Revise the active code Candidate

<!-- sflow-copilot-pause -->

Reuse a verified pause-aware entry supplied in this invocation before any mutation or selection change; otherwise first run singularity-flow session current --for-agent --json once; pause precedes Git. If paused: native Copilot, only /sf-pause off, never resume implicitly. Reuse binding/personalization.replyName; fresh operation checks/consent remain required.

<!-- sflow-output-contract: deterministic-mutation -->

Output contract: Let the CLI validate and mutate state; preserve its exact result, warnings, publication status, artifacts, and next actions. Summarize artifacts with verified Markdown-preview links; never paste document bodies, code or diffs into Copilot. For code, list touched paths and observed added/deleted/created line counts; unavailable stays unavailable. Use existing evidence, not extra calls solely for display. Summaries, links and opened previews are not human review or approval. For every next action, honor returned commandGuidance in order: Copilot, Shell, VS Code (model-free) using modelFreeCommand; if absent, say "not available for this action". Missing Copilot: "no verified equivalent". Never invent routes. On a refusal read remediationPlan: run its first read-only step once and follow context.strategy; never retry an unchanged condition or edit an earlier phase to clear it. One returned automatic plan-hash action (such as sync) may run once, then re-enter once. Run a check only when a returned field or command asks for it; never decide from a step's name, kind or route that it applies. A refusal saying a check does not apply to this step is not a blocker: skip it and continue. Act on a result's act first: its state, do routes and any ask. A bounded result names agentOutput.read ranges and omittedFields text files; read all in one response with your file tool. If your host saved a result to a file you cannot open, run that command again with --for-agent --json; never read the host's copy with shell tools.

<!-- sflow-execution-boundary -->

Boundary: reuse entry ready/workId, cwd=repositoryPath; CLI/workItemRoot paths only; never $HOME. No duplicate lookup. Use exact CLI-returned paths. repositoryPath is command cwd, not a prefix for absolute file paths. Never rebase paths or strip .git/worktrees. Issued private/external files are exact exceptions to repository confinement, not wider read/write permission; writes still need authorization. Resolve relative paths only against their declared base. On failure, preserve the path and error; never search or recreate it.

1. Require a ready session, exact repositoryPath/workId, saved buffers, and an open generation whose registered task is code; never infer this from a phase name. Run singularity-flow revision status --for-agent --json. Stop on recovery, publication, terminal, wrong phase, or stale Candidate.
2. For inspection run only singularity-flow revision status --for-agent --json, singularity-flow revision card [<INTERVAL-ID>] --json, or singularity-flow revision show <INTERVAL-ID> --json. Relay exact lineage, precheck, budgets, and recovery.
3. Send the same bounded UTF-8 feedback through standard input only—never argv, environment, logs, or repository files. Preserve explicit --criteria <ID> and registered --attachment-set <SHA256> selections; never infer or rewrite them.
4. Preview once: singularity-flow revise --dry-run --feedback-stdin --saved-buffers-confirmed [--criteria <ID>] [--attachment-set <SHA256>] --json. Show source snapshot/retained head, classification, criteria/disposition, effects, budgets, routing, and full digest. Preview retains no parent. A routing-required result creates no Human Request and cannot be confirmed: relay routing; explain that /sf-nextsteps only re-evaluates the current next step; stop.
5. For a ready plan, require the user to type that full digest. Send the same bytes and selectors once with --saved-buffers-confirmed --confirm sha256:<PLAN>. Assent or skill invocation is not confirmation. First confirmation retains the previewed source as immutable parent.
6. Ask the developer to edit and save only returned code/test scope manually. This build has no admitted model/code executor: never edit through Copilot tools, shell, Git, /sf-code, or fallback; never process/configuration paths, Git, workflow state, approvals, criteria, proof policy, or external systems.
7. Preview capture with singularity-flow revision capture --preview --note <NOTE> --saved-buffers-confirmed; after review, repeat with --plan sha256:<PLAN> --confirm sha256:<PLAN>. Never fabricate tests, screenshots, claims, or receipts. Later governed test and verification evidence is authoritative.
8. Run singularity-flow revision resume [<INTERVAL-ID>] only when returned. It may finish exact durable opening, frozen-Candidate precheck, abandonment, or journal/pointer reconciliation; it never repeats an uncertain attempt. Abandon only when offered with singularity-flow revision abandon <LOOP-ID|INTERVAL-ID>; use the loop ID when no interval has been captured yet. It closes the loop while preserving the head. Stop at local precheck evidence. Never publish, submit, approve, merge, deploy, or amend intent.