+
+def _json_schema(annotation: Any) -> dict[str, Any]:
+    """Projects one Python-typed parameter annotation onto JSON schema.
+
+    ``None`` members of a union only make the parameter optional (its
+    ``required`` flag says so); they never appear in the projected schema, so
+    the declaration carries no ``null`` alternatives or ``default`` noise.
+    """
+    origin = get_origin(annotation)
+    if origin in (Union, types.UnionType):
+        members = [a for a in get_args(annotation) if a is not type(None)]
+        schemas = [_json_schema(m) for m in members]
+        return schemas[0] if len(schemas) == 1 else {"anyOf": schemas}
+    if origin is Literal:
+        return {"type": "string", "enum": list(get_args(annotation))}
+    if origin is list:
+        (item,) = get_args(annotation) or (str,)
+        return {"type": "array", "items": _json_schema(item)}
+    try:
+        return dict(_SCALAR_JSON[annotation])
+    except KeyError:
+        raise TypeError(f"No JSON projection for parameter annotation {annotation!r}.") from None
+
+
+def _projected_parameters(dialect: OperatorDialect) -> dict[str, Any]:
+    """The operator shell's parameters as a JSON-schema ``parameters`` object."""
+    properties: dict[str, Any] = {}
+    required: list[str] = []
+    for p in dialect.params:
+        schema = _json_schema(p.annotation)
+        if p.description:
+            schema["description"] = p.description
+        properties[p.name] = schema
+        if p.required:
+            required.append(p.name)
+    return {"type": "object", "properties": properties, "required": required}
+
+
+@cache
 def tool_declaration(name: str) -> ToolDeclaration:
-    """Builds the Validator/Flash ``ToolDeclaration`` for one action."""
-    dialect = ACTION_SPECS[name].declaration
-    if dialect is None:
-        raise ValueError(f"Action '{name}' has no declaration dialect.")
-    return ToolDeclaration(
-        name=name,
-        description=dialect.description,
-        parameters=dialect.parameters,
-    )
+    """Builds the Flash ``ToolDeclaration`` for one action.
+
+    A shared action is the operator shell projected onto JSON (same description,
+    same parameters, same targeting semantics); a JSON-only action uses its own
+    ``DeclarationDialect``.
+    """
+    spec = ACTION_SPECS[name]
+    if spec.declaration is not None:
+        return ToolDeclaration(
+            name=name,
+            description=spec.declaration.description,
+            parameters=spec.declaration.parameters,
+        )
+    if spec.operator is not None:
+        return ToolDeclaration(
+            name=name,
+            description=spec.operator.description,
+            parameters=_projected_parameters(spec.operator),
+        )
+    raise ValueError(f"Action '{name}' has no agent dialect to declare.")
 
 
 def wire_dialects() -> tuple[ActionSpec, ...]:
diff --git a/artemis/memory/chunking.py b/artemis/memory/chunking.py
index 2cd4b52..4e56454 100644
--- a/artemis/memory/chunking.py
+++ b/artemis/memory/chunking.py
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-"""History compression into segment chunks, eras, and a session snapshot.
+"""History compression into segment chunks, eras, and recall-only periods.
 
 Each chunk keeps three bands: synopsis and effects, interval summaries, and a
 per-step action ledger. Capsule generation reads the operator's turn transcripts
@@ -20,12 +20,18 @@ alongside the recorded step facts. Milestone changes, segment size, and token
 limits determine chunk boundaries.
 
 Original messages remain in context until their capsule is ready. Failed capsule
-jobs retain their source text for retry. Only the hard token limit forces pending
-chunks into the session snapshot. Older chunks fold into eras and then period
-summaries; full step records remain available through the history tools.
+jobs retain their source text for retry. At the hard token limit, ready chunks
+swap as ordinary L2 blocks first; only when that cannot bring the context back
+under the line does everything closed force-swap (pending chunks included) and
+the whole frozen region fold into a recall-only era — L3: the period paragraph
+plus the per-step minimal index (step number, session offset, action phrase).
+The fold is monotonic: later L2 swaps append new chunk blocks after the folded
+eras and never restore the folded chunks. Older chunks also fold into eras and
+then recall-only periods by count overflow; full step records remain available
+through the history tools.
 
 Checkpoint annotations persist independently of capsule generation. Frozen
-context is rebuilt only when a capsule or snapshot replaces the source turns.
+context is rebuilt only when a compression event replaces or folds turns.
 """
 
 import asyncio
@@ -61,6 +67,29 @@ _NOTE_TOOLS = ("save_note", "update_note", "append_note")
 # Reuse one tool trace per chunk across running, success, and failed states.
 COMPRESSION_TRACE_NAME = "compress_history"
 
+#: Plain-language phases carried in the trace payload (``args.phase``) so the
+#: timeline can say what the compression is *doing* independently of the
+#: trace ``status`` (running/success/failed), which other code keys on.
+#:   summarizing — the segment closed and its capsule is generating (running)
+#:   ready       — the capsule is on hand but the start gate holds the swap (running)
+#:   applied     — the compressed block replaced the raw turns (success)
+#:   failed      — capsule generation gave up; the full record is kept (failed)
+COMPRESSION_PHASE_SUMMARIZING = "summarizing"
+COMPRESSION_PHASE_READY = "ready"
+COMPRESSION_PHASE_APPLIED = "applied"
+COMPRESSION_PHASE_FAILED = "failed"
+COMPRESSION_PHASES = (
+    COMPRESSION_PHASE_SUMMARIZING,
+    COMPRESSION_PHASE_READY,
+    COMPRESSION_PHASE_APPLIED,
+    COMPRESSION_PHASE_FAILED,
+)
+_STATUS_TO_PHASE = {
+    "running": COMPRESSION_PHASE_SUMMARIZING,
+    "success": COMPRESSION_PHASE_APPLIED,
+    "failed": COMPRESSION_PHASE_FAILED,
+}
+
 
 # ---------------------------------------------------------------------------
 # Band ③ — mechanical per-step action ledger
@@ -161,7 +190,7 @@ def extract_note_writes(step: dict) -> list[dict[str, str]]:
 
 
 def validate_interval_coverage(intervals: Any, start_step: int, end_step: int) -> bool:
-    """Band ② hard constraint: the interval union covers [start, end] seamlessly."""
+    """Band ② hard constraint: the interval union covers [start, end] without gaps or overlaps."""
     if not isinstance(intervals, list) or not intervals:
         return False
     expected = start_step
@@ -289,7 +318,7 @@ class StepCapsuleLens(StepLens):
                 " keys doing/did/effect/entry_state/exit_state/verified_facts/"
                 "unresolved/failed_paths/important_entities/intervals. Never use"
                 " verdict words (successfully, completed, failed, ...); intervals"
-                " must cover the step range seamlessly. Return only JSON."
+                " must cover the full step range without gaps or overlaps. Return only JSON."
             )
 
     def _get_llm(self):
@@ -396,8 +425,9 @@ class StepCapsuleLens(StepLens):
     def _cap_transcript(cls, transcript: str) -> str:
         """Cap one turn transcript in place, keeping its head and its tail.
 
-        The tail is kept intact because the validator result message closes
-        every turn and outranks everything above it (fact priority); the cut
+        The tail is kept intact because the turn's last messages (the final
+        action's tool result, or the failure result message that closes a
+        failed turn) outrank everything above them (fact priority); the cut
         lands in the middle and is announced with its size.
         """
         cap = cls.MAX_TURN_TRANSCRIPT_CHARS
@@ -475,8 +505,9 @@ class StepCapsuleLens(StepLens):
     async def _invoke(self, llm: Any, messages: list[BaseMessage], model_label: str):
         response = await asyncio.wait_for(llm.ainvoke(messages), timeout=90.0)
         # Raw-model bypass metering (gateway-wrapped models meter themselves);
-        # capsule prompts are small and must not clobber the session's
-        # last_prompt_tokens (the compaction thresholds' live context base).
+        # capsule prompts are small and are kept out of the session meter's
+        # last_prompt_tokens (the compaction base itself is operator-owned on
+        # the transcript ledger and never reads the session meter).
         try:
             from artemis.services.llm import RobustChatModelWrapper
             from artemis.services.token_meter import record_llm_usage
@@ -588,7 +619,8 @@ class ChunkState:
     trace_id: Any = None
     trace_step_id: Any = None
     announced_at: float | None = None
-    # Measure source at close and summary at swap; estimate tokens as chars // 4.
+    # Measure source at close and summary at swap; tokens are derived through
+    # the ledger's calibrated chars-per-token ratio (chars // 4 by default).
     # Forced swaps without a capsule leave summary_chars unset.
     source_chars: int = 0
     summary_chars: int | None = None
@@ -762,8 +794,13 @@ def render_era_period_paragraph(era: EraState) -> str:
 def render_era_block(era: EraState) -> str:
     """Era block: ① merged headers, ② degraded to titles, ③ per-chunk ledgers.
 
-    A recall-only era includes the step range and session offsets for video
-    alignment, a synopsis, recall guidance, and preserved user instructions.
+    A recall-only era (L3) includes the step range and session offsets for
+    video alignment, a synopsis, recall guidance, and the per-step minimal
+    index of every member chunk (step number, session offset, action phrase
+    — results only via search_history). Pending chunks contribute their
+    index too. User-injected instruction lines are never evicted: they sit
+    inside the index at their step, or are appended when a chunk carries no
+    index text.
     """
     if era.recall_only:
         lines = [
@@ -774,9 +811,12 @@ def render_era_block(era: EraState) -> str:
             ),
             RECALL_GUIDANCE_TEMPLATE.format(start=era.start_step_number, end=era.end_step_number),
         ]
-        # Never-evict: user-injected instruction lines survive even recall-only.
         for chunk in era.chunks:
-            lines.extend(chunk.user_lines)
+            if chunk.minimal_index:
+                lines.append(chunk.minimal_index)
+        rendered = "\n".join(lines)
+        for chunk in era.chunks:
+            lines.extend(line for line in chunk.user_lines if line not in rendered)
         return "\n".join(lines)
 
     merged = merge_structured_fields([c.band1 for c in era.chunks if c.band1])
@@ -816,48 +856,6 @@ def render_era_block(era: EraState) -> str:
     return "\n".join(parts)
 
 
-def render_l3_snapshot(
-    eras: list[EraState],
-    chunks: list[ChunkState],
-    *,
-    goal: str | None,
-    plan_text: str | None,
-) -> str:
-    """L3 emergency snapshot: merged knowledge plane + minimal per-step index.
-
-    The chunk headers are mechanically set-merged (no summary-of-summary); the
-    per-step skeleton survives at minimal width so step-level time perception
-    never breaks.
-    """
-    all_chunks = [c for era in eras for c in era.chunks] + list(chunks)
-    merged = merge_structured_fields([c.band1 for c in all_chunks if c.band1])
-    exit_state = ""
-    for chunk in reversed(all_chunks):
-        if chunk.band1:
-            exit_state = chunk.band1.get("exit_state") or ""
-            break
-
-    start = all_chunks[0].start_step_number if all_chunks else 0
-    end = all_chunks[-1].end_step_number if all_chunks else 0
-    parts = [
-        f"[Session snapshot | Steps {start}–{end} | hard-threshold fallback]",
-        f"Overall goal: {goal or '-'}",
-        "Plan state:",
-        (plan_text or "-").rstrip(),
-        f"Verified facts: {'; '.join(merged['verified_facts']) or '-'}",
-        f"Unresolved: {'; '.join(merged['unresolved']) or '-'}",
-        f"Failed paths: {'; '.join(merged['failed_paths']) or '-'}",
-        f"Important entities: {'; '.join(merged['important_entities']) or '-'}",
-        f"Device/app state: {exit_state or '-'}",
-        "",
-        "--- Step index (minimal width, per chunk) ---",
-    ]
-    for chunk in all_chunks:
-        parts.append(f"[{chunk.step_range_label}]")
-        parts.append(chunk.minimal_index)
-    return "\n".join(parts)
-
-
 # ---------------------------------------------------------------------------
 # HistoryChunkManager — triggers, compression events, F-region rendering
 # ---------------------------------------------------------------------------
@@ -885,10 +883,13 @@ class HistoryChunkManager:
     ):
         self._engine = engine
         self._ctx = ctx
+        # Accepted for the callers' wiring; the frozen region no longer
+        # recites the goal (the prompt carries it elsewhere).
         self._goal = goal
 
         cc = chunking_config
         self._max_steps = int(getattr(cc, "max_steps", 12) or 12)
+        self._min_steps = max(1, min(self._max_steps, int(getattr(cc, "min_steps", 3) or 3)))
         self._target_source_tokens = int(getattr(cc, "target_source_tokens", 2000) or 2000)
         self._model_name = getattr(cc, "model", None) or "gemini-3.8-flash"
         self._max_chunks = int(getattr(cc, "max_chunks", 8) or 8)
@@ -897,6 +898,8 @@ class HistoryChunkManager:
 
         tc = transcript_config
         self._budget = int(getattr(tc, "context_budget_tokens", 80000) or 80000)
+        start_ratio = getattr(tc, "start_ratio", None)
+        self._start_ratio = float(0.35 if start_ratio is None else start_ratio)
         self._soft_ratio = float(getattr(tc, "soft_ratio", 0.7) or 0.7)
         self._hard_ratio = float(getattr(tc, "hard_ratio", 0.9) or 0.9)
         self._min_active_steps = int(getattr(tc, "min_active_steps", 5) or 5)
@@ -916,7 +919,7 @@ class HistoryChunkManager:
         # whose original turns still live in the transcript until their
         # capsule header is ready (ready-gated swap). An entry's ``chunk`` is
         # None when the segment had no step records — it can then only leave
-        # the queue through the hard-threshold emergency swap.
+        # the queue through the hard-threshold force-swap.
         self._chunks: list[ChunkState] = []
         self._eras: list[EraState] = []
         self._awaiting: list[dict[str, Any]] = []
@@ -1065,11 +1068,11 @@ class HistoryChunkManager:
             logger.error(f"History chunk compression event failed: {e}")
 
     def _on_render_inner(self, ledger) -> None:
-        base_tokens = self._context_base_tokens()
+        base_tokens = self._context_base_tokens(ledger)
         soft = base_tokens is not None and base_tokens >= self._budget * self._soft_ratio
         hard = base_tokens is not None and base_tokens >= self._budget * self._hard_ratio
 
-        closed_any = self._close_new_segments(ledger, soft)
+        closed_any = self._close_new_segments(ledger, soft, hard)
         if closed_any or soft or hard:
             # Failure rung of the degradation ladder: exhausted capsules are
             # re-dispatched (the lens retries a fallback model per attempt);
@@ -1079,12 +1082,20 @@ class HistoryChunkManager:
         self._harvest_capsules()
         self._swap_ready_segments(ledger, hard=hard, base_tokens=base_tokens)
 
-    def _close_new_segments(self, ledger, soft: bool) -> bool:
+    def _close_new_segments(self, ledger, soft: bool, hard: bool = False) -> bool:
         """Trigger evaluation: close due segments and dispatch their capsules.
 
         Closing NEVER freezes turns (ready-gated swap): the segment's original
         messages stay live in the transcript; a closed segment joins the
         ``_awaiting`` queue until its capsule header is ready.
+
+        Minimum chunk length: the size and pressure triggers only close once
+        at least ``min_steps`` eligible turns have accumulated in the open
+        segment — turns age past the sliding-window floor one per render, so
+        without it a heavy session closes a one-turn chunk (one capsule call)
+        every render. A milestone close is exempt (a complete segment is a
+        unit, however short) and the hard threshold waives it (emergency:
+        whatever is eligible closes so the swap has material).
         """
         turns = ledger.unchunked_turns()
         if len(turns) <= self._min_active_steps:
@@ -1128,17 +1139,19 @@ class HistoryChunkManager:
         if tail_segment is not None:
             tail_portion = tail_segment[1][: max(0, remaining_eligible - consumed_prefix)]
 
+        long_enough = hard or len(tail_portion) >= self._min_steps
+
         size_event = False
-        if tail_segment is not None and tail_portion:
+        if tail_segment is not None and tail_portion and long_enough:
             tail_chars = ledger.turn_text_chars(tail_portion)
             size_event = (
                 len(tail_segment[1]) >= self._max_steps
-                or (tail_chars // 4) >= self._target_source_tokens
+                or self._chars_to_tokens(tail_chars, ledger) >= self._target_source_tokens
             )
 
         if size_event:
             selected.append((tail_segment[0], tail_portion, "size"))
-        elif not milestone_event and soft and tail_portion:
+        elif not milestone_event and soft and tail_portion and long_enough:
             # Soft threshold with nothing else due: close the oldest open
             # segment's eligible portion (bounded by the chunk size cap).
             selected.append((tail_segment[0], tail_portion[: self._max_steps], "pressure"))
@@ -1176,6 +1189,10 @@ class HistoryChunkManager:
                     " retained until a capsule lands."
                 )
                 self._capsule_service.submit(key, payload)
+                # A fresh attempt: if the chunk readies again while the start
+                # gate still holds it, the timeline gets a fresh ``held`` note
+                # instead of staying on ``retrying``.
+                entry["held_announced"] = False
                 self._announce(chunk, "running", note="retrying")
             except Exception as e:
                 logger.error(f"Capsule re-dispatch for {key} failed: {e}")
@@ -1185,41 +1202,91 @@ class HistoryChunkManager:
 
         Swaps consume the transcript's oldest unchunked turns, so only a
         contiguous READY prefix may swap — an older pending segment keeps its
-        (and every younger segment's) original text live. The hard threshold
-        is the sole exception: everything closed force-swaps, pending chunks
-        included, and the frozen region renders as the L3 snapshot.
+        (and every younger segment's) original text live.
+
+        Start gate: closing a segment (milestone/size triggers) only *prepares*
+        its capsule in the background; the original text is replaced only once
+        the operator's measured context has reached ``budget * start_ratio``.
+        Below that the ready chunks are held in the awaiting queue, so at low
+        occupancy the model keeps reading the full transcript while capsules
+        are already on hand for when pressure arrives. An unknown base (no
+        measured operator call yet, or a provider without usage metadata)
+        cannot gate and falls through to swap-on-ready.
+
+        Hard threshold ladder (L2 first, L3 last): at ``budget * hard_ratio``
+        the ready prefix swaps as ordinary L2 chunk blocks when the estimated
+        context after that swap drops back under the hard line (rung 1). Only
+        when no ready prefix exists, or the L2 swap would still leave the
+        context at or above the line, does everything closed force-swap —
+        pending chunks included — and the whole frozen region fold into a
+        recall-only era (rung 2: L3 = period paragraph + per-step minimal
+        index). With nothing awaiting at all, the last resort is folding the
+        existing frozen region the same way without consuming turns (rung 3).
+        The fold is a monotonic state change: later L2 swaps append new chunk
+        blocks after the folded eras and never restore the folded chunks;
+        repeated hard renders with nothing left to fold leave the frozen
+        blocks byte-identical.
 
         ``base_tokens`` is the prompt size before the swap, used to estimate
         the remaining context on the last swapped chunk's trace.
         """
+        hard_line = self._budget * self._hard_ratio
         if not self._awaiting:
+            if hard and self._collapse_frozen_region():
+                ledger.freeze_turns(0, self._render_frozen_blocks())
+                logger.info(
+                    "History compression: hard threshold with nothing awaiting;"
+                    " frozen region folded into the recall-only period."
+                )
             return
+
+        # An entry without a chunk (turns with no step records: nothing to
+        # summarize, nothing to render) is consumable at once — it must not
+        # pin the queue, or no L2 swap ever happens and the hard line jumps
+        # straight to the fold.
+        ready_prefix: list[dict[str, Any]] = []
+        for entry in self._awaiting:
+            chunk = entry["chunk"]
+            if chunk is not None and chunk.status != "ready":
+                break
+            ready_prefix.append(entry)
+
         swap: list[dict[str, Any]] = []
+        fold = False
         if hard:
-            swap, self._awaiting = self._awaiting, []
+            estimate = self._estimate_context_after(base_tokens, ready_prefix, ledger)
+            if ready_prefix and estimate is not None and estimate < hard_line:
+                swap = ready_prefix  # rung 1: L2 is enough
+            else:
+                swap = list(self._awaiting)  # rung 2: force everything, fold
+                fold = True
+        elif base_tokens is not None and base_tokens < self._budget * self._start_ratio:
+            self._announce_held(base_tokens, ledger)
+            return
         else:
-            while self._awaiting:
-                chunk = self._awaiting[0]["chunk"]
-                if chunk is None or chunk.status != "ready":
-                    break
-                swap.append(self._awaiting.pop(0))
+            swap = ready_prefix
         if not swap:
             return
+        self._awaiting = self._awaiting[len(swap) :]
 
         for entry in swap:
             if entry["chunk"] is not None:
                 self._chunks.append(entry["chunk"])
-        self._fold_eras()
-        blocks = self._render_frozen_blocks(hard=hard)
+        if fold:
+            self._collapse_frozen_region()
+        else:
+            self._fold_eras()
+        blocks = self._render_frozen_blocks()
         consumed = sum(len(e["turns"]) for e in swap)
         ledger.freeze_turns(consumed, blocks)
         logger.info(
             f"History compression swap: froze {consumed} turns"
             f" ({len(self._chunks)} chunks, {len(self._eras)} eras,"
-            f" {len(self._awaiting)} still awaiting, hard={hard})."
+            f" {len(self._awaiting)} still awaiting, hard={hard}, folded={fold})."
         )
-        # Pending chunks contribute only their minimal index to the L3 snapshot.
-        # Include that size in the context estimate, without a compression ratio.
+        # A folded chunk contributes only its minimal index (its ① fields are
+        # merged into the period paragraph); a pending chunk has no summary
+        # size to report, so its trace carries no compression ratio.
         swapped = [e for e in swap if e["chunk"] is not None]
         source_tokens_total = 0
         replacement_tokens_total = 0
@@ -1227,12 +1294,12 @@ class HistoryChunkManager:
             chunk = entry["chunk"]
             if chunk.status == "ready":
                 chunk.summary_chars = len(render_chunk_block(chunk))
-                replacement_chars = chunk.summary_chars
             else:
                 chunk.summary_chars = None
-                replacement_chars = len(chunk.minimal_index or "")
-            source_tokens_total += chunk.source_chars // 4
-            replacement_tokens_total += replacement_chars // 4
+            source_tokens_total += self._chars_to_tokens(chunk.source_chars, ledger)
+            replacement_tokens_total += self._chars_to_tokens(
+                self._replacement_chars(chunk, folded=fold), ledger
+            )
         context_tokens: int | None = None
         if base_tokens is not None:
             context_tokens = max(
@@ -1242,19 +1309,26 @@ class HistoryChunkManager:
         for index, entry in enumerate(swapped):
             chunk = entry["chunk"]
             turns = len(entry["turns"])
-            forced = hard and chunk.status != "ready"
-            if not forced:
-                result = f"Replaced {turns} turn{'s' if turns != 1 else ''} with the summary."
-            else:
+            plural = "s" if turns != 1 else ""
+            forced = fold and chunk.status != "ready"
+            if forced:
                 result = (
                     "Context budget reached before the summary was ready;"
-                    f" replaced {turns} turn{'s' if turns != 1 else ''} with a brief"
-                    " snapshot."
+                    f" {turns} turn{plural} folded into the period summary."
                 )
+            elif fold:
+                result = (
+                    f"Replaced {turns} turn{plural} with the summary, folded into"
+                    " the period summary (context budget reached)."
+                )
+            else:
+                result = f"Replaced {turns} turn{plural} with the summary."
             extra: dict[str, Any] = {
-                "source_tokens": chunk.source_chars // 4,
+                "source_tokens": self._chars_to_tokens(chunk.source_chars, ledger),
                 "summary_tokens": (
-                    chunk.summary_chars // 4 if chunk.summary_chars is not None else None
+                    self._chars_to_tokens(chunk.summary_chars, ledger)
+                    if chunk.summary_chars is not None
+                    else None
                 ),
             }
             # Show the context estimate once per swap, on its last trace.
@@ -1264,21 +1338,119 @@ class HistoryChunkManager:
                 extra["context_estimated"] = True
             self._announce(chunk, "success", result=result, forced=forced, extra=extra)
 
+    def _collapse_frozen_region(self) -> bool:
+        """Fold the whole frozen region into recall-only eras (hard-threshold
+        L3). Every existing era becomes recall-only and the loose chunks fold
+        into one new recall-only era (a later fold appends another era, so
+        ordinals and step order stay monotonic). Returns whether anything
+        changed — False means the region is already fully folded, so the
+        caller can leave the frozen blocks untouched (byte-stable)."""
+        changed = False
+        for era in self._eras:
+            if not era.recall_only:
+                era.recall_only = True
+                changed = True
+        if self._chunks:
+            self._era_counter += 1
+            self._eras.append(
+                EraState(ordinal=self._era_counter, chunks=self._chunks, recall_only=True)
+            )
+            self._chunks = []
+            changed = True
+        return changed
+
+    @staticmethod
+    def _chars_to_tokens(chars: int, ledger: Any = None) -> int:
+        """Characters → tokens through the ledger's session-calibrated ratio
+        (:meth:`TranscriptLedger.chars_to_tokens`); ``chars // 4`` without a
+        ledger. Identical to ``// 4`` at the default ratio."""
+        convert = getattr(ledger, "chars_to_tokens", None)
+        if callable(convert):
+            try:
+                return int(convert(chars))
+            except (TypeError, ValueError, ZeroDivisionError):
+                pass
+        return max(0, int(chars)) // 4
+
+    @staticmethod
+    def _replacement_chars(chunk: ChunkState, *, folded: bool = False) -> int:
+        """Characters a swapped chunk contributes in place of its turns: the
+        full block when ready and rendered as a chunk block, only the minimal
+        index when still pending or folded into a recall-only era."""
+        if chunk.status == "ready" and not folded:
+            return len(render_chunk_block(chunk))
+        return len(chunk.minimal_index or "")
+
+    def _estimate_context_after(
+        self, base_tokens: int | None, entries: list[dict[str, Any]], ledger: Any = None
+    ) -> int | None:
+        """Estimated prompt size after swapping ``entries`` as L2 blocks."""
+        if base_tokens is None:
+            return None
+        delta = 0
+        for entry in entries:
+            chunk = entry["chunk"]
+            if chunk is None:
+                continue
+            delta += self._chars_to_tokens(
+                self._replacement_chars(chunk), ledger
+            ) - self._chars_to_tokens(chunk.source_chars, ledger)
+        return max(0, int(base_tokens) + delta)
+
+    def _announce_held(self, base_tokens: int, ledger: Any = None) -> None:
+        """Once per chunk: its capsule is ready but the start gate holds the
+        original text live. The timeline line stays ``running`` with a
+        ``held`` note so the UI can say the summary is ready and waiting."""
+        threshold = int(self._budget * self._start_ratio)
+        for entry in self._awaiting:
+            chunk = entry["chunk"]
+            if chunk is None or chunk.status != "ready" or entry.get("held_announced"):
+                continue
+            entry["held_announced"] = True
+            self._announce(
+                chunk,
+                "running",
+                phase=COMPRESSION_PHASE_READY,
+                note="held",
+                extra={
+                    "summary_tokens": self._chars_to_tokens(len(render_chunk_block(chunk)), ledger),
+                    "context_tokens": int(base_tokens),
+                    "context_budget": self._budget,
+                    "swap_at_tokens": threshold,
+                },
+            )
+
     def _partition(self, eligible: list[dict]) -> list[tuple[str | None, list[dict]]]:
-        """Split eligible turns into consecutive same-hash segments."""
+        """Split eligible turns into consecutive same-hash segments.
+
+        A turn without a stamp (no recorded step — a reply without a tool
+        call, a helper-only turn — or a step not stamped yet) joins the
+        running segment. Leading unstamped turns have no running segment to
+        join: they are held and become the head of the first stamped segment
+        instead of forming a stampless segment of their own, which would
+        close as a chunk with no step records (``_create_chunk`` returns
+        ``None`` for it) and sit at the head of the awaiting queue.
+        """
         segments: list[tuple[str | None, list[dict]]] = []
         current_hash: str | None = None
         current: list[dict] = []
+        started = False
         for turn in eligible:
             key = turn.get("step_key")
             stamped = self._step_hashes.get(str(key)) if key is not None else None
+            if stamped is None and not started:
+                current.append(turn)  # leading unstamped turns wait for a segment
+                continue
             if stamped is None:
                 stamped = current_hash  # unknown stamps join the running segment
-            if current and stamped == current_hash:
+            if not started:
+                started = True
+                current_hash = stamped
+                current.append(turn)
+            elif stamped == current_hash:
                 current.append(turn)
             else:
-                if current:
-                    segments.append((current_hash, current))
+                segments.append((current_hash, current))
                 current_hash = stamped
                 current = [turn]
         if current:
@@ -1290,21 +1462,26 @@ class HistoryChunkManager:
             seg_turns[i : i + self._max_steps] for i in range(0, len(seg_turns), self._max_steps)
         ]
 
-    def _context_base_tokens(self) -> int | None:
+    def _context_base_tokens(self, ledger=None) -> int | None:
+        """The live context base for the start/soft/hard thresholds.
+
+        An injected ``meter_getter`` wins (tests / custom wiring); otherwise
+        the base is the owning operator's last measured prompt size recorded
+        on the ledger (:meth:`TranscriptLedger.record_prompt_tokens`). The
+        session-wide token meter is deliberately NOT consulted: its
+        ``last_prompt_tokens`` is overwritten by whichever agent called last
+        (Planner, Validator, Checker, sub-agents, lenses), so it does not
+        describe the operator's context at all.
+        """
         if self._meter_getter is not None:
             try:
                 return self._meter_getter()
             except Exception:
                 return None
         try:
-            from artemis.services.token_meter import get_meter
-
-            session_id = getattr(self._engine, "current_session_id", None)
-            if not session_id:
-                return None
-            last = get_meter(session_id).last_prompt_tokens
-            return last or None
-        except Exception:
+            last = getattr(ledger, "last_prompt_tokens", None)
+            return int(last) if last else None
+        except (TypeError, ValueError):
             return None
 
     # ------------------------------------------------------------------
@@ -1395,7 +1572,11 @@ class HistoryChunkManager:
                 chunk.source_chars = int(ledger.turn_text_chars(slice_turns))
             except Exception as e:
                 logger.debug(f"Chunk source size unavailable for {chunk.capsule_key}: {e}")
-        self._announce(chunk, "running", extra={"source_tokens": chunk.source_chars // 4})
+        self._announce(
+            chunk,
+            "running",
+            extra={"source_tokens": self._chars_to_tokens(chunk.source_chars, ledger)},
+        )
         return chunk
 
     def _announce(
@@ -1408,19 +1589,29 @@ class HistoryChunkManager:
         note: str | None = None,
         forced: bool = False,
         extra: dict[str, Any] | None = None,
+        phase: str | None = None,
     ) -> None:
-        """Update the chunk's timeline trace without interrupting compression."""
+        """Update the chunk's timeline trace without interrupting compression.
+
+        ``phase`` is the machine-readable plain-language phase written to
+        ``args.phase`` (one of ``COMPRESSION_PHASES``). It defaults from the
+        trace ``status`` — running → summarizing, success → applied,
+        failed → failed — and the held path passes ``ready`` explicitly.
+        """
         if chunk.trace_id is None:
             return
         engine = self._engine
         if engine is None or not hasattr(engine, "record_trace"):
             return
+        if phase is None:
+            phase = _STATUS_TO_PHASE.get(status, COMPRESSION_PHASE_SUMMARIZING)
         args: dict[str, Any] = {
             "start_step": chunk.start_step_number,
             "end_step": chunk.end_step_number,
             "steps": len(chunk.source_step_ids),
             "milestone": chunk.milestone_label,
             "trigger": chunk.trigger,
+            "phase": phase,
         }
         if note:
             args["note"] = note
@@ -1450,9 +1641,15 @@ class HistoryChunkManager:
             logger.debug(f"Compression announcement skipped for {chunk.capsule_key}: {e}")
 
     def _on_capsule_failed(self, key: JobKey) -> None:
-        """Mark the trace failed; keep the chunk pending for a later retry."""
-        for chunk in self._all_chunks():
-            if chunk.status != "pending" or chunk.capsule_key != key:
+        """Mark the trace failed; keep the chunk pending for a later retry.
+
+        Only a chunk still awaiting can be retried (:meth:`_redispatch_failed_capsules`
+        walks the awaiting queue); a pending chunk that was already force-swapped
+        keeps its swap trace, since no retry follows for it.
+        """
+        for entry in self._awaiting:
+            chunk = entry["chunk"]
+            if chunk is None or chunk.status != "pending" or chunk.capsule_key != key:
                 continue
             self._announce(
                 chunk,
@@ -1584,31 +1781,28 @@ class HistoryChunkManager:
     # ------------------------------------------------------------------
 
     def _fold_eras(self) -> None:
+        """Count overflow: the oldest loose chunks merge into an era; the
+        oldest ledger-bearing eras beyond ``max_eras`` become recall-only
+        (eras already folded by a hard event do not count against the cap)."""
         overflow = len(self._chunks) - self._max_chunks
         if overflow > 0:
             folded, self._chunks = self._chunks[:overflow], self._chunks[overflow:]
             self._era_counter += 1
             self._eras.append(EraState(ordinal=self._era_counter, chunks=folded))
-        era_overflow = len(self._eras) - self._max_eras
+        with_ledger = [era for era in self._eras if not era.recall_only]
+        era_overflow = len(with_ledger) - self._max_eras
         if era_overflow > 0:
-            for era in self._eras[:era_overflow]:
-                if not era.recall_only:
-                    era.recall_only = True
-                    logger.info(
-                        f"Era {era.ordinal} overflowed to the recall-only period"
-                        f" paragraph (Steps {era.start_step_number}–"
-                        f"{era.end_step_number})."
-                    )
+            for era in with_ledger[:era_overflow]:
+                era.recall_only = True
+                logger.info(
+                    f"Era {era.ordinal} overflowed to the recall-only period"
+                    f" paragraph (Steps {era.start_step_number}–"
+                    f"{era.end_step_number})."
+                )
 
-    def _render_frozen_blocks(self, *, hard: bool) -> list[BaseMessage]:
-        if not self._chunks and not self._eras:
-            return []
-        if hard:
-            plan_text = self._read_plan_text()
-            text = render_l3_snapshot(
-                self._eras, self._chunks, goal=self._goal, plan_text=plan_text
-            )
-            return [HumanMessage(content=[{"type": "text", "text": text}])]
+    def _render_frozen_blocks(self) -> list[BaseMessage]:
+        """Frozen region, oldest first: era blocks (recall-only or merged),
+        then the loose chunk blocks."""
         blocks: list[BaseMessage] = []
         for era in self._eras:
             blocks.append(HumanMessage(content=[{"type": "text", "text": render_era_block(era)}]))
@@ -1618,18 +1812,6 @@ class HistoryChunkManager:
             )
         return blocks
 
-    def _read_plan_text(self) -> str | None:
-        try:
-            from artemis.utils.notes import get_note_file_path
-
-            base_dir = getattr(self._engine, "base_dir", None)
-            if not base_dir:
-                return None
-            path = get_note_file_path(base_dir, "task_plan")
-            return path.read_text(encoding="utf-8") if path.exists() else None
-        except Exception:
-            return None
-
     # ------------------------------------------------------------------
     # Draining
     # ------------------------------------------------------------------
diff --git a/artemis/memory/step_capsule.md b/artemis/memory/step_capsule.md
index 526d3b6..96b4e55 100644
--- a/artemis/memory/step_capsule.md
+++ b/artemis/memory/step_capsule.md
@@ -2,14 +2,14 @@
 You are the Segment Capsule writer for a mobile automation agent's history compression. You receive one contiguous segment of executed steps and produce the two LLM-authored bands of the segment's history chunk:
 
 - Band ① — Synopsis & effects: what this segment was doing, what was actually done, and what effects/artifacts it left behind, plus structured fields.
-- Band ② — Compressed step summary: an interval narrative ("Steps xx–xx did ..., Step xx did ...") that seamlessly covers every step of the segment.
+- Band ② — Compressed step summary: an interval narrative ("Steps xx–xx did ..., Step xx did ...") covering every step of the segment.
 
 The mechanical per-step action ledger (band ③) is assembled outside of you; do NOT reproduce it.
 
 # INPUT SHAPE
 The segment arrives turn by turn, in order. Each turn block has:
 - `Recorded steps:` — the mechanical facts of the step(s) executed in that turn: step number, session offset, the exact action, the controller/validator result, the visual transition summary, the notes written (tool → note key: gist), and any user-injected instruction.
-- `Transcript as seen by the operator during this turn:` — the turn exactly as it stood in the operator's own context: the observation text, the operator's reasoning (including `(thinking)` blocks), every `[tool call]` with its arguments, every `[tool result]` returned to the operator (explorer answers, recalled history, note reads, ADB output, screenshot placeholders), and the `--- Action Execution Result ---` message. Your capsule REPLACES this transcript in the operator's context — everything the operator learned from it that still matters must survive in your output.
+- `Transcript as seen by the operator during this turn:` — the turn exactly as it stood in the operator's own context: the observation text, the operator's reasoning (including `(thinking)` blocks), every `[tool call]` with its arguments, every `[tool result]` returned to the operator (explorer answers, recalled history, note reads, ADB output, screenshot placeholders), and the `--- Action Execution Result ---` message that closes the turn (every turn on the Pro path; only when an action failed on the Flash path). Your capsule REPLACES this transcript in the operator's context — everything the operator learned from it that still matters must survive in your output.
 
 A turn block without a transcript falls back to a reasoning excerpt; treat it the same way with less evidence.
 
@@ -45,7 +45,7 @@ Field `intervals`: an ordered array of `{"start_step": N, "end_step": M, "text":
   - **NEVER narrate step by step** ("Step 5: I tapped X. Step 6: I tapped Y."). One interval is a behavior plus the observed outcome, e.g. "Opened the 'Network & internet' section and returned to the main list; the section showed Wi‑Fi, mobile network and VPN rows."
   - **Merge homogeneous consecutive actions into one interval** (repeated scrolls, a sweep through several sections, a polling loop, retries of the same target) — describe the run and its count/result once. A step that does something of a different nature gets its own single-step interval (`start_step == end_step`).
 - Every line's text must reference concrete behavior for those steps (the step numbers come from the `Recorded steps:` lines): the target's visible text, the screen or state observed afterwards, values read, errors shown.
-- **The union of intervals MUST cover the segment's step range seamlessly** — no gaps, no overlaps, in ascending order. This is machine-checked; a gap forces regeneration.
+- **The union of intervals MUST cover the segment's full step range** — no gaps, no overlaps, in ascending order. This is machine-checked; a gap forces regeneration.
 - Keep the neutral-wording contract in every line.
 
 # LENGTH TARGET (SOFT)
diff --git a/artemis/memory/step_memory.py b/artemis/memory/step_memory.py
index c47899f..98e256b 100644
--- a/artemis/memory/step_memory.py
+++ b/artemis/memory/step_memory.py
@@ -20,12 +20,13 @@ with alias resolution (tool_call_id / legacy ordinals), and status queries.
 
 What a summary *contains* (the lens semantics) lives in subclasses — the
 service only guarantees how jobs are scheduled, retried, keyed, and drained.
-Both Flash and (from M2 on) Pro profiles share this runtime.
+Flash and Pro profiles share this runtime.
 """
 
 import asyncio
 from typing import Any
 
+from artemis.data_engine.trace import detached_trace
 from artemis.utils.logger import get_logger
 
 logger = get_logger(__name__)
@@ -67,12 +68,20 @@ class StepMemoryService:
        where available; tool_call_ids (and legacy ordinals) remain queryable
        through an alias map so message-level consumers need no migration.
     5. Bounded concurrency: at most ``max_concurrency`` attempts run at once.
+    6. Detached tracing: every job runs inside
+       :func:`~artemis.data_engine.trace.detached_trace`, so a lens's model
+       calls never attach to the trace span (the operator's step) that was
+       current when the job was submitted — no lens needs to know.
 
     Subclasses implement :meth:`_attempt` (one summarization attempt for a
     payload) and may override :meth:`_on_status` to persist pending/failed
     status transitions.
     """
 
+    #: Trace node label of a lens-less subclass's jobs (``lens:<name>``); a
+    #: configured :class:`StepLens` contributes its own ``name`` instead.
+    lens_name: str | None = None
+
     def __init__(
         self,
         ctx: Any,
@@ -131,7 +140,25 @@ class StepMemoryService:
     # Scheduling core
     # ------------------------------------------------------------------
 
+    @property
+    def trace_node_name(self) -> str:
+        """Node label the job's traces and usage records carry (``lens:<name>``)."""
+        name = getattr(self._lens, "name", None) or self.lens_name or type(self).__name__.lower()
+        return f"lens:{name}"
+
     async def _run_until_ready(self, key: JobKey) -> None:
+        """Run one job to completion, detached from the submitter's trace span.
+
+        The task was created while the submitting agent's step span was
+        current and inherits that context; the whole job — every attempt,
+        retry sleeps included — runs under :func:`detached_trace` so nothing
+        a lens records (model calls, their thinking/raw_thinking children,
+        stream deltas, usage) can be attributed to the submitter's step.
+        """
+        with detached_trace(self.trace_node_name):
+            await self._run_attempts(key)
+
+    async def _run_attempts(self, key: JobKey) -> None:
         """Retry one job independently, bounded by the configured retry limit.
 
         Attempts at most ``1 + retry_limit`` times; on exhaustion the job
diff --git a/artemis/memory/transcript.py b/artemis/memory/transcript.py
index 1def1af..d08c1d0 100644
--- a/artemis/memory/transcript.py
+++ b/artemis/memory/transcript.py
@@ -22,11 +22,16 @@ Messages are organized into four regions:
 - **A (active window)**: raw per-turn messages, append-only. Each committed
   turn contributes its tail observation HumanMessage, the operator AIMessages
   (tool_calls and native thinking preserved by reference), the in-turn
-  ToolMessages, and the turn's validator result message. The scrub edge
-  (:class:`~artemis.agents.flash.context_compressor.ScrubEdgeCompressor`) strips
-  old UI lists and plan recitations at depth 1 and resolves screenshots to
-  visual summaries at depth K — messages are never
-  removed or reordered, so tool-call/response pairs are never split.
+  ToolMessages, and the turn's result message (every turn on the Pro path;
+  only when an action failed on the Flash path). The
+  scrub edge (:class:`~artemis.agents.flash.context_compressor.ScrubEdgeCompressor`)
+  has two depths: a shallow text edge (UI list, plan recitation and ephemeral
+  per-turn blocks leave as soon as a newer observation exists) and a
+  screenshot edge that follows the occupancy tier (relaxed below the start
+  gate, tightened past it), where the screenshot is replaced in place by its
+  visual summary. Every rewrite happens once and is never undone; everything
+  newer is byte-identical to what the model was first shown. Messages are
+  never removed or reordered, so tool-call/response pairs are never split.
 - **T (current tail)**: built fresh every turn by the operator; passed to
   :meth:`render` and only enters A when the turn is committed.
 
@@ -47,7 +52,7 @@ import json
 import time
 from typing import Any, Callable
 
-from langchain_core.messages import BaseMessage, HumanMessage
+from langchain_core.messages import AIMessage, BaseMessage, HumanMessage
 
 from artemis.memory.step_memory import StepMemoryService
 from artemis.utils.logger import get_logger
@@ -67,6 +72,28 @@ EXECUTION_RESULT_MARKER = "--- Action Execution Result"
 #: Header prefix of the cold-start restored-history block.
 RESTORED_HISTORY_HEADER = "[Restored history]"
 
+#: ``HumanMessage.additional_kwargs`` key listing the indices of content blocks that
+#: are only meaningful for the turn they were built for (reminders, hints, user
+#: guidance, per-turn notices). The scrub edge deletes them at its text edge, so
+#: they never reach the frozen region or a chunk capsule. The indices always
+#: describe the message's *current* block layout: a rewrite that removes blocks
+#: before the text edge (the screenshot swap when the image edge is shallower)
+#: remaps the surviving indices in place, and the key is dropped once the blocks
+#: are deleted. ``additional_kwargs`` is never sent to the provider, so the
+#: marking costs the model nothing.
+EPHEMERAL_BLOCKS_KEY = "ephemeral_blocks"
+
+
+def mark_ephemeral(message: BaseMessage, indices) -> None:
+    """Flag content blocks of ``message`` (by index) as ephemeral, see
+    :data:`EPHEMERAL_BLOCKS_KEY`."""
+    existing = list(message.additional_kwargs.get(EPHEMERAL_BLOCKS_KEY, []))
+    for index in indices:
+        index = int(index)
+        if index not in existing:
+            existing.append(index)
+    message.additional_kwargs[EPHEMERAL_BLOCKS_KEY] = existing
+
 
 def format_session_offset(seconds: float) -> str:
     """Render a session-start offset as ``T+mm:ss`` (minutes never wrap)."""
@@ -135,6 +162,8 @@ def render_turn_transcript(messages: list[BaseMessage]) -> str:
     names_by_id: dict[str, str] = {}
     for msg in messages:
         kind = str(getattr(msg, "type", "") or "message")
+        if isinstance(msg, AIMessage):
+            kind = "ai"  # streamed replies report type "AIMessageChunk"
         role = _ROLE_LABELS.get(kind, kind)
         if kind == "tool":
             call_id = getattr(msg, "tool_call_id", None)
@@ -157,6 +186,71 @@ def render_turn_transcript(messages: list[BaseMessage]) -> str:
     return "\n".join(lines)
 
 
+#: Tokens charged per image block in the provider-less prompt estimate
+#: (Gemini's flat per-image cost; the Flash runner uses the same figure).
+IMAGE_BLOCK_TOKENS = 258
+
+#: Characters per token assumed before any calibrated measurement.
+DEFAULT_CHARS_PER_TOKEN = 4.0
+
+#: Bounds of the calibrated chars-per-token ratio: ~1 for CJK-heavy prompts,
+#: ~4 for English prose; anything outside is a measurement artefact.
+_CHARS_PER_TOKEN_BOUNDS = (1.0, 6.0)
+
+#: Smallest text growth (characters) between two consecutive measured prompts
+#: for their difference to count as a calibration sample (see
+#: :meth:`TranscriptLedger.record_prompt_tokens`). Below this the provider's
+#: rounding and a few hundred tokens of turn-to-turn jitter dominate the
+#: quotient.
+MIN_CALIBRATION_DELTA_CHARS = 2000
+
+
+def measure_prompt_content(messages: list[Any]) -> tuple[int, int]:
+    """Count ``(text_chars, image_count)`` over a prompt's messages.
+
+    The walk covers what the provider tokenizes as text: string content in
+    full; in list content the ``text`` blocks by their text, ``image_url`` /
+    ``image`` blocks as one image each, any other block by its ``str()``; and
+    each message's ``tool_calls`` by the JSON of their arguments (an
+    AIMessage's calls are sent back to the model verbatim, and the ledger's
+    turn transcripts size them the same way).
+    """
+    text_chars = 0
+    image_count = 0
+    for msg in messages:
+        content = getattr(msg, "content", None)
+        if isinstance(content, str):
+            text_chars += len(content)
+        elif isinstance(content, list):
+            for block in content:
+                if isinstance(block, dict):
+                    if block.get("type") in ("image_url", "image") or "image_url" in block:
+                        image_count += 1
+                    elif block.get("type") == "text":
+                        text_chars += len(str(block.get("text", "")))
+                    else:
+                        text_chars += len(str(block))
+                else:
+                    text_chars += len(str(block))
+        elif content is not None:
+            text_chars += len(str(content))
+        for call in getattr(msg, "tool_calls", None) or []:
+            if isinstance(call, dict):
+                text_chars += len(
+                    json.dumps(call.get("args") or {}, ensure_ascii=False, default=str)
+                )
+    return text_chars, image_count
+
+
+def estimate_prompt_tokens(messages: list[Any]) -> int:
+    """Provider-less prompt size estimate: ``text_chars // 4`` plus
+    :data:`IMAGE_BLOCK_TOKENS` per image block (see
+    :func:`measure_prompt_content` for what counts). Used as the context base
+    when a provider reports no usage metadata; never below 1."""
+    text_chars, image_count = measure_prompt_content(messages)
+    return max(1, text_chars // 4 + image_count * IMAGE_BLOCK_TOKENS)
+
+
 class TranscriptLedger:
     """Append-only four-region message ledger for one Pro session.
 
@@ -172,7 +266,10 @@ class TranscriptLedger:
         prune_history_xml: bool = True,
         image_scrub_depth: int = 3,
         pending_grace_steps: int = 3,
-        xml_scrub_depth: int = 1,
+        xml_scrub_depth: int | None = None,
+        image_scrub_depth_relaxed: int | None = None,
+        context_budget_tokens: int | None = None,
+        start_ratio: float | None = None,
         clock: Callable[[], float] | None = None,
         session_start: float | None = None,
     ):
@@ -204,6 +301,51 @@ class TranscriptLedger:
         self._frozen_blocks: list[BaseMessage] = []
         self._chunker: Any | None = None
 
+        # The owning operator's last measured prompt size (tokens). This is
+        # the live context base the chunker's start/soft/hard thresholds read;
+        # only the operator's own calls write it, so Planner/Checker/lens
+        # calls sharing the session can never masquerade as the operator's
+        # context (see HistoryChunkManager._context_base_tokens).
+        self._last_prompt_tokens: int | None = None
+        # Session-calibrated characters-per-token ratio (see
+        # record_prompt_tokens): the chunker converts transcript characters
+        # to tokens through it, so CJK-heavy sessions (~1 char/token on
+        # Gemini) are not under-estimated 4x by the fixed //4 default.
+        # Calibrated differentially: ``_calibration_sample`` is the previous
+        # measured ``(text_chars, image_count, prompt_tokens)`` and the
+        # pooled deltas between consecutive same-image-count prompts give
+        # the session's single best ratio.
+        self._chars_per_token: float = DEFAULT_CHARS_PER_TOKEN
+        self._calibration_sample: tuple[int, int, int] | None = None
+        self._pooled_delta_chars = 0
+        self._pooled_delta_tokens = 0
+
+        # Whether the last committed turn carried no visible reasoning text (bare
+        # tool calls / thinking only). Set by ``commit_staged``; both runners read
+        # it to decide whether to attach the shared reasoning reminder.
+        self._last_turn_silent: bool = False
+
+        # Text edge (default 1): UI list, plan recitation and ephemeral blocks
+        # leave as soon as a newer observation exists; screenshots follow K.
+        self._xml_scrub_depth = xml_scrub_depth
+
+        # Occupancy-driven screenshot depth. Below the start gate
+        # (``last_prompt_tokens < budget * start_ratio``, or no measurement
+        # yet) the scrub edge sits at the relaxed depth so the model keeps
+        # more raw screenshots while nothing is being replaced; from the
+        # start gate up it tightens to ``image_scrub_depth``. Scrubbing is
+        # irreversible, so a change of depth never rewrites a message:
+        # tightening scrubs the extra depths once, relaxing lets new images
+        # live longer. See :attr:`effective_image_scrub_depth`.
+        self._image_scrub_depth = max(1, int(image_scrub_depth))
+        self._image_scrub_depth_relaxed = (
+            max(self._image_scrub_depth, int(image_scrub_depth_relaxed))
+            if image_scrub_depth_relaxed is not None
+            else self._image_scrub_depth
+        )
+        self._context_budget_tokens = int(context_budget_tokens) if context_budget_tokens else None
+        self._start_ratio = float(start_ratio) if start_ratio is not None else None
+
         # id(message) -> summary-job key (DataEngine step id). A side map keeps
         # the key out of the serialized message payload entirely.
         self._step_keys: dict[int, str] = {}
@@ -235,6 +377,186 @@ class TranscriptLedger:
         """The current session offset as ``T+mm:ss``."""
         return format_session_offset(self.elapsed_seconds())
 
+    # ------------------------------------------------------------------
+    # Context base (operator-measured prompt size)
+    # ------------------------------------------------------------------
+
+    @property
+    def last_prompt_tokens(self) -> int | None:
+        """The operator's last measured prompt size, or None before the
+        first measured call (or when the provider reports no usage)."""
+        return self._last_prompt_tokens
+
+    @property
+    def last_turn_silent(self) -> bool:
+        """True when the last committed turn had no visible reasoning text.
+
+        A turn is silent when it carries at least one AI message and none of
+        them shows text: string content that is empty or whitespace, or list
+        content without a non-empty ``text`` block (native ``thinking`` blocks
+        are not visible text). A turn with no AI message at all is not silent.
+        """
+        return self._last_turn_silent
+
+    @staticmethod
+    def _ai_message_has_visible_text(message: BaseMessage) -> bool:
+        content = getattr(message, "content", None)
+        if isinstance(content, str):
+            return bool(content.strip())
+        if isinstance(content, list):
+            for block in content:
+                if isinstance(block, str):
+                    if block.strip():
+                        return True
+                elif isinstance(block, dict) and block.get("type") == "text":
+                    if str(block.get("text") or "").strip():
+                        return True
+            return False
+        return False
+
+    @classmethod
+    def _turn_is_silent(cls, messages: list[BaseMessage]) -> bool:
+        # Streamed replies are ``AIMessageChunk`` (type "AIMessageChunk"), so
+        # the class, not the type string, identifies the model's messages.
+        ai_messages = [m for m in messages if isinstance(m, AIMessage)]
+        if not ai_messages:
+            return False
+        return not any(cls._ai_message_has_visible_text(m) for m in ai_messages)
+
+    @property
+    def chars_per_token(self) -> float:
+        """Calibrated characters-per-token ratio (4.0 until a measured call
+        with its messages is recorded)."""
+        return self._chars_per_token
+
+    def chars_to_tokens(self, chars: int) -> int:
+        """Convert transcript characters to tokens through the calibrated
+        ratio (identical to ``chars // 4`` at the default ratio)."""
+        return int(max(0, int(chars)) / self._chars_per_token)
+
+    @property
+    def occupancy(self) -> float | None:
+        """``last_prompt_tokens / context_budget_tokens``, or None when either
+        is unknown."""
+        if self._last_prompt_tokens is None or not self._context_budget_tokens:
+            return None
+        return self._last_prompt_tokens / self._context_budget_tokens
+
+    @property
+    def below_start_gate(self) -> bool:
+        """Whether the measured occupancy is under the start gate. An unknown
+        occupancy (no measured call yet) counts as below: a session starts
+        empty."""
+        if self._start_ratio is None:
+            return False
+        ratio = self.occupancy
+        return ratio is None or ratio < self._start_ratio
+
+    @property
+    def effective_image_scrub_depth(self) -> int:
+        """The screenshot depth the scrub edge uses at the next render: the
+        relaxed depth below the start gate, the tight depth from there up."""
+        if self.below_start_gate:
+            return self._image_scrub_depth_relaxed
+        return self._image_scrub_depth
+
+    def record_prompt_tokens(
+        self, prompt_tokens: int | None, messages: list[Any] | None = None
+    ) -> None:
+        """Record the operator's measured prompt size for one call.
+
+        Called by the ledger's owning operator (Flash runner / Pro operator)
+        after each of its own LLM calls; within a multi-call turn the last
+        (largest) call wins. Non-positive or missing values are ignored so a
+        provider without usage metadata leaves the base unknown rather than
+        zero (and the calibration state below is left untouched).
+
+        When ``messages`` (the exact list sent to the model) accompanies a
+        measured size, the call also calibrates :attr:`chars_per_token`,
+        **differentially**: the ledger remembers the previous measured
+        sample ``(text_chars, image_count, prompt_tokens)`` and, when the new
+        sample carries the same number of images, grows the text by at least
+        :data:`MIN_CALIBRATION_DELTA_CHARS` and costs more tokens, it pools
+        the pair's differences (``pooled_chars += Δchars``,
+        ``pooled_tokens += Δtokens``) and sets the ratio to
+        ``pooled_chars / pooled_tokens``, clamped to [1.0, 6.0]. The pooled
+        quotient is the maximum-likelihood single ratio for the session (no
+        smoothing constant to tune, no last-pair noise). The reference is
+        replaced only when it was consumed, when the image count changed, or
+        when the prompt shrank in tokens (a compaction or scrub reset the
+        baseline); a sample that moved too little keeps the reference, so
+        several small turns accumulate into one usable difference instead of
+        being discarded one by one (real sessions often grow < 2000 chars
+        per turn and would otherwise never calibrate).
+
+        Why differences: the provider's ``prompt_tokens`` also counts terms
+        that are not in ``messages`` or not proportional to their text — the
+        bound tool/function schemas, and full-size screenshots that tile to
+        ~1100–1800 tokens rather than the flat :data:`IMAGE_BLOCK_TOKENS`.
+        A whole-prompt quotient charges all of that to the text, and it
+        also averages over the static prefix, whereas the chunker applies
+        the ratio to the transcript *tail*, whose density differs. On real
+        Gemini Operator traces (10 sessions, 2026-09) the two disagree by
+        5-30% with a session-dependent sign, so the size-based chunk
+        trigger fired early in some sessions and late in others. Between
+        two prompts with the same image count the constant terms cancel and
+        the difference measures the tail's own rate. Until the first
+        usable difference exists the whole-prompt quotient
+        ``text_chars / (prompt_tokens - images * IMAGE_BLOCK_TOKENS)`` is
+        used as a fallback; once a pooled difference exists the pooled ratio
+        is authoritative and the fallback is no longer applied.
+        """
+        try:
+            value = int(prompt_tokens) if prompt_tokens is not None else 0
+        except (TypeError, ValueError):
+            return
+        if value <= 0:
+            return
+        self._last_prompt_tokens = value
+        if messages is None:
+            return
+        try:
+            text_chars, image_count = measure_prompt_content(messages)
+        except Exception as exc:
+            logger.debug(f"Prompt calibration skipped: {exc}", exc_info=True)
+            return
+        if text_chars <= 0:
+            return
+
+        low, high = _CHARS_PER_TOKEN_BOUNDS
+        previous = self._calibration_sample
+        sample = (text_chars, image_count, value)
+
+        if previous is None:
+            self._calibration_sample = sample
+        else:
+            prev_chars, prev_images, prev_tokens = previous
+            delta_chars = text_chars - prev_chars
+            delta_tokens = value - prev_tokens
+            if image_count != prev_images or delta_tokens < 0:
+                # Not comparable (image set changed) or the prompt actually
+                # shrank (compaction / scrub): start a fresh baseline here.
+                self._calibration_sample = sample
+            elif delta_chars >= MIN_CALIBRATION_DELTA_CHARS:
+                if delta_tokens > 0:
+                    self._pooled_delta_chars += delta_chars
+                    self._pooled_delta_tokens += delta_tokens
+                    pooled = self._pooled_delta_chars / self._pooled_delta_tokens
+                    self._chars_per_token = min(high, max(low, pooled))
+                    self._calibration_sample = sample
+                    return
+                self._calibration_sample = sample  # text grew at no cost: unusable
+            # else: moved too little to measure yet (in either direction) —
+            # keep the reference so the movement accumulates against it.
+
+        if self._pooled_delta_tokens > 0:
+            # A pooled difference already exists: it is authoritative, and
+            # the whole-prompt quotient (which mis-charges schemas and image
+            # tiling to the text) is never applied again.
+            return
+        text_tokens = max(1, value - image_count * IMAGE_BLOCK_TOKENS)
+        self._chars_per_token = min(high, max(low, text_chars / text_tokens))
+
     # ------------------------------------------------------------------
     # S region
     # ------------------------------------------------------------------
@@ -320,6 +642,7 @@ class TranscriptLedger:
             return
         staged = self._staged
         self._staged = None
+        self._last_turn_silent = self._turn_is_silent(staged)
 
         if step_key is not None:
             observation = self._first_image_message(staged)
@@ -449,18 +772,23 @@ class TranscriptLedger:
     def render(self, tail: list[BaseMessage]) -> list[BaseMessage]:
         """Advance compression and return ``S + F + A + tail``.
 
-        Order per turn: the chunker runs first (a triggered compression event
-        deep-mutates the frozen region and advances the F/A boundary), then
-        the scrub edge advances over the active window. The returned list is a
-        fresh container: appending to it (the operator's in-turn tool loop)
-        never mutates the ledger regions.
+        Order per turn: the occupancy band is read once (from the operator's
+        last measured prompt), the scrub edge advances over the active window
+        at that band's screenshot depth, then the chunker runs (a triggered
+        compression event deep-mutates the frozen region and advances the F/A
+        boundary). Scrub-before-chunk guarantees that the turns a chunk
+        closes over — all older than the sliding-window floor — have already
+        had their screenshots resolved when the relaxed depth is no deeper
+        than the floor plus one. The returned list is a fresh container:
+        appending to it (the operator's in-turn tool loop) never mutates the
+        ledger regions.
         """
+        self._compressor.compress(self._active, image_scrub_depth=self.effective_image_scrub_depth)
         if self._chunker is not None:
             try:
                 self._chunker.on_render(self)
             except Exception as e:
                 logger.error(f"History chunker render hook failed: {e}")
-        self._compressor.compress(self._active)
         return [
             *self._static,
             *self._restored,
diff --git a/artemis/resources/config/artemis.jsonc b/artemis/resources/config/artemis.jsonc
index c1467b8..517d738 100644
--- a/artemis/resources/config/artemis.jsonc
+++ b/artemis/resources/config/artemis.jsonc
@@ -192,7 +192,7 @@
     // ==========================================================================
     // 🌐 4.3 Shared Capabilities & Global Overrides
     // ==========================================================================
-    // 🧠 Unified Step-Memory Runtime (history-module redesign v3, M0–M5)
+    // Shared step memory and history compression
     // Transcript ledger + layered compression for the Pro operator.
     "memory": {
       // Background summarization runtime (visual/capsule lenses)
@@ -204,15 +204,33 @@
       "transcript": {
         // ROLLBACK SWITCH: set false to restore the legacy per-turn 2-message
         // prompt path byte-for-byte (L2/L3 chunk compression rides this same
-        // flag). Default on since M5 (2026-09-01) per the on-device A/B:
-        // turn latency −77% P50, cache-hit calls 43%→88%, output tokens −74%.
+        // flag). See services/token_meter.py for measured session token usage
+        // and cache-hit ratios.
         "enabled": true,
         "context_budget_tokens": 80000,
+        // Below start_ratio of the operator's own measured prompt size, closed
+        // segments only prepare their summary; the original turns are kept in
+        // context and replaced once occupancy reaches this ratio. Measurements
+        // come from the operator; other agents' calls do not affect this gate.
+        "start_ratio": 0.35,
         "soft_ratio": 0.7,
         "hard_ratio": 0.9,
         "min_active_steps": 5,
+        // Screenshot edge: 6 while the operator's measured context is below
+        // start_ratio (nothing is being replaced yet), 3 from there up. A
+        // screenshot reaching the edge is replaced in place by its visual
+        // summary (the 'Current Screenshot' label leaves with it) and never
+        // restored; the depth only decides how long new ones stay.
         "image_scrub_depth": 3,
+        "image_scrub_depth_relaxed": 6,
         "pending_grace_steps": 3,
+        // Text edge: once a newer observation exists (depth 1) the UI element
+        // list, the plan recitation and the per-turn ephemeral blocks
+        // (reminders, hints, guidance wrappers) leave the older observation.
+        // User instruction bodies remain in history. The text edge stays
+        // shallow on purpose: only the live observation carries an indexed
+        // element list, so a stale [n] index can never be picked up as a
+        // target.
         "xml_scrub_depth": 1,
         // Local historical-state hint (no model call); distance calibrated
         // 2026-09-01 from 460 dHash-stamped on-device steps (same screen <=4,
@@ -223,6 +241,10 @@
       // Segment (L2) chunk compression: three-band chunks, era folding
       "chunking": {
         "max_steps": 12,
+        // Size/pressure closes wait until at least this many turns are
+        // eligible, so heavy turns do not become one-step chunks (one capsule
+        // call each); milestone closes are exempt, the hard line waives it.
+        "min_steps": 3,
         "target_source_tokens": 2000,
         "model": "gemini-3.8-flash",
         "max_chunks": 8
diff --git a/artemis/runtime/__init__.py b/artemis/runtime/__init__.py
index 1ec8e98..9821bee 100644
--- a/artemis/runtime/__init__.py
+++ b/artemis/runtime/__init__.py
@@ -33,6 +33,7 @@ from artemis.runtime.daemon_client import (
     ensure_daemon_running,
     get_daemon_session,
     get_daemon_status,
+    is_artemis_daemon,
     is_daemon_running,
     stop_task_on_daemon,
     submit_batch_to_daemon,
@@ -84,6 +85,7 @@ __all__ = [
     "get_daemon_session",
     "get_daemon_status",
     "get_server_status",
+    "is_artemis_daemon",
     "is_daemon_running",
     "is_cancel_requested",
     "is_port_in_use",
diff --git a/artemis/runtime/daemon_client.py b/artemis/runtime/daemon_client.py
index 196a19c..67736e6 100644
--- a/artemis/runtime/daemon_client.py
+++ b/artemis/runtime/daemon_client.py
@@ -17,6 +17,7 @@
 from __future__ import annotations
 
 import json
+from http.client import HTTPException
 import os
 from pathlib import Path
 import subprocess
@@ -62,6 +63,31 @@ def is_daemon_running(
             return False
 
 
+def is_artemis_daemon(
+    host: str = DEFAULT_DAEMON_HOST,
+    port: int = DEFAULT_DAEMON_PORT,
+    timeout: float = 0.5,
+) -> bool:
+    """Identity probe: is the process on ``host:port`` the Artemis daemon?
+
+    :func:`is_daemon_running` is a liveness probe that accepts any HTTP
+    listener (a dev server on port 8000 answers ``200`` on ``/``). Diagnostics
+    need to tell the daemon apart from a port squatter, so this asks the
+    daemon's lightweight ``/api/system/server-status`` route and requires the
+    JSON shape only Artemis serves.
+    """
+    url = f"http://{host}:{port}/api/system/server-status"
+    try:
+        req = urllib.request.Request(url, headers={"User-Agent": "Artemis-Daemon-Probe"})
+        with urllib.request.urlopen(req, timeout=timeout) as response:
+            if response.status != 200:
+                return False
+            payload = json.loads(response.read().decode("utf-8", errors="replace") or "null")
+    except (OSError, ValueError, HTTPException):
+        return False
+    return isinstance(payload, dict) and "current_pid" in payload and "port" in payload
+
+
 def daemon_log_path(port: int = DEFAULT_DAEMON_PORT) -> Path:
     """Return the log file path used by a background-spawned Daemon on the given port."""
     from artemis.config.paths import get_app_dir
diff --git a/artemis/services/token_meter.py b/artemis/services/token_meter.py
index 3f28020..8a48e95 100644
--- a/artemis/services/token_meter.py
+++ b/artemis/services/token_meter.py
@@ -12,20 +12,26 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-"""Session-level LLM token metering (M0: pure recording, no decisions).
+"""Session-level LLM token usage and cache-hit metering.
 
 Every gateway-managed LLM call reports its real ``usage_metadata`` here. The
 meter accumulates per-session totals and records one ``llm_usage`` trace per
 call into the DataEngine, carrying:
 
-- the call's measured ``prompt_tokens`` — the last call's measured input is the
-  best available estimate of the *current context base* for the next call
-  (the compaction thresholds of M2/M3 will consume this, never char-count
-  heuristics);
+- the call's measured ``prompt_tokens`` (``context_base_tokens`` in the trace
+  payload, kept for the timeline). Note: the session meter's
+  ``last_prompt_tokens`` is whichever call happened last in the session —
+  Planner, Validator, Checker, sub-agents included — so the compaction
+  thresholds do NOT read it; the operator records its own prompt size on the
+  transcript ledger (``TranscriptLedger.record_prompt_tokens``);
 - provider-reported cache hits (Gemini ``cached_content_token_count`` /
   LangChain ``input_token_details.cache_read``) to establish the cache-hit-rate
   baseline;
-- running per-session totals.
+- running per-session totals, including ``session_cached_ratio``
+  (cached / prompt tokens over the session) and the same ratio for the call's
+  own ``source`` (``source_cached_ratio``), so a session whose operator calls
+  never hit the prompt cache is visible on its ``llm_usage`` traces and in the
+  session summary line (:func:`log_session_summary`).
 
 This module never raises into the LLM call path and makes no decisions.
 """
@@ -71,8 +77,15 @@ def extract_usage(response: Any) -> dict[str, int] | None:
     }
 
 
+def cached_ratio(cached_tokens: int, prompt_tokens: int) -> float:
+    """``cached / prompt`` rounded to three decimals; 0.0 with no prompt tokens."""
+    if prompt_tokens <= 0:
+        return 0.0
+    return round(cached_tokens / prompt_tokens, 3)
+
+
 class SessionTokenMeter:
-    """Accumulates measured LLM usage for one session."""
+    """Accumulates measured LLM usage for one session, in total and per source."""
 
     def __init__(self, session_id: str):
         self.session_id = session_id
@@ -83,36 +96,116 @@ class SessionTokenMeter:
         self.cached_tokens = 0
         self.cache_hit_calls = 0
         self.last_prompt_tokens = 0
+        # Per-source totals (source = gateway endpoint key or lens label):
+        # {"llm_calls", "prompt_tokens", "cached_tokens", "cache_hit_calls"}.
+        self.sources: dict[str, dict[str, int]] = {}
 
-    def record(self, usage: dict[str, int], *, update_last_prompt: bool = True) -> dict[str, int]:
+    def record(
+        self,
+        usage: dict[str, int],
+        *,
+        update_last_prompt: bool = True,
+        source: str | None = None,
+    ) -> dict[str, Any]:
         """Accumulates one call's usage; returns a session snapshot.
 
         ``update_last_prompt=False`` accumulates the totals without touching
         ``last_prompt_tokens`` — background lens calls carry tiny prompts that
         must not masquerade as the live context base consumed by the L2/L3
-        compaction thresholds.
+        compaction thresholds. With a ``source`` the call also joins that
+        source's totals and the snapshot carries ``source_cached_ratio``.
         """
         with self._lock:
-            self.llm_calls += 1
-            self.prompt_tokens += usage.get("prompt_tokens", 0)
-            self.completion_tokens += usage.get("completion_tokens", 0)
+            prompt = usage.get("prompt_tokens", 0)
             cached = usage.get("cached_tokens", 0)
+            self.llm_calls += 1
+            self.prompt_tokens += prompt
+            self.completion_tokens += usage.get("completion_tokens", 0)
             self.cached_tokens += cached
             if cached > 0:
                 self.cache_hit_calls += 1
             if update_last_prompt:
-                self.last_prompt_tokens = usage.get("prompt_tokens", 0)
-            return self.snapshot()
+                self.last_prompt_tokens = prompt
+            snapshot = self._snapshot_locked()
+            if source:
+                totals = self.sources.setdefault(
+                    source,
+                    {"llm_calls": 0, "prompt_tokens": 0, "cached_tokens": 0, "cache_hit_calls": 0},
+                )
+                totals["llm_calls"] += 1
+                totals["prompt_tokens"] += prompt
+                totals["cached_tokens"] += cached
+                if cached > 0:
+                    totals["cache_hit_calls"] += 1
+                snapshot["source_cached_ratio"] = cached_ratio(
+                    totals["cached_tokens"], totals["prompt_tokens"]
+                )
+            return snapshot
 
-    def snapshot(self) -> dict[str, int]:
+    def _snapshot_locked(self) -> dict[str, Any]:
         return {
             "session_llm_calls": self.llm_calls,
             "session_prompt_tokens": self.prompt_tokens,
             "session_completion_tokens": self.completion_tokens,
             "session_cached_tokens": self.cached_tokens,
             "session_cache_hit_calls": self.cache_hit_calls,
+            "session_cached_ratio": cached_ratio(self.cached_tokens, self.prompt_tokens),
         }
 
+    def snapshot(self) -> dict[str, Any]:
+        with self._lock:
+            return self._snapshot_locked()
+
+    def summary(self) -> dict[str, Any]:
+        """Session totals plus every source's totals with its ``cached_ratio``."""
+        with self._lock:
+            summary: dict[str, Any] = {"session_id": self.session_id, **self._snapshot_locked()}
+            summary["sources"] = {
+                source: {
+                    **totals,
+                    "cached_ratio": cached_ratio(totals["cached_tokens"], totals["prompt_tokens"]),
+                }
+                for source, totals in self.sources.items()
+            }
+            return summary
+
+
+def format_session_summary(session_id: Any) -> str:
+    """One log line: session cache ratio, then each source's calls and ratio."""
+    summary = get_meter(session_id).summary()
+    parts = [
+        f"LLM usage for session {summary['session_id']}:"
+        f" {summary['session_llm_calls']} calls,"
+        f" {summary['session_prompt_tokens']} prompt tokens,"
+        f" {summary['session_cached_tokens']} cached"
+        f" (cached_ratio={summary['session_cached_ratio']:.3f},"
+        f" cache-hit calls {summary['session_cache_hit_calls']})"
+    ]
+    for source, totals in summary["sources"].items():
+        parts.append(
+            f"{source}: {totals['llm_calls']} calls, cached_ratio={totals['cached_ratio']:.3f}"
+        )
+    return "; ".join(parts)
+
+
+def log_session_summary(session_id: Any) -> dict[str, Any] | None:
+    """Log the session's usage summary (INFO) at session end, best-effort.
+
+    Returns the summary dict, or None when the session never metered a call
+    (nothing is logged then). Never raises.
+    """
+    try:
+        key = str(session_id)
+        with _LOCK:
+            meter = _METERS.get(key)
+        if meter is None or meter.llm_calls == 0:
+            return None
+        logger.info(format_session_summary(key))
+        return meter.summary()
+    except Exception as exc:
+        logger.debug(f"Token meter session summary skipped: {exc}")
+        return None
+
 
 def get_meter(session_id: Any) -> SessionTokenMeter:
     """Returns (creating on first use) the meter for a session id."""
@@ -147,7 +240,9 @@ def record_llm_usage(
         if not session_id or usage is None:
             return None
 
-        snapshot = get_meter(session_id).record(usage, update_last_prompt=update_last_prompt)
+        snapshot = get_meter(session_id).record(
+            usage, update_last_prompt=update_last_prompt, source=source
+        )
         payload: dict[str, Any] = {
             **usage,
             "context_base_tokens": usage["prompt_tokens"],
diff --git a/artemis/tools/command_tool.py b/artemis/tools/command_tool.py
index 4701b49..4c97a8d 100644
--- a/artemis/tools/command_tool.py
+++ b/artemis/tools/command_tool.py
@@ -125,23 +125,52 @@ def _adb_binary() -> str:
         return "adb"
 
 
+#: Inline display cap for command output, in characters. Beyond it the full
+#: text is cached under a TaskId and only the tail is shown to the model.
+_LONG_OUTPUT_CHARS = 50000
+
+#: How many trailing lines of an over-long output stay visible inline.
+_LONG_OUTPUT_TAIL_LINES = 200
+
+
 def _is_output_long(output: str) -> bool:
-    """Checks if command output exceeds the max threshold for inline display."""
-    return len(output.splitlines()) > 500 or len(output) > 50000
+    """Whether command output is too long to show inline.
+
+    The trigger is size alone: more than ``_LONG_OUTPUT_CHARS`` characters.
+    A line count by itself never trips it, so a 1000-line / 4 KB listing
+    (``seq 1 1000``) is shown in full instead of being cut to its tail.
+    """
+    return len(output) > _LONG_OUTPUT_CHARS
 
 
-def _format_long_output_response(_task_id: str, output: str, intro: str) -> str:
+def _format_long_output_response(task_id: str, output: str, intro: str) -> str:
     """Formats truncated output with guidance to use the analyzer tool."""
     lines = output.splitlines()
-    last_200 = "\n".join(lines[-200:])
+    tail = "\n".join(lines[-_LONG_OUTPUT_TAIL_LINES:])
     return (
         f"{intro}\nWarning: Output is too long ({len(lines)} lines,"
-        f" {len(output)} chars) and has been truncated.\n--- Last 200 lines of"
-        f" output ---\n{last_200}\n------------------------\nYou can use the"
-        " 'analyze_task_output' tool to get more information."
+        f" {len(output)} chars) and has been truncated.\n--- Last"
+        f" {_LONG_OUTPUT_TAIL_LINES} lines of output ---\n{tail}\n"
+        f"------------------------\nThe full output is kept under TaskId"
+        f" {task_id}: use analyze_task_output with TaskId {task_id} to query it."
     )
 
 
+def _render_output_body(output: str) -> str:
+    """Renders command output for the model; whitespace-only output reads as empty."""
+    return output if output.strip() else "(empty output)"
+
+
+def _abbreviate(text: str, limit: int = 40) -> str:
+    """Cuts ``text`` to ``limit`` characters, marking the cut only when one happened."""
+    return text if len(text) <= limit else f"{text[:limit]}..."
+
+
+def _terminal_label(terminal_id: str | None) -> str:
+    """Renders a terminal id for the model; a task without one shows as ``-``."""
+    return terminal_id or "-"
+
+
 def _filter_persistent_env(env: dict[str, str]) -> dict[str, str]:
     """Drops the platform-provided variables from a captured shell environment."""
     kept: dict[str, str] = {}
@@ -700,8 +729,7 @@ class RunAdbCommandTool(ArtemisTool):
             intro += "."
             if run_persistent:
                 intro += f" TerminalID: {terminal_id}."
-            body = clean_output if clean_output.strip() else "(empty output)"
-            return f"{intro}\nOutput:\n{body}"
+            return f"{intro}\nOutput:\n{_render_output_body(clean_output)}"
 
         # We spawn the host subprocess: adb -s <serial> shell <script>.
         # The script travels as an argument so the remote shell exits with it;
@@ -779,7 +807,7 @@ class RunAdbCommandTool(ArtemisTool):
             registry.finished[task_id]["notified"] = True
             return _format_long_output_response(task_id, clean_output, intro)
 
-        return f"{intro}\nOutput:\n{clean_output}"
+        return f"{intro}\nOutput:\n{_render_output_body(clean_output)}"
 
     # pylint: disable=too-many-arguments,too-many-positional-arguments
     async def _hand_off_to_background(
@@ -896,8 +924,8 @@ class ManageTaskTool(ArtemisTool):
             active_tasks = []
             for tid, t in registry.background.items():
                 active_tasks.append(
-                    f"- {tid}: Command='{t.command[:40]}...', Phone"
-                    f" Cwd='{t.cwd}', TerminalID='{t.terminal_id}',"
+                    f"- {tid}: Command='{_abbreviate(t.command)}', Phone"
+                    f" Cwd='{t.cwd}', TerminalID={_terminal_label(t.terminal_id)},"
                     f" Interactive={t.interactive}"
                 )
             if not active_tasks:
@@ -908,7 +936,7 @@ class ManageTaskTool(ArtemisTool):
             finished_tasks = []
             for tid, t in registry.finished.items():
                 finished_tasks.append(
-                    f"- {tid}: Command='{t['command'][:40]}...', Status='{t['status']}'"
+                    f"- {tid}: Command='{_abbreviate(t['command'])}', Status='{t['status']}'"
                 )
             if not finished_tasks:
                 return "No recently finished tasks."
@@ -924,7 +952,7 @@ class ManageTaskTool(ArtemisTool):
         if action == "status":
             task_info = _get_task_info(task_id, ctx)
             if not task_info:
-                return f"Task {task_id} not found."
+                return ToolFailure(f"Error: Task {task_id} not found.")
 
             output_text = task_info.get("output", "")
             if _ENV_START_MARKER in output_text:
@@ -935,7 +963,7 @@ class ManageTaskTool(ArtemisTool):
                 f"Status: {task_info.get('status')}\n"
                 f"Command: {task_info.get('command')}\n"
                 f"Cwd: {task_info.get('cwd')}\n"
-                f"TerminalID: {task_info.get('terminal_id')}"
+                f"TerminalID: {_terminal_label(task_info.get('terminal_id'))}"
             )
             exit_code = task_info.get("exit_code")
             if exit_code is not None:
@@ -948,16 +976,18 @@ class ManageTaskTool(ArtemisTool):
 
         if action == "kill":
             if not task:
-                return f"Task {task_id} is not active or already finished."
+                return ToolFailure(f"Error: Task {task_id} is not active or already finished.")
             try:
                 await task.stop(ctx, status="killed")
-                return f"Task {task_id} successfully terminated."
             except Exception as e:  # pylint: disable=broad-exception-caught
                 return ToolFailure(f"Failed to terminate task {task_id}: {e}")
+            if task.exit_code is not None:
+                return f"Terminated task {task_id} (exit code {task.exit_code})."
+            return f"Terminated task {task_id}."
 
         if action == "send_input":
             if not task:
-                return f"Task {task_id} is not active."
+                return ToolFailure(f"Error: Task {task_id} is not active.")
             if not input_str:
                 return ToolFailure("Error: Input is required for send_input action.")
             if not task.interactive or task.process.stdin is None:
@@ -968,7 +998,7 @@ class ManageTaskTool(ArtemisTool):
             try:
                 task.process.stdin.write(input_str.encode())
                 await task.process.stdin.drain()
-                return f"Input successfully sent to task {task_id}."
+                return f"Sent input to task {task_id}."
             except Exception as e:  # pylint: disable=broad-exception-caught
                 return ToolFailure(f"Failed to send input: {e}")
 
diff --git a/artemis/tools/explorer_tool.py b/artemis/tools/explorer_tool.py
index 9065e0e..951108b 100644
--- a/artemis/tools/explorer_tool.py
+++ b/artemis/tools/explorer_tool.py
@@ -209,6 +209,9 @@ class RegisteredCandidate:
     bounds: tuple[int, int, int, int] | None = None
     #: True when the candidate mapped onto an element that was already indexed.
     reused: bool = False
+    #: The text the agent's own indexed list shows for the reused element, so
+    #: the answer can name it the way the agent already knows it.
+    existing_text: str = ""
 
 
 #: A bare-point candidate this close to an existing indexed center (in
@@ -331,6 +334,7 @@ def register_candidates(
                     description=cand.description,
                     bounds=_element_pixel_bounds(existing),
                     reused=True,
+                    existing_text=str(existing.get("text") or ""),
                 )
             )
             continue
@@ -371,8 +375,20 @@ def register_candidates(
 # --------------------------------------------------------------------------- #
 
 
-def render_text(query: str, outcome: ExplorerOutcome, registered: list[RegisteredCandidate]) -> str:
-    """Plain-text answer for the calling agent."""
+def render_text(
+    query: str,
+    outcome: ExplorerOutcome,
+    registered: list[RegisteredCandidate],
+    *,
+    index_targets: bool = False,
+) -> str:
+    """Plain-text answer for the calling agent.
+
+    ``index_targets`` selects the targeting syntax the caller's ``click``
+    accepts: the Pro Operator and the Flash / MCP action executor take a bare
+    integer index next to coordinates; the Validator's text entry takes
+    coordinates only.
+    """
     if registered:
         lines = [
             f"Explorer located {len(registered)} candidate(s) for '{query}' in the"
@@ -381,12 +397,18 @@ def render_text(query: str, outcome: ExplorerOutcome, registered: list[Registere
         for c in registered:
             line = f"- [{c.index}] '{c.description}' at normalized [{c.coords[0]}, {c.coords[1]}]"
             if c.reused:
-                line += " (already in your indexed list)"
+                line += f" (matches your indexed element [{c.index}] '{c.existing_text}')"
             lines.append(line)
-        lines.append(
-            "Act on a candidate by its index (e.g. target=[index]) or by the"
-            " normalized coordinate. Candidates are ranked by confidence."
-        )
+        if index_targets:
+            lines.append(
+                "Act on a candidate by its index (target=3, a bare integer) or by its"
+                " normalized coordinate. Candidates are ranked by confidence."
+            )
+        else:
+            lines.append(
+                "Act on a candidate by its normalized coordinate (target=[x, y]) with a"
+                " target_description. Candidates are ranked by confidence."
+            )
         if outcome.message:
             lines.append(f"Explorer notes: {outcome.message}")
         return "\n".join(lines)
@@ -444,7 +466,7 @@ def render_operator_blocks(
     registered: list[RegisteredCandidate],
 ) -> str | list[dict[str, Any]]:
     """Multimodal answer for the Operator: text plus the annotated screenshot."""
-    text = render_text(query, outcome, registered)
+    text = render_text(query, outcome, registered, index_targets=True)
     screenshot_path = getattr(state, "latest_screenshot", None)
     image_path = (
         render_annotated_image(ctx, screenshot_path, registered) if screenshot_path else None
@@ -475,10 +497,11 @@ async def ask_explorer_text(
     *,
     agent_name: str = "validator",
 ) -> str:
-    """Text-only entry used by the Validator / Flash runner and MCP executors."""
+    """Text-only, coordinate-only entry used by the Validator (Flash and the MCP
+    executor reach the explorer through ``McpActionExecutor`` with index targets)."""
     outcome = await locate(ctx, state, query, context_feedback, agent_name=agent_name)
     registered = register_candidates(ctx, state, outcome)
-    return render_text(query, outcome, registered)
+    return render_text(query, outcome, registered, index_targets=False)
 
 
 class AskExplorerTool(ArtemisTool):
diff --git a/artemis/tools/history/replay.py b/artemis/tools/history/replay.py
index e8537e2..78902eb 100644
--- a/artemis/tools/history/replay.py
+++ b/artemis/tools/history/replay.py
@@ -15,9 +15,9 @@
 """replay_steps: full replay of a step range, exactly as the executing agent saw it.
 
 Each step is rendered with :func:`~artemis.utils.task_tree.render_step_replay`
-(``[Screen]`` description, reasoning, every non-internal tool call with name /
-arguments / result, the planned action, safety-net interception and the
-execution result). Two loose bounds keep one tool result finite (config
+(``T+mm:ss`` step header, ``[Screen]`` description, reasoning, every
+non-internal tool call with name / arguments / result, the executed action,
+safety-net interception and the execution result). Two loose bounds keep one tool result finite (config
 ``agent.memory.replay``): at most ``max_steps`` steps per call, and a
 ``max_tokens`` budget applied by dropping *whole trailing steps* — a replayed
 step is never cut mid-sentence. Screenshots are deliberately not part of the
@@ -79,6 +79,10 @@ def replay_steps_text(
         return ToolFailure(f"Error: no recorded steps in range {start}–{end}.")
 
     budget_tokens = max(1, int(max_tokens or DEFAULT_MAX_TOKENS))
+    # Step headers carry the session clock (``T+mm:ss``) every agent prompt
+    # and search_history use; without a session start they fall back to the
+    # stored relative time.
+    session_start = getattr(reader, "session_start_time", None)
     rendered: list[str] = []
     shown: list[dict] = []
     used = 0
@@ -88,7 +92,7 @@ def replay_steps_text(
             dropped += 1
             continue
         try:
-            text = render_step_replay(step)
+            text = render_step_replay(step, session_start=session_start)
         except Exception as e:
             return ToolFailure(f"Error rendering steps {start}–{end}: {e}")
         cost = _estimate_tokens(text) + 1
diff --git a/artemis/tools/history/screenshot.py b/artemis/tools/history/screenshot.py
index 77d18c8..51906b9 100644
--- a/artemis/tools/history/screenshot.py
+++ b/artemis/tools/history/screenshot.py
@@ -29,6 +29,7 @@ from pathlib import Path
 import sqlite3
 from typing import Any
 
+from artemis.core.tool_failure import ToolFailure
 from artemis.utils.logger import get_logger
 from artemis.utils.visualization import overlay_action_on_screenshot
 
@@ -47,10 +48,18 @@ class ScreenshotResult:
     image_bytes: bytes | None = None
     #: True when ``which == "overlay"`` and the action was actually drawn.
     overlay_drawn: bool = False
+    #: True when the lookup could not serve the request (bad arguments, no
+    #: history, unknown step, unreadable file). A step that simply has no
+    #: screenshot of the requested kind is an answer, not an error.
+    is_error: bool = False
 
     def to_content_blocks(self) -> list[dict[str, Any]] | str:
-        """The tool's return value: content blocks with the image, or the
-        plain-text explanation when there is no image to attach."""
+        """The tool's return value: content blocks with the image, the
+        plain-text answer when there is no image to attach, or a
+        :class:`ToolFailure` (status ``error`` downstream) when the lookup
+        failed."""
+        if self.is_error:
+            return ToolFailure(self.description)
         if not self.image_bytes:
             return self.description
         encoded = base64.b64encode(self.image_bytes).decode("utf-8")
@@ -60,41 +69,43 @@ class ScreenshotResult:
         ]
 
 
+def _failure(step_number: int, which: str, description: str) -> ScreenshotResult:
+    return ScreenshotResult(step_number, which, description, is_error=True)
+
+
 def load_step_screenshot(reader: Any, step_number: Any, which: str = "pre") -> ScreenshotResult:
     """Loads (and for ``overlay`` annotates) one step screenshot from ``reader``."""
     which = str(which or "pre").lower()
     try:
         number = int(step_number)
     except (TypeError, ValueError):
-        return ScreenshotResult(
-            -1, which, f"Error: step_number must be an integer, got {step_number!r}."
-        )
+        return _failure(-1, which, f"Error: step_number must be an integer, got {step_number!r}.")
     if which not in WHICH_CHOICES:
-        return ScreenshotResult(
+        return _failure(
             number, which, f"Error: 'which' must be 'pre', 'post' or 'overlay', got '{which}'."
         )
     if reader is None:
-        return ScreenshotResult(number, which, "Error: no execution history available.")
+        return _failure(number, which, "Error: no execution history available.")
 
     source = "pre" if which == "overlay" else which
     try:
         path = reader.get_step_image_path(number, source)
     except (sqlite3.Error, OSError, ValueError) as e:
-        return ScreenshotResult(number, which, f"Error looking up step {number}: {e}")
+        return _failure(number, which, f"Error looking up step {number}: {e}")
     if path is None:
         try:
             record = reader.get_step_record(number)
         except (sqlite3.Error, ValueError):
             record = None
         if record is None:
-            return ScreenshotResult(number, which, f"Error: step {number} not found.")
+            return _failure(number, which, f"Error: step {number} not found.")
         return ScreenshotResult(
             number, which, f"No {source}-action screenshot recorded for step {number}."
         )
     try:
         image_bytes = Path(path).read_bytes()
     except OSError as e:
-        return ScreenshotResult(number, which, f"Error reading screenshot: {e}")
+        return _failure(number, which, f"Error reading screenshot: {e}")
 
     if which != "overlay":
         return ScreenshotResult(
diff --git a/artemis/tools/history/search.py b/artemis/tools/history/search.py
index e0fab50..eb9ec2f 100644
--- a/artemis/tools/history/search.py
+++ b/artemis/tools/history/search.py
@@ -30,6 +30,12 @@ Hard boundaries (config ``agent.memory.recall``):
 - every result carries a step number / step id;
 - large raw sources return only excerpts around the match plus a reference.
 
+Two surfaces per step: the *scoring* haystack keeps the raw record (action
+JSON, execution result JSON, UI-tree XML) so resource ids, bounds and package
+names stay searchable; the *excerpt* shown as ``Match:`` is built from the
+readable twin (the ledger action phrase, result status/error words, element
+text / content descriptions / OCR text) so the model never reads JSON.
+
 A ``step_range`` additionally returns the full-width ``build_action_ledger``
 rows of that range — the re-entry point for compressed-history marker lines.
 """
@@ -104,6 +110,15 @@ def result_search_text(result: Any) -> str:
     the haystack via :func:`_screen_text`), so base64 never enters the search."""
     if result is None:
         return ""
+    # A content-block list stored as its JSON string (trace serialization)
+    # is unwrapped first so its text blocks render, not the JSON.
+    if isinstance(result, str) and result.lstrip().startswith("[{"):
+        try:
+            parsed = json.loads(result)
+        except ValueError:
+            parsed = None
+        if isinstance(parsed, list) and any(isinstance(b, dict) and "type" in b for b in parsed):
+            return result_search_text(parsed)
     if isinstance(result, list):
         texts = [
             str(block.get("text") or "")
@@ -135,23 +150,32 @@ def _events_text(step: dict) -> str:
     return "\n".join(parts)
 
 
-def _action_text(action_taken: Any) -> str:
-    """Combine the rendered action with raw fields for search.
-
-    Rendered excerpts identify self-described targets. Raw JSON also makes
-    resource IDs, bounds, and other fields searchable.
-    """
+def _rendered_action(action_taken: Any) -> str:
+    """The shared ledger phrase of a step's action (``format_actions_clean``)."""
     if not action_taken:
         return ""
     try:
-        rendered = format_actions_clean(action_taken)
+        return format_actions_clean(action_taken)
     except Exception:
-        rendered = ""
+        return ""
+
+
+def _action_text(action_taken: Any) -> str:
+    """Combine the rendered action with raw fields for *scoring*.
+
+    Rendered text identifies self-described targets. Raw JSON also makes
+    resource IDs, bounds, and other fields searchable. Never shown as-is:
+    the excerpt comes from :func:`_step_display_text`.
+    """
+    if not action_taken:
+        return ""
+    rendered = _rendered_action(action_taken)
     raw = json.dumps(action_taken, ensure_ascii=False, default=str)
     return f"{rendered}\n{raw}" if rendered else raw
 
 
 def _step_haystack(step: dict) -> str:
+    """The scoring surface of a step: every recorded field, raw JSON included."""
     extra = step.get("extra_metadata") or {}
     fields = [
         str(step.get("summary") or ""),
@@ -170,6 +194,70 @@ def _step_haystack(step: dict) -> str:
     return "\n".join(f for f in fields if f)
 
 
+def _result_display_text(result: Any) -> str:
+    """The execution result as words: its status and result/error strings
+    (an execution incident renders as its one-line phrase), never JSON."""
+    if not result:
+        return ""
+    if not isinstance(result, dict):
+        return str(result)
+    parts: list[str] = []
+    status = result.get("status")
+    if status:
+        parts.append(f"status {status}")
+    try:
+        from artemis.utils.task_tree import format_result_clean
+
+        incident_or_error = format_result_clean(result)
+    except Exception:
+        incident_or_error = None
+    if incident_or_error:
+        parts.append(str(incident_or_error))
+    else:
+        for key in ("result", "error", "error_msg", "message"):
+            value = result.get(key)
+            if isinstance(value, str) and value.strip():
+                parts.append(value.strip())
+    return " | ".join(parts)
+
+
+def _events_display_text(step: dict) -> str:
+    """Tool calls and reasoning of a step as the replay shows them (name,
+    arguments, result text), without the raw event JSON."""
+    parts: list[str] = []
+    for event in step.get("interleaved_events") or []:
+        etype = event.get("type")
+        if etype == "tool_call":
+            name = str(event.get("name") or "")
+            args = event.get("args") or {}
+            result_text = result_search_text(event.get("result"))
+            try:
+                call = f"{name}({json.dumps(args, ensure_ascii=False, default=str)})"
+            except (TypeError, ValueError):
+                call = name
+            parts.append(f"{call} -> {result_text}" if result_text else call)
+        elif etype and "thought" in etype:
+            parts.append(str(event.get("content") or ""))
+    return "\n".join(p for p in parts if p)
+
+
+def _step_display_text(step: dict) -> str:
+    """The *excerpt* surface of a step: the same fields as the haystack, as the
+    agent would read them. The summary is left out — it already heads the
+    result as the ``Screen:`` line."""
+    extra = step.get("extra_metadata") or {}
+    fields = [
+        _rendered_action(step.get("action_taken")),
+        _result_display_text(step.get("last_execution_result")),
+        str(step.get("operator_raw_thinking") or ""),
+        _events_display_text(step),
+        str(extra.get("injected_instruction") or ""),
+        str(extra.get("foreground_app") or ""),
+    ]
+    # Excerpts flatten whitespace, so the field boundary must survive as text.
+    return " | ".join(f.strip() for f in fields if f and f.strip())
+
+
 def _image_text(reader: Any, image_name: str | None) -> str:
     """Raw XML/OCR text stored for one screenshot — the textual description
     of that image (package/activity strings live inside the XML blob)."""
@@ -212,9 +300,37 @@ def referenced_image_names(step: dict) -> list[str]:
     return names
 
 
-def _screen_text(reader: Any, step: dict) -> str:
-    """Description text of the screenshots behind a step: its own pre- and
-    post-action screenshots plus any screenshot a tool result embedded."""
+#: UI-tree node attributes whose values are human-readable screen content.
+_UI_NODE_TEXT_KEYS = ("text", "content-desc", "content_desc", "resource-id", "resource_id")
+
+
+def _collect_screen_strings(value: Any, out: list[str], depth: int = 0) -> None:
+    """Walks a stored UI tree / OCR blob and appends its readable values
+    (element text, content description, resource id, OCR text) in order."""
+    if depth > 50:
+        return
+    if isinstance(value, str):
+        text = " ".join(value.split())
+        if text and text not in out:
+            out.append(text)
+    elif isinstance(value, dict):
+        for key in _UI_NODE_TEXT_KEYS:
+            text = value.get(key)
+            if isinstance(text, str):
+                text = " ".join(text.split())
+                if text and text not in out:
+                    out.append(text)
+        for child_key in ("children", "nodes", "elements"):
+            children = value.get(child_key)
+            if isinstance(children, (list, tuple)):
+                for child in children:
+                    _collect_screen_strings(child, out, depth + 1)
+    elif isinstance(value, (list, tuple)):
+        for child in value:
+            _collect_screen_strings(child, out, depth + 1)
+
+
+def _screen_names(step: dict) -> list[str]:
     names: list[str] = []
     for name in (
         step.get("pre_image_name"),
@@ -223,7 +339,32 @@ def _screen_text(reader: Any, step: dict) -> str:
     ):
         if name and name not in names:
             names.append(name)
-    return "\n".join(t for t in (_image_text(reader, n) for n in names) if t)
+    return names
+
+
+def _screen_text(reader: Any, step: dict) -> str:
+    """Description text of the screenshots behind a step (its own pre- and
+    post-action screenshots plus any screenshot a tool result embedded) —
+    the raw XML/OCR blobs, for *scoring* only."""
+    return "\n".join(t for t in (_image_text(reader, n) for n in _screen_names(step)) if t)
+
+
+def _screen_display_text(reader: Any, step: dict) -> str:
+    """The readable content of the same screenshots for the *excerpt*: element
+    text / content descriptions / resource ids and OCR text joined by
+    ``" | "``, never the UI-tree JSON."""
+    strings: list[str] = []
+    for name in _screen_names(step):
+        try:
+            record = reader.storage.get_image(name)
+        except (sqlite3.Error, ValueError, AttributeError):
+            continue
+        if record is None:
+            continue
+        for blob in (record.ui_tree, record.ocr_result):
+            if blob:
+                _collect_screen_strings(blob, strings)
+    return " | ".join(strings)
 
 
 def _step_label(step: dict, session_start: float | None) -> str:
@@ -321,12 +462,22 @@ def search_history_text(
             total = score + screen_score
             if total <= 0:
                 continue
-            source = haystack if score >= screen_score else screen
             lines = [f"[{_step_label(step, session_start)} | id {step.get('step_id')}]"]
             summary = step.get("summary")
             if summary:
                 lines.append(f"  Screen: {_clamp(str(summary), EXCERPT_CHARS)}")
-            lines.append(f"  Match: {_excerpt(source, terms, EXCERPT_CHARS)}")
+            # The excerpt comes from the readable twin of whichever surface
+            # scored higher; the raw JSON only ever scores. When the hit sits
+            # in the summary alone, the Screen line already shows it.
+            display = (
+                _step_display_text(step)
+                if score >= screen_score
+                else _screen_display_text(reader, step)
+            )
+            display_hit = _score(display, terms) > 0
+            summary_hit = bool(summary) and _score(str(summary), terms) > 0
+            if display and (display_hit or not summary_hit):
+                lines.append(f"  Match: {_excerpt(display, terms, EXCERPT_CHARS)}")
             number = step.get("step_number") or 0
             results.append((total, number, "\n".join(lines)))
 
diff --git a/artemis/tools/mobile/search_logs.py b/artemis/tools/mobile/search_logs.py
index b854515..eed8537 100644
--- a/artemis/tools/mobile/search_logs.py
+++ b/artemis/tools/mobile/search_logs.py
@@ -29,6 +29,29 @@ from artemis.utils.logger import get_logger
 
 logger = get_logger(__name__)
 
+#: How many line ranges a merged block's header lists before it is cut.
+_MAX_HEADER_RANGES = 8
+
+
+def _compress_line_numbers(indices: list[int]) -> str:
+    """Renders sorted line numbers as ranges: ``6``, ``69-79``, ``699-798``.
+
+    Consecutive runs collapse into ``start-end``; at most
+    ``_MAX_HEADER_RANGES`` ranges are listed, the rest replaced by ``...``.
+    """
+    runs: list[str] = []
+    start = prev = indices[0]
+    for idx in indices[1:]:
+        if idx == prev + 1:
+            prev = idx
+            continue
+        runs.append(str(start) if start == prev else f"{start}-{prev}")
+        start = prev = idx
+    runs.append(str(start) if start == prev else f"{start}-{prev}")
+    if len(runs) > _MAX_HEADER_RANGES:
+        return ", ".join(runs[:_MAX_HEADER_RANGES]) + ", ..."
+    return ", ".join(runs)
+
 
 # pylint: disable=too-many-branches,too-many-locals,too-many-statements
 def search_and_merge_logs(
@@ -99,7 +122,7 @@ def search_and_merge_logs(
             truncated = True
             break
 
-        match_str = ", ".join(map(str, match_indices))
+        match_str = _compress_line_numbers(match_indices)
         matches.append(f"--- Match at line(s) {match_str} ---")
         for idx in range(start, end):
             line_content = log_lines[idx]
diff --git a/artemis/tools/scratchpad.py b/artemis/tools/scratchpad.py
index 3ac29f2..6032e43 100644
--- a/artemis/tools/scratchpad.py
+++ b/artemis/tools/scratchpad.py
@@ -148,7 +148,7 @@ class SaveNoteTool(ArtemisTool):
                 else "."
             )
             save_note_content(base_dir, k, c)
-            agent_outcome = f"Successfully saved note to {k}.md."
+            agent_outcome = f"Saved note '{k}'."
             status = "success"
         except Exception as e:  # pylint: disable=broad-exception-caught
             agent_outcome = f"Failed to save note {k}.md: {e}"
@@ -227,7 +227,7 @@ class AppendNoteTool(ArtemisTool):
                 else "."
             )
             append_note_content(base_dir, k, c)
-            agent_outcome = f"Successfully appended note to {k}.md."
+            agent_outcome = f"Appended to note '{k}'."
             status = "success"
         except Exception as e:  # pylint: disable=broad-exception-caught
             agent_outcome = f"Failed to append note {k}.md: {e}"
@@ -309,9 +309,9 @@ class UpdateNoteTool(ArtemisTool):
             )
             warning = update_note_content(base_dir, k, t, r)
             if warning:
-                agent_outcome = f"Successfully updated note '{k}'.\nWARNING: {warning}"
+                agent_outcome = f"Updated note '{k}'.\nWARNING: {warning}"
             else:
-                agent_outcome = f"Successfully updated note '{k}'."
+                agent_outcome = f"Updated note '{k}'."
             status = "success"
         except Exception as e:  # pylint: disable=broad-exception-caught
             agent_outcome = f"Failed to update note '{k}': {e}"
@@ -642,7 +642,7 @@ class SaveNotePureTool(ArtemisTool):
                 else "."
             )
             save_note_content(base_dir, k, c)
-            return f"Successfully saved note to {k}.md."
+            return f"Saved note '{k}'."
         except Exception as e:  # pylint: disable=broad-exception-caught
             return ToolFailure(f"Failed to save note {k}.md: {e}")
 
@@ -709,8 +709,8 @@ class UpdateNotePureTool(ArtemisTool):
             )
             warning = update_note_content(base_dir, k, t, r)
             if warning:
-                return f"Successfully updated note '{k}'.\nWARNING: {warning}"
-            return f"Successfully updated note '{k}'."
+                return f"Updated note '{k}'.\nWARNING: {warning}"
+            return f"Updated note '{k}'."
         except Exception as e:  # pylint: disable=broad-exception-caught
             return ToolFailure(f"Failed to update note '{k}': {e}")
 
@@ -774,7 +774,7 @@ class AppendNotePureTool(ArtemisTool):
                 else "."
             )
             append_note_content(base_dir, k, c)
-            return f"Successfully appended note to {k}.md."
+            return f"Appended to note '{k}'."
         except Exception as e:  # pylint: disable=broad-exception-caught
             return ToolFailure(f"Failed to append note {k}.md: {e}")
 
@@ -791,7 +791,7 @@ def get_append_note_tool_pure(ctx: ArtemisContext) -> BaseTool:
 
 save_note_wrapper = ToolWrapper(
     tool_fn_getter=get_save_note_tool,
-    on_success_fn=lambda key: f"Successfully saved note '{key}'.",
+    on_success_fn=lambda key: f"Saved note '{key}'.",
     on_failure_fn=lambda key: f"Failed to save note '{key}'.",
 )
 
@@ -810,13 +810,13 @@ list_notes_wrapper = ToolWrapper(
 
 update_note_wrapper = ToolWrapper(
     tool_fn_getter=get_update_note_tool,
-    on_success_fn=lambda key: f"Successfully updated note '{key}'.",
+    on_success_fn=lambda key: f"Updated note '{key}'.",
     on_failure_fn=lambda key: f"Failed to update note '{key}'.",
 )
 
 
 append_note_wrapper = ToolWrapper(
     tool_fn_getter=get_append_note_tool,
-    on_success_fn=lambda key: f"Successfully appended note '{key}'.",
+    on_success_fn=lambda key: f"Appended to note '{key}'.",
     on_failure_fn=lambda key: f"Failed to append note '{key}'.",
 )
diff --git a/artemis/tools/video_tool.py b/artemis/tools/video_tool.py
index 16449eb..da4209f 100644
--- a/artemis/tools/video_tool.py
+++ b/artemis/tools/video_tool.py
@@ -63,7 +63,7 @@ class VideoAnalyzerArgs(BaseModel):
 
 OPERATOR_VIDEO_ANALYZER_DOCSTRING = (
     "[VIDEO] Use this tool to analyze any specific time range of the video"
-    " recording. This tool delegates to a powerful video-analyzing subagent"
+    " recording. This tool delegates to a video analysis subagent"
     " with full access to the continuous screen recording of your entire"
     " execution session.\n\n"
     "- This tool overcomes your limitation of only receiving discrete"
diff --git a/artemis/utils/app_launch_utils.py b/artemis/utils/app_launch_utils.py
index 94a58a9..a7b3468 100644
--- a/artemis/utils/app_launch_utils.py
+++ b/artemis/utils/app_launch_utils.py
@@ -15,6 +15,8 @@
 """Utilities for handling app locking and initial app launch logic."""
 
 import asyncio
+from dataclasses import dataclass, field
+import re
 
 from artemis.context import AppLaunchResult, ArtemisContext
 from artemis.controllers.platform_specific_commands_controller import (
@@ -28,43 +30,180 @@ from artemis.utils.logger import get_logger
 logger = get_logger(__name__)
 
 
-SYSTEM_OVERLAYS_VALID_FOR_LAUNCH = {
-    "com.google.android.permissioncontroller",
-    "com.android.permissioncontroller",
-    "com.google.android.packageinstaller",
-    "com.android.packageinstaller",
-}
+# ``ActivityRecord{<hash> u<user> <package>/<activity> t<task id>}`` as printed by
+# ``dumpsys activity activities`` on every line that names an activity.
+_ACTIVITY_RECORD_RE = re.compile(
+    r"ActivityRecord\{[0-9a-f]+ u\d+ (?P<package>[\w.]+)/(?P<activity>[\w.$]+) t(?P<task>\d+)\}"
+)
+# ``* Task{<hash> #<id> type=... A=<uid>:<affinity> ... visible=true ...}`` task headers
+# (``* TaskRecord{<hash> #<id> A=<affinity> ...}`` on Android 11 and older).
+_TASK_HEADER_RE = re.compile(r"^\s*\* Task(?:Record)?\{[0-9a-f]+ #(?P<task>\d+)(?P<attrs>[^}]*)\}")
+# Device-side pre-filter: the full dump runs to hundreds of KB on a busy device;
+# only the task headers, history entries and resumed-activity lines are parsed.
+_FOREGROUND_DUMP_CMD = (
+    "dumpsys activity activities | grep -E"
+    r" '^ *\* (Task|TaskRecord)\{|^ *\* Hist |ResumedActivity'"
+)
+# ``* Hist  #<index>: ActivityRecord{...}`` entries; index 0 is the task's base activity.
+_HIST_RE = re.compile(r"^\s*\* Hist\s+#(?P<index>\d+): (?P<record>ActivityRecord\{[^}]*\})")
+# ``topResumedActivity=ActivityRecord{...}`` (per task, top task first) and the global
+# ``ResumedActivity: ActivityRecord{...}`` line; the first one seen is the foreground one.
+_RESUMED_RE = re.compile(r"ResumedActivity[:=]\s*(?P<record>ActivityRecord\{[^}]*\})")
 
 
-def get_focused_task_package(ctx: ArtemisContext) -> str | None:
-    """Inspect the active/focused task stack to find the package affinity of the top task.
+@dataclass(frozen=True)
+class ForegroundTask:
+    """What ``dumpsys activity activities`` says is on top of the display.
 
-    Uses adb shell dumpsys activity activities to extract this info.
+    ``resumed_package`` is the package of the resumed activity (what the user sees).
+    ``base_package`` is the package of the task's root activity (``Hist #0``), and
+    ``packages`` holds every package that has an activity in that task, so an app whose
+    task currently shows a helper activity from another package (Settings search,
+    permission dialogs, account pickers, system update pages, ...) is still
+    recognised as the foreground app.
+    """
+
+    task_id: int | None = None
+    affinity: str | None = None
+    resumed_component: str | None = None
+    resumed_package: str | None = None
+    base_package: str | None = None
+    packages: frozenset[str] = field(default_factory=frozenset)
+
+    def owns(self, app_package: str) -> bool:
+        """Whether ``app_package`` is the app the foreground task belongs to.
+
+        The task affinity is the app's own claim on the task (by default the
+        package name, or a package-prefixed name such as
+        ``com.android.settings.root``); it stays with the task even when the
+        app's root activity has been destroyed and only a companion activity
+        (e.g. the Settings search UI) remains in the history."""
+        affinity = self.affinity or ""
+        return (
+            app_package == self.resumed_package
+            or app_package == self.base_package
+            or app_package in self.packages
+            or affinity == app_package
+            or affinity.startswith(app_package + ".")
+        )
+
+    def describe(self) -> str:
+        task = f"task #{self.task_id}" if self.task_id is not None else "task ?"
+        details = [f"base={self.base_package}", f"resumed={self.resumed_component}"]
+        if self.affinity:
+            details.append(f"affinity={self.affinity}")
+        others = sorted(self.packages - {self.base_package, self.resumed_package, None})
+        if others:
+            details.append(f"also={','.join(others)}")
+        return f"{task} ({', '.join(details)})"
+
+
+def parse_foreground_task(dump: str) -> ForegroundTask | None:
+    """Parse ``dumpsys activity activities`` output into the foreground task summary.
+
+    The foreground task is the one holding the resumed activity; when no activity is
+    resumed (mid-transition) the first visible task with history entries is used.
+    Returns None when the dump contains no task information at all.
+    """
+    task_attrs: dict[int, str] = {}
+    task_order: list[int] = []
+    task_activities: dict[int, list[tuple[int, str, str]]] = {}
+    resumed: re.Match[str] | None = None
+
+    for line in dump.splitlines():
+        header = _TASK_HEADER_RE.match(line)
+        if header:
+            task_id = int(header.group("task"))
+            if task_id not in task_attrs:
+                task_attrs[task_id] = header.group("attrs")
+                task_order.append(task_id)
+            continue
+        hist = _HIST_RE.match(line)
+        if hist:
+            record = _ACTIVITY_RECORD_RE.search(hist.group("record"))
+            if record:
+                task_activities.setdefault(int(record.group("task")), []).append(
+                    (int(hist.group("index")), record.group("package"), record.group("activity"))
+                )
+            continue
+        if resumed is None:
+            match = _RESUMED_RE.search(line)
+            if match:
+                resumed = _ACTIVITY_RECORD_RE.search(match.group("record"))
+
+    if not task_attrs and resumed is None:
+        return None
+
+    task_id: int | None = None
+    if resumed is not None:
+        task_id = int(resumed.group("task"))
+    else:
+        for candidate in task_order:
+            if "visible=true" in task_attrs[candidate] and candidate in task_activities:
+                task_id = candidate
+                break
+
+    activities = sorted(task_activities.get(task_id, []))
+    affinity_match = re.search(r"\bA=(?:\d+:)?(\S+)", task_attrs.get(task_id, ""))
+    return ForegroundTask(
+        task_id=task_id,
+        affinity=affinity_match.group(1) if affinity_match else None,
+        resumed_component=(
+            f"{resumed.group('package')}/{resumed.group('activity')}" if resumed else None
+        ),
+        resumed_package=resumed.group("package") if resumed else None,
+        base_package=activities[0][1] if activities else None,
+        packages=frozenset(package for _, package, _ in activities),
+    )
+
+
+def get_foreground_task(ctx: ArtemisContext) -> ForegroundTask | None:
+    """Read the foreground task from ``dumpsys activity activities`` on the device.
+
+    Blocking (a synchronous ADB shell round-trip); async callers go through
+    :func:`get_foreground_task_async` so the event loop keeps serving.
     """
     try:
         device = get_adb_device(ctx)
-        output = str(device.shell("dumpsys activity activities | grep topDisplayFocusedRootTask"))
-        if "topDisplayFocusedRootTask=" in output:
-            segment = output.split("topDisplayFocusedRootTask=")[-1]
-            if "A=" in segment:
-                affinity = segment.split("A=")[-1].split("}")[0].split()[0].strip()
-                if ":" in affinity:
-                    return affinity.split(":")[-1]
-                return affinity
-            if "{" in segment and "}" in segment:
-                braces_content = segment.split("{")[-1].split("}")[0]
-                tokens = braces_content.split()
-                for token in tokens:
-                    if "." in token and not token.startswith("#") and not token.isdigit():
-                        if ":" in token:
-                            return token.split(":")[-1]
-                        return token
-        return None
+        if device is None:
+            return None
+        dump = str(device.shell(_FOREGROUND_DUMP_CMD))
+        if "Task" not in dump:
+            # No grep on the device (or nothing matched): parse the full dump.
+            dump = str(device.shell("dumpsys activity activities"))
+        return parse_foreground_task(dump)
     except Exception as e:
-        logger.debug(f"Failed to retrieve focused task package via dumpsys: {e}")
+        logger.debug(f"Failed to retrieve foreground task via dumpsys: {e}")
         return None
 
 
+async def get_foreground_task_async(ctx: ArtemisContext) -> ForegroundTask | None:
+    """:func:`get_foreground_task` off the event loop."""
+    return await asyncio.to_thread(get_foreground_task, ctx)
+
+
+async def _observe_foreground(
+    ctx: ArtemisContext, app_package: str
+) -> tuple[bool, str | None, ForegroundTask | None]:
+    """Report whether ``app_package`` is in the foreground.
+
+    Fast path: the focused window's package equals the target. Otherwise the app also
+    counts as foreground when the top task belongs to it (see ``ForegroundTask``).
+    A ``None`` focused package means the window manager is mid-transition and is
+    reported as "not yet" without consulting the task stack.
+
+    Returns (is_foreground, focused_package, foreground_task); the task is only read
+    when the fast path fails on a non-null focused package.
+    """
+    current_package = await get_current_foreground_package_async(ctx)
+    if current_package == app_package:
+        return True, current_package, None
+    if current_package is None:
+        return False, None, None
+    task = await get_foreground_task_async(ctx)
+    return task is not None and task.owns(app_package), current_package, task
+
+
 async def _poll_for_app_ready(
     ctx: ArtemisContext,
     app_package: str,
@@ -88,38 +227,37 @@ async def _poll_for_app_ready(
     polls = int(max_poll_seconds / poll_interval)
 
     for i in range(polls):
-        current_package = await get_current_foreground_package_async(ctx)
+        ready, current_package, task = await _observe_foreground(ctx, app_package)
 
-        if current_package == app_package:
-            logger.success(f"App {app_package} is ready (took ~{i * poll_interval:.1f}s)")
-            return True, None
-
-        if current_package in SYSTEM_OVERLAYS_VALID_FOR_LAUNCH:
-            task_package = get_focused_task_package(ctx)
-            if task_package == app_package:
+        if ready:
+            if current_package == app_package:
+                logger.success(f"App {app_package} is ready (took ~{i * poll_interval:.1f}s)")
+            else:
                 logger.success(
-                    f"App {app_package} launch succeeded (system overlay"
-                    f" '{current_package}' focused, but top task stack affinity"
-                    f" matches expected app package '{task_package}', took"
-                    f" ~{i * poll_interval:.1f}s)"
+                    f"App {app_package} is ready (focused window belongs to"
+                    f" '{current_package}', but the foreground {task.describe()} is owned"
+                    f" by {app_package}, took ~{i * poll_interval:.1f}s)"
                 )
-                return True, None
+            return True, None
 
         if current_package is None:
             logger.debug(f"Poll {i + 1}/{polls}: App loading (mCurrentFocus=null)...")
         else:
             logger.debug(
                 f"Poll {i + 1}/{polls}: Wrong app in foreground (expected"
-                f" '{app_package}', got '{current_package}'). Still waiting..."
+                f" '{app_package}', got '{current_package}', foreground"
+                f" {task.describe() if task else 'task unknown'}). Still waiting..."
             )
 
         if i < polls - 1:
             await asyncio.sleep(poll_interval)
 
     current_package = await get_current_foreground_package_async(ctx)
+    task = await get_foreground_task_async(ctx)
     error_msg = (
         f"Timeout waiting for {app_package} to load after {max_poll_seconds}s. "
-        f"Current foreground: {current_package}"
+        f"Current foreground: {current_package}; foreground"
+        f" {task.describe() if task else 'task unknown'}"
     )
     logger.error(error_msg)
     return False, error_msg
@@ -225,10 +363,10 @@ async def _handle_initial_app_launch(
     logger.info(f"Starting initial app launch for package: {locked_app_package}")
 
     try:
-        current_package = await get_current_foreground_package_async(ctx)
+        already_foreground, current_package, _ = await _observe_foreground(ctx, locked_app_package)
         logger.info(f"Current foreground app: {current_package}")
 
-        if current_package == locked_app_package:
+        if already_foreground:
             logger.info(f"App {locked_app_package} is already in foreground")
             return AppLaunchResult(
                 locked_app_package=locked_app_package,
diff --git a/artemis/utils/credentials_validator.py b/artemis/utils/credentials_validator.py
index e3a5c6e..e71e8ba 100644
--- a/artemis/utils/credentials_validator.py
+++ b/artemis/utils/credentials_validator.py
@@ -93,8 +93,10 @@ async def validate_api_key(
         async with httpx.AsyncClient(timeout=timeout) as client:
             if is_google_family_provider(clean_provider):
                 # Test Google Gemini via generativelanguage API
-                url = f"https://generativelanguage.googleapis.com/v1beta/models?key={clean_key}&pageSize=1"
-                resp = await client.get(url)
+                # The key travels in a header, never in the URL: httpx logs request
+                # URLs at INFO level and those logs end up in files.
+                url = "https://generativelanguage.googleapis.com/v1beta/models?pageSize=1"
+                resp = await client.get(url, headers={"x-goog-api-key": clean_key})
                 if resp.status_code == 200:
                     return True, "Google Gemini API key verified successfully."
                 err_msg = _extract_error_message(resp)
@@ -102,7 +104,7 @@ async def validate_api_key(
 
             elif clean_provider in ("ocr", "vision", "google_vision"):
                 # Test Google Cloud Vision OCR API
-                url = f"https://vision.googleapis.com/v1/images:annotate?key={clean_key}"
+                url = "https://vision.googleapis.com/v1/images:annotate"
                 payload = {
                     "requests": [
                         {
@@ -112,7 +114,9 @@ async def validate_api_key(
                     ]
                 }
                 resp = await client.post(
-                    url, json=payload, headers={"Content-Type": "application/json"}
+                    url,
+                    json=payload,
+                    headers={"Content-Type": "application/json", "x-goog-api-key": clean_key},
                 )
                 if resp.status_code == 200:
                     return True, "Google Cloud Vision OCR API key verified successfully."
diff --git a/artemis/utils/notes.py b/artemis/utils/notes.py
index 748e746..855b39a 100644
--- a/artemis/utils/notes.py
+++ b/artemis/utils/notes.py
@@ -376,17 +376,18 @@ def format_read_note_success(
     start_line: int | None = None,
     end_line: int | None = None,
 ) -> str:
-    """Formats the success message for reading a note."""
-    range_str = ""
+    """The read result: a one-line header naming the note and its extent, then the content."""
     if start_line is not None or end_line is not None:
-        range_str = f" (lines {start_line or 1} to {end_line or 'end'})"
-    return f"Successfully read note '{key}'{range_str}. '{key}' note content:\n{content}"
+        extent = f"lines {start_line or 1} to {end_line or 'end'}"
+    else:
+        extent = f"{len(content.splitlines())} lines"
+    return f"Note '{key}' ({extent}):\n{content}"
 
 
 def format_read_note_failure(key: str, error: str) -> str:
     """Formats the failure message for reading a note."""
     if "not found" in error.lower():
-        return ToolFailure(f"Note '{key}' not found in scratchpad.")
+        return ToolFailure(f"Note '{key}' not found. Use list_notes to see the saved keys.")
     return ToolFailure(f"Failed to read note '{key}': {error}")
 
 
diff --git a/artemis/utils/plan_grammar.py b/artemis/utils/plan_grammar.py
index 6117d17..374eef7 100644
--- a/artemis/utils/plan_grammar.py
+++ b/artemis/utils/plan_grammar.py
@@ -314,18 +314,23 @@ def render_check_line(item: CheckItem, indent: int = 2) -> str:
     return f"{prefix}- {item.kind}{suffix}: {item.text}"
 
 
-def restore_missing_check_items(content_before: str, content_after: str) -> str | None:
+def restore_missing_check_items(
+    content_before: str,
+    content_after: str,
+    items: list[CheckItem] | None = None,
+) -> str | None:
     """Deterministic guard: merge check lines deleted/rewritten by a plan write
     back into the new content.
 
     Returns the merged plan text, or ``None`` when nothing is missing. Lines
     whose parent subgoal still exists are re-anchored directly under it; lines
     whose parent subgoal was removed are converted to task-level ``@end`` items
-    appended at the end of the plan.
+    appended at the end of the plan. ``items`` restricts the merge to the given
+    missing items (the caller may waive some of them).
     """
     before = parse_plan(content_before)
     after = parse_plan(content_after)
-    missing = missing_check_items(before, after)
+    missing = missing_check_items(before, after) if items is None else list(items)
     if not missing:
         return None
 
@@ -438,23 +443,68 @@ Every checklist line MUST match `<indent>- [<status>] <text>`:
 - `{CONTINUOUS_LOOP_TAG}` tags an UNBOUNDED continuous-monitoring milestone: it must stay `[{STATUS_ACTIVE}]` and can never be marked `[{STATUS_DONE}]`, deleted, or untagged by you — the system mechanically rejects such edits. Only an explicit external stop signal injected by the user unlocks its completion; that signal is an external interruption delivered by the system, never something inferred from the screen or the plan.
 - The task terminates only when every top-level milestone is `[{STATUS_DONE}]`."""
 
-_CHECK_GRAMMAR_EXTENSION = """### Check Line Grammar (declared verification standards)
-A top-level milestone may carry indented check lines, and the plan may end with task-level check lines at zero indentation:
-- `  - verify: <expected state>` — an acceptance criterion for its parent milestone. It is judged by an independent Checker at the moment the milestone is marked completed; a failed verify triggers a repair loop.
-- `  - assert: <expected observation>` — a test assertion. It is judged by the independent Checker and a failure is recorded verbatim as a legitimate test result; assertions are NEVER repaired, worked around, or satisfied by constructing state.
-- `- verify@end: ...` / `- assert@end: ...` — the `@end` suffix defers judgment to task exit, using the final device state. Items without `@end` are judged with the evidence available when their anchored milestone completes.
-- Capability boundary (declare honestly, never promise more): all checks are POST-HOC audits over recorded evidence. They detect and record violations after the fact; they CANNOT block an action from happening, so "B must not run before A is confirmed" ordering rules are verified retroactively, not enforced. Transient prompts that were never captured in the execution history cannot be recovered — prefer expressing expectations as persistently probeable state.
-- `  - finding: ...` — a SYSTEM-authored standing headline pinned under a milestone whose verify criterion failed. You never author these lines: the system re-renders them on every plan write (deleting one only makes it reappear) and removes them automatically once the verify passes again or its repair budget is exhausted. Each finding names a `checker-...` note holding the full details and repair log — read it with `read_note`; note keys with the `checker-` prefix are reserved for the system and are read-only for you."""
+_CHECK_GRAMMAR_HEADER = """### Check Line Grammar (declared verification standards)
+A top-level milestone may carry indented check lines, and the plan may end with task-level check lines at zero indentation:"""
+
+#: Judgment-moment wording of the check lines, keyed by the midway gate.
+_VERIFY_JUDGED_MIDWAY = (
+    "It is judged by an independent Checker at the moment the milestone is marked"
+    " completed; a failed verify reopens the milestone for repair."
+)
+_VERIFY_JUDGED_AT_EXIT = (
+    "It is judged once at task exit from the recorded evidence around the"
+    " milestone's completion; there is no midway repair loop."
+)
+_ASSERT_JUDGED_MIDWAY = (
+    "It is judged by the independent Checker when its milestone completes (at task exit for `@end`)"
+)
+_ASSERT_JUDGED_AT_EXIT = "It is judged once at task exit from the recorded evidence"
+
+_CHECK_GRAMMAR_COMMON = """- `- verify@end: ...` / `- assert@end: ...` — the `@end` suffix defers judgment to task exit, using the final device state. Items without `@end` are judged from the evidence recorded around their anchored milestone's completion.
+- Capability boundary (declare honestly, never promise more): all checks are POST-HOC audits over recorded evidence. They detect and record violations after the fact; they CANNOT block an action from happening, so "B must not run before A is confirmed" ordering rules are verified retroactively, not enforced. Transient prompts that were never captured in the execution history cannot be recovered — prefer expressing expectations as persistently probeable state."""
+
+_FINDING_GRAMMAR = """- `  - finding: ...` — a SYSTEM-authored standing headline pinned under a milestone whose verify criterion failed. You never author these lines: the system re-renders them on every plan write (deleting one only makes it reappear) and removes them automatically once the verify passes again or its repair budget is exhausted. Each finding names a `checker-...` note holding the full details and repair log — read it with `read_note`; note keys with the `checker-` prefix are reserved for the system and are read-only for you."""
 
 
-def render_plan_grammar_spec(include_checks: bool) -> str:
+def _render_check_grammar(*, midway: bool, final: bool) -> str:
+    """The check-line grammar worded for the active gates.
+
+    Midway on: verify lines are judged at milestone completion and can reopen
+    the milestone; finding lines exist. Midway off (final only): every line is
+    judged once at task exit, and no repair loop or finding line exists, so
+    neither is taught.
+    """
+    verify_when = _VERIFY_JUDGED_MIDWAY if midway else _VERIFY_JUDGED_AT_EXIT
+    assert_when = _ASSERT_JUDGED_MIDWAY if midway else _ASSERT_JUDGED_AT_EXIT
+    lines = [
+        _CHECK_GRAMMAR_HEADER,
+        "- `  - verify: <expected state>` — an acceptance criterion for its parent"
+        f" milestone. {verify_when}",
+        f"- `  - assert: <expected observation>` — a test assertion. {assert_when} and a"
+        " failure is recorded verbatim as a legitimate test result; assertions are"
+        " NEVER repaired, worked around, or satisfied by constructing state.",
+        _CHECK_GRAMMAR_COMMON,
+    ]
+    if midway:
+        lines.append(_FINDING_GRAMMAR)
+    return "\n".join(lines)
+
+
+def render_plan_grammar_spec(
+    include_checks: bool | None = None, *, midway: bool = False, final: bool = False
+) -> str:
     """Renders the grammar spec taught to agents.
 
-    ``include_checks=False`` (both check gates disabled) returns exactly the
-    base grammar — zero context pollution from the checking feature.
+    ``midway`` / ``final`` are the two check gates
+    (``ExecutionSetup.midway_checks_enabled`` / ``final_check_enabled``); the
+    check-line grammar is worded for whichever is active. Both off returns
+    exactly the base grammar — zero context pollution from the checking
+    feature. ``include_checks`` is a compatibility shim meaning "both gates".
     """
-    if include_checks:
-        return _PLAN_GRAMMAR_BASE + "\n\n" + _CHECK_GRAMMAR_EXTENSION
+    if include_checks is not None:
+        midway = final = bool(include_checks)
+    if midway or final:
+        return _PLAN_GRAMMAR_BASE + "\n\n" + _render_check_grammar(midway=midway, final=final)
     return _PLAN_GRAMMAR_BASE
 
 
diff --git a/artemis/utils/task_tree.py b/artemis/utils/task_tree.py
index 1ec1304..ee9d1f2 100644
--- a/artemis/utils/task_tree.py
+++ b/artemis/utils/task_tree.py
@@ -119,8 +119,6 @@ def format_action_clean(action_obj) -> str:
             direction = action_obj.get("intent")
         duration = action_obj.get("duration") or action_obj.get("duration_ms")
         duration_str = f" over {duration}ms" if duration else ""
-        if direction:
-            return f"Swiped {direction}{duration_str}"
 
         start_coords = action_obj.get("start_coordinates")
         end_coords = action_obj.get("end_coordinates")
@@ -129,6 +127,14 @@ def format_action_clean(action_obj) -> str:
             if isinstance(coords_list, list) and len(coords_list) == 4:
                 start_coords = coords_list[:2]
                 end_coords = coords_list[2:]
+        if not start_coords or not end_coords:
+            start_coords = action_obj.get("normalized_start_coordinates")
+            end_coords = action_obj.get("normalized_end_coordinates")
+        if direction:
+            # A directional swipe is what the agent issued; the recorded path
+            # (when any) is the detail, not the headline.
+            path = f" (from {start_coords} to {end_coords})" if start_coords and end_coords else ""
+            return f"Swiped {direction}{path}{duration_str}"
         dragged = _target_label(action_obj, fallback="")
         dragged_str = f" {dragged}" if dragged else ""
         return f"Swiped{dragged_str} from {start_coords} to {end_coords}{duration_str}"
@@ -176,8 +182,32 @@ def format_action_clean(action_obj) -> str:
             )
             return f"Tapped sequence of targets: {labelled}"
         return f"Tapped sequence of targets: {seq}"
+    elif act_type == "wait_for_text":
+        state = str(action_obj.get("wait_state") or "appear")
+        timeout = action_obj.get("timeout_ms")
+        timeout_str = f" (timeout {timeout}ms)" if timeout else ""
+        return f"Waited for text '{action_obj.get('text', '')}' to {state}{timeout_str}"
+    elif act_type == "open_link":
+        return f"Opened link '{action_obj.get('url', '')}'"
+    elif act_type == "erase_one_char":
+        return "Erased one character"
+    elif act_type == "focus_and_clear_text":
+        return f"Cleared text at {coords}"
     else:
-        return f"Action: {act_type} with args: {json.dumps(action_obj, ensure_ascii=False)}"
+        # Unknown action: show only the agent-facing arguments, never the
+        # bookkeeping keys the record carries for other consumers.
+        internal = {
+            "action",
+            "name",
+            "intent",
+            "coordinate_space",
+            "normalized_coordinates",
+            "normalized_start_coordinates",
+            "normalized_end_coordinates",
+        }
+        shown = {k: v for k, v in action_obj.items() if k not in internal and v is not None}
+        args_str = f" with args: {json.dumps(shown, ensure_ascii=False)}" if shown else ""
+        return f"Action: {act_type}{args_str}"
 
 
 def format_actions_clean(actions) -> str:
@@ -192,6 +222,48 @@ def format_actions_clean(actions) -> str:
     return format_action_clean(actions)
 
 
+#: Past-tense outcome prefix (``format_action_clean``) -> intent-form prefix.
+#: Longest prefixes first so "Double tapped" / "Tapped sequence" win over "Tapped".
+_INTENT_PREFIXES: tuple[tuple[str, str], ...] = (
+    ("Tapped sequence of targets: ", "tap sequence of targets: "),
+    ("Double tapped ", "double tap "),
+    ("Long pressed ", "long press "),
+    ("Tapped ", "tap "),
+    ("Inputted ", "type "),
+    ("Swiped ", "swipe "),
+    ("Pressed key ", "press key "),
+    ("Launched app ", "launch app "),
+    ("Stopped app ", "stop app "),
+    ("Managed app ", "manage app "),
+    ("Waited for text ", "wait for text "),
+    ("Waited for ", "wait "),
+    ("Opened link ", "open link "),
+    ("Erased one character", "erase one character"),
+    ("Cleared text ", "clear text "),
+)
+
+
+def action_intent_phrase(description: str) -> str:
+    """The intent form of a rendered action phrase: ``Tapped 'Wi-Fi row' at
+    [500, 520]`` -> ``tap 'Wi-Fi row' at [500, 520]``.
+
+    ``format_action_clean`` renders actions as past-tense outcomes, which
+    reads as success; a failure or incident context must describe what the
+    agent *tried* to do instead. Phrases without a known prefix (bursts,
+    unknown action types) are returned unchanged.
+    """
+    text = str(description or "")
+    for outcome, intent in _INTENT_PREFIXES:
+        if text.startswith(outcome):
+            return intent + text[len(outcome) :]
+    return text
+
+
+def format_action_intent(action_obj) -> str:
+    """Intent-form rendering of one action (``launch app 'X'``, ``swipe up``)."""
+    return action_intent_phrase(format_action_clean(action_obj))
+
+
 def _is_terminal_attempt_failure(attempts) -> bool:
     if not attempts:
         return False
@@ -216,11 +288,17 @@ def failed_execution_error(result_obj) -> str | None:
 
 
 def format_incident_clean(incident: dict) -> str:
-    """One-line rendering of an execution incident for history and result lines."""
+    """One-line rendering of an execution incident for history and result lines.
+
+    The action is quoted in intent form (``launch app 'X'``): it did not
+    happen, so the past-tense outcome phrase would misreport it as done.
+    """
     kind = incident.get("kind") or "exec_error"
     category = incident.get("category") or "general"
     consecutive = incident.get("consecutive_failures") or 1
-    description = incident.get("action_description") or format_action_clean(incident.get("action"))
+    description = action_intent_phrase(
+        incident.get("action_description") or format_action_clean(incident.get("action"))
+    )
     reason = str(incident.get("reason") or "").strip()
     burst_size = int(incident.get("burst_size") or 1)
     index = int(incident.get("action_index") or 0)
@@ -296,6 +374,21 @@ def safe_parse_validation_result(result: Any) -> list:
     return []
 
 
+#: Block labels of a detailed / replayed step. Role-neutral on purpose: the
+#: same renderer replays a Flash turn (no Operator) and a Pro Operator turn,
+#: and every Pro agent (Checker, Diagnoser, Outputter) reads them.
+REASONING_BLOCK_LABEL = "[Reasoning & tool calls]"
+ACTION_BLOCK_LABEL = "[Action]"
+BURST_BLOCK_LABEL = "[Fast-Action Burst]"
+
+#: Continuation lines of a "    - " bullet stay inside the bullet.
+_BULLET_CONTINUATION = "\n      "
+
+
+def _indent_continuation(text: str) -> str:
+    return text.replace("\n", _BULLET_CONTINUATION)
+
+
 #: Limit tool-result text in the live context, which is rebuilt every turn.
 LIVE_RESULT_CHARS = 120
 
@@ -544,9 +637,27 @@ def _burst_member_status(result: Any, index: int) -> str:
     return f" (FAILED: {last.strip()})"
 
 
+def replay_time_label(step: dict, session_start: Any) -> str:
+    """The step-header clock of a replay: the session-relative ``T+mm:ss``
+    offset every agent prompt and ``search_history`` use, or the legacy
+    ``Start: 12.3s`` text when no session start / step timestamp is known."""
+    ts = step.get("timestamp")
+    if (
+        isinstance(session_start, (int, float))
+        and not isinstance(session_start, bool)
+        and isinstance(ts, (int, float))
+        and not isinstance(ts, bool)
+    ):
+        from artemis.memory.chunking import step_offset_label
+
+        return step_offset_label(step, float(session_start))
+    return f"Start: {step.get('relative_time') or 'N/A'}"
+
+
 def render_step_replay(
     step: dict,
     *,
+    session_start: Any = None,
     result_chars: int = REPLAY_RESULT_CHARS,
     include_summary: bool = True,
 ) -> str:
@@ -556,6 +667,9 @@ def render_step_replay(
     / ``get_agent_friendly_steps``): coordinates already normalized, traces
     already expanded into ``interleaved_events``. Used by ``replay_steps`` and
     the MCP trace inspector. Screenshots are fetched separately.
+
+    ``session_start`` (the reader's ``session_start_time``) makes the header
+    carry the ``T+mm:ss`` session clock; see :func:`replay_time_label`.
     """
     return _render_step_detailed(
         step=step,
@@ -566,6 +680,7 @@ def render_step_replay(
         is_most_recent=False,
         result_chars=result_chars,
         include_summary=include_summary,
+        time_label=replay_time_label(step, session_start),
     )
 
 
@@ -597,15 +712,17 @@ def _render_step_detailed(
     *,
     result_chars: int = LIVE_RESULT_CHARS,
     include_summary: bool = False,
+    time_label: str | None = None,
 ) -> str:
-    # 1. Step Header
+    # 1. Step Header (``time_label`` overrides the live window's "Start: 12.3s")
     status_str = "Most Recent Step, " if is_most_recent else ""
+    clock = time_label or f"Start: {relative_time}"
 
     # In the live window the summary is omitted from the detailed view header
     # as it is already fully detailed below; replay callers opt in because the
     # summary is the Operator's own claim about the step, which an auditor
     # compares against the evidence that follows.
-    step_line = f"- **Step {step['step_number']} ({status_str}Start: {relative_time})**"
+    step_line = f"- **Step {step['step_number']} ({status_str}{clock})**"
     if include_summary:
         screen_line = _screen_description_line(step, summary)
         if screen_line:
@@ -695,9 +812,10 @@ def _render_step_detailed(
     if raw_thinking and raw_thinking.strip() and not thought_exists(raw_thinking):
         operator_events.append({"type": "thought", "content": raw_thinking.strip()})
 
-    # 4. Render Operator Loop
+    # 4. Render the acting model's reasoning and tool calls (role-neutral: the
+    #    same block replays a Flash turn and a Pro Operator turn)
     if operator_events:
-        step_line += "\n  * [Operator Decision Loop]:"
+        step_line += f"\n  * {REASONING_BLOCK_LABEL}:"
         ACTION_TOOLS = {
             "click",
             "swipe",
@@ -722,7 +840,7 @@ def _render_step_detailed(
                 )
                 cleaned = re.sub(r"</?thought>", "", cleaned, flags=re.DOTALL).strip()
                 if cleaned:
-                    step_line += f"\n    - {cleaned}"
+                    step_line += f"\n    - {_indent_continuation(cleaned)}"
             elif e_type == "tool_call":
                 if name in ACTION_TOOLS:
                     continue
@@ -735,17 +853,13 @@ def _render_step_detailed(
                 if formatted:
                     step_line += f"\n    - [Tool Call]: {formatted}"
 
-    # Check if the execution failed
-    exec_error = None
-    if isinstance(result, dict) and result.get("status") in ("failed", "error"):
-        exec_error = failed_execution_error(result)
-
-    # 5. Render Planned Action (single vetted action or fast-action burst)
+    # 5. Render the action the step executed (single vetted action or a burst).
+    #    A failed action's error is printed once, on the [Result] line below.
     if action:
         actions = action if isinstance(action, list) else [action]
         if len(actions) > 1:
             step_line += (
-                f"\n  * [Planned Fast-Action Burst]: {len(actions)} actions fired back to"
+                f"\n  * {BURST_BLOCK_LABEL}: {len(actions)} actions fired back to"
                 " back without the safety net"
             )
             for i, member in enumerate(actions):
@@ -756,15 +870,11 @@ def _render_step_detailed(
             action_clean = format_action_clean(actions[0])
             if intercepted:
                 step_line += (
-                    f"\n  * [Planned Action]: {action_clean}"
+                    f"\n  * {ACTION_BLOCK_LABEL}: {action_clean}"
                     " (Intercepted by Pre-Execution Safety Net)"
                 )
-            elif exec_error:
-                step_line += (
-                    f"\n  * [Planned Action]: {action_clean} -> (Execution failed: {exec_error})"
-                )
             else:
-                step_line += f"\n  * [Planned Action]: {action_clean}"
+                step_line += f"\n  * {ACTION_BLOCK_LABEL}: {action_clean}"
 
     # 6. Render Pre-Execution Safety Net
     if intercepted:
@@ -892,7 +1002,7 @@ def build_plan_and_history(
             # Ensure the last step is always in detailed_step_ids
             detailed_step_ids.add(full_info_step_id)
 
-        # M4: chunk blocks replace the per-step lines of already-chunked
+        # Chunk blocks replace the per-step lines of already-chunked
         # ranges. Chunks only ever cover frozen (old) turns, so they are
         # emitted first, in chronological order; steps that must render
         # detailed (recent window / most-recent step) are never suppressed.
diff --git a/config/artemis.jsonc b/config/artemis.jsonc
index c1467b8..517d738 100644
--- a/config/artemis.jsonc
+++ b/config/artemis.jsonc
@@ -192,7 +192,7 @@
     // ==========================================================================
     // 🌐 4.3 Shared Capabilities & Global Overrides
     // ==========================================================================
-    // 🧠 Unified Step-Memory Runtime (history-module redesign v3, M0–M5)
+    // Shared step memory and history compression
     // Transcript ledger + layered compression for the Pro operator.
     "memory": {
       // Background summarization runtime (visual/capsule lenses)
@@ -204,15 +204,33 @@
       "transcript": {
         // ROLLBACK SWITCH: set false to restore the legacy per-turn 2-message
         // prompt path byte-for-byte (L2/L3 chunk compression rides this same
-        // flag). Default on since M5 (2026-09-01) per the on-device A/B:
-        // turn latency −77% P50, cache-hit calls 43%→88%, output tokens −74%.
+        // flag). See services/token_meter.py for measured session token usage
+        // and cache-hit ratios.
         "enabled": true,
         "context_budget_tokens": 80000,
+        // Below start_ratio of the operator's own measured prompt size, closed
+        // segments only prepare their summary; the original turns are kept in
+        // context and replaced once occupancy reaches this ratio. Measurements
+        // come from the operator; other agents' calls do not affect this gate.
+        "start_ratio": 0.35,
         "soft_ratio": 0.7,
         "hard_ratio": 0.9,
         "min_active_steps": 5,
+        // Screenshot edge: 6 while the operator's measured context is below
+        // start_ratio (nothing is being replaced yet), 3 from there up. A
+        // screenshot reaching the edge is replaced in place by its visual
+        // summary (the 'Current Screenshot' label leaves with it) and never
+        // restored; the depth only decides how long new ones stay.
         "image_scrub_depth": 3,
+        "image_scrub_depth_relaxed": 6,
         "pending_grace_steps": 3,
+        // Text edge: once a newer observation exists (depth 1) the UI element
+        // list, the plan recitation and the per-turn ephemeral blocks
+        // (reminders, hints, guidance wrappers) leave the older observation.
+        // User instruction bodies remain in history. The text edge stays
+        // shallow on purpose: only the live observation carries an indexed
+        // element list, so a stale [n] index can never be picked up as a
+        // target.
         "xml_scrub_depth": 1,
         // Local historical-state hint (no model call); distance calibrated
         // 2026-09-01 from 460 dHash-stamped on-device steps (same screen <=4,
@@ -223,6 +241,10 @@
       // Segment (L2) chunk compression: three-band chunks, era folding
       "chunking": {
         "max_steps": 12,
+        // Size/pressure closes wait until at least this many turns are
+        // eligible, so heavy turns do not become one-step chunks (one capsule
+        // call each); milestone closes are exempt, the hard line waives it.
+        "min_steps": 3,
         "target_source_tokens": 2000,
         "model": "gemini-3.8-flash",
         "max_chunks": 8
diff --git a/mcp_server/README.md b/mcp_server/README.md
index 825f3db..6855f13 100644
--- a/mcp_server/README.md
+++ b/mcp_server/README.md
@@ -1,6 +1,6 @@
 # 🔌 Universal MCP Server for ARTEMIS
 
-This directory contains the universal **Model Context Protocol (MCP)** server for **ARTEMIS**, enabling seamless mobile device automation inside AI IDEs and agents like **Antigravity**, **Cursor**, **Claude Code**, **OpenClaw**, and **Windsurf**.
+This directory contains the **Model Context Protocol (MCP)** server for **ARTEMIS**. It exposes mobile device automation to clients such as **Antigravity**, **Cursor**, **Claude Code**, **OpenClaw**, and **Windsurf**.
 
 ## 🏗️ Architecture
 
@@ -24,7 +24,8 @@ mcp_server/
 │   ├── task_runner.py    # mobile_run_task
 │   ├── task_manager.py   # mobile_manage_task
 │   ├── device_state.py   # mobile_get_device_state
-│   └── inspect_trace.py  # mobile_inspect_trace
+│   ├── inspect_trace.py  # mobile_inspect_trace
+│   └── diagnose.py       # mobile_diagnose
 └── utils/                # Environment and device utilities
     ├── device_utils.py   # Cross-platform ADB and emulator resolver
     └── env_utils.py      # Python interpreter and process manager
@@ -56,6 +57,7 @@ The included [`rules.md`](./rules.md) file contains the **Mobile Testing Mindset
 2. **Flash vs. Pro Routing Strategy**: Guides the AI to choose **Flash** for rapid, straightforward UI actions (no step cap by default) and **Pro** for tasks that need a persistent plan, verified checkpoints, polling loops, or ADB / video / log diagnosis.
 3. **Latency & Timing Compensation**: Clarifies the difference between AI exploratory latency (e.g., model decision intervals) and the deterministic timing requirements of final test code.
 4. **"Dynamic-First, Coordinate-Fallback" Locator Pattern**: Teaches the AI to prioritize dynamic UI locators (Resource IDs, OCR text, semantics) for layout resilience, while implementing absolute coordinate fallbacks for maximum execution reliability.
+5. **Environment Self-Diagnosis**: Tells the AI to call `mobile_diagnose` first whenever a tool errors or the user says ARTEMIS is not working, and how to act on the returned fix list (run local commands itself, relay device prompts to the user, never move API keys through the chat, reload the MCP server after config changes).
 
 ### How Global Rules & MCP are Installed
 When you run `uv run artemis mcp --install all` (or target a specific IDE like `--install cursor`, `--install claude`, etc.), the installer **automatically synchronizes both global MCP server configuration and global testing rules** into the corresponding user home directories (without creating project-level rule files in your workspace):
@@ -75,6 +77,7 @@ When you run `uv run artemis mcp --install all` (or target a specific IDE like `
 * **`mobile_manage_task`**: Manages task lifecycle (`status`, `stop`, `inject_instruction`), returning task state and assigned `device_serial`. Pass `release_loop=True` with `inject_instruction` to gracefully end a `[Loop:continuous]` monitoring task — this explicit signal (not "please stop" wording) is what unlocks the loop milestone's completion.
 * **`mobile_get_device_state`**: Real-time observer (`screenshot` or OCR+XML `hierarchy`) with optional `device_serial`.
 * **`mobile_inspect_trace`**: Granular trace inspection, visual action overlays, agent reasoning, and `device_serial` tracking.
+* **`mobile_diagnose`**: Environment doctor for the IDE. Reuses the readiness probes behind `artemis doctor` and the web console's device wizard (Python runtime, config, LLM credentials, ADB / devices / RSA keys / emulators, video toolchain) plus an MCP-host probe (server interpreter vs project `.venv`, detected MCP client, `.env` location, traces directory, daemon port collisions). Returns a `verdict` (`ready` | `degraded` | `blocked`), an ordered `next_steps` fix list the AI agent can act on (`Run:` one-command lines vs `Guidance:` for the user), scrubbed per-check details, `tasks` holding or waiting for devices, log paths, and the most recent failed task with its `recent_errors`. Optional deep checks: `verify_credentials=true` (live API-key validation, ~12s, result in `credentials`), `probe_device=true` (end-to-end screenshot + UIAutomator hierarchy, ~20s, result in `device_probe`), `launch_avd="<name>"` (boots an installed AVD in the background; re-run after ~60s). `attempt_fix=true` applies the safe self-heals (regenerate corrupted ADB keys, restart the ADB server, clear stale device locks / queue tickets left by crashed runners).
 
 ### 📱 Device Selection & Multi-Device Execution
 ARTEMIS supports parallel execution across multiple connected Android devices and emulators:
diff --git a/mcp_server/base.py b/mcp_server/base.py
index b5243d0..051f517 100644
--- a/mcp_server/base.py
+++ b/mcp_server/base.py
@@ -37,7 +37,9 @@ mcp = FastMCP(
         "Use mobile_run_task to launch autonomous UI workflows on connected Android devices or emulators, "
         "mobile_manage_task to check status or steer execution, "
         "mobile_get_device_state to inspect real-time device screen/hierarchy, "
-        "and mobile_inspect_trace to inspect detailed execution steps and visual action overlays."
+        "mobile_inspect_trace to inspect detailed execution steps and visual action overlays, "
+        "and mobile_diagnose whenever a tool errors, no device is found, or the user says "
+        "ARTEMIS is not working: it checks the environment and returns ordered fix steps."
     ),
 )
 
diff --git a/mcp_server/rules.md b/mcp_server/rules.md
index eca50d6..f774fe7 100644
--- a/mcp_server/rules.md
+++ b/mcp_server/rules.md
@@ -1,9 +1,9 @@
 # Mobile Testing Mindset (ARTEMIS Integration)
 
-As a senior test engineer, you must ensure that all test code you write is **fully executable, stable, and exceptionally robust**. You must never guess or assume how an interaction behaves on a mobile device, no matter how simple the task may seem. Instead, you must leverage **ARTEMIS**, a powerful mobile UI automation framework, to discover and verify the exact execution flow, and author your test scripts based strictly on these concrete, verified steps. Furthermore, if you need to investigate or research specific software or hardware behaviors, you should utilize ARTEMIS to perform active explorations on the device, whether by mimicking human interactions or executing precise ADB commands.
+Write executable tests based on device behavior verified with **ARTEMIS**. Before authoring a test, explore the target application and confirm its screens, transitions, and interactions. Use ARTEMIS device actions or ADB commands to investigate software and hardware behavior instead of assuming how an interaction works.
 
 ### 1. The Runnable Code Principle & ARTEMIS Exploration
-- **When tasked with authoring tests**, your primary goal is to deliver **runnable, production-grade test code**.
+- **When tasked with authoring tests**, deliver runnable test code with verified interactions and explicit wait conditions.
 - Before writing any test code, you must use the ARTEMIS MCP tools to interactively run and explore the target application. This allows you to discover the exact sequence of UI states, transitions, and required interactions.
 - Analyze the user's target testing framework to exploit its native capabilities and maximize test stability.
 - **Timing & Latency Management (Exploration vs. Execution)**:
@@ -54,3 +54,15 @@ Deeply understand and select between ARTEMIS's dual execution models (**ARTEMIS
     2. **Catch**: If the dynamic attempt fails, fall back to the precise absolute coordinates verified during your ARTEMIS exploration.
   - **Coordinate-Only Frameworks**: If the framework only supports coordinates, ensure the coordinates are well-documented, and where possible, parameterized or made relative to screen boundaries to mitigate resolution differences.
   - **Dynamic-Only Frameworks**: If the framework does not support coordinate-based clicks, focus entirely on generating highly robust dynamic locators, leveraging ARTEMIS's element descriptions and XML tree analysis.
+
+### 5. Environment Self-Diagnosis (`mobile_diagnose`)
+- **Diagnose before guessing**: Whenever an ARTEMIS tool returns an error, a task fails to start or is rejected, no device is found, or the user reports that ARTEMIS "doesn't work" in the IDE, call `mobile_diagnose` first. Do not troubleshoot by re-running `mobile_run_task` on trial and error, and do not ask the user to run `adb` commands by hand before you have the report.
+- **If `mobile_diagnose` is not in your tool list at all**, the MCP server itself failed to start: check the IDE's MCP server log and run `uv run artemis doctor` in the project directory (the CLI shares the same checks).
+- **Follow `next_steps` in order**: The report lists fixes in dependency order (Python runtime → config → MCP host → LLM credentials → device → optional video toolchain). `Run:` lines are single, local, non-destructive shell commands (one command per line, no `&&`) you may execute yourself (ask before installing software with winget / brew / apt). `Guidance:` lines describe something only the user can do (unlock the phone, tap "Allow" on the USB-debugging prompt, plug in a cable, free a port, tell you which IDE they use) — relay them verbatim. `Docs:` lines are references.
+- **Let ARTEMIS self-heal first**: Call `mobile_diagnose(attempt_fix=true)` before asking for manual ADB intervention; it regenerates corrupted ADB RSA keys, restarts the ADB server when that is safe (no device ready, no task holding a device), and removes stale device locks / queue tickets left behind by crashed runners.
+- **Deeper checks on demand**: `verify_credentials=true` validates the configured API keys live (~12s; use when a key exists but tasks fail with auth / quota errors; result in `credentials`). `probe_device=true` runs a true end-to-end check — screenshot plus UI hierarchy through UIAutomator (~20s; use when the device shows connected but observation or tasks fail; result in `device_probe`).
+- **Emulators**: `launch_avd="<name>"` starts an installed Android Virtual Device in the background via ARTEMIS's emulator manager and returns immediately; boot takes 1-3 minutes, so re-run `mobile_diagnose` after ~60s. Never run `emulator -avd` in the shell yourself — it is a foreground process and hangs the shell.
+- **Busy devices**: `tasks: {active, queued}` lists tasks currently holding or waiting for devices. A busy device means wait, or stop the task with `mobile_manage_task(action="stop", trace_id=...)`.
+- **Credentials never go through the chat**: If the LLM key is missing, ask the user to add it to the `.env` file at the path the report shows (`host.env_file`) or to the MCP server's `env` block, then to restart the MCP server. `artemis init` is interactive and cannot be driven from a tool call.
+- **Restart after configuration changes**: Settings are read when the server starts. After editing `.env`, `config/artemis.jsonc`, or the MCP client configuration, reload the MCP server in the IDE before calling `mobile_diagnose` again; otherwise it reports the old state.
+- **Failed tasks**: `logs.last_failed_task` gives the trace id, its `stderr_log`, and `recent_errors` (the error lines from that stderr, so you need not open the file); read them before re-running the task. Repeat `mobile_diagnose` until `verdict` is `ready` or `degraded` before delegating tasks again (`degraded` means tasks can run but something optional is off: video tools, the OCR key, a secondary credential, or a host warning such as an interpreter mismatch or a squatted daemon port; relay its `[OPTIONAL]` steps to the user, do not loop on them).
diff --git a/mcp_server/tools/__init__.py b/mcp_server/tools/__init__.py
index e77053c..3cb2825 100644
--- a/mcp_server/tools/__init__.py
+++ b/mcp_server/tools/__init__.py
@@ -15,6 +15,7 @@
 """MCP Tools package for ARTEMIS."""
 
 from mcp_server.tools.device_state import mobile_get_device_state
+from mcp_server.tools.diagnose import mobile_diagnose
 from mcp_server.tools.inspect_trace import mobile_inspect_trace
 from mcp_server.tools.task_manager import mobile_manage_task
 from mcp_server.tools.task_runner import mobile_run_task
@@ -24,4 +25,5 @@ __all__ = [
     "mobile_manage_task",
     "mobile_get_device_state",
     "mobile_inspect_trace",
+    "mobile_diagnose",
 ]
diff --git a/mcp_server/tools/diagnose.py b/mcp_server/tools/diagnose.py
new file mode 100644
index 0000000..9f443df
--- /dev/null
+++ b/mcp_server/tools/diagnose.py
@@ -0,0 +1,1060 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""MCP Tool: mobile_diagnose.
+
+Runs the same readiness probes as the web console's device wizard and the
+``artemis doctor`` CLI, adds the MCP-host probe, and renders the outcome as an
+action list an AI coding assistant can execute without reading Artemis source.
+On request it also boots an installed emulator in the background, verifies the
+configured API keys against the providers, and drives the attached device end
+to end (screenshot + UI hierarchy) to prove a task could actually start.
+"""
+
+from __future__ import annotations
+
+import asyncio
+import os
+from pathlib import Path
+import re
+from typing import Any
+
+from mcp_server.base import mcp
+from mcp_server.utils import env_utils
+from artemis.core.diagnostics import readiness_engine
+from artemis.core.diagnostics.device_smoke import smoke_test_device
+from artemis.core.diagnostics.readiness import (
+    adb_keys_corrupted,
+    base_verdict,
+    collect_readiness,
+    sort_by_fix_order,
+)
+from artemis.core.diagnostics.schema import ProbeResult, ProbeStatus, SystemReadinessReport
+from artemis.runtime import DeviceExecutionLock, trace_store
+from artemis.utils.credentials_validator import validate_api_key
+from artemis.utils.logger import get_logger
+
+logger = get_logger(__name__)
+
+#: Upper bound for one diagnosis phase. The ADB probe shells out without its
+#: own deadline, so a wedged ADB server must surface as a verdict, not a hung
+#: tool. The optional extras (credential verification, device smoke test) run
+#: concurrently under a second budget of the same size.
+DIAGNOSIS_TIMEOUT_SECONDS = 40.0
+
+#: Per-provider budget for a live API key verification request.
+CREDENTIAL_CHECK_TIMEOUT_SECONDS = 12.0
+
+#: Providers the credentials probe lists by their *endpoint URL* rather than a
+#: key (``OPENAI_BASE_URL`` / ``OLLAMA_BASE_URL`` / ``VLLM_BASE_URL``). Their
+#: "raw_key" is that URL: verification must call the endpoint, not treat the
+#: URL as an API key.
+_ENDPOINT_PROVIDERS = frozenset({"custom", "ollama", "vllm"})
+
+#: Metadata keys that carry credential material. The console UI needs them to
+#: prefill its settings form; an MCP caller is an LLM context and must never
+#: see them.
+_SECRET_METADATA_KEYS = frozenset(
+    {"raw_key", "key", "api_keys", "current_key", "current_gemini_key"}
+)
+
+_ERROR_MARKERS = ("traceback", "error", "exception", "failed", "critical")
+
+#: rich/typer write colour escapes into the tee'd stderr log; the model must not see them.
+_ANSI_RE = re.compile(r"\x1b\[[0-9;?]*[A-Za-z]")
+
+#: Emulator lifecycle stages during which a second launch must not be issued.
+_LAUNCH_IN_PROGRESS = frozenset({"starting", "waiting_for_adb", "booting"})
+
+#: ``emulator -avd X`` / ``<sdk>/emulator/emulator.exe -avd X``: a foreground
+#: process that never returns; it must not be handed to the assistant as a
+#: shell command.
+_EMULATOR_LAUNCH_RE = re.compile(r"emulator(?:\.exe)?\s+-avd\s+(\S+)", re.IGNORECASE)
+
+
+# --------------------------------------------------------------------------- #
+# Rendering helpers
+# --------------------------------------------------------------------------- #
+
+
+def _scrub(value: Any) -> Any:
+    """Drop secrets and bulky inventories from probe metadata before it reaches the model."""
+    if isinstance(value, dict):
+        cleaned: dict[str, Any] = {}
+        for key, item in value.items():
+            if key in _SECRET_METADATA_KEYS:
+                continue
+            if key == "installed_packages" and isinstance(item, list):
+                cleaned["installed_package_count"] = len(item)
+                continue
+            cleaned[key] = _scrub(item)
+        return cleaned
+    if isinstance(value, list):
+        return [_scrub(item) for item in value]
+    return value
+
+
+def _find(results: list[ProbeResult], probe_id: str) -> ProbeResult | None:
+    return next((r for r in results if r.id == probe_id), None)
+
+
+def _render_check(result: ProbeResult) -> dict[str, Any]:
+    """Passing checks are one line each; only problems carry detail, fixes and facts."""
+    check: dict[str, Any] = {
+        "id": result.id,
+        "title": result.title,
+        "status": result.status.value,
+        "required": result.is_blocker,
+        "summary": result.summary,
+    }
+    if result.status is ProbeStatus.PASS:
+        return check
+    check["category"] = result.category.value
+    check["detail"] = result.description
+    check["fix"] = [
+        {"type": action.action_type, "label": action.label, "payload": action.payload}
+        for action in result.actions
+    ]
+    check["facts"] = _scrub(result.metadata)
+    return check
+
+
+def _compact_host(metadata: dict[str, Any]) -> dict[str, Any]:
+    daemon = metadata.get("daemon") or {}
+    host: dict[str, Any] = {
+        key: metadata.get(key)
+        for key in (
+            "server_python",
+            "runner_python",
+            "interpreter_matches_venv",
+            "env_file",
+            "env_file_exists",
+            "traces_dir",
+        )
+    }
+    if "mcp_client" in metadata:
+        host["mcp_client"] = _scrub(metadata["mcp_client"])
+    host["daemon"] = {
+        key: daemon.get(key)
+        for key in ("port", "reachable", "port_held_by_other_process", "log_path")
+    }
+    return host
+
+
+def _compact_device(report: SystemReadinessReport) -> dict[str, Any] | None:
+    device = report.active_device
+    if device is None:
+        return None
+    return {
+        "serial": device.serial,
+        "state": device.state,
+        "model": device.model,
+        "android_version": device.android_version,
+        "is_locked": device.is_locked,
+        "is_emulator": device.is_emulator,
+    }
+
+
+def _compact_emulator(raw: dict[str, Any]) -> dict[str, Any]:
+    status = raw.get("status")
+    return {
+        "avd_name": raw.get("avd_name"),
+        "status": getattr(status, "value", status),
+        "stage_message": raw.get("stage_message"),
+        "error": raw.get("error"),
+        "serial": raw.get("serial"),
+        "elapsed_seconds": raw.get("elapsed_seconds"),
+        "progress_percent": raw.get("progress_percent"),
+    }
+
+
+def _launch_in_progress(emulator: dict[str, Any] | None) -> bool:
+    return emulator is not None and emulator.get("status") in _LAUNCH_IN_PROGRESS
+
+
+def _launch_guidance(avd: str) -> str:
+    return f'  Guidance: Call mobile_diagnose(launch_avd="{avd}") to start it in the background.'
+
+
+def _render_action_lines(action: Any, *, installed_avds: list[str]) -> list[str]:
+    """Turn one ProbeAction into next_steps lines the assistant can act on verbatim.
+
+    Commands chained with ``&&`` become consecutive ``Run:`` lines (PowerShell
+    5.1 cannot parse ``&&``); ``emulator -avd`` never becomes a ``Run:`` line
+    because it would block the assistant's shell forever.
+    """
+    payload = action.payload.strip()
+    if action.action_type == "link":
+        return [f"  Docs: {payload}"]
+    if action.action_type != "command":
+        return [f"  Guidance: {payload}"]
+
+    lines: list[str] = []
+    for part in payload.split("&&"):
+        command = part.strip()
+        if not command or command == "artemis init":
+            continue  # interactive; covered by the credential / config guidance
+        match = _EMULATOR_LAUNCH_RE.search(command)
+        if match is None:
+            lines.append(f"  Run: {command}")
+            continue
+        avd = match.group(1)
+        if avd in installed_avds:
+            lines.append(_launch_guidance(avd))
+        else:
+            lines.append(
+                f"  Guidance: No AVD named '{avd}' is installed. Create one in Android Studio's "
+                "Device Manager (or ask the user to connect a phone), then call "
+                'mobile_diagnose(launch_avd="<name>").'
+            )
+    return lines
+
+
+def _credential_steps(env_file: str | None) -> list[str]:
+    location = env_file or "the project's .env file"
+    return [
+        "  Ask the user to add a provider key (for example GEMINI_API_KEY=...) to "
+        f"{location}, or to the MCP server's env block in the IDE's MCP config. "
+        "Never ask them to paste the key into the chat.",
+        "  `artemis init` is interactive and cannot run from a tool call; edit the env file instead.",
+        "  Keys are read when the server starts: restart the MCP server (reload MCP servers in "
+        "the IDE) after adding one.",
+    ]
+
+
+# --------------------------------------------------------------------------- #
+# Device lock / task state
+# --------------------------------------------------------------------------- #
+
+
+def _normalize_serial(value: Any) -> str:
+    return re.sub(r"[^a-zA-Z0-9_-]", "_", str(value or "").strip())
+
+
+def _task_state() -> dict[str, list[dict[str, Any]]]:
+    """Compact view of who holds or waits for a device, from the cross-process lock files."""
+    active: list[dict[str, Any]] = []
+    queued: list[dict[str, Any]] = []
+    try:
+        seen: set[Any] = set()
+        for owner in DeviceExecutionLock.get_active_owners().values():
+            token = getattr(owner, "token", id(owner))
+            if token in seen:
+                continue
+            seen.add(token)
+            active.append(
+                {
+                    "device": getattr(owner, "device_id", None),
+                    "session_id": getattr(owner, "session_id", None),
+                    "pid": getattr(owner, "pid", None),
+                    "description": getattr(owner, "description", None),
+                    "ingress": getattr(owner, "ingress", None),
+                    "started_at": getattr(owner, "acquired_at", None),
+                }
+            )
+    except Exception as exc:
+        logger.debug(f"Could not read active device locks: {exc}")
+    try:
+        for ticket in DeviceExecutionLock.get_queued_tasks():
+            queued.append(
+                {
+                    "device": ticket.get("device_id"),
+                    "session_id": ticket.get("session_id"),
+                    "pid": ticket.get("pid"),
+                    "description": ticket.get("goal"),
+                    "ingress": ticket.get("ingress"),
+                    "created_at": ticket.get("created_at"),
+                }
+            )
+    except Exception as exc:
+        logger.debug(f"Could not read queued device tasks: {exc}")
+    return {"active": active, "queued": queued}
+
+
+def _busy_step(tasks: dict[str, list[dict[str, Any]]], serial: str | None) -> str | None:
+    if not serial:
+        return None
+    wanted = _normalize_serial(serial)
+    for entry in tasks.get("active", []):
+        if _normalize_serial(entry.get("device")) != wanted:
+            continue
+        task_id = entry.get("session_id") or "unknown"
+        description = entry.get("description") or "no description"
+        return (
+            f"Device '{serial}' is busy with task {task_id} (pid {entry.get('pid')}): "
+            f"{description}. Wait for it to finish, or stop it with "
+            f'mobile_manage_task(action="stop", trace_id="{task_id}"). A new task on this '
+            "device queues behind it."
+        )
+    return None
+
+
+# --------------------------------------------------------------------------- #
+# Emulator launch
+# --------------------------------------------------------------------------- #
+
+
+def _emulator_status() -> dict[str, Any] | None:
+    """Current background launch state, or None when nothing was ever launched."""
+    try:
+        state = _compact_emulator(readiness_engine.get_emulator_status())
+    except Exception:
+        return None
+    if state.get("status") in (None, "idle"):
+        return None
+    return state
+
+
+async def _handle_launch_avd(
+    name: str, adb_result: ProbeResult | None
+) -> tuple[dict[str, Any] | None, list[str]]:
+    """Validate the AVD name and start it once; returns (emulator state, next_steps lines)."""
+    installed = list((adb_result.metadata.get("installed_avds") if adb_result else None) or [])
+    current = _emulator_status()
+
+    if name not in installed:
+        listing = ", ".join(installed) or "none"
+        advice = (
+            "Pass one of them as launch_avd."
+            if installed
+            else "Create one in Android Studio's Device Manager or ask the user to connect a phone."
+        )
+        return current, [
+            f"[REQUIRED] AVD '{name}' is not installed, so nothing was launched. Installed AVDs: "
+            f"{listing}. {advice}"
+        ]
+
+    if _launch_in_progress(current):
+        assert current is not None
+        return current, [
+            f"Emulator '{current.get('avd_name')}' is already {current.get('status')} "
+            f"({current.get('stage_message')}; {current.get('elapsed_seconds') or 0}s elapsed); "
+            "a second launch was not started. Call mobile_diagnose again in about 60 seconds "
+            "without launch_avd."
+        ]
+
+    try:
+        state = _compact_emulator(await readiness_engine.launch_emulator(name))
+    except Exception as exc:
+        return current, [
+            f"[REQUIRED] Launching AVD '{name}' raised {exc.__class__.__name__}: {exc}"
+        ]
+    if state.get("status") == "failed":
+        return state, [
+            f"[REQUIRED] Emulator '{name}' failed to launch: "
+            f"{state.get('error') or state.get('stage_message')}."
+        ]
+    return state, [
+        f"Emulator '{name}' is starting in the background ({state.get('stage_message')}). Boot "
+        "takes 1-3 minutes: call mobile_diagnose again in about 60 seconds, and do not pass "
+        "launch_avd again while the emulator status is starting, waiting_for_adb or booting."
+    ]
+
+
+# --------------------------------------------------------------------------- #
+# Credential verification
+# --------------------------------------------------------------------------- #
+
+
+async def _verify_credentials(cred_result: ProbeResult | None) -> list[dict[str, Any]]:
+    """Check every configured key against its provider; the keys never leave this function."""
+    if cred_result is None:
+        return []
+    metadata = cred_result.metadata
+    api_keys = metadata.get("api_keys") or {}
+    targets: list[tuple[str, str, str]] = []
+    for entry in metadata.get("providers") or []:
+        provider = str(entry.get("provider") or "").strip()
+        raw_key = entry.get("raw_key") or api_keys.get(provider) or ""
+        if not provider or not raw_key:
+            continue
+        targets.append((provider, str(entry.get("label") or provider), str(raw_key)))
+    if api_keys.get("ocr"):
+        targets.append(("ocr", "Vision OCR", str(api_keys["ocr"])))
+    if not targets:
+        return []
+
+    outcomes = await asyncio.gather(
+        *(
+            validate_api_key(
+                provider,
+                "EMPTY",
+                base_url=key,
+                timeout=CREDENTIAL_CHECK_TIMEOUT_SECONDS,
+            )
+            if provider in _ENDPOINT_PROVIDERS
+            else validate_api_key(provider, key, timeout=CREDENTIAL_CHECK_TIMEOUT_SECONDS)
+            for provider, _label, key in targets
+        ),
+        return_exceptions=True,
+    )
+    verified: list[dict[str, Any]] = []
+    for (provider, label, key), outcome in zip(targets, outcomes):
+        if isinstance(outcome, BaseException):
+            valid, message = False, f"verification raised {outcome.__class__.__name__}: {outcome}"
+        else:
+            valid, message = bool(outcome[0]), str(outcome[1])
+        verified.append(
+            {
+                "provider": provider,
+                "label": label,
+                "valid": valid,
+                "message": message.replace(key, "***"),
+            }
+        )
+    return verified
+
+
+def _primary_credential(credentials: list[dict[str, Any]] | None) -> dict[str, Any] | None:
+    """The provider the task runner will use: first configured LLM provider (OCR is auxiliary)."""
+    for entry in credentials or []:
+        if entry.get("provider") != "ocr":
+            return entry
+    return None
+
+
+def _credential_verification_steps(
+    credentials: list[dict[str, Any]] | None, env_file: str | None
+) -> tuple[list[str], bool]:
+    """Lines for failed verifications; second item says whether a restart is needed."""
+    if not credentials:
+        return [], False
+    steps: list[str] = []
+    primary = _primary_credential(credentials)
+    needs_restart = False
+    for entry in credentials:
+        if entry.get("valid"):
+            continue
+        tag = "REQUIRED" if entry is primary else "OPTIONAL"
+        steps.append(
+            f"[{tag}] {entry.get('label')} API key ({entry.get('provider')}) failed live "
+            f"verification: {entry.get('message')}"
+        )
+        if entry is primary:
+            steps.extend(_credential_steps(env_file))
+            needs_restart = True
+    return steps, needs_restart
+
+
+# --------------------------------------------------------------------------- #
+# Device smoke test
+# --------------------------------------------------------------------------- #
+
+
+def _probe_unavailable(serial: str | None, error: str) -> dict[str, Any]:
+    return {
+        "ok": False,
+        "serial": serial,
+        "elapsed_seconds": 0.0,
+        "screenshot_bytes": None,
+        "element_count": None,
+        "error": error,
+        "fix": [],
+    }
+
+
+async def _device_smoke_test(device_serial: str | None) -> dict[str, Any]:
+    """Drive the device end to end (screenshot + UI hierarchy) through the shared smoke test."""
+    return await smoke_test_device(device_serial)
+
+
+async def _run_device_probe(
+    adb_result: ProbeResult | None, requested_device: str | None
+) -> dict[str, Any]:
+    devices = (adb_result.metadata.get("devices") if adb_result else None) or []
+    ready = [str(d.get("serial")) for d in devices if d.get("state") == "device"]
+    if requested_device and requested_device not in ready:
+        return _probe_unavailable(
+            requested_device,
+            f"requested device '{requested_device}' is not attached and authorized; nothing to probe",
+        )
+    if not ready:
+        return _probe_unavailable(None, "no authorized device is attached; nothing to probe")
+    serial = requested_device or (ready[0] if len(ready) == 1 else None)
+    try:
+        return await _device_smoke_test(serial)
+    except Exception as exc:
+        return _probe_unavailable(
+            serial, f"device smoke test raised {exc.__class__.__name__}: {exc}"
+        )
+
+
+def _device_probe_steps(device_probe: dict[str, Any] | None) -> list[str]:
+    if device_probe is None or device_probe.get("ok"):
+        return []
+    serial = device_probe.get("serial") or "the attached device"
+    steps = [f"[REQUIRED] Device probe failed on {serial}: {device_probe.get('error')}"]
+    steps.extend(f"  Guidance: {fix}" for fix in device_probe.get("fix") or [])
+    return steps
+
+
+# --------------------------------------------------------------------------- #
+# next_steps
+# --------------------------------------------------------------------------- #
+
+
+def _device_steps(
+    adb_result: ProbeResult | None,
+    *,
+    attempt_fix: bool,
+    requested_device: str | None,
+    emulator: dict[str, Any] | None,
+    launch_requested: bool,
+    tasks: dict[str, list[dict[str, Any]]],
+) -> list[str]:
+    steps: list[str] = []
+    if adb_result is None or not adb_result.metadata.get("installed"):
+        return steps
+    devices = adb_result.metadata.get("devices") or []
+    ready = [d for d in devices if d.get("state") == "device"]
+    keys = adb_result.metadata.get("adb_keys") or {}
+    installed_avds = [str(a) for a in adb_result.metadata.get("installed_avds") or []]
+    in_progress = _launch_in_progress(emulator)
+
+    if requested_device and requested_device not in {d.get("serial") for d in devices}:
+        steps.append(
+            f"[REQUIRED] Requested device '{requested_device}' is not attached. Attached: "
+            + (", ".join(f"{d.get('serial')} ({d.get('state')})" for d in devices) or "none")
+            + ". Ask the user to connect it or pick another serial."
+        )
+    elif requested_device and not any(d.get("serial") == requested_device for d in ready):
+        steps.append(
+            f"[REQUIRED] Requested device '{requested_device}' is attached but not authorized "
+            "(state is not 'device'). Ask the user to accept the USB debugging prompt on it."
+        )
+
+    target = requested_device or (str(ready[0].get("serial")) if len(ready) == 1 else None)
+    busy = _busy_step(tasks, target)
+    if busy:
+        steps.append(busy)
+
+    if not ready and not in_progress and not launch_requested and installed_avds:
+        steps.append(
+            f'No device is ready. Call mobile_diagnose(launch_avd="{installed_avds[0]}") to boot '
+            f"an installed emulator in the background (installed: {', '.join(installed_avds)}), "
+            "or ask the user to connect a phone."
+        )
+    if len(ready) > 1 and not requested_device:
+        steps.append(
+            "Several devices are ready: ask the user which serial to use and pass it as "
+            "device_serial. Ready: " + ", ".join(str(d.get("serial")) for d in ready) + "."
+        )
+    if (
+        not attempt_fix
+        and not in_progress
+        and not launch_requested
+        and (keys.get("is_corrupted") or not ready)
+    ):
+        steps.append(
+            "Call mobile_diagnose(attempt_fix=true) to let Artemis heal corrupted ADB keys and "
+            "restart the ADB server before asking the user to do anything manually."
+        )
+    return steps
+
+
+def _next_steps(
+    results: list[ProbeResult],
+    *,
+    attempt_fix: bool,
+    fixes_applied: list[dict[str, Any]],
+    requested_device: str | None,
+    env_file: str | None,
+    emulator: dict[str, Any] | None,
+    launch_steps: list[str],
+    credentials: list[dict[str, Any]] | None,
+    tasks: dict[str, list[dict[str, Any]]],
+    device_probe: dict[str, Any] | None,
+) -> list[str]:
+    steps: list[str] = []
+    needs_restart = False
+    adb_result = _find(results, "android_adb")
+    installed_avds = [
+        str(a) for a in (adb_result.metadata.get("installed_avds") if adb_result else None) or []
+    ]
+    in_progress = _launch_in_progress(emulator)
+    credential_lines, credential_restart = _credential_verification_steps(credentials, env_file)
+
+    for result in sort_by_fix_order(results):
+        if result.status is not ProbeStatus.PASS:
+            tag = "REQUIRED" if result.is_blocker else "OPTIONAL"
+            steps.append(f"[{tag}] {result.title}: {result.description}")
+
+            if result.id == "gemini_api_key" and result.status is ProbeStatus.FAIL:
+                steps.extend(_credential_steps(env_file))
+                needs_restart = True
+            elif result.id == "android_adb" and in_progress and emulator is not None:
+                devices = result.metadata.get("devices") or []
+                if not any(d.get("state") == "device" for d in devices):
+                    steps.append(
+                        f"  Guidance: Emulator '{emulator.get('avd_name')}' is "
+                        f"{emulator.get('status')} ({emulator.get('stage_message')}; "
+                        f"{emulator.get('elapsed_seconds') or 0}s elapsed). Wait about 60 "
+                        "seconds and call mobile_diagnose again instead of asking the user to "
+                        "connect a device."
+                    )
+                else:
+                    for action in result.actions:
+                        steps.extend(_render_action_lines(action, installed_avds=installed_avds))
+            else:
+                for action in result.actions:
+                    steps.extend(_render_action_lines(action, installed_avds=installed_avds))
+            if result.id in ("system_config", "integration_host", "python_runtime"):
+                needs_restart = True
+
+        if result.id == "gemini_api_key":
+            steps.extend(credential_lines)
+            needs_restart = needs_restart or credential_restart
+
+    steps.extend(
+        _device_steps(
+            adb_result,
+            attempt_fix=attempt_fix,
+            requested_device=requested_device,
+            emulator=emulator,
+            launch_requested=bool(launch_steps),
+            tasks=tasks,
+        )
+    )
+    steps.extend(launch_steps)
+    steps.extend(_device_probe_steps(device_probe))
+
+    for fix in fixes_applied:
+        outcome = "applied" if fix.get("success") else "did not help"
+        steps.append(f"Auto-fix {fix['fix']} {outcome}: {fix.get('message', '')}".rstrip())
+
+    if not steps:
+        steps.append(
+            "Environment is ready. Use mobile_run_task to delegate a task; pass device_serial "
+            "when more than one device is attached."
+        )
+        return steps
+
+    if needs_restart:
+        steps.append(
+            "After changing the env file, config, or MCP server config: restart the MCP server "
+            "(reload MCP servers in the IDE), then call mobile_diagnose again."
+        )
+    else:
+        steps.append("After each fix, call mobile_diagnose again until verdict is 'ready'.")
+    return steps
+
+
+# --------------------------------------------------------------------------- #
+# Logs
+# --------------------------------------------------------------------------- #
+
+
+def _tail_errors(path: str, *, max_lines: int = 12, max_chars: int = 300) -> list[str]:
+    """Return the last error-looking lines of a log without loading the whole file."""
+    try:
+        size = os.path.getsize(path)
+        with open(path, "rb") as handle:
+            handle.seek(max(0, size - 64 * 1024))
+            text = handle.read().decode("utf-8", errors="replace")
+    except OSError:
+        return []
+    matches = [
+        _ANSI_RE.sub("", line).strip()[:max_chars]
+        for line in text.splitlines()
+        if any(marker in line.lower() for marker in _ERROR_MARKERS)
+    ]
+    return matches[-max_lines:]
+
+
+def _last_failed_task(limit: int = 30) -> dict[str, Any] | None:
+    """Locate the most recent failed trace and surface its error tail inline."""
+    traces_dir = Path(trace_store.TRACES_DIR)
+    try:
+        candidates = [p for p in traces_dir.iterdir() if p.is_dir()]
+    except OSError:
+        return None
+
+    def _mtime(path: Path) -> float:
+        try:
+            return path.stat().st_mtime
+        except OSError:
+            return 0.0
+
+    candidates.sort(key=_mtime, reverse=True)
+    for trace_dir in candidates[:limit]:
+        status = trace_store.read_status(trace_dir.name)
+        if not status or status.get("status") != "failed":
+            continue
+        stderr_log = trace_store.get_trace_stderr_log_path(trace_dir.name)
+        return {
+            "trace_id": trace_dir.name,
+            "error": (status.get("error") or "")[:600],
+            "device_serial": status.get("device_serial"),
+            "stderr_log": stderr_log,
+            "stdout_log": trace_store.get_trace_stdout_log_path(trace_dir.name),
+            "recent_errors": _tail_errors(stderr_log),
+        }
+    return None
+
+
+def _collect_logs(host_metadata: dict[str, Any]) -> dict[str, Any]:
+    root = env_utils.get_project_root()
+    stderr_log = os.path.join(root, "scratch", "mcp_stderr.log")
+    return {
+        "mcp_stderr_log": stderr_log,
+        "mcp_launch_log": os.path.join(root, "scratch", "mcp_launch_debug.log"),
+        "daemon_log": (host_metadata.get("daemon") or {}).get("log_path"),
+        "recent_mcp_errors": _tail_errors(stderr_log),
+        "last_failed_task": _last_failed_task(),
+    }
+
+
+# --------------------------------------------------------------------------- #
+# Self-heal
+# --------------------------------------------------------------------------- #
+
+
+def _public_fix_result(name: str, result: dict[str, Any]) -> dict[str, Any]:
+    return {
+        "fix": name,
+        "success": bool(result.get("success")),
+        "message": str(result.get("message") or ""),
+        "skipped": bool(result.get("skipped")),
+    }
+
+
+def _cleanup_stale_locks() -> dict[str, Any] | None:
+    """Drop lock files / queue tickets of dead processes; reported only when something changed."""
+    try:
+        removed = int(DeviceExecutionLock.cleanup_stale_locks())
+    except Exception as exc:
+        return {
+            "fix": "cleanup_stale_locks",
+            "success": False,
+            "skipped": False,
+            "message": f"cleanup raised {exc.__class__.__name__}: {exc}",
+        }
+    if removed <= 0:
+        return None
+    return {
+        "fix": "cleanup_stale_locks",
+        "success": True,
+        "skipped": False,
+        "message": f"removed {removed} stale device lock(s) / queue ticket(s)",
+    }
+
+
+async def _apply_safe_fixes(report: SystemReadinessReport) -> list[dict[str, Any]]:
+    """Run the self-heals the console exposes as buttons, only when they cannot disrupt a task."""
+    applied: list[dict[str, Any]] = []
+    cleanup = _cleanup_stale_locks()
+    if cleanup is not None:
+        applied.append(cleanup)
+
+    adb = next((p for p in report.probes if p.id == "android_adb"), None)
+    if adb is None or not adb.metadata.get("installed"):
+        return applied
+
+    if adb_keys_corrupted(report.probes):
+        result = await readiness_engine.heal_adb_keys()
+        applied.append(_public_fix_result("heal_adb_keys", result))
+        return applied  # healing already restarted the ADB server
+
+    devices = adb.metadata.get("devices") or []
+    if any(d.get("state") == "device" for d in devices):
+        return applied  # a ready device exists; nothing to restart
+    if DeviceExecutionLock.get_active_owners():
+        applied.append(
+            {
+                "fix": "restart_adb_server",
+                "success": False,
+                "skipped": True,
+                "message": "Skipped: an Artemis task currently holds a device lock.",
+            }
+        )
+        return applied
+    result = await readiness_engine.restart_adb_server()
+    applied.append(_public_fix_result("restart_adb_server", result))
+    return applied
+
+
+def _probes_changed(fixes_applied: list[dict[str, Any]]) -> bool:
+    """Only ADB-side fixes can change probe results; lock cleanup does not warrant a re-run."""
+    return any(
+        fix.get("success") and not fix.get("skipped") and fix.get("fix") != "cleanup_stale_locks"
+        for fix in fixes_applied
+    )
+
+
+# --------------------------------------------------------------------------- #
+# Collection / verdict
+# --------------------------------------------------------------------------- #
+
+
+async def _none() -> None:
+    return None
+
+
+async def _run_extras(
+    results: list[ProbeResult],
+    *,
+    requested_device: str | None,
+    launch_avd: str | None,
+    verify_credentials: bool,
+    probe_device: bool,
+) -> dict[str, Any]:
+    """Optional, slower work: emulator launch, live key checks, device smoke test, lock state."""
+    adb_result = _find(results, "android_adb")
+    launch_steps: list[str] = []
+    if launch_avd:
+        emulator, launch_steps = await _handle_launch_avd(launch_avd, adb_result)
+    else:
+        emulator = _emulator_status()
+
+    credentials, device_probe = await asyncio.gather(
+        _verify_credentials(_find(results, "gemini_api_key")) if verify_credentials else _none(),
+        _run_device_probe(adb_result, requested_device) if probe_device else _none(),
+    )
+    return {
+        "emulator": emulator,
+        "launch_steps": launch_steps,
+        "credentials": credentials,
+        "device_probe": device_probe,
+        "tasks": _task_state(),
+    }
+
+
+def _requested_device_ready(results: list[ProbeResult], requested_device: str | None) -> bool:
+    """A caller-named device counts as a blocker: attached and authorized, or not ready."""
+    if not requested_device:
+        return True
+    adb_result = _find(results, "android_adb")
+    if adb_result is None:
+        return False
+    devices = adb_result.metadata.get("devices") or []
+    return any(d.get("serial") == requested_device and d.get("state") == "device" for d in devices)
+
+
+def _verdict(
+    results: list[ProbeResult],
+    *,
+    requested_device: str | None,
+    credentials: list[dict[str, Any]] | None,
+    device_probe: dict[str, Any] | None,
+) -> str:
+    verdict = base_verdict(results)
+    if verdict == "blocked" or not _requested_device_ready(results, requested_device):
+        return "blocked"
+    primary = _primary_credential(credentials)
+    if primary is not None and not primary.get("valid"):
+        return "blocked"
+    if device_probe is not None and not device_probe.get("ok"):
+        return "blocked"
+    if any(not entry.get("valid") for entry in credentials or []):
+        return "degraded"
+    return verdict
+
+
+def _summary(
+    results: list[ProbeResult],
+    verdict: str,
+    *,
+    credentials: list[dict[str, Any]] | None,
+    device_probe: dict[str, Any] | None,
+) -> str:
+    blockers = [r for r in results if r.is_blocker]
+    passed = [r for r in blockers if r.status is ProbeStatus.PASS]
+    line = f"{len(passed)}/{len(blockers)} required checks pass ({verdict})."
+    failing = [
+        f"{r.title}: {r.summary}"
+        for r in sort_by_fix_order(results)
+        if r.status is not ProbeStatus.PASS
+    ]
+    failing.extend(
+        f"{entry.get('label')} key verification: {entry.get('message')}"
+        for entry in credentials or []
+        if not entry.get("valid")
+    )
+    if device_probe is not None and not device_probe.get("ok"):
+        failing.append(f"Device probe: {device_probe.get('error')}")
+    if failing:
+        line += " Attention: " + "; ".join(failing) + "."
+    return line
+
+
+def _timeout_response(fixes_applied: list[dict[str, Any]]) -> dict[str, Any]:
+    return {
+        "verdict": "blocked",
+        "summary": (
+            f"Diagnosis did not finish within {DIAGNOSIS_TIMEOUT_SECONDS:.0f}s; the ADB "
+            "server, the device, or the toolchain scan is hung."
+        ),
+        "next_steps": [
+            "Run: adb kill-server",
+            "Run: adb start-server",
+            "Then call mobile_diagnose again. If it hangs again, ask the user to unplug and "
+            "replug the device or restart the emulator.",
+        ],
+        "checks": [],
+        "host": {},
+        "device": None,
+        "emulator": _emulator_status(),
+        "tasks": _task_state(),
+        "credentials": None,
+        "device_probe": None,
+        "fixes_applied": fixes_applied,
+        "logs": _collect_logs({}),
+    }
+
+
+@mcp.tool()
+async def mobile_diagnose(
+    attempt_fix: bool = False,
+    device_serial: str | None = None,
+    launch_avd: str | None = None,
+    verify_credentials: bool = False,
+    probe_device: bool = False,
+) -> dict[str, Any]:
+    """Diagnoses why ARTEMIS cannot run tasks from this IDE and returns the fixes.
+
+    Call this FIRST whenever another ARTEMIS tool errors, a task fails to
+    start, no device is found, or the user says ARTEMIS "does not work".
+    It checks, in fix order: Python runtime, config file, the MCP host
+    (interpreter vs project venv, .env location, traces directory, daemon
+    port), LLM credentials, ADB + devices (authorization, lock screen, RSA
+    keys, emulators), and the optional video toolchain. A plain call takes a
+    few seconds; the optional extras cost more (see Args).
+
+    Returns a dict:
+      - `verdict`: "ready" | "degraded" (optional pieces missing) | "blocked".
+      - `summary`: one line with the pass count and what needs attention.
+      - `next_steps`: ordered instructions. `[REQUIRED]`/`[OPTIONAL]` lines
+        name a problem; the indented lines under them are the fix. `Run:`
+        lines are single, local, non-destructive shell commands you may
+        execute yourself, one per line (ask before installing software).
+        `Guidance:` lines need the user, explain a setting, or tell you
+        which mobile_diagnose call to make next. Follow them top to bottom,
+        then call this tool again until `verdict` is "ready".
+      - `checks`: per-check status. Passing checks are one line (id, title,
+        status, required, summary); failing ones add detail, fix, facts.
+        Secrets are never included.
+      - `host`: how the MCP server was launched: server_python,
+        runner_python, interpreter_matches_venv, env_file, env_file_exists,
+        traces_dir, mcp_client (when known), daemon {port, reachable,
+        port_held_by_other_process, log_path}.
+      - `device`: the device a task would use ({serial, state, model,
+        android_version, is_locked, is_emulator}) or null.
+      - `emulator`: background emulator launch state ({avd_name, status,
+        stage_message, error, serial, elapsed_seconds, progress_percent}) or
+        null when nothing was launched. `status` is starting /
+        waiting_for_adb / booting while it boots, then ready or failed.
+      - `tasks`: {"active": [...], "queued": [...]} ARTEMIS tasks holding or
+        waiting for a device (device, session_id, pid, description, ingress,
+        started_at/created_at). Stop a stuck one with
+        mobile_manage_task(action="stop", trace_id=<session_id>).
+      - `credentials`: null unless verify_credentials; else
+        [{provider, label, valid, message}] per configured key.
+      - `device_probe`: null unless probe_device; else {ok, serial,
+        elapsed_seconds, screenshot_bytes, element_count, error, fix}.
+      - `fixes_applied`: what `attempt_fix` did ({fix, success, skipped, message}).
+      - `logs`: paths to the MCP server logs and the daemon log, recent
+        error lines, and the most recent failed task with its error, log
+        paths and `recent_errors` (tail of its stderr log).
+
+    Args:
+        attempt_fix: When true, applies the safe self-heals the ARTEMIS
+          console offers: remove device locks left by dead processes,
+          regenerate corrupted ADB RSA keys, and restart the ADB server
+          (only when no device is ready and no task holds a device). Then
+          re-runs the checks. Nothing else is changed.
+        device_serial: Optional serial the user wants to use; the report
+          then states explicitly whether that device is attached, authorized
+          and idle.
+        launch_avd: Name of an installed Android Virtual Device to boot in
+          the background (pick it from the `next_steps` guidance or the
+          android_adb facts `installed_avds`). Returns immediately; boot
+          takes 1-3 minutes, so call mobile_diagnose again (without
+          launch_avd) after about 60 seconds and watch `emulator.status`.
+          Never pass it while the status is starting/waiting_for_adb/booting.
+          Use it when no device is attached and an AVD exists instead of
+          asking the user to start an emulator.
+        verify_credentials: When true, checks every configured API key
+          against its provider over the network (about 12 seconds worst
+          case, keys stay on the server). Use it when tasks fail with
+          authentication, quota or model errors although the key check
+          passes. An invalid primary key makes the verdict "blocked".
+        probe_device: When true, drives the attached device end to end
+          (screenshot + UI hierarchy, about 20 seconds) to prove a task can
+          really start. Use it when the checks pass but tasks still fail on
+          the device, or the screen stays black. A failed probe makes the
+          verdict "blocked" and lists the fix.
+    """
+    fixes_applied: list[dict[str, Any]] = []
+    requested_device = device_serial.strip() if device_serial and device_serial.strip() else None
+    avd_name = launch_avd.strip() if launch_avd and launch_avd.strip() else None
+    try:
+        report, host = await asyncio.wait_for(
+            collect_readiness(), timeout=DIAGNOSIS_TIMEOUT_SECONDS
+        )
+        if attempt_fix:
+            fixes_applied = await asyncio.wait_for(
+                _apply_safe_fixes(report), timeout=DIAGNOSIS_TIMEOUT_SECONDS
+            )
+            if _probes_changed(fixes_applied):
+                report, host = await asyncio.wait_for(
+                    collect_readiness(), timeout=DIAGNOSIS_TIMEOUT_SECONDS
+                )
+        results = [*report.probes, host]
+        extras = await asyncio.wait_for(
+            _run_extras(
+                results,
+                requested_device=requested_device,
+                launch_avd=avd_name,
+                verify_credentials=verify_credentials,
+                probe_device=probe_device,
+            ),
+            timeout=DIAGNOSIS_TIMEOUT_SECONDS,
+        )
+    except TimeoutError:
+        return _timeout_response(fixes_applied)
+
+    credentials: list[dict[str, Any]] | None = extras["credentials"]
+    device_probe: dict[str, Any] | None = extras["device_probe"]
+    verdict = _verdict(
+        results,
+        requested_device=requested_device,
+        credentials=credentials,
+        device_probe=device_probe,
+    )
+    env_file = host.metadata.get("env_file")
+    return {
+        "verdict": verdict,
+        "summary": _summary(results, verdict, credentials=credentials, device_probe=device_probe),
+        "next_steps": _next_steps(
+            results,
+            attempt_fix=attempt_fix,
+            fixes_applied=fixes_applied,
+            requested_device=requested_device,
+            env_file=env_file,
+            emulator=extras["emulator"],
+            launch_steps=extras["launch_steps"],
+            credentials=credentials,
+            tasks=extras["tasks"],
+            device_probe=device_probe,
+        ),
+        "checks": [_render_check(r) for r in sort_by_fix_order(results)],
+        "host": _compact_host(host.metadata),
+        "device": _compact_device(report),
+        "emulator": extras["emulator"],
+        "tasks": extras["tasks"],
+        "credentials": credentials,
+        "device_probe": device_probe,
+        "fixes_applied": fixes_applied,
+        "logs": _collect_logs(host.metadata),
+    }
diff --git a/scripts/run_edge_case_part.py b/scripts/run_edge_case_part.py
index 5248002..aec2de6 100644
--- a/scripts/run_edge_case_part.py
+++ b/scripts/run_edge_case_part.py
@@ -284,9 +284,7 @@ async def run_part_4():
     print_status_snapshot("Part 4 Running (Mixed Queueing)")
 
     await asyncio.gather(t4a, t4b, t4c)
-    print(
-        "🎉 Part 4 Success: Cross-device concurrency and single-device queueing work together seamlessly!\n"
-    )
+    print("Part 4 passed: cross-device concurrency and single-device queueing.\n")
 
 
 async def main():
diff --git a/scripts/run_ui.py b/scripts/run_ui.py
index 07faab3..837eadb 100755
--- a/scripts/run_ui.py
+++ b/scripts/run_ui.py
@@ -17,7 +17,7 @@
 
 Fastest and simplest way to launch the Artemis Web UI across all platforms:
 - Automatically detects if the UI is already running and opens the browser directly.
-- Uses uv or existing virtualenv seamlessly.
+- Uses uv or an existing virtualenv.
 - Zero-configuration one-click start.
 """
 
diff --git a/tests/fixtures/action_surfaces/tool_declarations.json b/tests/fixtures/action_surfaces/tool_declarations.json
index aa92bdf..33f5ac8 100644
--- a/tests/fixtures/action_surfaces/tool_declarations.json
+++ b/tests/fixtures/action_surfaces/tool_declarations.json
@@ -3,33 +3,39 @@
     "type": "function",
     "function": {
       "name": "click",
-      "description": "[ACTION] Tap/click on the target coordinate on the screen. The screen after click will be returned automatically. For buttons, checkboxes, tabs, icons, items in a list, tap ON the element. For text fields / search bars / input boxes, tap INSIDE the input box to focus it.",
+      "description": "[ACTION] Click on the target location on the screen (supports element index or absolute normalized coordinates).",
       "parameters": {
         "type": "object",
         "properties": {
           "target": {
-            "type": "array",
-            "items": {
-              "type": "integer"
-            },
-            "description": "Normalized coordinates [x, y] in 0-1000 scale."
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "integer"
+                }
+              }
+            ],
+            "description": "Click target. Can be an element index number (int, e.g. 3) OR normalized coordinates (list of 2 integers, e.g. [500, 600])."
           },
           "target_description": {
             "type": "string",
-            "description": "What the target is, in a few words (e.g. 'play button', 'search input', 'video body'). Required: a coordinate names nothing by itself."
+            "description": "What the target is, in a few words (e.g. 'play button', 'search input', 'video body'). REQUIRED when target is a coordinate pair; ignored for an element index."
           },
           "times": {
             "type": "integer",
-            "description": "Number of taps to perform (default 1). Set to 2 for double click."
+            "description": "Number of consecutive clicks on this target. Use this for double-clicks or multi-clicks (e.g. 7 to enter developer mode). Default is 1."
           },
           "delay_ms": {
             "type": "integer",
-            "description": "Delay between taps in milliseconds (default 100)."
+            "description": "Delay in milliseconds between consecutive clicks. Default is 100."
           }
         },
         "required": [
-          "target",
-          "target_description"
+          "target"
         ]
       }
     }
@@ -76,29 +82,35 @@
     "type": "function",
     "function": {
       "name": "long_press",
-      "description": "[ACTION] Long press on a target coordinate on the screen. The screen after long pressing will be returned automatically.",
+      "description": "[ACTION] Long press on the target location on the screen (supports element index or absolute normalized coordinates).",
       "parameters": {
         "type": "object",
         "properties": {
           "target": {
-            "type": "array",
-            "items": {
-              "type": "integer"
-            },
-            "description": "Normalized coordinates [x, y] in 0-1000 scale."
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "integer"
+                }
+              }
+            ],
+            "description": "Long press target. Can be an element index number (int, e.g. 3) OR normalized coordinates (list of 2 integers, e.g. [500, 600])."
           },
           "target_description": {
             "type": "string",
-            "description": "What the target is, in a few words (e.g. 'play button', 'search input', 'video body'). Required: a coordinate names nothing by itself."
+            "description": "What the target is, in a few words (e.g. 'play button', 'search input', 'video body'). REQUIRED when target is a coordinate pair; ignored for an element index."
           },
-          "duration_ms": {
+          "duration": {
             "type": "integer",
-            "description": "Duration of press in milliseconds (default 1000ms)."
+            "description": "Long press duration in milliseconds (default 1000)."
           }
         },
         "required": [
-          "target",
-          "target_description"
+          "target"
         ]
       }
     }
@@ -107,34 +119,40 @@
     "type": "function",
     "function": {
       "name": "input_text",
-      "description": "[ACTION] Type text into an input field on the screen. The screen after typing will be returned automatically. Automatically taps inside the input box at target [x, y] to focus before typing.",
+      "description": "[ACTION] Type text into the target input field (supports replacing whole text or appending to the end, and multi-line strings with '\\n').",
       "parameters": {
         "type": "object",
         "properties": {
           "text": {
             "type": "string",
-            "description": "Text to type into the focused input field."
+            "description": "The text content to input. Supports multi-line content with '\\n'."
           },
           "target": {
-            "type": "array",
-            "items": {
-              "type": "integer"
-            },
-            "description": "Coordinates [x, y] of the input box in 0-1000 scale."
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "integer"
+                }
+              }
+            ],
+            "description": "Input target field. Can be an input box element index number (int, e.g. 3) OR normalized coordinates (list of 2 integers, e.g. [500, 600])."
           },
           "target_description": {
             "type": "string",
-            "description": "What the target is, in a few words (e.g. 'play button', 'search input', 'video body'). Required: a coordinate names nothing by itself."
+            "description": "What the target is, in a few words (e.g. 'play button', 'search input', 'video body'). REQUIRED when target is a coordinate pair; ignored for an element index."
           },
           "clear_exist": {
             "type": "boolean",
-            "description": "Whether to clear existing text in the input box before typing (default True)."
+            "description": "Whether to clear existing text before typing. True (default): clear/replace entire text. False: append at the end of existing content."
           }
         },
         "required": [
           "text",
-          "target",
-          "target_description"
+          "target"
         ]
       }
     }
@@ -143,7 +161,7 @@
     "type": "function",
     "function": {
       "name": "swipe",
-      "description": "[ACTION] Perform a swipe, drag, or slider-adjustment gesture on the screen. The screen and UI hierarchy after swipe will be returned automatically.\n\n• Directional Scrolling ('direction' or 'action'): Recommended for general browsing and standard page scrolling in most scenarios. Automatically computes safe swipe vectors and adaptive duration, retains a ~40% visual overlap anchor for zero-omission traversal, and prevents inertial flings. Supports scoping to a sub-container via 'target'. If it fails on certain custom layouts, fall back to specifying exact coordinates ('start' and 'end') directly.\n• Precise Coordinate Gestures ('start', 'end' or coordinates list): Best for local, fine-grained interactions such as adjusting sliders/SeekBars (e.g., volume, brightness, progress bars), drag-and-drop / list reordering, or as a reliable fallback when directional scrolling fails on specific containers. Always drag slightly PAST the target position to overcome touch slop and reliably trigger the update. When setting a slider to Maximum (100%) or Minimum (0%), swipe fully to the extreme boundary.",
+      "description": "[ACTION] Perform a swipe, drag, or slider-adjustment gesture on the screen.\n\n• Directional Scrolling ('direction'): Recommended for general browsing and standard page scrolling in most scenarios. Automatically computes safe swipe vectors and adaptive duration, retains a ~40% visual overlap anchor for zero-omission traversal, and prevents inertial flings. Supports scoping to a sub-container via 'target'. If it fails on certain custom layouts, fall back to specifying exact coordinates ('start' and 'end') directly.\n• Precise Coordinate Gestures ('start', 'end'): Best for local, fine-grained interactions such as adjusting sliders/SeekBars (e.g., volume, brightness, progress bars), drag-and-drop / list reordering, or as a reliable fallback when directional scrolling fails on specific containers. Always drag slightly PAST the target position to overcome touch slop and reliably trigger the update. When setting a slider to Maximum (100%) or Minimum (0%), swipe fully to the extreme boundary.\n\nArgs:\n    direction: Smart directional scrolling ('up', 'down', 'left', 'right'). Automatically computes safe swipe vectors, retaining 40% visual overlap: 'up' (reveal content below), 'down' (reveal content above), 'left', 'right'.\n    start: Start normalized coordinates [start_x, start_y] in 0-1000 scale.\n    end: End normalized coordinates [end_x, end_y] in 0-1000 scale.\n    target: Optional target element index (e.g. 2) or container bounds [left, top, right, bottom] to scope the directional swipe within.\n    gesture: Backward-compatible parameter: direction string OR custom coordinates list [start_x, start_y, end_x, end_y] in 0-1000 scale.\n    target_description: What is being dragged, in a few words (e.g. 'brightness slider knob'). REQUIRED for coordinate gestures ('start'/'end' or a coordinates list); ignored for directional scrolling.\n    duration: Optional gesture duration in milliseconds (default 800).",
       "parameters": {
         "type": "object",
         "properties": {
@@ -162,30 +180,62 @@
             "items": {
               "type": "integer"
             },
-            "description": "Start normalized coordinates [start_x, start_y] in 0-1000 scale."
+            "description": "Start normalized coordinates [start_x, start_y] in 0-1000 scale for precise, local interactions (e.g. adjusting sliders, SeekBars, fine range selection, or drag-and-drop)."
           },
           "end": {
             "type": "array",
             "items": {
               "type": "integer"
             },
-            "description": "End normalized coordinates [end_x, end_y] in 0-1000 scale."
+            "description": "End normalized coordinates [end_x, end_y] in 0-1000 scale for precise, local interactions (e.g. adjusting sliders, SeekBars, fine range selection, or drag-and-drop)."
           },
           "target": {
+            "anyOf": [
+              {
+                "type": "integer"
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "integer"
+                }
+              },
+              {
+                "type": "string"
+              }
+            ],
             "description": "Optional target element index (e.g. 2) or container bounds [left, top, right, bottom] to scope the directional swipe within."
           },
-          "action": {
+          "gesture": {
+            "anyOf": [
+              {
+                "type": "string",
+                "enum": [
+                  "up",
+                  "down",
+                  "left",
+                  "right"
+                ]
+              },
+              {
+                "type": "array",
+                "items": {
+                  "type": "integer"
+                }
+              }
+            ],
             "description": "Backward-compatible swipe gesture: smart direction string ('up', 'down', 'left', 'right') OR precise custom coordinates [start_x, start_y, end_x, end_y] in 0-1000 scale."
           },
           "target_description": {
             "type": "string",
-            "description": "What is being dragged, in a few words (e.g. 'brightness slider knob'). Required for coordinate gestures ('start'/'end' or a coordinates list); ignored for directional scrolling."
+            "description": "What is being dragged, in a few words (e.g. 'brightness slider knob'). REQUIRED for coordinate gestures ('start'/'end' or a coordinates list); ignored for directional scrolling."
           },
           "duration": {
             "type": "integer",
-            "description": "Optional swipe/drag duration in milliseconds (default 800). For drag-and-drop, list reordering, or sliding/adjusting sliders (e.g., volume, brightness, SeekBars), set duration >= 1000 (e.g. 1500). If omitted for directional swipe, duration is computed automatically."
+            "description": "Optional swipe/drag duration in milliseconds (default 800; computed automatically for directional swipes)."
           }
-        }
+        },
+        "required": []
       }
     }
   },
@@ -193,12 +243,18 @@
     "type": "function",
     "function": {
       "name": "press_key",
-      "description": "[ACTION] Press a physical or virtual system button. The screen after pressing will be returned automatically.",
+      "description": "[ACTION] Press a physical or virtual system button (e.g. ENTER, BACK, HOME, APP_SWITCH).",
       "parameters": {
         "type": "object",
         "properties": {
           "key": {
             "type": "string",
+            "enum": [
+              "ENTER",
+              "BACK",
+              "HOME",
+              "APP_SWITCH"
+            ],
             "description": "Standard Android system button name (ENTER, BACK, HOME, APP_SWITCH)."
           }
         },
@@ -212,13 +268,17 @@
     "type": "function",
     "function": {
       "name": "manage_app",
-      "description": "[ACTION] Launch or force stop a specified application. The screen after launch/stop will be returned automatically.",
+      "description": "[ACTION] Launch or force stop a specified application.",
       "parameters": {
         "type": "object",
         "properties": {
           "action": {
             "type": "string",
-            "description": "The action type ('launch' or 'stop')."
+            "enum": [
+              "launch",
+              "stop"
+            ],
+            "description": "The action type."
           },
           "app_name": {
             "type": "string",
@@ -236,13 +296,13 @@
     "type": "function",
     "function": {
       "name": "wait_for_delay",
-      "description": "[ACTION] Pause execution and wait for a specified duration in milliseconds. The screen after pause will be returned automatically.",
+      "description": "[ACTION] Pause execution and wait for a specified duration in milliseconds.\n\nUse this whenever you need time to elapse—whether for UI loading, animations,\nscreen transitions, or longer scheduled delays and intervals specified in the task.",
       "parameters": {
         "type": "object",
         "properties": {
           "time_in_ms": {
             "type": "integer",
-            "description": "The exact duration to pause in milliseconds (e.g., 2000 for 2s, 60000 for 1 min, 180000 for 3 mins, 300000 for 5 mins). Convert any required waiting duration into milliseconds."
+            "description": "The exact duration to wait in milliseconds. Accurately convert the required time duration into milliseconds based on your objective or plan (e.g., 2000 for 2s, 5000 for 5s, 60000 for 1 minute, 180000 for 3 minutes, 300000 for 5 minutes)."
           }
         },
         "required": [
diff --git a/tests/unit/agents/flash/test_turn_index_snapshot.py b/tests/unit/agents/flash/test_turn_index_snapshot.py
new file mode 100644
index 0000000..0c6e422
--- /dev/null
+++ b/tests/unit/agents/flash/test_turn_index_snapshot.py
@@ -0,0 +1,302 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""A Flash multi-action turn resolves every index against one element list.
+
+Defect: each action's post-observation replaced ``state.indexed_elements``
+and the executor resolved index targets against the state at call time, so
+``click(3)`` then ``click(5)`` decided on one screen sent the second tap to
+whatever the screen after the first click listed as ``[5]``. The runner now
+snapshots the list once per turn and threads it through
+``McpActionExecutor.execute(index_elements=...)``; the state's list is still
+refreshed after every action (that is what the next observation shows).
+"""
+
+from unittest.mock import AsyncMock, Mock, patch
+
+import pytest
+from langchain_core.messages import ToolMessage
+
+from artemis.agents.flash.runner import FlashRunner, _TurnRecord
+from artemis.context import ArtemisContext
+from artemis.graph.state import State
+from artemis.mcp.action_executor import McpActionExecutor, _ArgError
+from artemis.mcp.action_types import ActionResult, ObserveResult
+
+
+def _el(index: int, text: str, cx: int, cy: int) -> dict:
+    return {
+        "index": index,
+        "center": [cx, cy],
+        "text": text,
+        "bounds": [cx - 100, cy - 50, cx + 100, cy + 50],
+        "class": "android.widget.TextView",
+        "resource_id": f"id/{text.lower().replace(' ', '_')}",
+        "is_ocr": False,
+    }
+
+
+# The list of the observation the model decided on (1080x2400 device).
+ORIGINAL = [
+    _el(1, "Home", 540, 200),
+    _el(2, "Search", 540, 600),
+    _el(3, "Wi-Fi", 540, 1000),
+    _el(4, "Bluetooth", 540, 1400),
+    _el(5, "Display", 540, 1800),
+]
+# The screen after the first click: fewer elements, different numbering.
+REFRESHED = [_el(1, "Back", 100, 100), _el(2, "Wi-Fi toggle", 900, 300)]
+
+
+class _FakeSession:
+    """An action session whose observations replay a scripted list sequence."""
+
+    started = True
+
+    def __init__(self, observations: list[list[dict]]):
+        self.calls: list[tuple[str, dict]] = []
+        self._observations = list(observations)
+
+    async def call(self, name, args):
+        self.calls.append((name, dict(args)))
+        return ActionResult.success(name, f"{name} dispatched")
+
+    async def observe(self, settle_ms=0):
+        elements = self._observations.pop(0) if self._observations else []
+        return ObserveResult(
+            ok=True,
+            elements_text="\n".join(f"[{e['index']}] {e['text']}" for e in elements),
+            elements=elements,
+            hierarchy_ok=True,
+        )
+
+
+@pytest.fixture
+def mock_context():
+    ctx = Mock(spec=ArtemisContext)
+    ctx.llm_config = Mock()
+    llm_cfg = Mock()
+    llm_cfg.model = "gemini-2.5-flash"
+    llm_cfg.temperature = 0.1
+    ctx.llm_config.get_agent.return_value = llm_cfg
+    ctx.device = Mock()
+    ctx.device.device_width = 1080
+    ctx.device.device_height = 2400
+    ctx.data_engine = None
+    ctx.adb_client = None
+    ctx.driver = Mock()
+    return ctx
+
+
+def _runner(mock_context, observations):
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="Open Wi-Fi and Display")
+    runner.summarizer = None
+    runner.executor._session = _FakeSession(observations)
+    # No device: the executor's observation already refreshed the state.
+    runner._capture_post_screenshot = AsyncMock(return_value=None)
+    return runner
+
+
+def _state(elements):
+    state = State(initial_goal="g")
+    state.indexed_elements = list(elements)
+    state.indexed_points = [e["center"] for e in elements]
+    return state
+
+
+def _click(index, tc_id):
+    return {"name": "click", "args": {"target": index}, "id": tc_id}
+
+
+# --- Executor: the explicit list wins over the state ---------------------------------
+
+
+def _executor():
+    ctx = Mock()
+    ctx.device.device_width = 1080
+    ctx.device.device_height = 2400
+    actuator = Mock()
+    actuator.controller = Mock()
+    return McpActionExecutor(ctx, actuator=actuator)
+
+
+def test_resolve_index_uses_the_given_list_and_falls_back_to_the_state():
+    executor = _executor()
+    state = _state(REFRESHED)
+
+    # None -> the state's current list (Pro operator / validator / explorer callers).
+    point, recorded = executor._resolve_index(2, "click", state)
+    assert point == [833, 125] and recorded["target_text"] == "Wi-Fi toggle"
+
+    # An explicit list: index 5 exists only there.
+    point, recorded = executor._resolve_index(5, "click", state, index_elements=ORIGINAL)
+    assert point == [500, 750] and recorded["target_text"] == "Display"
+    assert recorded["target_resource_id"] == "id/display"
+
+    # The snapshot bounds the valid range, not the state.
+    with pytest.raises(_ArgError, match="Active index range is 1 to 2"):
+        executor._resolve_index(5, "click", state, index_elements=REFRESHED)
+    _, _, _, recorded = executor._translate(
+        "long_press", {"target": 4}, state, index_elements=ORIGINAL
+    )
+    assert recorded["target_text"] == "Bluetooth"
+    _, wire, _, recorded = executor._translate(
+        "input_text", {"target": 2, "text": "hi"}, state, index_elements=ORIGINAL
+    )
+    assert wire["target"] == [500, 250] and recorded["target_text"] == "Search"
+
+
+# --- Runner: one snapshot per turn ------------------------------------------------------
+
+
+@pytest.mark.asyncio
+async def test_two_index_clicks_in_one_turn_resolve_against_the_original_list(mock_context):
+    """``click(3)`` then ``click(5)``: the first click's observation lists only
+    two elements, yet the second index still lands on the original ``[5]``
+    (Display), with its semantics recorded from the original element."""
+    runner = _runner(mock_context, observations=[REFRESHED, [_el(1, "Display page", 1, 1)]])
+    state = _state(ORIGINAL)
+    messages: list = []
+    turn = _TurnRecord()
+
+    final, _, xml_list, _ = await runner._process_tool_calls(
+        [_click(3, "tc-1"), _click(5, "tc-2")],
+        state,
+        messages,
+        "thought",
+        {},
+        b"pre",
+        "xml",
+        0,
+        turn,
+    )
+
+    assert final is None
+    session = runner.executor._session
+    assert [args["target"] for _, args in session.calls] == [[500, 417], [500, 750]]
+    assert [status for _, status, _ in turn.actions] == ["success", "success"]
+    tool_msgs = [m for m in messages if isinstance(m, ToolMessage)]
+    assert [m.status for m in tool_msgs] == ["success", "success"]
+    # The state kept being refreshed: the NEXT observation shows the newest list.
+    assert [e["text"] for e in state.indexed_elements] == ["Display page"]
+    assert xml_list == "[1] Display page"
+
+
+@pytest.mark.asyncio
+async def test_second_index_beyond_the_refreshed_list_is_still_valid(mock_context):
+    """Without the snapshot ``click(5)`` after the refresh was an
+    'Active index range is 1 to 2' error; with it the turn's own list is
+    authoritative and the recorded metadata comes from that list."""
+    runner = _runner(mock_context, observations=[REFRESHED, REFRESHED])
+    state = _state(ORIGINAL)
+    captured = []
+    real_execute = runner.executor.execute
+
+    async def spy(name, args, tc_id, st, **kwargs):
+        result = await real_execute(name, args, tc_id, st, **kwargs)
+        captured.append(result)
+        return result
+
+    runner.executor.execute = spy
+
+    await runner._process_tool_calls(
+        [_click(4, "tc-1"), _click(5, "tc-2")],
+        state,
+        [],
+        "thought",
+        {},
+        b"pre",
+        "xml",
+        0,
+        _TurnRecord(),
+    )
+
+    assert [r.status for r in captured] == ["success", "success"]
+    assert [r.metadata["target_coordinates"] for r in captured] == [[500, 583], [500, 750]]
+    assert [r.metadata["target_semantics"]["target_text"] for r in captured] == [
+        "Bluetooth",
+        "Display",
+    ]
+    assert captured[1].metadata["target_semantics"]["target_bounds"] == [407, 729, 593, 771]
+
+
+@pytest.mark.asyncio
+async def test_explorer_candidates_registered_before_an_action_join_the_snapshot(mock_context):
+    """``ask_explorer`` appends to the state's list in place; before any
+    action that list is the snapshot, so the new index resolves in the same
+    turn even though the action's observation then replaces the state list."""
+    runner = _runner(mock_context, observations=[REFRESHED])
+    state = _state(ORIGINAL)
+
+    async def fake_explorer(query, context_feedback, st):
+        st.indexed_points.append([540, 2200])
+        st.indexed_elements.append(_el(6, "Hidden gear", 540, 2200))
+        return "Found 'gear' at index 6.", True
+
+    runner.executor._ask_explorer = fake_explorer
+
+    await runner._process_tool_calls(
+        [
+            {"name": "ask_explorer", "args": {"query": "gear"}, "id": "tc-0"},
+            _click(6, "tc-1"),
+        ],
+        state,
+        [],
+        "thought",
+        {},
+        b"pre",
+        "xml",
+        0,
+        _TurnRecord(),
+    )
+
+    session = runner.executor._session
+    assert [args["target"] for _, args in session.calls] == [[500, 917]]
+    assert [e["text"] for e in state.indexed_elements] == ["Back", "Wi-Fi toggle"]
+
+
+@pytest.mark.asyncio
+async def test_explorer_after_an_action_moves_the_snapshot_to_the_list_it_numbered(mock_context):
+    """After an action replaced the state list, the explorer numbers its
+    candidates against that replaced list; the snapshot follows so the index
+    the explorer just handed out resolves correctly."""
+    runner = _runner(mock_context, observations=[REFRESHED, REFRESHED])
+    state = _state(ORIGINAL)
+
+    async def fake_explorer(query, context_feedback, st):
+        st.indexed_points.append([200, 2000])
+        st.indexed_elements.append(_el(len(st.indexed_elements) + 1, "Gear", 200, 2000))
+        return "Found.", True
+
+    runner.executor._ask_explorer = fake_explorer
+
+    await runner._process_tool_calls(
+        [
+            _click(3, "tc-1"),
+            {"name": "ask_explorer", "args": {"query": "gear"}, "id": "tc-2"},
+            _click(3, "tc-3"),  # the explorer's index on the refreshed list
+        ],
+        state,
+        [],
+        "thought",
+        {},
+        b"pre",
+        "xml",
+        0,
+        _TurnRecord(),
+    )
+
+    session = runner.executor._session
+    assert [args["target"] for _, args in session.calls] == [[500, 417], [185, 833]]
diff --git a/tests/unit/agents/test_check_prompt_assembly.py b/tests/unit/agents/test_check_prompt_assembly.py
index 0d344ff..b1b0b89 100644
--- a/tests/unit/agents/test_check_prompt_assembly.py
+++ b/tests/unit/agents/test_check_prompt_assembly.py
@@ -13,8 +13,8 @@
 # limitations under the License.
 
 """§1.3 assembly discipline: prompts are functions of configuration x scenario.
-Both check gates off => zero context pollution; a plan carrying check lines
-gets the behavior explainer regardless of switches."""
+Both check gates off => zero context pollution; with a gate on, the check-line
+guidance lives once in the static system prompt, worded for that gate."""
 
 import json
 from pathlib import Path
@@ -23,10 +23,10 @@ from unittest.mock import MagicMock
 import pytest
 
 from artemis.agents.operator.prompts import (
-    CheckItemsExplainerPromptComponent,
     FeedbackPromptComponent,
     PromptBuilder,
     TemplatePromptComponent,
+    render_transcript_static_system,
 )
 from artemis.agents.planner.planner import build_planner_system_blocks
 from artemis.context import ArtemisContext, ExecutionSetup
@@ -95,35 +95,47 @@ def _state(**overrides):
 
 
 @pytest.mark.asyncio
-async def test_explainer_renders_iff_plan_has_check_lines(tmp_path):
-    component = CheckItemsExplainerPromptComponent()
+async def test_check_line_guidance_lives_in_the_static_prompt_once():
+    """The check-line guidance is a static-prompt section gated on the check
+    gates (never a per-turn observation block), worded for the active gate."""
+    off = await _render_main_template(disable_checker=True)
+    assert "*Check Lines*" not in off
+    assert "never declare a check passed" not in off
 
-    # Plan without check lines -> nothing rendered
-    builder = PromptBuilder()
-    ctx = _mock_ctx(tmp_path, plan="- [ ] G\n")
-    await component(builder, _state(), ctx)
-    assert builder.human_parts == []
+    final_only = await _render_main_template(disable_midway_checks=True, disable_final_check=False)
+    assert final_only.count("*Check Lines*") == 1
+    assert "never declare a check passed" in final_only
+    assert "restores deleted ones unless user guidance called for the change" in final_only
+    # No midway repair loop -> no repair budget to recite, and the grammar says so.
+    assert "reopens its milestone at most" not in final_only
+    assert "there is no midway repair loop" in final_only
 
-    # Plan with check lines -> explainer rendered
-    builder2 = PromptBuilder()
-    ctx2 = _mock_ctx(tmp_path, plan="- [ ] G\n  - verify: V\n")
-    await component(builder2, _state(), ctx2)
-    joined = "\n".join(p for p in builder2.human_parts if isinstance(p, str))
-    assert "check lines" in joined
-    assert "never declare a check passed yourself" in joined
-    assert "automatically restored" in joined
+    midway = await _render_main_template(disable_midway_checks=False, checkpoint_max_repairs=3)
+    assert midway.count("*Check Lines*") == 1
+    assert "reopens its milestone at most 3 times" in midway
+    assert "- finding:" in midway
+
+
+def test_transcript_static_system_recites_the_repair_budget_from_setup():
+    ctx = _mock_ctx(disable_midway_checks=False, checkpoint_max_repairs=5)
+    ctx.actuator = None
+    prompts = json.loads(OPERATOR_JSON.read_text(encoding="utf-8"))
+    text = render_transcript_static_system(prompts, ctx, _state(initial_goal="G"))
+    assert text.count("*Check Lines*") == 1
+    assert "reopens its milestone at most 5 times" in text
+
+    quiet = _mock_ctx(disable_checker=True)
+    quiet.actuator = None
+    assert "*Check Lines*" not in render_transcript_static_system(
+        prompts, quiet, _state(initial_goal="G")
+    )
 
 
 @pytest.mark.asyncio
-async def test_explainer_is_content_driven_not_switch_driven(tmp_path):
-    """A resumed old plan with check lines still gets the explanation even when
-    every check switch is off."""
-    component = CheckItemsExplainerPromptComponent()
-    builder = PromptBuilder()
-    ctx = _mock_ctx(tmp_path, plan="- [ ] G\n  - assert: A\n", disable_checker=True)
-    await component(builder, _state(), ctx)
-    joined = "\n".join(p for p in builder.human_parts if isinstance(p, str))
-    assert "check lines" in joined
+async def test_static_prompt_declares_the_user_guidance_channel_once():
+    text = await _render_main_template(disable_checker=True)
+    assert text.count("--- User Guidance ---") == 1
+    assert "outranks the task plan and its check lines" in text
 
 
 async def _render_main_template(**setup_kwargs) -> str:
diff --git a/tests/unit/agents/test_checker.py b/tests/unit/agents/test_checker.py
index de0e2d3..d992b35 100644
--- a/tests/unit/agents/test_checker.py
+++ b/tests/unit/agents/test_checker.py
@@ -400,7 +400,7 @@ async def test_replay_steps_result_is_a_plain_tool_message(tmp_path):
     assert tool_msg.name == "replay_steps"
     assert "- **Step 3 (Start: 9.0s)**" in tool_msg.content
     assert "[Screen]: Saved the alarm." in tool_msg.content
-    assert "[Planned Action]: Tapped 'Save' at [0.5, 0.5]" in tool_msg.content
+    assert "[Action]: Tapped 'Save' at [0.5, 0.5]" in tool_msg.content
 
 
 # --- Streamed-reasoning transcript (replay of the live Thought/Work text) -------------
@@ -647,6 +647,89 @@ def test_format_history_marks_self_described_targets_only():
     assert "target_resource_id" not in text
 
 
+def test_format_history_uses_session_offsets_and_skips_empty_steps():
+    """Rows carry the session-relative ``T+mm:ss`` clock every agent shares
+    (from the step timestamp, else from the engine's ``97.7s`` label), and a
+    step with neither summary nor action renders no row."""
+    from artemis.agents.checker.checker import _format_history
+
+    ctx = _mock_ctx()
+    ctx.data_engine.session_start_time = 1000.0
+    ctx.data_engine.get_agent_friendly_steps.return_value = [
+        {"step_number": 1, "timestamp": 1097.7, "summary": "Opened the app"},
+        {"step_number": 2, "relative_time": "12.4s", "summary": "", "action_taken": None},
+        {
+            "step_number": 3,
+            "relative_time": "130.0s",
+            "summary": None,
+            "action_taken": {"action": "click", "coordinates": [1, 2], "target_text": "Login"},
+        },
+    ]
+
+    lines = _format_history(ctx).splitlines()
+    assert len(lines) == 2
+    assert lines[0] == "- Step 1 (T+01:37): Opened the app"
+    assert lines[1].startswith("- Step 3 (T+02:10): ")
+    assert "'Login'" in lines[1]
+
+
+async def _final_check_human_text(ctx) -> str:
+    report = CheckReport(verdicts=[])
+    structured = MagicMock()
+    structured.ainvoke = AsyncMock(return_value=report)
+    llm = MagicMock()
+    llm.with_structured_output.return_value = structured
+    response = MagicMock()
+    response.tool_calls = []
+    acomplete_mock = AsyncMock(return_value=response)
+
+    with (
+        patch("artemis.agents.checker.checker.get_llm", return_value=llm),
+        patch("artemis.agents.checker.checker.acomplete", new=acomplete_mock),
+        patch(
+            "artemis.agents.checker.checker._capture_final_screen",
+            new=AsyncMock(return_value=(None, "elements")),
+        ),
+    ):
+        await run_final_check(ctx, goal="the goal", plan_text="- [x] G", ledger=[], check_items=[])
+
+    messages = acomplete_mock.await_args.args[1]
+    human = messages[-1]
+    return "\n".join(
+        block["text"] for block in human.content if isinstance(block, dict) and "text" in block
+    )
+
+
+@pytest.mark.asyncio
+async def test_final_review_lists_user_guidance_from_the_step_records():
+    """Every mid-run user instruction reaches the final review, read from the
+    step it was stamped on, so the goal is audited as amended by it."""
+    ctx = _mock_ctx()
+    ctx.data_engine.get_agent_friendly_steps.return_value = [
+        {"step_number": 1, "relative_time": "3.0s", "summary": "s1", "extra_metadata": {}},
+        {
+            "step_number": 2,
+            "relative_time": "65.0s",
+            "summary": "s2",
+            "extra_metadata": {"injected_instruction": "Skip the login"},
+        },
+    ]
+    text = await _final_check_human_text(ctx)
+    section = text.split("# User guidance received during the run\n", 1)[1].split("\n\n", 1)[0]
+    assert section == '- Step 2 (T+01:05): "Skip the login"'
+    # The system prompt audits the goal as amended by that guidance.
+    from artemis.agents.checker.checker import _load_prompts
+
+    assert "as amended by the user guidance" in _load_prompts()["final_guide"]
+
+
+@pytest.mark.asyncio
+async def test_final_review_reports_no_guidance_explicitly():
+    ctx = _mock_ctx()
+    text = await _final_check_human_text(ctx)
+    assert "# User guidance received during the run\n(none)\n" in text
+
+
 # --- tool results: status is structural, never sniffed from the words -----------------
 
 
diff --git a/tests/unit/agents/test_diagnoser.py b/tests/unit/agents/test_diagnoser.py
index 2c028d9..f067b67 100644
--- a/tests/unit/agents/test_diagnoser.py
+++ b/tests/unit/agents/test_diagnoser.py
@@ -332,3 +332,39 @@ async def test_run_tool_message_status_is_structural(
     assert messages[0].tool_call_id == "c1"
     assert messages[0].status == expected_status
     assert messages[0].content == str(result)
+
+
+# --- submit_answer rendering ------------------------------------------------------------
+
+
+def test_submit_answer_renders_numbered_steps(mock_context):
+    agent = Diagnoser(mock_context)
+    call = {
+        "name": "submit_answer",
+        "args": {
+            "analysis": "Airplane mode blocks the toggle.",
+            "actionable_steps": ["Turn off airplane mode", "Retry the toggle"],
+        },
+    }
+
+    outcome = agent._handle_submit_call(call, [])
+
+    assert outcome == (
+        "Analysis: Airplane mode blocks the toggle.\n"
+        "Actionable steps:\n"
+        "1. Turn off airplane mode\n"
+        "2. Retry the toggle"
+    )
+
+
+def test_submit_answer_without_steps_omits_section(mock_context):
+    agent = Diagnoser(mock_context)
+    call = {
+        "name": "submit_answer",
+        "args": {"analysis": "Nothing to fix.", "actionable_steps": []},
+    }
+
+    outcome = agent._handle_submit_call(call, [])
+
+    assert outcome == "Analysis: Nothing to fix."
+    assert "Actionable" not in outcome
diff --git a/tests/unit/agents/test_execution_incident_prompt.py b/tests/unit/agents/test_execution_incident_prompt.py
index 22b24d0..b19b115 100644
--- a/tests/unit/agents/test_execution_incident_prompt.py
+++ b/tests/unit/agents/test_execution_incident_prompt.py
@@ -154,7 +154,14 @@ def test_render_burst_abort_and_exec_error():
 
     plain = _disappeared(kind=KIND_EXEC_ERROR, category="general")
     text = render_execution_incident(plain, STEPS)
-    assert "was dispatched, but the device/executor reported" in text
+    # A failed action is quoted as an intent, never as a done outcome, and
+    # the sentence does not claim it was dispatched.
+    assert (
+        "your planned action `tap 'Skip' at [950, 288]` could not be executed; the"
+        " device/executor reported:" in text
+    )
+    assert "was dispatched" not in text
+    assert "`Tapped 'Skip'" not in text
 
 
 def test_render_without_history_omits_the_trigger_hint():
@@ -179,15 +186,17 @@ async def test_component_renders_only_while_an_incident_is_open():
         builder, SimpleNamespace(open_incident=_disappeared()), ctx, steps=STEPS
     )
     assert len(builder.human_parts) == 1
-    # Its own text part: the transcript scrub keeps it verbatim across turns.
     assert builder.human_parts[0].startswith(EXECUTION_INCIDENT_MARKER)
+    # Re-rendered every turn while open, so older copies leave the history.
+    assert builder.ephemeral_indices == [0]
 
 
 def test_render_closed_notice_settles_the_intent():
     closed = dict(_disappeared(), closed_at_step=15)
     text = render_closed_incident(closed)
     assert text.startswith("--- Execution Incident (CLOSED at Step 15) ---")
-    assert "opened at Step 12 on `Tapped 'Skip' at [950, 288]`" in text
+    # The blocked action is quoted in intent form: it never happened.
+    assert "opened at Step 12 on `tap 'Skip' at [950, 288]`" in text
     assert "already served, still pending, or no longer needed" in text
 
 
@@ -201,6 +210,7 @@ async def test_component_renders_closed_notice_once_no_incident_is_open():
     await ExecutionIncidentPromptComponent()(builder, state, ctx, steps=STEPS)
     assert len(builder.human_parts) == 1
     assert builder.human_parts[0].startswith("--- Execution Incident (CLOSED at Step 15) ---")
+    assert builder.ephemeral_indices == [0]
 
     # An open incident takes precedence over a stale closed notice.
     builder = PromptBuilder()
diff --git a/tests/unit/agents/test_flash_runner.py b/tests/unit/agents/test_flash_runner.py
index a894cb4..f188b5e 100644
--- a/tests/unit/agents/test_flash_runner.py
+++ b/tests/unit/agents/test_flash_runner.py
@@ -14,13 +14,18 @@
 
 """Unit tests for Universal FlashRunner."""
 
-from unittest.mock import Mock, patch
+import base64
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, Mock, patch
 import pytest
 from langchain_core.messages import HumanMessage, ToolMessage
 
 from artemis.agents.explorer.constants import ASK_EXPLORER_DESCRIPTION
 from artemis.agents.flash.runner import FlashRunner
-from artemis.agents.validator.tool_declarations import ASK_EXPLORER_TOOL
+from artemis.agents.validator.tool_declarations import (
+    ASK_EXPLORER_TOOL,
+    ToolExecutionResult,
+)
 from artemis.context import ArtemisContext
 
 
@@ -57,6 +62,138 @@ def test_flash_runner_tools_initialization(mock_context):
         assert "report_task_status" in tool_names
         # Validator's report_failure_analysis should NOT be in FlashRunner
         assert "report_failure_analysis" not in tool_names
+        # Flash has no note-writing tool and its prompt never teaches notes:
+        # the Validator set's note readers are not bound.
+        assert "read_note" not in tool_names
+        assert "list_notes" not in tool_names
+        assert tool_names[:2] == ["click", "click_sequence"]
+
+
+# --- Post-action screenshot fallback (failed action / unknown tool) ----------------
+
+
+def _screen(elements):
+    return SimpleNamespace(
+        base64=base64.b64encode(b"POST-IMG").decode("ascii"),
+        elements=elements,
+        width=1080,
+        height=2400,
+    )
+
+
+def _failed_click(tc_id="tc1"):
+    return ToolExecutionResult(
+        tool_call_id=tc_id,
+        tool_name="click",
+        status="error",
+        text_summary="Error during click: Invalid target format: 3",
+    )
+
+
+@pytest.mark.asyncio
+async def test_fallback_observation_renders_the_indexed_ui_list(mock_context, tmp_path):
+    """After an action that produced no observation, the fallback capture must
+    hand the next tail the same indexed minimal list the success path builds
+    (never the raw element dict repr) and refresh the state like it."""
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    runner.controller = Mock()
+    runner.controller.get_screen_data = AsyncMock(
+        return_value=_screen(
+            [
+                {
+                    "text": "Settings",
+                    "content-desc": "",
+                    "bounds": "[40,120][1040,270]",
+                    "class": "android.widget.TextView",
+                    "resource-id": "android:id/title",
+                }
+            ]
+        )
+    )
+    state = Mock()
+    state.latest_screenshot = "old.jpg"
+    exec_result = _failed_click()
+
+    with patch("artemis.mcp.observation.get_temp_dir", return_value=tmp_path):
+        post = await runner._capture_post_screenshot(
+            exec_result, "click", frozenset({"click"}), state
+        )
+
+    assert post == b"POST-IMG"
+    assert isinstance(exec_result.ui_elements_text, str)
+    assert exec_result.ui_elements_text == "[1] Text: 'Settings' | Bounds: [37,50][962,112]"
+    assert "{'text'" not in exec_result.ui_elements_text
+    # State refreshed exactly as the executor's success path does.
+    assert state.indexed_elements[0]["index"] == 1
+    assert state.indexed_elements[0]["text"] == "Settings"
+    assert state.indexed_points == [state.indexed_elements[0]["center"]]
+    assert state.latest_screenshot != "old.jpg"
+    assert state.latest_screenshot.startswith(str(tmp_path))
+    assert exec_result.screenshot_path == state.latest_screenshot
+
+
+@pytest.mark.asyncio
+async def test_fallback_observation_is_skipped_for_non_action_tools(mock_context):
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    runner.controller = Mock()
+    runner.controller.get_screen_data = AsyncMock(return_value=_screen([]))
+    state = Mock()
+    exec_result = ToolExecutionResult(
+        tool_call_id="tc", tool_name="ask_explorer", status="success", text_summary="found"
+    )
+
+    post = await runner._capture_post_screenshot(
+        exec_result, "ask_explorer", frozenset({"click"}), state
+    )
+
+    assert post is None
+    assert exec_result.ui_elements_text is None
+    runner.controller.get_screen_data.assert_not_awaited()
+
+
+@pytest.mark.asyncio
+async def test_fallback_observation_keeps_the_executors_ui_list(mock_context, tmp_path):
+    """An action that reported a UI list but no screenshot keeps its own list."""
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    runner.controller = Mock()
+    runner.controller.get_screen_data = AsyncMock(
+        return_value=_screen([{"text": "Other", "bounds": "[0,0][100,100]"}])
+    )
+    exec_result = ToolExecutionResult(
+        tool_call_id="tc",
+        tool_name="click",
+        status="success",
+        text_summary="click executed",
+        ui_elements_text="[1] Text: 'Mine' | Bounds: [0,0][10,10]",
+    )
+
+    with patch("artemis.mcp.observation.get_temp_dir", return_value=tmp_path):
+        post = await runner._capture_post_screenshot(
+            exec_result, "click", frozenset({"click"}), None
+        )
+
+    assert post == b"POST-IMG"
+    assert exec_result.ui_elements_text == "[1] Text: 'Mine' | Bounds: [0,0][10,10]"
+
+
+@pytest.mark.asyncio
+async def test_fallback_observation_failure_is_contained(mock_context):
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    runner.controller = Mock()
+    runner.controller.get_screen_data = AsyncMock(side_effect=RuntimeError("adb gone"))
+    state = Mock()
+    state.latest_screenshot = "old.jpg"
+    exec_result = _failed_click()
+
+    post = await runner._capture_post_screenshot(exec_result, "click", frozenset({"click"}), state)
+
+    assert post is None
+    assert exec_result.ui_elements_text is None
+    assert state.latest_screenshot == "old.jpg"
 
 
 def test_flash_runner_executor_follows_the_flash_explorer_tier(mock_context):
@@ -202,10 +339,12 @@ def test_flash_records_render_in_the_ledger_with_their_arguments(mock_context):
     typed = _record(runner, "input_text", {"target": [500, 600], "text": "hello"})
     assert format_actions_clean(typed) == "Inputted 'hello' into field at [500, 600]"
 
+    # A directional swipe names the direction first; the recorded canonical
+    # path is the parenthesised detail.
     swipe_dir = _record(runner, "swipe", {"direction": "up"})
-    assert format_actions_clean(swipe_dir) == "Swiped up"
+    assert format_actions_clean(swipe_dir) == "Swiped up (from [600, 700] to [600, 300])"
     swipe_fa = _record(runner, "swipe", {"action": "down"})
-    assert format_actions_clean(swipe_fa) == "Swiped down"
+    assert format_actions_clean(swipe_fa) == "Swiped down (from [600, 300] to [600, 700])"
     swipe_coords = _record(runner, "swipe", {"coordinates": [556, 289, 556, 124]})
     assert format_actions_clean(swipe_coords) == "Swiped from [556, 289] to [556, 124]"
 
@@ -246,3 +385,174 @@ def test_flash_records_the_executors_target_semantics(mock_context):
     bare = _record(runner, "click", {"target": [320, 399]}, metadata={"target_semantics": {}})
     assert "target_description" not in bare
     assert "target_text" not in bare
+
+
+def test_flash_records_an_index_target_as_the_resolved_point_with_observed_semantics(
+    mock_context,
+):
+    """An element index is not a coordinate: the record carries the normalized
+    point the executor resolved it to, plus the element's observed fields in
+    the shape Pro records (never a self-described label)."""
+    from artemis.utils.task_tree import format_actions_clean
+
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+
+    click = _record(
+        runner,
+        "click",
+        {"target": 3},
+        metadata={
+            "target_coordinates": [500, 520],
+            "target_semantics": {
+                "target_text": "Wi-Fi",
+                "target_bounds": [37, 480, 962, 560],
+                "target_resource_id": "android:id/title",
+                "target_class": "android.widget.TextView",
+            },
+        },
+    )
+    assert click["coordinates"] == [500, 520]
+    assert click["normalized_coordinates"] == [500, 520]
+    assert click["target_text"] == "Wi-Fi"
+    assert click["target_bounds"] == [37, 480, 962, 560]
+    assert "target_description" not in click
+    assert click["args"] == {"target": 3}  # the tool call itself, verbatim
+    assert format_actions_clean(click) == "Tapped 'Wi-Fi' at [500, 520]"
+
+    typed = _record(
+        runner,
+        "input_text",
+        {"target": 2, "text": "hello"},
+        metadata={"target_coordinates": [500, 300], "target_semantics": {"target_text": "Search"}},
+    )
+    assert typed["coordinates"] == [500, 300]
+    assert format_actions_clean(typed) == "Inputted 'hello' into 'Search' at [500, 300]"
+
+
+@pytest.mark.asyncio
+async def test_visual_lens_receives_the_recorded_action_shape(mock_context):
+    """The lens gets the recorded action minus its verb (what the Pro
+    summarizer hands it), so ``manage_app``'s own ``action`` argument can no
+    longer overwrite the action name in the rendered phrase."""
+    from artemis.agents.flash.runner import _TurnRecord
+    from artemis.agents.flash.summarizer import VisualStepSummarizer
+
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    runner.summarizer = Mock()
+    runner.executor.execute = AsyncMock(
+        return_value=ToolExecutionResult(
+            tool_call_id="tc",
+            tool_name="manage_app",
+            status="success",
+            text_summary="Launched app 'Settings' (com.android.settings); foreground confirmed.",
+            screenshot_bytes=b"post",
+            metadata={"target_semantics": {}, "target_coordinates": None},
+        )
+    )
+    args = {"action": "launch", "app_name": "Settings"}
+
+    await runner._execute_and_record_action(
+        "manage_app", args, "tc", Mock(), [], "thought", {}, b"pre", "xml", 0, _TurnRecord()
+    )
+
+    runner.summarizer.dispatch.assert_called_once()
+    kwargs = runner.summarizer.dispatch.call_args.kwargs
+    assert kwargs["action_name"] == "manage_app"
+    assert "action" not in kwargs["action_args"]
+    assert kwargs["action_args"]["args"] == args
+    assert VisualStepSummarizer._action_phrase("manage_app", kwargs["action_args"]) == (
+        "Launched app 'Settings'"
+    )
+
+
+# --- Native thinking (thought summaries) reach the step record ----------------------
+
+
+def _thinking_response(content):
+    from types import SimpleNamespace
+
+    return SimpleNamespace(content=content, tool_calls=[])
+
+
+def test_extract_response_thinking_reads_only_thinking_blocks(mock_context):
+    """``include_thoughts`` replies carry ``thinking`` blocks next to ``text``
+    blocks; only the former are native thinking, and plain-string replies
+    carry none."""
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+
+    blocks = [
+        {"type": "thinking", "thinking": "**Verifying**\n\nMaps is open."},
+        {"type": "text", "text": "Tapping the search bar."},
+        {"type": "thinking", "thinking": "  "},
+    ]
+    assert runner._extract_response_thinking(_thinking_response(blocks)) == (
+        "**Verifying**\n\nMaps is open."
+    )
+    assert runner._extract_response_text(_thinking_response(blocks)) == "Tapping the search bar."
+    assert runner._extract_response_thinking(_thinking_response("plain reply")) == ""
+    assert (
+        runner._extract_response_thinking(_thinking_response([{"type": "text", "text": "t"}])) == ""
+    )
+
+
+def test_record_action_step_persists_native_thinking(mock_context):
+    from types import SimpleNamespace
+
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    runner.ctx.data_engine = Mock()
+    runner.ctx.data_engine.current_step_id = None
+    runner.ctx.data_engine.record_step.return_value = "step-1"
+    exec_result = SimpleNamespace(
+        status="success", text_summary="click executed", metadata={}, ui_elements_text="ui"
+    )
+
+    runner._record_action_step(
+        "click",
+        {"target": [1, 2]},
+        exec_result,
+        "thought",
+        {},
+        b"pre",
+        ["xml"],
+        b"post",
+        native_text="native summary",
+    )
+    kwargs = runner.ctx.data_engine.record_step.call_args.kwargs
+    assert kwargs["operator_raw_thinking"] == "thought"
+    assert kwargs["operator_native_thinking"] == "native summary"
+
+    runner._record_action_step(
+        "click", {"target": [1, 2]}, exec_result, "thought", {}, b"pre", ["xml"], b"post"
+    )
+    assert runner.ctx.data_engine.record_step.call_args.kwargs["operator_native_thinking"] is None
+
+
+@pytest.mark.asyncio
+async def test_final_report_persists_native_thinking(mock_context):
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    runner.ctx.data_engine = Mock()
+    runner.ctx.data_engine.current_step_id = None
+    runner.summarizer = None
+    messages = []
+
+    report = await runner._finalize_task_report(
+        "report_task_status",
+        {"status": "completed"},
+        "tc",
+        "final text",
+        {},
+        b"pre",
+        ["xml"],
+        messages,
+        native_text="native summary",
+    )
+    assert report == {"status": "completed"}
+    kwargs = runner.ctx.data_engine.record_step.call_args.kwargs
+    assert kwargs["operator_raw_thinking"] == "final text"
+    assert kwargs["operator_native_thinking"] == "native summary"
+    assert isinstance(messages[-1], ToolMessage)
diff --git a/tests/unit/agents/test_flash_runner_ledger.py b/tests/unit/agents/test_flash_runner_ledger.py
index 031b71b..57ff1ef 100644
--- a/tests/unit/agents/test_flash_runner_ledger.py
+++ b/tests/unit/agents/test_flash_runner_ledger.py
@@ -17,33 +17,42 @@
 Covers: the ``video_analyzer`` availability gate (same as the Pro graph) and
 its prompt segment, the unbounded-by-default turn limit, the Pro-shaped
 observation tail (``# CURRENT OBSERVATION [T+mm:ss]`` header, screenshot,
-``--- Visible UI Elements ---`` list), and the end-to-end loop: committed
-turns carry text-only tool messages plus an ``--- Action Execution Result
-(T+mm:ss) ---`` message, every recorded step of a multi-action turn is
-registered on the committed turn, the final-turn tool restriction only
-applies to bounded loops, and a no-tool-call turn is nudged, not terminated.
+``--- Visible UI Elements ---`` list, ephemeral per-turn notices, the
+reasoning reminder after a silent turn), and the end-to-end loop: committed
+turns carry text-only tool messages and no execution-result message unless
+an action failed, every recorded step of a multi-action turn is registered
+on the committed turn, the final-turn tool restriction only applies to
+bounded loops, and a no-tool-call turn is nudged, not terminated.
 """
 
 import base64
 import re
-from unittest.mock import AsyncMock, Mock, patch
+from unittest.mock import AsyncMock, Mock, PropertyMock, patch
 
 import pytest
 from langchain_core.messages import AIMessage, HumanMessage, SystemMessage, ToolMessage
 
-from artemis.agents.flash.runner import FlashRunner, _TurnRecord
+from artemis.agents.flash.runner import _FINAL_TURN_WARNING, FlashRunner, _TurnRecord
+from artemis.agents.operator.prompts import (
+    REASONING_REMINDER,
+    USER_GUIDANCE_MARKER,
+    UserGuidance,
+    render_user_guidance,
+    render_user_instruction,
+)
 from artemis.agents.validator.tool_declarations import ToolExecutionResult
 from artemis.context import ArtemisContext
 from artemis.graph.state import State
 from artemis.memory.transcript import (
+    EPHEMERAL_BLOCKS_KEY,
     EXECUTION_RESULT_MARKER,
     PRO_UI_LIST_MARKER,
     TranscriptLedger,
 )
 
 OBSERVATION_HEADER_RE = re.compile(r"^# CURRENT OBSERVATION \[T\+\d{2,}:\d{2}\]$")
-RESULT_RE = re.compile(
-    rf"^{re.escape(EXECUTION_RESULT_MARKER)} \(T\+\d{{2,}}:\d{{2}}\) ---\nStatus: dispatched$"
+FAILED_RESULT_RE = re.compile(
+    rf"^{re.escape(EXECUTION_RESULT_MARKER)} \(T\+\d{{2,}}:\d{{2}}\) ---\nStatus: failed\n"
 )
 
 
@@ -173,31 +182,139 @@ def test_turn_limit_semantics(mock_context):
 
 
 def test_observation_tail_has_pro_shape(mock_context):
+    """The objective lives in the system prompt only; the tail opens with the
+    observation header on turn 1 exactly as on every later turn, and carries
+    no reminder unless the previous turn was silent."""
     with patch("artemis.controllers.unified_controller.get_driver"):
         runner = FlashRunner(mock_context, goal="Open Settings")
         ledger = TranscriptLedger()
 
         tail = runner._build_tail(ledger, 1, b"IMG", "[1] Settings")
         texts = [b["text"] for b in tail.content if b["type"] == "text"]
-        assert texts[0] == "Your objective is: Open Settings"
-        assert OBSERVATION_HEADER_RE.match(texts[1])
-        assert texts[2] == "--- Current Screenshot ---"
-        assert texts[3] == f"{PRO_UI_LIST_MARKER}\n[1] Settings"
+        assert OBSERVATION_HEADER_RE.match(texts[0])
+        assert texts[1] == "--- Current Screenshot ---"
+        assert texts[2] == f"{PRO_UI_LIST_MARKER}\n[1] Settings"
+        assert len(texts) == 3
         assert sum(1 for b in tail.content if b["type"] == "image_url") == 1
+        joined = "".join(texts)
+        assert "Open Settings" not in joined and "objective" not in joined.lower()
+        assert "CRITICAL RULE" not in joined and REASONING_REMINDER not in joined
+        assert EPHEMERAL_BLOCKS_KEY not in tail.additional_kwargs
 
         later = runner._build_tail(
-            ledger, 5, None, None, injected="[INJECTED] stop", notices=["nudge"], is_final=True
+            ledger,
+            5,
+            None,
+            None,
+            injected=UserGuidance(body='User instruction: "stop"', wrapper="[INJECTED]"),
+            notices=["nudge"],
+            is_final=True,
         )
         texts = [b["text"] for b in later.content]
         assert OBSERVATION_HEADER_RE.match(texts[0])
-        assert "Your objective is" not in "".join(texts)
+        assert "objective" not in "".join(texts).lower()
         assert texts[1:] == [
             "nudge",
-            "[INJECTED] stop",
-            "[WARNING] This is your final turn; only 'report_task_status' is available.",
+            "[INJECTED]",
+            'User instruction: "stop"',
+            _FINAL_TURN_WARNING,
         ]
 
 
+def test_per_turn_notices_are_marked_ephemeral(mock_context):
+    """Nudges, the user-guidance wrapper, the final-turn warning and the
+    reasoning reminder are only meaningful for the turn they were built for:
+    every one of them is flagged ephemeral (by block index) so the scrub edge
+    drops them before the message freezes; the observation blocks never are."""
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="Open Settings")
+    ledger = TranscriptLedger()
+    guidance = render_user_guidance("stop", release_loop=False, has_plan=False)
+
+    tail = runner._build_tail(
+        ledger,
+        3,
+        b"IMG",
+        "[1] Settings",
+        notices=["nudge"],
+        injected=guidance,
+        is_final=True,
+        previous_turn_silent=True,
+    )
+    texts = [b.get("text") for b in tail.content]
+    # header, screenshot label, image, UI list, then the per-turn notices with
+    # the persistent instruction body right after its wrapper
+    assert texts[4:] == [
+        "nudge",
+        guidance.wrapper,
+        guidance.body,
+        _FINAL_TURN_WARNING,
+        REASONING_REMINDER,
+    ]
+    assert tail.additional_kwargs[EPHEMERAL_BLOCKS_KEY] == [4, 5, 7, 8]
+
+
+def test_injected_instruction_body_outlives_its_wrapper(mock_context):
+    """Defect: a standing instruction ("don't send messages from now on")
+    vanished after one turn because the whole guidance block was ephemeral.
+    Now the wrapper is ephemeral and the verbatim body is a regular block, so
+    it stays in the active window until the turn is chunked."""
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    ledger = TranscriptLedger()
+    guidance = render_user_guidance(
+        "don't send messages from now on", has_plan=False, offset_label="T+01:05"
+    )
+
+    tail = runner._build_tail(ledger, 2, b"IMG", "[1] Send", injected=guidance)
+    texts = [b.get("text") for b in tail.content]
+    wrapper_index = texts.index(guidance.wrapper)
+    body_index = texts.index(guidance.body)
+    ephemeral = tail.additional_kwargs[EPHEMERAL_BLOCKS_KEY]
+    assert wrapper_index in ephemeral
+    assert body_index not in ephemeral
+    assert body_index == wrapper_index + 1
+    assert guidance.body == 'User instruction (T+01:05): "don\'t send messages from now on"'
+    assert guidance.body == render_user_instruction(
+        "don't send messages from now on", offset_label="T+01:05"
+    )
+    # The wrapper frames the quoted line but no longer carries the words.
+    assert guidance.wrapper.startswith(USER_GUIDANCE_MARKER)
+    assert "don't send messages" not in guidance.wrapper
+
+    # Scrub edge parity: once the turn has left the live position (a newer
+    # committed observation exists) the wrapper is gone and the body is
+    # still in the committed turn.
+    ledger.stage_turn([tail, AIMessage(content="ok")])
+    ledger.commit_staged(step_key="s1")
+    ledger.stage_turn([runner._build_tail(ledger, 3, b"IMG", "[1] Send"), AIMessage(content="ok")])
+    ledger.commit_staged(step_key="s2")
+    rendered = ledger.render([runner._build_tail(ledger, 4, b"IMG", "[1] Send")])
+    committed = next(
+        m
+        for m in rendered
+        if isinstance(m, HumanMessage) and guidance.body in [b.get("text") for b in m.content]
+    )
+    committed_texts = [b.get("text", "") for b in committed.content if isinstance(b, dict)]
+    assert guidance.wrapper not in committed_texts
+    assert not any(t.startswith(USER_GUIDANCE_MARKER) for t in committed_texts)
+
+
+def test_reasoning_reminder_follows_a_silent_turn_only(mock_context):
+    with patch("artemis.controllers.unified_controller.get_driver"):
+        runner = FlashRunner(mock_context, goal="g")
+    ledger = TranscriptLedger()
+
+    quiet = runner._build_tail(ledger, 2, None, "[1] x", previous_turn_silent=False)
+    assert REASONING_REMINDER not in [b["text"] for b in quiet.content]
+
+    reminded = runner._build_tail(ledger, 2, None, "[1] x", previous_turn_silent=True)
+    texts = [b["text"] for b in reminded.content]
+    assert texts[-1] == REASONING_REMINDER
+    assert texts.count(REASONING_REMINDER) == 1
+    assert reminded.additional_kwargs[EPHEMERAL_BLOCKS_KEY] == [len(texts) - 1]
+
+
 # ---------------------------------------------------------------------------
 # Injected instruction: verbatim text for the record and the lens, wrapped
 # notice for the observation tail only
@@ -209,8 +326,9 @@ async def test_injected_instruction_splits_verbatim_text_from_operator_notice(
     mock_context, tmp_path
 ):
     """The user's words are what the step record, the chunk ledger and the
-    visual lens receive (Pro parity); the 'You MUST immediately ...' directive
-    is operator-facing and rides on the observation tail alone."""
+    visual lens receive (Pro parity); the shared ``--- User Guidance ---``
+    block (the Pro rendering, without a plan to edit) rides on the
+    observation tail alone."""
     import json
 
     (tmp_path / "injected_instruction.json").write_text(
@@ -225,11 +343,15 @@ async def test_injected_instruction_splits_verbatim_text_from_operator_notice(
         instruction, notice = await runner._read_injected_instruction()
 
     assert instruction == "Skip the popup and log in"
-    assert notice.startswith(
-        "[REAL-TIME INJECTED INSTRUCTION from user]: Skip the popup and log in"
+    assert notice == render_user_guidance(
+        "Skip the popup and log in", release_loop=True, has_plan=False
     )
-    assert "You MUST immediately follow this instruction" in notice
-    assert "authorized stopping any ongoing monitoring loop" in notice
+    assert notice.wrapper.startswith(USER_GUIDANCE_MARKER)
+    assert notice.body == 'User instruction: "Skip the popup and log in"'
+    assert "outranks your current milestones" in notice.wrapper
+    assert "task plan" not in notice.wrapper
+    assert "authorized stopping any ongoing monitoring loop" in notice.wrapper
+    assert "REAL-TIME INJECTED" not in notice.wrapper and "You MUST" not in notice.wrapper
     assert not (tmp_path / "injected_instruction.json").exists()
 
     with patch("artemis.controllers.unified_controller.get_driver"):
@@ -267,7 +389,7 @@ def _make_runner(mock_context, responses, max_turns=None):
 
     runner._invoke_model = AsyncMock(side_effect=_invoke)
     runner.executor.execute = AsyncMock(
-        side_effect=lambda name, args, tc_id, state: _exec_result(
+        side_effect=lambda name, args, tc_id, state, **_: _exec_result(
             tc_id, name, f"IMG-{tc_id}".encode()
         )
     )
@@ -289,9 +411,10 @@ _INITIAL_OBSERVATION = ("shot0.png", b"IMG0", "[1] Settings")
 @pytest.mark.asyncio
 async def test_run_builds_prompt_from_ledger_with_session_offsets(mock_context):
     """Turn 2 must see: the static system prefix, the committed turn 1 (its
-    tail, the AI message, text-only tool messages and an execution-result
-    message with a ``T+`` offset) and a fresh observation tail carrying the
-    last action's post screenshot — the Pro transcript shape, with no cap."""
+    tail, the AI message, text-only tool messages that already carry each
+    action's outcome — no execution-result message repeats them) and a fresh
+    observation tail carrying the last action's post screenshot — the Pro
+    transcript shape, with no cap."""
     responses = [
         AIMessage(
             content="I will tap then wait.",
@@ -327,33 +450,146 @@ async def test_run_builds_prompt_from_ledger_with_session_offsets(mock_context):
     tail1 = turn2_messages[1]
     assert isinstance(tail1, HumanMessage)
     tail1_texts = [b["text"] for b in tail1.content if b["type"] == "text"]
-    assert tail1_texts[0] == "Your objective is: Open Settings"
-    assert OBSERVATION_HEADER_RE.match(tail1_texts[1])
+    assert OBSERVATION_HEADER_RE.match(tail1_texts[0])
+    assert "objective" not in "".join(tail1_texts).lower()
+    assert "Open Settings" in turn2_messages[0].content  # stated once, in the prefix
 
     assert isinstance(turn2_messages[2], AIMessage)
     tool_msgs = [m for m in turn2_messages if isinstance(m, ToolMessage)]
     assert [m.content for m in tool_msgs] == ["click executed", "wait_for_delay executed"]
 
-    result_msg = turn2_messages[5]
-    assert isinstance(result_msg, HumanMessage)
-    assert RESULT_RE.match(result_msg.content[0]["text"])
+    # Every action succeeded: the tool messages are the outcome, nothing repeats them.
+    assert not any(
+        isinstance(m, HumanMessage)
+        and any(EXECUTION_RESULT_MARKER in b.get("text", "") for b in m.content)
+        for m in turn2_messages
+    )
 
-    tail2 = turn2_messages[6]
+    tail2 = turn2_messages[5]
     tail2_texts = [b["text"] for b in tail2.content if b["type"] == "text"]
     assert OBSERVATION_HEADER_RE.match(tail2_texts[0])
-    assert "Your objective is" not in "".join(tail2_texts)
+    assert "objective" not in "".join(tail2_texts).lower()
     images = [b for b in tail2.content if b["type"] == "image_url"]
     assert len(images) == 1
     assert images[0]["image_url"]["url"].endswith(base64.b64encode(b"IMG-tc2").decode())
     assert tail2_texts[1] == "--- Current Screenshot ---"
     assert tail2_texts[2] == f"{PRO_UI_LIST_MARKER}\n[1] next"
-    assert len(turn2_messages) == 7
+    assert len(turn2_messages) == 6
 
     # Both actions of the multi-action turn were registered on the committed turn.
     ledger = mock_context.transcript_ledger
     assert ledger.unchunked_turns()[0]["step_keys"] == ["tc1", "tc2"]
 
 
+@pytest.mark.asyncio
+async def test_run_failed_action_turn_ends_with_the_error_result(mock_context):
+    """A failed action is the one case worth a result message: it carries the
+    error the turn ended on, after the tool message."""
+    responses = [
+        AIMessage(
+            content="Tapping.",
+            tool_calls=[{"name": "click", "args": {"target": 99}, "id": "tc1"}],
+        ),
+        _report(),
+    ]
+    with (
+        patch("artemis.controllers.unified_controller.get_driver"),
+        patch(
+            "artemis.agents.flash.runner.capture_screenshot_and_parse_ui",
+            AsyncMock(return_value=_INITIAL_OBSERVATION),
+        ),
+    ):
+        runner = _make_runner(mock_context, responses, max_turns=0)
+        runner.executor.execute = AsyncMock(
+            return_value=ToolExecutionResult(
+                tool_call_id="tc1",
+                tool_name="click",
+                status="error",
+                text_summary="Error during click: Invalid target index 99.",
+            )
+        )
+        runner._capture_post_screenshot = AsyncMock(return_value=None)
+        await runner.run(State(initial_goal="Open Settings"))
+
+    turn2_messages = runner.calls[1]["messages"]
+    result_msgs = [
+        m
+        for m in turn2_messages
+        if isinstance(m, HumanMessage)
+        and any(EXECUTION_RESULT_MARKER in b.get("text", "") for b in m.content)
+    ]
+    assert len(result_msgs) == 1
+    text = result_msgs[0].content[0]["text"]
+    assert FAILED_RESULT_RE.match(text)
+    assert "Invalid target index 99" in text
+    assert isinstance(turn2_messages[turn2_messages.index(result_msgs[0]) - 1], ToolMessage)
+
+
+@pytest.mark.asyncio
+async def test_run_reminds_after_a_silent_turn_without_a_bounce(mock_context):
+    """The ledger judges the committed turn (sibling logic, authoritative
+    here); the runner only reads ``last_turn_silent`` when it builds the
+    next tail: one reminder block, marked ephemeral, one model call per turn."""
+    responses = [
+        AIMessage(
+            content="",  # bare tool call, no visible reasoning
+            tool_calls=[
+                {"name": "click", "args": {"target": 1}, "id": "tc1"},
+            ],
+        ),
+        _report(),
+    ]
+    with (
+        patch("artemis.controllers.unified_controller.get_driver"),
+        patch(
+            "artemis.agents.flash.runner.capture_screenshot_and_parse_ui",
+            AsyncMock(return_value=_INITIAL_OBSERVATION),
+        ),
+        patch.object(TranscriptLedger, "last_turn_silent", new_callable=PropertyMock) as silent,
+    ):
+        silent.side_effect = lambda: silent.call_count > 1  # turn 1: False, later: True
+        runner = _make_runner(mock_context, responses, max_turns=0)
+        await runner.run(State(initial_goal="Open Settings"))
+
+    assert runner._invoke_model.await_count == 2
+    tail1 = runner.calls[0]["messages"][-1]
+    assert REASONING_REMINDER not in [b.get("text") for b in tail1.content]
+    tail2 = runner.calls[1]["messages"][-1]
+    texts = [b.get("text") for b in tail2.content]
+    assert texts.count(REASONING_REMINDER) == 1
+    assert tail2.additional_kwargs[EPHEMERAL_BLOCKS_KEY] == [texts.index(REASONING_REMINDER)]
+
+
+@pytest.mark.asyncio
+async def test_run_calibrates_the_ledger_only_from_measured_usage(mock_context):
+    """A provider-reported prompt size calibrates the chars-per-token ratio
+    with the sent messages; an estimated size (no usage metadata) records the
+    base but never calibrates — the estimate is itself derived from character
+    counts, so calibrating on it would be circular."""
+    measured = AIMessage(
+        content="Tapping.",
+        tool_calls=[{"name": "click", "args": {"target": 1}, "id": "tc1"}],
+        usage_metadata={"input_tokens": 1200, "output_tokens": 5, "total_tokens": 1205},
+    )
+    responses = [measured, _report()]
+    with (
+        patch("artemis.controllers.unified_controller.get_driver"),
+        patch(
+            "artemis.agents.flash.runner.capture_screenshot_and_parse_ui",
+            AsyncMock(return_value=_INITIAL_OBSERVATION),
+        ),
+        patch.object(TranscriptLedger, "record_prompt_tokens") as record,
+    ):
+        runner = _make_runner(mock_context, responses, max_turns=0)
+        await runner.run(State(initial_goal="Open Settings"))
+
+    assert record.call_count == 2
+    first_call, second_call = record.call_args_list
+    assert first_call.args[0] == 1200 and first_call.kwargs["messages"] is not None
+    # The report turn carries no usage metadata: estimated, recorded, not calibrated.
+    assert second_call.args[0] >= 1 and second_call.kwargs["messages"] is None
+
+
 @pytest.mark.asyncio
 async def test_run_final_turn_restricts_tools_and_fails_without_report(mock_context):
     responses = [AIMessage(content="I give up.", tool_calls=[])]
@@ -411,11 +647,14 @@ def test_turn_record_result_is_none_for_helper_only_turns():
     assert _TurnRecord().result() is None
 
 
-def test_turn_record_result_is_dispatched_when_every_action_was_accepted():
+def test_turn_record_result_is_none_when_every_action_succeeded():
+    """The tool messages already say ``Swiped up.``; a ``Status: dispatched``
+    line after them would only duplicate the outcome (and put two human
+    messages back to back)."""
     record = _TurnRecord(
         actions=[("click", "success", "Tapped at [500, 500]"), ("swipe", "success", "Swiped up.")]
     )
-    assert record.result() == {"status": "dispatched"}
+    assert record.result() is None
 
 
 def test_turn_record_failed_result_keeps_an_executor_message_that_names_the_action():
diff --git a/tests/unit/agents/test_flash_scrub_edge.py b/tests/unit/agents/test_flash_scrub_edge.py
index 5177454..1524c3b 100644
--- a/tests/unit/agents/test_flash_scrub_edge.py
+++ b/tests/unit/agents/test_flash_scrub_edge.py
@@ -12,13 +12,11 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-"""Unit tests for the Flash scrub-edge compressor (history redesign §3.2, M1).
+"""Tests for screenshot summaries, text cleanup, and frozen history.
 
-Covers the M1 acceptance items: the legacy-equivalent success-path product
-(asserted directly since the legacy ``compress_flash_messages`` reference was
-removed in M5), the three race regressions (grace recovery, grace exhaustion
-without backfill, failed-summary placeholder), the freeze invariant (bytes
-behind the scrub edge never change), and depth-1 XML stripping equivalence.
+Covers pending-summary recovery and expiry, failed-summary placeholders,
+independent text and image depths, ephemeral-block remapping, and stable
+content after both cleanup passes.
 """
 
 import json
@@ -83,9 +81,10 @@ def test_success_path_product_behind_the_scrub_edge(mock_context):
     by the ``--- Historical Visual Transition ---`` summary block.
 
     (Asserted directly; the legacy ``compress_flash_messages`` reference this
-    was originally diffed against was removed in M5.) Intended M1 timing
-    change: the swap happens at depth K, so the newest K-1 historical steps
-    still carry their screenshots.
+    was originally diffed against was removed in M5.) The swap happens at
+    depth K, so the newest K-1 historical steps still carry their screenshots;
+    their UI lists leave earlier, at the shallow text edge (depth 1), so only
+    the live observation ever carries an indexed element list.
     """
     summarizer = VisualStepSummarizer(mock_context)
     for i in range(1, 7):
@@ -120,8 +119,8 @@ def test_success_path_product_behind_the_scrub_edge(mock_context):
     assert _has_image(new_messages[6])
     assert "Tree 6" in str(new_messages[6].content)
 
-    # Intended timing change: step 5 (depth 2 < K) keeps its screenshot under
-    # the scrub edge; its XML was still stripped at depth 1.
+    # Step 5 (depth 2 < K) is past the text edge only: screenshot intact,
+    # UI list already gone, summary not yet swapped in.
     assert _has_image(new_messages[5])
     assert "Visual summary 5." not in str(new_messages[5].content)
     assert "Tree 5" not in str(new_messages[5].content)
@@ -249,10 +248,10 @@ def test_freeze_invariant_bytes_never_change(mock_context):
     assert "Late summary 2." not in " ".join(str(m.content) for m in messages)
 
 
-def test_xml_depth1_strip_matches_legacy_semantics(mock_context):
-    """Depth-1 XML stripping keeps combined-block prefixes and the live list."""
+def test_strip_at_the_edge_keeps_combined_block_prefix_and_live_list(mock_context):
+    """The XML strip at the edge keeps combined-block prefixes and the live list."""
     messages: list = []
-    compressor = ScrubEdgeCompressor(summarizer=None, prune_history_xml=True)
+    compressor = ScrubEdgeCompressor(summarizer=None, prune_history_xml=True, image_scrub_depth=2)
 
     combined = ToolMessage(
         tool_call_id="tc1",
@@ -267,13 +266,44 @@ def test_xml_depth1_strip_matches_legacy_semantics(mock_context):
     )
     _simulate_turns(compressor, messages, [combined, _step(2)])
 
-    # Historical combined block: prefix retained, tree stripped (the exact
+    # Combined block at the edge: prefix retained, tree stripped (the exact
     # legacy ``compress_flash_messages`` product for this input).
     assert messages[0].content[0] == {"type": "text", "text": "Tapped Settings."}
     # Live observation keeps its UI list untouched.
     assert "Tree 2" in str(messages[1].content)
 
 
+def test_imageless_ui_list_carrier_is_stripped_as_soon_as_a_newer_observation_exists(
+    mock_context,
+):
+    """A step whose screenshot failed still carries a UI list; it follows the
+    text edge like any observation: while it is the newest observation it keeps
+    the list, and it is stripped as soon as a newer observation exists — even
+    when that newer one has no image either — so only the live observation ever
+    carries an indexed element list."""
+    messages: list = []
+    compressor = ScrubEdgeCompressor(summarizer=None, image_scrub_depth=2)
+
+    def imageless(n: int) -> ToolMessage:
+        return ToolMessage(
+            tool_call_id=f"tc{n}",
+            name="click",
+            content=[
+                {"type": "text", "text": f"Tapped {n}, screenshot failed."},
+                {"type": "text", "text": f"--- UI Element List ---\nTree {n}"},
+            ],
+        )
+
+    _simulate_turns(compressor, messages, [imageless(1)])
+    assert "Tree 1" in str(messages[0].content)  # newest observation: kept
+    _simulate_turns(compressor, messages, [imageless(2)])  # screenshots keep failing
+    assert messages[0].content == [{"type": "text", "text": "Tapped 1, screenshot failed."}]
+    assert "Tree 2" in str(messages[1].content)
+    _simulate_turns(compressor, messages, [_step(3)])
+    assert messages[1].content == [{"type": "text", "text": "Tapped 2, screenshot failed."}]
+    assert "Tree 3" in str(messages[2].content)  # live observation untouched
+
+
 def test_prune_history_xml_disabled_keeps_ui_lists(mock_context):
     """With the switch off, UI lists survive both depth-1 and freeze scrubs."""
     summarizer = VisualStepSummarizer(mock_context)
@@ -317,3 +347,348 @@ def test_untracked_messages_are_never_touched(mock_context):
     assert messages[2].content == "thinking"
     # Image-only tool message froze with the defensive fallback text.
     assert messages[1].content == [{"type": "text", "text": "Action dispatched."}]
+
+
+def test_depth_override_tightens_once_and_deeper_pass_never_backfills(mock_context):
+    """A per-call depth override: a shallower pass scrubs the extra depths in
+    one go; a deeper pass afterwards touches nothing already frozen."""
+    summarizer = VisualStepSummarizer(mock_context)
+    for i in range(1, 9):
+        summarizer._step_inputs[f"tc{i}"] = {"step_number": i}
+        summarizer._summaries[f"tc{i}"] = f"Summary {i}."
+    messages: list = [_initial_observation()]
+    compressor = ScrubEdgeCompressor(summarizer=summarizer, image_scrub_depth=3)
+
+    for i in range(1, 9):
+        compressor.compress(messages, image_scrub_depth=6)
+        messages.append(_step(i))
+    compressor.compress(messages, image_scrub_depth=6)
+    with_images = [m for m in messages if _has_image(m)]
+    # Depth 6 with the live step at depth 1: tc4..tc7 (depths 5..2) keep
+    # their screenshots, tc3 (depth 6) is scrubbed.
+    assert [m.tool_call_id for m in with_images] == ["tc4", "tc5", "tc6", "tc7", "tc8"]
+
+    compressor.compress(messages, image_scrub_depth=3)  # tighten: three more scrubbed at once
+    with_images = [m for m in messages if _has_image(m)]
+    assert [m.tool_call_id for m in with_images] == ["tc7", "tc8"]
+    frozen = {idx: _content_fingerprint(messages[idx]) for idx in compressor._frozen}
+
+    compressor.compress(messages, image_scrub_depth=6)  # relax: nothing restored
+    assert [m.tool_call_id for m in messages if _has_image(m)] == ["tc7", "tc8"]
+    assert {idx: _content_fingerprint(messages[idx]) for idx in frozen} == frozen
+
+
+# ---------------------------------------------------------------------------
+# Screenshot replacement, ephemeral blocks, and frozen content
+# ---------------------------------------------------------------------------
+
+
+def _labelled_step(i: int, *, footer: str | None = None) -> ToolMessage:
+    """A step in the Flash observation shape with the screenshot label block."""
+    blocks = [
+        {"type": "text", "text": f"Action {i} completed."},
+        {"type": "text", "text": "--- Current Screenshot ---"},
+        {"type": "image_url", "image_url": {"url": f"data:image/jpeg;base64,IMG_{i}"}},
+        {"type": "text", "text": f"--- UI Element List ---\nTree {i}"},
+    ]
+    if footer is not None:
+        blocks.append({"type": "text", "text": footer})
+    return ToolMessage(tool_call_id=f"tc{i}", name="click", content=blocks)
+
+
+def test_summary_takes_the_images_place_and_the_label_leaves_with_it(mock_context):
+    """(i) The visual summary block sits exactly where the image block was —
+    not appended after whatever followed — and no ``--- Current Screenshot ---``
+    label is left dangling above it."""
+    summarizer = VisualStepSummarizer(mock_context)
+    summarizer._summaries["tc1"] = "Summary 1."
+    messages: list = []
+    compressor = ScrubEdgeCompressor(summarizer=summarizer, image_scrub_depth=2)
+    _simulate_turns(
+        compressor, messages, [_labelled_step(1, footer="Footer note 1"), _labelled_step(2)]
+    )
+
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "--- Historical Visual Transition ---\nSummary 1."},
+        {"type": "text", "text": "Footer note 1"},
+    ]
+    assert "--- Current Screenshot ---" not in str(messages[0].content)
+    # The live step keeps its label above its screenshot.
+    assert messages[1].content[1] == {"type": "text", "text": "--- Current Screenshot ---"}
+
+
+def test_ephemeral_blocks_vanish_at_the_text_edge_and_not_before(mock_context):
+    """(ii) Blocks listed under ``EPHEMERAL_BLOCKS_KEY`` survive only while
+    the message is the live observation; at the text edge (a newer observation
+    exists) they are deleted together with the UI list, the screenshot stays
+    until depth K; the consumed indices are cleared at the text edge."""
+    from artemis.memory.transcript import EPHEMERAL_BLOCKS_KEY, mark_ephemeral
+
+    summarizer = VisualStepSummarizer(mock_context)
+    summarizer._summaries["tc1"] = "Summary 1."
+    step1 = ToolMessage(
+        tool_call_id="tc1",
+        name="click",
+        content=[
+            {"type": "text", "text": "Action 1 completed."},
+            {"type": "text", "text": "[reminder: state your reasoning]"},
+            {"type": "image_url", "image_url": {"url": "data:image/jpeg;base64,IMG_1"}},
+            {"type": "text", "text": "--- UI Element List ---\nTree 1"},
+            {"type": "text", "text": "[hint: valid this turn only]"},
+        ],
+    )
+    mark_ephemeral(step1, [1, 4])
+
+    messages: list = []
+    compressor = ScrubEdgeCompressor(summarizer=summarizer, image_scrub_depth=3)
+    _simulate_turns(compressor, messages, [step1])
+    # Live observation: everything, ephemeral blocks included, still there.
+    assert "[reminder: state your reasoning]" in str(messages[0].content)
+    assert "[hint: valid this turn only]" in str(messages[0].content)
+    assert messages[0].additional_kwargs[EPHEMERAL_BLOCKS_KEY] == [1, 4]
+
+    _simulate_turns(compressor, messages, [_step(2)])  # step 1 reaches depth 2
+    # Text edge: notices and UI list gone, the screenshot stays (depth 2 < K).
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "image_url", "image_url": {"url": "data:image/jpeg;base64,IMG_1"}},
+    ]
+    assert EPHEMERAL_BLOCKS_KEY not in messages[0].additional_kwargs
+
+    _simulate_turns(compressor, messages, [_step(3)])  # step 1 reaches depth 3
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "--- Historical Visual Transition ---\nSummary 1."},
+    ]
+    assert EPHEMERAL_BLOCKS_KEY not in messages[0].additional_kwargs
+
+
+def test_grace_does_the_text_edits_at_k_once_and_only_the_image_swap_waits(mock_context):
+    """A pending summary keeps the screenshot (and its label) inside the grace
+    window, but the strip and the ephemeral deletion happen at K exactly once;
+    the later swap puts the summary where the image was and freezes."""
+    from artemis.memory.transcript import mark_ephemeral
+
+    summarizer = VisualStepSummarizer(mock_context)
+    summarizer._step_inputs["tc1"] = {"step_number": 1}  # pending
+    step1 = _labelled_step(1, footer="[per-turn notice]")
+    mark_ephemeral(step1, [4])
+
+    messages: list = []
+    compressor = ScrubEdgeCompressor(
+        summarizer=summarizer, image_scrub_depth=2, pending_grace_steps=3
+    )
+    _simulate_turns(compressor, messages, [step1, _labelled_step(2)])
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "--- Current Screenshot ---"},
+        {"type": "image_url", "image_url": {"url": "data:image/jpeg;base64,IMG_1"}},
+    ]
+    after_text_edits = _content_fingerprint(messages[0])
+    _simulate_turns(compressor, messages, [_labelled_step(3)])  # still pending, in grace
+    assert _content_fingerprint(messages[0]) == after_text_edits
+
+    summarizer._summaries["tc1"] = "Late but in time."
+    _simulate_turns(compressor, messages, [_labelled_step(4)])
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "--- Historical Visual Transition ---\nLate but in time."},
+    ]
+    assert 0 in compressor._frozen
+
+
+def test_messages_past_the_edge_are_byte_identical_on_every_later_pass(mock_context):
+    """(iii) Once a message is past the edge, compressing again — with new
+    turns appended, depths relaxed or tightened, summaries arriving late —
+    leaves it byte-identical. Each pass rewrites exactly the two messages
+    that reached an edge (the text edge at depth 2, the screenshot edge at
+    K) and nothing older."""
+    summarizer = VisualStepSummarizer(mock_context)
+    for i in range(1, 13):
+        summarizer._step_inputs[f"tc{i}"] = {"step_number": i}
+        summarizer._summaries[f"tc{i}"] = f"Summary {i}."
+    messages: list = []
+    compressor = ScrubEdgeCompressor(summarizer=summarizer, image_scrub_depth=3)
+
+    previous: list[str] = []
+    for i in range(1, 13):
+        messages.append(_labelled_step(i))
+        compressor.compress(messages)
+        current = [_content_fingerprint(m) for m in messages]
+        # Everything before the messages that reached an edge is unchanged.
+        changed = [idx for idx, fp in enumerate(previous) if current[idx] != fp]
+        # The message reaching depth 2 (text edge) is index len-1 of the previous
+        # pass's list, the one reaching depth 3 (screenshot edge) is len-2; the
+        # new live message is not in that list yet.
+        expected = [idx for idx in (len(previous) - 2, len(previous) - 1) if idx >= 0]
+        assert changed == expected, changed
+        previous = current
+
+    # No new messages: a repeated pass, relaxed or not, is a no-op byte for byte.
+    compressor.compress(messages)
+    compressor.compress(messages, image_scrub_depth=6)
+    assert [_content_fingerprint(m) for m in messages] == previous
+    # Tightening rewrites exactly the message at the new depth, nothing older.
+    compressor.compress(messages, image_scrub_depth=2)
+    changed = [i for i, fp in enumerate(previous) if _content_fingerprint(messages[i]) != fp]
+    assert changed == [len(messages) - 2]
+
+
+def test_text_edge_deeper_than_screenshot_edge_keeps_the_edges_independent(mock_context):
+    """xml_scrub_depth=4 with K=3: the screenshot is resolved at depth 3 while
+    the UI list stays until the message is deeper than 4; the message is only
+    frozen once both edits have happened."""
+    summarizer = VisualStepSummarizer(mock_context)
+    for i in range(1, 8):
+        summarizer._summaries[f"tc{i}"] = f"Summary {i}."
+    messages: list = []
+    compressor = ScrubEdgeCompressor(summarizer=summarizer, image_scrub_depth=3, xml_scrub_depth=4)
+    _simulate_turns(compressor, messages, [_labelled_step(i) for i in range(1, 4)])
+    # Step 1 at depth 3: image swapped, label gone, UI list still there.
+    assert "Summary 1." in str(messages[0].content)
+    assert not _has_image(messages[0])
+    assert "--- Current Screenshot ---" not in str(messages[0].content)
+    assert "Tree 1" in str(messages[0].content)
+
+    _simulate_turns(compressor, messages, [_labelled_step(4), _labelled_step(5)])
+    # Step 1 at depth 5 (> 4): UI list gone now; the summary is untouched.
+    assert "Tree 1" not in str(messages[0].content)
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "--- Historical Visual Transition ---\nSummary 1."},
+    ]
+    frozen = _content_fingerprint(messages[0])
+    _simulate_turns(compressor, messages, [_labelled_step(6), _labelled_step(7)])
+    assert _content_fingerprint(messages[0]) == frozen
+
+
+# ---------------------------------------------------------------------------
+# Ephemeral indices stay aligned when the image edge is shallower than the
+# text edge (a rewrite before the text edit shifts the later blocks)
+# ---------------------------------------------------------------------------
+
+
+def _step_with_notices(i: int) -> ToolMessage:
+    """Flash observation shape with one ephemeral notice on each side of the
+    screenshot and a body block *after* the notice that follows the image, so
+    a stale index would delete the body instead of the notice."""
+    from artemis.memory.transcript import mark_ephemeral
+
+    msg = ToolMessage(
+        tool_call_id=f"tc{i}",
+        name="click",
+        content=[
+            {"type": "text", "text": f"Action {i} completed."},
+            {"type": "text", "text": f"[hint {i}: before the image]"},
+            {"type": "text", "text": "--- Current Screenshot ---"},
+            {"type": "image_url", "image_url": {"url": f"data:image/jpeg;base64,IMG_{i}"}},
+            {"type": "text", "text": f"--- UI Element List ---\nTree {i}"},
+            {"type": "text", "text": f"[reminder {i}: after the image]"},
+            {"type": "text", "text": f"Body note {i}"},
+        ],
+    )
+    mark_ephemeral(msg, [1, 5])
+    return msg
+
+
+def test_image_edge_before_text_edge_remaps_ephemeral_indices_to_the_summary_layout(
+    mock_context,
+):
+    """K=3 with xml_scrub_depth=4: the summary swap at depth 3 removes the
+    label block, so the notice after the image moves up by one. The stored
+    indices must follow it; the later text pass then deletes both notices and
+    leaves the body block intact."""
+    from artemis.memory.transcript import EPHEMERAL_BLOCKS_KEY
+
+    summarizer = VisualStepSummarizer(mock_context)
+    for i in range(1, 6):
+        summarizer._summaries[f"tc{i}"] = f"Summary {i}."
+    messages: list = []
+    compressor = ScrubEdgeCompressor(summarizer=summarizer, image_scrub_depth=3, xml_scrub_depth=4)
+    _simulate_turns(compressor, messages, [_step_with_notices(i) for i in range(1, 4)])
+
+    # Image pass (depth 3): label + image -> summary; notices still present.
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "[hint 1: before the image]"},
+        {"type": "text", "text": "--- Historical Visual Transition ---\nSummary 1."},
+        {"type": "text", "text": "--- UI Element List ---\nTree 1"},
+        {"type": "text", "text": "[reminder 1: after the image]"},
+        {"type": "text", "text": "Body note 1"},
+    ]
+    assert messages[0].additional_kwargs[EPHEMERAL_BLOCKS_KEY] == [1, 4]
+
+    _simulate_turns(compressor, messages, [_step_with_notices(4), _step_with_notices(5)])
+    # Text pass (depth 5 > 4): notices and UI list gone, body block intact.
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "--- Historical Visual Transition ---\nSummary 1."},
+        {"type": "text", "text": "Body note 1"},
+    ]
+    assert EPHEMERAL_BLOCKS_KEY not in messages[0].additional_kwargs
+    assert 0 in compressor._frozen
+
+
+def test_image_edge_before_text_edge_remaps_when_the_image_is_dropped(mock_context):
+    """Same ordering with no summary job at all: label and image both leave
+    (two blocks removed), the notice after the image moves up by two."""
+    from artemis.memory.transcript import EPHEMERAL_BLOCKS_KEY
+
+    messages: list = []
+    compressor = ScrubEdgeCompressor(summarizer=None, image_scrub_depth=3, xml_scrub_depth=4)
+    _simulate_turns(compressor, messages, [_step_with_notices(i) for i in range(1, 4)])
+
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "[hint 1: before the image]"},
+        {"type": "text", "text": "--- UI Element List ---\nTree 1"},
+        {"type": "text", "text": "[reminder 1: after the image]"},
+        {"type": "text", "text": "Body note 1"},
+    ]
+    assert messages[0].additional_kwargs[EPHEMERAL_BLOCKS_KEY] == [1, 3]
+
+    _simulate_turns(compressor, messages, [_step_with_notices(4), _step_with_notices(5)])
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "Body note 1"},
+    ]
+    assert EPHEMERAL_BLOCKS_KEY not in messages[0].additional_kwargs
+    assert 0 in compressor._frozen
+
+
+def test_grace_swap_before_the_text_edge_remaps_ephemeral_indices(mock_context):
+    """Pending summary inside the grace window with the text edge still ahead:
+    the keep-image revisit changes nothing (indices untouched); the late swap
+    removes the label and remaps; the text pass then deletes the right blocks."""
+    from artemis.memory.transcript import EPHEMERAL_BLOCKS_KEY
+
+    summarizer = VisualStepSummarizer(mock_context)
+    summarizer._step_inputs["tc1"] = {"step_number": 1}  # pending
+    messages: list = []
+    compressor = ScrubEdgeCompressor(
+        summarizer=summarizer, image_scrub_depth=3, xml_scrub_depth=5, pending_grace_steps=3
+    )
+    _simulate_turns(compressor, messages, [_step_with_notices(i) for i in range(1, 4)])
+    # Depth 3, pending, in grace: byte-identical, indices untouched.
+    assert _has_image(messages[0])
+    assert "--- Current Screenshot ---" in str(messages[0].content)
+    assert messages[0].additional_kwargs[EPHEMERAL_BLOCKS_KEY] == [1, 5]
+
+    summarizer._summaries["tc1"] = "Late but in time."
+    _simulate_turns(compressor, messages, [_step_with_notices(4)])  # depth 4: swap
+    assert messages[0].content[2] == {
+        "type": "text",
+        "text": "--- Historical Visual Transition ---\nLate but in time.",
+    }
+    assert messages[0].additional_kwargs[EPHEMERAL_BLOCKS_KEY] == [1, 4]
+
+    _simulate_turns(compressor, messages, [_step_with_notices(5), _step_with_notices(6)])
+    # Depth 6 > 5: text pass on the remapped layout.
+    assert messages[0].content == [
+        {"type": "text", "text": "Action 1 completed."},
+        {"type": "text", "text": "--- Historical Visual Transition ---\nLate but in time."},
+        {"type": "text", "text": "Body note 1"},
+    ]
+    assert EPHEMERAL_BLOCKS_KEY not in messages[0].additional_kwargs
+    assert 0 in compressor._frozen
diff --git a/tests/unit/agents/test_flash_step_summarizer.py b/tests/unit/agents/test_flash_step_summarizer.py
index b3e4afe..a26bc57 100644
--- a/tests/unit/agents/test_flash_step_summarizer.py
+++ b/tests/unit/agents/test_flash_step_summarizer.py
@@ -569,8 +569,9 @@ async def test_raw_lens_call_meters_llm_usage_without_touching_context_base(mock
 @pytest.mark.asyncio
 async def test_focus_block_and_provenance_marked_action_phrase_reach_the_lens(mock_context):
     """The lens input opens with the action as every history reader sees it
-    (self-described target marked), the verbatim arguments, the outcome, and
-    the operator focus block; the system prompt teaches how to use it."""
+    (self-described target marked), the outcome, and the operator focus
+    block; the phrase already carries every argument, so no verbatim
+    argument line repeats them. The system prompt teaches how to use it."""
     summarizer = VisualStepSummarizer(mock_context)
     captured: list = []
 
@@ -609,9 +610,9 @@ async def test_focus_block_and_provenance_marked_action_phrase_reach_the_lens(mo
     assert "Absence is a fact" in system_text
     assert lead_text.startswith(
         "Step 3 Physical Action: Tapped 'Wi-Fi toggle' (self-described) at [880, 410]\n"
+        "Controller Outcome: Tapped at [880, 410] (normalized)."
     )
-    assert "Action arguments (verbatim): click({'target': [880, 410]" in lead_text
-    assert "Controller Outcome: Tapped at [880, 410] (normalized)." in lead_text
+    assert "Action arguments (verbatim)" not in lead_text
     assert FOCUS_BLOCK_HEADER in lead_text
     assert "Task goal: Turn on Wi-Fi" in lead_text
     assert "Active sub-goal: Enable Wi-Fi > Tap the Wi-Fi switch" in lead_text
@@ -688,6 +689,102 @@ async def test_single_frame_focus_label_forbids_describing_the_outcome(mock_cont
     assert summarizer.get_job_payload(2)["focus"] is None
 
 
+def test_action_phrase_action_name_wins_over_an_action_argument():
+    """``manage_app``'s own ``action="launch"`` argument is the intent the
+    renderer reads, never the verb: the phrase is ``Launched app 'X'`` for
+    the Flash record shape, the Pro record shape and a raw argument dict."""
+    flash_record = {
+        "coordinates": None,
+        "coordinate_space": "normalized",
+        "args": {"action": "launch", "app_name": "Settings"},
+    }
+    assert VisualStepSummarizer._action_phrase("manage_app", flash_record) == (
+        "Launched app 'Settings'"
+    )
+    pro_record = {"intent": "stop", "app_name": "com.android.settings"}
+    assert VisualStepSummarizer._action_phrase("manage_app", pro_record) == (
+        "Stopped app 'com.android.settings'"
+    )
+    raw = {"action": "launch", "app_name": "Settings"}
+    assert VisualStepSummarizer._action_phrase("manage_app", raw) == "Launched app 'Settings'"
+    assert "Action: launch" not in VisualStepSummarizer._action_phrase("manage_app", raw)
+
+    # The Flash record shape renders every other action through the same path.
+    key = {"coordinates": None, "args": {"key": "BACK"}}
+    assert VisualStepSummarizer._action_phrase("press_key", key) == "Pressed key 'BACK'"
+    swipe = {
+        "coordinates": [600, 700, 600, 300],
+        "normalized_start_coordinates": [600, 700],
+        "normalized_end_coordinates": [600, 300],
+        "args": {"direction": "up"},
+    }
+    assert VisualStepSummarizer._action_phrase("swipe", swipe) == (
+        "Swiped up (from [600, 700] to [600, 300])"
+    )
+    index_click = {
+        "coordinates": [500, 520],
+        "normalized_coordinates": [500, 520],
+        "target_text": "Wi-Fi",
+        "args": {"target": 3},
+    }
+    assert VisualStepSummarizer._action_phrase("click", index_click) == (
+        "Tapped 'Wi-Fi' at [500, 520]"
+    )
+
+
+@pytest.mark.asyncio
+async def test_verbatim_argument_line_appears_only_when_the_phrase_folds_arguments(
+    mock_context,
+):
+    """``Launched app 'Settings'`` carries its arguments: no verbatim line. An
+    index target (``target=3``) is folded into the resolved point, so the
+    verbatim line keeps the index the model actually named."""
+    summarizer = VisualStepSummarizer(mock_context)
+    captured: list = []
+
+    async def mock_ainvoke(messages):
+        captured.append(messages)
+        return AIMessage(content="In this step, I acted and the screen showed the result.")
+
+    summarizer._llm = Mock()
+    summarizer._llm.ainvoke = AsyncMock(side_effect=mock_ainvoke)
+
+    summarizer.dispatch(
+        step_number=1,
+        action_name="manage_app",
+        action_args={"coordinates": None, "args": {"action": "launch", "app_name": "Settings"}},
+        pre_img_bytes=b"pre",
+        post_img_bytes=b"post",
+        exec_outcome="Launched app 'Settings' (com.android.settings); foreground confirmed.",
+    )
+    summarizer.dispatch(
+        step_number=2,
+        action_name="click",
+        action_args={
+            "coordinates": [500, 520],
+            "normalized_coordinates": [500, 520],
+            "target_text": "Wi-Fi",
+            "args": {"target": 3},
+        },
+        pre_img_bytes=b"pre",
+        post_img_bytes=b"post",
+        exec_outcome="Tapped at [500, 520] (normalized).",
+    )
+    await summarizer.flush()
+
+    lead_by_step = {}
+    for messages in captured:
+        text = messages[1].content[0]["text"]
+        lead_by_step[text.split(" ")[1]] = text
+    launch = lead_by_step["1"]
+    assert launch.startswith("Step 1 Physical Action: Launched app 'Settings'\nController Outcome:")
+    assert "Action arguments (verbatim)" not in launch
+    assert "Action: launch" not in launch
+    click = lead_by_step["2"]
+    assert click.startswith("Step 2 Physical Action: Tapped 'Wi-Fi' at [500, 520]\n")
+    assert "Action arguments (verbatim): click({'target': 3})" in click
+
+
 def test_action_phrase_renders_flash_swipe_points_and_bursts():
     """Flash's ``start``/``end`` swipe points and a Pro burst's additional
     actions render through the shared history phrase, never as None."""
diff --git a/tests/unit/agents/test_history_analyzer.py b/tests/unit/agents/test_history_analyzer.py
index 41ba692..201615d 100644
--- a/tests/unit/agents/test_history_analyzer.py
+++ b/tests/unit/agents/test_history_analyzer.py
@@ -263,9 +263,9 @@ async def test_history_analyzer_read_note_tool_call():
         ]  # Index 5 contains the ToolMessage for read_note
         assert isinstance(read_msg, ToolMessage)
         assert read_msg.tool_call_id == "call_read"
-        assert (
-            read_msg.content == "Successfully read note 'tactical_plan'. 'tactical_plan' note"
-            f" content:\n{fake_plan_content}"
+        assert read_msg.content == (
+            f"Note 'tactical_plan' ({len(fake_plan_content.splitlines())} lines):"
+            f"\n{fake_plan_content}"
         )
 
 
@@ -306,10 +306,7 @@ def test_history_analyzer_robust_tools_behavior():
         patch("pathlib.Path.read_text", return_value="Tactical plan content"),
     ):
         result_read = read_tool.invoke({"key": "tactical_plan.md"})
-        assert (
-            result_read == "Successfully read note 'tactical_plan.md'. 'tactical_plan.md'"
-            " note content:\nTactical plan content"
-        )
+        assert result_read == "Note 'tactical_plan.md' (1 lines):\nTactical plan content"
 
 
 @pytest.mark.asyncio
diff --git a/tests/unit/agents/test_operator.py b/tests/unit/agents/test_operator.py
index 539b738..5fcfb7c 100644
--- a/tests/unit/agents/test_operator.py
+++ b/tests/unit/agents/test_operator.py
@@ -399,6 +399,14 @@ async def test_operator_node_multiple_actions():
         assert decisions[1]["action"] == "tap"
         assert decisions[1]["coordinates"] == [54, 120]
 
+        # Each action's ToolMessage names its tool, like helper-tool results do
+        # (the loop appends them to the same list it sent to the model).
+        from langchain_core.messages import ToolMessage
+
+        sent = mock_llm.ainvoke.call_args[0][0]
+        recorded = [(m.name, m.content) for m in sent if isinstance(m, ToolMessage)]
+        assert recorded == [("input_text", "Action Recorded"), ("click", "Action Recorded")]
+
 
 @pytest.mark.asyncio
 async def test_operator_node_no_record_step():
@@ -1467,6 +1475,40 @@ async def test_operator_swipe_translation():
     assert actions[0]["coordinates"] == [648, 720, 648, 1680]
 
 
+@pytest.mark.asyncio
+async def test_operator_press_key_translation_is_case_insensitive():
+    from artemis.agents.operator.operator import OperatorNode
+    from artemis.context import ArtemisContext
+    from unittest.mock import MagicMock
+
+    mock_ctx = MagicMock(spec=ArtemisContext)
+    mock_state = MagicMock()
+    mock_state.operator_raw_data = {"width": 1080, "height": 2400}
+    node = OperatorNode(mock_ctx, transcript_config=LEGACY_TRANSCRIPT)
+
+    for spelling in ("back", "Back", "BACK", "KEYCODE_BACK", "keycode_back", " back "):
+        actions, err = node._translate_and_validate_tool(
+            {"name": "press_key", "args": {"key": spelling}}, mock_state
+        )
+        assert err is None, spelling
+        assert actions == [{"action": "press_key", "keycode": "KEYCODE_BACK"}], spelling
+
+    actions, err = node._translate_and_validate_tool(
+        {"name": "press_key", "args": {"key": "app_switch"}}, mock_state
+    )
+    assert err is None
+    assert actions == [{"action": "press_key", "keycode": "KEYCODE_APP_SWITCH"}]
+
+    # Unsupported keys get a self-explanatory error that lists the accepted names.
+    actions, err = node._translate_and_validate_tool(
+        {"name": "press_key", "args": {"key": "volume_up"}}, mock_state
+    )
+    assert actions == []
+    assert err == (
+        "Error: Unsupported key 'volume_up'. Supported keys: ENTER, BACK, HOME, APP_SWITCH."
+    )
+
+
 # --- helper tool results: status is structural, never sniffed from the words ----------
 
 
@@ -1537,5 +1579,79 @@ async def test_operator_helper_tool_message_status_is_structural(result, expecte
     tool_msgs = {m.tool_call_id: m for m in second_turn_messages if isinstance(m, ToolMessage)}
     assert tool_msgs["call_read"].status == expected_status
     assert tool_msgs["call_read"].content == str(result)
-    # The accompanying click is rejected only when the helper actually failed.
-    assert tool_msgs["call_click"].status == ("error" if expected_status == "error" else "success")
+    # The accompanying click never ran: rejected when the helper failed, deferred
+    # otherwise. Both are reported as errors and never claim success.
+    assert tool_msgs["call_click"].status == "error"
+    assert tool_msgs["call_click"].content.startswith("Not executed:")
+    assert "success" not in tool_msgs["call_click"].content.lower()
+    if expected_status == "error":
+        assert str(result) in tool_msgs["call_click"].content
+    else:
+        assert "deferred" in tool_msgs["call_click"].content
+
+
+@pytest.mark.asyncio
+async def test_operator_burst_limit_error_text_is_not_repeated_per_call():
+    """An over-long burst answers every tool_call id, but the full burst-limit
+    paragraph travels once; the remaining ToolMessages just point at it."""
+    from langchain_core.messages import ToolMessage
+
+    mock_ctx = MagicMock(spec=ArtemisContext)
+    mock_ctx.execution_setup = None
+    mock_ctx.data_engine = None
+
+    mock_state = MagicMock()
+    mock_state.subagent_calls = []
+    mock_state.initial_goal = "Test goal"
+    mock_state.open_incident = None
+
+    turn_1 = MagicMock()
+    turn_1.tool_calls = [
+        {
+            "name": "click",
+            "args": {"target": [50, 50], "target_description": f"button {i}"},
+            "id": f"call_click_{i}",
+        }
+        for i in range(6)
+    ]
+    turn_2 = MagicMock()
+    turn_2.tool_calls = [
+        {
+            "name": "click",
+            "args": {"target": [50, 50], "target_description": "button"},
+            "id": "call_click_final",
+        }
+    ]
+    mock_llm = MagicMock()
+    mock_llm.ainvoke = AsyncMock(side_effect=[turn_1, turn_2])
+    mock_llm.bind_tools.return_value = mock_llm
+
+    with (
+        patch("artemis.agents.operator.operator.get_llm", return_value=mock_llm),
+        patch.object(OperatorNode, "_max_burst_actions", return_value=4),
+    ):
+        node = OperatorNode(mock_ctx, transcript_config=LEGACY_TRANSCRIPT)
+        node_update = await node(mock_state)
+
+    assert mock_llm.ainvoke.await_count == 2
+    second_turn_messages = mock_llm.ainvoke.call_args_list[1].args[0]
+    burst_ids = {f"call_click_{i}" for i in range(6)}
+    tool_msgs = {
+        m.tool_call_id: m
+        for m in second_turn_messages
+        if isinstance(m, ToolMessage) and m.tool_call_id in burst_ids
+    }
+    assert set(tool_msgs) == burst_ids
+    assert all(m.status == "error" for m in tool_msgs.values())
+
+    first = tool_msgs["call_click_0"].content
+    assert first.startswith("Error: 6 Turn-Ending Actions in one turn exceed")
+    assert "burst limit of 4" in first
+    for i in range(1, 6):
+        assert tool_msgs[f"call_click_{i}"].content == (
+            "Not executed: see the burst-limit error above."
+        )
+
+    # Nothing from the rejected burst ran; turn 2's single click did.
+    decisions = json.loads(node_update["structured_decisions"])
+    assert len(decisions) == 1 and decisions[0]["action"] == "tap"
diff --git a/tests/unit/agents/test_operator_prompt_estimate.py b/tests/unit/agents/test_operator_prompt_estimate.py
new file mode 100644
index 0000000..5332d49
--- /dev/null
+++ b/tests/unit/agents/test_operator_prompt_estimate.py
@@ -0,0 +1,122 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""The Pro operator's context base on a provider without usage metadata.
+
+The transcript ledger's start gate and soft/hard thresholds read the
+operator's own measured prompt size; when the provider reports no usage the
+operator records a provider-less estimate instead (Flash already does), so
+the thresholds still see a base. A measured call also hands the ledger the
+messages it was measured on, for the chars-per-token calibration.
+"""
+
+import base64
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+
+from artemis.agents.operator.operator import OperatorNode
+from artemis.config.agent import MemoryTranscriptConfig
+from artemis.context import ArtemisContext
+from artemis.memory.step_memory import StepMemoryService
+from artemis.memory.transcript import TranscriptLedger, estimate_prompt_tokens
+
+SCREENSHOT_B64 = base64.b64encode(b"fake-jpeg-bytes").decode("utf-8")
+
+
+def _ctx():
+    ctx = MagicMock(spec=ArtemisContext)
+    ctx.execution_setup = None
+    ctx.actuator = None
+    ctx.data_engine = None
+    ctx.step_memory = StepMemoryService(ctx=None)
+    ctx.transcript_ledger = None
+    return ctx
+
+
+def _state():
+    state = MagicMock()
+    state.subagent_calls = []
+    state.initial_goal = "Estimate goal"
+    state.operator_feedback = None
+    state.injected_instruction = None
+    state.operator_tool_limit_exceeded = False
+    state.structured_decisions = None
+    state.last_execution_result = None
+    state.current_step_id = None
+    state.latest_ui_hierarchy = []
+    state.operator_raw_data = {
+        "screenshot_b64": SCREENSHOT_B64,
+        "xml_hierarchy": [],
+        "ocr_results": None,
+        "width": 1080,
+        "height": 2400,
+    }
+    return state
+
+
+def _llm(captured: list, usage_metadata=None):
+    mock_llm = MagicMock()
+    response = MagicMock()
+    response.tool_calls = []
+    response.content = "no action this turn"
+    # usage_from_message only trusts a non-empty dict; a MagicMock attribute
+    # (the default) reads as "no usage reported".
+    if usage_metadata is not None:
+        response.usage_metadata = usage_metadata
+
+    async def ainvoke(*args, **kwargs):
+        captured.append(list(args[0]))
+        return response
+
+    mock_llm.ainvoke = AsyncMock(side_effect=ainvoke)
+    mock_llm.bind_tools.return_value = mock_llm
+    return mock_llm
+
+
+@pytest.mark.asyncio
+async def test_operator_records_an_estimate_when_the_provider_reports_no_usage():
+    ctx = _ctx()
+    captured: list = []
+    with patch("artemis.agents.operator.operator.get_llm", return_value=_llm(captured)):
+        node = OperatorNode(ctx, transcript_config=MemoryTranscriptConfig(enabled=True))
+        await node(_state())
+
+    ledger = ctx.transcript_ledger
+    assert isinstance(ledger, TranscriptLedger)
+    assert captured, "the operator made no model call"
+    assert ledger.last_prompt_tokens == estimate_prompt_tokens(captured[-1])
+    assert ledger.last_prompt_tokens > 0
+    # No measurement, no calibration.
+    assert ledger.chars_per_token == 4.0
+
+
+@pytest.mark.asyncio
+async def test_operator_measured_usage_calibrates_the_ledger_ratio():
+    ctx = _ctx()
+    captured: list = []
+    llm = _llm(
+        captured,
+        usage_metadata={"input_tokens": 50_000, "output_tokens": 10, "total_tokens": 50_010},
+    )
+    with patch("artemis.agents.operator.operator.get_llm", return_value=llm):
+        node = OperatorNode(ctx, transcript_config=MemoryTranscriptConfig(enabled=True))
+        await node(_state())
+
+    ledger = ctx.transcript_ledger
+    assert ledger.last_prompt_tokens == 50_000
+    # The prompt is a few thousand chars of English plus one image; measured
+    # at 50k tokens the ratio clamps to the lower bound — proof the messages
+    # reached the calibration, not just the token figure.
+    assert ledger.chars_per_token == 1.0
diff --git a/tests/unit/agents/test_operator_reasoning_reminder.py b/tests/unit/agents/test_operator_reasoning_reminder.py
new file mode 100644
index 0000000..f9b965e
--- /dev/null
+++ b/tests/unit/agents/test_operator_reasoning_reminder.py
@@ -0,0 +1,147 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Tests for the Operator reasoning reminder.
+
+Thinking-mode models satisfy "reason before acting" inside their thought channel
+and emit bare tool calls. After such a silent turn the next observation tail
+carries a one-line reminder; nothing is bounced and no extra model call is made.
+"""
+
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+
+from artemis.agents.operator.operator import OperatorNode
+from artemis.agents.operator.prompts import (
+    REASONING_REMINDER,
+    apply_operator_prompt_contract,
+    load_operator_prompts,
+)
+from artemis.config.agent import MemoryTranscriptConfig
+from artemis.context import ArtemisContext
+
+LEGACY_TRANSCRIPT = MemoryTranscriptConfig(enabled=False)
+
+PLAN_WITH_LEAF = """- [x] Open Google Maps and search for SFO
+- [/] Read the commute duration and record it into note `commute_eta_info`
+  - [/] Read the driving duration
+    - [/] Tap the "Driving" tab so the fastest route is highlighted
+- [ ] Draft the ETA message
+"""
+
+
+def _make_node(tmp_path):
+    notes = tmp_path / "notes"
+    notes.mkdir(parents=True)
+    (notes / "task_plan.md").write_text(PLAN_WITH_LEAF, encoding="utf-8")
+
+    ctx = MagicMock(spec=ArtemisContext)
+    ctx.execution_setup = None
+    ctx.data_engine = MagicMock()
+    ctx.data_engine.base_dir = str(tmp_path)
+    ctx.data_engine.current_session_id = "s"
+    ctx.data_engine.get_agent_friendly_steps.return_value = []
+
+    state = MagicMock()
+    state.subagent_calls = []
+    state.initial_goal = "goal"
+    state.open_incident = None
+    return OperatorNode(ctx, transcript_config=LEGACY_TRANSCRIPT), state
+
+
+def _click_response(content):
+    response = MagicMock()
+    response.content = content
+    response.tool_calls = [
+        {
+            "name": "click",
+            "args": {"target": [50, 50], "target_description": "button"},
+            "id": "call_0",
+        }
+    ]
+    return response
+
+
+def _texts(messages):
+    out = []
+    for m in messages:
+        content = getattr(m, "content", None)
+        if isinstance(content, str):
+            out.append(content)
+        elif isinstance(content, list):
+            out.extend(b.get("text", "") for b in content if isinstance(b, dict))
+    return "\n".join(out)
+
+
+@pytest.mark.asyncio
+async def test_reminder_follows_a_silent_turn_and_costs_no_extra_call(tmp_path):
+    node, state = _make_node(tmp_path)
+    seen = []
+    replies = iter(
+        [
+            _click_response(""),  # turn 1: silent
+            _click_response("Tapping the Driving tab."),  # turn 2: reminded, speaks
+            _click_response([{"type": "thinking", "thinking": "internal"}]),  # turn 3: silent
+            _click_response("Done."),  # turn 4
+        ]
+    )
+
+    async def ainvoke(messages, *args, **kwargs):
+        seen.append(list(messages))
+        return next(replies)
+
+    llm = MagicMock()
+    llm.ainvoke = AsyncMock(side_effect=ainvoke)
+    llm.bind_tools.return_value = llm
+    with patch("artemis.agents.operator.operator.get_llm", return_value=llm):
+        for _ in range(4):
+            await node(state)
+
+    assert llm.ainvoke.await_count == 4, "one model call per turn, never a bounce"
+    assert REASONING_REMINDER not in _texts(seen[0])  # nothing to remind on turn 1
+    assert REASONING_REMINDER in _texts(seen[1])  # turn 1 was silent
+    assert REASONING_REMINDER not in _texts(seen[2])  # turn 2 spoke
+    assert REASONING_REMINDER in _texts(seen[3])  # thinking-only turn 3 counts as silent
+    assert _texts(seen[3]).count(REASONING_REMINDER) == 1
+
+
+def test_ledger_silence_verdict_outranks_the_local_flag(tmp_path):
+    """With a transcript ledger, the ledger's own judgment of the previous
+    turn is authoritative; the local flag only serves the legacy path."""
+    from artemis.memory import TranscriptLedger
+
+    node, _ = _make_node(tmp_path)
+    node._previous_turn_silent = True
+    assert node._previous_turn_was_silent() is True  # no ledger: local flag
+
+    ledger = MagicMock(spec=TranscriptLedger)
+    ledger.last_turn_silent = False
+    node.ctx.transcript_ledger = ledger
+    assert node._previous_turn_was_silent() is False
+
+    ledger.last_turn_silent = True
+    node._previous_turn_silent = False
+    assert node._previous_turn_was_silent() is True
+
+
+def test_prompt_asks_for_one_paragraph_not_phase_sections():
+    prompt = apply_operator_prompt_contract(load_operator_prompts()["main_template"])
+    assert prompt.count("one short paragraph of connected prose reflecting these three phases") == 1
+    assert "in your raw thinking" not in prompt
+    assert "in your written reply" not in prompt
+    assert (
+        "bounced"
+        not in prompt.split("# THE THREE-PHASE COGNITIVE PROTOCOL")[1].split("## Phase 1")[0]
+    )
diff --git a/tests/unit/agents/test_operator_transcript.py b/tests/unit/agents/test_operator_transcript.py
index 4334f7b..0fa9b5b 100644
--- a/tests/unit/agents/test_operator_transcript.py
+++ b/tests/unit/agents/test_operator_transcript.py
@@ -45,6 +45,7 @@ from artemis.config.agent import MemoryTranscriptConfig
 from artemis.context import ArtemisContext
 from artemis.memory.step_memory import StepMemoryService
 from artemis.memory.transcript import (
+    EPHEMERAL_BLOCKS_KEY,
     EXECUTION_RESULT_MARKER,
     PLAN_RECITATION_MARKER,
     RESTORED_HISTORY_HEADER,
@@ -53,8 +54,8 @@ from artemis.memory.transcript import (
 
 # SHA-256 snapshots of the legacy system message with the fixed inputs below.
 # Update these when an intentional template change alters the rendered prompt.
-GOLDEN_EMPTY_PLAN = "d8cf83565c766d32893b124c974060bbd98de2d862c3b9925e546ea0c946c324"
-GOLDEN_SENTINEL_PLAN = "8f871b5e5700ba5ee07ed03b80a8f82664abe68b0c170d3185bf1ee35f7821ed"
+GOLDEN_EMPTY_PLAN = "513e0341014b9a2342f608ad4dd173b7dcf5704ce53ee028ba302a9a1b696f96"
+GOLDEN_SENTINEL_PLAN = "012fe1b08645266d5a7e518023e20fc6fbfa65d4f2d985847ebb06e0184c67ee"
 
 SCREENSHOT_B64 = base64.b64encode(b"fake-jpeg-bytes").decode("utf-8")
 
@@ -103,6 +104,8 @@ def test_transcript_static_system_is_stable_and_carries_no_history():
     # ...and no unrendered slot or trailing observation header survives.
     assert "{{" not in first
     assert not first.endswith("# CURRENT OBSERVATION\n")
+    # The history guide names the marker a resolved screenshot renders as.
+    assert "--- Historical Visual Transition ---" in first
 
 
 def _transcript_ctx():
@@ -214,7 +217,9 @@ async def test_transcript_mode_two_turns_build_four_regions(tmp_path):
         # Committed turn-1 observation followed by its validator result.
         assert any(EXECUTION_RESULT_MARKER in str(m.content) for m in active)
         committed_obs = active[0]
-        # Depth-1 scrub removed the old plan recitation copy.
+        # Text edge at depth 1: the committed observation has lost its plan
+        # recitation as soon as the next tail exists (its screenshot stays
+        # until the screenshot edge).
         assert PLAN_RECITATION_MARKER not in str(committed_obs.content)
         # The live tail still recites the plan.
         assert PLAN_RECITATION_MARKER in str(turn2_messages[-1].content)
@@ -223,6 +228,52 @@ async def test_transcript_mode_two_turns_build_four_regions(tmp_path):
         assert re.search(r"T\+\d{2,}:\d{2}", str(turn2_messages[-1].content))
 
 
+@pytest.mark.asyncio
+async def test_transcript_tail_marks_per_turn_notices_ephemeral():
+    """The hand-built tail carries the builder's ephemeral indices: per-turn
+    notices are deleted by the scrub edge; header, plan recitation and the
+    observation itself are not."""
+    from artemis.agents.operator.prompts import USER_GUIDANCE_MARKER
+
+    ctx = _transcript_ctx()
+    captured: list = []
+    mock_llm = _no_action_llm(captured)
+    with patch("artemis.agents.operator.operator.get_llm", return_value=mock_llm):
+        node = OperatorNode(ctx, transcript_config=MemoryTranscriptConfig(enabled=True))
+        await node(
+            _transcript_state(
+                injected_instruction="Skip the login step",
+                user_stop_requested=False,
+                operator_tool_limit_exceeded=True,
+            )
+        )
+
+    tail = captured[0][-1]
+    assert isinstance(tail, HumanMessage)
+    texts = {
+        i: block.get("text", "")
+        for i, block in enumerate(tail.content)
+        if isinstance(block, dict) and block.get("type") == "text"
+    }
+    guidance = next(i for i, t in texts.items() if t.startswith(USER_GUIDANCE_MARKER))
+    warning = next(i for i, t in texts.items() if "tool-call budget" in t)
+    assert set(tail.additional_kwargs[EPHEMERAL_BLOCKS_KEY]) == {guidance, warning}
+    # The user's stop bit is relayed on the guidance block itself.
+    assert "authorized stopping" not in texts[guidance]
+    # The verbatim instruction is its own persistent block right after the
+    # wrapper (stamped with the ledger's session offset), never ephemeral:
+    # a standing instruction must outlive the turn it arrived on.
+    body = guidance + 1
+    assert re.fullmatch(r'User instruction \(T\+\d{2,}:\d{2}\): "Skip the login step"', texts[body])
+    assert body not in tail.additional_kwargs[EPHEMERAL_BLOCKS_KEY]
+    assert "Skip the login step" not in texts[guidance]
+    # Header, plan recitation and the observation stay in the history.
+    assert texts[0].startswith("# CURRENT OBSERVATION")
+    plan = next(i for i, t in texts.items() if t.startswith(PLAN_RECITATION_MARKER))
+    screenshot = next(i for i, t in texts.items() if t == "--- Current Screenshot ---")
+    assert not {0, plan, screenshot} & set(tail.additional_kwargs[EPHEMERAL_BLOCKS_KEY])
+
+
 @pytest.mark.asyncio
 async def test_transcript_actionless_turn_commits_without_validator_message():
     ctx = _transcript_ctx()
diff --git a/tests/unit/agents/test_outputter.py b/tests/unit/agents/test_outputter.py
index d8b0875..668e5b3 100644
--- a/tests/unit/agents/test_outputter.py
+++ b/tests/unit/agents/test_outputter.py
@@ -287,7 +287,7 @@ async def test_outputter_builds_concise_history(mock_get_llm):
         }
     ]
     mock_data_engine.get_agent_friendly_steps.return_value = steps
-    # M5: the transcript flag defaults on, so the outputter's compiled view
+    # The transcript flag defaults on, so the outputter's compiled view
     # consults the chunk store; no persisted chunks keeps the classic path.
     mock_data_engine.get_history_chunks.return_value = []
     mock_data_engine.base_dir = "/tmp/mock_session"
diff --git a/tests/unit/agents/test_summarizer.py b/tests/unit/agents/test_summarizer.py
index 25ae28d..9166b74 100644
--- a/tests/unit/agents/test_summarizer.py
+++ b/tests/unit/agents/test_summarizer.py
@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-"""SummarizerNode tests (M2: visual-transition lens dispatch).
+"""Tests for SummarizerNode visual-transition dispatch.
 
 Per the history redesign §5 the Pro SummarizerNode no longer runs its own LLM
 call to produce a text capsule: it dispatches the step to the shared
diff --git a/tests/unit/core/test_device_smoke.py b/tests/unit/core/test_device_smoke.py
new file mode 100644
index 0000000..605d54b
--- /dev/null
+++ b/tests/unit/core/test_device_smoke.py
@@ -0,0 +1,364 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Unit tests for the end-to-end device observation smoke test (no real device)."""
+
+import asyncio
+import base64
+from types import SimpleNamespace
+from unittest.mock import AsyncMock, MagicMock
+
+import pytest
+
+from artemis.core.diagnostics import smoke_test_device
+from artemis.core.diagnostics import device_smoke
+from artemis.runtime.device_lock import DeviceExecutionLock, DeviceLockOwner
+
+SERIAL = "59100DLCR0033X"
+FAKE_JPEG = b"\xff\xd8\xff" + bytes(range(256)) * 8 + b"\xff\xd9"
+
+
+@pytest.fixture(autouse=True)
+def idle_devices(monkeypatch):
+    """No live lock owners unless a test installs some."""
+    monkeypatch.setattr(DeviceExecutionLock, "get_active_owners", classmethod(lambda cls: {}))
+    monkeypatch.delenv("ARTEMIS_DEVICE_ID", raising=False)
+    monkeypatch.delenv("ADB_DEVICE_SERIAL", raising=False)
+
+
+@pytest.fixture
+def patch_controller(monkeypatch):
+    """Install a fake ``_get_controller`` and return the controller it hands out."""
+
+    def _install(get_screen_data=None, factory=None):
+        controller = MagicMock()
+        controller.ctx = SimpleNamespace(device=SimpleNamespace(device_id=SERIAL))
+        if get_screen_data is not None:
+            controller.get_screen_data = get_screen_data
+        calls: list[str | None] = []
+
+        def _fake_get_controller(device_serial=None):
+            calls.append(device_serial)
+            if factory is not None:
+                return factory(device_serial)
+            return controller
+
+        monkeypatch.setattr("artemis.mcp.adb_server._get_controller", _fake_get_controller)
+        controller.calls = calls
+        return controller
+
+    return _install
+
+
+def _screen_data(elements, jpeg=FAKE_JPEG):
+    return SimpleNamespace(
+        base64=base64.b64encode(jpeg).decode("ascii"),
+        elements=elements,
+        width=1080,
+        height=2400,
+    )
+
+
+@pytest.mark.asyncio
+async def test_success_reports_bytes_elements_serial_and_elapsed(patch_controller):
+    elements = [{"class": "android.widget.FrameLayout"}, {"text": "Hello"}, {"text": "World"}]
+    controller = patch_controller(AsyncMock(return_value=_screen_data(elements)))
+
+    result = await smoke_test_device(device_serial=SERIAL, timeout_seconds=5)
+
+    assert result["ok"] is True
+    assert result["error"] is None
+    assert result["fix"] == []
+    assert result["serial"] == SERIAL
+    assert result["screenshot_bytes"] == len(FAKE_JPEG)
+    assert result["element_count"] == 3
+    assert isinstance(result["elapsed_seconds"], float)
+    assert result["elapsed_seconds"] >= 0.0
+    assert controller.calls == [SERIAL]
+    controller.get_screen_data.assert_awaited_once()
+    assert set(result) == {
+        "ok",
+        "serial",
+        "elapsed_seconds",
+        "screenshot_bytes",
+        "element_count",
+        "error",
+        "fix",
+    }
+
+
+@pytest.mark.asyncio
+async def test_serial_comes_from_controller_when_not_requested(patch_controller):
+    patch_controller(AsyncMock(return_value=_screen_data([{"text": "x"}])))
+
+    result = await smoke_test_device()
+
+    assert result["ok"] is True
+    assert result["serial"] == SERIAL
+
+
+@pytest.mark.asyncio
+async def test_xml_string_elements_are_counted_by_node(patch_controller):
+    xml = '<hierarchy><node class="a"><node class="b"/><node class="c"/></node></hierarchy>'
+    patch_controller(AsyncMock(return_value=_screen_data(xml)))
+
+    result = await smoke_test_device(device_serial=SERIAL)
+
+    assert result["ok"] is True
+    assert result["element_count"] == 3
+
+
+@pytest.mark.asyncio
+async def test_init_failure_no_devices_points_to_launch_avd(patch_controller):
+    def _boom(device_serial):
+        raise Exception("No Android devices found at localhost:5037")
+
+    patch_controller(factory=_boom)
+
+    result = await smoke_test_device(device_serial=SERIAL, timeout_seconds=5)
+
+    assert result["ok"] is False
+    assert result["serial"] == SERIAL
+    assert result["screenshot_bytes"] is None
+    assert result["element_count"] is None
+    assert "No Android devices found" in result["error"]
+    assert any("launch_avd" in step for step in result["fix"])
+    assert any("mobile_diagnose" in step for step in result["fix"])
+
+
+@pytest.mark.asyncio
+async def test_init_failure_target_not_found_points_to_launch_avd(patch_controller):
+    def _boom(device_serial):
+        raise Exception(
+            f"Target Android device '{device_serial}' not found at localhost:5037 among available devices."
+        )
+
+    patch_controller(factory=_boom)
+
+    result = await smoke_test_device(device_serial="emulator-5554")
+
+    assert result["ok"] is False
+    assert result["serial"] == "emulator-5554"
+    assert any("launch_avd" in step for step in result["fix"])
+
+
+@pytest.mark.asyncio
+async def test_screen_data_timeout_reports_timeout_and_force_stop(patch_controller):
+    async def _hang():
+        await asyncio.sleep(3)
+        return _screen_data([{"text": "late"}])
+
+    patch_controller(_hang)
+
+    result = await smoke_test_device(device_serial=SERIAL, timeout_seconds=0.3)
+
+    assert result["ok"] is False
+    assert result["serial"] == SERIAL
+    assert result["error"] == "UIAutomator/screen capture did not respond within 0.3s"
+    assert result["elapsed_seconds"] < 2.5
+    joined = "\n".join(result["fix"])
+    assert f"adb -s {SERIAL} shell am force-stop com.github.uiautomator" in joined
+    assert "uiautomator2 init" in joined
+    assert "screen on" in joined
+
+
+@pytest.mark.asyncio
+async def test_init_timeout_is_reported_without_blocking(patch_controller):
+    import time
+
+    def _slow(device_serial):
+        time.sleep(2)
+        return MagicMock()
+
+    patch_controller(factory=_slow)
+
+    result = await smoke_test_device(device_serial=SERIAL, timeout_seconds=0.3)
+
+    assert result["ok"] is False
+    assert "did not respond within 0.3s" in result["error"]
+    assert result["elapsed_seconds"] < 1.5
+    assert any("force-stop" in step for step in result["fix"])
+
+
+@pytest.mark.asyncio
+async def test_generic_screen_data_exception_falls_back_to_manual_dump(patch_controller):
+    patch_controller(AsyncMock(side_effect=RuntimeError("weird failure 42")))
+
+    result = await smoke_test_device(device_serial=SERIAL)
+
+    assert result["ok"] is False
+    assert result["error"] == "Screen capture failed: weird failure 42"
+    assert any("uiautomator dump" in step for step in result["fix"])
+
+
+@pytest.mark.asyncio
+async def test_base_exception_from_uiautomator2_is_captured_not_raised(patch_controller):
+    class HTTPTimeoutError(BaseException):
+        """uiautomator2 errors derive from BaseException."""
+
+    patch_controller(
+        AsyncMock(side_effect=HTTPTimeoutError("HTTP request timeout: read timed out"))
+    )
+
+    result = await smoke_test_device(device_serial=SERIAL)
+
+    assert result["ok"] is False
+    assert "HTTPTimeoutError" in result["error"]
+    assert any("force-stop" in step for step in result["fix"])
+
+
+@pytest.mark.asyncio
+async def test_unauthorized_and_offline_guidance(patch_controller):
+    def _unauth(device_serial):
+        raise Exception("device unauthorized. This adb server's $ADB_VENDOR_KEYS is not set")
+
+    patch_controller(factory=_unauth)
+    result = await smoke_test_device(device_serial=SERIAL)
+    assert result["ok"] is False
+    assert any("USB debugging" in step for step in result["fix"])
+
+    def _offline(device_serial):
+        raise Exception("device offline")
+
+    patch_controller(factory=_offline)
+    result = await smoke_test_device(device_serial=SERIAL)
+    assert result["ok"] is False
+    assert any("adb reconnect" in step for step in result["fix"])
+
+
+@pytest.mark.asyncio
+async def test_empty_hierarchy_is_not_ok(patch_controller):
+    patch_controller(AsyncMock(return_value=_screen_data([])))
+
+    result = await smoke_test_device(device_serial=SERIAL)
+
+    assert result["ok"] is False
+    assert result["screenshot_bytes"] == len(FAKE_JPEG)
+    assert result["element_count"] == 0
+    assert "no UI elements" in result["error"]
+    assert any("force-stop" in step for step in result["fix"])
+
+
+@pytest.mark.asyncio
+async def test_placeholder_screenshot_is_not_ok(patch_controller):
+    one_pixel_png = base64.b64decode(
+        "iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAADUlEQVR42mNk+M9QDwADhgGAWjR9awAAAABJRU5ErkJggg=="
+    )
+    patch_controller(AsyncMock(return_value=_screen_data([{"text": "x"}], jpeg=one_pixel_png)))
+
+    result = await smoke_test_device(device_serial=SERIAL)
+
+    assert result["ok"] is False
+    assert result["screenshot_bytes"] == len(one_pixel_png)
+    assert "placeholder" in result["error"]
+
+
+def _owner(device_id: str, description: str = "task-1") -> DeviceLockOwner:
+    return DeviceLockOwner(
+        pid=4242,
+        process_created_at=1.0,
+        token="tok",
+        device_id=device_id,
+        description=description,
+        acquired_at="2026-09-09T00:00:00Z",
+    )
+
+
+@pytest.mark.asyncio
+async def test_busy_device_is_reported_without_touching_the_controller(
+    patch_controller, monkeypatch
+):
+    controller = patch_controller(AsyncMock(return_value=_screen_data([{"text": "x"}])))
+    monkeypatch.setattr(
+        DeviceExecutionLock,
+        "get_active_owners",
+        classmethod(lambda cls: {SERIAL: _owner(SERIAL, "youtube smoke")}),
+    )
+
+    result = await smoke_test_device(device_serial=SERIAL)
+
+    assert result["ok"] is False
+    assert result["serial"] == SERIAL
+    assert "busy" in result["error"]
+    assert "youtube smoke" in result["error"]
+    assert "4242" in result["error"]
+    assert any("mobile_manage_task" in step for step in result["fix"])
+    assert controller.calls == []
+    controller.get_screen_data.assert_not_awaited()
+
+
+@pytest.mark.asyncio
+async def test_busy_guard_matches_scoped_lock_keys(patch_controller, monkeypatch):
+    controller = patch_controller(AsyncMock(return_value=_screen_data([{"text": "x"}])))
+    monkeypatch.setattr(
+        DeviceExecutionLock,
+        "get_active_owners",
+        classmethod(lambda cls: {f"endpoint1__{SERIAL}": _owner(SERIAL)}),
+    )
+
+    result = await smoke_test_device(device_serial=SERIAL)
+
+    assert result["ok"] is False
+    assert "busy" in result["error"]
+    assert controller.calls == []
+
+
+@pytest.mark.asyncio
+async def test_busy_guard_ignores_other_devices(patch_controller, monkeypatch):
+    controller = patch_controller(AsyncMock(return_value=_screen_data([{"text": "x"}])))
+    monkeypatch.setattr(
+        DeviceExecutionLock,
+        "get_active_owners",
+        classmethod(lambda cls: {"emulator-5554": _owner("emulator-5554")}),
+    )
+
+    result = await smoke_test_device(device_serial=SERIAL)
+
+    assert result["ok"] is True
+    assert controller.calls == [SERIAL]
+
+
+@pytest.mark.asyncio
+async def test_busy_guard_without_target_serial_treats_any_owner_as_busy(
+    patch_controller, monkeypatch
+):
+    controller = patch_controller(AsyncMock(return_value=_screen_data([{"text": "x"}])))
+    monkeypatch.setattr(
+        DeviceExecutionLock,
+        "get_active_owners",
+        classmethod(lambda cls: {"emulator-5554": _owner("emulator-5554")}),
+    )
+
+    result = await smoke_test_device()
+
+    assert result["ok"] is False
+    assert result["serial"] == "emulator-5554"
+    assert "busy" in result["error"]
+    assert controller.calls == []
+
+
+def test_fix_for_error_generic_fallback_uses_serial():
+    fix = device_smoke.fix_for_error("something odd", SERIAL)
+    assert fix
+    assert all(SERIAL in step for step in fix)
+    assert any("uiautomator dump" in step for step in fix)
+    assert device_smoke.fix_for_error(None, SERIAL) == []
+    assert "<serial>" in device_smoke.fix_for_error("timeout", None)[1]
+
+
+def test_smoke_test_is_exported_from_diagnostics_package():
+    import artemis.core.diagnostics as diagnostics
+
+    assert "smoke_test_device" in diagnostics.__all__
+    assert diagnostics.smoke_test_device is device_smoke.smoke_test_device
diff --git a/tests/unit/core/test_diagnostics.py b/tests/unit/core/test_diagnostics.py
index 22b7ed0..322c0f2 100644
--- a/tests/unit/core/test_diagnostics.py
+++ b/tests/unit/core/test_diagnostics.py
@@ -429,3 +429,87 @@ async def test_emulator_manager_lifecycle():
     dismiss_res = manager.dismiss()
     assert dismiss_res["success"] is True
     assert manager.get_status().status == EmulatorLaunchStage.IDLE
+
+
+@pytest.mark.asyncio
+async def test_build_report_turns_crashing_probe_into_fail_result():
+    engine = ReadinessEngine()
+    healthy = ProbeResult(
+        id="healthy",
+        category=ProbeCategory.RUNTIME,
+        title="Healthy",
+        status=ProbeStatus.PASS,
+        is_blocker=True,
+        summary="Ready",
+        description="Ready",
+    )
+    good = Mock()
+    good.probe_id = "healthy"
+    good.category = ProbeCategory.RUNTIME
+    good.is_blocker = True
+    good.probe = AsyncMock(return_value=healthy)
+
+    bad = Mock()
+    bad.probe_id = "integration_host"
+    bad.category = ProbeCategory.RUNTIME
+    bad.is_blocker = True
+    bad.probe = AsyncMock(side_effect=PermissionError(13, "Permission denied", "/ro/traces"))
+    engine._probes = {"healthy": good, "integration_host": bad}
+
+    report = await engine._build_report()
+
+    assert report.overall_ready is False
+    assert report.blocker_count == 2
+    assert report.passed_blocker_count == 1
+    by_id = {r.id: r for r in report.probes}
+    assert by_id["healthy"].status is ProbeStatus.PASS
+    crashed = by_id["integration_host"]
+    assert crashed.status is ProbeStatus.FAIL
+    assert crashed.is_blocker is True
+    assert crashed.category is ProbeCategory.RUNTIME
+    assert crashed.summary == "Probe crashed"
+    assert "PermissionError" in crashed.description
+    assert "Permission denied" in crashed.description
+    assert crashed.metadata["exception_type"] == "PermissionError"
+
+
+@pytest.mark.asyncio
+async def test_build_report_turns_hung_probe_into_fail_result(monkeypatch):
+    """A probe that never returns (wedged ADB server) is cut off at the
+    engine's per-probe deadline and reported as a FAIL with the restart step,
+    so no surface running the report can hang."""
+    monkeypatch.setattr(ReadinessEngine, "PROBE_TIMEOUT_SECONDS", 0.05)
+    engine = ReadinessEngine()
+
+    async def never_returns():
+        await asyncio.sleep(10)
+
+    hung = Mock()
+    hung.probe_id = "android_adb"
+    hung.category = ProbeCategory.DEVICE
+    hung.is_blocker = True
+    hung.probe = never_returns
+    engine._probes = {"android_adb": hung}
+
+    report = await engine._build_report()
+
+    result = report.probes[0]
+    assert result.status is ProbeStatus.FAIL
+    assert result.summary == "Probe timed out"
+    assert result.metadata["exception_type"] == "TimeoutError"
+    assert any("adb kill-server" in a.payload for a in result.actions)
+    assert report.overall_ready is False
+
+
+@pytest.mark.asyncio
+async def test_build_report_does_not_swallow_cancellation():
+    engine = ReadinessEngine()
+    probe = Mock()
+    probe.probe_id = "cancelled"
+    probe.category = ProbeCategory.RUNTIME
+    probe.is_blocker = True
+    probe.probe = AsyncMock(side_effect=asyncio.CancelledError())
+    engine._probes = {"cancelled": probe}
+
+    with pytest.raises(asyncio.CancelledError):
+        await engine._build_report()
diff --git a/tests/unit/core/test_host_probe.py b/tests/unit/core/test_host_probe.py
new file mode 100644
index 0000000..147f8db
--- /dev/null
+++ b/tests/unit/core/test_host_probe.py
@@ -0,0 +1,471 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Unit tests for the MCP / IDE integration-host readiness probe."""
+
+import os
+from pathlib import Path
+import sys
+
+import pytest
+
+from artemis.core.diagnostics import IntegrationHostProbe, ReadinessEngine
+from artemis.core.diagnostics.probes import host_probe
+from artemis.core.diagnostics.schema import ProbeCategory, ProbeStatus
+
+
+#: Environment keys / prefixes any IDE might export; scrubbed so the developer's
+#: own host (this test suite is often run from inside Claude Code or Cursor) does
+#: not leak into the detection tests.
+_SIGNAL_PREFIXES = (
+    "ANTIGRAVITY_",
+    "CLAUDE_CODE_",
+    "CURSOR_",
+    "WINDSURF_",
+    "CODEX_",
+    "OPENCLAW_",
+    "CLINE_",
+    "ROO_",
+    "VSCODE_",
+)
+_SIGNAL_KEYS = ("CLAUDECODE", "TERM_PROGRAM")
+
+
+@pytest.fixture
+def clean_ide_env(monkeypatch):
+    for key in list(os.environ):
+        if key in _SIGNAL_KEYS or key.startswith(_SIGNAL_PREFIXES):
+            monkeypatch.delenv(key, raising=False)
+    return monkeypatch
+
+
+@pytest.fixture
+def host_env(tmp_path, monkeypatch, clean_ide_env):
+    """A consistent, healthy host layout the individual tests then break."""
+    venv_python = host_probe.project_venv_python(tmp_path)
+    venv_python.parent.mkdir(parents=True)
+    venv_python.write_bytes(b"")
+    traces = tmp_path / "traces"
+
+    monkeypatch.setattr("artemis.config.paths.ROOT_DIR", tmp_path)
+    monkeypatch.setattr("artemis.config.paths.get_env_file", lambda: tmp_path / ".env")
+    monkeypatch.setattr("artemis.config.paths.get_default_traces_path", lambda: traces)
+    monkeypatch.setattr("artemis.config.paths.is_source_checkout", lambda: True)
+    monkeypatch.setattr(sys, "executable", str(venv_python))
+
+    monkeypatch.setattr("artemis.runtime.daemon_client.is_standalone_forced", lambda: False)
+    monkeypatch.setattr("artemis.runtime.daemon_client.is_artemis_daemon", lambda: True)
+    monkeypatch.setattr(
+        "artemis.runtime.daemon_client.daemon_log_path", lambda: tmp_path / "daemon.log"
+    )
+    monkeypatch.setattr("artemis.runtime.server_lifecycle.is_port_in_use", lambda *a, **k: True)
+    return tmp_path
+
+
+def test_probe_is_not_part_of_the_default_console_report():
+    assert "integration_host" not in ReadinessEngine()._probes
+    probe = IntegrationHostProbe()
+    assert probe.probe_id == "integration_host"
+    assert probe.category is ProbeCategory.RUNTIME
+    assert probe.is_blocker is True
+
+
+@pytest.mark.asyncio
+async def test_consistent_host_passes(host_env):
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.PASS
+    assert result.is_blocker is True
+    assert result.summary == "Host Ready"
+    meta = result.metadata
+    assert meta["venv_exists"] is True
+    assert meta["interpreter_matches_venv"] is True
+    assert Path(meta["runner_python"]) == host_probe.project_venv_python(host_env)
+    assert meta["env_file_exists"] is False
+    assert meta["traces_dir_writable"] is True
+    assert (host_env / "traces").is_dir()
+    assert meta["daemon"] == {
+        "host": "127.0.0.1",
+        "port": 8000,
+        "standalone_forced": False,
+        "reachable": True,
+        "port_in_use": True,
+        "port_held_by_other_process": False,
+        "log_path": str(host_env / "daemon.log"),
+    }
+    labels = [a.label for a in result.actions]
+    assert labels[0] == "Host OK"
+    assert "Env File Location" in labels  # informational even when passing
+
+
+@pytest.mark.asyncio
+async def test_daemon_port_held_by_other_process_warns(host_env, monkeypatch):
+    monkeypatch.setattr("artemis.runtime.daemon_client.is_artemis_daemon", lambda: False)
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.WARN
+    assert result.is_blocker is False  # tasks still run standalone
+    assert result.metadata["daemon"]["port_held_by_other_process"] is True
+    assert "port 8000 is held" in result.description.lower()
+    port_fix = next(a for a in result.actions if a.label == "Free the Daemon Port")
+    assert "ARTEMIS_DAEMON_PORT" in port_fix.payload
+
+
+@pytest.mark.asyncio
+async def test_daemon_not_running_and_port_free_is_informational(host_env, monkeypatch):
+    monkeypatch.setattr("artemis.runtime.daemon_client.is_artemis_daemon", lambda: False)
+    monkeypatch.setattr("artemis.runtime.server_lifecycle.is_port_in_use", lambda *a, **k: False)
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.PASS
+    assert "auto-start" in result.description
+    auto = next(a for a in result.actions if a.label == "Daemon Auto-Start")
+    assert str(host_env / "daemon.log") in auto.payload
+
+
+@pytest.mark.asyncio
+async def test_standalone_mode_skips_daemon_probe(host_env, monkeypatch):
+    monkeypatch.setattr("artemis.runtime.daemon_client.is_standalone_forced", lambda: True)
+    monkeypatch.setattr("artemis.runtime.daemon_client.is_artemis_daemon", lambda: False)
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.PASS
+    assert result.metadata["daemon"]["standalone_forced"] is True
+    assert result.metadata["daemon"]["port_held_by_other_process"] is False
+    auto = next(a for a in result.actions if a.label == "Daemon Auto-Start")
+    assert "ARTEMIS_STANDALONE" in auto.payload
+
+
+@pytest.mark.asyncio
+async def test_interpreter_mismatch_warns_and_points_at_installer(host_env, monkeypatch):
+    other = host_env / "other-python.exe"
+    other.write_bytes(b"")
+    monkeypatch.setattr(sys, "executable", str(other))
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.WARN
+    assert result.metadata["interpreter_matches_venv"] is False
+    assert Path(result.metadata["runner_python"]) == host_probe.project_venv_python(host_env)
+    assert result.metadata["mcp_client"] is None
+    assert not [a for a in result.actions if a.action_type == "command"]
+    regen = next(a for a in result.actions if a.label == "Regenerate MCP Config")
+    assert regen.action_type == "hint"
+    assert "ask the user which ide" in regen.payload.lower()
+    assert "uv run artemis mcp --install <client>" in regen.payload
+    for name in host_probe.MCP_CLIENT_NAMES:
+        assert name in regen.payload
+    assert next(a for a in result.actions if a.label == "Interpreter Mismatch")
+
+
+@pytest.mark.asyncio
+async def test_interpreter_mismatch_emits_runnable_install_for_detected_client(
+    host_env, monkeypatch
+):
+    monkeypatch.setenv("CLAUDECODE", "1")
+    other = host_env / "other-python.exe"
+    other.write_bytes(b"")
+    monkeypatch.setattr(sys, "executable", str(other))
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.WARN
+    assert result.metadata["mcp_client"] == "claude"
+    regen = next(a for a in result.actions if a.action_type == "command")
+    assert regen.label == "Regenerate MCP Config"
+    assert regen.payload == "uv run artemis mcp --install claude"
+    assert "<client>" not in regen.payload
+
+
+@pytest.mark.asyncio
+async def test_metadata_reports_client_even_when_host_is_healthy(host_env, monkeypatch):
+    monkeypatch.setenv("CURSOR_TRACE_ID", "abc")
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.PASS
+    assert result.metadata["mcp_client"] == "cursor"
+
+
+def test_detect_mcp_client_unknown_in_clean_environment(clean_ide_env):
+    assert host_probe.detect_mcp_client() is None
+
+
+@pytest.mark.parametrize(
+    ("variables", "expected"),
+    [
+        ({"ANTIGRAVITY_LS_ADDRESS": "127.0.0.1:1"}, "antigravity"),
+        ({"ANTIGRAVITY_CSRF_TOKEN": "t"}, "antigravity"),
+        ({"CLAUDECODE": "1"}, "claude"),
+        ({"CLAUDE_CODE_ENTRYPOINT": "cli"}, "claude"),
+        ({"CURSOR_TRACE_ID": "abc"}, "cursor"),
+        ({"CURSOR_AGENT": "1"}, "cursor"),
+        ({"WINDSURF_SESSION": "x"}, "windsurf"),
+        ({"CODEX_SANDBOX": "seatbelt"}, "codex"),
+        ({"CODEX_HOME": "/tmp/codex", "CODEX_SANDBOX_NETWORK_DISABLED": "1"}, "codex"),
+        ({"OPENCLAW_SESSION_ID": "s"}, "openclaw"),
+        ({"CLINE_TASK_ID": "1"}, "cline"),
+        ({"ROO_CODE_TASK": "1"}, "roo"),
+        ({"VSCODE_PID": "42"}, "vscode"),
+        ({"TERM_PROGRAM": "vscode"}, "vscode"),
+    ],
+)
+def test_detect_mcp_client_signals(clean_ide_env, variables, expected):
+    for key, value in variables.items():
+        clean_ide_env.setenv(key, value)
+    assert host_probe.detect_mcp_client() == expected
+
+
+@pytest.mark.parametrize(
+    "variables",
+    [
+        {"CODEX_HOME": "/home/me/.codex"},  # user relocated the Codex config dir
+        {"OPENCLAW_WEBHOOK_URL": "https://hooks.example/x"},  # notifier setting, any host
+        {"TERM_PROGRAM": "iTerm.app"},
+    ],
+)
+def test_detect_mcp_client_ignores_weak_or_user_set_variables(clean_ide_env, variables):
+    for key, value in variables.items():
+        clean_ide_env.setenv(key, value)
+    assert host_probe.detect_mcp_client() is None
+
+
+@pytest.mark.parametrize(
+    ("variables", "expected"),
+    [
+        # Claude Code or Codex running inside a VS Code / Cursor terminal: the
+        # agent that spawned the server wins over the editor around it.
+        ({"CLAUDECODE": "1", "VSCODE_PID": "1", "TERM_PROGRAM": "vscode"}, "claude"),
+        ({"CLAUDECODE": "1", "CURSOR_TRACE_ID": "x"}, "claude"),
+        ({"CODEX_SANDBOX": "seatbelt", "VSCODE_PID": "1"}, "codex"),
+        # Cursor / Windsurf / Cline are VS Code forks or extensions and inherit
+        # the generic VS Code markers.
+        ({"CURSOR_TRACE_ID": "x", "VSCODE_PID": "1", "TERM_PROGRAM": "vscode"}, "cursor"),
+        ({"WINDSURF_SESSION": "x", "TERM_PROGRAM": "vscode"}, "windsurf"),
+        ({"CLINE_TASK_ID": "1", "VSCODE_PID": "1"}, "cline"),
+    ],
+)
+def test_detect_mcp_client_specific_host_beats_generic_vscode(clean_ide_env, variables, expected):
+    for key, value in variables.items():
+        clean_ide_env.setenv(key, value)
+    assert host_probe.detect_mcp_client() == expected
+
+
+def test_mcp_install_actions_shapes():
+    (cmd,) = host_probe.mcp_install_actions("antigravity")
+    assert cmd.action_type == "command"
+    assert cmd.payload == "uv run artemis mcp --install antigravity"
+
+    (hint,) = host_probe.mcp_install_actions(None)
+    assert hint.action_type == "hint"
+    assert "antigravity, claude, cursor, windsurf, vscode, cline, roo, openclaw, codex" in (
+        hint.payload
+    )
+
+
+@pytest.mark.asyncio
+async def test_missing_venv_warns_with_uv_sync(host_env, monkeypatch):
+    host_probe.project_venv_python(host_env).unlink()
+    monkeypatch.setattr(sys, "executable", str(host_env / "system-python.exe"))
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.WARN
+    assert result.metadata["venv_exists"] is False
+    assert result.metadata["runner_python"] == str(host_env / "system-python.exe")
+    assert any(a.payload == "uv sync" for a in result.actions)
+
+
+@pytest.mark.asyncio
+async def test_unwritable_traces_dir_fails_even_with_other_warnings(host_env, monkeypatch):
+    monkeypatch.setattr(host_probe, "directory_is_writable", lambda _p: (False, "denied"))
+    monkeypatch.setattr("artemis.runtime.daemon_client.is_artemis_daemon", lambda: False)
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.FAIL
+    assert result.is_blocker is True
+    assert result.summary == "Host Misconfigured"
+    assert result.metadata["traces_dir_writable"] is False
+    assert result.metadata["traces_dir_error"] == "denied"
+    assert result.actions[0].label == "Fix Traces Directory"
+    assert "ARTEMIS_TRACES_DIR" in result.actions[0].payload
+    # The port problem is still reported alongside the blocking failure.
+    assert "port 8000 is held" in result.description.lower()
+
+
+def test_directory_is_writable_reports_real_errors(tmp_path):
+    ok, error = host_probe.directory_is_writable(tmp_path / "new" / "nested")
+    assert ok is True and error is None
+
+    blocker = tmp_path / "file"
+    blocker.write_text("x")
+    ok, error = host_probe.directory_is_writable(blocker / "child")
+    assert ok is False and error
+
+
+@pytest.mark.asyncio
+async def test_wheel_install_without_venv_is_not_a_venv_warning(host_env, monkeypatch):
+    """A wheel install has no .venv under site-packages; that is normal, not a warning."""
+    host_probe.project_venv_python(host_env).unlink()
+    system_python = host_env / "system-python.exe"
+    monkeypatch.setattr(sys, "executable", str(system_python))
+    monkeypatch.setattr("artemis.config.paths.is_source_checkout", lambda: False)
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.PASS
+    assert result.summary == "Host Ready"
+    meta = result.metadata
+    assert meta["is_source_checkout"] is False
+    assert meta["venv_python"] is None
+    assert meta["venv_exists"] is False
+    assert meta["interpreter_matches_venv"] is False
+    assert meta["runner_python"] == str(system_python)
+    assert "venv" not in result.description.lower()
+    assert not [a for a in result.actions if a.payload == "uv sync"]
+    assert not [a for a in result.actions if a.label == "Interpreter Mismatch"]
+
+
+@pytest.mark.asyncio
+async def test_wheel_install_ignores_stray_venv_next_to_site_packages(host_env, monkeypatch):
+    """Even if a .venv happens to exist under ROOT_DIR, a non-source install never compares against it."""
+    other = host_env / "other-python.exe"
+    other.write_bytes(b"")
+    monkeypatch.setattr(sys, "executable", str(other))
+    monkeypatch.setattr("artemis.config.paths.is_source_checkout", lambda: False)
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.PASS
+    assert result.metadata["venv_python"] is None
+    assert result.metadata["runner_python"] == str(other)
+    assert not [a for a in result.actions if a.label == "Interpreter Mismatch"]
+
+
+@pytest.mark.asyncio
+async def test_source_checkout_without_venv_still_warns_with_uv_sync(host_env, monkeypatch):
+    host_probe.project_venv_python(host_env).unlink()
+    monkeypatch.setattr(sys, "executable", str(host_env / "system-python.exe"))
+    monkeypatch.setattr("artemis.config.paths.is_source_checkout", lambda: True)
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.WARN
+    assert result.metadata["is_source_checkout"] is True
+    assert result.metadata["venv_python"] == str(host_probe.project_venv_python(host_env))
+    assert result.metadata["venv_exists"] is False
+    assert "no project virtualenv" in result.description.lower()
+    assert any(a.payload == "uv sync" for a in result.actions)
+
+
+@pytest.mark.asyncio
+async def test_traces_path_creation_error_becomes_fail_not_crash(host_env, monkeypatch):
+    """get_default_traces_path mkdirs as a side effect; a read-only parent must not crash the probe."""
+
+    def denied():
+        raise PermissionError(13, "Permission denied", str(host_env / "traces"))
+
+    monkeypatch.setattr("artemis.config.paths.get_default_traces_path", denied)
+    monkeypatch.setenv("ARTEMIS_TRACES_DIR", str(host_env / "ro" / "traces"))
+
+    result = await IntegrationHostProbe().probe()
+
+    assert result.status is ProbeStatus.FAIL
+    assert result.is_blocker is True
+    assert result.summary == "Host Misconfigured"
+    meta = result.metadata
+    assert meta["traces_dir_writable"] is False
+    assert "Permission denied" in meta["traces_dir_error"]
+    # The intended path is still named, resolved without touching the disk.
+    assert Path(meta["traces_dir"]) == host_env / "ro" / "traces"
+    assert not (host_env / "ro").exists()
+    assert result.actions[0].label == "Fix Traces Directory"
+    assert "ARTEMIS_TRACES_DIR" in result.actions[0].payload
+    assert "not writable" in result.description
+
+
+def test_intended_traces_path_mirrors_selection_without_mkdir(tmp_path, monkeypatch):
+    monkeypatch.setattr("artemis.config.paths.ROOT_DIR", tmp_path)
+    monkeypatch.delenv("ARTEMIS_TRACES_DIR", raising=False)
+
+    monkeypatch.setattr("artemis.config.paths._use_user_app_dir", lambda: False)
+    assert host_probe.intended_traces_path() == tmp_path / "traces"
+
+    monkeypatch.setattr("artemis.config.paths._use_user_app_dir", lambda: True)
+    monkeypatch.setattr("artemis.config.paths.get_app_dir", lambda: tmp_path / "app")
+    assert host_probe.intended_traces_path() == tmp_path / "app" / "traces"
+
+    monkeypatch.setenv("ARTEMIS_TRACES_DIR", str(tmp_path / "env-traces"))
+    assert host_probe.intended_traces_path() == tmp_path / "env-traces"
+
+    assert not (tmp_path / "traces").exists()
+    assert not (tmp_path / "app").exists()
+    assert not (tmp_path / "env-traces").exists()
+
+
+# --------------------------------------------------------------------------- #
+# Daemon identity (a dev server on port 8000 is not the daemon)
+# --------------------------------------------------------------------------- #
+
+
+class _FakeResponse:
+    def __init__(self, status: int, body: bytes):
+        self.status = status
+        self._body = body
+
+    def read(self) -> bytes:
+        return self._body
+
+    def __enter__(self):
+        return self
+
+    def __exit__(self, *exc):
+        return False
+
+
+@pytest.mark.parametrize(
+    "status, body, expected",
+    [
+        (200, b'{"running": true, "port": 8000, "current_pid": 42}', True),
+        (200, b"<!doctype html><title>Vite App</title>", False),  # dev server on /
+        (200, b'{"hello": "world"}', False),
+        (404, b"", False),
+    ],
+)
+def test_is_artemis_daemon_requires_the_server_status_shape(monkeypatch, status, body, expected):
+    from artemis.runtime import daemon_client
+
+    seen: dict[str, str] = {}
+
+    def fake_urlopen(req, timeout):
+        seen["url"] = req.full_url
+        return _FakeResponse(status, body)
+
+    monkeypatch.setattr(daemon_client.urllib.request, "urlopen", fake_urlopen)
+    assert daemon_client.is_artemis_daemon("127.0.0.1", 8000) is expected
+    assert seen["url"] == "http://127.0.0.1:8000/api/system/server-status"
+
+
+def test_is_artemis_daemon_is_false_when_nothing_listens(monkeypatch):
+    from artemis.runtime import daemon_client
+
+    def refuse(req, timeout):
+        raise ConnectionRefusedError()
+
+    monkeypatch.setattr(daemon_client.urllib.request, "urlopen", refuse)
+    assert daemon_client.is_artemis_daemon("127.0.0.1", 8000) is False
diff --git a/tests/unit/core/test_readiness.py b/tests/unit/core/test_readiness.py
new file mode 100644
index 0000000..0cfb0c7
--- /dev/null
+++ b/tests/unit/core/test_readiness.py
@@ -0,0 +1,157 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Unit tests for the readiness core shared by ``artemis doctor`` and ``mobile_diagnose``."""
+
+import asyncio
+import time
+from unittest.mock import AsyncMock
+
+from artemis.core.diagnostics import readiness
+from artemis.core.diagnostics.probes.host_probe import IntegrationHostProbe
+from artemis.core.diagnostics.readiness import (
+    CHECK_ORDER,
+    adb_keys_corrupted,
+    base_verdict,
+    collect_readiness,
+    sort_by_fix_order,
+)
+from artemis.core.diagnostics.schema import (
+    ProbeCategory,
+    ProbeResult,
+    ProbeStatus,
+    SystemReadinessReport,
+)
+
+
+def _probe(
+    probe_id: str,
+    status: ProbeStatus = ProbeStatus.PASS,
+    *,
+    blocker: bool = True,
+    metadata: dict | None = None,
+) -> ProbeResult:
+    return ProbeResult(
+        id=probe_id,
+        title=probe_id,
+        category=ProbeCategory.RUNTIME,
+        status=status,
+        summary=status.value,
+        description=f"{probe_id} is {status.value}",
+        is_blocker=blocker,
+        metadata=metadata or {},
+    )
+
+
+# --------------------------------------------------------------------------- #
+# base_verdict
+# --------------------------------------------------------------------------- #
+
+
+def test_base_verdict_without_any_blocker_is_blocked():
+    assert base_verdict([]) == "blocked"
+    assert base_verdict([_probe("toolchain", blocker=False)]) == "blocked"
+
+
+def test_base_verdict_failing_blocker_is_blocked():
+    results = [
+        _probe("python_runtime"),
+        _probe("android_adb", ProbeStatus.FAIL),
+        _probe("toolchain", blocker=False),
+    ]
+    assert base_verdict(results) == "blocked"
+
+
+def test_base_verdict_passing_blockers_with_warning_optional_is_degraded():
+    results = [
+        _probe("python_runtime"),
+        _probe("android_adb"),
+        _probe("toolchain", ProbeStatus.WARN, blocker=False),
+    ]
+    assert base_verdict(results) == "degraded"
+
+
+def test_base_verdict_all_pass_is_ready():
+    results = [_probe("python_runtime"), _probe("android_adb"), _probe("toolchain", blocker=False)]
+    assert base_verdict(results) == "ready"
+
+
+def test_base_verdict_warning_blocker_is_blocked_not_degraded():
+    results = [_probe("python_runtime"), _probe("integration_host", ProbeStatus.WARN)]
+    assert base_verdict(results) == "blocked"
+
+
+# --------------------------------------------------------------------------- #
+# adb_keys_corrupted
+# --------------------------------------------------------------------------- #
+
+
+def test_adb_keys_corrupted_reads_the_adb_probe_flag():
+    corrupted = _probe("android_adb", metadata={"adb_keys": {"is_corrupted": True}})
+    healthy = _probe("android_adb", metadata={"adb_keys": {"is_corrupted": False}})
+    assert adb_keys_corrupted([_probe("python_runtime"), corrupted]) is True
+    assert adb_keys_corrupted([_probe("python_runtime"), healthy]) is False
+
+
+def test_adb_keys_corrupted_is_false_without_probe_or_metadata():
+    assert adb_keys_corrupted([]) is False
+    assert adb_keys_corrupted([_probe("python_runtime")]) is False
+    assert adb_keys_corrupted([_probe("android_adb")]) is False
+    assert adb_keys_corrupted([_probe("android_adb", metadata={"adb_keys": None})]) is False
+
+
+# --------------------------------------------------------------------------- #
+# ordering / collection
+# --------------------------------------------------------------------------- #
+
+
+def test_sort_by_fix_order_follows_check_order_and_appends_unknown_ids():
+    results = [
+        _probe("custom_probe"),
+        _probe("toolchain", blocker=False),
+        _probe("android_adb"),
+        _probe("python_runtime"),
+    ]
+    ordered = [r.id for r in sort_by_fix_order(results)]
+    assert ordered == ["python_runtime", "android_adb", "toolchain", "custom_probe"]
+    assert list(CHECK_ORDER) == [
+        "python_runtime",
+        "system_config",
+        "integration_host",
+        "gemini_api_key",
+        "android_adb",
+        "toolchain",
+        "vision_ocr_key",
+    ]
+
+
+def test_collect_readiness_gathers_engine_report_and_host_probe(monkeypatch):
+    report = SystemReadinessReport(
+        overall_ready=True,
+        blocker_count=1,
+        passed_blocker_count=1,
+        probes=[_probe("python_runtime")],
+        os_type="windows",
+        timestamp=time.time(),
+    )
+    host = _probe("integration_host")
+    run_all = AsyncMock(return_value=report)
+    monkeypatch.setattr(readiness.readiness_engine, "run_all", run_all)
+    monkeypatch.setattr(IntegrationHostProbe, "probe", AsyncMock(return_value=host))
+
+    got_report, got_host = asyncio.run(collect_readiness())
+
+    assert got_report is report
+    assert got_host is host
+    run_all.assert_awaited_once_with(force_refresh=True)
diff --git a/tests/unit/data_engine/test_engine.py b/tests/unit/data_engine/test_engine.py
index 9082454..f4bf78c 100644
--- a/tests/unit/data_engine/test_engine.py
+++ b/tests/unit/data_engine/test_engine.py
@@ -392,7 +392,7 @@ def _foreground_engine(tmp_path):
 
 
 def test_record_step_persists_explicit_foreground_app(tmp_path):
-    """M5: the historically dropped foreground_app parameter is persisted."""
+    """The foreground_app parameter is persisted."""
     engine = _foreground_engine(tmp_path)
     engine.record_step(
         foreground_app="com.android.settings",
diff --git a/tests/unit/data_engine/test_trace_detached_lens_calls.py b/tests/unit/data_engine/test_trace_detached_lens_calls.py
new file mode 100644
index 0000000..53ba8a4
--- /dev/null
+++ b/tests/unit/data_engine/test_trace_detached_lens_calls.py
@@ -0,0 +1,79 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""A detached lens call (segment capsule, visual summary) must never be
+recorded as the current step's reasoning: the callback handler attaches
+``thinking``/``raw_thinking`` traces by the DataEngine's global
+``current_step_id``, which is independent of the trace context, so the
+handler itself has to recognise the detached lens context."""
+
+import uuid
+from unittest.mock import Mock
+
+from langchain_core.messages import AIMessage
+from langchain_core.outputs import ChatGeneration, LLMResult
+
+from artemis.data_engine.context_vars import CURRENT_NODE_NAME, CURRENT_TRACE_ID
+from artemis.data_engine.trace import DataEngineCallbackHandler, detached_trace
+
+CAPSULE = '{"doing": "scrolling", "did": "swiped", "entry_state": "home"}'
+
+
+def _handler():
+    ctx = Mock()
+    ctx.data_engine = Mock()
+    ctx.data_engine.current_step_id = uuid.uuid4()
+    ctx.data_engine.record_trace = Mock()
+    return DataEngineCallbackHandler(ctx), ctx
+
+
+def _result(text: str) -> LLMResult:
+    return LLMResult(generations=[[ChatGeneration(message=AIMessage(content=text))]])
+
+
+def _recorded(ctx) -> dict[str, dict]:
+    return {c.kwargs["type"]: c.kwargs for c in ctx.data_engine.record_trace.call_args_list}
+
+
+def test_agent_call_reply_is_recorded_as_raw_thinking_under_the_step():
+    handler, ctx = _handler()
+    span = uuid.uuid4()
+    token = CURRENT_TRACE_ID.set(span)
+    token_name = CURRENT_NODE_NAME.set("operator")
+    try:
+        handler.on_llm_end(_result("I see the settings list."), run_id=uuid.uuid4())
+    finally:
+        CURRENT_TRACE_ID.reset(token)
+        CURRENT_NODE_NAME.reset(token_name)
+    recorded = _recorded(ctx)
+    assert recorded["llm_call"]["step_id"] == ctx.data_engine.current_step_id
+    assert recorded["raw_thinking"]["step_id"] == ctx.data_engine.current_step_id
+    assert recorded["raw_thinking"]["payload"]["thought"] == "I see the settings list."
+
+
+def test_detached_lens_reply_is_neither_thinking_nor_attached_to_the_step():
+    handler, ctx = _handler()
+    span = uuid.uuid4()
+    token = CURRENT_TRACE_ID.set(span)
+    token_name = CURRENT_NODE_NAME.set("operator")
+    try:
+        with detached_trace("lens:step_capsule"):
+            handler.on_llm_end(_result(CAPSULE), run_id=uuid.uuid4())
+    finally:
+        CURRENT_TRACE_ID.reset(token)
+        CURRENT_NODE_NAME.reset(token_name)
+    recorded = _recorded(ctx)
+    assert "raw_thinking" not in recorded
+    assert "thinking" not in recorded
+    assert recorded["llm_call"]["step_id"] is None
diff --git a/tests/unit/graph/test_checkpoints.py b/tests/unit/graph/test_checkpoints.py
index 2f0bb06..d8f3d4b 100644
--- a/tests/unit/graph/test_checkpoints.py
+++ b/tests/unit/graph/test_checkpoints.py
@@ -208,6 +208,219 @@ async def test_process_plan_write_only_queues(tmp_path):
     assert ctx.checkpoint_tasks == {}
 
 
+VERIFY_LINE = "  - verify: the alarm list shows 7:30 AM\n"
+ASSERT_LINE = "  - assert: a toast appeared\n"
+
+
+def _guidance_arrives(ctx, plan_text):
+    """What perception_node does when a non-empty user instruction lands: the
+    check lines that exist at that moment lose their machine restoration."""
+    from artemis.utils.plan_grammar import parse_plan
+
+    current = getattr(ctx, "guidance_unprotected_checks", None)
+    if not isinstance(current, set):
+        current = set()
+    ctx.guidance_unprotected_checks = current | {
+        (ci.kind, ci.text) for ci in parse_plan(plan_text).check_items
+    }
+
+
+async def _plan_write(tmp_path, ctx, before, after):
+    """One accepted task_plan write through the shared post-write pipeline;
+    returns the plan text as it stands on disk afterwards."""
+    from artemis.graph.graph import _process_plan_write
+
+    task_plan_path = _write_plan(tmp_path, after)
+    await _process_plan_write(ctx, _make_state(), task_plan_path, before, after, "ok", True)
+    return task_plan_path.read_text(encoding="utf-8")
+
+
+NEW_VERIFY_LINE = "  - verify: the build number is recorded\n"
+
+
+@pytest.mark.asyncio
+async def test_pre_guidance_check_lines_may_be_dropped_at_any_later_write(tmp_path):
+    """Without guidance a deleted check line grows back. Once user guidance has
+    arrived, the lines that existed at that moment stay editable for the rest
+    of the run: the Operator re-plans over several writes, turns later, and
+    none of them is undone."""
+    without_verify = PLAN_WITH_CHECKS.replace(VERIFY_LINE, "")
+    without_both = without_verify.replace(ASSERT_LINE, "")
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+
+    # Ordinary write (no guidance): the deleted line grows back.
+    assert VERIFY_LINE in await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, without_verify)
+
+    # Turn N: guidance arrives; the Operator only advances a milestone.
+    _guidance_arrives(ctx, PLAN_WITH_CHECKS)
+    started_next = PLAN_WITH_CHECKS.replace("- [ ] Next milestone", "- [/] Next milestone")
+    assert await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, started_next) == started_next
+
+    # Turn N+2: the first check line goes, and stands.
+    dropped_verify = started_next.replace(VERIFY_LINE, "")
+    assert await _plan_write(tmp_path, ctx, started_next, dropped_verify) == dropped_verify
+    # Turn N+3: the second one goes too, and also stands (no single-write window).
+    dropped_both = dropped_verify.replace(ASSERT_LINE, "")
+    assert await _plan_write(tmp_path, ctx, dropped_verify, dropped_both) == dropped_both
+
+
+@pytest.mark.asyncio
+async def test_check_lines_added_after_guidance_stay_protected(tmp_path):
+    """A check line the Operator adds after the instruction is a new standard:
+    deleting it later is restored, while the pre-guidance line still may go."""
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+    _guidance_arrives(ctx, PLAN_WITH_CHECKS)
+
+    with_new = PLAN_WITH_CHECKS.replace(ASSERT_LINE, ASSERT_LINE + NEW_VERIFY_LINE)
+    assert await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, with_new) == with_new
+
+    dropped_new = with_new.replace(NEW_VERIFY_LINE, "")
+    on_disk = await _plan_write(tmp_path, ctx, with_new, dropped_new)
+    assert NEW_VERIFY_LINE in on_disk  # restored: it postdates the guidance
+
+    dropped_old = with_new.replace(VERIFY_LINE, "")
+    on_disk = await _plan_write(tmp_path, ctx, with_new, dropped_old)
+    assert VERIFY_LINE not in on_disk  # stands: it predates the guidance
+    assert NEW_VERIFY_LINE in on_disk
+
+
+@pytest.mark.asyncio
+async def test_second_guidance_waives_the_lines_that_exist_by_then(tmp_path):
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+    _guidance_arrives(ctx, PLAN_WITH_CHECKS)
+    with_new = PLAN_WITH_CHECKS.replace(ASSERT_LINE, ASSERT_LINE + NEW_VERIFY_LINE)
+    assert await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, with_new) == with_new
+    dropped_new = with_new.replace(NEW_VERIFY_LINE, "")
+    assert NEW_VERIFY_LINE in await _plan_write(tmp_path, ctx, with_new, dropped_new)
+
+    _guidance_arrives(ctx, with_new)  # the new line exists now: it is waived too
+    assert NEW_VERIFY_LINE not in await _plan_write(tmp_path, ctx, with_new, dropped_new)
+
+
+@pytest.mark.asyncio
+async def test_mixed_write_restores_only_the_protected_lines(tmp_path):
+    """One write drops a pre-guidance line and a post-guidance line: only the
+    protected one is merged back."""
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+    _guidance_arrives(ctx, PLAN_WITH_CHECKS)
+    with_new = PLAN_WITH_CHECKS.replace(ASSERT_LINE, ASSERT_LINE + NEW_VERIFY_LINE)
+    assert await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, with_new) == with_new
+
+    dropped_both = with_new.replace(VERIFY_LINE, "").replace(NEW_VERIFY_LINE, "")
+    on_disk = await _plan_write(tmp_path, ctx, with_new, dropped_both)
+    assert VERIFY_LINE not in on_disk
+    assert NEW_VERIFY_LINE in on_disk
+
+
+@pytest.mark.asyncio
+async def test_guided_drop_records_the_retired_lines_and_the_outcome_excludes_them(tmp_path):
+    """A line dropped under guidance is remembered as retired; a verdict the
+    ledger recorded for it earlier is reported as retired, not as a failure,
+    while a line still declared keeps its verdict."""
+    from artemis.graph.checkpoints import compute_test_summary
+    from artemis.utils.plan_grammar import parse_plan
+
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+    ctx.guidance_retired_checks = set()
+    _guidance_arrives(ctx, PLAN_WITH_CHECKS)
+    without_verify = PLAN_WITH_CHECKS.replace(VERIFY_LINE, "")
+    assert await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, without_verify) == without_verify
+    assert ctx.guidance_retired_checks == {("verify", "the alarm list shows 7:30 AM")}
+
+    records = [
+        {"kind": "verify", "item_text": "the alarm list shows 7:30 AM", "status": "failed"},
+        {"kind": "assert", "item_text": "a toast appeared", "status": "passed"},
+    ]
+    summary = compute_test_summary(
+        list(parse_plan(without_verify).all_check_items),
+        records,
+        retired=ctx.guidance_retired_checks,
+    )
+    assert (summary.passed, summary.failed, summary.retired) == (1, 0, 1)
+    assert summary.retired_items == [
+        {"item_text": "the alarm list shows 7:30 AM", "kind": "verify", "last_status": "failed"}
+    ]
+    # A retired line that is declared again (the Operator re-added it) counts normally.
+    summary = compute_test_summary(
+        list(parse_plan(PLAN_WITH_CHECKS).all_check_items),
+        records,
+        retired=ctx.guidance_retired_checks,
+    )
+    assert (summary.passed, summary.failed, summary.retired) == (1, 1, 0)
+
+
+REWORDED_MILESTONE = PLAN_WITH_CHECKS.replace(f"- [x] {GOAL_TEXT}", "- [x] Create the 7:30 alarm")
+
+
+@pytest.mark.asyncio
+async def test_rewording_a_milestone_keeps_its_check_lines_in_place(tmp_path):
+    """The check lines under a reworded milestone change signature (parent
+    hash) but stay declared: they are neither duplicated as task-level @end
+    orphans nor, under guidance, retired."""
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+    ctx.guidance_retired_checks = set()
+
+    # No guidance: nothing to restore, the plan stands as written.
+    on_disk = await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, REWORDED_MILESTONE)
+    assert on_disk == REWORDED_MILESTONE
+    assert "@end" not in on_disk
+
+    # Guidance armed: the same edit retires nothing.
+    _guidance_arrives(ctx, PLAN_WITH_CHECKS)
+    on_disk = await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, REWORDED_MILESTONE)
+    assert on_disk == REWORDED_MILESTONE
+    assert ctx.guidance_retired_checks == set()
+
+
+@pytest.mark.asyncio
+async def test_redeclaring_a_retired_line_reinstates_it(tmp_path):
+    """Dropped under guidance, then added back: the harvest gate must see the
+    line as live again, matching what compute_test_summary reports."""
+    from artemis.graph.checkpoints import reinstate_check_items
+
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+    ctx.guidance_retired_checks = set()
+    _guidance_arrives(ctx, PLAN_WITH_CHECKS)
+    without_verify = PLAN_WITH_CHECKS.replace(VERIFY_LINE, "")
+    await _plan_write(tmp_path, ctx, PLAN_WITH_CHECKS, without_verify)
+    assert ctx.guidance_retired_checks == {RETIRED_VERIFY}
+
+    await _plan_write(tmp_path, ctx, without_verify, PLAN_WITH_CHECKS)
+    assert ctx.guidance_retired_checks == set()
+
+    # Direct helper: unrelated items leave the set untouched.
+    ctx.guidance_retired_checks = {RETIRED_VERIFY}
+    reinstate_check_items(ctx, [RETIRED_ASSERT])
+    assert ctx.guidance_retired_checks == {RETIRED_VERIFY}
+
+
+@pytest.mark.asyncio
+async def test_rejected_plan_write_leaves_the_waiver_untouched(tmp_path):
+    from langchain_core.messages import ToolMessage
+
+    from artemis.graph.graph import _process_plan_write
+
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+    _guidance_arrives(ctx, PLAN_WITH_CHECKS)
+    waived = set(ctx.guidance_unprotected_checks)
+    reworded = PLAN_WITH_CHECKS.replace("- [ ] Next milestone", "- [ ] The next milestone")
+    task_plan_path = _write_plan(tmp_path, reworded)
+    result = await _process_plan_write(
+        ctx, _make_state(), task_plan_path, PLAN_WITH_CHECKS, reworded, "ok", False
+    )
+    assert isinstance(result, ToolMessage)
+    assert task_plan_path.read_text(encoding="utf-8") == PLAN_WITH_CHECKS
+    assert ctx.guidance_unprotected_checks == waived
+
+
 # --- §8.1 / §8.10: spawn after record_step; record_step unconditional ----------------
 
 
@@ -515,6 +728,146 @@ async def test_assert_fail_halt_policy_latches_halt(tmp_path):
     assert ctx.assert_halt is True
 
 
+# --- Retired check items: late verdicts are ledger-only ------------------------------
+
+
+RETIRED_VERIFY = ("verify", "the alarm list shows 7:30 AM")
+RETIRED_ASSERT = ("assert", "a toast appeared")
+
+
+def _last_done_event(ctx):
+    calls = [
+        c for c in ctx.data_engine._publish.call_args_list if c.args[1].get("status") == "done"
+    ]
+    return calls[-1].args[1]
+
+
+@pytest.mark.asyncio
+async def test_late_failing_verify_for_retired_line_is_ledger_only(tmp_path):
+    """The user retired the verify line but kept the milestone: a late failing
+    verdict for it neither reopens the subgoal nor produces findings/headline,
+    yet the ledger still books it and the done event reports it as retired."""
+    plan_path = _write_plan(tmp_path, PLAN_WITH_CHECKS.replace(VERIFY_LINE, ""))
+    ctx = _make_ctx(tmp_path)
+    ctx.guidance_retired_checks = {RETIRED_VERIFY}
+    run = _done_run(ctx, CheckReport(verdicts=[_verdict("verify", "failed")]))
+
+    findings = harvest_run(ctx, _make_state(), run, allow_side_effects=True)
+
+    assert findings == []
+    assert f"- [x] {GOAL_TEXT}" in plan_path.read_text(encoding="utf-8")
+    assert "- finding:" not in plan_path.read_text(encoding="utf-8")
+    assert ctx.checkpoint_repairs == {}
+    assert getattr(ctx, "checker_findings", {}) == {}
+    records = read_ledger(tmp_path)
+    assert [(r["kind"], r["status"]) for r in records] == [("verify", "failed")]
+    event = _last_done_event(ctx)
+    assert event["applicable"] is False
+    assert event["reverted"] is False
+    assert event["retired"] == [{"kind": "verify", "item_text": RETIRED_VERIFY[1]}]
+    assert [v["status"] for v in event["verdicts"]] == ["failed"]
+
+
+@pytest.mark.asyncio
+async def test_failed_assert_for_retired_line_never_latches_halt(tmp_path):
+    _write_plan(tmp_path, PLAN_WITH_CHECKS.replace(ASSERT_LINE, ""))
+    ctx = _make_ctx(tmp_path, assert_failure_policy="halt")
+    ctx.guidance_retired_checks = {RETIRED_ASSERT}
+    run = _done_run(ctx, CheckReport(verdicts=[_verdict("assert", "failed")]))
+
+    harvest_run(ctx, _make_state(), run, allow_side_effects=True)
+
+    assert ctx.assert_halt is False
+    assert read_ledger(tmp_path)[0]["status"] == "failed"  # still booked
+    assert _last_done_event(ctx)["applicable"] is False
+
+
+@pytest.mark.asyncio
+async def test_non_retired_sibling_verdict_still_takes_effect(tmp_path):
+    """Same report: the retired verify is dropped, the live assert still halts
+    and the live verify sibling still repairs."""
+    plan_path = _write_plan(tmp_path, PLAN_WITH_CHECKS.replace(VERIFY_LINE, ""))
+    ctx = _make_ctx(tmp_path, assert_failure_policy="halt")
+    ctx.guidance_retired_checks = {RETIRED_VERIFY}
+    run = _done_run(
+        ctx,
+        CheckReport(verdicts=[_verdict("verify", "failed"), _verdict("assert", "failed")]),
+    )
+
+    findings = harvest_run(ctx, _make_state(), run, allow_side_effects=True)
+
+    assert findings == []  # the retired verify produces no repair finding
+    assert f"- [x] {GOAL_TEXT}" in plan_path.read_text(encoding="utf-8")
+    assert ctx.assert_halt is True  # the live assert sibling still counts
+    event = _last_done_event(ctx)
+    assert event["applicable"] is True
+    assert event["retired"] == [{"kind": "verify", "item_text": RETIRED_VERIFY[1]}]
+
+    # And a live verify sibling next to a retired one still drives the repair,
+    # with the headline naming only the live criterion.
+    live_line = "  - verify: the alarm is enabled\n"
+    plan_path = _write_plan(tmp_path, PLAN_WITH_CHECKS.replace(VERIFY_LINE, live_line))
+    ctx = _make_ctx(tmp_path)
+    ctx.guidance_retired_checks = {RETIRED_VERIFY}
+    run = _done_run(
+        ctx,
+        CheckReport(
+            verdicts=[
+                _verdict("verify", "failed"),
+                _verdict("verify", "failed", text="the alarm is enabled", evidence="toggle off"),
+            ]
+        ),
+    )
+    findings = harvest_run(ctx, _make_state(), run, allow_side_effects=True)
+    content = plan_path.read_text(encoding="utf-8")
+    assert f"- [/] {GOAL_TEXT}" in content
+    assert "- finding: verify failed — 'the alarm is enabled'" in content
+    assert RETIRED_VERIFY[1] not in " ".join(findings)
+    assert any("the alarm is enabled" in f for f in findings)
+    assert ctx.checker_finding_items[GOAL_KEY] == {("verify", "the alarm is enabled")}
+
+
+@pytest.mark.asyncio
+async def test_retiring_an_item_withdraws_its_registered_headline(tmp_path):
+    """A headline registered by an earlier failing attempt disappears from the
+    plan when the user guidance retires the item that produced it; a headline
+    that still names a live item stays."""
+    from artemis.graph.checkpoints import retire_check_items
+
+    plan_path = _write_plan(tmp_path)
+    ctx = _make_ctx(tmp_path)
+    run = _done_run(ctx, CheckReport(verdicts=[_verdict("verify", "failed")]))
+    harvest_run(ctx, _make_state(), run, allow_side_effects=True)
+    assert "- finding: verify failed" in plan_path.read_text(encoding="utf-8")
+
+    retire_check_items(ctx, [RETIRED_ASSERT])  # unrelated item: headline stays
+    assert "- finding: verify failed" in plan_path.read_text(encoding="utf-8")
+    assert ctx.guidance_retired_checks == {RETIRED_ASSERT}
+
+    retire_check_items(ctx, [RETIRED_VERIFY])
+    assert "- finding:" not in plan_path.read_text(encoding="utf-8")
+    assert ctx.checker_findings == {}
+    assert ctx.checker_finding_items == {}
+    assert ctx.guidance_retired_checks == {RETIRED_ASSERT, RETIRED_VERIFY}
+
+    # The plan-write path reaches the same helper: dropping a waived line
+    # after a headline was registered removes the headline on that write.
+    plan_path = _write_plan(tmp_path)
+    ctx = _make_ctx(tmp_path, disable_planner_validation=True)
+    ctx.guidance_unprotected_checks = set()
+    ctx.guidance_retired_checks = set()
+    run = _done_run(ctx, CheckReport(verdicts=[_verdict("verify", "failed")]))
+    harvest_run(ctx, _make_state(), run, allow_side_effects=True)
+    with_finding = plan_path.read_text(encoding="utf-8")
+    assert "- finding: verify failed" in with_finding
+    _guidance_arrives(ctx, with_finding)
+    without_verify = with_finding.replace(VERIFY_LINE, "")
+    on_disk = await _plan_write(tmp_path, ctx, with_finding, without_verify)
+    assert VERIFY_LINE not in on_disk
+    assert "- finding:" not in on_disk
+    assert ctx.guidance_retired_checks == {RETIRED_VERIFY}
+
+
 @pytest.mark.asyncio
 async def test_ledger_is_append_only_fail_then_pass_both_present(tmp_path):
     _write_plan(tmp_path)
diff --git a/tests/unit/graph/test_guidance_plan_edit.py b/tests/unit/graph/test_guidance_plan_edit.py
new file mode 100644
index 0000000..0510383
--- /dev/null
+++ b/tests/unit/graph/test_guidance_plan_edit.py
@@ -0,0 +1,95 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Perception side of the guidance waiver: a non-empty user instruction records
+the plan's current check lines in ``ctx.guidance_unprotected_checks`` on the run
+context (which outlives the per-turn State rebuild); stop-only or empty
+payloads do not, and an ordinary turn never touches the set."""
+
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+
+from artemis.graph.perception import perception_node
+from artemis.graph.state import State
+
+
+async def _run_perception(ctx, payload):
+    with (
+        patch("artemis.graph.perception.is_ocr_configured", return_value=False),
+        patch("artemis.graph.perception.UnifiedMobileController") as controller_cls,
+        patch("artemis.graph.perception._check_injected_instruction_file", return_value=payload),
+    ):
+        device_data = MagicMock()
+        device_data.width = 1080
+        device_data.height = 2400
+        device_data.base64 = "ZHVtbXk="
+        device_data.elements = []
+        controller = MagicMock()
+        controller.get_screen_data = AsyncMock(return_value=device_data)
+        controller_cls.return_value = controller
+
+        state = MagicMock(spec=State)
+        state.structured_decisions = []
+        return await perception_node(state, ctx)
+
+
+PLAN = "- [/] Set the alarm\n  - verify: the alarm list shows 7:30 AM\n- [ ] Next milestone\n"
+
+
+def _ctx(tmp_path):
+    from artemis.utils.notes import get_note_file_path
+
+    ctx = MagicMock()
+    ctx.data_engine = MagicMock()
+    ctx.data_engine.base_dir = tmp_path
+    ctx.data_engine.current_step_id = "step_1"
+    ctx.device = MagicMock()
+    ctx.guidance_unprotected_checks = set()
+    plan_path = get_note_file_path(tmp_path, "task_plan")
+    plan_path.parent.mkdir(parents=True, exist_ok=True)
+    plan_path.write_text(PLAN, encoding="utf-8")
+    return ctx
+
+
+@pytest.mark.asyncio
+async def test_instruction_waives_the_current_check_lines_and_still_reaches_state(tmp_path):
+    ctx = _ctx(tmp_path)
+    update = await _run_perception(ctx, {"instruction": "Skip the toast check"})
+    assert ctx.guidance_unprotected_checks == {("verify", "the alarm list shows 7:30 AM")}
+    assert update["injected_instruction"] == "Skip the toast check"
+    assert update["user_stop_requested"] is False
+
+
+@pytest.mark.asyncio
+async def test_stop_only_or_blank_payload_does_not_arm(tmp_path):
+    ctx = _ctx(tmp_path)
+    update = await _run_perception(ctx, {"release_loop": True})
+    assert update["user_stop_requested"] is True
+    assert ctx.guidance_unprotected_checks == set()
+
+    update = await _run_perception(ctx, {"instruction": "   ", "release_loop": True})
+    assert update["user_stop_requested"] is True
+    assert ctx.guidance_unprotected_checks == set()
+
+
+@pytest.mark.asyncio
+async def test_ordinary_turn_leaves_the_waiver_as_it_was(tmp_path):
+    """The per-turn reset applies to State (``injected_instruction`` goes back
+    to None); the waiver on the context lives for the rest of the run."""
+    ctx = _ctx(tmp_path)
+    ctx.guidance_unprotected_checks = {("verify", "earlier line")}
+    update = await _run_perception(ctx, None)
+    assert update["injected_instruction"] is None
+    assert ctx.guidance_unprotected_checks == {("verify", "earlier line")}
diff --git a/tests/unit/mcp/test_action_executor_helper_tools.py b/tests/unit/mcp/test_action_executor_helper_tools.py
index 1b2a02a..adb9a83 100644
--- a/tests/unit/mcp/test_action_executor_helper_tools.py
+++ b/tests/unit/mcp/test_action_executor_helper_tools.py
@@ -77,6 +77,11 @@ async def test_ask_explorer_runs_the_pipeline_for_the_executor_agent():
     assert result.status == "success"
     assert "Explorer located 1 candidate(s) for 'blue Send button'" in result.text_summary
     assert "[1] 'Send' at normalized [500, 500]" in result.text_summary
+    # This executor's click resolves an index against the element list the
+    # candidates just joined, so the guidance teaches the index syntax (Pro
+    # parity) next to the coordinates.
+    assert "target=3, a bare integer" in result.text_summary
+    assert "normalized coordinate" in result.text_summary
     # Candidates were registered on the state for index-based actions.
     assert state.indexed_points == [[540, 1200]]
     assert state.indexed_elements[0]["index"] == 1
diff --git a/tests/unit/mcp/test_action_executor_semantics.py b/tests/unit/mcp/test_action_executor_semantics.py
index 35272b6..1efa09a 100644
--- a/tests/unit/mcp/test_action_executor_semantics.py
+++ b/tests/unit/mcp/test_action_executor_semantics.py
@@ -12,12 +12,14 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-"""Coordinate targets must be described by the model, never inferred.
+"""Targets are either observed (an element index) or described (coordinates).
 
-The Flash/Validator dialect addresses every target by coordinates, so the
-executor refuses a click, long press, focused input, coordinate swipe or click
-sequence that does not say what it is aiming at. The description is recorded
-by the runner and never reaches the wire.
+Flash binds the Pro Operator's agent dialect: a click, long press or focused
+input names an element index from the indexed UI list -- resolved here to the
+element's center with its observed text/bounds/id recorded -- or a coordinate
+pair, which the model must describe itself. A coordinate swipe or click
+sequence must be described too. Nothing is inferred, the description never
+reaches the wire, and the wire only ever sees coordinates.
 """
 
 from unittest.mock import Mock
@@ -44,6 +46,123 @@ def _state():
     return state
 
 
+def _indexed_state():
+    """Two observed elements (pixel centers, the shape ``observe()`` writes)."""
+    state = _state()
+    state.indexed_elements = [
+        {
+            "index": 1,
+            "center": [540, 1248],
+            "text": "Wi-Fi",
+            "bounds": [40, 1152, 1040, 1344],
+            "class": "android.widget.TextView",
+            "resource_id": "android:id/title",
+            "is_ocr": False,
+        },
+        {
+            "index": 2,
+            "center": [540, 720],
+            "text": "Search settings",
+            "bounds": [80, 660, 1000, 780],
+            "class": "android.widget.EditText",
+            "resource_id": "com.android.settings:id/search",
+            "is_ocr": False,
+        },
+    ]
+    state.indexed_points = [el["center"] for el in state.indexed_elements]
+    return state
+
+
+# --- Index targets: resolved against the element list, observed semantics recorded ---
+
+
+@pytest.mark.parametrize("index", [1, "1", 1.0, [1]])
+def test_click_index_resolves_to_the_elements_center_and_records_observed_fields(index):
+    executor = _make_executor()
+    wire_name, wire_args, _, recorded = executor._translate(
+        "click", {"target": index}, _indexed_state()
+    )
+    assert wire_name == "click"
+    # 540/1080 -> 500, 1248/2400 -> 520 (normalized 0-1000)
+    assert wire_args == {"target": [500, 520], "times": 1, "delay_ms": 100}
+    assert recorded == {
+        "target_text": "Wi-Fi",
+        "target_bounds": [37, 480, 963, 560],
+        "target_resource_id": "android:id/title",
+        "target_class": "android.widget.TextView",
+    }
+    assert "target_description" not in recorded
+
+
+def test_index_target_needs_no_description_and_ignores_a_stray_one():
+    """An index already names its element; the model's belief never mixes with
+    the observation on the record."""
+    executor = _make_executor()
+    _, wire_args, _, recorded = executor._translate(
+        "click", {"target": 2, "target_description": "the search box"}, _indexed_state()
+    )
+    assert wire_args["target"] == [500, 300]
+    assert recorded["target_text"] == "Search settings"
+    assert "target_description" not in recorded
+
+
+def test_long_press_and_input_text_resolve_indices_too():
+    executor = _make_executor()
+    _, press_args, _, recorded = executor._translate(
+        "long_press", {"target": 1, "duration": 1500}, _indexed_state()
+    )
+    assert press_args == {"target": [500, 520], "duration_ms": 1500}
+    assert recorded["target_text"] == "Wi-Fi"
+
+    _, type_args, _, recorded = executor._translate(
+        "input_text", {"text": "wifi", "target": 2}, _indexed_state()
+    )
+    assert type_args == {"text": "wifi", "target": [500, 300], "clear_exist": True}
+    assert recorded["target_resource_id"] == "com.android.settings:id/search"
+
+
+@pytest.mark.parametrize("name, label", [("click", "click"), ("long_press", "long press")])
+def test_out_of_range_index_is_refused_with_the_active_range(name, label):
+    executor = _make_executor()
+    with pytest.raises(_ArgError) as excinfo:
+        executor._translate(name, {"target": 7}, _indexed_state())
+    message = str(excinfo.value)
+    assert message.startswith(f"Error during {label}: Invalid target index 7.")
+    assert "1 to 2" in message
+    assert "ask_explorer" in message
+
+
+def test_index_against_an_empty_list_is_refused():
+    executor = _make_executor()
+    with pytest.raises(_ArgError) as excinfo:
+        executor._translate("click", {"target": 1}, _state())
+    message = str(excinfo.value)
+    assert "Invalid target index 1" in message
+    assert "empty" in message
+
+
+def test_unusable_target_is_refused_with_both_syntaxes_named():
+    executor = _make_executor()
+    with pytest.raises(_ArgError) as excinfo:
+        executor._translate("click", {"target": "the button"}, _indexed_state())
+    message = str(excinfo.value)
+    assert message.startswith("Error during click: Invalid target format")
+    assert "element index" in message and "[x, y]" in message
+
+
+def test_index_resolution_uses_the_live_device_resolution():
+    """The element list is built against the device size ``observe()`` wrote
+    on the context; a different resolution maps the same pixels differently."""
+    executor = _make_executor(width=720, height=1600)
+    state = _indexed_state()
+    state.indexed_elements[0]["center"] = [360, 800]
+    _, wire_args, _, _ = executor._translate("click", {"target": 1}, state)
+    assert wire_args["target"] == [500, 500]
+
+
+# --- Coordinate targets: the model describes what it aims at -------------------------
+
+
 @pytest.mark.parametrize(
     "name, args, label",
     [
diff --git a/tests/unit/mcp/test_action_specs.py b/tests/unit/mcp/test_action_specs.py
index 3bed8bf..d89c277 100644
--- a/tests/unit/mcp/test_action_specs.py
+++ b/tests/unit/mcp/test_action_specs.py
@@ -17,12 +17,11 @@
 Two kinds of protection:
 
 * **Fixture pins** freeze the exact schema each model surface receives (operator
-  shells, Validator/Flash declarations, the action server manifest). A schema change
-  must be a conscious act: regenerate the fixture in the same commit and say why.
-* **Bridge derivation** re-derives every cross-dialect parameter difference from the
-  generated schemas and requires it to be declared in ``ActionSpec.param_bridge``.
-  Undeclared divergence between what one agent sees and what another sees -- the
-  historical definition of drift -- fails here instead of shipping.
+  shells, Flash declarations, the action server manifest). A schema change must be a
+  conscious act: regenerate the fixture in the same commit and say why.
+* **Projection identity** checks that the Flash declaration of every shared action
+  is the operator shell's own description and parameters, so the two profiles can
+  never see different tools under one name -- the historical definition of drift.
 """
 
 import json
@@ -130,47 +129,71 @@ def test_validator_declaration_order_is_stable():
     ]
 
 
-# --- Bridge derivation: dialect differences must be declared -------------------------
+# --- Projection identity: Flash binds the operator shell, projected ------------------
 
 
-def _operator_param_names(name: str) -> list[str]:
-    schema = convert_to_openai_tool(operator_shell_tool(name))
-    return list(schema["function"]["parameters"].get("properties", {}))
+def _without_optional_noise(schema: dict) -> dict:
+    """The pydantic-generated property schema minus what only marks optionality.
+
+    ``default`` and the ``null`` alternative say "optional"; the declaration says
+    that through ``required`` alone.
+    """
+    out = {k: v for k, v in schema.items() if k not in ("anyOf", "default")}
+    if "anyOf" in schema:
+        members = [m for m in schema["anyOf"] if m.get("type") != "null"]
+        out.update(members[0] if len(members) == 1 else {"anyOf": members})
+    return out
 
 
-def _declaration_param_names(name: str) -> list[str]:
-    return list(tool_declaration(name).parameters.get("properties", {}))
-
-
-def test_param_bridge_is_exact():
-    """Every operator<->declaration parameter difference is declared, none invented."""
+def test_flash_declarations_are_the_operator_shells_projected():
+    """One definition, two bindings: for every action with an operator shell, the
+    Flash ``ToolDeclaration`` carries the shell's description, parameter names,
+    descriptions, types (index-or-coordinates unions included) and required set."""
     for spec in ACTION_SPECS.values():
-        if spec.operator is None or spec.declaration is None:
-            assert spec.param_bridge == {}, (
-                f"'{spec.name}' declares a param_bridge without both dialects."
-            )
+        if spec.operator is None:
             continue
-        operator_names = _operator_param_names(spec.name)
-        declaration_names = _declaration_param_names(spec.name)
-        assert set(spec.param_bridge) == set(operator_names), (
-            f"'{spec.name}': param_bridge keys must cover exactly the operator"
-            f" params. bridge={sorted(spec.param_bridge)} operator={operator_names}"
-        )
-        assert set(spec.param_bridge.values()) == set(declaration_names), (
-            f"'{spec.name}': param_bridge values must cover exactly the declaration"
-            f" params. bridge={sorted(spec.param_bridge.values())}"
-            f" declaration={declaration_names}"
-        )
-
-
-def test_renamed_params_are_documented():
-    """A cross-dialect rename is a deliberate difference; it must carry prose."""
-    for spec in ACTION_SPECS.values():
-        renames = {k: v for k, v in spec.param_bridge.items() if k != v}
-        if renames:
-            assert spec.differences, (
-                f"'{spec.name}' renames {renames} across dialects but documents no differences."
+        shell = convert_to_openai_tool(operator_shell_tool(spec.name))["function"]
+        declaration = tool_declaration(spec.name)
+        assert declaration.description == shell["description"], spec.name
+        shell_props = shell["parameters"]["properties"]
+        decl_props = declaration.parameters["properties"]
+        assert list(decl_props) == list(shell_props), spec.name
+        for param, schema in shell_props.items():
+            assert decl_props[param] == _without_optional_noise(schema), (
+                f"'{spec.name}.{param}' diverges between the operator shell and the"
+                " Flash declaration."
             )
+        assert declaration.parameters["required"] == shell["parameters"].get("required", []), (
+            spec.name
+        )
+
+
+def test_point_targets_accept_an_index_or_coordinates_in_both_profiles():
+    """click / long_press / input_text address an element by index or by
+    normalized coordinates; the description is required only for coordinates."""
+    for name in ("click", "long_press", "input_text"):
+        target = tool_declaration(name).parameters["properties"]["target"]
+        assert target["anyOf"] == [
+            {"type": "integer"},
+            {"type": "array", "items": {"type": "integer"}},
+        ], name
+        assert "target_description" not in tool_declaration(name).parameters["required"], name
+    assert tool_declaration("click_sequence").parameters["required"] == [
+        "sequence",
+        "target_descriptions",
+    ]
+
+
+def test_shared_descriptions_are_identical_between_profiles():
+    for name in ("swipe", "press_key", "manage_app", "wait_for_delay"):
+        assert tool_declaration(name).description == operator_shell_tool(name).description
+
+
+def test_documented_differences_concern_the_wire_only():
+    """The agent dialect is single-sourced; a spec may only document how the
+    agent dialect differs from the wire (spelling, vocabulary, resolution)."""
+    for spec in ACTION_SPECS.values():
+        assert "declaration dialect" not in spec.differences, spec.name
 
 
 # --- Manifest coverage ---------------------------------------------------------------
diff --git a/tests/unit/mcp/test_diagnose_tool.py b/tests/unit/mcp/test_diagnose_tool.py
new file mode 100644
index 0000000..1efd6dd
--- /dev/null
+++ b/tests/unit/mcp/test_diagnose_tool.py
@@ -0,0 +1,1141 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Unit tests for the mobile_diagnose MCP tool."""
+
+import asyncio
+from contextlib import ExitStack
+import inspect
+import shutil
+import tempfile
+import time
+from unittest.mock import AsyncMock, MagicMock, patch
+
+import pytest
+
+from artemis.core.diagnostics.emulator_manager import EmulatorLaunchStage
+from artemis.core.diagnostics.probes.host_probe import IntegrationHostProbe
+from artemis.core.diagnostics.schema import (
+    DeviceInfo,
+    ProbeAction,
+    ProbeCategory,
+    ProbeResult,
+    ProbeStatus,
+    SystemReadinessReport,
+)
+from artemis.runtime import trace_store
+from artemis.runtime.device_lock import DeviceLockOwner
+from mcp_server.tools import diagnose
+from mcp_server.tools.diagnose import mobile_diagnose
+
+_IDLE_EMULATOR = {
+    "avd_name": None,
+    "status": EmulatorLaunchStage.IDLE,
+    "pid": None,
+    "serial": None,
+    "stage_message": "Ready to launch",
+    "progress_percent": 0,
+    "started_at": None,
+    "elapsed_seconds": 0,
+    "error": None,
+    "logs": [],
+    "can_retry": True,
+}
+
+
+def _emulator_state(status: EmulatorLaunchStage, avd: str = "Pixel_8", **extra) -> dict:
+    state = dict(_IDLE_EMULATOR)
+    state.update(
+        {
+            "avd_name": avd,
+            "status": status,
+            "pid": 4242,
+            "stage_message": f"stage {status.value}",
+            "progress_percent": 30,
+            "started_at": time.time() - 12,
+            "elapsed_seconds": 12,
+            "logs": ["emulator: INFO: boot", "second log line"],
+        }
+    )
+    state.update(extra)
+    return state
+
+
+@pytest.fixture
+def temp_trace_env(monkeypatch):
+    temp_dir = tempfile.mkdtemp()
+    monkeypatch.setattr(trace_store, "TRACES_DIR", temp_dir)
+    yield temp_dir
+    shutil.rmtree(temp_dir, ignore_errors=True)
+
+
+def _probe(
+    probe_id: str,
+    status: ProbeStatus,
+    *,
+    blocker: bool = True,
+    category: ProbeCategory = ProbeCategory.RUNTIME,
+    summary: str = "",
+    description: str = "",
+    metadata: dict | None = None,
+    actions: list[ProbeAction] | None = None,
+) -> ProbeResult:
+    return ProbeResult(
+        id=probe_id,
+        category=category,
+        title=probe_id.replace("_", " ").title(),
+        status=status,
+        is_blocker=blocker,
+        summary=summary or status.value,
+        description=description or f"{probe_id} is {status.value}",
+        metadata=metadata or {},
+        actions=actions or [],
+    )
+
+
+def _credentials_metadata() -> dict:
+    return {
+        "providers": [
+            {
+                "provider": "google",
+                "label": "Gemini",
+                "masked": "AIza...abcd",
+                "raw_key": "SECRET-GOOGLE",
+                "key": "SECRET-GOOGLE",
+            },
+            {
+                "provider": "openai",
+                "label": "ChatGPT",
+                "masked": "sk-...wxyz",
+                "raw_key": "SECRET-OPENAI",
+                "key": "SECRET-OPENAI",
+            },
+        ],
+        "api_keys": {
+            "google": "SECRET-GOOGLE",
+            "gemini": "SECRET-GOOGLE",
+            "openai": "SECRET-OPENAI",
+            "ocr": "SECRET-OCR",
+        },
+        "current_key": "SECRET-GOOGLE",
+        "current_gemini_key": "SECRET-GOOGLE",
+        "has_ocr_key": True,
+    }
+
+
+def _healthy_probes() -> list[ProbeResult]:
+    return [
+        _probe("python_runtime", ProbeStatus.PASS),
+        _probe("system_config", ProbeStatus.PASS),
+        _probe("toolchain", ProbeStatus.PASS, blocker=False, category=ProbeCategory.TOOLCHAIN),
+        _probe(
+            "gemini_api_key",
+            ProbeStatus.PASS,
+            category=ProbeCategory.CREDENTIALS,
+            metadata=_credentials_metadata(),
+        ),
+        _probe(
+            "vision_ocr_key", ProbeStatus.PASS, blocker=False, category=ProbeCategory.CREDENTIALS
+        ),
+        _probe(
+            "android_adb",
+            ProbeStatus.PASS,
+            category=ProbeCategory.DEVICE,
+            metadata={
+                "installed": True,
+                "adb_keys": {"is_corrupted": False},
+                "installed_avds": [],
+                "devices": [
+                    {
+                        "serial": "pixel-1",
+                        "state": "device",
+                        "installed_packages": ["a", "b", "c"],
+                    }
+                ],
+            },
+        ),
+    ]
+
+
+def _no_device_probes(installed_avds: list[str] | None = None) -> list[ProbeResult]:
+    probes = _healthy_probes()
+    avds = installed_avds if installed_avds is not None else ["Pixel_8", "Tablet_API_35"]
+    actions = [
+        ProbeAction(
+            action_type="command",
+            label=f"Launch {avd}",
+            payload=f"C:/Android/Sdk/emulator/emulator.exe -avd {avd}",
+        )
+        for avd in avds
+    ] or [
+        ProbeAction(
+            action_type="command",
+            label="Start Default Emulator",
+            payload="emulator -avd Pixel_8_API_34",
+        )
+    ]
+    actions.append(
+        ProbeAction(
+            action_type="hint",
+            label="Connect via USB",
+            payload="Connect your Android phone via USB cable and enable USB Debugging.",
+        )
+    )
+    probes[5] = _probe(
+        "android_adb",
+        ProbeStatus.WARN,
+        category=ProbeCategory.DEVICE,
+        summary="No Device",
+        description="ADB is ready, but no active Android device or emulator was detected.",
+        metadata={
+            "installed": True,
+            "adb_keys": {"is_corrupted": False},
+            "installed_avds": avds,
+            "devices": [],
+        },
+        actions=actions,
+    )
+    return probes
+
+
+def _host(status: ProbeStatus = ProbeStatus.PASS, **metadata) -> ProbeResult:
+    base = {
+        "os": "win32",
+        "project_root": "/proj",
+        "server_python": "/proj/.venv/bin/python",
+        "runner_python": "/proj/.venv/bin/python",
+        "venv_python": "/proj/.venv/bin/python",
+        "venv_exists": True,
+        "interpreter_matches_venv": True,
+        "env_file": "/proj/.env",
+        "env_file_exists": True,
+        "traces_dir": "/proj/traces",
+        "traces_dir_writable": True,
+        "traces_dir_error": None,
+        "daemon": {
+            "host": "127.0.0.1",
+            "port": 8000,
+            "standalone_forced": False,
+            "reachable": False,
+            "port_in_use": False,
+            "port_held_by_other_process": False,
+            "log_path": "/logs/daemon.log",
+        },
+    }
+    base.update(metadata)
+    # Mirrors the real probe: a WARN there degrades, it does not block.
+    return _probe("integration_host", status, blocker=status is not ProbeStatus.WARN, metadata=base)
+
+
+def _report(probes: list[ProbeResult], active_device: DeviceInfo | None = None):
+    blockers = [p for p in probes if p.is_blocker]
+    passed = [p for p in blockers if p.status is ProbeStatus.PASS]
+    return SystemReadinessReport(
+        overall_ready=len(blockers) == len(passed),
+        blocker_count=len(blockers),
+        passed_blocker_count=len(passed),
+        probes=probes,
+        active_device=active_device,
+        os_type="linux",
+        timestamp=time.time(),
+    )
+
+
+def _owner(device_id: str = "pixel-1", session_id: str = "trace-123") -> DeviceLockOwner:
+    return DeviceLockOwner(
+        pid=777,
+        process_created_at=1.0,
+        token="tok-1",
+        device_id=device_id,
+        description="Open settings and toggle wifi",
+        acquired_at="2026-09-09T10:00:00+00:00",
+        session_id=session_id,
+        ingress="mcp",
+        lock_scope=None,
+    )
+
+
+def _run(
+    probes,
+    host=None,
+    *,
+    report=None,
+    run_all=None,
+    emulator_status=None,
+    launch=None,
+    active_owners=None,
+    queued=None,
+    cleanup=0,
+    validate=None,
+    smoke=None,
+    **kwargs,
+):
+    """Run the tool with every side-effecting collaborator stubbed."""
+    with ExitStack() as stack:
+        stack.enter_context(
+            patch.object(
+                diagnose.readiness_engine,
+                "run_all",
+                run_all or AsyncMock(return_value=report or _report(probes)),
+            )
+        )
+        stack.enter_context(
+            patch.object(IntegrationHostProbe, "probe", AsyncMock(return_value=host or _host()))
+        )
+        stack.enter_context(
+            patch.object(
+                diagnose.readiness_engine,
+                "get_emulator_status",
+                MagicMock(return_value=emulator_status or dict(_IDLE_EMULATOR)),
+            )
+        )
+        stack.enter_context(
+            patch.object(
+                diagnose.readiness_engine,
+                "launch_emulator",
+                launch or AsyncMock(return_value=_emulator_state(EmulatorLaunchStage.STARTING)),
+            )
+        )
+        stack.enter_context(
+            patch.object(
+                diagnose.DeviceExecutionLock,
+                "get_active_owners",
+                MagicMock(return_value=active_owners or {}),
+            )
+        )
+        stack.enter_context(
+            patch.object(
+                diagnose.DeviceExecutionLock,
+                "get_queued_tasks",
+                MagicMock(return_value=queued or []),
+            )
+        )
+        stack.enter_context(
+            patch.object(
+                diagnose.DeviceExecutionLock,
+                "cleanup_stale_locks",
+                cleanup if isinstance(cleanup, MagicMock) else MagicMock(return_value=cleanup),
+            )
+        )
+        stack.enter_context(
+            patch.object(
+                diagnose,
+                "validate_api_key",
+                validate or AsyncMock(return_value=(True, "verified")),
+            )
+        )
+        stack.enter_context(
+            patch.object(
+                diagnose,
+                "_device_smoke_test",
+                smoke or AsyncMock(return_value=_smoke_ok()),
+            )
+        )
+        return asyncio.run(mobile_diagnose(**kwargs))
+
+
+def _smoke_ok(serial: str = "pixel-1") -> dict:
+    return {
+        "ok": True,
+        "serial": serial,
+        "elapsed_seconds": 3.2,
+        "screenshot_bytes": 120_000,
+        "element_count": 42,
+        "error": None,
+        "fix": [],
+    }
+
+
+# --------------------------------------------------------------------------- #
+# Schema / shape
+# --------------------------------------------------------------------------- #
+
+
+def test_tool_signature_and_registration():
+    sig = inspect.signature(mobile_diagnose)
+    assert sig.parameters["attempt_fix"].default is False
+    assert sig.parameters["device_serial"].default is None
+    assert sig.parameters["launch_avd"].default is None
+    assert sig.parameters["verify_credentials"].default is False
+    assert sig.parameters["probe_device"].default is False
+    doc = mobile_diagnose.__doc__ or ""
+    for field in (
+        "next_steps",
+        "checks",
+        "host",
+        "device",
+        "emulator",
+        "tasks",
+        "credentials",
+        "device_probe",
+        "fixes_applied",
+        "logs",
+        "launch_avd",
+        "verify_credentials",
+        "probe_device",
+    ):
+        assert field in doc
+
+    from mcp_server.base import mcp
+
+    tool_names = {t.name for t in asyncio.run(mcp.list_tools())}
+    assert "mobile_diagnose" in tool_names
+
+
+def test_ready_environment_reports_ready_with_slim_shape(temp_trace_env):
+    device = DeviceInfo(
+        serial="pixel-1",
+        model="Pixel 8",
+        android_version="15",
+        is_locked=False,
+        installed_packages=["a", "b"],
+        screen_resolution="1080x2400",
+    )
+    result = _run(_healthy_probes(), report=_report(_healthy_probes(), active_device=device))
+
+    assert result["verdict"] == "ready"
+    assert "overall_ready" not in result
+    assert "active_device" not in result
+    assert result["next_steps"] == [
+        "Environment is ready. Use mobile_run_task to delegate a task; pass device_serial "
+        "when more than one device is attached."
+    ]
+    assert "SECRET" not in repr(result)
+
+    # Passing checks are one line each: no detail / fix / facts.
+    for check in result["checks"]:
+        assert check["status"] == "pass"
+        assert set(check) == {"id", "title", "status", "required", "summary"}
+
+    # Fix order: runtime first, then host, credentials, device, toolchain.
+    assert [c["id"] for c in result["checks"]][:5] == [
+        "python_runtime",
+        "system_config",
+        "integration_host",
+        "gemini_api_key",
+        "android_adb",
+    ]
+    assert result["device"] == {
+        "serial": "pixel-1",
+        "state": "device",
+        "model": "Pixel 8",
+        "android_version": "15",
+        "is_locked": False,
+        "is_emulator": False,
+    }
+    assert result["host"] == {
+        "server_python": "/proj/.venv/bin/python",
+        "runner_python": "/proj/.venv/bin/python",
+        "interpreter_matches_venv": True,
+        "env_file": "/proj/.env",
+        "env_file_exists": True,
+        "traces_dir": "/proj/traces",
+        "daemon": {
+            "port": 8000,
+            "reachable": False,
+            "port_held_by_other_process": False,
+            "log_path": "/logs/daemon.log",
+        },
+    }
+    assert result["emulator"] is None
+    assert result["credentials"] is None
+    assert result["device_probe"] is None
+    assert result["tasks"] == {"active": [], "queued": []}
+    assert result["logs"]["mcp_stderr_log"].endswith("mcp_stderr.log")
+    assert result["logs"]["daemon_log"] == "/logs/daemon.log"
+
+
+def test_host_mcp_client_is_forwarded_when_probe_reports_it(temp_trace_env):
+    result = _run(_healthy_probes(), host=_host(mcp_client={"name": "cursor", "key": "SECRET"}))
+    assert result["host"]["mcp_client"] == {"name": "cursor"}
+    assert result["device"] is None
+
+
+def test_failing_checks_keep_scrubbed_facts_and_fix_list(temp_trace_env):
+    probes = _healthy_probes()
+    probes[3].status = ProbeStatus.WARN
+    probes[5].status = ProbeStatus.WARN
+    result = _run(probes)
+
+    creds = next(c for c in result["checks"] if c["id"] == "gemini_api_key")
+    assert creds["category"] == "auth"
+    assert creds["facts"]["providers"] == [
+        {"provider": "google", "label": "Gemini", "masked": "AIza...abcd"},
+        {"provider": "openai", "label": "ChatGPT", "masked": "sk-...wxyz"},
+    ]
+    assert "api_keys" not in creds["facts"]
+    assert creds["fix"] == []
+    assert "SECRET" not in repr(result)
+
+    adb = next(c for c in result["checks"] if c["id"] == "android_adb")
+    device = adb["facts"]["devices"][0]
+    assert device["installed_package_count"] == 3
+    assert "installed_packages" not in device
+
+
+def test_optional_toolchain_failure_is_degraded(temp_trace_env):
+    probes = _healthy_probes()
+    probes[2] = _probe(
+        "toolchain",
+        ProbeStatus.FAIL,
+        blocker=False,
+        category=ProbeCategory.TOOLCHAIN,
+        summary="Missing scrcpy",
+        description="scrcpy is not installed; video capture is disabled.",
+        actions=[
+            ProbeAction(action_type="command", label="Install", payload="brew install scrcpy")
+        ],
+    )
+    result = _run(probes)
+
+    assert result["verdict"] == "degraded"
+    assert result["next_steps"][0] == (
+        "[OPTIONAL] Toolchain: scrcpy is not installed; video capture is disabled."
+    )
+    assert "  Run: brew install scrcpy" in result["next_steps"]
+
+
+# --------------------------------------------------------------------------- #
+# Command hygiene
+# --------------------------------------------------------------------------- #
+
+
+def test_unauthorized_device_is_blocked_with_actionable_steps(temp_trace_env):
+    probes = _healthy_probes()
+    probes[5] = _probe(
+        "android_adb",
+        ProbeStatus.WARN,
+        category=ProbeCategory.DEVICE,
+        summary="Device Unauthorized",
+        description="Device detected (abc), but USB debugging is not yet authorized.",
+        metadata={
+            "installed": True,
+            "adb_keys": {"is_corrupted": False},
+            "installed_avds": [],
+            "devices": [{"serial": "abc", "state": "unauthorized"}],
+        },
+        actions=[
+            ProbeAction(action_type="hint", label="Authorize", payload="Tap Allow on the phone."),
+            ProbeAction(
+                action_type="command",
+                label="Restart ADB",
+                payload=r"C:\sdk\platform-tools\adb.exe kill-server && C:\sdk\platform-tools\adb.exe start-server",
+            ),
+            ProbeAction(action_type="link", label="Docs", payload="https://example.test/adb"),
+        ],
+    )
+    result = _run(probes)
+
+    assert result["verdict"] == "blocked"
+    steps = result["next_steps"]
+    assert steps[0] == (
+        "[REQUIRED] Android Adb: Device detected (abc), but USB debugging is not yet authorized."
+    )
+    assert "  Guidance: Tap Allow on the phone." in steps
+    # `&&` chains are split into consecutive Run lines (PowerShell 5.1 cannot parse &&).
+    first = steps.index(r"  Run: C:\sdk\platform-tools\adb.exe kill-server")
+    assert steps[first + 1] == r"  Run: C:\sdk\platform-tools\adb.exe start-server"
+    assert not any("&&" in s for s in steps)
+    assert "  Docs: https://example.test/adb" in steps
+    assert any("mobile_diagnose(attempt_fix=true)" in s for s in steps)
+    assert steps[-1] == "After each fix, call mobile_diagnose again until verdict is 'ready'."
+    assert "Attention: Android Adb: Device Unauthorized" in result["summary"]
+
+
+def test_emulator_launch_commands_become_launch_avd_guidance(temp_trace_env):
+    result = _run(_no_device_probes(["Pixel_8", "Tablet_API_35"]))
+    steps = result["next_steps"]
+
+    assert result["verdict"] == "blocked"
+    assert not any(s.startswith("  Run:") and "-avd" in s for s in steps)
+    assert (
+        '  Guidance: Call mobile_diagnose(launch_avd="Pixel_8") to start it in the background.'
+        in steps
+    )
+    assert (
+        '  Guidance: Call mobile_diagnose(launch_avd="Tablet_API_35") to start it in the '
+        "background." in steps
+    )
+    # Explicit proposal for the first installed AVD when nothing is ready and nothing boots.
+    assert any(
+        s.startswith('No device is ready. Call mobile_diagnose(launch_avd="Pixel_8")')
+        and "Tablet_API_35" in s
+        for s in steps
+    )
+    assert "  Guidance: Connect your Android phone via USB cable and enable USB Debugging." in steps
+
+
+def test_default_emulator_command_without_installed_avd_is_not_run(temp_trace_env):
+    result = _run(_no_device_probes([]))
+    steps = result["next_steps"]
+
+    assert not any(s.startswith("  Run:") for s in steps)
+    assert any("No AVD named 'Pixel_8_API_34' is installed" in s for s in steps)
+    assert not any(
+        s.startswith("No device is ready. Call mobile_diagnose(launch_avd=") for s in steps
+    )
+
+
+# --------------------------------------------------------------------------- #
+# Credentials guidance
+# --------------------------------------------------------------------------- #
+
+
+def test_missing_credentials_point_to_env_file_not_chat(temp_trace_env):
+    probes = _healthy_probes()
+    probes[3] = _probe(
+        "gemini_api_key",
+        ProbeStatus.FAIL,
+        category=ProbeCategory.CREDENTIALS,
+        summary="Key Missing",
+        actions=[
+            ProbeAction(action_type="command", label="Init", payload="artemis init"),
+            ProbeAction(action_type="link", label="Key", payload="https://aistudio.google.com"),
+        ],
+    )
+    result = _run(probes, host=_host(env_file="/home/u/artemis/.env"))
+
+    steps = result["next_steps"]
+    assert result["verdict"] == "blocked"
+    assert not any(s.strip() == "Run: artemis init" for s in steps)
+    assert any("/home/u/artemis/.env" in s and "Never ask them to paste" in s for s in steps)
+    assert any("interactive" in s for s in steps)
+    assert steps[-1].startswith("After changing the env file")
+
+
+def test_host_problems_come_before_credentials_and_request_restart(temp_trace_env):
+    """A host WARN (interpreter mismatch, missing venv, squatted port) is a
+    degradation the runner works around: the verdict is degraded, never
+    blocked, so a pip/conda checkout is not stuck in a diagnose loop."""
+    host = _host(ProbeStatus.WARN, summary="Host Warning")
+    host.actions = [
+        ProbeAction(
+            action_type="command", label="Regen", payload="uv run artemis mcp --install claude"
+        )
+    ]
+    result = _run(_healthy_probes(), host=host)
+
+    steps = result["next_steps"]
+    assert result["verdict"] == "degraded"
+    assert steps[0].startswith("[OPTIONAL] Integration Host")
+    assert "  Run: uv run artemis mcp --install claude" in steps
+    assert "restart the MCP server" in steps[-1]
+
+
+def test_unwritable_traces_dir_blocks(temp_trace_env):
+    host = _host(ProbeStatus.FAIL, summary="Host Misconfigured", traces_dir_writable=False)
+    result = _run(_healthy_probes(), host=host)
+    assert result["verdict"] == "blocked"
+    assert result["next_steps"][0].startswith("[REQUIRED] Integration Host")
+
+
+# --------------------------------------------------------------------------- #
+# Requested device
+# --------------------------------------------------------------------------- #
+
+
+def test_requested_device_missing_blocks_even_when_environment_is_ready(temp_trace_env):
+    result = _run(_healthy_probes(), device_serial=" emulator-5554 ")
+
+    assert result["verdict"] == "blocked"
+    assert result["next_steps"][0].startswith(
+        "[REQUIRED] Requested device 'emulator-5554' is not attached. Attached: pixel-1 (device)."
+    )
+
+
+def test_requested_device_attached_and_ready_stays_ready(temp_trace_env):
+    result = _run(_healthy_probes(), device_serial="pixel-1")
+    assert result["verdict"] == "ready"
+
+
+def test_multiple_ready_devices_ask_user_to_choose(temp_trace_env):
+    probes = _healthy_probes()
+    probes[5].metadata["devices"].append({"serial": "pixel-2", "state": "device"})
+    result = _run(probes)
+
+    assert result["verdict"] == "ready"
+    assert any(
+        s.startswith("Several devices are ready") and "pixel-2" in s for s in result["next_steps"]
+    )
+
+
+# --------------------------------------------------------------------------- #
+# launch_avd
+# --------------------------------------------------------------------------- #
+
+
+def test_launch_avd_starts_installed_emulator_and_reports_compact_state(temp_trace_env):
+    launch = AsyncMock(return_value=_emulator_state(EmulatorLaunchStage.STARTING))
+    result = _run(_no_device_probes(["Pixel_8"]), launch=launch, launch_avd=" Pixel_8 ")
+
+    launch.assert_awaited_once_with("Pixel_8")
+    assert result["emulator"] == {
+        "avd_name": "Pixel_8",
+        "status": "starting",
+        "stage_message": "stage starting",
+        "error": None,
+        "serial": None,
+        "elapsed_seconds": 12,
+        "progress_percent": 30,
+    }
+    assert "logs" not in result["emulator"]
+    steps = result["next_steps"]
+    launch_line = next(s for s in steps if s.startswith("Emulator 'Pixel_8' is starting"))
+    assert "1-3 minutes" in launch_line
+    assert "60 seconds" in launch_line
+    assert "do not pass launch_avd again" in launch_line
+    # A launch that was just started supersedes the launch proposal and the attempt_fix nudge.
+    assert not any(
+        s.startswith("No device is ready. Call mobile_diagnose(launch_avd=") for s in steps
+    )
+    assert not any("mobile_diagnose(attempt_fix=true)" in s for s in steps)
+
+
+def test_launch_avd_rejects_uninstalled_avd_without_launching(temp_trace_env):
+    launch = AsyncMock()
+    result = _run(_no_device_probes(["Pixel_8", "Tablet_API_35"]), launch=launch, launch_avd="Nope")
+
+    launch.assert_not_awaited()
+    assert result["emulator"] is None
+    assert any(
+        s.startswith("[REQUIRED] AVD 'Nope' is not installed") and "Pixel_8, Tablet_API_35" in s
+        for s in result["next_steps"]
+    )
+
+
+def test_launch_avd_does_not_relaunch_while_booting(temp_trace_env):
+    launch = AsyncMock()
+    booting = _emulator_state(EmulatorLaunchStage.BOOTING)
+    result = _run(
+        _no_device_probes(["Pixel_8"]),
+        launch=launch,
+        emulator_status=booting,
+        launch_avd="Pixel_8",
+    )
+
+    launch.assert_not_awaited()
+    assert result["emulator"]["status"] == "booting"
+    assert any(
+        s.startswith("Emulator 'Pixel_8' is already booting") and "60 seconds" in s
+        for s in result["next_steps"]
+    )
+
+
+def test_launch_in_progress_replaces_connect_device_advice(temp_trace_env):
+    result = _run(
+        _no_device_probes(["Pixel_8"]),
+        emulator_status=_emulator_state(EmulatorLaunchStage.WAITING_FOR_ADB),
+    )
+    steps = result["next_steps"]
+
+    assert result["verdict"] == "blocked"
+    assert result["emulator"]["status"] == "waiting_for_adb"
+    assert any(
+        s.startswith("  Guidance: Emulator 'Pixel_8' is waiting_for_adb")
+        and "instead of asking the user to connect a device" in s
+        for s in steps
+    )
+    assert not any("Connect your Android phone" in s for s in steps)
+    assert not any("mobile_diagnose(attempt_fix=true)" in s for s in steps)
+    assert not any("launch_avd=" in s for s in steps)
+
+
+def test_launch_avd_failure_is_required_step(temp_trace_env):
+    failed = _emulator_state(
+        EmulatorLaunchStage.FAILED, error="emulator binary crashed", stage_message="Failed"
+    )
+    result = _run(
+        _no_device_probes(["Pixel_8"]), launch=AsyncMock(return_value=failed), launch_avd="Pixel_8"
+    )
+    assert result["emulator"]["status"] == "failed"
+    assert any(
+        s == "[REQUIRED] Emulator 'Pixel_8' failed to launch: emulator binary crashed."
+        for s in result["next_steps"]
+    )
+
+
+# --------------------------------------------------------------------------- #
+# verify_credentials
+# --------------------------------------------------------------------------- #
+
+
+def test_verify_credentials_reports_every_provider_without_leaking_keys(temp_trace_env):
+    validate = AsyncMock(return_value=(True, "verified"))
+    result = _run(_healthy_probes(), validate=validate, verify_credentials=True)
+
+    assert result["verdict"] == "ready"
+    assert result["credentials"] == [
+        {"provider": "google", "label": "Gemini", "valid": True, "message": "verified"},
+        {"provider": "openai", "label": "ChatGPT", "valid": True, "message": "verified"},
+        {"provider": "ocr", "label": "Vision OCR", "valid": True, "message": "verified"},
+    ]
+    called = {call.args[0]: call.args[1] for call in validate.await_args_list}
+    assert called == {"google": "SECRET-GOOGLE", "openai": "SECRET-OPENAI", "ocr": "SECRET-OCR"}
+    assert all(call.kwargs["timeout"] == 12.0 for call in validate.await_args_list)
+    assert "SECRET" not in repr(result)
+
+
+def test_verify_credentials_calls_endpoint_providers_by_url(temp_trace_env):
+    """A custom / Ollama / vLLM entry carries its base URL as the "key": the
+    check must hit that endpoint (no auth header) instead of validating the
+    URL as if it were an API key."""
+    validate = AsyncMock(return_value=(True, "verified"))
+    cred = _probe(
+        "gemini_api_key",
+        ProbeStatus.PASS,
+        category=ProbeCategory.CREDENTIALS,
+        metadata={
+            "providers": [
+                {
+                    "provider": "ollama",
+                    "label": "Local Ollama",
+                    "raw_key": "http://localhost:11434/v1",
+                },
+                {"provider": "google", "label": "Gemini", "raw_key": "SECRET-GOOGLE"},
+            ],
+            "api_keys": {},
+        },
+    )
+    probes = [p for p in _healthy_probes() if p.id != "gemini_api_key"] + [cred]
+    _run(probes, validate=validate, verify_credentials=True)
+
+    calls = {call.args[0]: call for call in validate.await_args_list}
+    assert calls["ollama"].args[1] == "EMPTY"
+    assert calls["ollama"].kwargs["base_url"] == "http://localhost:11434/v1"
+    assert calls["google"].args[1] == "SECRET-GOOGLE"
+    assert "base_url" not in calls["google"].kwargs
+
+
+def test_invalid_primary_credential_blocks_and_redacts_message(temp_trace_env):
+    async def _validate(provider, api_key, timeout=12.0):
+        if provider == "google":
+            return False, f"Gemini API verification failed (400): key {api_key} invalid"
+        if provider == "ocr":
+            raise RuntimeError("boom SECRET-OCR")
+        return True, "ok"
+
+    result = _run(
+        _healthy_probes(),
+        host=_host(env_file="/home/u/.env"),
+        validate=AsyncMock(side_effect=_validate),
+        verify_credentials=True,
+    )
+
+    assert result["verdict"] == "blocked"
+    assert "SECRET" not in repr(result)
+    google, openai, ocr = result["credentials"]
+    assert google["valid"] is False and "***" in google["message"]
+    assert openai["valid"] is True
+    assert ocr["valid"] is False and ocr["message"].startswith("verification raised RuntimeError")
+    steps = result["next_steps"]
+    required = next(s for s in steps if s.startswith("[REQUIRED] Gemini API key (google)"))
+    assert "failed live verification" in required
+    assert steps[steps.index(required) + 1].startswith("  Ask the user to add a provider key")
+    assert any("/home/u/.env" in s for s in steps)
+    assert any(s.startswith("[OPTIONAL] Vision OCR API key (ocr)") for s in steps)
+    assert steps[-1].startswith("After changing the env file")
+    assert "Gemini key verification" in result["summary"]
+
+
+def test_invalid_secondary_credential_only_degrades(temp_trace_env):
+    async def _validate(provider, api_key, timeout=12.0):
+        return (provider != "openai", "ok" if provider != "openai" else "401 unauthorized")
+
+    result = _run(
+        _healthy_probes(), validate=AsyncMock(side_effect=_validate), verify_credentials=True
+    )
+    assert result["verdict"] == "degraded"
+    assert any(s.startswith("[OPTIONAL] ChatGPT API key (openai)") for s in result["next_steps"])
+
+
+# --------------------------------------------------------------------------- #
+# Task / lock state
+# --------------------------------------------------------------------------- #
+
+
+def test_tasks_surface_active_and_queued_and_busy_device_step(temp_trace_env):
+    queued_ticket = {
+        "session_id": "trace-456",
+        "goal": "Queued goal",
+        "device_id": "pixel-1",
+        "device_serial": "pixel-1",
+        "adb_endpoint_id": None,
+        "pid": 888,
+        "token": "tok-2",
+        "ingress": "cli",
+        "status": "pending",
+        "created_at": 1700000000.0,
+        "start_time": 1700000000.0,
+    }
+    result = _run(_healthy_probes(), active_owners={"pixel-1": _owner()}, queued=[queued_ticket])
+
+    assert result["tasks"] == {
+        "active": [
+            {
+                "device": "pixel-1",
+                "session_id": "trace-123",
+                "pid": 777,
+                "description": "Open settings and toggle wifi",
+                "ingress": "mcp",
+                "started_at": "2026-09-09T10:00:00+00:00",
+            }
+        ],
+        "queued": [
+            {
+                "device": "pixel-1",
+                "session_id": "trace-456",
+                "pid": 888,
+                "description": "Queued goal",
+                "ingress": "cli",
+                "created_at": 1700000000.0,
+            }
+        ],
+    }
+    assert result["verdict"] == "ready"
+    busy = next(s for s in result["next_steps"] if s.startswith("Device 'pixel-1' is busy"))
+    assert "task trace-123 (pid 777)" in busy
+    assert 'mobile_manage_task(action="stop", trace_id="trace-123")' in busy
+
+
+def test_busy_step_only_for_the_targeted_device(temp_trace_env):
+    probes = _healthy_probes()
+    probes[5].metadata["devices"].append({"serial": "pixel-2", "state": "device"})
+
+    result = _run(probes, active_owners={"pixel-2": _owner("pixel-2")}, device_serial="pixel-1")
+    assert not any("is busy" in s for s in result["next_steps"])
+
+    result = _run(probes, active_owners={"pixel-2": _owner("pixel-2")}, device_serial="pixel-2")
+    assert any(s.startswith("Device 'pixel-2' is busy") for s in result["next_steps"])
+
+    # Two ready devices and no requested serial: nothing to single out.
+    result = _run(probes, active_owners={"pixel-2": _owner("pixel-2")})
+    assert not any("is busy" in s for s in result["next_steps"])
+
+
+# --------------------------------------------------------------------------- #
+# attempt_fix
+# --------------------------------------------------------------------------- #
+
+
+def test_attempt_fix_heals_corrupted_keys_then_rechecks(temp_trace_env):
+    broken = _healthy_probes()
+    broken[5].metadata["adb_keys"] = {"is_corrupted": True}
+    broken[5].status = ProbeStatus.WARN
+    broken[5].summary = "ADB Key Corrupted"
+    healthy = _healthy_probes()
+
+    run_all = AsyncMock(side_effect=[_report(broken), _report(healthy)])
+    heal = AsyncMock(return_value={"success": True, "message": "keys regenerated"})
+    restart = AsyncMock()
+    with (
+        patch.object(diagnose.readiness_engine, "run_all", run_all),
+        patch.object(diagnose.readiness_engine, "heal_adb_keys", heal),
+        patch.object(diagnose.readiness_engine, "restart_adb_server", restart),
+        patch.object(diagnose.DeviceExecutionLock, "cleanup_stale_locks", return_value=0),
+        patch.object(diagnose.DeviceExecutionLock, "get_active_owners", return_value={}),
+        patch.object(diagnose.DeviceExecutionLock, "get_queued_tasks", return_value=[]),
+        patch.object(IntegrationHostProbe, "probe", AsyncMock(return_value=_host())),
+    ):
+        result = asyncio.run(mobile_diagnose(attempt_fix=True))
+
+    heal.assert_awaited_once()
+    restart.assert_not_awaited()  # healing already restarted ADB
+    assert run_all.await_count == 2
+    assert result["verdict"] == "ready"
+    assert result["fixes_applied"] == [
+        {"fix": "heal_adb_keys", "success": True, "message": "keys regenerated", "skipped": False}
+    ]
+    assert any(s.startswith("Auto-fix heal_adb_keys applied") for s in result["next_steps"])
+
+
+def test_attempt_fix_restarts_adb_only_without_ready_device_or_active_task(temp_trace_env):
+    no_device = _no_device_probes([])
+    restart = AsyncMock(return_value={"success": False, "message": "adb start-server failed"})
+
+    with patch.object(diagnose.readiness_engine, "restart_adb_server", restart):
+        result = _run(no_device, attempt_fix=True)
+    restart.assert_awaited_once()
+    assert result["fixes_applied"][0]["fix"] == "restart_adb_server"
+    assert result["fixes_applied"][0]["success"] is False
+    assert any("did not help" in s for s in result["next_steps"])
+
+    restart.reset_mock()
+    with patch.object(diagnose.readiness_engine, "restart_adb_server", restart):
+        result = _run(no_device, active_owners={"d": _owner("d")}, attempt_fix=True)
+    restart.assert_not_awaited()
+    assert result["fixes_applied"][0]["skipped"] is True
+
+    # A ready device means there is nothing to restart, even with attempt_fix.
+    restart.reset_mock()
+    with patch.object(diagnose.readiness_engine, "restart_adb_server", restart):
+        result = _run(_healthy_probes(), attempt_fix=True)
+    restart.assert_not_awaited()
+    assert result["fixes_applied"] == []
+
+
+def test_attempt_fix_records_stale_lock_cleanup_only_when_something_was_removed(temp_trace_env):
+    run_all = AsyncMock(return_value=_report(_healthy_probes()))
+
+    result = _run(_healthy_probes(), run_all=run_all, cleanup=0, attempt_fix=True)
+    assert result["fixes_applied"] == []
+    assert run_all.await_count == 1
+
+    result = _run(_healthy_probes(), run_all=run_all, cleanup=2, attempt_fix=True)
+    assert result["fixes_applied"] == [
+        {
+            "fix": "cleanup_stale_locks",
+            "success": True,
+            "skipped": False,
+            "message": "removed 2 stale device lock(s) / queue ticket(s)",
+        }
+    ]
+    assert run_all.await_count == 2  # lock cleanup does not change probe results: no re-run
+    assert any(s.startswith("Auto-fix cleanup_stale_locks applied") for s in result["next_steps"])
+
+    failing = MagicMock(side_effect=PermissionError("locked dir"))
+    result = _run(_healthy_probes(), cleanup=failing, attempt_fix=True)
+    assert result["fixes_applied"] == [
+        {
+            "fix": "cleanup_stale_locks",
+            "success": False,
+            "skipped": False,
+            "message": "cleanup raised PermissionError: locked dir",
+        }
+    ]
+
+    # Without attempt_fix the cleanup is never attempted.
+    failing.reset_mock()
+    _run(_healthy_probes(), cleanup=failing)
+    failing.assert_not_called()
+
+
+# --------------------------------------------------------------------------- #
+# probe_device
+# --------------------------------------------------------------------------- #
+
+
+def test_probe_device_ok_keeps_verdict_ready(temp_trace_env):
+    smoke = AsyncMock(return_value=_smoke_ok())
+    result = _run(_healthy_probes(), smoke=smoke, probe_device=True)
+
+    smoke.assert_awaited_once_with("pixel-1")
+    assert result["verdict"] == "ready"
+    assert result["device_probe"] == _smoke_ok()
+    assert not any("Device probe failed" in s for s in result["next_steps"])
+
+
+def test_probe_device_failure_blocks_with_fix_guidance(temp_trace_env):
+    smoke = AsyncMock(
+        return_value={
+            "ok": False,
+            "serial": "pixel-1",
+            "elapsed_seconds": 8.1,
+            "screenshot_bytes": None,
+            "element_count": None,
+            "error": "uiautomator dump timed out after 8s",
+            "fix": ["Unlock the device.", "Run: adb -s pixel-1 shell input keyevent 82"],
+        }
+    )
+    result = _run(_healthy_probes(), smoke=smoke, device_serial="pixel-1", probe_device=True)
+
+    smoke.assert_awaited_once_with("pixel-1")
+    assert result["verdict"] == "blocked"
+    steps = result["next_steps"]
+    idx = steps.index(
+        "[REQUIRED] Device probe failed on pixel-1: uiautomator dump timed out after 8s"
+    )
+    assert steps[idx + 1] == "  Guidance: Unlock the device."
+    assert steps[idx + 2] == "  Guidance: Run: adb -s pixel-1 shell input keyevent 82"
+    assert "Device probe: uiautomator dump timed out" in result["summary"]
+
+
+def test_probe_device_is_skipped_without_a_ready_device(temp_trace_env):
+    smoke = AsyncMock()
+    result = _run(_no_device_probes([]), smoke=smoke, probe_device=True)
+
+    smoke.assert_not_awaited()
+    assert result["device_probe"]["ok"] is False
+    assert "no authorized device" in result["device_probe"]["error"]
+
+
+# --------------------------------------------------------------------------- #
+# Timeout / logs
+# --------------------------------------------------------------------------- #
+
+
+def test_hung_probe_yields_blocked_verdict_instead_of_hanging(temp_trace_env, monkeypatch):
+    async def _never():
+        await asyncio.sleep(10)
+
+    monkeypatch.setattr(diagnose, "DIAGNOSIS_TIMEOUT_SECONDS", 0.05)
+    monkeypatch.setattr(diagnose, "collect_readiness", _never)
+    with (
+        patch.object(diagnose.DeviceExecutionLock, "get_active_owners", return_value={}),
+        patch.object(diagnose.DeviceExecutionLock, "get_queued_tasks", return_value=[]),
+    ):
+        result = asyncio.run(mobile_diagnose())
+
+    assert result["verdict"] == "blocked"
+    assert result["checks"] == []
+    assert result["next_steps"][:2] == ["Run: adb kill-server", "Run: adb start-server"]
+    assert "hung" in result["summary"]
+    for field in ("device", "credentials", "device_probe"):
+        assert result[field] is None
+    assert result["tasks"] == {"active": [], "queued": []}
+
+
+def test_hung_device_probe_still_times_out(temp_trace_env, monkeypatch):
+    async def _hang(serial):
+        await asyncio.sleep(10)
+
+    monkeypatch.setattr(diagnose, "DIAGNOSIS_TIMEOUT_SECONDS", 0.05)
+    result = _run(_healthy_probes(), smoke=AsyncMock(side_effect=_hang), probe_device=True)
+    assert result["verdict"] == "blocked"
+    assert "hung" in result["summary"]
+
+
+def test_logs_surface_recent_errors_and_last_failed_task(temp_trace_env, monkeypatch):
+    monkeypatch.setattr(diagnose.env_utils, "get_project_root", lambda: temp_trace_env)
+    scratch = diagnose.Path(temp_trace_env) / "scratch"
+    scratch.mkdir()
+    (scratch / "mcp_stderr.log").write_text(
+        "info: booted\n\x1b[33mTraceback (most recent call last):\x1b[0m\nModuleNotFoundError: No module named 'x'\nall good\n",
+        encoding="utf-8",
+    )
+    trace_store.init_trace("ok-trace", "fine", "Flash", None)
+    trace_store.update_trace_status("ok-trace", "completed")
+    trace_store.init_trace("bad-trace", "broken", "Flash", None)
+    trace_store.update_trace_status("bad-trace", "failed", error="adb: device offline")
+    with open(trace_store.get_trace_stderr_log_path("bad-trace"), "w", encoding="utf-8") as fh:
+        fh.write("starting runner\n")
+        fh.write("ERROR adb: device offline\n")
+        fh.write("Traceback (most recent call last):\n")
+        fh.write("RuntimeError: device offline\n")
+
+    result = _run(_healthy_probes())
+
+    logs = result["logs"]
+    assert logs["recent_mcp_errors"] == [
+        "Traceback (most recent call last):",
+        "ModuleNotFoundError: No module named 'x'",
+    ]
+    failed = logs["last_failed_task"]
+    assert failed["trace_id"] == "bad-trace"
+    assert failed["error"] == "adb: device offline"
+    assert failed["stderr_log"].endswith("stderr.log")
+    assert failed["recent_errors"] == [
+        "ERROR adb: device offline",
+        "Traceback (most recent call last):",
+        "RuntimeError: device offline",
+    ]
diff --git a/tests/unit/mcp/test_mcp_stdio_lifecycle.py b/tests/unit/mcp/test_mcp_stdio_lifecycle.py
index af3ae70..7861f7a 100644
--- a/tests/unit/mcp/test_mcp_stdio_lifecycle.py
+++ b/tests/unit/mcp/test_mcp_stdio_lifecycle.py
@@ -146,6 +146,7 @@ def test_mcp_stdio_handshake_immediate_input():
             "mobile_manage_task",
             "mobile_get_device_state",
             "mobile_inspect_trace",
+            "mobile_diagnose",
         }.issubset(tool_names)
 
     finally:
diff --git a/tests/unit/mcp/test_mcp_tools.py b/tests/unit/mcp/test_mcp_tools.py
index 15793ef..0064ed9 100644
--- a/tests/unit/mcp/test_mcp_tools.py
+++ b/tests/unit/mcp/test_mcp_tools.py
@@ -584,7 +584,8 @@ async def test_mobile_inspect_trace_step_details_replays_tool_calls_for_flash(te
     assert "error" not in res
     assert res["device_serial"] == "pixel-7"
     details = res["details"]
-    assert "- **Step 1 (Start: 12.0s)**" in details
+    # The header carries the session clock (session start 1000.0, step at 1012.0).
+    assert "- **Step 1 (T+00:12)**" in details
     assert "[Screen]: Asked the explorer, then tapped Save." in details
     assert "Confirm the toggle first." in details
     assert "`ask_explorer(" in details
diff --git a/tests/unit/memory/test_history_chunking.py b/tests/unit/memory/test_history_chunking.py
index e59b8f1..f24c612 100644
--- a/tests/unit/memory/test_history_chunking.py
+++ b/tests/unit/memory/test_history_chunking.py
@@ -161,11 +161,13 @@ def _make(
     *,
     min_active: int = 2,
     max_steps: int = 12,
+    min_steps: int = 3,
     target_tokens: int = 10**9,
     max_chunks: int = 8,
     max_eras: int | None = None,
     meter=None,
     auto_capsule: bool = False,
+    start_ratio: float = 0.35,
 ):
     ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
     engine = FakeEngine(steps)
@@ -174,6 +176,7 @@ def _make(
         engine=engine,
         chunking_config=SimpleNamespace(
             max_steps=max_steps,
+            min_steps=min_steps,
             target_source_tokens=target_tokens,
             model="test-model",
             max_chunks=max_chunks,
@@ -181,12 +184,15 @@ def _make(
         ),
         transcript_config=SimpleNamespace(
             context_budget_tokens=100_000,
+            start_ratio=start_ratio,
             soft_ratio=0.7,
             hard_ratio=0.9,
             min_active_steps=min_active,
         ),
         capsule_service=capsule,
-        meter_getter=meter or (lambda: None),
+        # No meter: the base comes from the ledger's operator-recorded prompt
+        # size (None until recorded), exactly like production wiring.
+        meter_getter=meter,
         goal="TEST GOAL",
     )
     ledger.attach_chunker(chunker)
@@ -267,7 +273,7 @@ def test_action_ledger_renders_incident_and_burst_on_the_step_line():
     assert lines[0].startswith(
         "- Step 3 (T+00:30): Fast-action burst (2 actions, unvetted):"
         " Tapped 'player' at [5, 6] -> Tapped 'Skip' at [7, 8] -> Error: Execution failed"
-        " (general, consecutive failure #1) on burst action 2/2 `Tapped 'Skip' at [7, 8]`:"
+        " (general, consecutive failure #1) on burst action 2/2 `tap 'Skip' at [7, 8]`:"
         " Error: rejected"
     )
     assert "FA:" not in text
@@ -654,7 +660,7 @@ def test_checkpoint_annotation_ignores_unmatched_subgoal():
 
 
 # ---------------------------------------------------------------------------
-# Era merging + recall-only overflow + L3 snapshot
+# Era merging + recall-only overflow + L3 fold
 # ---------------------------------------------------------------------------
 
 
@@ -809,7 +815,7 @@ def test_period_paragraph_degrades_to_milestone_list_when_all_band1_missing():
 
 
 def test_independent_max_eras_cap_decouples_from_max_chunks():
-    """M5: ``chunking.max_eras`` caps eras independently; None follows
+    """``chunking.max_eras`` caps eras independently; None follows
     ``max_chunks`` (the pre-M5 equal-value behavior, asserted by the
     overflow test above)."""
     # A generous era cap keeps every folded era's ledger despite max_chunks=2.
@@ -822,42 +828,56 @@ def test_independent_max_eras_cap_decouples_from_max_chunks():
     assert [e for e in tight.eras if e.recall_only]
 
 
-def test_hard_threshold_renders_l3_snapshot_with_minimal_step_index():
+def _folded_steps(chunker) -> list[int]:
+    return [
+        n
+        for era in chunker.eras
+        if era.recall_only
+        for c in era.chunks
+        for n in range(c.start_step_number, c.end_step_number + 1)
+    ]
+
+
+def test_hard_threshold_folds_frozen_region_into_recall_only_era_with_step_index():
+    """L3 is a recall-only era: the period paragraph (① fields mechanically
+    merged) plus the per-step minimal index of every folded chunk — step,
+    session offset and action phrase, results only via search_history."""
     steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 13)]
     meter = {"value": None}
     ledger, chunker, _, capsule = _make(steps, min_active=2, meter=lambda: meter["value"])
     _run_turns(ledger, chunker, 1, 8, _hashes(4))
     capsule.resolve("chunk:1-4", _capsule(1, 4))
 
-    meter["value"] = 95_000  # ≥ 0.9 * 100k → L3
+    meter["value"] = 95_000  # ≥ 0.9 * 100k → hard; the tiny turns cannot save 5k
     _run_turns(ledger, chunker, 9, 12, lambda i: "hash-c")
 
+    assert chunker.chunks == ()
+    assert chunker.eras and all(era.recall_only for era in chunker.eras)
     frozen = _frozen_text(ledger)
-    assert "[Session snapshot" in frozen
-    assert "Overall goal: TEST GOAL" in frozen
-    assert "Verified facts: fact-1" in frozen
-    assert "Device/app state: Settings page open" in frozen
-    # The minimal per-step index survives: step + time + action phrase for
-    # every chunked step (steps 1–4 and the second event's chunk).
-    assert "--- Step index (minimal width, per chunk) ---" in frozen
-    for chunk in chunker.chunks:
-        for n in range(chunk.start_step_number, chunk.end_step_number + 1):
-            assert f"- Step {n} (T+" in frozen
-    assert "-> dispatched" not in frozen.split("--- Step index")[1]
+    assert "[Chunk" not in frozen
+    assert "[Era 1 | Steps 1–" in frozen
+    # The period paragraph carries the merged ① knowledge.
+    assert "Working toward the login milestone." in frozen
+    assert "Verified: fact-1" in frozen
+    assert "(Step-level ledger via search_history for steps" in frozen
+    # The minimal per-step index survives for every folded step.
+    folded = _folded_steps(chunker)
+    assert folded
+    for n in folded:
+        assert f"- Step {n} (T+" in frozen
+    assert "-> dispatched" not in frozen  # minimal width: no results
 
 
 def test_step_addressability_survives_every_compression_level():
-    """Hard invariant (§8, revised by §10 decision 5 final review): after L2
-    chunks, era merges, and L3, every compressed step's number and
-    session-offset time are directly readable; the extreme period-paragraph
-    layer alone degrades to *period* addressability — step range and start/end
-    offsets must be present in the header."""
+    """After L2 chunks, era merges, and recall-only periods,
+    every compressed step's number and session-offset time stay directly
+    readable — the recall-only layer keeps the per-step minimal index — and
+    the period header pins the step range and start/end offsets."""
     ledger, chunker, _, _ = _many_chunks(6, max_chunks=3)
     frozen = _frozen_text(ledger)
     covered_steps = [
         n
         for era in chunker.eras
-        if not era.recall_only
         for c in era.chunks
         for n in range(c.start_step_number, c.end_step_number + 1)
     ] + [n for c in chunker.chunks for n in range(c.start_step_number, c.end_step_number + 1)]
@@ -865,8 +885,9 @@ def test_step_addressability_survives_every_compression_level():
     for n in covered_steps:
         assert f"- Step {n} (T+" in frozen, f"step {n} lost its addressable line"
 
-    # Extreme layer: recall-only eras stay *period*-addressable — the header
-    # regex pins step range and T+..→T+.. start/end offsets in place.
+    # Extreme layer: recall-only eras stay period-addressable — the header
+    # regex pins step range and T+..→T+.. start/end offsets in place — and
+    # every member step keeps its index line.
     overflow_ledger, overflow_chunker, _, _ = _many_chunks(14, max_chunks=2)
     overflow_frozen = _frozen_text(overflow_ledger)
     recall_eras = [e for e in overflow_chunker.eras if e.recall_only]
@@ -879,6 +900,8 @@ def test_step_addressability_survives_every_compression_level():
         assert re.search(pattern, overflow_frozen), (
             f"era {era.ordinal} lost its period-addressable header"
         )
+    for n in _folded_steps(overflow_chunker):
+        assert f"- Step {n} (T+" in overflow_frozen, f"folded step {n} lost its index line"
 
 
 @pytest.mark.asyncio
@@ -1077,9 +1100,11 @@ def test_failed_capsule_redispatches_and_retains_original():
     assert ledger.frozen_blocks == ()  # original text retained
 
 
-def test_hard_threshold_force_swaps_pending_chunks_into_l3():
-    """Emergency path: only the hard threshold may swap pending chunks — the
-    frozen region becomes the L3 snapshot and ③'s minimal index survives."""
+def test_hard_threshold_force_swaps_pending_chunks_into_recall_only_era():
+    """Emergency path: only the hard threshold may swap pending chunks — they
+    fold straight into a recall-only era (no chunk block ever), the period
+    paragraph degrades to the milestone/step-range list, and ③'s minimal
+    index survives for every folded step."""
     steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 9)]
     meter = {"value": None}
     ledger, chunker, _, _ = _make(steps, min_active=2, meter=lambda: meter["value"])
@@ -1092,16 +1117,704 @@ def test_hard_threshold_force_swaps_pending_chunks_into_l3():
     ledger.render([_observation(9)])
 
     assert chunker.awaiting_chunks == ()
-    assert len(chunker.chunks) >= 1
-    assert all(c.status == "pending" for c in chunker.chunks)
+    assert chunker.chunks == ()
+    assert len(chunker.eras) == 1 and chunker.eras[0].recall_only
+    assert all(c.status == "pending" for c in chunker.eras[0].chunks)
     frozen = _frozen_text(ledger)
-    assert "[Session snapshot" in frozen
-    for chunk in chunker.chunks:
-        for n in range(chunk.start_step_number, chunk.end_step_number + 1):
-            assert f"- Step {n} (T+" in frozen
+    assert "[Chunk" not in frozen and CHUNK_PENDING_NOTE not in frozen
+    assert "[Era 1 | Steps 1–" in frozen
+    assert "Milestones: segment (Steps 1–4)" in frozen  # no band ① anywhere
+    folded = _folded_steps(chunker)
+    assert folded
+    for n in folded:
+        assert f"- Step {n} (T+" in frozen
     assert len(ledger.unchunked_turns()) < 8  # turns actually consumed
 
 
+# ---------------------------------------------------------------------------
+# Minimum chunk length for size / pressure closes
+# ---------------------------------------------------------------------------
+
+
+def test_pressure_close_waits_for_min_steps_instead_of_one_turn_chunks():
+    """Soft pressure with a single open segment: eligible turns age past the
+    floor one per render; they accumulate to min_steps before closing, so the
+    session does not spawn a one-turn chunk (one capsule call) per render."""
+    steps = [_step(i) for i in range(1, 12)]
+    ledger, chunker, _, _ = _make(steps, min_active=2, min_steps=3, meter=lambda: 75_000)
+    _run_turns(ledger, chunker, 1, 5)  # eligible = 2 at the step-5 render
+    assert chunker.awaiting_chunks == ()
+    _run_turns(ledger, chunker, 6, 6)  # eligible = 3 → one 3-turn chunk
+    assert [c.capsule_key for c in chunker.awaiting_chunks] == ["chunk:1-3"]
+    assert chunker.awaiting_chunks[0].trigger == "pressure"
+    _run_turns(ledger, chunker, 7, 8)  # eligible beyond the claim: 1, then 2
+    assert [c.capsule_key for c in chunker.awaiting_chunks] == ["chunk:1-3"]
+    _run_turns(ledger, chunker, 9, 9)
+    assert [c.capsule_key for c in chunker.awaiting_chunks] == ["chunk:1-3", "chunk:4-6"]
+
+
+def test_size_trigger_waits_for_min_steps_even_when_one_turn_exceeds_the_tokens():
+    steps = [_step(i) for i in range(1, 9)]
+    ledger, chunker, _, _ = _make(steps, min_active=2, min_steps=3, target_tokens=10)
+    _run_turns(ledger, chunker, 1, 4)  # eligible = 1, already over the token target
+    assert chunker.awaiting_chunks == ()
+    _run_turns(ledger, chunker, 5, 6)  # eligible = 3
+    assert [c.capsule_key for c in chunker.awaiting_chunks] == ["chunk:1-3"]
+    assert chunker.awaiting_chunks[0].trigger == "size"
+
+
+def test_milestone_close_is_exempt_from_min_steps():
+    steps = [_step(i, "hash-a" if i <= 1 else "hash-b") for i in range(1, 8)]
+    ledger, chunker, _, _ = _make(steps, min_active=2, min_steps=3)
+    _run_turns(ledger, chunker, 1, 4, _hashes(1))  # the 1-step segment aged past the floor
+    assert [c.capsule_key for c in chunker.awaiting_chunks] == ["chunk:1-1"]
+    assert chunker.awaiting_chunks[0].trigger == "milestone"
+
+
+def test_hard_threshold_waives_min_steps():
+    steps = [_step(i) for i in range(1, 8)]
+    meter = {"value": 75_000}
+    ledger, chunker, _, _ = _make(steps, min_active=2, min_steps=3, meter=lambda: meter["value"])
+    _run_turns(ledger, chunker, 1, 4)  # eligible = 1 under soft only: held back
+    assert chunker.awaiting_chunks == ()
+    meter["value"] = 95_000
+    _run_turns(ledger, chunker, 5, 5)  # eligible = 2 < 3, but hard: closes (and folds)
+    assert len(chunker.eras) == 1 and chunker.eras[0].recall_only
+    assert chunker.eras[0].chunks[0].capsule_key == "chunk:1-2"
+
+
+# ---------------------------------------------------------------------------
+# Start gate (swap held below budget*start_ratio) and the context base
+# ---------------------------------------------------------------------------
+
+
+def test_start_gate_holds_ready_chunk_below_start_ratio_then_swaps():
+    """A closed segment prepares its capsule, but the original turns are
+    replaced only once the operator's measured context reaches
+    budget*start_ratio; until then the ready chunk waits in the queue."""
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 11)]
+    meter = {"value": 20_000}  # < 0.35 * 100k
+    ledger, chunker, engine, _ = _make(
+        steps, min_active=2, meter=lambda: meter["value"], auto_capsule=True
+    )
+    _run_turns(ledger, chunker, 1, 8, _hashes(4))
+
+    # Milestone closed steps 1–4 and the capsule is ready, yet nothing swapped.
+    assert [c.status for c in chunker.awaiting_chunks] == ["ready"]
+    assert chunker.chunks == ()
+    assert ledger.frozen_blocks == ()
+    assert len(ledger.unchunked_turns()) == 7
+    # The timeline line stays running with a 'held' note carrying the gate.
+    held = [
+        t for t in engine.traces if t["status"] == "running" and t["payload"]["args"].get("note")
+    ]
+    assert len(held) == 1
+    args = held[0]["payload"]["args"]
+    assert args["note"] == "held"
+    assert (args["context_tokens"], args["context_budget"], args["swap_at_tokens"]) == (
+        20_000,
+        100_000,
+        35_000,
+    )
+
+    # Same render cadence, context now past the gate → the ready prefix swaps.
+    meter["value"] = 40_000
+    _run_turns(ledger, chunker, 9, 9, _hashes(4))
+    assert len(chunker.chunks) == 1
+    assert chunker.chunks[0].start_step_number == 1
+    assert chunker.awaiting_chunks == ()
+    assert ledger.frozen_blocks != ()
+    done = engine.traces[-1]
+    assert done["status"] == "success"
+    assert done["payload"]["args"]["context_tokens"] == 40_000 - (
+        chunker.chunks[0].source_chars // 4
+    ) + (chunker.chunks[0].summary_chars // 4)
+
+
+def test_leading_stampless_turn_joins_the_next_segment_instead_of_pinning_the_queue():
+    """A turn with no recorded step (a reply without a tool call) that lands
+    right after a chunk boundary must not close as a stampless one-turn
+    segment: such a chunk has no step records (``None``) and used to sit at
+    the head of the awaiting queue, so no L2 swap ever happened and the hard
+    line jumped straight to the fold. It joins the following segment."""
+    steps = [_step(i) for i in range(1, 13)]
+    meter = {"value": 50_000}  # above the start gate
+    ledger, chunker, _, capsule = _make(steps, min_active=2, meter=lambda: meter["value"])
+    ledger.stage_turn([_observation(0), AIMessage(content="no tool call this turn")])
+    _run_turns(ledger, chunker, 1, 7, _hashes(4))  # commits turn 0 without a step key
+
+    assert [c.capsule_key for c in chunker.awaiting_chunks] == ["chunk:1-4"]
+    assert all(entry["chunk"] is not None for entry in chunker._awaiting)
+    capsule.resolve("chunk:1-4", _capsule(1, 4))
+    _run_turns(ledger, chunker, 8, 8, _hashes(4))
+
+    assert [c.capsule_key for c in chunker.chunks] == ["chunk:1-4"]
+    assert chunker.awaiting_chunks == ()
+    assert "[Chunk 1 | Steps 1–4" in _frozen_text(ledger)
+    assert "no tool call this turn" not in _rendered_text(ledger.render([_observation(9)]))
+
+
+def test_partition_folds_leading_unstamped_turns_into_the_first_segment():
+    ledger, chunker, _, _ = _make([_step(i) for i in range(1, 6)])
+    chunker.on_step_stamped("s2", "a")
+    chunker.on_step_stamped("s3", "a")
+    chunker.on_step_stamped("s4", "b")
+    turns = [
+        {"step_key": None},
+        {"step_key": "s1"},
+        {"step_key": "s2"},
+        {"step_key": "s3"},
+        {"step_key": "s4"},
+        {"step_key": None},
+    ]
+    segments = chunker._partition(turns)
+    assert [(h, [t["step_key"] for t in ts]) for h, ts in segments] == [
+        ("a", [None, "s1", "s2", "s3"]),
+        ("b", ["s4", None]),
+    ]
+    # All unstamped: one stampless segment, never split.
+    assert chunker._partition([{"step_key": None}, {"step_key": None}]) == [
+        (None, [{"step_key": None}, {"step_key": None}])
+    ]
+
+
+def test_start_gate_zero_restores_swap_on_ready():
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 9)]
+    ledger, chunker, _, _ = _make(
+        steps, min_active=2, meter=lambda: 1_000, auto_capsule=True, start_ratio=0.0
+    )
+    _run_turns(ledger, chunker, 1, 8, _hashes(4))
+    assert len(chunker.chunks) == 1
+    assert chunker.awaiting_chunks == ()
+
+
+def test_start_gate_unknown_base_falls_through_to_swap_on_ready():
+    """No measured operator call (meter None, nothing recorded on the ledger):
+    the gate cannot decide and the legacy swap-on-ready behavior stands."""
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 9)]
+    ledger, chunker, _, _ = _make(steps, min_active=2, auto_capsule=True)
+    assert ledger.last_prompt_tokens is None
+    _run_turns(ledger, chunker, 1, 8, _hashes(4))
+    assert len(chunker.chunks) == 1
+
+
+def _big_turn(i: int, chars: int = 4000) -> list:
+    tool_call = {"name": "click", "args": {"target": i}, "id": f"tc{i}", "type": "tool_call"}
+    return [
+        _observation(i),
+        AIMessage(content=f"thinking {i} " + "x" * chars, tool_calls=[tool_call]),
+        ToolMessage(tool_call_id=f"tc{i}", content="Action Recorded"),
+    ]
+
+
+def _run_big_turns(ledger, chunker, start: int, upto: int, hash_for):
+    for i in range(start, upto + 1):
+        ledger.commit_staged(
+            step_key=f"s{i - 1}" if i > 1 else None,
+            validator_result={"status": "dispatched"} if i > 1 else None,
+        )
+        ledger.render([_observation(i)])
+        ledger.stage_turn(_big_turn(i))
+        chunker.on_step_stamped(f"s{i}", hash_for(i))
+
+
+def test_hard_threshold_swaps_ready_prefix_as_l2_when_that_is_enough():
+    """Hard ladder rung 1: with a ready prefix whose L2 swap brings the
+    estimated context back under the hard line, the swap is an ordinary L2
+    event — no fold, and the younger pending segment stays awaiting."""
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 13)]
+    meter = {"value": None}
+    ledger, chunker, engine, capsule = _make(steps, min_active=2, meter=lambda: meter["value"])
+    # Steps 1–4 (hash-a) close at the switch; steps 5–8 (hash-b) close at the
+    # next switch. Turns are ~1k tokens each so the L2 swap is worth ~4k.
+    _run_big_turns(ledger, chunker, 1, 10, lambda i: "a" if i <= 4 else ("b" if i <= 8 else "c"))
+    keys = [c.capsule_key for c in chunker.awaiting_chunks]
+    assert keys[0] == "chunk:1-4"
+    capsule.resolve("chunk:1-4", _capsule(1, 4))  # ready; chunk:5-8 stays pending
+
+    meter["value"] = 92_000  # ≥ 0.9 * 100k; minus ~4k of turns → under the line
+    _run_big_turns(ledger, chunker, 11, 11, lambda i: "c")
+
+    assert [c.capsule_key for c in chunker.chunks] == ["chunk:1-4"]
+    assert [c.capsule_key for c in chunker.awaiting_chunks] == ["chunk:5-8"]
+    frozen = _frozen_text(ledger)
+    assert "[Era" not in frozen  # nothing folded
+    assert "[Chunk 1" in frozen
+    done = engine.traces[-1]
+    assert done["status"] == "success"
+    assert "forced" not in done["payload"]["args"]
+    assert done["payload"]["args"]["context_tokens"] < 90_000
+
+
+def test_hard_threshold_escalates_to_fold_when_l2_swap_is_not_enough():
+    """Hard ladder rung 2: the ready prefix's L2 swap would not bring the
+    context under the line → everything closed force-swaps, pending included,
+    and the whole frozen region folds into one recall-only era whose index
+    lists every folded step — the pending chunk's steps too."""
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 13)]
+    meter = {"value": None}
+    ledger, chunker, engine, capsule = _make(steps, min_active=2, meter=lambda: meter["value"])
+    _run_turns(ledger, chunker, 1, 10, lambda i: "a" if i <= 4 else ("b" if i <= 8 else "c"))
+    capsule.resolve("chunk:1-4", _capsule(1, 4))
+
+    meter["value"] = 99_000  # tiny test turns cannot shave 9k tokens
+    _run_turns(ledger, chunker, 11, 11, lambda i: "c")
+
+    assert chunker.chunks == ()
+    assert chunker.awaiting_chunks == ()
+    assert len(chunker.eras) == 1 and chunker.eras[0].recall_only
+    era = chunker.eras[0]
+    assert [c.capsule_key for c in era.chunks] == ["chunk:1-4", "chunk:5-8"]
+    assert [c.status for c in era.chunks] == ["ready", "pending"]
+    frozen = _frozen_text(ledger)
+    assert "[Chunk" not in frozen
+    assert "[Era 1 | Steps 1–8" in frozen
+    # The ready chunk's ① feeds the paragraph; the pending one falls back to
+    # its step range — and both keep every step's index line.
+    assert "Working toward the login milestone." in frozen
+    assert "steps 5–8" in frozen
+    for n in range(1, 9):
+        assert f"- Step {n} (T+" in frozen, f"folded step {n} lost its index line"
+    # Trace wording: only the chunk without a summary is a forced fold.
+    done = {
+        t["payload"]["args"]["start_step"]: t for t in engine.traces if t["status"] == "success"
+    }
+    assert "forced" not in done[1]["payload"]["args"]
+    assert "folded into the period summary" in done[1]["payload"]["result"]
+    assert done[5]["payload"]["args"]["forced"] is True
+    assert done[5]["payload"]["result"] == (
+        "Context budget reached before the summary was ready;"
+        " 4 turns folded into the period summary."
+    )
+
+
+def test_hard_fold_is_monotonic_later_l2_swaps_append_after_the_folded_era():
+    """After a hard fold, a later non-hard L2 swap appends a new chunk block
+    while the folded steps stay inside the recall-only era — the fold never
+    flips back to full chunk blocks."""
+    steps = [_step(i) for i in range(1, 17)]
+    hash_for = lambda i: "a" if i <= 4 else ("b" if i <= 8 else ("c" if i <= 12 else "d"))  # noqa: E731
+    meter = {"value": None}
+    ledger, chunker, _, capsule = _make(steps, min_active=2, meter=lambda: meter["value"])
+    _run_turns(ledger, chunker, 1, 10, hash_for)
+    capsule.resolve("chunk:1-4", _capsule(1, 4))
+    meter["value"] = 99_000
+    _run_turns(ledger, chunker, 11, 11, hash_for)  # hard: folds 1–4 and 5–8
+    assert chunker.chunks == () and len(chunker.eras) == 1
+    folded_block = _frozen_text(ledger)
+
+    # Pressure gone (above the start gate, below soft): the next milestone
+    # switch closes 9–12; once ready it swaps as an ordinary L2 chunk.
+    meter["value"] = 50_000
+    _run_turns(ledger, chunker, 12, 15, hash_for)
+    pending = [c for c in chunker.awaiting_chunks if c.status == "pending"]
+    assert [c.capsule_key for c in pending] == ["chunk:9-12"]
+    capsule.resolve("chunk:9-12", _capsule(9, 12))
+    _run_turns(ledger, chunker, 16, 16, hash_for)
+
+    assert [c.capsule_key for c in chunker.chunks] == ["chunk:9-12"]
+    assert len(chunker.eras) == 1 and chunker.eras[0].recall_only
+    frozen = _frozen_text(ledger)
+    assert frozen.startswith(folded_block)  # the folded era is byte-identical
+    assert "[Chunk 3 | Steps 9–12" in frozen
+    assert "[Chunk 1" not in frozen and "[Chunk 2" not in frozen
+    assert frozen.index("[Era 1") < frozen.index("[Chunk 3")
+    for n in range(1, 9):
+        assert f"- Step {n} (T+" in frozen
+
+
+def test_hard_threshold_with_nothing_awaiting_folds_frozen_region_once():
+    """Hard ladder last resort: the active window is already down to the
+    sliding-window floor (nothing eligible to close, nothing awaiting), yet
+    the prompt sits at the hard line — the existing L2 frozen region folds
+    into a recall-only era without consuming turns, and repeated hard renders
+    leave the frozen blocks byte-identical."""
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 13)]
+    meter = {"value": 50_000}
+    ledger, chunker, _, _ = _make(
+        steps, min_active=2, meter=lambda: meter["value"], auto_capsule=True
+    )
+    _run_turns(ledger, chunker, 1, 7, _hashes(4))
+    # Chunk 1–4 swapped as L2 at the step-7 render; s5..s6 remain = the floor.
+    assert [c.capsule_key for c in chunker.chunks] == ["chunk:1-4"]
+    assert chunker.awaiting_chunks == ()
+    assert "[Chunk 1" in _frozen_text(ledger)
+    assert len(ledger.unchunked_turns()) == 2
+
+    meter["value"] = 95_000
+    ledger.render([_observation(8)])  # hard render, nothing eligible
+    frozen = _frozen_text(ledger)
+    assert "[Chunk 1" not in frozen and "[Era 1 | Steps 1–4" in frozen
+    assert chunker.chunks == () and chunker.eras[0].recall_only
+    for n in range(1, 5):
+        assert f"- Step {n} (T+" in frozen
+    assert len(ledger.unchunked_turns()) == 2  # no turns consumed
+    folded_blocks = ledger.frozen_blocks
+    ledger.render([_observation(8)])
+    ledger.render([_observation(8)])
+    assert ledger.frozen_blocks == folded_blocks  # byte-stable across hard renders
+    assert _frozen_text(ledger) == frozen
+
+
+def test_hard_threshold_overrides_start_gate():
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 9)]
+    ledger, chunker, _, _ = _make(
+        steps, min_active=2, meter=lambda: 95_000, auto_capsule=True, start_ratio=0.99
+    )
+    _run_turns(ledger, chunker, 1, 8, _hashes(4))
+    assert chunker.awaiting_chunks == ()
+    assert chunker.eras and all(era.recall_only for era in chunker.eras)
+    assert "[Era 1 | Steps 1–" in _frozen_text(ledger)
+
+
+def test_context_base_reads_the_ledger_operator_measurement_not_the_session_meter():
+    """Production wiring: no meter_getter; the base is what the operator
+    recorded on its own ledger. A session-wide meter reading from another
+    agent's call (the 2026-09-08 trace: a 2.7k lite call right after the
+    operator's 19.9k prompt) must not leak in."""
+    from artemis.services.token_meter import get_meter
+
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 11)]
+    ledger, chunker, _, _ = _make(steps, min_active=2, auto_capsule=True)
+    # Some other agent's small call lands on the session meter.
+    get_meter("session-1").record({"prompt_tokens": 2_700, "completion_tokens": 10})
+    # The operator's own measured prompt is well below the gate.
+    ledger.record_prompt_tokens(20_000)
+    assert chunker._context_base_tokens(ledger) == 20_000
+    _run_turns(ledger, chunker, 1, 8, _hashes(4))
+    assert chunker.chunks == ()  # held: 20k < 35k
+    assert [c.status for c in chunker.awaiting_chunks] == ["ready"]
+
+    # Operator prompt grows past the gate → swap at the next render.
+    ledger.record_prompt_tokens(36_000)
+    _run_turns(ledger, chunker, 9, 9, _hashes(4))
+    assert len(chunker.chunks) == 1
+
+
+def test_ledger_record_prompt_tokens_ignores_missing_or_non_positive():
+    ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+    ledger.record_prompt_tokens(None)
+    ledger.record_prompt_tokens(0)
+    ledger.record_prompt_tokens("x")
+    assert ledger.last_prompt_tokens is None
+    ledger.record_prompt_tokens(1234)
+    ledger.record_prompt_tokens(None)
+    assert ledger.last_prompt_tokens == 1234
+
+
+def test_held_note_is_fresh_after_a_retry():
+    """A chunk whose capsule failed, was re-dispatched (``retrying`` note) and
+    then readied while the start gate still holds it gets a fresh ``held``
+    note: the re-dispatch resets the once-per-chunk held marker."""
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 14)]
+    meter = {"value": 20_000}  # < 0.35 * 100k: the gate holds ready chunks
+    ledger, chunker, engine, capsule = _make(steps, min_active=2, meter=lambda: meter["value"])
+    _run_turns(ledger, chunker, 1, 8, _hashes(4))
+    entry = chunker._awaiting[0]
+    key = entry["chunk"].capsule_key
+    entry["held_announced"] = True  # a stale marker must not survive a retry
+
+    capsule._failed.add(key)
+    # The hash-b segment (5–8) ages past the floor at the step-11 render and
+    # closes whole: a trigger render, which is a re-dispatch occasion.
+    _run_turns(ledger, chunker, 9, 11, lambda i: "hash-c")
+    assert capsule.submitted.count(key) == 2
+    assert entry["held_announced"] is False
+    notes = [t["payload"]["args"].get("note") for t in engine.traces if t["status"] == "running"]
+    assert notes[-1] == "retrying"
+
+    capsule.resolve(key, _capsule(1, 4))
+    _run_turns(ledger, chunker, 12, 12, lambda i: "hash-c")
+    assert chunker.chunks == ()  # still held below the gate
+    held = [
+        t
+        for t in engine.traces
+        if t["status"] == "running"
+        and t["payload"]["args"].get("note") == "held"
+        and t["payload"]["args"]["start_step"] == 1
+    ]
+    assert len(held) == 1
+    assert engine.traces.index(held[0]) > max(
+        i for i, t in enumerate(engine.traces) if t["payload"]["args"].get("note") == "retrying"
+    )
+
+
+# ---------------------------------------------------------------------------
+# Provider-less prompt estimate + session-calibrated chars→tokens ratio
+# ---------------------------------------------------------------------------
+
+
+def test_estimate_prompt_tokens_counts_text_images_and_tool_call_args():
+    from artemis.memory.transcript import (
+        IMAGE_BLOCK_TOKENS,
+        estimate_prompt_tokens,
+        measure_prompt_content,
+    )
+
+    messages = [
+        HumanMessage(content="a" * 400),
+        HumanMessage(
+            content=[
+                {"type": "text", "text": "b" * 80},
+                {"type": "image_url", "image_url": {"url": "data:image/jpeg;base64,IMG"}},
+                {"type": "image", "source": {"data": "IMG2"}},
+                {"type": "thinking", "thinking": "c" * 20},
+            ]
+        ),
+        AIMessage(
+            content="",
+            tool_calls=[{"name": "click", "args": {"x": 1}, "id": "tc1", "type": "tool_call"}],
+        ),
+    ]
+    text_chars, image_count = measure_prompt_content(messages)
+    other_block = len(str({"type": "thinking", "thinking": "c" * 20}))
+    assert image_count == 2
+    assert text_chars == 400 + 80 + other_block + len('{"x": 1}')
+    assert estimate_prompt_tokens(messages) == text_chars // 4 + 2 * IMAGE_BLOCK_TOKENS
+    assert estimate_prompt_tokens([]) == 1  # never zero: an unknown base stays gated
+
+
+def _measured_prompt(text_chars: int, image_count: int = 0, char: str = "a"):
+    """One HumanMessage in the shape ``measure_prompt_content`` reads: a text
+    block of ``text_chars`` characters and ``image_count`` image blocks."""
+    blocks = [{"type": "text", "text": char * text_chars}]
+    blocks += [
+        {"type": "image_url", "image_url": {"url": "data:image/jpeg;base64,AAAA"}}
+        for _ in range(image_count)
+    ]
+    return [HumanMessage(content=blocks)]
+
+
+def test_ledger_calibrates_chars_per_token_from_measured_prompts():
+    """The first measured sample of a session goes through the whole-prompt
+    fallback: ``text_chars / (prompt_tokens - images * IMAGE_BLOCK_TOKENS)``,
+    clamped to [1.0, 6.0]."""
+
+    def fresh():
+        return TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+
+    ledger = fresh()
+    assert ledger.chars_per_token == 4.0
+    assert ledger.chars_to_tokens(1000) == 1000 // 4
+
+    # English-like prose at ~4 chars/token: the ratio is unchanged.
+    ledger.record_prompt_tokens(1000, messages=[HumanMessage(content="a" * 4000)])
+    assert ledger.chars_per_token == pytest.approx(4.0)
+    assert ledger.chars_to_tokens(1000) == 250
+
+    # CJK-heavy prompt measured at ~1 token per char: the ratio drops to 1.
+    ledger = fresh()
+    ledger.record_prompt_tokens(4000, messages=[HumanMessage(content="中" * 4000)])
+    assert ledger.chars_per_token == pytest.approx(1.0)
+    assert ledger.chars_to_tokens(1000) == 1000
+
+    # Images are subtracted at their flat cost before dividing.
+    ledger = fresh()
+    ledger.record_prompt_tokens(1000 + 2 * 258, messages=_measured_prompt(4000, 2))
+    assert ledger.chars_per_token == pytest.approx(4.0)
+
+    # Clamp bounds: [1.0, 6.0].
+    ledger = fresh()
+    ledger.record_prompt_tokens(10_000, messages=[HumanMessage(content="x" * 100)])
+    assert ledger.chars_per_token == 1.0
+    ledger = fresh()
+    ledger.record_prompt_tokens(10, messages=[HumanMessage(content="x" * 10_000)])
+    assert ledger.chars_per_token == 6.0
+
+    # Without messages only the base is recorded; the ratio is kept.
+    ledger.record_prompt_tokens(777)
+    assert ledger.last_prompt_tokens == 777 and ledger.chars_per_token == 6.0
+
+
+def test_ledger_first_sample_uses_the_whole_prompt_fallback():
+    """Before any usable difference exists the whole-prompt quotient is the
+    only information available, so the first sample still applies it."""
+    ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+    ledger.record_prompt_tokens(5000 + 3 * 258, messages=_measured_prompt(10_000, 3))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+    assert ledger.last_prompt_tokens == 5000 + 3 * 258
+
+
+def test_ledger_differential_calibration_cancels_constant_overhead():
+    """Two same-image-count samples: the ratio is dchars/dtokens, and a large
+    constant term in prompt_tokens (tool schemas, image tiling; 9000 tokens
+    here) that the whole-prompt fallback mis-charges to the text cancels."""
+    ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+    overhead = 9000
+    ledger.record_prompt_tokens(overhead + 4000, messages=_measured_prompt(10_000, 2))
+    fallback = 10_000 / (overhead + 4000 - 2 * 258)
+    assert fallback < 1.0  # the fallback mis-reads ~0.8 and clamps to 1.0
+    assert ledger.chars_per_token == 1.0
+
+    # +10000 chars, +4000 tokens, same two images: 2.5 exactly.
+    ledger.record_prompt_tokens(overhead + 8000, messages=_measured_prompt(20_000, 2))
+    assert ledger.chars_per_token == pytest.approx(2.5)
+
+
+def test_ledger_image_count_change_replaces_reference_without_updating():
+    ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+    ledger.record_prompt_tokens(4000, messages=_measured_prompt(10_000, 2))
+    # First usable pair (+10000 chars / +5000 tokens): pooled ratio 2.0.
+    ledger.record_prompt_tokens(9000, messages=_measured_prompt(20_000, 2))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+
+    # Different image count: no ratio update, but it becomes the reference.
+    ledger.record_prompt_tokens(14_000, messages=_measured_prompt(30_000, 3))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+
+    # The next 3-image sample differences against the 3-image reference
+    # (+6000 chars / +2000 tokens), not against the 2-image one: pooled
+    # (10000 + 6000) / (5000 + 2000).
+    ledger.record_prompt_tokens(16_000, messages=_measured_prompt(36_000, 3))
+    assert ledger.chars_per_token == pytest.approx(16_000 / 7000)
+
+
+def test_ledger_small_moves_hold_the_reference_until_they_accumulate():
+    """A sample that moved less than the delta floor (in either direction)
+    neither updates the ratio nor replaces the reference: the movement keeps
+    accumulating against the held reference until it is measurable."""
+    from artemis.memory.transcript import MIN_CALIBRATION_DELTA_CHARS
+
+    ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+    ledger.record_prompt_tokens(2500, messages=_measured_prompt(10_000, 1))
+    ledger.record_prompt_tokens(7500, messages=_measured_prompt(20_000, 1))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+
+    # Below the floor: no update, even though this pair's own quotient (1.0)
+    # would differ wildly from the current ratio.
+    small = MIN_CALIBRATION_DELTA_CHARS - 1
+    ledger.record_prompt_tokens(7500 + small, messages=_measured_prompt(20_000 + small, 1))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+    # A slight shrink in characters with a few more tokens (turn jitter) is
+    # held the same way rather than resetting the baseline.
+    ledger.record_prompt_tokens(7500 + small + 100, messages=_measured_prompt(20_000 + 100, 1))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+
+    # Reaching the floor differences against the HELD 20000-char / 7500-token
+    # reference (+2000 chars / +2000 tokens), not the previous small sample:
+    # pooled (10000 + 2000) / (5000 + 2000). Consecutive differencing would
+    # have seen only +1900 chars here and never calibrated.
+    ledger.record_prompt_tokens(
+        9500, messages=_measured_prompt(20_000 + MIN_CALIBRATION_DELTA_CHARS, 1)
+    )
+    assert ledger.chars_per_token == pytest.approx(12_000 / 7000)
+
+
+def test_ledger_token_shrink_resets_the_reference():
+    """When the measured prompt shrinks in tokens (a compaction or scrub
+    landed) the sample becomes a fresh baseline without touching the pooled
+    ratio; text that grows at zero token cost is unusable and also resets."""
+    ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+    ledger.record_prompt_tokens(2500, messages=_measured_prompt(10_000, 1))
+    ledger.record_prompt_tokens(7500, messages=_measured_prompt(20_000, 1))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+
+    # Compaction: fewer tokens. Ratio untouched, baseline moves here.
+    ledger.record_prompt_tokens(6000, messages=_measured_prompt(15_000, 1))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+    # +2000 chars / +500 tokens against the new baseline: pooled 12000 / 5500.
+    ledger.record_prompt_tokens(6500, messages=_measured_prompt(17_000, 1))
+    assert ledger.chars_per_token == pytest.approx(12_000 / 5500)
+
+    # Grew past the floor at zero token cost: not a measurement; new baseline.
+    ledger.record_prompt_tokens(6500, messages=_measured_prompt(19_000, 1))
+    assert ledger.chars_per_token == pytest.approx(12_000 / 5500)
+    ledger.record_prompt_tokens(7500, messages=_measured_prompt(21_000, 1))
+    assert ledger.chars_per_token == pytest.approx(14_000 / 6500)
+
+
+def test_ledger_pools_deltas_rather_than_taking_the_last_pair():
+    ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+    ledger.record_prompt_tokens(10_000, messages=_measured_prompt(10_000, 1))
+    # Pair 1: +10000 chars / +5000 tokens (2.0).
+    ledger.record_prompt_tokens(15_000, messages=_measured_prompt(20_000, 1))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+    # Pair 2: +2000 chars / +2000 tokens (1.0). Pooled: 12000 / 7000.
+    ledger.record_prompt_tokens(17_000, messages=_measured_prompt(22_000, 1))
+    assert ledger.chars_per_token == pytest.approx(12_000 / 7000)
+    assert ledger.chars_per_token != pytest.approx(1.0)
+
+    # A non-positive/None value neither disturbs the pooled ratio nor the
+    # remembered reference: the next sample still differences against the
+    # 22000-char one (+4000 / +1000 -> pooled 16000 / 8000).
+    ledger.record_prompt_tokens(None, messages=_measured_prompt(50_000, 1))
+    ledger.record_prompt_tokens(0, messages=_measured_prompt(50_000, 1))
+    assert ledger.chars_per_token == pytest.approx(12_000 / 7000)
+    ledger.record_prompt_tokens(18_000, messages=_measured_prompt(26_000, 1))
+    assert ledger.chars_per_token == pytest.approx(2.0)
+
+
+def test_ledger_calibration_regression_on_real_operator_trace():
+    """Thirteen consecutive Gemini Operator prompts from a real 2026-09 run
+    (session 28377d06, five full-size 1080x2424 screenshots on every call,
+    tool schemas bound). Differencing against a held reference pools three
+    measurable spans; the per-turn moves in between (a few hundred chars,
+    some slightly negative with a few hundred more tokens) are held, not
+    dropped. The whole-prompt quotient for the last call reads 1.62
+    chars/token; the tail's own rate is denser, so the old estimator would
+    have UNDER-counted the tail and fired the size trigger late here."""
+    from artemis.memory.transcript import IMAGE_BLOCK_TOKENS
+
+    samples = [  # (text_chars, images, prompt_tokens) straight from the trace store
+        (33262, 5, 20392),
+        (33954, 5, 21231),  # +692 chars: held
+        (36094, 5, 22853),  # +2832 chars / +2461 tokens vs 33262: pooled
+        (36918, 5, 23332),  # held
+        (37519, 5, 23511),  # held
+        (38437, 5, 24345),  # +2343 / +1492 vs 36094: pooled
+        (38917, 5, 24741),  # held
+        (39332, 5, 25650),  # held
+        (42111, 5, 26248),  # +3674 / +1903 vs 38437: pooled
+        (43153, 5, 26910),  # held
+        (43023, 5, 27605),  # chars down, tokens up (turn jitter): held
+        (43027, 5, 27869),  # held
+        (43638, 5, 28176),  # held
+    ]
+    ledger = TranscriptLedger(step_memory=StepMemoryService(ctx=None))
+    for chars, images, tokens in samples:
+        ledger.record_prompt_tokens(tokens, messages=_measured_prompt(chars, images))
+
+    pooled = (2832 + 2343 + 3674) / (2461 + 1492 + 1903)
+    assert ledger.chars_per_token == pytest.approx(pooled)
+    assert ledger.chars_per_token == pytest.approx(1.51, abs=0.01)
+
+    chars, images, tokens = samples[-1]
+    naive = chars / (tokens - images * IMAGE_BLOCK_TOKENS)
+    assert naive == pytest.approx(1.62, abs=0.01)
+    assert ledger.chars_per_token != pytest.approx(naive, abs=0.05)
+    assert ledger.last_prompt_tokens == tokens
+
+
+def test_calibrated_ratio_scales_the_size_trigger():
+    """At a calibrated 1 char/token the size trigger closes a segment at about
+    a quarter of the characters it needed at the default 4 chars/token."""
+    steps = [_step(i) for i in range(1, 6)]
+
+    def eligible_chars(ledger):
+        turns = ledger.unchunked_turns()
+        return ledger.turn_text_chars(turns[: len(turns) - 2])  # min_active=2
+
+    # Default ratio: the eligible text (two ~4k-char turns once turn 5 is
+    # staged) is worth ~chars/4 tokens, under the 5k target → nothing closes.
+    ledger, chunker, _, _ = _make(
+        steps, min_active=2, min_steps=2, max_steps=100, target_tokens=5000
+    )
+    ledger.record_prompt_tokens(1000, messages=[HumanMessage(content="a" * 4000)])
+    _run_big_turns(ledger, chunker, 1, 5, lambda i: "hash-a")
+    chars = eligible_chars(ledger)
+    assert chars // 4 < 5000 <= chars
+    assert chunker.awaiting_chunks == ()
+
+    # Calibrated to 1 char/token: the same text is worth ~chars tokens → closes.
+    ledger, chunker, _, _ = _make(
+        steps, min_active=2, min_steps=2, max_steps=100, target_tokens=5000
+    )
+    ledger.record_prompt_tokens(4000, messages=[HumanMessage(content="中" * 4000)])
+    assert ledger.chars_per_token == pytest.approx(1.0)
+    _run_big_turns(ledger, chunker, 1, 5, lambda i: "hash-a")
+    assert [c.trigger for c in chunker.awaiting_chunks] == ["size"]
+
+
 # ---------------------------------------------------------------------------
 # Timeline announcement (compress_history trace)
 # ---------------------------------------------------------------------------
@@ -1146,8 +1859,8 @@ def test_compression_announces_one_tool_line_from_dispatch_to_swap():
     assert "forced" not in done_args
 
 
-def test_forced_swap_announces_snapshot_without_a_ratio():
-    """Forced swaps report estimated context usage without a summary size."""
+def test_forced_swap_announces_fold_without_a_ratio():
+    """Forced folds report estimated context usage without a summary size."""
     steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 9)]
     meter = {"value": None}
     ledger, chunker, engine, _ = _make(steps, min_active=2, meter=lambda: meter["value"])
@@ -1164,6 +1877,7 @@ def test_forced_swap_announces_snapshot_without_a_ratio():
     for trace in done:
         assert trace["payload"]["args"]["forced"] is True
         assert trace["payload"]["args"]["summary_tokens"] is None
+        assert "folded into the period summary" in trace["payload"]["result"]
     last_args = done[-1]["payload"]["args"]
     assert last_args["context_budget"] == 100_000
     assert 0 < last_args["context_tokens"] < 95_000
@@ -1171,6 +1885,63 @@ def test_forced_swap_announces_snapshot_without_a_ratio():
     assert all("context_tokens" not in t["payload"]["args"] for t in done[:-1])
 
 
+def test_compression_trace_carries_a_plain_language_phase_on_every_path():
+    """``args.phase`` says what the compression is doing without touching the
+    trace status the rest of the UI keys on: summarizing (segment closed,
+    capsule generating — also while retrying), ready (capsule on hand but the
+    start gate holds the swap), applied (compressed block replaced the raw
+    turns), failed (capsule generation gave up, full record kept)."""
+    from artemis.memory.chunking import COMPRESSION_PHASES
+
+    assert COMPRESSION_PHASES == ("summarizing", "ready", "applied", "failed")
+
+    steps = [_step(i, "hash-a" if i <= 4 else "hash-b") for i in range(1, 15)]
+    meter = {"value": 20_000}  # < 0.35 * 100k: the start gate holds ready chunks
+    ledger, chunker, engine, capsule = _make(steps, min_active=2, meter=lambda: meter["value"])
+    _run_turns(ledger, chunker, 1, 8, _hashes(4))
+    chunk = chunker.awaiting_chunks[0]
+    key = chunk.capsule_key
+
+    def mine():
+        return [
+            (t["status"], t["payload"]["args"]["phase"])
+            for t in engine.traces
+            if t["trace_id"] == chunk.trace_id
+        ]
+
+    # Segment closed, capsule dispatched → summarizing.
+    assert mine() == [("running", "summarizing")]
+
+    # Capsule generation exhausted → failed phase on the same trace.
+    chunker._on_capsule_failed(key)
+    assert mine()[-1] == ("failed", "failed")
+
+    # Re-dispatch at the next trigger render → summarizing again (note: retrying).
+    capsule._failed.add(key)
+    _run_turns(ledger, chunker, 9, 11, lambda i: "hash-c")
+    assert capsule.submitted.count(key) == 2
+    assert mine()[-1] == ("running", "summarizing")
+    retrying = [t for t in engine.traces if t["trace_id"] == chunk.trace_id][-1]
+    assert retrying["payload"]["args"]["note"] == "retrying"
+
+    # Capsule ready while the start gate holds → ready phase, status still running.
+    capsule.resolve(key, _capsule(1, 4))
+    _run_turns(ledger, chunker, 12, 12, lambda i: "hash-c")
+    assert chunker.chunks == ()
+    assert mine()[-1] == ("running", "ready")
+    held = [t for t in engine.traces if t["trace_id"] == chunk.trace_id][-1]
+    assert held["payload"]["args"]["note"] == "held"
+
+    # Context past the gate → the swap applies the summary.
+    meter["value"] = 40_000
+    _run_turns(ledger, chunker, 13, 13, lambda i: "hash-c")
+    assert [c.start_step_number for c in chunker.chunks] == [1]
+    assert mine()[-1] == ("success", "applied")
+
+    # Every announcement on every trace carries a known phase.
+    assert all(t["payload"]["args"]["phase"] in COMPRESSION_PHASES for t in engine.traces)
+
+
 # ---------------------------------------------------------------------------
 # Band ① note-linkage machine check
 # ---------------------------------------------------------------------------
diff --git a/tests/unit/memory/test_step_memory_service.py b/tests/unit/memory/test_step_memory_service.py
index 8f7a0d8..4ea5e4f 100644
--- a/tests/unit/memory/test_step_memory_service.py
+++ b/tests/unit/memory/test_step_memory_service.py
@@ -16,10 +16,13 @@
 
 import asyncio
 from unittest.mock import Mock
+import uuid
 
 import pytest
 
-from artemis.memory.step_memory import StepMemoryService
+from artemis.data_engine.context_vars import CURRENT_NODE_NAME, CURRENT_TRACE_ID
+from artemis.data_engine.trace import detached_trace
+from artemis.memory.step_memory import StepLens, StepMemoryService
 
 
 class _ScriptedService(StepMemoryService):
@@ -161,6 +164,79 @@ async def test_flush_uses_configured_default_timeout():
     assert service._pending_tasks["slow"].done()
 
 
+@pytest.mark.asyncio
+async def test_lens_job_runs_detached_from_the_submitters_trace_span():
+    """A job submitted while an operator step span is current (the task
+    inherits that context) must not see the span: whatever the lens records
+    can never be attributed to the caller's step. The caller's own context is
+    untouched, and the job's node label names the lens."""
+    seen: list[tuple] = []
+
+    class _Lens(StepLens):
+        name = "probe"
+
+        async def render(self, key, payload):
+            seen.append((CURRENT_TRACE_ID.get(), CURRENT_NODE_NAME.get()))
+            return "rendered"
+
+    service = StepMemoryService(Mock(), lens=_Lens())
+    operator_span = uuid.uuid4()
+    token = CURRENT_TRACE_ID.set(operator_span)
+    token_name = CURRENT_NODE_NAME.set("operator")
+    try:
+        service.submit("step-1", {"step_number": 1})
+        await service.flush()
+        assert CURRENT_TRACE_ID.get() == operator_span
+        assert CURRENT_NODE_NAME.get() == "operator"
+    finally:
+        CURRENT_TRACE_ID.reset(token)
+        CURRENT_NODE_NAME.reset(token_name)
+
+    assert service.get_summary("step-1") == "rendered"
+    assert seen == [(None, "lens:probe")]
+
+
+@pytest.mark.asyncio
+async def test_lens_less_subclass_attempt_is_detached_too():
+    """The detachment lives in the runner, so a subclass with an inlined
+    ``_attempt`` (the Flash visual summarizer shape) gets it for free."""
+    seen: list = []
+
+    async def attempt(svc, key):
+        seen.append(CURRENT_TRACE_ID.get())
+        svc._summaries[key] = "ok"
+        return True
+
+    service = _ScriptedService(attempt)
+    token = CURRENT_TRACE_ID.set(uuid.uuid4())
+    try:
+        service.submit("s", {"step_number": 1})
+        await service.flush()
+    finally:
+        CURRENT_TRACE_ID.reset(token)
+    assert seen == [None]
+    assert service.trace_node_name == "lens:_scriptedservice"
+
+
+def test_detached_trace_restores_context_on_exception():
+    span = uuid.uuid4()
+    token = CURRENT_TRACE_ID.set(span)
+    token_name = CURRENT_NODE_NAME.set("operator")
+    try:
+        with pytest.raises(RuntimeError):
+            with detached_trace("lens:x"):
+                assert CURRENT_TRACE_ID.get() is None
+                assert CURRENT_NODE_NAME.get() == "lens:x"
+                raise RuntimeError("boom")
+        assert CURRENT_TRACE_ID.get() == span
+        assert CURRENT_NODE_NAME.get() == "operator"
+        with detached_trace():  # no node label: the name is left alone
+            assert CURRENT_NODE_NAME.get() == "operator"
+    finally:
+        CURRENT_TRACE_ID.reset(token)
+        CURRENT_NODE_NAME.reset(token_name)
+
+
 @pytest.mark.asyncio
 async def test_resubmit_clears_failed_state():
     """Re-submitting a failed job gives it a fresh retry budget."""
diff --git a/tests/unit/memory/test_transcript_ledger.py b/tests/unit/memory/test_transcript_ledger.py
index f206160..db48ded 100644
--- a/tests/unit/memory/test_transcript_ledger.py
+++ b/tests/unit/memory/test_transcript_ledger.py
@@ -15,12 +15,12 @@
 """Unit tests for the Pro session transcript ledger (history redesign §3.2, M2).
 
 Covers the four-region discipline: S-region byte stability across turns, the
-append-only active region, depth-1 stripping of old UI lists and plan
-recitations, the depth-K screenshot scrub in the Pro message shape (grace /
-placeholder / freeze — the M1 race regressions re-run against HumanMessage
-observations keyed by step id), ``T+mm:ss`` session-offset timestamps, the
-tool-call/response pairing invariant, and the cold-start restored-history
-block.
+append-only active region, the single depth-K scrub edge in the Pro message
+shape (UI list / plan recitation strip, ephemeral-block deletion and the
+in-place screenshot swap in one pass; grace / placeholder / freeze — the M1
+race regressions re-run against HumanMessage observations keyed by step id),
+``T+mm:ss`` session-offset timestamps, the tool-call/response pairing
+invariant, the cold-start restored-history block, and the silent-turn flag.
 """
 
 import json
@@ -153,19 +153,30 @@ def test_validator_result_skipped_for_actionless_turn():
     assert not any(EXECUTION_RESULT_MARKER in str(m.content) for m in ledger.active_messages)
 
 
-def test_old_turn_recitation_and_ui_list_stripped_at_depth_1():
-    ledger = TranscriptLedger(step_memory=_service())
+def test_recitation_and_ui_list_stripped_at_the_text_edge_and_screenshot_at_k():
+    """Two edges (text at depth 1, screenshot at K=3): the plan recitation and
+    UI list leave as soon as a newer observation exists, the screenshot stays
+    until depth K and is then resolved in place; only the live tail ever
+    carries an indexed element list."""
+    ledger = TranscriptLedger(step_memory=_service(), image_scrub_depth=3)
     _play_turn(ledger, 1)
     rendered = _play_turn(ledger, 2, prev_key="step-1")
+    obs1 = ledger.active_messages[0]
+    # Turn 1 is now depth 2: text edge passed, screenshot kept.
+    assert PLAN_RECITATION_MARKER not in str(obs1.content)
+    assert PRO_UI_LIST_MARKER not in str(obs1.content)
+    assert _has_image(obs1)
+    original_obs1 = _fingerprint(obs1)
 
-    committed_obs = ledger.active_messages[0]
-    committed_text = str(committed_obs.content)
-    # Depth-1 scrub: the previous turn's plan recitation and UI list are gone.
-    assert PLAN_RECITATION_MARKER not in committed_text
-    assert PRO_UI_LIST_MARKER not in committed_text
-    # Its screenshot is still inside the K-depth active window.
-    assert _has_image(committed_obs)
-    # The live tail keeps both.
+    rendered = _play_turn(ledger, 3, prev_key="step-2")
+    # Turn 1 reached depth 3: the screenshot is resolved.
+    assert not _has_image(obs1)
+    assert _fingerprint(obs1) != original_obs1
+    # Turn 2 (depth 2): text edge passed, screenshot still there; the live tail keeps both.
+    obs2 = next(m for m in ledger.active_messages if "OBSERVATION [T+00:02]" in str(m.content))
+    assert PLAN_RECITATION_MARKER not in str(obs2.content)
+    assert PRO_UI_LIST_MARKER not in str(obs2.content)
+    assert _has_image(obs2)
     tail_text = str(rendered[-1].content)
     assert PLAN_RECITATION_MARKER in tail_text
     assert PRO_UI_LIST_MARKER in tail_text
@@ -182,10 +193,16 @@ def test_depth_k_image_resolved_to_ready_visual_summary():
 
     first_obs = ledger.active_messages[0]
     assert not _has_image(first_obs)
-    assert {
-        "type": "text",
-        "text": "--- Historical Visual Transition ---\nObjective visual transition 1.",
-    } in first_obs.content
+    # (i) The summary sits where the image was, the label above it is gone,
+    # recitation and UI list are stripped: exactly two blocks remain.
+    assert first_obs.content == [
+        {"type": "text", "text": "# CURRENT OBSERVATION [T+00:01]"},
+        {
+            "type": "text",
+            "text": "--- Historical Visual Transition ---\nObjective visual transition 1.",
+        },
+    ]
+    assert "--- Current Screenshot ---" not in str(first_obs.content)
 
 
 def test_pending_grace_then_placeholder_never_backfilled():
@@ -418,3 +435,300 @@ def test_ledger_turn_transcript_reflects_the_scrubbed_active_region():
     assert "--- Action Execution Result (T+00:00) ---\nStatus: dispatched" in text
     assert "Status: failed" in ledger.turn_transcript(second)
     assert "thought 2" not in text  # a turn transcript never leaks into another turn
+
+
+# ---------------------------------------------------------------------------
+# Occupancy-driven screenshot depth
+# ---------------------------------------------------------------------------
+
+
+def _image_turns(ledger) -> list[int]:
+    """1-based turn numbers whose observation still carries its screenshot."""
+    return [
+        i + 1
+        for i, msg in enumerate(
+            m for m in ledger.active_messages if "OBSERVATION" in str(m.content)
+        )
+        if _has_image(msg)
+    ]
+
+
+def _banded_ledger(**kwargs) -> TranscriptLedger:
+    return TranscriptLedger(
+        step_memory=_service(),
+        image_scrub_depth=3,
+        image_scrub_depth_relaxed=6,
+        context_budget_tokens=100_000,
+        start_ratio=0.35,
+        **kwargs,
+    )
+
+
+def test_relaxed_depth_below_start_gate_keeps_more_screenshots():
+    """Below the start gate the scrub edge sits at the relaxed depth. Depth K
+    scrubs the K-th most recent screenshot with the live tail at depth 1, so
+    K=6 keeps four historical screenshots in view (K=3 keeps one). An unknown
+    occupancy counts as below the gate."""
+    ledger = _banded_ledger()
+    assert ledger.occupancy is None
+    assert ledger.effective_image_scrub_depth == 6
+    for i in range(1, 10):
+        _play_turn(ledger, i, prev_key=f"step-{i - 1}" if i > 1 else None)
+    # At the render of turn 9 its observation is the live tail (depth 1);
+    # committed turns 8..5 are depths 2..5 and turn 4 (depth 6) is scrubbed.
+    ledger.record_prompt_tokens(20_000)  # 20% < 35%
+    assert ledger.effective_image_scrub_depth == 6
+    assert _image_turns(ledger) == [5, 6, 7, 8]
+
+    tight = TranscriptLedger(step_memory=_service(), image_scrub_depth=3)
+    for i in range(1, 10):
+        _play_turn(tight, i, prev_key=f"step-{i - 1}" if i > 1 else None)
+    assert _image_turns(tight) == [8]
+
+
+def test_crossing_the_start_gate_tightens_once_and_relaxing_never_backfills():
+    ledger = _banded_ledger()
+    for i in range(1, 10):
+        _play_turn(ledger, i, prev_key=f"step-{i - 1}" if i > 1 else None)
+    assert _image_turns(ledger) == [5, 6, 7, 8]
+
+    # Past the gate: the next render scrubs the extra depths in one pass
+    # (turns 5–8 were depths 3–6 at that render; only turn 9 at depth 2 stays).
+    ledger.record_prompt_tokens(40_000)  # 40% >= 35%
+    assert ledger.effective_image_scrub_depth == 3
+    _play_turn(ledger, 10, prev_key="step-9")
+    assert _image_turns(ledger) == [9]
+
+    # Back under the gate: nothing is restored; new turns accumulate again
+    # until four historical screenshots are in view.
+    ledger.record_prompt_tokens(20_000)
+    assert ledger.effective_image_scrub_depth == 6
+    _play_turn(ledger, 11, prev_key="step-10")
+    assert _image_turns(ledger) == [9, 10]
+    _play_turn(ledger, 12, prev_key="step-11")
+    assert _image_turns(ledger) == [9, 10, 11]
+    _play_turn(ledger, 13, prev_key="step-12")
+    assert _image_turns(ledger) == [9, 10, 11, 12]
+    _play_turn(ledger, 14, prev_key="step-13")  # turn 9 reaches depth 6
+    assert _image_turns(ledger) == [10, 11, 12, 13]
+
+
+def test_no_band_configuration_keeps_the_fixed_depth():
+    ledger = TranscriptLedger(step_memory=_service(), image_scrub_depth=3)
+    ledger.record_prompt_tokens(1)
+    assert ledger.effective_image_scrub_depth == 3
+    relaxed_only = TranscriptLedger(
+        step_memory=_service(), image_scrub_depth=3, image_scrub_depth_relaxed=6
+    )
+    assert relaxed_only.effective_image_scrub_depth == 3  # no gate → never relaxed
+
+
+def test_scrub_edge_runs_before_the_chunker_at_render():
+    """The chunker sees the active window after the scrub edge advanced, so a
+    chunk closing over turns older than the floor never captures a live
+    screenshot in its source transcript."""
+    ledger = _banded_ledger()
+    seen: list[list[int]] = []
+
+    class Probe:
+        def on_render(self, led):
+            seen.append(_image_turns(led))
+
+    ledger.attach_chunker(Probe())
+    for i in range(1, 9):
+        _play_turn(ledger, i, prev_key=f"step-{i - 1}" if i > 1 else None)
+    # At the render of turn 8 the scrub edge (depth 6) had already resolved
+    # turn 3 (depth 6); the probe saw turns 4–7 with images, never turn 3.
+    assert seen[-1] == [4, 5, 6, 7]
+
+
+# ---------------------------------------------------------------------------
+# Ephemeral blocks and stable repeated renders
+# ---------------------------------------------------------------------------
+
+
+def _ready_service(n: int) -> StepMemoryService:
+    service = _service()
+    for i in range(1, n + 1):
+        service._step_inputs[f"step-{i}"] = {"step_number": i}
+        service._summaries[f"step-{i}"] = f"Visual transition {i}."
+    return service
+
+
+def test_ephemeral_blocks_vanish_at_the_text_edge_and_not_before():
+    """(ii) Per-turn notices marked through ``mark_ephemeral`` stay only while
+    the observation is the live tail; they are deleted at the text edge
+    together with the strip, before the screenshot is resolved at K."""
+    from artemis.memory.transcript import EPHEMERAL_BLOCKS_KEY, mark_ephemeral
+
+    ledger = TranscriptLedger(step_memory=_ready_service(6), image_scrub_depth=3)
+
+    def turn_with_notice(i: int) -> list:
+        turn = _turn(i)
+        obs = turn[0]
+        obs.content = [
+            obs.content[0],
+            {"type": "text", "text": f"[Reminder for turn {i}: state your reasoning]"},
+            *obs.content[1:],
+            {"type": "text", "text": f"[User guidance for turn {i}]"},
+        ]
+        mark_ephemeral(obs, [1, len(obs.content) - 1])
+        return turn
+
+    ledger.commit_staged()
+    ledger.render([turn_with_notice(1)[0]])
+    ledger.stage_turn(turn_with_notice(1))
+    for i in range(2, 4):
+        ledger.commit_staged(step_key=f"step-{i - 1}")
+        ledger.render([_observation(i)])
+        ledger.stage_turn(turn_with_notice(i))
+
+    obs1 = ledger.active_messages[0]
+    # At the render of turn 3, turn 1 is depth 3 (K): rewritten and frozen.
+    assert obs1.content == [
+        {"type": "text", "text": "# CURRENT OBSERVATION [T+00:01]"},
+        {"type": "text", "text": "--- Historical Visual Transition ---\nVisual transition 1."},
+    ]
+    assert EPHEMERAL_BLOCKS_KEY not in obs1.additional_kwargs
+    # Turn 2 is depth 2: past the text edge, its notices are gone while the
+    # screenshot is still there; the consumed indices are cleared.
+    obs2 = next(m for m in ledger.active_messages if "OBSERVATION [T+00:02]" in str(m.content))
+    assert "[Reminder for turn 2: state your reasoning]" not in str(obs2.content)
+    assert "[User guidance for turn 2]" not in str(obs2.content)
+    assert _has_image(obs2)
+    assert EPHEMERAL_BLOCKS_KEY not in obs2.additional_kwargs
+
+
+def test_rendering_past_the_edge_is_byte_identical_and_prefix_stable():
+    """(iii) A render with nothing new is byte-identical to the previous one,
+    and across turns exactly one message — the observation reaching depth K —
+    differs from the previous render's prefix, so the request prefix before
+    it is what the provider's prompt cache already holds."""
+    ledger = TranscriptLedger(step_memory=_ready_service(12), image_scrub_depth=3)
+    ledger.set_static_prefix([SystemMessage(content="STATIC")])
+
+    def snapshot(rendered: list) -> list[str]:
+        return [_fingerprint(m) for m in rendered[:-1]]  # everything but the live tail
+
+    previous: list[str] = []
+    for i in range(1, 11):
+        rendered = _play_turn(
+            ledger,
+            i,
+            prev_key=f"step-{i - 1}" if i > 1 else None,
+            prev_result={"status": "dispatched"} if i > 1 else None,
+        )
+        current = snapshot(rendered)
+        changed = [idx for idx, fp in enumerate(previous) if current[idx] != fp]
+        if i >= 3:
+            # The live tail is depth 1 and committed turn i-1 depth 2, so the
+            # turn reaching depth 3 is i-2; its observation heads its span.
+            expected = next(
+                idx
+                for idx, m in enumerate(rendered[:-1])
+                if f"OBSERVATION [T+00:0{(i - 2) % 10}]" in str(m.content)
+            )
+            assert changed == [expected], (i, changed)
+        else:
+            assert changed == [], (i, changed)
+        previous = current
+
+    # Same state, rendered again: byte-identical, including the tail.
+    tail = [_observation(11)]
+    again = [_fingerprint(m) for m in ledger.render(tail)]
+    assert again == [_fingerprint(m) for m in ledger.render(tail)]
+    assert again[:-1] == previous
+
+
+# ---------------------------------------------------------------------------
+# Silent-turn flag
+# ---------------------------------------------------------------------------
+
+
+def _commit(messages: list) -> TranscriptLedger:
+    ledger = TranscriptLedger(step_memory=_service())
+    ledger.stage_turn(messages)
+    ledger.commit_staged(step_key="s1")
+    return ledger
+
+
+def test_last_turn_silent_when_ai_messages_show_no_text():
+    click = [{"name": "click", "args": {"target": 1}, "id": "c1", "type": "tool_call"}]
+    assert _commit([_observation(1), AIMessage(content="", tool_calls=click)]).last_turn_silent
+    assert _commit([_observation(1), AIMessage(content="   \n", tool_calls=click)]).last_turn_silent
+    assert _commit(
+        [
+            _observation(1),
+            AIMessage(content=[{"type": "thinking", "thinking": "hidden"}], tool_calls=click),
+        ]
+    ).last_turn_silent
+    assert _commit(
+        [
+            _observation(1),
+            AIMessage(content=[{"type": "text", "text": "  "}], tool_calls=click),
+            ToolMessage(tool_call_id="c1", content="Action Recorded"),
+            AIMessage(content=[], tool_calls=click),
+        ]
+    ).last_turn_silent
+
+
+def test_last_turn_not_silent_with_visible_text_or_without_ai_message():
+    click = [{"name": "click", "args": {"target": 1}, "id": "c1", "type": "tool_call"}]
+    assert not _commit(
+        [_observation(1), AIMessage(content="I tap it.", tool_calls=click)]
+    ).last_turn_silent
+    assert not _commit(
+        [
+            _observation(1),
+            AIMessage(
+                content=[{"type": "thinking", "thinking": "x"}, {"type": "text", "text": "Tap."}],
+                tool_calls=click,
+            ),
+        ]
+    ).last_turn_silent
+    # One silent call followed by a spoken one: the turn spoke.
+    assert not _commit(
+        [
+            _observation(1),
+            AIMessage(content="", tool_calls=click),
+            ToolMessage(tool_call_id="c1", content="ok"),
+            AIMessage(content="Now the real move.", tool_calls=click),
+        ]
+    ).last_turn_silent
+    # No AI message at all is not a silent turn.
+    assert not _commit([_observation(1)]).last_turn_silent
+    # A tool result with empty text does not count as an AI message.
+    assert not _commit(
+        [_observation(1), ToolMessage(tool_call_id="c1", content="")]
+    ).last_turn_silent
+
+
+def test_last_turn_silent_tracks_each_commit():
+    ledger = TranscriptLedger(step_memory=_service())
+    click = [{"name": "click", "args": {}, "id": "c1", "type": "tool_call"}]
+    assert ledger.last_turn_silent is False
+    ledger.stage_turn([_observation(1), AIMessage(content="", tool_calls=click)])
+    ledger.commit_staged(step_key="s1")
+    assert ledger.last_turn_silent is True
+    ledger.stage_turn([_observation(2), AIMessage(content="spoken", tool_calls=click)])
+    ledger.commit_staged(step_key="s2")
+    assert ledger.last_turn_silent is False
+
+
+def test_last_turn_silent_recognises_streamed_ai_message_chunks():
+    """Streamed replies are AIMessageChunk (type "AIMessageChunk"), not "ai"."""
+    from langchain_core.messages import AIMessageChunk, HumanMessage
+
+    from artemis.memory.transcript import TranscriptLedger, render_turn_transcript
+
+    ledger = TranscriptLedger()
+    ledger.stage_turn([HumanMessage(content="obs"), AIMessageChunk(content=[])])
+    ledger.commit_staged(step_key=None, validator_result=None)
+    assert ledger.last_turn_silent is True
+
+    ledger.stage_turn([HumanMessage(content="obs"), AIMessageChunk(content="I see the list.")])
+    ledger.commit_staged(step_key=None, validator_result=None)
+    assert ledger.last_turn_silent is False
+
+    rendered = render_turn_transcript([AIMessageChunk(content="I see the list.")])
+    assert rendered.startswith("[operator]")
diff --git a/tests/unit/services/test_token_meter_ratio.py b/tests/unit/services/test_token_meter_ratio.py
new file mode 100644
index 0000000..6605fc0
--- /dev/null
+++ b/tests/unit/services/test_token_meter_ratio.py
@@ -0,0 +1,111 @@
+# Copyright 2026 Google LLC
+#
+# Licensed under the Apache License, Version 2.0 (the "License");
+# you may not use this file except in compliance with the License.
+# You may obtain a copy of the License at
+#
+#     http://www.apache.org/licenses/LICENSE-2.0
+#
+# Unless required by applicable law or agreed to in writing, software
+# distributed under the License is distributed on an "AS IS" BASIS,
+# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+# See the License for the specific language governing permissions and
+# limitations under the License.
+
+"""Session and per-source cache-hit ratios.
+
+A session whose operator calls never hit the provider's prompt cache must be
+visible without reading every ``llm_usage`` trace: the session snapshot and
+each source's totals carry ``cached_ratio`` (cached / prompt tokens).
+"""
+
+import logging
+from unittest.mock import Mock
+from uuid import uuid4
+
+from langchain_core.messages import AIMessage
+
+from artemis.services.token_meter import (
+    SessionTokenMeter,
+    cached_ratio,
+    format_session_summary,
+    get_meter,
+    log_session_summary,
+    record_llm_usage,
+)
+
+
+def _msg(prompt: int, cached: int = 0) -> AIMessage:
+    usage = {"input_tokens": prompt, "output_tokens": 10, "total_tokens": prompt + 10}
+    if cached:
+        usage["input_token_details"] = {"cache_read": cached}
+    return AIMessage(content="ok", usage_metadata=usage)
+
+
+def test_cached_ratio_is_zero_without_prompt_tokens():
+    assert cached_ratio(0, 0) == 0.0
+    assert cached_ratio(50, 0) == 0.0
+    assert cached_ratio(250, 400) == 0.625
+
+
+def test_meter_tracks_cached_ratio_per_session_and_per_source():
+    meter = SessionTokenMeter("s")
+    meter.record({"prompt_tokens": 1000, "cached_tokens": 0}, source="google:operator")
+    meter.record({"prompt_tokens": 1000, "cached_tokens": 0}, source="google:operator")
+    snapshot = meter.record(
+        {"prompt_tokens": 200, "cached_tokens": 150},
+        source="lens:step_capsule:gemini",
+        update_last_prompt=False,
+    )
+
+    # Session ratio blends every call; the call's own source rides along.
+    assert snapshot["session_cached_ratio"] == round(150 / 2200, 3)
+    assert snapshot["source_cached_ratio"] == 0.75
+    assert meter.last_prompt_tokens == 1000
+
+    summary = meter.summary()
+    assert summary["session_id"] == "s"
+    assert summary["sources"]["google:operator"] == {
+        "llm_calls": 2,
+        "prompt_tokens": 2000,
+        "cached_tokens": 0,
+        "cache_hit_calls": 0,
+        "cached_ratio": 0.0,  # the operator never hit the cache: visible at a glance
+    }
+    assert summary["sources"]["lens:step_capsule:gemini"]["cached_ratio"] == 0.75
+
+
+def test_record_llm_usage_payload_carries_both_ratios():
+    engine = Mock()
+    engine.current_session_id = uuid4()
+    engine.current_step_id = None
+
+    record_llm_usage(engine, _msg(1000), source="google:op")
+    payload = record_llm_usage(engine, _msg(1000, cached=800), source="google:op")
+
+    assert payload["session_cached_ratio"] == 0.4
+    assert payload["source_cached_ratio"] == 0.4
+    # A source-less call still reports the session ratio, never a stale source one.
+    payload = record_llm_usage(engine, _msg(1000))
+    assert payload["session_cached_ratio"] == round(800 / 3000, 3)
+    assert "source_cached_ratio" not in payload
+
+
+def test_session_summary_logs_once_per_metered_session(caplog):
+    session_id = f"ratio-{uuid4()}"
+    assert log_session_summary(session_id) is None  # never metered: nothing to say
+
+    meter = get_meter(session_id)
+    meter.record({"prompt_tokens": 500, "cached_tokens": 0}, source="google:op")
+    meter.record({"prompt_tokens": 100, "cached_tokens": 90}, source="lens:visual")
+
+    line = format_session_summary(session_id)
+    assert f"LLM usage for session {session_id}: 2 calls, 600 prompt tokens, 90 cached" in line
+    assert "cached_ratio=0.150" in line
+    assert "google:op: 1 calls, cached_ratio=0.000" in line
+    assert "lens:visual: 1 calls, cached_ratio=0.900" in line
+
+    with caplog.at_level(logging.INFO, logger="artemis.services.token_meter"):
+        summary = log_session_summary(session_id)
+    assert summary is not None and summary["session_cached_ratio"] == 0.15
+    assert any(line in record.getMessage() for record in caplog.records)
diff --git a/tests/unit/test_cli.py b/tests/unit/test_cli.py
index af85fc1..11e9077 100644
--- a/tests/unit/test_cli.py
+++ b/tests/unit/test_cli.py
@@ -196,6 +196,7 @@ def test_cli_mcp_generate_config_antigravity():
         "mobile_manage_task",
         "mobile_get_device_state",
         "mobile_inspect_trace",
+        "mobile_diagnose",
     }
     assert all(tool["eager"] is True for tool in legacy_config["tools"].values())
 
@@ -234,6 +235,7 @@ def test_cli_mcp_generate_config_codex():
         "mobile_manage_task",
         "mobile_get_device_state",
         "mobile_inspect_trace",
+        "mobile_diagnose",
     ]
 
 
@@ -430,6 +432,7 @@ def test_cli_mcp_install_codex_preserves_config_and_is_idempotent(tmp_path, monk
         "mobile_manage_task",
         "mobile_get_device_state",
         "mobile_inspect_trace",
+        "mobile_diagnose",
     ]
     assert data["mcp_servers"]["artemis"]["env"]["PYTHONPATH"] == str(tmp_path)
     assert config_text.count("# BEGIN ARTEMIS MCP CONFIG") == 1
@@ -680,3 +683,360 @@ def test_cli_server_lifecycle_aliases(monkeypatch):
     assert "restart" in help_result.output
     assert "stop" in help_result.output
     assert "status" in help_result.output
+
+
+# ---------------------------------------------------------------------------
+# artemis doctor (readiness-engine backed)
+# ---------------------------------------------------------------------------
+
+_RAW_SECRET = "sk-RAWSECRET0123456789abcdef"
+
+
+def _probe(
+    probe_id: str,
+    *,
+    status="pass",
+    blocker: bool = True,
+    summary: str = "OK",
+    description: str = "fine",
+    actions=(),
+    metadata=None,
+):
+    from artemis.core.diagnostics.schema import (
+        ProbeAction,
+        ProbeCategory,
+        ProbeResult,
+        ProbeStatus,
+    )
+
+    return ProbeResult(
+        id=probe_id,
+        category=ProbeCategory.RUNTIME,
+        title=f"Title {probe_id}",
+        status=ProbeStatus(status),
+        is_blocker=blocker,
+        summary=summary,
+        description=description,
+        metadata=metadata or {},
+        actions=[ProbeAction(action_type=t, label=lbl, payload=p) for t, lbl, p in actions],
+    )
+
+
+def _all_pass_probes():
+    return [
+        _probe("vision_ocr_key", blocker=False, summary="Not Configured (Optional)"),
+        _probe("toolchain", blocker=False),
+        _probe("android_adb", metadata={"installed": True, "adb_keys": {"is_corrupted": False}}),
+        _probe(
+            "gemini_api_key",
+            summary="Active (Gemini)",
+            description="Gemini credential is active (sk-RAW...cdef).",
+            metadata={
+                "current_key": _RAW_SECRET,
+                "api_keys": {"google": _RAW_SECRET},
+                "providers": [{"raw_key": _RAW_SECRET, "key": _RAW_SECRET}],
+            },
+        ),
+        _probe("system_config"),
+        _probe("python_runtime"),
+    ]
+
+
+def _install_doctor_fakes(monkeypatch, probes, host=None, *, heal_result=None):
+    """Patch the engine, the host probe, and the CLI-only extra rows."""
+    from unittest.mock import AsyncMock
+    import time
+
+    from artemis.core.diagnostics.engine import readiness_engine
+    from artemis.core.diagnostics.probes.host_probe import IntegrationHostProbe
+    from artemis.core.diagnostics.schema import ProbeStatus, SystemReadinessReport
+    import artemis.interfaces.cli.commands.doctor as doctor_module
+
+    monkeypatch.setenv("COLUMNS", "200")
+    blockers = [p for p in probes if p.is_blocker]
+    report = SystemReadinessReport(
+        overall_ready=all(p.status is ProbeStatus.PASS for p in blockers),
+        blocker_count=len(blockers),
+        passed_blocker_count=sum(p.status is ProbeStatus.PASS for p in blockers),
+        probes=list(probes),
+        os_type="windows",
+        timestamp=time.time(),
+    )
+    run_all = AsyncMock(return_value=report)
+    monkeypatch.setattr(readiness_engine, "run_all", run_all)
+    heal = AsyncMock(return_value=heal_result or {"success": True, "message": "Keys regenerated."})
+    monkeypatch.setattr(readiness_engine, "heal_adb_keys", heal)
+    host_probe = AsyncMock(
+        return_value=host or _probe("integration_host", summary="Host Ready", description="host ok")
+    )
+    monkeypatch.setattr(IntegrationHostProbe, "probe", host_probe)
+    monkeypatch.setattr(
+        doctor_module,
+        "_npm_row",
+        lambda: doctor_module.ExtraRow(
+            key="nodejs_npm",
+            title="Node.js / npm",
+            status="pass",
+            status_markup="[bold green]✔ Installed[/bold green]",
+            summary="Installed",
+            detail="/usr/bin/npm",
+        ),
+    )
+    monkeypatch.setattr(
+        doctor_module,
+        "_showcase_row",
+        lambda: doctor_module.ExtraRow(
+            key="showcase_ui",
+            title="Showcase UI",
+            status="missing",
+            status_markup="[bold yellow]○ Not Compiled[/bold yellow]",
+            summary="Not Compiled",
+            detail="Run ./start.sh or artemis ui to auto-compile.",
+        ),
+    )
+    return {"run_all": run_all, "heal": heal, "host": host_probe}
+
+
+def test_cli_doctor_all_pass_renders_table_in_fix_order(monkeypatch):
+    """All-green run: engine rows in fix order, extras last, exit 0, ready footer."""
+    _install_doctor_fakes(monkeypatch, _all_pass_probes())
+
+    result = runner.invoke(app, ["doctor"])
+    assert result.exit_code == 0, result.output
+    out = result.output
+    assert "Artemis System & Environment Doctor" in out
+    assert "Details & Recommendations" in out
+    assert out.count("✔ OK") == 7
+    assert "Node.js / npm" in out and "Showcase UI" in out
+    assert "All system checks passed" in out
+    assert 'artemis run "Open Settings and check Battery level"' in out
+
+    order = [
+        "Title python_runtime",
+        "Title system_config",
+        "Title integration_host",
+        "Title gemini_api_key",
+        "Title android_adb",
+        "Title toolchain",
+        "Title vision_ocr_key",
+        "Node.js / npm",
+        "Showcase UI",
+    ]
+    positions = [out.index(name) for name in order]
+    assert positions == sorted(positions)
+
+
+def test_cli_doctor_blocker_failure_shows_run_lines_and_splits_chains(monkeypatch):
+    """A failing blocker prints each action on its own line; && chains are split."""
+    probes = [p for p in _all_pass_probes() if p.id != "android_adb"]
+    probes.append(
+        _probe(
+            "android_adb",
+            status="fail",
+            summary="ADB Missing",
+            description="adb was not found.",
+            actions=[
+                ("command", "Install", "winget install Google.PlatformTools && adb start-server"),
+                ("hint", "Enable USB", "Enable USB debugging on the phone."),
+                ("link", "Docs", "https://developer.android.com/tools/adb"),
+            ],
+            metadata={"installed": False},
+        )
+    )
+    _install_doctor_fakes(monkeypatch, probes)
+
+    result = runner.invoke(app, ["doctor"])
+    assert result.exit_code == 1, result.output
+    out = result.output
+    assert "✖ ADB Missing" in out
+    assert "Run: winget install Google.PlatformTools" in out
+    assert "Run: adb start-server" in out
+    assert "&&" not in out
+    assert "Enable USB debugging on the phone." in out
+    assert "https://developer.android.com/tools/adb" in out
+    assert "Action Required" in out
+    assert "artemis init" in out
+    assert "mobile_diagnose" in out
+
+
+def test_cli_doctor_optional_failure_is_degraded_not_blocked(monkeypatch):
+    """Non-blocker FAIL renders as Optional, keeps exit 0, and yields 'degraded'."""
+    import json
+
+    probes = [p for p in _all_pass_probes() if p.id != "toolchain"]
+    probes.append(
+        _probe(
+            "toolchain",
+            status="fail",
+            blocker=False,
+            summary="Missing FFmpeg",
+            actions=[("command", "Install", "winget install Gyan.FFmpeg")],
+        )
+    )
+    _install_doctor_fakes(monkeypatch, probes)
+
+    result = runner.invoke(app, ["doctor"])
+    assert result.exit_code == 0, result.output
+    assert "⚪ Optional" in result.output
+    assert "Run: winget install Gyan.FFmpeg" in result.output
+    assert "optional gaps" in result.output
+
+    result = runner.invoke(app, ["doctor", "--json"])
+    assert result.exit_code == 0, result.output
+    assert json.loads(result.output)["verdict"] == "degraded"
+
+
+def test_cli_doctor_never_prints_raw_keys_from_metadata(monkeypatch):
+    """Probe metadata (which carries raw credentials) must not reach the terminal or JSON."""
+    _install_doctor_fakes(monkeypatch, _all_pass_probes())
+
+    table = runner.invoke(app, ["doctor"])
+    assert table.exit_code == 0, table.output
+    assert "RAWSECRET" not in table.output
+    assert "sk-RAW...cdef" in table.output  # the masked description is still shown
+
+    as_json = runner.invoke(app, ["doctor", "--json"])
+    assert as_json.exit_code == 0, as_json.output
+    assert "RAWSECRET" not in as_json.output
+    assert "metadata" not in as_json.output
+
+
+def test_cli_doctor_json_shape_and_ready_verdict(monkeypatch):
+    """--json emits the documented document shape and nothing else."""
+    import json
+
+    _install_doctor_fakes(monkeypatch, _all_pass_probes())
+
+    result = runner.invoke(app, ["doctor", "--json"])
+    assert result.exit_code == 0, result.output
+    doc = json.loads(result.output)
+    assert set(doc) == {"verdict", "checks", "extras", "fixes"}
+    assert doc["verdict"] == "ready"
+    assert doc["fixes"] == []
+    assert [c["id"] for c in doc["checks"]] == [
+        "python_runtime",
+        "system_config",
+        "integration_host",
+        "gemini_api_key",
+        "android_adb",
+        "toolchain",
+        "vision_ocr_key",
+    ]
+    for check in doc["checks"]:
+        assert set(check) == {"id", "title", "status", "required", "summary", "detail", "fix"}
+        assert check["status"] == "pass"
+        assert check["fix"] == []
+    assert set(doc["extras"]) == {"nodejs_npm", "showcase_ui"}
+    assert doc["extras"]["nodejs_npm"]["status"] == "pass"
+    assert doc["extras"]["showcase_ui"]["status"] == "missing"
+
+
+def test_cli_doctor_json_blocked_verdict_and_exit_code(monkeypatch):
+    """A blocker that is not PASS makes the verdict 'blocked' and the exit code 1."""
+    import json
+
+    probes = [p for p in _all_pass_probes() if p.id != "gemini_api_key"]
+    probes.append(
+        _probe(
+            "gemini_api_key",
+            status="fail",
+            summary="Key Missing",
+            description="No LLM credential found.",
+            actions=[
+                ("command", "Run Artemis Init", "artemis init"),
+                ("link", "Get Key", "https://aistudio.google.com/app/apikey"),
+            ],
+        )
+    )
+    _install_doctor_fakes(monkeypatch, probes)
+
+    result = runner.invoke(app, ["doctor", "--json"])
+    assert result.exit_code == 1, result.output
+    doc = json.loads(result.output)
+    assert doc["verdict"] == "blocked"
+    key_check = next(c for c in doc["checks"] if c["id"] == "gemini_api_key")
+    assert key_check["status"] == "fail"
+    assert key_check["required"] is True
+    assert key_check["fix"] == [
+        {"type": "command", "label": "Run Artemis Init", "payload": "artemis init"},
+        {"type": "link", "label": "Get Key", "payload": "https://aistudio.google.com/app/apikey"},
+    ]
+
+
+def test_cli_doctor_host_warn_degrades_and_keeps_the_fix(monkeypatch):
+    """A host WARN is not a blocker (the runner works around it): the doctor
+    exits 0 with a degraded verdict and still prints the fix."""
+    host = _probe(
+        "integration_host",
+        status="warn",
+        blocker=False,
+        summary="Host Warning",
+        description="MCP server runs on the wrong interpreter.",
+        actions=[("command", "Regenerate", "uv run artemis mcp --install cursor")],
+    )
+    _install_doctor_fakes(monkeypatch, _all_pass_probes(), host=host)
+
+    result = runner.invoke(app, ["doctor"])
+    assert result.exit_code == 0, result.output
+    assert "⚠ Host Warning" in result.output
+    assert "Run: uv run artemis mcp --install cursor" in result.output
+
+
+def test_cli_doctor_host_fail_blocks_and_uses_summary(monkeypatch):
+    host = _probe(
+        "integration_host",
+        status="fail",
+        summary="Host Misconfigured",
+        description="traces directory is not writable.",
+    )
+    _install_doctor_fakes(monkeypatch, _all_pass_probes(), host=host)
+
+    result = runner.invoke(app, ["doctor"])
+    assert result.exit_code == 1, result.output
+    assert "✖ Host Misconfigured" in result.output
+
+
+def test_cli_doctor_fix_heals_corrupted_keys_and_sweeps_locks(monkeypatch):
+    """--fix heals ADB keys when the probe reports corruption and sweeps stale locks."""
+    from artemis.runtime.device_lock import DeviceExecutionLock
+
+    probes = [p for p in _all_pass_probes() if p.id != "android_adb"]
+    probes.append(
+        _probe(
+            "android_adb",
+            status="fail",
+            summary="Keys Corrupted",
+            metadata={"installed": True, "adb_keys": {"is_corrupted": True}},
+        )
+    )
+    fakes = _install_doctor_fakes(monkeypatch, probes)
+    cleanup_calls: list = []
+    monkeypatch.setattr(
+        DeviceExecutionLock,
+        "cleanup_stale_locks",
+        classmethod(lambda cls, device_id=None: cleanup_calls.append(device_id) or 3),
+    )
+
+    result = runner.invoke(app, ["doctor", "--fix"])
+    fakes["heal"].assert_awaited_once()
+    assert cleanup_calls == [None]
+    assert fakes["run_all"].await_count == 2  # report is re-collected after the repairs
+    assert "Repairs (--fix)" in result.output
+    assert "Keys regenerated." in result.output
+    assert "Removed 3 stale device lock(s)" in result.output
+
+
+def test_cli_doctor_fix_skips_heal_when_keys_are_healthy(monkeypatch):
+    """--fix does not touch healthy ADB keys but still sweeps stale locks."""
+    from artemis.runtime.device_lock import DeviceExecutionLock
+
+    fakes = _install_doctor_fakes(monkeypatch, _all_pass_probes())
+    monkeypatch.setattr(
+        DeviceExecutionLock, "cleanup_stale_locks", classmethod(lambda cls, device_id=None: 0)
+    )
+
+    result = runner.invoke(app, ["doctor", "--fix"])
+    assert result.exit_code == 0, result.output
+    fakes["heal"].assert_not_awaited()
+    assert "nothing to repair" in result.output
+    assert "No stale device locks" in result.output
diff --git a/tests/unit/test_memory_config.py b/tests/unit/test_memory_config.py
index 48b3f7d..eb6e357 100644
--- a/tests/unit/test_memory_config.py
+++ b/tests/unit/test_memory_config.py
@@ -14,6 +14,8 @@
 
 """Unit tests for the agent.memory configuration block (M1/M2)."""
 
+import pytest
+
 from artemis.config import AgentGlobalConfig
 
 
@@ -24,12 +26,39 @@ def test_memory_defaults():
     assert cfg.memory.runtime.max_concurrency == 2
     assert cfg.memory.runtime.retry_limit == 3
     assert cfg.memory.runtime.flush_timeout_s == 30.0
-    # M5 (2026-09-01): the transcript path ships ON by default; explicit
-    # false is the byte-for-byte rollback switch (see the flip test below).
+    # Transcript history is enabled by default; false selects the legacy path.
     assert cfg.memory.transcript.enabled is True
     assert cfg.memory.transcript.image_scrub_depth == 3
     assert cfg.memory.transcript.pending_grace_steps == 3
+    # Text cleanup runs independently of the screenshot depth.
     assert cfg.memory.transcript.xml_scrub_depth == 1
+    # Ready chunks replace their turns only once the
+    # operator's measured context reaches budget*start_ratio.
+    assert cfg.memory.chunking.min_steps == 3
+    assert cfg.memory.transcript.image_scrub_depth_relaxed == 6
+    assert cfg.memory.transcript.start_ratio == 0.35
+    assert cfg.memory.transcript.soft_ratio == 0.7
+    assert cfg.memory.transcript.hard_ratio == 0.9
+
+
+def test_transcript_ratio_ladder_is_validated():
+    """start <= soft <= hard, all within [0, 1]: the defaults pass, a
+    crossed pair is rejected with a clear message."""
+    import pydantic
+
+    from artemis.config.agent import MemoryTranscriptConfig
+
+    MemoryTranscriptConfig()
+    MemoryTranscriptConfig(start_ratio=0.0, soft_ratio=0.5, hard_ratio=0.5)
+
+    with pytest.raises(pydantic.ValidationError, match="start_ratio <= soft_ratio"):
+        MemoryTranscriptConfig(start_ratio=0.8, soft_ratio=0.7)
+    with pytest.raises(pydantic.ValidationError, match="soft_ratio <= hard_ratio"):
+        MemoryTranscriptConfig(soft_ratio=0.95, hard_ratio=0.9)
+    with pytest.raises(pydantic.ValidationError):
+        AgentGlobalConfig.model_validate(
+            {"memory": {"transcript": {"start_ratio": 0.9, "soft_ratio": 0.7}}}
+        )
 
 
 def test_memory_transcript_flag_explicit_disable_is_rollback_switch():
@@ -57,9 +86,40 @@ def test_memory_explicit_values():
     assert cfg.memory.runtime.flush_timeout_s == 10.0
     assert cfg.memory.transcript.image_scrub_depth == 5
     assert cfg.memory.transcript.pending_grace_steps == 1
+    # Legacy key: still accepted (back-compat), value retained as given.
     assert cfg.memory.transcript.xml_scrub_depth == 2
 
 
+def test_xml_scrub_depth_positions_the_text_edge():
+    """The text edge is separate from the screenshot edge: with K=3 and
+    xml_scrub_depth=1 the observation at depth 2 has already lost its UI
+    list while it still carries its screenshot."""
+    from langchain_core.messages import HumanMessage
+
+    from artemis.memory.transcript import PRO_UI_LIST_MARKER, TranscriptLedger
+
+    cfg = AgentGlobalConfig.model_validate({"memory": {"transcript": {"xml_scrub_depth": 1}}})
+    ledger = TranscriptLedger(
+        image_scrub_depth=3, xml_scrub_depth=cfg.memory.transcript.xml_scrub_depth
+    )
+
+    def obs(i):
+        return HumanMessage(
+            content=[
+                {"type": "text", "text": f"obs {i}"},
+                {"type": "image_url", "image_url": {"url": f"data:image/jpeg;base64,{i}"}},
+                {"type": "text", "text": f"{PRO_UI_LIST_MARKER}\n[{i}] item"},
+            ]
+        )
+
+    ledger.stage_turn([obs(1)])
+    ledger.commit_staged(step_key="s1")
+    ledger.render([obs(2)])
+    committed = ledger.active_messages[0]
+    assert PRO_UI_LIST_MARKER not in str(committed.content)
+    assert any(isinstance(b, dict) and b.get("type") == "image_url" for b in committed.content)
+
+
 def test_legacy_step_summarizer_retry_limit_seeds_memory_runtime():
     """An explicit legacy flash.step_summarizer.retry_limit keeps working."""
     cfg = AgentGlobalConfig.model_validate({"flash": {"step_summarizer": {"retry_limit": 7}}})
@@ -103,7 +163,7 @@ def test_recall_and_similarity_defaults():
 
 
 def test_chunking_era_cap_follows_max_chunks_by_default():
-    """M5: max_eras is an independent key; None (default) follows max_chunks."""
+    """max_eras is an independent key; None (default) follows max_chunks."""
     cfg = AgentGlobalConfig()
     assert cfg.memory.chunking.max_chunks == 8
     assert cfg.memory.chunking.max_eras is None
@@ -133,3 +193,25 @@ def test_recall_and_policies_overridable():
     assert cfg.memory.replay.max_tokens == 4000
     assert cfg.memory.transcript.similarity_hint is False
     assert cfg.memory.policies == {"planner": {"last_n_detailed": 3}}
+
+
+def test_memory_chunking_min_steps_must_not_exceed_max_steps():
+    import pytest
+    from pydantic import ValidationError
+
+    AgentGlobalConfig.model_validate({"memory": {"chunking": {"min_steps": 4, "max_steps": 4}}})
+    with pytest.raises(ValidationError):
+        AgentGlobalConfig.model_validate({"memory": {"chunking": {"min_steps": 5, "max_steps": 4}}})
+
+
+def test_memory_transcript_relaxed_image_depth_must_not_be_shallower():
+    import pytest
+    from pydantic import ValidationError
+
+    AgentGlobalConfig.model_validate(
+        {"memory": {"transcript": {"image_scrub_depth": 3, "image_scrub_depth_relaxed": 3}}}
+    )
+    with pytest.raises(ValidationError):
+        AgentGlobalConfig.model_validate(
+            {"memory": {"transcript": {"image_scrub_depth": 4, "image_scrub_depth_relaxed": 3}}}
+        )
diff --git a/tests/unit/test_token_meter.py b/tests/unit/test_token_meter.py
index 6324589..55643c3 100644
--- a/tests/unit/test_token_meter.py
+++ b/tests/unit/test_token_meter.py
@@ -82,6 +82,7 @@ def test_meter_accumulates_session_totals():
         "session_completion_tokens": 30,
         "session_cached_tokens": 250,
         "session_cache_hit_calls": 1,
+        "session_cached_ratio": 0.625,
     }
     assert meter.last_prompt_tokens == 300
 
diff --git a/tests/unit/tools/history/test_replay.py b/tests/unit/tools/history/test_replay.py
index 7a71fc8..399275e 100644
--- a/tests/unit/tools/history/test_replay.py
+++ b/tests/unit/tools/history/test_replay.py
@@ -24,10 +24,14 @@ from artemis.core.tool_failure import is_tool_failure
 from artemis.tools.history import ReplayStepsTool, replay_steps, replay_steps_text
 
 
+SESSION_START = 1000.0
+
+
 def _friendly_step(number, tool_result="The toggle is ON", **overrides):
     step = {
         "step_id": f"step_{number}",
         "step_number": number,
+        "timestamp": SESSION_START + number * 3,
         "relative_time": f"{number * 3}.0s",
         "summary": f"Step {number} summary.",
         "action_taken": {"action": "click", "target": [0.5, 0.5], "target_text": "Save"},
@@ -46,8 +50,9 @@ def _friendly_step(number, tool_result="The toggle is ON", **overrides):
     return step
 
 
-def _reader(steps):
+def _reader(steps, session_start=SESSION_START):
     reader = MagicMock()
+    reader.session_start_time = session_start
     reader.get_agent_friendly_steps_in_range.side_effect = lambda s, e: [
         st for st in steps if s <= st["step_number"] <= e
     ]
@@ -59,19 +64,38 @@ def test_replay_range_renders_every_step_in_full():
     out = replay_steps_text(reader, 3, 4)
 
     reader.get_agent_friendly_steps_in_range.assert_called_once_with(3, 4)
-    assert "- **Step 3 (Start: 9.0s)**" in out
-    assert "- **Step 4 (Start: 12.0s)**" in out
+    # Step headers carry the session clock every agent prompt uses.
+    assert "- **Step 3 (T+00:09)**" in out
+    assert "- **Step 4 (T+00:12)**" in out
+    assert "Start:" not in out
     assert "[Screen]: Step 3 summary." in out
     assert "Thinking at step 4." in out
     assert "`ask_explorer(" in out
     # Loose clamp: a ~1.8k-char tool result is replayed in full.
     assert "The toggle is OFF " * 100 in out
-    assert "[Planned Action]: Tapped 'Save' at [0.5, 0.5]" in out
+    assert "[Action]: Tapped 'Save' at [0.5, 0.5]" in out
+    assert "[Reasoning & tool calls]:" in out
+    assert "Operator" not in out
+
+
+def test_replay_header_falls_back_without_a_session_clock():
+    """No session start (or a mocked, non-numeric one) / no step timestamp:
+    the header keeps the stored relative time instead of ``T+??:??``."""
+    out = replay_steps_text(_reader([_friendly_step(2)], session_start=None), 2)
+    assert "- **Step 2 (Start: 6.0s)**" in out
+
+    reader = MagicMock()  # session_start_time is a MagicMock, not a number
+    reader.get_agent_friendly_steps_in_range.return_value = [_friendly_step(2)]
+    assert "- **Step 2 (Start: 6.0s)**" in replay_steps_text(reader, 2)
+
+    no_timestamp = _friendly_step(2)
+    del no_timestamp["timestamp"]
+    assert "- **Step 2 (Start: 6.0s)**" in replay_steps_text(_reader([no_timestamp]), 2)
 
 
 def test_replay_single_step_reversed_bounds_and_missing_step():
     reader = _reader([_friendly_step(2)])
-    assert "- **Step 2 (Start: 6.0s)**" in replay_steps_text(reader, 2)
+    assert "- **Step 2 (T+00:06)**" in replay_steps_text(reader, 2)
     reader.get_agent_friendly_steps_in_range.assert_called_once_with(2, 2)
 
     reader = _reader([_friendly_step(2), _friendly_step(3)])
@@ -149,7 +173,7 @@ def test_replay_without_history():
 async def test_tool_execute_reads_the_context_engine_and_degrades_without_one():
     reader = _reader([_friendly_step(2)])
     out = await ReplayStepsTool().execute(ctx=SimpleNamespace(data_engine=reader), start_step=2)
-    assert "- **Step 2 (Start: 6.0s)**" in out
+    assert "- **Step 2 (T+00:06)**" in out
 
     out = await replay_steps.execute(ctx=SimpleNamespace(data_engine=None), start_step=1)
     assert "no execution history" in out
diff --git a/tests/unit/tools/history/test_screenshot.py b/tests/unit/tools/history/test_screenshot.py
index 4c623d8..244f59f 100644
--- a/tests/unit/tools/history/test_screenshot.py
+++ b/tests/unit/tools/history/test_screenshot.py
@@ -21,7 +21,9 @@ from unittest.mock import MagicMock
 import pytest
 from PIL import Image
 
+from artemis.core.tool_failure import is_tool_failure
 from artemis.tools.history import get_step_screenshot, load_step_screenshot
+from artemis.tools.tool_wrapper import tool_result_messages
 
 
 def _jpeg_file(tmp_path, name="pre.jpg", color="white"):
@@ -78,21 +80,70 @@ def test_overlay_falls_back_to_plain_pre_without_action(tmp_path):
     assert "plain screenshot" in shot.description
 
 
-def test_missing_file_and_missing_step_return_plain_text():
+def test_missing_file_is_an_answer_but_missing_step_is_a_failure():
     shot = load_step_screenshot(_reader(pre=None, post=None), 3, "post")
     assert shot.image_bytes is None
-    assert shot.to_content_blocks() == "No post-action screenshot recorded for step 3."
+    assert shot.is_error is False
+    out = shot.to_content_blocks()
+    assert out == "No post-action screenshot recorded for step 3."
+    assert not is_tool_failure(out)
 
     shot = load_step_screenshot(_reader(pre=None, record=False), 9, "pre")
-    assert shot.to_content_blocks() == "Error: step 9 not found."
+    assert shot.is_error is True
+    out = shot.to_content_blocks()
+    assert out == "Error: step 9 not found."
+    assert is_tool_failure(out)
 
 
 def test_invalid_variant_and_step_number_are_rejected():
     shot = load_step_screenshot(_reader(), 1, "bogus")
     assert shot.image_bytes is None
+    assert shot.is_error is True
     assert "'pre', 'post' or 'overlay'" in shot.description
-    assert "must be an integer" in load_step_screenshot(_reader(), "one").description
-    assert "no execution history" in load_step_screenshot(None, 1).description
+    assert is_tool_failure(shot.to_content_blocks())
+
+    shot = load_step_screenshot(_reader(), "one")
+    assert "must be an integer" in shot.description and shot.is_error is True
+    shot = load_step_screenshot(None, 1)
+    assert "no execution history" in shot.description and shot.is_error is True
+
+
+def test_unreadable_file_and_reader_errors_are_failures(tmp_path):
+    shot = load_step_screenshot(_reader(pre=tmp_path / "missing.jpg"), 2, "pre")
+    assert shot.is_error is True
+    assert "Error reading screenshot" in shot.description
+
+    reader = _reader()
+    reader.get_step_image_path.side_effect = ValueError("corrupt row")
+    shot = load_step_screenshot(reader, 2, "pre")
+    assert shot.is_error is True
+    assert "Error looking up step 2: corrupt row" in shot.description
+
+
+@pytest.mark.asyncio
+async def test_error_answers_reach_the_model_with_status_error():
+    """The executor loops derive the ToolMessage status from ``is_tool_failure``:
+    an unknown step arrives as status=error, a recorded-but-absent screenshot
+    as a normal answer."""
+    ctx = SimpleNamespace(data_engine=_reader(pre=None, record=False))
+    out = await get_step_screenshot.execute(ctx=ctx, step_number=999, which="pre")
+    assert out == "Error: step 999 not found."
+    assert is_tool_failure(out)
+    status = "error" if is_tool_failure(out) else "success"
+    (msg,) = tool_result_messages("tc-1", out, name="get_step_screenshot", status=status)
+    assert msg.status == "error"
+    assert msg.content == "Error: step 999 not found."
+
+    ctx = SimpleNamespace(data_engine=_reader(pre=None, post=None))
+    out = await get_step_screenshot.execute(ctx=ctx, step_number=3, which="post")
+    assert not is_tool_failure(out)
+    (msg,) = tool_result_messages(
+        "tc-2",
+        out,
+        name="get_step_screenshot",
+        status="error" if is_tool_failure(out) else "success",
+    )
+    assert msg.status == "success"
 
 
 @pytest.mark.asyncio
diff --git a/tests/unit/tools/history/test_search.py b/tests/unit/tools/history/test_search.py
index 404c22e..e899bc1 100644
--- a/tests/unit/tools/history/test_search.py
+++ b/tests/unit/tools/history/test_search.py
@@ -346,6 +346,101 @@ def test_availability_requires_engine_and_config():
     assert search_history_available(SimpleNamespace(data_engine=object())) is True
 
 
+def test_excerpts_never_show_raw_json(engine):
+    """The raw action / result JSON only scores; the ``Match:`` excerpt is the
+    ledger action phrase plus the result's status/error words."""
+    engine.record_step(
+        summary="Started playback.",
+        action_taken={
+            "action": "click",
+            "coordinates": [500, 520],
+            "coordinate_space": "normalized",
+            "target_description": "Wi-Fi jsonneedle row",
+            "args": {"target": [500, 520], "target_description": "Wi-Fi jsonneedle row"},
+        },
+        last_execution_result={"status": "failed", "error": "Error: tap rejected"},
+    )
+    _flush(engine)
+
+    out = search_history_text(engine, query="jsonneedle", recall_config=_cfg())
+    match = next(line for line in out.splitlines() if line.strip().startswith("Match:"))
+    assert "Tapped 'Wi-Fi jsonneedle row' (self-described) at [500, 520]" in match
+    assert "status failed" in match
+    assert "Error: tap rejected" in match
+    for token in ('{"action"', '"coordinates"', '"coordinate_space"', '"args"', "{", "}"):
+        assert token not in match, match
+
+
+def test_raw_only_fields_still_score(engine):
+    """A hit that only exists in the raw record (a resource id / package name
+    under ``args``) is still found; its excerpt is the readable action line."""
+    engine.record_step(
+        summary="Opened the drawer.",
+        action_taken={
+            "action": "click",
+            "coordinates": [10, 20],
+            "coordinate_space": "normalized",
+            "args": {"target": [10, 20], "resource_id": "com.example:id/rawonlyneedle"},
+        },
+        last_execution_result={"status": "dispatched"},
+    )
+    _flush(engine)
+    out = search_history_text(engine, query="rawonlyneedle", recall_config=_cfg())
+    assert "[Step 4 " in out
+    assert "Match: Tapped element at [10, 20] | status dispatched" in out
+    assert '"resource_id"' not in out
+
+
+def test_summary_hit_is_not_repeated_in_the_match_line(engine):
+    out = search_history_text(engine, query="promo popup", recall_config=_cfg())
+    block = out[out.index("[Step 3 ") :]
+    assert "Screen: A promo popup appeared and was dismissed." in block
+    # The summary heads the result once; the Match line (if any) shows the
+    # other readable fields, never the summary again.
+    assert block.count("A promo popup appeared") == 1
+
+
+def test_screen_hits_render_readable_values_not_ui_tree_json(tmp_path):
+    engine = _make_engine(tmp_path)
+    engine.record_step(
+        pre_screenshot_bytes=_jpeg("red"),
+        summary="On the network settings screen.",
+        action_taken={"action": "click", "target_text": "Network"},
+        ui_tree=[
+            {
+                "text": "",
+                "content-desc": "Navigate up",
+                "resource-id": "com.android.settings:id/toolbar_up",
+                "bounds": "[0,0][100,100]",
+                "class": "android.widget.ImageButton",
+                "clickable": "true",
+                "package": "com.android.settings",
+            },
+            {
+                "text": "Wi-Fi treeneedle",
+                "content-desc": "",
+                "resource-id": "android:id/title",
+                "bounds": "[40,560][600,640]",
+                "class": "android.widget.TextView",
+                "clickable": "false",
+                "children": [{"text": "Connected", "bounds": "[40,640][600,700]"}],
+            },
+        ],
+        ocr_result=[{"text": "Bluetooth ocrword", "bounds": [0, 0, 10, 10]}],
+    )
+    _flush(engine)
+
+    out = search_history_text(engine, query="treeneedle", recall_config=_cfg())
+    match = next(line for line in out.splitlines() if line.strip().startswith("Match:"))
+    assert "Wi-Fi treeneedle" in match
+    assert "Navigate up | com.android.settings:id/toolbar_up | Wi-Fi treeneedle" in match
+    assert "android:id/title | Connected | Bluetooth ocrword" in match
+    for token in ('"bounds"', '"class"', '"clickable"', "{", "}"):
+        assert token not in match, match
+    # Bounds / class names still score (they stay in the raw haystack).
+    assert "[Step 1 " in search_history_text(engine, query="ImageButton", recall_config=_cfg())
+
+
 def test_action_matches_keep_target_provenance(engine):
     """The action haystack is the shared ledger rendering, so an excerpt shows a
     self-described coordinate target with its marker and an observed index
diff --git a/tests/unit/tools/test_append_note_pure_tool.py b/tests/unit/tools/test_append_note_pure_tool.py
index 373285e..f29db07 100644
--- a/tests/unit/tools/test_append_note_pure_tool.py
+++ b/tests/unit/tools/test_append_note_pure_tool.py
@@ -62,7 +62,7 @@ async def test_append_note_pure_direct_execution_success(mock_ctx, tmp_path):
         key="pure_append",
         content="First line",
     )
-    assert result1 == "Successfully appended note to pure_append.md."
+    assert result1 == "Appended to note 'pure_append'."
 
     note_path = Path(tmp_path) / "notes" / "pure_append.md"
     assert note_path.exists()
@@ -74,7 +74,7 @@ async def test_append_note_pure_direct_execution_success(mock_ctx, tmp_path):
         key="pure_append",
         content="Second line",
     )
-    assert result2 == "Successfully appended note to pure_append.md."
+    assert result2 == "Appended to note 'pure_append'."
     assert note_path.read_text(encoding="utf-8") == "First line\nSecond line\n"
 
 
@@ -86,7 +86,7 @@ async def test_append_note_pure_callable_execution(mock_ctx, tmp_path):
         key="callable_pure_append",
         content="Pure callable append",
     )
-    assert result == "Successfully appended note to callable_pure_append.md."
+    assert result == "Appended to note 'callable_pure_append'."
 
     note_path = Path(tmp_path) / "notes" / "callable_pure_append.md"
     assert note_path.exists()
@@ -120,7 +120,7 @@ async def test_get_append_note_tool_pure_langchain_ainvoke(mock_ctx, tmp_path):
             "content": "Saved via pure append tool",
         }
     )
-    assert result == "Successfully appended note to lc_pure_append.md."
+    assert result == "Appended to note 'lc_pure_append'."
 
     note_path = Path(tmp_path) / "notes" / "lc_pure_append.md"
     assert note_path.exists()
diff --git a/tests/unit/tools/test_append_note_tool.py b/tests/unit/tools/test_append_note_tool.py
index 83c9ab1..775a251 100644
--- a/tests/unit/tools/test_append_note_tool.py
+++ b/tests/unit/tools/test_append_note_tool.py
@@ -70,7 +70,7 @@ async def test_append_note_direct_execution_success(mock_ctx, tmp_path):
         key="test_append",
         content="First line",
     )
-    assert result1 == "Successfully appended note to test_append.md."
+    assert result1 == "Appended to note 'test_append'."
 
     note_path = Path(tmp_path) / "notes" / "test_append.md"
     assert note_path.exists()
@@ -82,7 +82,7 @@ async def test_append_note_direct_execution_success(mock_ctx, tmp_path):
         key="test_append",
         content="Second line",
     )
-    assert result2 == "Successfully appended note to test_append.md."
+    assert result2 == "Appended to note 'test_append'."
     assert note_path.read_text(encoding="utf-8") == "First line\nSecond line\n"
 
 
@@ -94,7 +94,7 @@ async def test_append_note_callable_execution(mock_ctx, tmp_path):
         key="callable_append",
         content="Callable append test",
     )
-    assert result == "Successfully appended note to callable_append.md."
+    assert result == "Appended to note 'callable_append'."
 
     note_path = Path(tmp_path) / "notes" / "callable_append.md"
     assert note_path.exists()
@@ -116,7 +116,7 @@ async def test_append_note_with_state_tool_message(mock_ctx, tmp_path):
 
     assert isinstance(result, ToolMessage)
     assert result.tool_call_id == "call_append_999"
-    assert result.content == "Successfully appended note to state_append_note.md."
+    assert result.content == "Appended to note 'state_append_note'."
     assert result.status == "success"
 
     note_path = Path(tmp_path) / "notes" / "state_append_note.md"
@@ -151,7 +151,7 @@ async def test_get_append_note_tool_langchain_ainvoke(mock_ctx, tmp_path):
             "content": "Appended via LangChain BaseTool",
         }
     )
-    assert result == "Successfully appended note to lc_append_note.md."
+    assert result == "Appended to note 'lc_append_note'."
 
     note_path = Path(tmp_path) / "notes" / "lc_append_note.md"
     assert note_path.exists()
@@ -170,7 +170,7 @@ async def test_get_append_note_tool_pure(mock_ctx, tmp_path):
             "content": "Appended via pure tool",
         }
     )
-    assert result == "Successfully appended note to pure_append_note.md."
+    assert result == "Appended to note 'pure_append_note'."
 
     note_path = Path(tmp_path) / "notes" / "pure_append_note.md"
     assert note_path.exists()
diff --git a/tests/unit/tools/test_command_tool.py b/tests/unit/tools/test_command_tool.py
index 4dfa915..99eafe4 100644
--- a/tests/unit/tools/test_command_tool.py
+++ b/tests/unit/tools/test_command_tool.py
@@ -255,9 +255,25 @@ async def test_run_command_kill(mock_exec, mock_ctx):
             "TaskId": task_id,
         }
     )
-    assert f"Task {task_id} successfully terminated" in kill_res
+    assert f"Terminated task {task_id}" in kill_res
+    assert "successfully" not in kill_res
     assert task_id not in registry.background
 
+    # Refusals (unknown or already-finished task) are reported structurally.
+    from artemis.core.tool_failure import is_tool_failure
+
+    again = await manage_task.ainvoke({"Action": "kill", "TaskId": task_id})
+    assert is_tool_failure(again)
+    assert f"Task {task_id} is not active or already finished." in str(again)
+
+    missing = await manage_task.ainvoke({"Action": "status", "TaskId": "task_nope"})
+    assert is_tool_failure(missing)
+    assert "Error: Task task_nope not found." in str(missing)
+
+    no_input = await manage_task.ainvoke({"Action": "send_input", "TaskId": task_id, "Input": "y"})
+    assert is_tool_failure(no_input)
+    assert f"Task {task_id} is not active." in str(no_input)
+
 
 @pytest.mark.asyncio
 @patch("asyncio.create_subprocess_exec")
@@ -305,8 +321,8 @@ async def test_run_short_command_timeout(mock_exec, mock_ctx):
 @pytest.mark.asyncio
 @patch("asyncio.create_subprocess_exec")
 async def test_run_command_sync_long_output(mock_exec, mock_ctx):
-    # Generate long output (> 500 lines)
-    long_output = "\n".join(f"Output line {i}" for i in range(1, 600))
+    # Generate long output (> 50000 chars): the trigger is size, not line count.
+    long_output = "\n".join(f"Output line {i} {'x' * 90}" for i in range(1, 600))
     mock_process = MockProcess(
         output_bytes=long_output.encode() + b"\n===EXIT_CODE===0\n===ENV_START===\n",
         exit_code=0,
@@ -326,9 +342,36 @@ async def test_run_command_sync_long_output(mock_exec, mock_ctx):
     assert "ADB command completed with exit code 0." in result
     assert "has been truncated" in result
     assert "Output line 599" in result
-    assert "Output line 1" not in result  # since it was truncated to last 200 lines
-    assert "analyze_task_output" in result
+    assert "Output line 1 " not in result  # since it was truncated to last 200 lines
     assert "TaskId: task_sync_" in result
+    task_id = result.split("TaskId: ")[1].split(".")[0]
+    assert f"use analyze_task_output with TaskId {task_id}" in result
+
+
+@pytest.mark.asyncio
+@patch("asyncio.create_subprocess_exec")
+async def test_run_command_many_short_lines_is_shown_inline(mock_exec, mock_ctx):
+    """1000 short lines (~4 KB) are not 'long': the whole output stays inline."""
+    output = "\n".join(str(i) for i in range(1, 1001))
+    mock_exec.return_value = MockProcess(output_bytes=output.encode(), exit_code=0)
+
+    run_command = get_run_adb_command_tool(mock_ctx)
+    result = await run_command.ainvoke({"CommandLine": "seq 1 1000", "WaitMsBeforeAsync": 500})
+
+    assert "has been truncated" not in result
+    assert "\n1\n2\n" in result
+    assert result.endswith("\n1000")
+
+
+@pytest.mark.asyncio
+@patch("asyncio.create_subprocess_exec")
+async def test_run_command_empty_output_is_labelled(mock_exec, mock_ctx):
+    mock_exec.return_value = MockProcess(output_bytes=b"", exit_code=0)
+
+    run_command = get_run_adb_command_tool(mock_ctx)
+    result = await run_command.ainvoke({"CommandLine": "true", "WaitMsBeforeAsync": 500})
+
+    assert result == "ADB command completed with exit code 0.\nOutput:\n(empty output)"
 
 
 @pytest.mark.asyncio
@@ -704,7 +747,7 @@ def test_registry_is_per_context_and_notifications_do_not_leak():
 @pytest.mark.asyncio
 @patch("asyncio.create_subprocess_exec")
 async def test_sync_long_output_is_not_reannounced(mock_exec, mock_ctx):
-    long_output = "\n".join(f"line {i}" for i in range(600))
+    long_output = "\n".join(f"line {i} {'x' * 90}" for i in range(600))
     mock_exec.return_value = MockProcess(output_bytes=long_output.encode(), exit_code=0)
     run_command = get_run_adb_command_tool(mock_ctx)
     registry = get_adb_task_registry(mock_ctx)
diff --git a/tests/unit/tools/test_explorer_tool.py b/tests/unit/tools/test_explorer_tool.py
index 265e2b0..5e363b3 100644
--- a/tests/unit/tools/test_explorer_tool.py
+++ b/tests/unit/tools/test_explorer_tool.py
@@ -288,10 +288,32 @@ def test_render_text_found_lists_indices_and_coordinates():
     text = render_text("Find buttons", outcome, registered)
     assert "Explorer located 1 candidate(s) for 'Find buttons'" in text
     assert "- [2] 'First Button' at normalized [500, 500]" in text
-    assert "target=[index]" in text
     assert "Explorer notes: Please choose carefully." in text
 
 
+def test_render_text_targeting_guidance_follows_the_callers_click_dialect():
+    """Flash / Validator / MCP ``click`` takes coordinates only; the Pro Operator
+    takes a bare integer index. Neither dialect accepts ``target=[index]``."""
+    outcome = ExplorerOutcome(candidates=[ExplorerCandidate("S1", (500, 500), "First Button")])
+    registered = [RegisteredCandidate(2, (540, 1200), (500, 500), "First Button")]
+
+    coordinate_text = render_text("Find buttons", outcome, registered, index_targets=False)
+    assert (
+        "by its normalized coordinate (target=[x, y]) with a target_description" in coordinate_text
+    )
+    assert "bare integer" not in coordinate_text
+    # The keyword defaults to the coordinate-only dialect (text entry points).
+    assert render_text("Find buttons", outcome, registered) == coordinate_text
+
+    index_text = render_text("Find buttons", outcome, registered, index_targets=True)
+    assert "by its index (target=3, a bare integer) or by its normalized coordinate" in index_text
+    assert "target=[x, y]" not in index_text
+
+    for text in (coordinate_text, index_text):
+        assert "target=[index]" not in text
+        assert "Candidates are ranked by confidence." in text
+
+
 def test_render_text_not_found_explains_and_suggests_rephrasing():
     text = render_text("hidden button", ExplorerOutcome(message="Covered by keyboard."), [])
     assert text.startswith("Explorer could not locate 'hidden button'. Covered by keyboard.")
@@ -329,6 +351,9 @@ def test_render_operator_blocks_adds_the_annotated_image(tmp_path):
     assert isinstance(result, list) and len(result) == 2
     assert result[0]["type"] == "text"
     assert "Explorer located 1 candidate(s)" in result[0]["text"]
+    # The Operator's click takes a bare integer index.
+    assert "target=3, a bare integer" in result[0]["text"]
+    assert "target=[x, y]" not in result[0]["text"]
     assert result[1]["type"] == "image_url"
     assert result[1]["image_url"]["url"].startswith("data:image/jpeg;base64,")
 
@@ -485,6 +510,9 @@ async def test_ask_explorer_text_end_to_end():
     assert "Explorer located 2 candidate(s) for 'Find buttons'" in text
     assert "- [2] 'First Button' at normalized [500, 500]" in text
     assert "- [3] 'Second Button' at normalized [250, 750]" in text
+    # The text entry serves Flash / Validator / MCP, whose click takes coordinates only.
+    assert "target=[x, y]" in text
+    assert "bare integer" not in text
     assert "Explorer notes: Please choose carefully." in text
 
 
@@ -604,10 +632,16 @@ def test_register_candidates_reuses_an_indexed_element_that_contains_the_point()
             description="Gmail app icon",
             bounds=(200, 300, 400, 500),
             reused=True,
+            existing_text="Gmail",
         )
     ]
     assert len(state.indexed_points) == 2  # nothing appended
-    assert "already in your indexed list" in render_text("Gmail app icon", outcome, registered)
+    # The reused line names the element the way the agent's own list shows it.
+    text = render_text("Gmail app icon", outcome, registered)
+    assert (
+        "- [1] 'Gmail app icon' at normalized [310, 210] (matches your indexed element [1] 'Gmail')"
+    ) in text
+    assert "already in your indexed list" not in text
 
 
 def test_register_candidates_reuses_a_bare_center_within_the_dedup_radius_only():
@@ -622,7 +656,9 @@ def test_register_candidates_reuses_a_bare_center_within_the_dedup_radius_only()
     registered = register_candidates(ctx, state, ExplorerOutcome(candidates=[near, far]))
     assert [r.reused for r in registered] == [True, False]
     assert registered[0].index == 1
+    assert registered[0].existing_text == "Earlier candidate"
     assert registered[1].index == 2
+    assert registered[1].existing_text == ""
     assert state.indexed_points == [[500, 1000], [560, 1000]]
 
 
diff --git a/tests/unit/tools/test_read_note_pure_tool.py b/tests/unit/tools/test_read_note_pure_tool.py
index 22d2fde..590b381 100644
--- a/tests/unit/tools/test_read_note_pure_tool.py
+++ b/tests/unit/tools/test_read_note_pure_tool.py
@@ -60,7 +60,7 @@ async def test_read_note_pure_direct_execution_success(mock_ctx, tmp_path):
     save_note_content(tmp_path, "sample_pure", "line 1\nline 2\nline 3")
 
     result = await read_note_pure.execute(ctx=mock_ctx, key="sample_pure")
-    assert "Successfully read note 'sample_pure'." in result
+    assert "Note 'sample_pure' (" in result
     assert "line 1\nline 2\nline 3" in result
 
 
@@ -75,7 +75,7 @@ async def test_read_note_pure_slice(mock_ctx, tmp_path):
         start_line=2,
         end_line=3,
     )
-    assert "Successfully read note 'slice_pure' (lines 2 to 3)." in result
+    assert "Note 'slice_pure' (lines 2 to 3):" in result
     assert "line 1" not in result
     assert "line 2\nline 3" in result
     assert "line 4" not in result
@@ -87,7 +87,7 @@ async def test_read_note_pure_callable_execution(mock_ctx, tmp_path):
     save_note_content(tmp_path, "callable_pure", "hello from pure callable")
 
     result = await read_note_pure(ctx=mock_ctx, key="callable_pure")
-    assert "Successfully read note 'callable_pure'." in result
+    assert "Note 'callable_pure' (" in result
     assert "hello from pure callable" in result
 
 
@@ -118,5 +118,5 @@ async def test_get_read_note_tool_pure_langchain_ainvoke(mock_ctx, tmp_path):
     assert pure_tool.name == "read_note"
 
     result = await pure_tool.ainvoke({"key": "pure_export"})
-    assert "Successfully read note 'pure_export'." in result
+    assert "Note 'pure_export' (" in result
     assert "exported pure note" in result
diff --git a/tests/unit/tools/test_read_note_tool.py b/tests/unit/tools/test_read_note_tool.py
index 9b96f72..34bec04 100644
--- a/tests/unit/tools/test_read_note_tool.py
+++ b/tests/unit/tools/test_read_note_tool.py
@@ -68,7 +68,7 @@ async def test_read_note_direct_execution_success(mock_ctx, tmp_path):
     save_note_content(tmp_path, "sample", "line 1\nline 2\nline 3\nline 4\nline 5")
 
     result = await read_note.execute(ctx=mock_ctx, key="sample")
-    assert "Successfully read note 'sample'." in result
+    assert "Note 'sample' (" in result
     assert "line 1\nline 2\nline 3\nline 4\nline 5" in result
 
 
@@ -83,7 +83,7 @@ async def test_read_note_slice(mock_ctx, tmp_path):
         start_line=2,
         end_line=4,
     )
-    assert "Successfully read note 'sample' (lines 2 to 4)." in result
+    assert "Note 'sample' (lines 2 to 4):" in result
     assert "line 1" not in result
     assert "line 2\nline 3\nline 4" in result
     assert "line 5" not in result
@@ -95,7 +95,7 @@ async def test_read_note_callable_execution(mock_ctx, tmp_path):
     save_note_content(tmp_path, "callable_sample", "hello from callable")
 
     result = await read_note(ctx=mock_ctx, key="callable_sample")
-    assert "Successfully read note 'callable_sample'." in result
+    assert "Note 'callable_sample' (" in result
     assert "hello from callable" in result
 
 
@@ -115,7 +115,7 @@ async def test_read_note_with_state_tool_message(mock_ctx, tmp_path):
 
     assert isinstance(result, ToolMessage)
     assert result.tool_call_id == "call_read_999"
-    assert "Successfully read note 'state_sample'." in result.content
+    assert "Note 'state_sample' (" in result.content
     assert "state note content" in result.content
     assert result.status == "success"
 
@@ -147,7 +147,7 @@ async def test_get_read_note_tool_langchain_ainvoke(mock_ctx, tmp_path):
     assert lc_tool.name == "read_note"
 
     result = await lc_tool.ainvoke({"key": "lc_sample"})
-    assert "Successfully read note 'lc_sample'." in result
+    assert "Note 'lc_sample' (" in result
     assert "langchain content" in result
 
 
@@ -160,5 +160,5 @@ async def test_get_read_note_tool_pure(mock_ctx, tmp_path):
     assert pure_tool.name == "read_note"
 
     result = await pure_tool.ainvoke({"key": "pure_sample"})
-    assert "Successfully read note 'pure_sample'." in result
+    assert "Note 'pure_sample' (" in result
     assert "pure content" in result
diff --git a/tests/unit/tools/test_save_note_pure_tool.py b/tests/unit/tools/test_save_note_pure_tool.py
index 982e719..51d6a91 100644
--- a/tests/unit/tools/test_save_note_pure_tool.py
+++ b/tests/unit/tools/test_save_note_pure_tool.py
@@ -61,7 +61,7 @@ async def test_save_note_pure_direct_execution_success(mock_ctx, tmp_path):
         key="test_pure_save",
         content="Pure saved content",
     )
-    assert result == "Successfully saved note to test_pure_save.md."
+    assert result == "Saved note 'test_pure_save'."
 
     note_path = Path(tmp_path) / "notes" / "test_pure_save.md"
     assert note_path.exists()
@@ -76,7 +76,7 @@ async def test_save_note_pure_callable_execution(mock_ctx, tmp_path):
         key="callable_pure_save",
         content="Callable pure content",
     )
-    assert result == "Successfully saved note to callable_pure_save.md."
+    assert result == "Saved note 'callable_pure_save'."
 
     note_path = Path(tmp_path) / "notes" / "callable_pure_save.md"
     assert note_path.exists()
@@ -110,7 +110,7 @@ async def test_get_save_note_tool_pure_langchain_ainvoke(mock_ctx, tmp_path):
             "content": "Saved via LangChain pure tool",
         }
     )
-    assert result == "Successfully saved note to lc_pure_save.md."
+    assert result == "Saved note 'lc_pure_save'."
 
     note_path = Path(tmp_path) / "notes" / "lc_pure_save.md"
     assert note_path.exists()
diff --git a/tests/unit/tools/test_save_note_tool.py b/tests/unit/tools/test_save_note_tool.py
index a5086ba..a20f068 100644
--- a/tests/unit/tools/test_save_note_tool.py
+++ b/tests/unit/tools/test_save_note_tool.py
@@ -69,7 +69,7 @@ async def test_save_note_direct_execution_success(mock_ctx, tmp_path):
         key="test_note",
         content="Hello Artemis memory",
     )
-    assert result == "Successfully saved note to test_note.md."
+    assert result == "Saved note 'test_note'."
 
     note_path = Path(tmp_path) / "notes" / "test_note.md"
     assert note_path.exists()
@@ -84,7 +84,7 @@ async def test_save_note_callable_execution(mock_ctx, tmp_path):
         key="callable_note",
         content="Callable invocation test",
     )
-    assert result == "Successfully saved note to callable_note.md."
+    assert result == "Saved note 'callable_note'."
 
     note_path = Path(tmp_path) / "notes" / "callable_note.md"
     assert note_path.exists()
@@ -106,7 +106,7 @@ async def test_save_note_with_state_tool_message(mock_ctx, tmp_path):
 
     assert isinstance(result, ToolMessage)
     assert result.tool_call_id == "call_save_999"
-    assert result.content == "Successfully saved note to state_note.md."
+    assert result.content == "Saved note 'state_note'."
     assert result.status == "success"
 
     note_path = Path(tmp_path) / "notes" / "state_note.md"
@@ -141,7 +141,7 @@ async def test_get_save_note_tool_langchain_ainvoke(mock_ctx, tmp_path):
             "content": "Saved via LangChain BaseTool",
         }
     )
-    assert result == "Successfully saved note to lc_note.md."
+    assert result == "Saved note 'lc_note'."
 
     note_path = Path(tmp_path) / "notes" / "lc_note.md"
     assert note_path.exists()
@@ -160,7 +160,7 @@ async def test_get_save_note_tool_pure(mock_ctx, tmp_path):
             "content": "Saved via pure tool",
         }
     )
-    assert result == "Successfully saved note to pure_note.md."
+    assert result == "Saved note 'pure_note'."
 
     note_path = Path(tmp_path) / "notes" / "pure_note.md"
     assert note_path.exists()
diff --git a/tests/unit/tools/test_search_logs.py b/tests/unit/tools/test_search_logs.py
index e1c1d86..676376f 100644
--- a/tests/unit/tools/test_search_logs.py
+++ b/tests/unit/tools/test_search_logs.py
@@ -133,6 +133,32 @@ def test_search_and_merge_logs_regex():
     assert result == expected
 
 
+def test_search_and_merge_logs_header_compresses_consecutive_matches():
+    # 100 consecutive matches at lines 699-798 collapse into one range.
+    logs = "\n".join("ERROR: failure" if 699 <= i <= 798 else f"line {i}" for i in range(900))
+    result = search_and_merge_logs(logs, "ERROR", context_lines=0)
+
+    assert result.splitlines()[0] == "--- Match at line(s) 699-798 ---"
+    assert "699, 700" not in result
+
+
+def test_search_and_merge_logs_header_mixes_singles_and_ranges():
+    # Matches at 6 and 69-79 sit in one block once context windows overlap.
+    hits = {6} | set(range(69, 80))
+    logs = "\n".join("ERROR: failure" if i in hits else f"line {i}" for i in range(100))
+    result = search_and_merge_logs(logs, "ERROR", context_lines=40)
+
+    assert result.splitlines()[0] == "--- Match at line(s) 6, 69-79 ---"
+
+
+def test_search_and_merge_logs_header_caps_range_count():
+    # Every other line matches: 50 single-line ranges, capped at 8 plus "...".
+    logs = "\n".join("ERROR: failure" if i % 2 == 0 else f"line {i}" for i in range(100))
+    result = search_and_merge_logs(logs, "ERROR", context_lines=1)
+
+    assert result.splitlines()[0] == "--- Match at line(s) 0, 2, 4, 6, 8, 10, 12, 14, ... ---"
+
+
 def test_search_and_merge_logs_invalid_regex():
     logs = "line 0"
     result = search_and_merge_logs(logs, "[invalid", is_regex=True)
diff --git a/tests/unit/tools/test_update_note_pure_tool.py b/tests/unit/tools/test_update_note_pure_tool.py
index ee34f45..22eeace 100644
--- a/tests/unit/tools/test_update_note_pure_tool.py
+++ b/tests/unit/tools/test_update_note_pure_tool.py
@@ -66,7 +66,7 @@ async def test_update_note_pure_direct_execution_success(mock_ctx, tmp_path):
         target="Step 1: Pending",
         replacement="Step 1: Completed",
     )
-    assert result == "Successfully updated note 'plan'."
+    assert result == "Updated note 'plan'."
 
     note_path = Path(tmp_path) / "notes" / "plan.md"
     assert note_path.read_text(encoding="utf-8") == "Step 1: Completed\nStep 2: Done"
@@ -87,7 +87,7 @@ async def test_update_note_pure_with_warning(mock_ctx, tmp_path):
             target="target string",
             replacement="New String",
         )
-        assert "Successfully updated note 'fuzzy_note'." in result
+        assert "Updated note 'fuzzy_note'." in result
         assert "WARNING: Fuzzy match applied" in result
 
 
@@ -102,7 +102,7 @@ async def test_update_note_pure_callable_execution(mock_ctx, tmp_path):
         target="beta",
         replacement="gamma",
     )
-    assert result == "Successfully updated note 'callable_plan'."
+    assert result == "Updated note 'callable_plan'."
 
     note_path = Path(tmp_path) / "notes" / "callable_plan.md"
     assert note_path.read_text(encoding="utf-8") == "alpha gamma"
@@ -135,7 +135,7 @@ async def test_get_update_note_tool_pure_langchain_ainvoke(mock_ctx, tmp_path):
             "replacement": "updated",
         }
     )
-    assert result == "Successfully updated note 'export_plan'."
+    assert result == "Updated note 'export_plan'."
 
     note_path = Path(tmp_path) / "notes" / "export_plan.md"
     assert note_path.read_text(encoding="utf-8") == "updated value"
diff --git a/tests/unit/tools/test_update_note_tool.py b/tests/unit/tools/test_update_note_tool.py
index a51f35c..5c0ed81 100644
--- a/tests/unit/tools/test_update_note_tool.py
+++ b/tests/unit/tools/test_update_note_tool.py
@@ -74,7 +74,7 @@ async def test_update_note_direct_execution_success(mock_ctx, tmp_path):
         target="- [ ] Step 1",
         replacement="- [x] Step 1",
     )
-    assert result == "Successfully updated note 'plan'."
+    assert result == "Updated note 'plan'."
 
     note_path = Path(tmp_path) / "notes" / "plan.md"
     assert note_path.read_text(encoding="utf-8") == "- [x] Step 1\n- [ ] Step 2"
@@ -95,7 +95,7 @@ async def test_update_note_with_warning(mock_ctx, tmp_path):
             target="Step 1",
             replacement="Step 1 Done",
         )
-        assert "Successfully updated note 'fuzzy_plan'." in result
+        assert "Updated note 'fuzzy_plan'." in result
         assert "WARNING: Fuzzy match applied" in result
 
 
@@ -110,7 +110,7 @@ async def test_update_note_callable_execution(mock_ctx, tmp_path):
         target="- [ ] Task 2",
         replacement="- [x] Task 2",
     )
-    assert result == "Successfully updated note 'callable_plan'."
+    assert result == "Updated note 'callable_plan'."
 
     note_path = Path(tmp_path) / "notes" / "callable_plan.md"
     assert note_path.read_text(encoding="utf-8") == "- [ ] Task 1\n- [x] Task 2"
@@ -134,7 +134,7 @@ async def test_update_note_with_state_tool_message(mock_ctx, tmp_path):
 
     assert isinstance(result, ToolMessage)
     assert result.tool_call_id == "call_update_999"
-    assert result.content == "Successfully updated note 'state_plan'."
+    assert result.content == "Updated note 'state_plan'."
     assert result.status == "success"
 
     note_path = Path(tmp_path) / "notes" / "state_plan.md"
@@ -168,7 +168,7 @@ async def test_get_update_note_tool_langchain_ainvoke(mock_ctx, tmp_path):
             "replacement": "delta",
         }
     )
-    assert result == "Successfully updated note 'lc_plan'."
+    assert result == "Updated note 'lc_plan'."
 
     note_path = Path(tmp_path) / "notes" / "lc_plan.md"
     assert note_path.read_text(encoding="utf-8") == "alpha delta gamma"
@@ -189,7 +189,7 @@ async def test_get_update_note_tool_pure(mock_ctx, tmp_path):
             "replacement": "Artemis",
         }
     )
-    assert result == "Successfully updated note 'pure_plan'."
+    assert result == "Updated note 'pure_plan'."
 
     note_path = Path(tmp_path) / "notes" / "pure_plan.md"
     assert note_path.read_text(encoding="utf-8") == "hello Artemis"
diff --git a/tests/unit/utils/test_app_launch_utils.py b/tests/unit/utils/test_app_launch_utils.py
index 84af94f..7c988ab 100644
--- a/tests/unit/utils/test_app_launch_utils.py
+++ b/tests/unit/utils/test_app_launch_utils.py
@@ -15,9 +15,94 @@
 from unittest.mock import AsyncMock, Mock, patch
 
 from artemis.context import ArtemisContext
-from artemis.utils.app_launch_utils import launch_app_with_retries
+from artemis.utils.app_launch_utils import (
+    ForegroundTask,
+    _handle_initial_app_launch,
+    get_foreground_task,
+    launch_app_with_retries,
+    parse_foreground_task,
+)
 import pytest
 
+SETTINGS = "com.android.settings"
+SETTINGS_SEARCH = "com.google.android.settings.intelligence"
+LAUNCHER = "com.google.android.apps.nexuslauncher"
+YOUTUBE = "com.google.android.youtube"
+
+# Trimmed from a real Pixel 10 ``dumpsys activity activities`` right after
+# ``monkey -p com.android.settings -c android.intent.category.LAUNCHER 1`` re-opened a
+# Settings task whose previous run had left the search activity (a different package)
+# resumed on top. The focused window is settings.intelligence; the task is Settings'.
+DUMP_SETTINGS_TASK_WITH_SEARCH_ON_TOP = """\
+ACTIVITY MANAGER ACTIVITIES (dumpsys activity activities)
+Display #0 (activities from top to bottom):
+  * Task{97d2927 #121 type=standard A=1000:com.android.settings.root U=0 visible=true visibleRequested=true mode=fullscreen translucent=false sz=2}
+    mLastPausedActivity: ActivityRecord{248426470 u0 com.android.settings/.Settings t121}
+    isSleeping=false
+    topResumedActivity=ActivityRecord{55960290 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t121}
+    * Hist  #1: ActivityRecord{55960290 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t121}
+      packageName=com.google.android.settings.intelligence processName=com.google.android.settings.intelligence
+      launchedFromUid=1000 launchedFromPackage=com.android.settings launchedFromFeature=null userId=0
+      rootOfTask=false task=Task{97d2927 #121 type=standard A=1000:com.android.settings.root}
+      taskAffinity=10164:com.google.android.settings.intelligence
+      state=RESUMED delayedResume=false finishing=false
+    * Hist  #0: ActivityRecord{248426470 u0 com.android.settings/.Settings t121}
+      packageName=com.android.settings processName=com.android.settings
+      rootOfTask=true task=Task{97d2927 #121 type=standard A=1000:com.android.settings.root}
+      taskAffinity=1000:com.android.settings.root
+      state=STOPPED delayedResume=false finishing=false
+  * Task{9580295 #7 type=home U=0 visible=false visibleRequested=false mode=fullscreen translucent=true sz=1}
+    * Task{a3c724c #8 type=home I=com.google.android.apps.nexuslauncher/.NexusLauncherActivity U=0 rootTaskId=7 visible=false visibleRequested=false mode=fullscreen translucent=true sz=2}
+      * Hist  #1: ActivityRecord{230175776 u0 com.google.android.apps.nexuslauncher/.NexusLauncherActivity t8}
+        state=STOPPED delayedResume=false finishing=false
+  * Task{ebe93a1 #108 type=standard A=10194:com.google.android.apps.maps U=0 visible=false visibleRequested=false mode=fullscreen translucent=true sz=1}
+    * Hist  #0: ActivityRecord{210087944 u0 com.google.android.apps.maps/com.google.android.maps.MapsActivity t108}
+  ResumedActivity: ActivityRecord{55960290 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t121}
+  mFocusedApp=ActivityRecord{55960290 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t121}
+    WindowContainer hierarchy:
+      * Task{97d2927 #121 type=standard A=1000:com.android.settings.root U=0 visible=true visibleRequested=true mode=fullscreen translucent=false sz=2}
+        * ActivityRecord{55960290 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t121}
+        * ActivityRecord{248426470 u0 com.android.settings/.Settings t121}
+"""
+
+# Same device after KEYCODE_HOME: the launcher's (nested) home task is resumed.
+DUMP_HOME = """\
+ACTIVITY MANAGER ACTIVITIES (dumpsys activity activities)
+Display #0 (activities from top to bottom):
+  * Task{9580295 #7 type=home U=0 visible=true visibleRequested=true mode=fullscreen translucent=false sz=1}
+    * Task{a3c724c #8 type=home I=com.google.android.apps.nexuslauncher/.NexusLauncherActivity U=0 rootTaskId=7 visible=true visibleRequested=true mode=fullscreen translucent=false sz=2}
+      topResumedActivity=ActivityRecord{230175776 u0 com.google.android.apps.nexuslauncher/.NexusLauncherActivity t8}
+      * Hist  #1: ActivityRecord{230175776 u0 com.google.android.apps.nexuslauncher/.NexusLauncherActivity t8}
+        state=RESUMED delayedResume=false finishing=false
+  * Task{97d2927 #121 type=standard A=1000:com.android.settings.root U=0 visible=false visibleRequested=false mode=fullscreen translucent=true sz=2}
+    * Hist  #1: ActivityRecord{55960290 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t121}
+    * Hist  #0: ActivityRecord{248426470 u0 com.android.settings/.Settings t121}
+  ResumedActivity: ActivityRecord{230175776 u0 com.google.android.apps.nexuslauncher/.NexusLauncherActivity t8}
+"""
+
+# Search activity started directly with ``am start -n``: it lands in its own task, so
+# Settings is *not* the foreground app even though its task still exists underneath.
+DUMP_SEARCH_IN_OWN_TASK = """\
+Display #0 (activities from top to bottom):
+  * Task{7f6102 #120 type=standard A=10164:com.google.android.settings.intelligence U=0 visible=true visibleRequested=true mode=fullscreen translucent=false sz=1}
+    topResumedActivity=ActivityRecord{53985869 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t120}
+    * Hist  #0: ActivityRecord{53985869 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t120}
+  * Task{c38138b #119 type=standard A=1000:com.android.settings.root U=0 visible=false visibleRequested=false mode=fullscreen translucent=true sz=3}
+    * Hist  #2: ActivityRecord{24290640 u0 com.android.settings/.SubSettings t119}
+    * Hist  #1: ActivityRecord{199753729 u0 com.android.settings/.SubSettings t119}
+    * Hist  #0: ActivityRecord{33224026 u0 com.android.settings/.Settings t119}
+  ResumedActivity: ActivityRecord{53985869 u0 com.google.android.settings.intelligence/.modules.search.SearchActivity t120}
+"""
+
+# Mid-transition: nothing is resumed yet, the visible task must be used instead.
+DUMP_NO_RESUMED = """\
+Display #0 (activities from top to bottom):
+  * Task{97d2927 #121 type=standard A=1000:com.android.settings.root U=0 visible=true visibleRequested=true mode=fullscreen translucent=false sz=1}
+    * Hist  #0: ActivityRecord{248426470 u0 com.android.settings/.Settings t121}
+  * Task{ebe93a1 #108 type=standard A=10194:com.google.android.apps.maps U=0 visible=false visibleRequested=false mode=fullscreen translucent=true sz=1}
+    * Hist  #0: ActivityRecord{210087944 u0 com.google.android.apps.maps/com.google.android.maps.MapsActivity t108}
+"""
+
 
 @pytest.fixture
 def mock_context():
@@ -29,120 +114,358 @@ def mock_context():
     return ctx
 
 
-@pytest.mark.asyncio
-@patch("artemis.utils.app_launch_utils.UnifiedMobileController")
-@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
-async def test_launch_app_success_immediate(mock_get_foreground, mock_controller_cls, mock_context):
-    """Test successful immediate app launch."""
-    mock_controller = Mock()
-    mock_controller.launch_app = AsyncMock(return_value=True)
-    mock_controller_cls.return_value = mock_controller
-
-    # App immediately in foreground
-    mock_get_foreground.return_value = "com.google.android.youtube"
-
-    success, error_msg = await launch_app_with_retries(
-        mock_context,
-        "com.google.android.youtube",
-        max_retries=1,
-        max_poll_seconds=2,
-    )
-
-    assert success is True
-    assert error_msg is None
-    mock_controller.launch_app.assert_called_once_with("com.google.android.youtube")
-
-
-@pytest.mark.asyncio
-@patch("artemis.utils.app_launch_utils.get_focused_task_package")
-@patch("artemis.utils.app_launch_utils.UnifiedMobileController")
-@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
-async def test_launch_app_success_permission_overlay(
-    mock_get_foreground,
-    mock_controller_cls,
-    mock_get_focused_task,
-    mock_context,
-):
-    """Test successful launch if overlayed by system permission controller and task is matching."""
-    mock_controller = Mock()
-    mock_controller.launch_app = AsyncMock(return_value=True)
-    mock_controller_cls.return_value = mock_controller
-
-    # System permission controller is focused foreground
-    mock_get_foreground.return_value = "com.google.android.permissioncontroller"
-    # Second layer check: Task stack shows com.google.android.youtube is focused
-    mock_get_focused_task.return_value = "com.google.android.youtube"
-
-    success, error_msg = await launch_app_with_retries(
-        mock_context,
-        "com.google.android.youtube",
-        max_retries=1,
-        max_poll_seconds=2,
-    )
-
-    assert success is True
-    assert error_msg is None
-    mock_controller.launch_app.assert_called_once_with("com.google.android.youtube")
-    mock_get_focused_task.assert_called_once_with(mock_context)
-
-
-@pytest.mark.asyncio
-@patch("artemis.utils.app_launch_utils.get_focused_task_package")
-@patch("artemis.utils.app_launch_utils.UnifiedMobileController")
-@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
-async def test_launch_app_failure_permission_overlay_wrong_task(
-    mock_get_foreground,
-    mock_controller_cls,
-    mock_get_focused_task,
-    mock_context,
-):
-    """Test launch failure if overlayed by system permission controller but task does not match."""
+def _controller(mock_controller_cls):
     mock_controller = Mock()
     mock_controller.launch_app = AsyncMock(return_value=True)
     mock_controller.terminate_app = AsyncMock()
     mock_controller_cls.return_value = mock_controller
+    return mock_controller
 
-    # System permission controller is focused foreground
-    mock_get_foreground.return_value = "com.google.android.permissioncontroller"
-    # Second layer check: Task stack is some other app (e.g. com.android.settings)
-    mock_get_focused_task.return_value = "com.android.settings"
 
-    success, error_msg = await launch_app_with_retries(
-        mock_context,
-        "com.google.android.youtube",
-        max_retries=1,
-        max_poll_seconds=1,
+# ---------------------------------------------------------------------------
+# parse_foreground_task / ForegroundTask
+# ---------------------------------------------------------------------------
+
+
+def test_parse_settings_task_with_foreign_activity_on_top():
+    task = parse_foreground_task(DUMP_SETTINGS_TASK_WITH_SEARCH_ON_TOP)
+
+    assert task is not None
+    assert task.task_id == 121
+    assert task.affinity == "com.android.settings.root"
+    assert task.resumed_package == SETTINGS_SEARCH
+    assert task.resumed_component == f"{SETTINGS_SEARCH}/.modules.search.SearchActivity"
+    assert task.base_package == SETTINGS
+    assert task.packages == frozenset({SETTINGS, SETTINGS_SEARCH})
+
+    assert task.owns(SETTINGS)  # base activity of the top task
+    assert task.owns(SETTINGS_SEARCH)  # resumed activity itself
+    assert not task.owns(LAUNCHER)
+    assert not task.owns("com.google.android.apps.maps")  # present, but not foreground
+
+
+def test_parse_home_screen_uses_nested_home_task():
+    task = parse_foreground_task(DUMP_HOME)
+
+    assert task is not None
+    assert task.task_id == 8
+    assert task.affinity is None
+    assert task.base_package == LAUNCHER
+    assert task.resumed_package == LAUNCHER
+    assert task.owns(LAUNCHER)
+    assert not task.owns(SETTINGS)
+    assert not task.owns(SETTINGS_SEARCH)
+
+
+def test_parse_search_started_in_its_own_task_does_not_count_as_settings():
+    task = parse_foreground_task(DUMP_SEARCH_IN_OWN_TASK)
+
+    assert task is not None
+    assert task.task_id == 120
+    assert task.base_package == SETTINGS_SEARCH
+    assert task.owns(SETTINGS_SEARCH)
+    assert not task.owns(SETTINGS)
+
+
+def test_parse_falls_back_to_visible_task_when_nothing_is_resumed():
+    task = parse_foreground_task(DUMP_NO_RESUMED)
+
+    assert task is not None
+    assert task.task_id == 121
+    assert task.resumed_package is None
+    assert task.base_package == SETTINGS
+    assert task.owns(SETTINGS)
+    assert not task.owns("com.google.android.apps.maps")
+
+
+def test_parse_returns_none_without_task_information():
+    assert parse_foreground_task("") is None
+    assert parse_foreground_task("ACTIVITY MANAGER ACTIVITIES\nnothing here\n") is None
+
+
+def test_describe_names_task_base_and_resumed_activity():
+    task = parse_foreground_task(DUMP_SETTINGS_TASK_WITH_SEARCH_ON_TOP)
+
+    description = task.describe()
+
+    assert "task #121" in description
+    assert f"base={SETTINGS}" in description
+    assert f"resumed={SETTINGS_SEARCH}/.modules.search.SearchActivity" in description
+    assert "affinity=com.android.settings.root" in description
+
+
+def test_describe_lists_other_member_packages():
+    task = ForegroundTask(
+        task_id=5,
+        resumed_component="a.b/.Dialog",
+        resumed_package="a.b",
+        base_package="c.d",
+        packages=frozenset({"a.b", "c.d", "e.f"}),
     )
 
-    assert success is False
-    assert "Failed to launch com.google.android.youtube" in error_msg
-    mock_get_focused_task.assert_called_once_with(mock_context)
+    assert task.describe() == "task #5 (base=c.d, resumed=a.b/.Dialog, also=e.f)"
+
+
+@patch("artemis.utils.app_launch_utils.get_adb_device")
+def test_get_foreground_task_reads_dumpsys(mock_get_device, mock_context):
+    device = Mock()
+    device.shell.return_value = DUMP_SETTINGS_TASK_WITH_SEARCH_ON_TOP
+    mock_get_device.return_value = device
+
+    task = get_foreground_task(mock_context)
+
+    # The dump is pre-filtered on the device; the parser only needs task
+    # headers, history entries and the resumed-activity lines.
+    device.shell.assert_called_once()
+    command = device.shell.call_args.args[0]
+    assert command.startswith("dumpsys activity activities | grep -E ")
+    assert task is not None and task.base_package == SETTINGS
+
+
+@patch("artemis.utils.app_launch_utils.get_adb_device")
+def test_get_foreground_task_falls_back_to_the_full_dump_without_grep(
+    mock_get_device, mock_context
+):
+    device = Mock()
+    device.shell.side_effect = [
+        "/system/bin/sh: grep: not found",
+        DUMP_SETTINGS_TASK_WITH_SEARCH_ON_TOP,
+    ]
+    mock_get_device.return_value = device
+
+    task = get_foreground_task(mock_context)
+
+    assert [c.args[0] for c in device.shell.call_args_list][-1] == "dumpsys activity activities"
+    assert task is not None and task.base_package == SETTINGS
+
+
+def test_task_header_accepts_android_11_taskrecord_form():
+    from artemis.utils.app_launch_utils import parse_foreground_task
+
+    dump = "\n".join(
+        [
+            "    * TaskRecord{a1b2c3 #7 A=com.example.app U=0 StackId=1 sz=1}",
+            "      * Hist #0: ActivityRecord{deadbeef u0 com.example.app/.Main t7}",
+            "    ResumedActivity: ActivityRecord{deadbeef u0 com.example.app/.Main t7}",
+        ]
+    )
+    task = parse_foreground_task(dump)
+    assert task is not None
+    assert task.task_id == 7 and task.affinity == "com.example.app"
+    assert task.owns("com.example.app")
+
+
+@patch("artemis.utils.app_launch_utils.get_adb_device")
+def test_get_foreground_task_tolerates_missing_device_and_errors(mock_get_device, mock_context):
+    mock_get_device.return_value = None
+    assert get_foreground_task(mock_context) is None
+
+    device = Mock()
+    device.shell.side_effect = RuntimeError("adb gone")
+    mock_get_device.return_value = device
+    assert get_foreground_task(mock_context) is None
+
+
+# ---------------------------------------------------------------------------
+# launch_app_with_retries
+# ---------------------------------------------------------------------------
 
 
 @pytest.mark.asyncio
+@patch("artemis.utils.app_launch_utils.get_foreground_task")
 @patch("artemis.utils.app_launch_utils.UnifiedMobileController")
 @patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
-async def test_launch_app_failure_wrong_app(mock_get_foreground, mock_controller_cls, mock_context):
-    """Test launch failure and retry when wrong app remains in foreground."""
-    mock_controller = Mock()
-    mock_controller.launch_app = AsyncMock(return_value=True)
-    mock_controller.terminate_app = AsyncMock()
-    mock_controller_cls.return_value = mock_controller
-
-    # A different app (e.g., settings or home screen) is in foreground
-    mock_get_foreground.return_value = "com.android.settings"
+async def test_launch_app_success_immediate(
+    mock_get_foreground, mock_controller_cls, mock_get_task, mock_context
+):
+    """String-equal foreground package is the fast path; the task stack is not read."""
+    mock_controller = _controller(mock_controller_cls)
+    mock_get_foreground.return_value = YOUTUBE
 
     success, error_msg = await launch_app_with_retries(
-        mock_context,
-        "com.google.android.youtube",
-        max_retries=2,
-        max_poll_seconds=1,
+        mock_context, YOUTUBE, max_retries=1, max_poll_seconds=2
+    )
+
+    assert success is True
+    assert error_msg is None
+    mock_controller.launch_app.assert_called_once_with(YOUTUBE)
+    mock_get_task.assert_not_called()
+
+
+@pytest.mark.asyncio
+@patch("artemis.utils.app_launch_utils.get_foreground_task")
+@patch("artemis.utils.app_launch_utils.UnifiedMobileController")
+@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
+async def test_launch_app_success_when_top_task_belongs_to_app(
+    mock_get_foreground, mock_controller_cls, mock_get_task, mock_context
+):
+    """The Settings search activity on top of the Settings task counts as loaded."""
+    mock_controller = _controller(mock_controller_cls)
+    mock_get_foreground.return_value = SETTINGS_SEARCH
+    mock_get_task.return_value = parse_foreground_task(DUMP_SETTINGS_TASK_WITH_SEARCH_ON_TOP)
+
+    success, error_msg = await launch_app_with_retries(
+        mock_context, SETTINGS, max_retries=1, max_poll_seconds=2
+    )
+
+    assert success is True
+    assert error_msg is None
+    mock_controller.launch_app.assert_called_once_with(SETTINGS)
+    mock_controller.terminate_app.assert_not_called()
+    mock_get_task.assert_called_once_with(mock_context)
+
+
+@pytest.mark.asyncio
+@patch("artemis.utils.app_launch_utils.get_foreground_task")
+@patch("artemis.utils.app_launch_utils.UnifiedMobileController")
+@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
+async def test_launch_app_success_permission_overlay_in_app_task(
+    mock_get_foreground, mock_controller_cls, mock_get_task, mock_context
+):
+    """A permission dialog launched into the app's task is accepted without a package list."""
+    _controller(mock_controller_cls)
+    mock_get_foreground.return_value = "com.google.android.permissioncontroller"
+    mock_get_task.return_value = ForegroundTask(
+        task_id=42,
+        resumed_component="com.google.android.permissioncontroller/.GrantPermissionsActivity",
+        resumed_package="com.google.android.permissioncontroller",
+        base_package=YOUTUBE,
+        packages=frozenset({YOUTUBE, "com.google.android.permissioncontroller"}),
+    )
+
+    success, error_msg = await launch_app_with_retries(
+        mock_context, YOUTUBE, max_retries=1, max_poll_seconds=2
+    )
+
+    assert success is True
+    assert error_msg is None
+
+
+@pytest.mark.asyncio
+@patch("artemis.utils.app_launch_utils.get_foreground_task")
+@patch("artemis.utils.app_launch_utils.UnifiedMobileController")
+@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
+async def test_launch_app_failure_when_top_task_is_another_app(
+    mock_get_foreground, mock_controller_cls, mock_get_task, mock_context
+):
+    """Foreground task rooted in another package is still a failure, and the error names both."""
+    mock_controller = _controller(mock_controller_cls)
+    mock_get_foreground.return_value = LAUNCHER
+    mock_get_task.return_value = parse_foreground_task(DUMP_HOME)
+
+    success, error_msg = await launch_app_with_retries(
+        mock_context, SETTINGS, max_retries=2, max_poll_seconds=1
     )
 
     assert success is False
-    assert "Failed to launch com.google.android.youtube" in error_msg
-
-    # Should have attempted launching twice
+    assert f"Failed to launch {SETTINGS}" in error_msg
     assert mock_controller.launch_app.call_count == 2
-    # Should have attempted force-stopping once before retry
     assert mock_controller.terminate_app.call_count == 1
+
+
+@pytest.mark.asyncio
+@patch("artemis.utils.app_launch_utils.get_foreground_task")
+@patch("artemis.utils.app_launch_utils.UnifiedMobileController")
+@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
+async def test_launch_timeout_message_names_foreground_package_and_task(
+    mock_get_foreground, mock_controller_cls, mock_get_task, mock_context
+):
+    _controller(mock_controller_cls)
+    mock_get_foreground.return_value = SETTINGS_SEARCH
+    mock_get_task.return_value = parse_foreground_task(DUMP_SEARCH_IN_OWN_TASK)
+
+    with patch("artemis.utils.app_launch_utils.logger") as mock_logger:
+        success, _ = await launch_app_with_retries(
+            mock_context, SETTINGS, max_retries=1, max_poll_seconds=1
+        )
+
+    assert success is False
+    timeout_messages = [
+        call.args[0]
+        for call in mock_logger.error.call_args_list
+        if "Timeout waiting" in call.args[0]
+    ]
+    assert len(timeout_messages) == 1
+    message = timeout_messages[0]
+    assert f"Current foreground: {SETTINGS_SEARCH}" in message
+    assert "task #120" in message
+    assert f"base={SETTINGS_SEARCH}" in message
+    assert f"resumed={SETTINGS_SEARCH}/.modules.search.SearchActivity" in message
+
+
+@pytest.mark.asyncio
+@patch("artemis.utils.app_launch_utils.get_foreground_task")
+@patch("artemis.utils.app_launch_utils.UnifiedMobileController")
+@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
+async def test_launch_app_null_focus_keeps_polling_without_reading_task(
+    mock_get_foreground, mock_controller_cls, mock_get_task, mock_context
+):
+    """mCurrentFocus=null is a loading state: no task lookup, then success once focused."""
+    _controller(mock_controller_cls)
+    mock_get_foreground.side_effect = [None, None, YOUTUBE]
+
+    success, error_msg = await launch_app_with_retries(
+        mock_context, YOUTUBE, max_retries=1, max_poll_seconds=3
+    )
+
+    assert success is True
+    assert error_msg is None
+    mock_get_task.assert_not_called()
+
+
+# ---------------------------------------------------------------------------
+# _handle_initial_app_launch
+# ---------------------------------------------------------------------------
+
+
+@pytest.mark.asyncio
+@patch("artemis.utils.app_launch_utils.launch_app_with_retries")
+@patch("artemis.utils.app_launch_utils.get_foreground_task")
+@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
+async def test_initial_launch_skips_launch_when_app_task_is_already_foreground(
+    mock_get_foreground, mock_get_task, mock_launch, mock_context
+):
+    mock_get_foreground.return_value = SETTINGS_SEARCH
+    mock_get_task.return_value = parse_foreground_task(DUMP_SETTINGS_TASK_WITH_SEARCH_ON_TOP)
+
+    result = await _handle_initial_app_launch(mock_context, SETTINGS)
+
+    assert result.locked_app_initial_launch_success is True
+    assert result.locked_app_initial_launch_error is None
+    mock_launch.assert_not_called()
+
+
+@pytest.mark.asyncio
+@patch("artemis.utils.app_launch_utils.launch_app_with_retries", new_callable=AsyncMock)
+@patch("artemis.utils.app_launch_utils.get_foreground_task")
+@patch("artemis.utils.app_launch_utils.get_current_foreground_package_async")
+async def test_initial_launch_launches_when_another_app_is_foreground(
+    mock_get_foreground, mock_get_task, mock_launch, mock_context
+):
+    mock_get_foreground.return_value = LAUNCHER
+    mock_get_task.return_value = parse_foreground_task(DUMP_HOME)
+    mock_launch.return_value = (True, None)
+
+    result = await _handle_initial_app_launch(mock_context, SETTINGS)
+
+    assert result.locked_app_initial_launch_success is True
+    mock_launch.assert_awaited_once_with(mock_context, SETTINGS)
+
+
+def test_task_affinity_alone_identifies_the_owning_app():
+    """Seen on a Pixel 10: the Settings task had lost its root activity and only
+    the search companion remained in its history, but the task affinity
+    (``com.android.settings.root``) still named the app."""
+    from artemis.utils.app_launch_utils import ForegroundTask
+
+    task = ForegroundTask(
+        task_id=121,
+        affinity="com.android.settings.root",
+        resumed_component="com.google.android.settings.intelligence/.modules.search.SearchActivity",
+        resumed_package="com.google.android.settings.intelligence",
+        base_package="com.google.android.settings.intelligence",
+        packages=frozenset({"com.google.android.settings.intelligence"}),
+    )
+    assert task.owns("com.android.settings")
+    assert not task.owns("com.android.settingsx")
+    assert not task.owns("com.google.android.apps.nexuslauncher")
diff --git a/tests/unit/utils/test_plan_grammar.py b/tests/unit/utils/test_plan_grammar.py
index f45a0a1..c6d0de5 100644
--- a/tests/unit/utils/test_plan_grammar.py
+++ b/tests/unit/utils/test_plan_grammar.py
@@ -205,8 +205,8 @@ def test_restore_missing_check_items_keeps_additions():
 
 
 def test_render_plan_grammar_spec_conditional():
-    base = render_plan_grammar_spec(include_checks=False)
-    extended = render_plan_grammar_spec(include_checks=True)
+    base = render_plan_grammar_spec(midway=False, final=False)
+    extended = render_plan_grammar_spec(midway=True, final=True)
     # Both-gates-off output carries zero trace of the checking feature
     assert base == PLAN_GRAMMAR_SPEC
     assert "verify" not in base and "assert" not in base
@@ -214,6 +214,27 @@ def test_render_plan_grammar_spec_conditional():
     assert "- verify:" in extended and "- assert:" in extended and "@end" in extended
     # The capability boundary is declared honestly
     assert "POST-HOC" in extended.upper() or "post-hoc" in extended
+    # Compatibility shim: ``include_checks`` means "both gates".
+    assert render_plan_grammar_spec(include_checks=True) == extended
+    assert render_plan_grammar_spec(include_checks=False) == base
+
+
+def test_render_plan_grammar_spec_words_the_judgment_moment_per_gate():
+    """The grammar tells the truth about when a check line is judged: a
+    completion-time Checker with a repair loop only exists with midway checks;
+    the factory layering (final review only) judges once at task exit."""
+    midway = render_plan_grammar_spec(midway=True, final=True)
+    assert "at the moment the milestone is marked completed" in midway
+    assert "reopens the milestone for repair" in midway
+
+    final_only = render_plan_grammar_spec(midway=False, final=True)
+    assert (
+        "judged once at task exit from the recorded evidence around the milestone's"
+        " completion; there is no midway repair loop" in final_only
+    )
+    assert "at the moment the milestone is marked completed" not in final_only
+    assert "reopens the milestone" not in final_only
+    assert "- assert:" in final_only and "@end" in final_only
 
 
 def test_grammar_spec_renders_constants():
@@ -291,7 +312,10 @@ def test_apply_finding_lines_drops_entries_for_missing_subgoals():
 
 
 def test_finding_grammar_doc_is_conditional():
-    base = render_plan_grammar_spec(include_checks=False)
-    extended = render_plan_grammar_spec(include_checks=True)
+    base = render_plan_grammar_spec(midway=False, final=False)
+    midway = render_plan_grammar_spec(midway=True, final=False)
+    final_only = render_plan_grammar_spec(midway=False, final=True)
     assert "finding" not in base
-    assert "- finding:" in extended and "checker-" in extended
+    assert "- finding:" in midway and "checker-" in midway
+    # Finding lines are projected by the midway checkpoint machinery only.
+    assert "- finding:" not in final_only
diff --git a/tests/unit/utils/test_task_tree.py b/tests/unit/utils/test_task_tree.py
index 954c9ed..190abd4 100644
--- a/tests/unit/utils/test_task_tree.py
+++ b/tests/unit/utils/test_task_tree.py
@@ -48,7 +48,7 @@ def test_build_plan_and_history_separated_layout():
     assert "--- Execution History ---" in output
     assert "- **Step 1 (Most Recent Step, Start: 2.5s)**" in output
     assert "    - Thought 1" in output
-    assert "  * [Planned Action]: Launched app 'None'" in output
+    assert "  * [Action]: Launched app 'None'" in output
 
 
 def test_build_plan_and_history_granularities():
@@ -298,7 +298,7 @@ def test_build_plan_and_history_with_tool_calls():
     ]
     output = build_plan_and_history(plan, steps, "default", last_n_detailed=1)
 
-    assert "* [Operator Decision Loop]:" in output
+    assert "* [Reasoning & tool calls]:" in output
     assert '`read_note({"key": "other_note"})` -> - [ ] Milestone' in output
 
 
@@ -339,7 +339,7 @@ def test_build_plan_and_history_with_interleaved_events():
     assert '    - [Tool Call]: `read_note({"file": "notes.txt"})` -> Milestone plan' in output
 
     # It should use the new section header
-    assert "* [Operator Decision Loop]:" in output
+    assert "* [Reasoning & tool calls]:" in output
 
 
 def test_build_plan_and_history_concatenates_thoughts():
@@ -396,14 +396,14 @@ def test_build_plan_and_history_interleaved_decision_loop():
     assert plan in output
     assert "--- Execution History ---" in output
     assert "- **Step 1 (Most Recent Step, Start: 2.5s)**" in output
-    assert "* [Operator Decision Loop]:" in output
+    assert "* [Reasoning & tool calls]:" in output
     assert "    - I should find search icon." in output
     assert (
         '- [Tool Call]: `ask_explorer({"query": "search icon"})` -> {"center":'
         " [500, 600]}" in output
     )
     assert "    - Clicking coordinates [500, 600] now." in output
-    assert "* [Planned Action]: Tapped 'Search' at None" in output
+    assert "* [Action]: Tapped 'Search' at None" in output
     assert "* [Validator Execution Result]" not in output
 
 
@@ -460,12 +460,9 @@ def test_build_plan_and_history_safety_net_and_incident():
     output = build_plan_and_history(plan, steps, "default", last_n_detailed=1)
 
     assert "- **Step 1 (Most Recent Step, Start: 5.0s)**" in output
-    assert "* [Operator Decision Loop]:" in output
+    assert "* [Reasoning & tool calls]:" in output
     assert "    - Let's click search." in output
-    assert (
-        "* [Planned Action]: Tapped 'Search' at None (Intercepted by"
-        " Pre-Execution Safety Net)" in output
-    )
+    assert "* [Action]: Tapped 'Search' at None (Intercepted by Pre-Execution Safety Net)" in output
     assert "* [Pre-Execution Safety Net]:" in output
     assert (
         "- [Safety Net Check]: (Intercepted by Pre-Execution Safety Net: Target button is"
@@ -475,7 +472,7 @@ def test_build_plan_and_history_safety_net_and_incident():
     assert "Failure Analyzer" not in output
     assert (
         "* [Result]: Error: Intercepted by Pre-Execution Safety Net"
-        " (target_disappeared, consecutive failure #2) on action `Tapped 'Search' at"
+        " (target_disappeared, consecutive failure #2) on action `tap 'Search' at"
         " None`: Target button is not visible" in output
     )
 
@@ -528,16 +525,14 @@ def test_build_plan_and_history_fast_action_burst():
     ]
     # Detailed view: every member with its outcome.
     output = build_plan_and_history(plan, steps, "default", last_n_detailed=1)
-    assert (
-        "* [Planned Fast-Action Burst]: 3 actions fired back to back without the"
-        " safety net" in output
-    )
+    assert "* [Fast-Action Burst]: 3 actions fired back to back without the safety net" in output
     assert "    1. Tapped element at [500, 900] (dispatched)" in output
     assert "    2. Tapped 'Skip' at [880, 120] (FAILED: Error: tap rejected)" in output
     assert "    3. Pressed key 'BACK' (skipped)" in output
+    # The failed member is quoted in intent form: it did not happen.
     assert (
         "* [Result]: Error: Execution failed (general, consecutive failure #1) on burst"
-        " action 2/3 `Tapped 'Skip' at [880, 120]`: Error: tap rejected; the remaining"
+        " action 2/3 `tap 'Skip' at [880, 120]`: Error: tap rejected; the remaining"
         " burst actions were not executed" in output
     )
 
@@ -662,7 +657,7 @@ def test_render_step_replay_shows_summary_thoughts_and_full_tool_results():
     assert "`ask_explorer(" in out
     assert long_result in out
     # Action tools are the planned action, not a tool-call line.
-    assert "[Planned Action]: Tapped 'Save' at [0.5, 0.5]" in out
+    assert "[Action]: Tapped 'Save' at [0.5, 0.5]" in out
     assert "`click(" not in out
 
 
@@ -715,6 +710,174 @@ def test_render_step_replay_shows_described_images_in_tool_results():
     assert "[screenshot: pre-action of Step 1]" in out
 
 
+def test_render_step_replay_header_uses_the_session_clock():
+    """The replay header carries the same ``T+mm:ss`` offset the prompts and
+    ``search_history`` use; the legacy ``Start:`` text only remains when no
+    session clock / step timestamp exists."""
+    from artemis.utils.task_tree import render_step_replay, replay_time_label
+
+    step = _replay_step("ok", timestamp=1000.0 + 61.0)
+    out = render_step_replay(step, session_start=1000.0)
+    assert "- **Step 4 (T+01:01)**" in out
+    assert "Start:" not in out
+
+    # No session start (or a non-numeric one, e.g. a mocked reader): fallback.
+    assert "- **Step 4 (Start: 12.0s)**" in render_step_replay(step)
+    assert "- **Step 4 (Start: 12.0s)**" in render_step_replay(step, session_start=object())
+    # A step without a timestamp cannot be placed on the session clock.
+    assert replay_time_label(_replay_step("ok"), 1000.0) == "Start: 12.0s"
+
+
+def test_render_step_replay_labels_are_role_neutral():
+    """Flash has no Operator, so the block labels name what they hold."""
+    from artemis.utils.task_tree import render_step_replay
+
+    out = render_step_replay(_replay_step("ok"))
+    assert "  * [Reasoning & tool calls]:" in out
+    assert "  * [Action]: Tapped 'Save' at [0.5, 0.5]" in out
+    assert "Operator Decision Loop" not in out
+    assert "Planned Action" not in out
+
+
+def test_render_step_replay_prints_a_failure_once():
+    """A failed step shows its error on the [Result] line only, not appended
+    to the action line as well."""
+    from artemis.utils.task_tree import render_step_replay
+
+    out = render_step_replay(
+        _replay_step(
+            "ok",
+            last_execution_result={
+                "status": "failed",
+                "execution": [{"action": "click", "attempts": ["Error: tap rejected"]}],
+            },
+        )
+    )
+    assert "  * [Action]: Tapped 'Save' at [0.5, 0.5]\n" in out
+    assert "  * [Result]: Error: tap rejected" in out
+    assert out.count("tap rejected") == 1
+    assert "Execution failed:" not in out
+
+
+def test_render_step_replay_indents_multiline_reasoning():
+    from artemis.utils.task_tree import render_step_replay
+
+    step = _replay_step(
+        "ok",
+        interleaved_events=[
+            {"type": "thought", "content": "- Save findings first.\nTap Wi-Fi.\nThen verify."}
+        ],
+    )
+    out = render_step_replay(step)
+    assert "\n    - - Save findings first.\n      Tap Wi-Fi.\n      Then verify." in out
+
+
+def test_format_action_clean_directional_swipe_shows_direction_first():
+    """``swipe(direction="up")`` replays as the direction the agent issued; the
+    recorded path is a parenthesised detail (Flash records both)."""
+    from artemis.utils.task_tree import format_action_clean
+
+    flash_record = {
+        "action": "swipe",
+        "coordinates": [600, 700, 600, 300],
+        "coordinate_space": "normalized",
+        "normalized_start_coordinates": [600, 700],
+        "normalized_end_coordinates": [600, 300],
+        "args": {"direction": "up", "duration": 800},
+    }
+    assert (
+        format_action_clean(flash_record) == "Swiped up (from [600, 700] to [600, 300]) over 800ms"
+    )
+    assert format_action_clean({"action": "swipe", "direction": "down"}) == "Swiped down"
+    assert (
+        format_action_clean(
+            {
+                "action": "swipe",
+                "gesture": "left",
+                "start_coordinates": [750, 500],
+                "end_coordinates": [250, 500],
+            }
+        )
+        == "Swiped left (from [750, 500] to [250, 500])"
+    )
+    # Without a direction the path is the headline, as before.
+    assert (
+        format_action_clean({"action": "swipe", "coordinates": [600, 700, 600, 300]})
+        == "Swiped from [600, 700] to [600, 300]"
+    )
+
+
+def test_action_intent_phrase_and_incident_line_use_intent_form():
+    """Failure contexts describe what the agent tried to do, not an outcome."""
+    from artemis.utils.task_tree import (
+        action_intent_phrase,
+        format_action_intent,
+        format_incident_clean,
+    )
+
+    assert format_action_intent({"action": "launch_app", "app_name": "NonexistentApp"}) == (
+        "launch app 'NonexistentApp'"
+    )
+    assert (
+        format_action_intent(
+            {"action": "click", "coordinates": [500, 520], "target_description": "Wi-Fi row"}
+        )
+        == "tap 'Wi-Fi row' (self-described) at [500, 520]"
+    )
+    assert format_action_intent({"action": "swipe", "direction": "up"}) == "swipe up"
+    assert (
+        format_action_intent(
+            {
+                "action": "input_text",
+                "text": "hello",
+                "target_text": "Search",
+                "coordinates": [1, 2],
+            }
+        )
+        == "type 'hello' into 'Search' at [1, 2]"
+    )
+    assert format_action_intent({"action": "press_key", "keycode": "BACK"}) == "press key 'BACK'"
+    assert format_action_intent({"action": "wait_for_delay", "delay_ms": 200}) == "wait 200ms"
+    assert format_action_intent({"action": "long_press", "coordinates": [1, 2]}) == (
+        "long press element at [1, 2]"
+    )
+    assert format_action_intent({"action": "click", "coordinates": [1, 2], "times": 2}) == (
+        "double tap element at [1, 2]"
+    )
+    # Unknown phrases pass through untouched.
+    assert action_intent_phrase("Fast-action burst (2 actions, unvetted): x") == (
+        "Fast-action burst (2 actions, unvetted): x"
+    )
+    assert action_intent_phrase("") == ""
+
+    line = format_incident_clean(
+        {
+            "kind": "exec_error",
+            "category": "general",
+            "consecutive_failures": 2,
+            "action": {"action": "launch_app", "app_name": "NonexistentApp"},
+            "action_description": "Launched app 'NonexistentApp'",
+            "reason": "Error finding package for app: NonexistentApp",
+        }
+    )
+    assert line == (
+        "Error: Execution failed (general, consecutive failure #2) on action"
+        " `launch app 'NonexistentApp'`: Error finding package for app: NonexistentApp"
+    )
+    intercepted = format_incident_clean(
+        {
+            "kind": "safety_net",
+            "category": "target_disappeared",
+            "action": {"action": "click", "target_text": "Skip", "coordinates": [880, 120]},
+            "reason": "Target element 'Skip' was not found on the screen.",
+        }
+    )
+    assert intercepted.startswith(
+        "Error: Intercepted by Pre-Execution Safety Net (target_disappeared, consecutive"
+        " failure #1) on action `tap 'Skip' at [880, 120]`:"
+    )
+
+
 def test_format_action_clean_reads_flash_arguments_and_maps_manage_app():
     """Read Flash action arguments from ``args`` when formatting app launches."""
     from artemis.utils.task_tree import format_action_clean