plan: expose completed recovery milestones and refine remaining work

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a13eab-1e6a-7b33-9c37-372e90ada3a2

AGENTS.md

@@ -229,6 +229,36 @@ To create a new workplan:
    the session close protocol. Ask the operator only if the CLI or API is
    unavailable.
 
+### Task refinement after substantial work (required)
+
+At each substantive checkpoint and before session close, compare the completed
+work and new knowledge with the current task structure. If substantial work was
+completed while the workplan's task granularity stayed unchanged, **add completed
+task records for those evidenced outcomes and refine the remaining tasks**.
+A long progress note inside the same broad open task does not satisfy this rule.
+
+- Give each substantial completed deliverable a task with its actual outcome,
+  completion date, evidence and limits. Retrospective recording is allowed; do
+  not invent completion dates, deliveries, native acceptance or approvals.
+- Split remaining work into independently manageable deliverables with an owner,
+  next action, completion criteria and real dependencies. Use `todo` for work
+  that can start; use `wait` only with a concrete prerequisite and unblock condition.
+- Preserve existing task IDs, Hub UUIDs and history. When narrowing an umbrella
+  task, explain the split and map moved scope to the new task IDs. Do not mark
+  the umbrella done unless its retained scope is complete; preserve externally
+  referenced acceptance gates until their dependencies are satisfied.
+- Keep task counts honest: extracting completed scope must not count the same
+  outcome twice or imply an effort-based completion percentage. Distinguish
+  source/fixture proof, actual operational proof and owner acceptance.
+- Record new risks and out-of-scope findings as explicit disposition/handoff
+  tasks or linked live work records; do not silently expand authorization.
+
+Make these changes in the repository source, commit/push, run the repository's
+required projection sync, and verify the actual projected task counts, statuses
+and dependencies. Progress events supplement the task structure; they do not
+replace it. A checkpoint report must show both substantive outcomes and newly
+refined remaining work when this rule is triggered.
+
 <!-- BEGIN EMERGENT-SECURITY-PILOT -->
 ## NetKingdom situational knowledge pilot