FE-1624: Implement split-ownership Voice conversations with Brunch

[kostandinang]

🌟 What is the purpose of this PR?

Prepare split-ownership Voice conversations: Brunch retains domain strategy and validation, Realtime handles permitted conversational delivery, Flue owns the canonical conversation, and Petrinaut owns safe tool execution.

This draft is planning-only. It preserves the provisional design and presents a bounded mission-conversion proposal for owner approval. It does not change product behavior or promote the inherited accepted Mission 6b authority. Source inspection found no supported persistence-only external dialogue recorder in Flue 2.0.3 or the inspected upstream HEAD; dependent implementation is blocked rather than replaced with a sidecar.

🔗 Related links

• FE-1624 — Implement split-ownership Voice conversations with Brunch (internal)
• Parent: #9564, inspected at a0ca1cbf52ea44420db24cb615c349e151036c14
• Provisional ownership design
• Bounded conversion and gated implementation proposal

🚫 Blocked by

• Parent FE-1580: Reconcile Voice turn behavior on the shared Brunch conversation #9564 must land before this stacked successor can land independently.
• Owner approval of mission conversion before dependent product work.
• Supported Flue persistence-only external recording contract and runtime proof before local dialogue integration.

The latter two gates block product implementation, not review of this planning packet.

🔍 What does this change?

• Preserves the original ownership design byte-for-byte.
• Adds a source-grounded conversion proposal with migration gates, candidate tests, recovery obligations, and residual-planning disposition.
• Adds future-spine pointers without replacing accepted MISSION.md or changing product code.

🏗️ Agent notes

Kostandin Angjellari authorized a new successor issue and draft PR stacked directly on #9564. FE-1624 and branch kostandin/fe-1624-split-ownership-voice form that successor. The original local checkout and its uncommitted design/spine remain intact. No parent or sibling branch was rewritten; gh stack was unavailable, so the Git branch starts at the exact parent head and this PR explicitly targets its branch.

There is no new live mission yet. The six-address candidate conversion is in the proposal. Its initial prerequisite is supported no-wake recording; the separately approved product stage is one Brunch delegation → two recorded Realtime exchanges → one structured agent-authored handback referencing originals → Brunch-validated workpiece update → fresh-process reconstruction. Integrated recovery and safety gates follow before readiness; the first tracer is not architecture completion.

Protect causal per-step client results, mixed server/browser topology, staggered sibling tools, effect-replay batching, explicit human evidence, conversation-owned callbacks, coherent-state refusal, and no autoplay. The current runbook-ir selector must not promote newly recorded Realtime assistant text to Brunch workpiece authority.

Flue signals can carry non-human waking handbacks, but cannot substitute for persistence-only dialogue. Caller-supplied authorship attributes need application enforcement. Public abort leaves settled submissions untouched and does not durably cancel pending browser operations. Speech interruption and durable Stop remain separate; effect/receipt gaps require reconciliation rather than an exactly-once claim.

The detailed plan names stage owners, targeted package commands, real built-runtime tests, browser/media witnesses, no-wake/attribution/identity/staleness/modality/interleaving/partial-effect/recovery discriminators, and explicit no-paid-campaign gates. It preserves remaining architecture obligations in their planning homes rather than silently treating the first stage as completion.

Pre-Merge Checklist 🚀

🚢 Has this modified a publishable library?

This PR:

• does not modify any publishable blocks or libraries, or modifications do not need publishing

📜 Does this require a change to the docs?

The changes in this PR:

• require changes to docs which are made as part of this PR

🕸️ Does this require a change to the Turbo Graph?

The changes in this PR:

• do not affect the execution graph

⚠️ Known issues

• No product implementation is included or authorized by this draft.
• Supported no-wake recording is missing at the inspected Flue revisions.
• Parent witness limitations remain: direct spoken-user attribution on hydration, post-settlement local withholding, comparative latency, and incomplete retained telemetry. They are not passes for this new architecture.
• No real microphone/browser trial or paid evaluation was run for this packet.

🐾 Next steps

Review the bounded conversion envelope. Resolve the supported recording prerequisite, then commit owner-approved authority separately before dependent code. Preserve the remaining design obligations through each later gate.

🛡 What tests cover this?

• Documentation checks verify both draft authority warnings, absence of live-authority headings, nine relative links/anchors, unchanged accepted MISSION.md, and byte-identical preservation of the source design.
• git diff --check passes.
• Brunch Markdown is excluded by repository Oxfmt and Markdownlint policy; no formatting pass is claimed.
• Product tests are not rerun for this documentation-only successor. Planned test commands and required witnesses are in the proposal, not reported as completed evidence.

❓ How to test this?

1. Compare this PR against FE-1580: Reconcile Voice turn behavior on the shared Brunch conversation #9564's branch: only the future spine and two provisional planning documents should differ.
2. Read the design and conversion proposal; verify the supported-recording blocker and preservation of all four ownership boundaries.
3. Confirm MISSION.md is identical to the parent, remaining architecture obligations retain planning homes, and no product readiness or paid-run claim is made.

📹 Demo

Not applicable: this is a planning-only review packet with no UI change.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated
hash	Ready	Preview	Sep 7, 2026 6:45pm UTC
petrinaut	Ready	Preview	Sep 7, 2026 6:45pm UTC

2 Skipped Deployments

Project	Deployment	Actions	Updated
hashdotdesign-tokens	Ignored	Preview	Sep 7, 2026 6:45pm UTC
petrinaut-docs	Ignored	Preview	Sep 7, 2026 6:45pm UTC