Why: Accepted retrieval and tool sources could become stale, and a pending HITL answer could release a changed source set.
Evidence: App and run-manager suites cover per-preflight resource verification, authorization epochs, and a second exact-source preflight after HITL.
Impact: Project work fails closed when authorization, source bytes, run binding, or the source watermark changes.
Refs: TT-N03 TT-R01
Why: Project messages, retrieved evidence, tool results, and final replies must not affect model work or reach users before the domain risk decision is complete.
Evidence: RED tests proved the runner, final reply, and message deltas advanced before the gate; focused tests, go test -p 1 ./..., go build ./..., and isolated PostgreSQL runtime tests now pass.
Impact: Wire the optional RDM observer into project run start, retrieval, tool-result, HITL clarification, and final reply buffering; hosts without the optional provider keep existing behavior.
Refs: TT-N03, TT-R01; approved work-observation design and stage-five plan
weichen