Rename open to stalled and autopilot to auto-confirm; add pushed state; declare idempotency; propose maturity and projects model (RBT-WP-0008)

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: sonnet
Assistant-Process: 295952@bnt-lap001
Assistant-Session: e93f64ad-516c-46eb-9666-aad8d300c477

runbooks/example-hello/pack.yaml

@@ -3,7 +3,7 @@ id: rtut.example-hello
 title: Example - check a host answers
 owner: runbook-tutorials
 outcome: You have proven a host answers on the network.
-exercise_status: unexercised
+exercise_status: exercised 2026-09-29 by Bernd
 engine: native
 parameters:
   - {id: host, label: Host name, type: string, default: localhost, pattern: "[a-zA-Z0-9.-]+"}

runbooks/showcase-lighthouse/pack.v0.2.yaml

@@ -41,6 +41,7 @@ stages:
     goal: The lamp is lit and the weather is known before dark.
     steps:                     # no requires among these: they are parallel; list order is the recommended order
       - id: read-the-sign
+        idempotent: idempotent
         title: Read the poem over the door
         actor: keeper
         owner: the-lighthouse
@@ -48,6 +49,7 @@ stages:
         reversible: true
         verify: {done_when: You read the poem, expect: manual}
       - id: light-lamp
+        idempotent: idempotent
         title: Light the lamp
         actor: keeper
         owner: the-lighthouse
@@ -58,6 +60,7 @@ stages:
         downstream_risk: Without a lit lamp the night watch has no purpose and ships are not warned.
         verify: {done_when: The lamp is lit, expect: manual}
       - id: read-the-sky
+        idempotent: idempotent
         title: Read the sky
         actor: keeper
         owner: the-lighthouse
@@ -83,6 +86,7 @@ stages:
     requires: [gate:lamp-check]
     steps:
       - id: warn
+        idempotent: idempotent
         title: Warn the ships
         actor: keeper
         owner: the-lighthouse
@@ -107,6 +111,8 @@ stages:
             reversible: true
             verify: {done_when: The door is barred, expect: manual}
       - id: write-logbook
+        idempotent: non-idempotent
+        idempotent_note: Appends a line every time it runs; a second run leaves a duplicate entry.
         title: Write tonight's entry
         actor: keeper
         owner: the-lighthouse
@@ -124,8 +130,10 @@ stages:
     requires: [night]
     steps:
       - id: close-log
+        idempotent: conditional
+        idempotent_note: Safe to repeat only while the log file exists; a second run fails on the read.
         title: Close the log for good
-        autopilot: manual-only     # never confirmed by the engine on its own
+        auto_confirm: manual-only     # never confirmed by the engine on its own
         actor: harbourmaster
         owner: the-lighthouse
         uses: [logdir]