fix: address CodeRabbit review issues for PR #583

- Resolve delegation rule contradiction in aiox-master.md (line 106):
  Replace vague "Execute framework governance tasks directly" with
  explicit language clarifying these are the ONLY tasks executed
  directly and that delegation-first applies to all exclusive-agent
  tasks. Applies to .aiox-core and .gemini copies.

- Add AIOX_DEBUG=true to override table in agent-authority.md (line 78):
  The capability table row for "Override agent boundaries" was missing
  the debug override, creating a gap between the table and the
  Pre-Execution Check text (which already listed it).

- Add self-correction protocol to Rejection Script in agent-authority.md:
  Issue #527 required @aiox-master to revert improper artifacts,
  delegate to the correct agent, and log the incident when it has
  already begun executing an out-of-scope task. The prior fix only
  defined the rejection message; this adds the full remediation flow.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: oalanicolas

.aiox-core/development/agents/aiox-master.md

@@ -103,7 +103,7 @@ persona:
   identity: Universal executor of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and executes any task directly
   core_principles:
     - "PRE-EXECUTION CHECK: Before executing any task, verify if an exclusive agent owns it (see agent-authority.md Delegation Matrix). If yes, DELEGATE — do not execute directly. Exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
-    - Execute framework governance tasks directly (meta-ops, orchestration, constitutional enforcement)
+    - "Framework governance tasks (meta-ops, orchestration, constitutional enforcement) are the ONLY tasks executed directly. All tasks that belong to an exclusive agent MUST be delegated first. Direct execution is permitted only under explicit exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
     - Load resources at runtime, never pre-load
     - Expert knowledge of all AIOX resources when using *kb
     - Always present numbered lists for choices

.aiox-core/install-manifest.yaml

@@ -8,7 +8,7 @@
 # - File types for categorization
 #
 version: 5.0.3
-generated_at: "2026-03-11T02:03:45.995Z"
+generated_at: "2026-03-11T12:47:44.159Z"
 generator: scripts/generate-install-manifest.js
 file_count: 1089
 files:
@@ -689,9 +689,9 @@ files:
     type: core
     size: 7755
   - path: core/ideation/ideation-engine.js
-    hash: sha256:d9108fa47ed7a9131703739befb214b97d5b8e546faf1b49d8ae9d083756c589
+    hash: sha256:8e496a9344ad86cb60e0f620ffe5bb30ec3f43ac582901da100674ba8149edad
     type: core
-    size: 22865
+    size: 22955
   - path: core/ids/circuit-breaker.js
     hash: sha256:1b35331ba71a6ce17869bab255e087fc540291243f9884fc21ed89f7efc122a4
     type: core
@@ -1317,9 +1317,9 @@ files:
     type: development
     size: 5012
   - path: development/agents/aiox-master.md
-    hash: sha256:a2f8c55ac39c3489b656494f24ee7793307b724a2fa35383f430b0be86694ce5
+    hash: sha256:9db9070fe5a019e100d6773108b23989c241089b1aea55f88580018e296d542c
     type: agent
-    size: 19704
+    size: 19922
   - path: development/agents/analyst.md
     hash: sha256:35150d764c6dc74bc02b61a4d613c9278e87ffb209403db23991339fdda4f8e2
     type: agent

.claude/rules/agent-authority.md

@@ -75,7 +75,7 @@
 |-----------|---------|
 | Framework governance tasks | Execute directly (meta-ops, orchestration, framework health) |
 | Tasks with a mapped exclusive agent | **DELEGATE by default** — route to the owning agent |
-| Override agent boundaries | Only with explicit `--force-execute` flag or workflow-engine mode |
+| Override agent boundaries | Only with explicit `--force-execute` flag, workflow-engine mode, or `AIOX_DEBUG=true` |
 | Constitutional enforcement | Execute directly |
 
 **Pre-Execution Check (MANDATORY):** Before executing any task, @aiox-master MUST check the Delegation Matrix above. If an exclusive agent owns the operation, @aiox-master MUST delegate — not execute directly. The only exceptions are:
@@ -89,6 +89,18 @@
 Delegating: → @{agent} | task: {task-file}
 ```
 
+**Self-Correction Protocol:** When @aiox-master has already begun executing a task that belongs to an exclusive agent, it MUST:
+1. **Revert improper artifacts** — Remove or undo any files, outputs, or side effects created during the unauthorized execution. Artifact naming follows the owning agent's conventions (e.g., story files follow `{epicNum}.{storyNum}.story.md`; git operations leave no remote state).
+2. **Delegate and hand off** — Emit the delegation message above and explicitly pass the task to `@{agent}` with the original context intact.
+3. **Log the incident** — Append a structured entry to `.aiox/logs/agent-authority-incidents.log`:
+   ```
+   [timestamp] AUTHORITY_VIOLATION: @aiox-master attempted {task-file}
+   owned_by: @{agent} ({persona})
+   actions_taken: [list of actions performed before detection]
+   reverted: [list of artifacts removed/undone]
+   delegated_to: @{agent}
+   ```
+
 ## Cross-Agent Delegation Patterns
 
 ### Git Push Flow

.gemini/rules/AIOX/agents/aiox-master.md

@@ -103,7 +103,7 @@ persona:
   identity: Universal executor of all Synkra AIOX capabilities - creates framework components, orchestrates workflows, and executes any task directly
   core_principles:
     - "PRE-EXECUTION CHECK: Before executing any task, verify if an exclusive agent owns it (see agent-authority.md Delegation Matrix). If yes, DELEGATE — do not execute directly. Exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
-    - Execute framework governance tasks directly (meta-ops, orchestration, constitutional enforcement)
+    - "Framework governance tasks (meta-ops, orchestration, constitutional enforcement) are the ONLY tasks executed directly. All tasks that belong to an exclusive agent MUST be delegated first. Direct execution is permitted only under explicit exceptions: --force-execute flag, workflow-engine mode, or AIOX_DEBUG=true."
     - Load resources at runtime, never pre-load
     - Expert knowledge of all AIOX resources when using *kb
     - Always present numbered lists for choices