[1wgrumph]

What changed

• Let Coordinator resolve routine wave choices locally and escalate one unresolved routine issue after two evidence-based attempts.
• Send scope, architecture, authority and protected-action decisions to Orchestrator immediately; preserve existing agent-run and review/repair limits.
• Document optional Orchestrator delegation, disabled by default and requiring explicit scoped task authority.
• Preserve decision holds in frozen profile snapshots and configuration digests, with a regression for delegation drift.

Why

Routine choices should not interrupt the owner, while unresolved decisions need a clear escalation path. Delegation must be explicit and must not turn a profile flag into authority.

Validation

• node --test test/*.test.mjs: 967/967 passed.
• python3 test/schema-validation.py: 319/319 passed.
• node hooks/write-set-check.cjs -- <changed paths>: PASS.
• Skill Creator validation: Coordinator, Orchestrator and onboarding valid.
• Regression failed before hold preservation, then passed; changing delegation or attempt settings changes the digest, and live mutations cannot alter the frozen copy.
• Author scenario check: routine choice stays local; a second unsuccessful resolution escalates; scope/protected action escalates immediately; disabled or unscoped delegation grants nothing; no new agent invocation is authorized.

Residual risk

Final-head GitHub quality (including native Codex discovery/assurance dispatch), Semgrep and CodeQL passed. Package release and installed-harness propagation are separate and have not run. No independent review was requested for this policy update.