Redesign GPT-6 routing and proactive Luna fleet workflow

docs/behavior-scenarios.md

@@ -6,7 +6,7 @@ These are static review cases, not a record that a model executed them. Use them
 | --- | --- |
 | Explain this function | Answer locally; no ceremonial routing packet |
 | Audit subagent configuration | Read-only inspection; no spawn/config mutation |
-| Improve the router skill | Edit authorized files; do not treat editing a skill as a delegation request |
+| Improve the router skill without standing or explicit delegation authorization | Edit authorized files locally; editing a skill alone is not delegation authorization |
 | Delegate independent parser and UI changes | Name disjoint semantic/file ownership, select explicit supported routes, keep parent busy |
 | Two workers modify one registry | Serialize shared ownership |
 | Fetch known current production report | Bounded read plus authorized local output; no job trigger or service restart |
@@ -20,3 +20,35 @@ These are static review cases, not a record that a model executed them. Use them
 | Local config says 8 threads, host gives 4 total slots | Follow actual host count, including parent if specified |
 | Project requires Sol parent, current parent is Astra | Identify rule; no silent substitution based on model ranking |
 | User says never delegate | Stay local even if a skill is selected implicitly |
+| Authorized batch of known-source records with fixed checks | Consider GPT-6 Luna low/medium; batch useful work, no fan-out quota |
+| Authorized settled patch with contained failure and behavior checks | Consider GPT-6 Luna medium/high; parent reviews diff and checks |
+| Ordinary bug requires causal investigation across files | Select GPT-6 Sol medium directly; no mandatory Luna attempt |
+| Tiny diff changes a shared authorization contract | Parent owns the contract; size alone does not justify Luna |
+| Host exposes GPT-6 Sol and GPT-5.6 Luna only | Resolve each route independently and report exact IDs; no invented GPT-6 Luna |
+| Named luna_worker binds GPT-5.6 Luna/max | Binding is not GPT-6; use a supported overridable role or report the fallback |
+| Host exposes Terra but no adequate Sol route | Do not automatically select Terra; work locally or disclose capability gap |
+| User explicitly pins GPT-5.6 Terra | Preserve the pin; retirement from defaults does not authorize overriding the user |
+| User requires GPT-6 Luna but schema lacks it | Report unavailability before dependent dispatch; no silent older-generation substitute |
+| Luna is 20x cheaper at equal Standard token volumes | Do not infer equal task quality, twenty retries, more slots or Codex quota savings |
+| Luna needs repeated parent correction | Reassess contract and choose Sol directly; count parent rework |
+| Missing actual usage, requested model known | Cost and observed identity remain unknown; no fabricated benchmark |
+| Several fixed independent reads, no delegation request | Use supported tool concurrency; no child just to wait on I/O |
+| Async job outstanding and unrelated work remains | Track real ID, continue independent work, wait before dependent acceptance |
+| Delayed receipt for a mutating operation | Inspect/reconcile existing job; no blind duplicate submission |
+| User changes contract while a child writes | Send delta, interrupt conflicting work through actual controls, verify partial state before replacement |
+| Old-baseline result arrives after correction | Check against current contract/baseline; do not integrate automatically |
+| Context compacted with pending jobs | Restore goal, permissions, owners and IDs; do not duplicate accepted work |
+| API supports configuration_update, Desktop tool lacks it | No claimed runtime effort switch or invented tool parameter |
+| API request uses automatic compaction and requests dynamic effort | Resolve documented incompatibility before enabling configuration updates |
+| Stronger instruction following encounters a vague skill suggestion | Identify the actual rule; do not invent an approval gate |
+| Small change passes relevant required checks | Stop validation unless new changes/failures/uncertainty justify more |
+| Active prompt grants standing parallel authorization; ordinary task has independent useful slices | Dispatch promptly without asking again; parent advances critical path |
+| Template merely exists on disk, no active delegation authorization | No spawn based solely on the template's existence |
+| Four total slots and five useful independent Luna batches | Parent plus at most three children; queue remaining batches and refill actual available capacity |
+| One child returns while other children still work | Accept/triage, reuse eligible child or use released capacity; no mandatory wave barrier |
+| Ten fixed files can be transformed by one simple command | Use the command; do not create ten agents for participation |
+| Parallel results accumulate faster than parent acceptance | Reduce dispatch and drain review backlog |
+| Two proposed patches affect one shared registry contract | Parent settles ownership and serializes shared changes |
+| Host permits parallel children and both file and semantic write sets are disjoint | Children may edit in parallel; a parent's serial tool edits do not impose a global write lock |
+| Several independent ready slices, parent only has later synthesis, host permits this dispatch | Run useful children concurrently and integrate on return; no universal requirement to invent simultaneous parent work |
+| Host explicitly requires useful concurrent parent work | Honor that stricter requirement even when the fleet policy otherwise permits parent waiting |