bug(review): status offers review.start while effective global mode rejects it as disabled

[Victor0451]

Pre-flight Checklist

• I searched open and closed issues for rdd_disabled, default review mode, disabled start, and inconsistent status/start behavior. I found related disabled-mode issues, but no duplicate of this status/start contradiction.
• I understand that PRs require status:approved before implementation.

Bug Description

On Gentle AI 2.2.4, the read-only review mode status and the negotiated review lifecycle disagree about the effective mode for the same repository and unchanged candidate.

review mode status reports receipt-driven development as on, decided by default, with both global and clone-local sources unset. Negotiated review status --next-transition then returns an executable review.start transition for the current workspace target. Executing that exact provider-returned transition immediately fails with typed code rdd_disabled, claiming the global mode source keeps review off.

This leaves the consumer unable to follow the authoritative next_transition, while the read-only mode surface provides no indication that review is disabled.

Observed evidence only, no root cause is asserted.

Steps to Reproduce

1. Use a Git repository with a non-empty workspace candidate and no active review lineage for that target.
2. Run the read-only review mode status operation.
3. Observe that effective receipt-driven development is reported as on, decided by default, with global and clone-local unset.
4. Request negotiated review status using contract gentle-ai.review-integration/v2 and next-transition.
5. Observe next_transition.kind: execute, operation: review.start, reason_code: fresh_target_ready.
6. Execute the exact returned operation and ordered arguments once.
7. Observe typed failure rdd_disabled before native mutation.

Expected Behavior

The mode status, negotiated lifecycle status, and review.start preflight should resolve the same effective mode.

If review is disabled, the read-only surfaces should report that disposition and negotiated status should stop instead of offering an impossible start. If review is enabled by default, the exact returned start transition should not be rejected as globally disabled.

Actual Behavior

Mode status:

receipt-driven development: on (decided by default)
global: unset
clone-local: unset

Negotiated status:

{
  "next_transition": {
    "kind": "execute",
    "reason_code": "fresh_target_ready",
    "execute": { "operation": "review.start" }
  },
  "target_identity": "sha256:5c42dda82cb9a0ff86e278e934c2395eb3d7d09ac50c346753c4fd36784073c5"
}

Exact returned start operation:

{
  "schema": "gentle-ai.review-integration.failure/v2",
  "operation": "review.start",
  "phase": "pre_native",
  "code": "rdd_disabled",
  "mutation_outcome": "not_started",
  "authority_applicability": "not_evaluated",
  "retry_safe": false,
  "next_action": "stop",
  "cause": "receipt-driven development is disabled: start is rejected because the global mode source keeps it off"
}

Bounded attempts: one mode-status read, one negotiated-status read, one exact start attempt. No retries or alternate mutations were attempted.

Gentle AI Version

gentle-ai 2.2.4

Operating System

Linux x86_64

AI Agent / Client

OpenCode

Affected Area

CLI (review mode and negotiated review lifecycle)

Additional Context

• The failure reports mutation_outcome: not_started; no review lineage, receipt, or authority mutation was created.
• The consumer candidate remained preserved and uncommitted.
• The negotiated target identity and workspace snapshot were unchanged between status and start.
• No source checkout was inspected or modified to diagnose this occurrence.
• Related but distinct: fix(sdd): honor disabled review mode before pre-verify routing #1932, fix(review): preserve frozen-slot provider incidents while review mode is disabled #1945, fix(sdd): disabled review mode leaves stale binding that blocks apply #2069, and fix(sdd): archive gate blocks on a discovered invalidated receipt while review mode is disabled #2128 concern disabled-mode routing or preserved authority after an explicitly disabled mode. This occurrence starts with mode status reporting on by default while start independently resolves global mode as off.

[fabricio19102003]

Another occurrence on Gentle AI 2.2.3 (public build revision 919ea3daf2afd8287bb42d86f8d979a9741b4b9e, unmodified build), Linux x86_64, with OpenCode 1.18.10.

Observed sequence, bounded to one negotiated status call and one exact start attempt, with no retries:

1. Review status using gentle-ai.review-integration/v2 and requesting next_transition returned an executable review.start transition for a fresh workspace candidate with reason fresh_target_ready. The returned transition included the consent relay.
2. The exact returned transition was executed once unchanged.
3. START was rejected before native execution because clone-local receipt-driven review mode was disabled: category rdd_disabled, phase pre_native, mutation outcome not_started.
4. The consumer worktree and candidate remained unchanged; no mutation started.

Expected: when effective clone-local review mode disables review, negotiated status should return a stop or otherwise non-executable transition instead of instructing a START guaranteed to be rejected. Actual: status instructed START, then the exact instructed transition rejected immediately. No root cause is asserted.

Minimal reproduction:

1. In <repo>, prepare a fresh workspace <target>.
2. Disable review at clone scope.
3. Request negotiated v2 review status with next_transition.
4. Execute the exact returned review.start transition once.
5. Observe rdd_disabled, pre_native, and not_started.