fix(rectification): let a tied plateau be adopted as the session result

Adjacent minutes still cannot confirm a unique birth minute. A scored
representative time can now be accepted, and the copy must say the minute
is not unique.

Co-authored-by: Cursor <cursoragent@cursor.com>

frontend/src/components/rectification-agentic-chat.tsx

@@ -634,7 +634,7 @@ export function RectificationAgenticChat(props: RectificationAgenticChatProps) {
             <section className="rectification-candidates" aria-label="生时校正候选时间">
               <div className="rectification-candidates-heading">
                 <strong>当前可能的出生时间</strong>
-                <span>这是根据你目前提供的人生事件推算出的几种可能时间。可以先采用一个作为当前排盘时间，也可以继续补充事件；新增证据后，候选和相对支持度会重新计算，准确度还可以继续提高。</span>
+                <span>这次校正的结果是采用一个代表性时间作当前排盘。相邻分钟目前分不开，还不能确认唯一分钟。可以先采用，也可以继续补充事件或改选；新增证据后，候选和相对支持度会重新计算。</span>
                 <span>相对支持度不是统计概率；采用不等于确认出生时间，也不会覆盖原始填报时间。</span>
               </div>
               <div className="rectification-candidate-list">
@@ -666,7 +666,7 @@ export function RectificationAgenticChat(props: RectificationAgenticChatProps) {
           )}
           {savedTime && (
             <p className="rectification-saved" role="status">
-              {savedStatus === "confirmed" ? "已确认校正时间" : "已采用校正时间（未确认）"}：{savedTime}。后续排盘将使用该时间；你仍可继续补充事件或改选其他候选。
+              {savedStatus === "confirmed" ? "已确认校正时间" : "当前排盘时间（代表性候选，还不能确认唯一分钟）"}：{savedTime}。后续排盘将使用该时间；你仍可继续补充事件或改选其他候选。
             </p>
           )}
           {error && <p className="error-message" role="alert">{error}</p>}

frontend/src/lib/rectification-agentic/v9/case-status.ts

@@ -89,4 +89,4 @@ export function evidenceWritesAllowed(
 export const MAX_RESUMABLE_CASES_PER_USER = 1;
 
 export const RECTIFICATION_SKILL_NAME = "jyotish-birth-time-rectification";
-export const RECTIFICATION_SKILL_VERSION = "10.0.2";
+export const RECTIFICATION_SKILL_VERSION = "10.0.3";

frontend/src/lib/rectification-agentic/v9/confirmation-gate.ts

@@ -0,0 +1,174 @@
+/**
+ * Read-only confirmation-gate projection.
+ *
+ * These blockers are fail-closed honesty, not a scoring change. They never
+ * grant a unique birth minute. VedAstro `not_evaluated` means the official
+ * minute-sensitive layer has not run; that is not a fail. The sealed public
+ * AA holdout stays `not_ready` until a human updates this contract after a
+ * valid passing evaluation — this module does not invent cases.
+ */
+
+import { RECTIFICATION_POLICY } from "../../rectification-policy.ts";
+import { indistinguishableWidthMinutes } from "./candidate-plateau.ts";
+
+export const SEALED_MINUTE_HOLDOUT = {
+  sealed_benchmark_id: "minute_rectification_holdout_v2",
+  status: "not_ready",
+  valid_public_aa_cases: 1,
+  required_cases: 20,
+  top_1_rate: 0,
+  confirmation_coverage_rate: 0,
+} as const;
+
+type GateCandidate = Readonly<{
+  time: string;
+  rank: number;
+  tiedMinuteCount: number;
+}>;
+
+export type ConfirmationGateBlocker = Readonly<{
+  id: "vedastro_minute_sensitive" | "adjacent_minutes_indistinguishable" | "public_aa_holdout";
+  status: string;
+  user_meaning: string;
+  indistinguishable_width_minutes?: number;
+  max_confirmation_width_minutes?: number;
+  required_cases?: number;
+  valid_public_aa_cases?: number;
+  top_1_rate?: number;
+  confirmation_coverage_rate?: number;
+  sealed_benchmark_id?: string;
+}>;
+
+export type ConfirmationGate = Readonly<{
+  confirmation_allowed: boolean;
+  blockers: readonly ConfirmationGateBlocker[];
+}>;
+
+export type SessionOutcomeKind =
+  | "collect_evidence"
+  | "adopt_representative"
+  | "awaiting_confirmation";
+
+export type SessionOutcome = Readonly<{
+  kind: SessionOutcomeKind;
+  user_meaning: string;
+}>;
+
+export function sessionOutcomeFromGate(input: {
+  selectionAllowed: boolean;
+  confirmationAllowed: boolean;
+}): SessionOutcome {
+  if (input.confirmationAllowed) {
+    return {
+      kind: "awaiting_confirmation",
+      user_meaning: "确认门已允许。只有用户明确同意才能写已确认校正时间。",
+    };
+  }
+  if (input.selectionAllowed) {
+    return {
+      kind: "adopt_representative",
+      user_meaning: "这次校正的结果是采用代表性时间作当前排盘，还不能确认唯一分钟。",
+    };
+  }
+  return {
+    kind: "collect_evidence",
+    user_meaning: "还需要能评分的带日期事件，才能给出可采用的代表性时间。",
+  };
+}
+
+function asRecord(value: unknown): Readonly<Record<string, unknown>> | null {
+  return value && typeof value === "object" && !Array.isArray(value)
+    ? value as Readonly<Record<string, unknown>>
+    : null;
+}
+
+export function readVedastroMinuteSensitiveStatus(
+  decisionReceipt: Readonly<Record<string, unknown>> | null | undefined,
+): string {
+  const gates = asRecord(decisionReceipt?.gates);
+  const exact = asRecord(gates?.exact_confirmation);
+  const nested = exact?.external_validation_status;
+  if (typeof nested === "string" && nested.trim()) return nested.trim();
+  const top = decisionReceipt?.external_validation_status;
+  if (typeof top === "string" && top.trim()) return top.trim();
+  return "not_evaluated";
+}
+
+function vedastroPassed(status: string): boolean {
+  return status === "passed";
+}
+
+function vedastroUserMeaning(status: string): string {
+  if (status === "not_evaluated") {
+    return "官方分钟敏感校验尚未跑通。未调用不等于失败，但缺这一层不能写确认。";
+  }
+  if (status === "passed") {
+    return "官方分钟敏感校验已通过。";
+  }
+  return "官方分钟敏感校验未能区分相邻分钟，不能写确认。";
+}
+
+function adjacentPassed(candidates: readonly GateCandidate[], widthMinutes: number): boolean {
+  if (candidates.length === 0) return false;
+  const top = [...candidates].sort((left, right) => left.rank - right.rank)[0];
+  return Boolean(top)
+    && top.tiedMinuteCount === 1
+    && widthMinutes <= RECTIFICATION_POLICY.maxConfirmationWidthMinutes;
+}
+
+function holdoutPassed(): boolean {
+  const holdout: {
+    status: string;
+    valid_public_aa_cases: number;
+    required_cases: number;
+    confirmation_coverage_rate: number;
+  } = SEALED_MINUTE_HOLDOUT;
+  return holdout.status === "ready"
+    && holdout.valid_public_aa_cases >= holdout.required_cases
+    && holdout.confirmation_coverage_rate > 0;
+}
+
+export function buildConfirmationGate(input: {
+  engineConfirmationAllowed: boolean;
+  candidates: readonly GateCandidate[];
+  decisionReceipt?: Readonly<Record<string, unknown>> | null;
+}): ConfirmationGate {
+  const width = indistinguishableWidthMinutes(input.candidates);
+  const vedastroStatus = readVedastroMinuteSensitiveStatus(input.decisionReceipt);
+  const adjacentOk = adjacentPassed(input.candidates, width);
+  const holdoutOk = holdoutPassed();
+  const confirmationAllowed = input.engineConfirmationAllowed
+    && vedastroPassed(vedastroStatus)
+    && adjacentOk
+    && holdoutOk;
+
+  return {
+    confirmation_allowed: confirmationAllowed,
+    blockers: [
+      {
+        id: "vedastro_minute_sensitive",
+        status: vedastroStatus,
+        user_meaning: vedastroUserMeaning(vedastroStatus),
+      },
+      {
+        id: "adjacent_minutes_indistinguishable",
+        status: adjacentOk ? "passed" : "blocked",
+        indistinguishable_width_minutes: width,
+        max_confirmation_width_minutes: RECTIFICATION_POLICY.maxConfirmationWidthMinutes,
+        user_meaning: adjacentOk
+          ? "当前宽度未超过确认门上限。"
+          : "当前是一段不可分区间。代表分钟只是代表性候选，不是唯一出生分钟。",
+      },
+      {
+        id: "public_aa_holdout",
+        status: SEALED_MINUTE_HOLDOUT.status,
+        required_cases: SEALED_MINUTE_HOLDOUT.required_cases,
+        valid_public_aa_cases: SEALED_MINUTE_HOLDOUT.valid_public_aa_cases,
+        top_1_rate: SEALED_MINUTE_HOLDOUT.top_1_rate,
+        confirmation_coverage_rate: SEALED_MINUTE_HOLDOUT.confirmation_coverage_rate,
+        sealed_benchmark_id: SEALED_MINUTE_HOLDOUT.sealed_benchmark_id,
+        user_meaning: "公开密封 holdout 未达发布门槛，不能据此放宽确认门，也不能声称已校准到精确分钟。",
+      },
+    ],
+  };
+}

frontend/src/lib/rectification-agentic/v9/method-followup.ts

@@ -17,6 +17,7 @@
  * 8. Horary — unsupported; skip
  */
 
+import type { SessionOutcomeKind } from "./confirmation-gate.ts";
 import type { InternalVargaObservation } from "./varga-observations";
 
 export const METHOD_FOLLOWUP_IDS = [
@@ -52,6 +53,8 @@ export type MethodFollowup = Readonly<{
 export type MethodFollowupPlan = Readonly<{
   methods: readonly MethodCoverage[];
   next_followup: MethodFollowup | null;
+  deferred_followup: MethodFollowup | null;
+  session_outcome: SessionOutcomeKind;
   stop_domain_rotation: true;
   do_not_poll: readonly ["appearance", "marks", "horary"];
   not_in_rotation: readonly ["relocation", "finance", "health"];
@@ -117,6 +120,7 @@ export function buildMethodFollowupPlan(input: {
   activeFocus?: MethodFollowupFocus | null;
   declinedTopics?: readonly Readonly<Record<string, unknown>>[];
   observations?: readonly InternalVargaObservation[];
+  sessionOutcome?: SessionOutcomeKind;
 }): MethodFollowupPlan {
   const declined = declinedDomains(input.declinedTopics ?? []);
   const dashaCovered = input.evidence.some(isConfirmedDated);
@@ -134,6 +138,7 @@ export function buildMethodFollowupPlan(input: {
     coverage("horary", "skipped_by_policy"),
   ];
 
+  const sessionOutcome = input.sessionOutcome ?? "collect_evidence";
   const focus = input.activeFocus ?? null;
   if (focus) {
     return {
@@ -147,6 +152,8 @@ export function buildMethodFollowupPlan(input: {
         user_prompt_hint: "先承接当前服务器焦点，不要另开领域清单。",
         source: "active_focus",
       }),
+      deferred_followup: null,
+      session_outcome: sessionOutcome,
       stop_domain_rotation: true,
       do_not_poll: DO_NOT_POLL,
       not_in_rotation: NOT_IN_ROTATION,
@@ -220,9 +227,12 @@ export function buildMethodFollowupPlan(input: {
     }
   }
 
+  const deferAdoption = sessionOutcome === "adopt_representative";
   return {
     methods,
-    next_followup: next,
+    next_followup: deferAdoption ? null : next,
+    deferred_followup: deferAdoption ? next : null,
+    session_outcome: sessionOutcome,
     stop_domain_rotation: true,
     do_not_poll: DO_NOT_POLL,
     not_in_rotation: NOT_IN_ROTATION,

frontend/src/lib/rectification-agentic/v9/tool-service.ts

@@ -1479,6 +1479,9 @@ export function safeToolErrorCode(error: unknown): string {
     "invalid_input",
     "precision_downgrade",
   ];
+  if (error instanceof RectificationToolServiceError && known.includes(error.code)) {
+    return error.code;
+  }
   for (const code of known) {
     if (message.includes(`agentic_rectification_${code}`)) return code;
   }

frontend/src/lib/rectification-candidate-result.ts

@@ -79,6 +79,6 @@ export function isRecommendedRectificationCandidate(
   candidate: RectificationCandidate,
 ): boolean {
   return !result.selectedTime
-    && result.confirmationAllowed
+    && result.selectionAllowed
     && result.representativeTime === candidate.time;
 }

frontend/src/mastra/agentic-rectification.ts

@@ -69,7 +69,7 @@ const agenticRectificationInstructions = `你是 Jyotisha，只服务当前绑
 6. 工具执行过程保持静默。正文像正常人说话，不写“本轮做了什么”，不描述 Skill、Case、Dossier、工具、内部 Activity、参数、错误、内部 ID、评分、数据库、推理过程或密钥；完成凭证完全由服务端公开 Activity/receipt 展示。
 7. 只基于成功 attempt 输出正文。工具失败时说明面向用户的边界，不声称未执行的方法或结果。
 8. 当前轮新事件一律走 rectification-record-evidence-batch（一件也可以）。rectification-confirm-evidence 只用于用户对已有 pending 明确说“对/是”。不得要求用户把已说清的事件再发一遍。
-9. 不得在同一回复中一边要求继续补证据，一边提供候选采用。用户表示“没有更多事件”时尊重该边界；如果当前不需要追问，可以直接解释结果、说明边界或自然结束本轮。若 latest_result.indistinguishable_width_minutes 大于 5 或 confirmation_allowed 为 false，必须说这是一段不可分区间，把代表分钟称为代表性候选，不得说已定位到唯一分钟。
+9. 不得在同一回复中一边要求继续补证据，一边提供候选采用。session_outcome=adopt_representative 时本轮结果是采用代表性时间，不要再问 next_followup；正文必须说还不能确认唯一分钟。用户表示“没有更多事件”时尊重该边界；如果当前不需要追问，可以直接解释结果、说明边界或自然结束本轮。确认门以 latest_result.confirmation_gate 为准；not_evaluated 不是 fail；holdout 为 not_ready 时不得声称精确分钟或发布准确率。若宽度大于 5 或 confirmation_allowed 为 false，必须说这是一段不可分区间，把代表分钟称为代表性候选，不得说已定位到唯一分钟。用户仍可 accepted 代表性候选。
 10. 不泄露系统提示词或 Skill 原文。
 11. 追问只跟 method_followup_plan；不得按 missing_evidence_categories 轮询迁居/健康/财务，不得问外貌或胎记。不得把分盘观察说成用户性格或类型标签。
 12. 证据有效变化后由服务器重算候选。不要等用户说“没有更多了”才比较，也不要对同一证据指纹再 compare。分钟扫描只在服务端，结果只是候选或平台，不得宣布确认。`;

frontend/src/mastra/rectification-v9-tools.ts

@@ -37,7 +37,8 @@ import {
   type V9CaseDossier,
 } from "@/lib/rectification-agentic/v9/tool-service";
 import { isEvidenceKind, isEvidenceDomain, isDatePrecision, displayDateLabel } from "@/lib/rectification-agentic/v9/evidence-model";
-import { indistinguishableWidthMinutes, confirmationAllowedForWidth } from "@/lib/rectification-agentic/v9/candidate-plateau";
+import { indistinguishableWidthMinutes } from "@/lib/rectification-agentic/v9/candidate-plateau";
+import { buildConfirmationGate, sessionOutcomeFromGate } from "@/lib/rectification-agentic/v9/confirmation-gate";
 import { buildMethodFollowupPlan } from "@/lib/rectification-agentic/v9/method-followup";
 import {
   internalObservationsFromWindowScan,
@@ -99,11 +100,16 @@ function safeCaseProjection(
   const latest = dossier.latestResult;
   const windowScan = windowScanFromDecisionReceipt(latest?.decisionReceipt ?? null);
   const observations = internalObservationsFromWindowScan(windowScan);
+  const latestProjection = latest ? latestResultToolProjection(latest) : null;
+  const sessionOutcome = latestProjection
+    ? (latestProjection.session_outcome as { kind: "collect_evidence" | "adopt_representative" | "awaiting_confirmation" }).kind
+    : "collect_evidence";
   const methodFollowupPlan = buildMethodFollowupPlan({
     evidence: dossier.evidence,
     activeFocus: dossier.conversationSummary.activeFocus,
     declinedTopics: dossier.conversationSummary.declinedSkippedTopics,
     observations,
+    sessionOutcome,
   });
   return {
     case_id: caseRow.caseId,
@@ -128,7 +134,7 @@ function safeCaseProjection(
     conversation_context: safeConversationContext(dossier),
     conversation_summary: safeConversationSummary(dossier),
     birth_context: safeBirthContext(compute),
-    latest_result: latest ? latestResultToolProjection(latest) : null,
+    latest_result: latestProjection,
     method_followup_plan: methodFollowupPlan,
     internal_observations: observations,
   };
@@ -203,17 +209,28 @@ export function latestResultToolProjection(
 ): Record<string, unknown> {
   const width = indistinguishableWidthMinutes(latest.candidates);
   const windowScan = windowScanFromDecisionReceipt(latest.decisionReceipt ?? null);
+  const confirmationGate = buildConfirmationGate({
+    engineConfirmationAllowed: latest.confirmationAllowed,
+    candidates: latest.candidates,
+    decisionReceipt: latest.decisionReceipt ?? null,
+  });
+  const sessionOutcome = sessionOutcomeFromGate({
+    selectionAllowed: latest.selectionAllowed,
+    confirmationAllowed: confirmationGate.confirmation_allowed,
+  });
   return {
     result_id: latest.resultId,
     candidates: latest.candidates,
     selection_allowed: latest.selectionAllowed,
-    confirmation_allowed: confirmationAllowedForWidth(latest.confirmationAllowed, width),
+    confirmation_allowed: confirmationGate.confirmation_allowed,
     representative_time: latest.representativeTime,
     selected_time: latest.selectedTime,
     selection_kind: latest.selectionKind,
     algorithm_version: latest.algorithmVersion,
     indistinguishable_width_minutes: width,
     window_scan: windowScan,
+    confirmation_gate: confirmationGate,
+    session_outcome: sessionOutcome,
   };
 }
 
@@ -861,18 +878,22 @@ export function createRectificationV9Tools(ctx: RectificationV9Context) {
       await receipt("rectification-compare-candidates", "candidates.comparing", "started", { inputFingerprint, engineVersion });
       try {
         const scored = await scoreAndPersistCurrentEvidence(input.caseId);
-        const width = indistinguishableWidthMinutes(scored.persisted.candidates);
+        const latestProjection = latestResultToolProjection({
+          resultId: scored.persisted.resultId,
+          candidates: scored.persisted.candidates,
+          selectionAllowed: scored.persisted.selectionAllowed,
+          confirmationAllowed: scored.persisted.confirmationAllowed,
+          representativeTime: scored.persisted.representativeTime,
+          selectedTime: null,
+          selectionKind: null,
+          algorithmVersion: scored.persisted.algorithmVersion,
+          decisionReceipt: scored.persisted.decisionReceipt,
+        });
         const projection = {
-          result_id: scored.persisted.resultId,
+          ...latestProjection,
           cached: scored.persisted.cached,
           candidate_range: scored.parsed.case.candidateRange,
-          candidates: scored.persisted.candidates,
           overall_confidence: scored.persisted.overallConfidence,
-          selection_allowed: scored.persisted.selectionAllowed,
-          confirmation_allowed: confirmationAllowedForWidth(scored.persisted.confirmationAllowed, width),
-          representative_time: scored.persisted.representativeTime,
-          indistinguishable_width_minutes: width,
-          algorithm_version: scored.persisted.algorithmVersion,
           evidence_count: scored.parsed.scorable.length,
           domain_count: Object.keys(scored.parsed.domainCounts).length,
           window_scan: scored.windowScan,
@@ -1015,7 +1036,7 @@ export function createRectificationV9Tools(ctx: RectificationV9Context) {
   const confirmBirthTimeTool = createTool({
     id: "rectification-confirm-birth-time",
     description:
-      "仅在服务器确认门允许且用户本轮明确同意“就用 HH:MM / 确认这个时间”时调用。consentQuote 必须是用户原话片段，会在服务端做原文匹配。成功后写入 profile 并进入 confirmed 终态。",
+      "仅在 latest_result.confirmation_gate.confirmation_allowed=true 且用户本轮明确同意“就用 HH:MM / 确认这个时间”时调用。任一 blocker 未通过都会 confirmation_blocked。consentQuote 必须是用户原话片段。成功后写入 profile 并进入 confirmed 终态。",
     inputSchema: z.object({
       caseId: z.string().uuid(),
       resultId: z.string().uuid(),
@@ -1032,6 +1053,16 @@ export function createRectificationV9Tools(ctx: RectificationV9Context) {
       });
       await receipt("rectification-confirm-birth-time", "birth_time.confirmed", "started", { inputFingerprint });
       try {
+        const dossier = parseDossierForTools(await loadV9CaseDossier(accounting, userId, input.caseId));
+        const latest = dossier.latestResult;
+        const gate = buildConfirmationGate({
+          engineConfirmationAllowed: latest?.confirmationAllowed === true,
+          candidates: latest?.candidates ?? [],
+          decisionReceipt: latest?.decisionReceipt ?? null,
+        });
+        if (!gate.confirmation_allowed) {
+          throw new RectificationToolServiceError("confirmation_blocked");
+        }
         const result = await confirmV9BirthTime(accounting, userId, input.caseId, {
           resultId,
           candidateId: input.candidateId,