Supervisor
One parent run, scoped child runs.
The parent run owns the shared intent. Child runs own repo-specific implementation and review. Contract checks reason across the boundary.
Cross-project
The cross-run supervisor coordinates a global plan, per-project runs and a final system gate. Each project keeps local evidence while the parent run preserves the cross-system contract.
Supervisor
The parent run owns the shared intent. Child runs own repo-specific implementation and review. Contract checks reason across the boundary.
Final gate
cross_final_acceptance can reject if one child gate failed or if the integrated proof is missing, even when local diffs look correct.