[FIX] Dispatch-Feasibility Preflight — Claim-Before-Validate Immunity (#4087)

## Summary

Add a dispatch-feasibility preflight in the server layer that fires at
`open_kitchen` and `dispatch_food_truck` time — validating that the
backend can dispatch the recipe's `run_skill` steps before any
irreversible side effects (clone, branch push, issue labeling) occur. On
preflight failure, the gate is closed, structurally denying all
downstream side-effect tools via `_require_enabled()`. This fixes the
"claim-before-validate" anti-pattern identified in production run
`impl-20260611-163753-197057` where the backend-compat check fired only
inside `run_skill`, after claims and branch pushes had already happened.

<details>
<summary>Individual Group Plans</summary>

### Plan 1: Rectify — Dispatch-Feasibility Preflight —
Claim-Before-Validate Immunity

The backend-compatibility gate (`_check_backend_compat`) fires only
inside `run_skill` — after irreversible external side effects (clone,
branch push, issue labeling) have already occurred. The incompatibility
is statically knowable at `open_kitchen` time from constants
(`HOOK_REGISTRY`, `backend.capabilities`). The architectural weakness is
that `open_kitchen` enables the gate and reveals tools before validating
that the backend can dispatch the recipe's steps, and no existing test
models the temporal ordering between gate-enable, side-effect tools, and
the compat check.

The immunity plan addresses three layers:
1. **LoadRecipeResult extension** — expose post-prune step names from
the recipe layer so the server can inspect them without duplicating
parse logic.
2. **Server-layer preflight** — a `_check_dispatch_feasibility` function
shared by `open_kitchen` and `dispatch_food_truck`, evaluated against
post-prune steps and the real backend, with gate-close on failure.
3. **Temporal-ordering test infrastructure** — tests that assert gate
state after validation failure, test with the real `HOOK_REGISTRY`, and
verify that side-effect tools are structurally denied after preflight
failure.

### Plan 2: Implementation — dispatch_food_truck Preflight Fix and
Missing Tests

Fix the `active_recipe_steps={}` bug in `dispatch_food_truck` that
renders the dispatch-feasibility preflight a no-op, and add four missing
tests: gate-closure after validation failure (1a), full `open_kitchen`
integration preflight (1b), real `HOOK_REGISTRY` test (1e), and
behavioral fleet dispatch preflight (1g).

The root cause is that `dispatch_food_truck` calls
`_check_dispatch_feasibility` with an empty dict for
`active_recipe_steps`, unlike `open_kitchen` which properly loads the
`Recipe` object via `recipes.find()` + `recipes.load()` and filters with
`filter_steps_by_post_prune()`. The fix mirrors the `open_kitchen`
pattern.

</details>

Closes #4083

## Implementation Plan

Plan files:
-
`/home/talon/projects/autoskillit-runs/remediation-20260611-215136-833713/.autoskillit/temp/rectify/rectify_dispatch_feasibility_preflight_2026-06-11_215136.md`
-
`/home/talon/projects/autoskillit-runs/remediation-20260611-215136-833713/.autoskillit/temp/make-plan/remediation_dispatch_feasibility_preflight_plan_2026-06-11_230600.md`

🤖 Generated with [Claude Code](https://claude.com/claude-code) via
AutoSkillit
<!-- autoskillit:pipeline-signature
steps=prepare_pr,run_arch_lenses,compose_pr,annotate_pr_diff,review_pr
-->

## Token Usage Summary

| Step | Model | count | uncached | output | cache_read | peak_ctx |
turns | cache_write | time |

|------|-------|-------|----------|--------|------------|----------|-------|-------------|------|
| resolve_review* | sonnet | 10 | 3.0k | 136.6k | 15.9M | 109.9k | 608 |
628.2k | 1h 6m |
| dispatch:44d3705c-3f62-459b-af5b-9678f2bbcb64* | sonnet | 1 | 114 |
3.6k | 1.2M | 94.6k | 28 | 94.9k | 23m 9s |
| plan* | opus[1m] | 10 | 9.8k | 210.3k | 14.0M | 136.8k | 432 | 818.6k
| 2h 19m |
| verify* | sonnet | 10 | 4.1k | 122.6k | 4.7M | 74.1k | 255 | 427.3k |
1h 2m |
| implement* | MiniMax-M3 | 10 | 24.0M | 134.7k | 0 | 0 | 722 | 0 | 1h
11m |
| audit_impl* | sonnet | 9 | 6.1k | 71.6k | 2.0M | 49.5k | 141 | 266.9k
| 43m 44s |
| prepare_pr* | MiniMax-M3 | 8 | 1.9M | 18.0k | 0 | 0 | 115 | 0 | 7m 59s
|
| compose_pr* | MiniMax-M3 | 8 | 1.6M | 13.2k | 0 | 0 | 103 | 0 | 6m 21s
|
| review_pr* | sonnet | 14 | 2.1k | 347.6k | 13.6M | 101.1k | 618 |
770.8k | 1h 26m |
| dispatch:0145c757-e69c-4878-929a-ba4acb07e3d1* | sonnet | 1 | 322 |
13.7k | 3.0M | 86.3k | 84 | 62.0k | 42m 39s |
| fix* | sonnet | 4 | 640 | 28.9k | 4.4M | 98.2k | 210 | 202.0k | 21m
12s |
| dispatch:341f411a-3d76-4fcf-88a3-15a64c6d7bd4* | sonnet | 1 | 354 |
10.0k | 3.4M | 86.4k | 89 | 62.0k | 1h 18m |
| dispatch:7e27c189-e656-4ec2-b528-b128157c59a8* | sonnet | 1 | 490 |
17.2k | 5.0M | 98.3k | 122 | 73.9k | 1h 26m |
| dispatch:36a96fbc-6c25-4316-a068-66f069a326ac* | sonnet | 1 | 386 |
14.1k | 3.8M | 89.9k | 102 | 65.5k | 1h 14m |
| dispatch:540912dc-04a8-4bda-b6dd-1ba4a533b68f* | sonnet | 1 | 418 |
12.6k | 4.1M | 89.9k | 106 | 65.5k | 1h 27m |
| dispatch:726982d8-8d44-4345-91ee-7c36d41bf8c0* | sonnet | 1 | 330 |
11.6k | 3.1M | 84.9k | 82 | 60.5k | 1h 10m |
| dispatch:c51e35aa-e1dc-42fd-91a6-8cadbf463f94* | sonnet | 1 | 418 |
12.6k | 4.1M | 90.7k | 107 | 66.3k | 1h 36m |
| dispatch:136d06d2-7313-45ac-b80d-f17a96a36af8* | sonnet | 1 | 322 |
10.0k | 3.0M | 83.9k | 80 | 59.5k | 1h 8m |
| **Total** | | | 27.5M | 1.2M | 85.2M | 136.8k | | 3.7M | 18h 54m |

\* *Step used a non-Anthropic provider; caching behavior may differ.*

## Token Efficiency

| Step | LoC Changed | cache_read/LoC | cache_write/LoC | output/LoC |
|------|-------------|----------------|-----------------|------------|
| resolve_review | 100 | 159103.9 | 6282.2 | 1366.2 |
| dispatch:44d3705c-3f62-459b-af5b-9678f2bbcb64 | 0 | — | — | — |
| plan | 0 | — | — | — |
| verify | 0 | — | — | — |
| implement | 1691 | 0.0 | 0.0 | 79.6 |
| audit_impl | 0 | — | — | — |
| prepare_pr | 0 | — | — | — |
| compose_pr | 0 | — | — | — |
| review_pr | 0 | — | — | — |
| dispatch:0145c757-e69c-4878-929a-ba4acb07e3d1 | 360 | 8363.5 | 172.2 |
38.2 |
| fix | 20 | 219002.4 | 10100.2 | 1446.6 |
| dispatch:341f411a-3d76-4fcf-88a3-15a64c6d7bd4 | 446 | 7548.5 | 139.0 |
22.5 |
| dispatch:7e27c189-e656-4ec2-b528-b128157c59a8 | 235 | 21444.0 | 314.5
| 73.2 |
| dispatch:36a96fbc-6c25-4316-a068-66f069a326ac | 0 | — | — | — |
| dispatch:540912dc-04a8-4bda-b6dd-1ba4a533b68f | 0 | — | — | — |
| dispatch:726982d8-8d44-4345-91ee-7c36d41bf8c0 | 0 | — | — | — |
| dispatch:c51e35aa-e1dc-42fd-91a6-8cadbf463f94 | 844 | 4875.8 | 78.5 |
14.9 |
| dispatch:136d06d2-7313-45ac-b80d-f17a96a36af8 | 0 | — | — | — |
| **Total** | **3696** | 23057.4 | 1007.5 | 321.7 |

## Model Usage Breakdown

| Model | steps | uncached | output | cache_read | cache_write | time |
|-------|-------|----------|--------|------------|-------------|------|
| sonnet | 14 | 19.1k | 812.8k | 71.2M | 2.9M | 15h 9m |
| opus[1m] | 1 | 9.8k | 210.3k | 14.0M | 818.6k | 2h 19m |
| MiniMax-M3 | 3 | 27.5M | 165.9k | 0 | 0 | 1h 25m |

---------

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Trecek

src/autoskillit/hooks/formatters/_fmt_recipe.py

@@ -43,6 +43,7 @@
         "recipe_version",  # internal identity metadata
         "stop_step_semantics",  # delivered via open_kitchen response Channel B; not redisplayed
         "deferred_guards",  # internal deferral metadata; not displayed to agent
+        "post_prune_step_names",  # internal preflight field; not displayed to agent
     }
 )
 
@@ -183,6 +184,7 @@ def _fmt_load_recipe(data: LoadRecipeResult, pipeline: bool) -> str:
         "stop_step_semantics",  # delivered via open_kitchen Channel B
         "hook_warning",  # edge-case diagnostic; not rendered in standard path
         "deferred_guards",  # internal deferral metadata; not displayed to agent
+        "post_prune_step_names",  # internal preflight field; not displayed to agent
     }
 )
 

src/autoskillit/recipe/_api.py

@@ -580,6 +580,8 @@ def load_and_validate(
                 )
     if _deferred_guard_list:
         result["deferred_guards"] = _deferred_guard_list
+    if active_recipe is not None:
+        result["post_prune_step_names"] = list(active_recipe.steps.keys())
 
     # Write to cache (only when recipe was found and fully processed)
     if match is not None:

src/autoskillit/recipe/_recipe_ingredients.py

@@ -126,6 +126,7 @@ class LoadRecipeResult(TypedDict, total=False):
     composite_hash: str
     recipe_version: str | None
     deferred_guards: list[DeferredGuard]
+    post_prune_step_names: list[str]
 
 
 class OpenKitchenResult(TypedDict, total=False):
@@ -134,7 +135,7 @@ class OpenKitchenResult(TypedDict, total=False):
     Extends LoadRecipeResult with three post-return keys injected by the handler.
     """
 
-    # Inherited from LoadRecipeResult (15 keys)
+    # Inherited from LoadRecipeResult (17 keys)
     content: str
     errors: list[str]
     diagram: str | None
@@ -151,6 +152,7 @@ class OpenKitchenResult(TypedDict, total=False):
     composite_hash: str
     recipe_version: str | None
     deferred_guards: list[DeferredGuard]
+    post_prune_step_names: list[str]
     # Post-return keys injected by open_kitchen handler (4 keys)
     success: bool
     kitchen: str

src/autoskillit/server/tools/AGENTS.md

@@ -19,6 +19,7 @@ MCP `@mcp.tool()` handlers registered on import (20 tool modules).
 | `tools_clone.py` | `clone_repo`, `remove_clone`, `push_to_remote`, `register_clone_status`, `batch_cleanup_clones`, `bootstrap_clone` |
 | `_claim_helpers.py` | `ClaimDecision`, `_try_claim_with_liveness`, `_get_campaign_state_paths` — shared claiming logic for `claim_issue` and `claim_and_resolve_issue` |
 | `_execution_helpers.py` | `_import_and_call`, `_coerce_scalar`, `maybe_promote_work_dir`, `validate_path_arg_anchoring`, `resolve_relative_path_args` — execution helpers for `run_python` (no MCP tools) |
+| `_preflight.py` | `_check_dispatch_feasibility`, `_get_fix_required_hook_matchers`, `filter_steps_by_post_prune` — shared preflight for `open_kitchen` and `dispatch_food_truck` |
 | `tools_execution.py` | `run_cmd`, `run_python`, `run_skill` |
 | `tools_fleet_dispatch.py` | `dispatch_food_truck`, `record_gate_dispatch` |
 | `tools_fleet_reset.py` | `reset_dispatch` (full dispatch artifact cleanup) |

src/autoskillit/server/tools/_preflight.py

@@ -0,0 +1,114 @@
+"""Dispatch-feasibility preflight — shared by open_kitchen and dispatch_food_truck."""
+
+from __future__ import annotations
+
+import json
+from pathlib import Path
+from typing import Any
+
+from autoskillit.hook_registry import HOOK_REGISTRY
+
+
+def _get_fix_required_hook_matchers(applicable_guards: frozenset[str]) -> list[str]:
+    """Return matchers of fix-required hooks not enforced by the given guard set."""
+    return [
+        h.matcher
+        for h in HOOK_REGISTRY
+        if h.codex_status == "fix-required"
+        and (
+            not h.scripts
+            or not frozenset(Path(s).stem for s in h.scripts).issubset(applicable_guards)
+        )
+    ]
+
+
+def filter_steps_by_post_prune(
+    raw_steps: dict[str, Any],
+    post_prune_step_names: list[str],
+) -> dict[str, Any]:
+    """Return only the steps whose names survived skip_when_false pruning."""
+    keep = set(post_prune_step_names)
+    return {k: v for k, v in raw_steps.items() if k in keep}
+
+
+def _check_dispatch_feasibility(
+    post_prune_step_names: list[str],
+    active_recipe_steps: dict[str, Any],
+    backend: Any | None,
+    config_providers: Any,
+    recipe_name: str = "",
+) -> str | None:
+    """Fail-closed dispatch-feasibility preflight.
+
+    Evaluated at open_kitchen time (and dispatch_food_truck time) to detect
+    recipe/backend combinations where HOOK_REGISTRY has fix-required entries
+    that the current backend cannot enforce. Returns a JSON error envelope
+    string on failure, None on pass.
+    """
+    if backend is None:
+        return None
+    if not post_prune_step_names:
+        return None
+
+    run_skill_step_names: list[str] = []
+    for step_name in post_prune_step_names:
+        step = active_recipe_steps.get(step_name)
+        if step is not None and getattr(step, "tool", None) == "run_skill":
+            run_skill_step_names.append(step_name)
+
+    if not run_skill_step_names:
+        return None
+
+    from autoskillit.server._guards import _resolve_provider_profile  # circular-break
+
+    feasible_step_names: list[str] = []
+    for step_name in run_skill_step_names:
+        step = active_recipe_steps.get(step_name)
+        step_provider = getattr(step, "provider", "") or ""
+        _profile_name, provider_extras = _resolve_provider_profile(
+            step_name,
+            recipe_name,
+            config_providers,
+            step_provider=step_provider,
+        )
+        if (
+            provider_extras
+            and "ANTHROPIC_BASE_URL" in provider_extras
+            and not backend.capabilities.anthropic_provider_capable
+        ):
+            continue
+        feasible_step_names.append(step_name)
+
+    if not feasible_step_names:
+        return None
+
+    fix_required_matchers = _get_fix_required_hook_matchers(
+        backend.capabilities.applicable_guards,
+    )
+    if not fix_required_matchers:
+        return None
+
+    return json.dumps(
+        {
+            "success": False,
+            "kitchen": "preflight_failed",
+            "user_visible_message": (
+                f"Cannot dispatch recipe: backend {backend.name!r} cannot enforce "
+                f"HOOK_REGISTRY fix-required entries "
+                f"[{', '.join(fix_required_matchers)}]. "
+                f"Add a per-step provider override that sets ANTHROPIC_BASE_URL "
+                f"to reroute dispatch to claude-code, which has full hook enforcement."
+            ),
+            "error": (
+                f"Dispatch infeasible on backend {backend.name!r}: "
+                f"fix-required hooks {fix_required_matchers} are not enforceable."
+            ),
+            "stage": "dispatch_feasibility_preflight",
+            "unfixable_matchers": fix_required_matchers,
+            "backend": backend.name,
+            "escape_hatch": (
+                "Per-step provider: override with ANTHROPIC_BASE_URL set to "
+                "reroute dispatch to claude-code (which enforces all fix-required hooks)."
+            ),
+        }
+    )

src/autoskillit/server/tools/tools_execution.py

@@ -37,7 +37,6 @@
 from autoskillit.core import current_order_id as _current_order_id
 from autoskillit.core import current_step_name as _current_step_name
 from autoskillit.core import resolve_skill_temp_dir as _resolve_skill_temp_dir
-from autoskillit.hook_registry import HOOK_REGISTRY
 from autoskillit.pipeline import canonical_step_name as _canonical_step_name
 from autoskillit.server import mcp
 from autoskillit.server._guards import (
@@ -65,6 +64,7 @@
     resolve_relative_path_args,
     validate_path_arg_anchoring,
 )
+from autoskillit.server.tools._preflight import _get_fix_required_hook_matchers
 
 logger = get_logger(__name__)
 
@@ -87,19 +87,6 @@ def _is_backend_incompatible(skill_info: object, effective_backend: str) -> bool
     return bool(reqs and effective_backend not in reqs)
 
 
-def _get_fix_required_hook_matchers(applicable_guards: frozenset[str]) -> list[str]:
-    """Return matchers of fix-required hooks not enforced by the given guard set."""
-    return [
-        h.matcher
-        for h in HOOK_REGISTRY
-        if h.codex_status == "fix-required"
-        and (
-            not h.scripts
-            or not frozenset(Path(s).stem for s in h.scripts).issubset(applicable_guards)
-        )
-    ]
-
-
 def _check_backend_compat(
     skill_command: str,
     resolved_command: str,

src/autoskillit/server/tools/tools_fleet_dispatch.py

@@ -48,6 +48,10 @@
 from autoskillit.server._misc import resolve_log_dir
 from autoskillit.server._notify import track_response_size
 from autoskillit.server.tools._cancellation_shield import _cancellation_shield
+from autoskillit.server.tools._preflight import (
+    _check_dispatch_feasibility,
+    filter_steps_by_post_prune,
+)
 
 logger = get_logger(__name__)
 
@@ -312,6 +316,47 @@ async def dispatch_food_truck(
                     "Dispatch skipped: skip_when condition evaluated to true",
                 )
 
+        # Dispatch-feasibility preflight: verify the backend can enforce
+        # all fix-required hooks for the recipe's run_skill steps before
+        # spawning a subprocess.
+        _fleet_load_result: dict[str, Any] = {}
+        if tool_ctx.recipes is not None:
+            try:
+                _fleet_load_result = tool_ctx.recipes.load_and_validate(
+                    recipe,
+                    tool_ctx.project_dir,
+                    suppressed=tool_ctx.config.migration.suppressed if tool_ctx.config else None,
+                    ingredient_overrides=ingredients,
+                    temp_dir=tool_ctx.temp_dir,
+                    backend_name=tool_ctx.backend.name if tool_ctx.backend else None,
+                )
+            except Exception:
+                logger.warning("dispatch_food_truck_preflight_load_failed", exc_info=True)
+
+        _active_recipe_steps: dict[str, Any] | None = None
+        if _fleet_load_result and tool_ctx.recipes is not None:
+            try:
+                _recipe_info = tool_ctx.recipes.find(recipe, tool_ctx.project_dir)
+                if _recipe_info is not None:
+                    _recipe_obj = tool_ctx.recipes.load(_recipe_info.path)
+                    _active_recipe_steps = filter_steps_by_post_prune(
+                        _recipe_obj.steps,
+                        _fleet_load_result.get("post_prune_step_names", []),
+                    )
+            except Exception:
+                logger.warning("dispatch_food_truck_preflight_recipe_load_failed", exc_info=True)
+
+        if tool_ctx.backend is not None and _active_recipe_steps is not None:
+            _preflight_err = _check_dispatch_feasibility(
+                post_prune_step_names=_fleet_load_result.get("post_prune_step_names", []),
+                active_recipe_steps=_active_recipe_steps,
+                backend=tool_ctx.backend,
+                config_providers=tool_ctx.config.providers,
+                recipe_name=recipe,
+            )
+            if _preflight_err is not None:
+                return _preflight_err
+
         result = await execute_dispatch(
             tool_ctx=tool_ctx,
             recipe=recipe,

src/autoskillit/server/tools/tools_kitchen.py

@@ -61,6 +61,10 @@
     _promote_capability_keys,
 )
 from autoskillit.server.tools._cancellation_shield import _cancellation_shield
+from autoskillit.server.tools._preflight import (
+    _check_dispatch_feasibility,
+    filter_steps_by_post_prune,
+)
 
 logger = get_logger(__name__)
 
@@ -625,7 +629,9 @@ async def open_kitchen(
                         try:
                             recipe_obj = tool_ctx.recipes.load(recipe_info.path)
                             _deferred_recipe_obj = recipe_obj
-                            tool_ctx.active_recipe_steps = dict(recipe_obj.steps)
+                            tool_ctx.active_recipe_steps = filter_steps_by_post_prune(
+                                recipe_obj.steps, result.get("post_prune_step_names", [])
+                            )
                             tool_ctx.active_recipe_ingredients = frozenset(
                                 recipe_obj.ingredients.keys()
                             )
@@ -638,7 +644,22 @@ async def open_kitchen(
                         tool_ctx.active_recipe_ingredients = None
                 # Default to False for missing 'valid' so a absent key is treated as invalid
                 if not result.get("valid", False) or not result.get("content", ""):
+                    tool_ctx.gate.disable()
                     return _recipe_validation_error_response(name, result)
+                # Dispatch-feasibility preflight: verify the backend can enforce
+                # all fix-required hooks for the recipe's run_skill steps.
+                if tool_ctx.active_recipe_steps is not None:
+                    _preflight_err = _check_dispatch_feasibility(
+                        post_prune_step_names=result.get("post_prune_step_names", []),
+                        active_recipe_steps=tool_ctx.active_recipe_steps,
+                        backend=tool_ctx.backend,
+                        config_providers=tool_ctx.config.providers,
+                        recipe_name=name,
+                    )
+                    if _preflight_err is not None:
+                        tool_ctx.gate.disable()
+                        await ctx.disable_components(tags={"kitchen"})
+                        return _preflight_err
                 result["success"] = True
                 result["kitchen"] = "open"
                 result["version"] = __version__
@@ -708,7 +729,9 @@ async def open_kitchen(
                 try:
                     recipe_obj = tool_ctx.recipes.load(recipe_info.path)
                     _normal_recipe_obj = recipe_obj
-                    tool_ctx.active_recipe_steps = dict(recipe_obj.steps)
+                    tool_ctx.active_recipe_steps = filter_steps_by_post_prune(
+                        recipe_obj.steps, result.get("post_prune_step_names", [])
+                    )
                     tool_ctx.active_recipe_ingredients = frozenset(recipe_obj.ingredients.keys())
                 except Exception:
                     logger.warning("open_kitchen_recipe_steps_cache_failed", exc_info=True)
@@ -725,8 +748,24 @@ async def open_kitchen(
                 return _kitchen_failure_envelope(exc, stage="apply_triage_gate")
 
             if not result.get("valid", False) or not result.get("content", ""):
+                tool_ctx.gate.disable()
                 return _recipe_validation_error_response(name, result)
 
+            # Dispatch-feasibility preflight: verify the backend can enforce
+            # all fix-required hooks for the recipe's run_skill steps.
+            if tool_ctx.active_recipe_steps is not None:
+                _preflight_err = _check_dispatch_feasibility(
+                    post_prune_step_names=result.get("post_prune_step_names", []),
+                    active_recipe_steps=tool_ctx.active_recipe_steps,
+                    backend=tool_ctx.backend,
+                    config_providers=tool_ctx.config.providers,
+                    recipe_name=name,
+                )
+                if _preflight_err is not None:
+                    tool_ctx.gate.disable()
+                    await ctx.disable_components(tags={"kitchen"})
+                    return _preflight_err
+
             result["success"] = True
             result["kitchen"] = "open"
             result["version"] = __version__

tests/_test_filter.py

@@ -858,8 +858,10 @@ class ImportContext(enum.StrEnum):
             "hooks",
             "cli",
             "execution",
-            # server/ narrowed to 3 files
+            # server/ narrowed to 4 files
             "server/test_tools_kitchen_envelope.py",
+            "server/test_tools_kitchen_preflight.py",
+            "server/test_tools_fleet_dispatch_preflight.py",
             "server/test_lifespan.py",
             "server/test_run_skill_backend_compat.py",
             # infra/ narrowed to 7 files

tests/arch/test_subpackage_isolation.py

@@ -876,7 +876,7 @@ def test_no_subpackage_exceeds_10_files() -> None:
         "pipeline": 12,
         "fleet": 22,  # REQ-CNST-003-E9: _dispatch_reaper.py; +_sidecar_synthesis.py; +_reset.py
         "recipe/rules": 51,  # +commit_guard_regression_route +rules_model +rules_gitignored_deliverable  # noqa: E501
-        "server/tools": 26,  # _auto_overrides.py + _cancellation_shield.py + tools_fleet_reset.py
+        "server/tools": 27,  # +_preflight.py (dispatch-feasibility preflight)
         "hooks/guards": 32,  # +fleet_claim_guard, +reset_resume_gate, +recipe_read_guard
     }
     violations: list[str] = []
@@ -962,13 +962,14 @@ def test_data_directories_are_not_python_packages() -> None:
         "co-located with the execution engine that calls them",
     ),
     "tools_kitchen.py": (
-        1160,
+        1200,
         "REQ-CNST-010-E7: kitchen tool handlers — open_kitchen and lock_ingredients require "
         "inline validation helpers (_check_override_keys, _build_ingredient_key_suggestions) "
         "for ingredient key validation; splitting would cross import-layer boundaries; "
         "backend capability promotion delegated to _promote_capability_keys in _auto_overrides; "
         "fail-closed validity gate on both deferred-recall and normal paths adds structural "
-        "error propagation from LoadRecipeResult; get_recipe validity guard adds 9 lines",
+        "error propagation from LoadRecipeResult; get_recipe validity guard adds 9 lines; "
+        "dispatch-feasibility preflight wiring on both paths with gate-close on failure",
     ),
     "tools_execution.py": (
         1130,