fix(adversary): narrow died-marker predicate, degraded banner for died criteria, hermetic script tests

assets/agents/adversary/README.md

@@ -91,7 +91,7 @@ The conformance doctrine is baked into the graph's own nodes:
 3. Execution evidence is recorded **once, deterministically**: `run_checks` runs ONLY the caller-declared verification commands (never invented or auto-detected), sequentially under a 3300s total deadline — commands the deadline leaves no budget for are recorded as SKIPPED. Criterion branches have no execution tools by design: "tests pass"-style criteria are judged against the record — a recorded green run is MET citing it; no declared command ⇒ at best PARTIAL.
 4. Hunt adversarially for the **absent**: skipped criteria, scope creep, interface/approach substitution, out-of-scope touches, downstream contract breakage.
 5. **Fail closed on pipeline faults**: if parse, diff resolution, or the verification runner dies, its fallback routes to `pipeline_fault`, which records a `PIPELINE-FAULT:` marker and continues to the verdict (a failed holistic pass falls back straight to the verdict, which synthesizes the same marker). Any recorded fault forces DIVERGES with the fault as complaint #1 — degraded is never passing, and the sentinel is always emitted: the graph never dies without one.
-6. **Fail closed per criterion**: a criterion check that dies (max_iterations exhausted, API failure) falls back to `criterion_fault`, which records a schema-shaped UNMET verdict carrying a `PIPELINE-FAULT:` evidence marker for that one criterion. The other criteria still get verdicts, the report says the check DIED rather than judged, and the run is DIVERGES. The evidence marker alone forces the criterion into unmet regardless of the status it carries, so a verdict that echoes the marker with `MET` can never count toward CONFORMS.
+6. **Fail closed per criterion**: a criterion check that dies (max_iterations exhausted, API failure) falls back to `criterion_fault`, which records a schema-shaped UNMET verdict carrying a `PIPELINE-FAULT: criterion ` evidence marker for that one criterion. The other criteria still get verdicts, the report says the check DIED rather than judged, and the run is DIVERGES. That exact marker prefix (the one `criterion_fault` emits) forces the criterion into unmet regardless of the status it carries, so a verdict that echoes it with `MET` can never count toward CONFORMS; `check_criterion` is told never to begin its own evidence with `PIPELINE-FAULT:`.
 
 It is **read-only** — it produces a verdict, never a fix.
 

assets/agents/adversary/graph.yaml

@@ -217,6 +217,8 @@ nodes:
       The id is stamped from the criterion itself — your echo is informative only.
       You have a bounded tool budget — prefer fs_grep and line-ranged fs_read over
       whole-file reads, and conclude as soon as the evidence is decisive.
+      Never begin `evidence` with the literal `PIPELINE-FAULT:` — that prefix is
+      reserved for the graph's own fault markers.
     prompt: |
       Repository: {{project_dir}}
       Changed files: {{changed_files}}
@@ -255,7 +257,7 @@ nodes:
   criterion_fault:
     id: criterion_fault
     type: script
-    description: Fail-closed per-criterion fault marker (reached only via check_criterion's fallback) — converts the captured "LLM node failed" text into a schema-shaped UNMET verdict carrying a PIPELINE-FAULT evidence marker, so one dead criterion check can never sink the map or read as met. Never sinks the map.
+    description: Fail-closed per-criterion fault marker (reached only via check_criterion's fallback) — converts the captured "LLM node failed" text into a schema-shaped UNMET verdict carrying a PIPELINE-FAULT evidence marker, so one dead criterion check can never sink the map or read as met.
     script: scripts/criterion_fault.py
     timeout: 30
 

assets/agents/adversary/scripts/criterion_fault.py

@@ -7,7 +7,10 @@ state_updates. Converts that text into a schema-shaped UNMET verdict whose
 evidence carries a "PIPELINE-FAULT:" marker, so one criterion check that dies
 (max_iterations exhausted, API failure) is recorded as DIED rather than
 judged, the other criteria still get verdicts, and the run is DIVERGES. The
-map collects it like any other verdict — the branch never sinks the map.
+map collects it like any other verdict — the branch never sinks the map. The
+engine applies state_updates before routing to the fallback (src/graph/llm.rs:
+`apply_state_updates_with_output`, then `outcome_from`), so the "no failure
+text captured" branch is belt-and-braces rather than an expected path.
 """
 
 import json

assets/agents/adversary/scripts/verdict.py

@@ -7,7 +7,7 @@ a missing plan or a degraded (faulted) pipeline — is DIVERGES (fail-closed).
 Any "PIPELINE-FAULT:" marker recorded in `pipeline_faults` (or a holistic
 llm-node failure captured in `holistic_failure`) becomes complaint #1;
 per-criterion results are still reported. A criterion whose check DIED
-(criterion_fault's UNMET verdict, evidence prefixed "PIPELINE-FAULT:") is
+(criterion_fault's UNMET verdict, evidence prefixed DIED_EVIDENCE_PREFIX) is
 rendered as died rather than judged and counted as unmet regardless of the
 status it carries. Assembles the exact sentinel format the callers route on.
 Never crashes into a silent verdict.
@@ -18,11 +18,12 @@ import os
 
 MAX_FAULT_DETAIL_CHARS = 300
 DIED_MARKER = "criterion check DIED (pipeline fault)"
+DIED_EVIDENCE_PREFIX = "PIPELINE-FAULT: criterion "
 
 
 def died(v):
     evidence = v.get("evidence")
-    return isinstance(evidence, str) and evidence.startswith("PIPELINE-FAULT:")
+    return isinstance(evidence, str) and evidence.startswith(DIED_EVIDENCE_PREFIX)
 
 
 def load_state():
@@ -69,7 +70,7 @@ def append_criterion_complaints(lines, verdicts, extra, start):
         complaint = (v.get("complaint") or "").strip()
         if died(v):
             if not complaint.startswith(DIED_MARKER):
-                complaint = f"{DIED_MARKER} — {complaint}"
+                complaint = f"{DIED_MARKER} — {complaint}" if complaint else DIED_MARKER
             lines.append(f'{i}. Acceptance criterion "{text}" — {complaint}')
         else:
             lines.append(
@@ -174,9 +175,14 @@ def main():
             lines.append(observations)
     else:
         lines.append("ADVERSARIAL_REVIEW: DIVERGES")
-        lines.append(
-            f"Criteria: {len(met)}/{n} met, {len(partial)} partial, {len(bad)} unmet/diverged."
-        )
+        header = f"Criteria: {len(met)}/{n} met, {len(partial)} partial, {len(bad)} unmet/diverged"
+        if died_count := sum(1 for v in verdicts if died(v)):
+            header += (
+                f" — degraded run: {died_count} criterion check(s) died (fail-closed)."
+            )
+        else:
+            header += "."
+        lines.append(header)
         lines.append("Complaints:")
         append_criterion_complaints(lines, verdicts, extra, 0)
         if observations: