@@ -473,20 +473,21 @@ other replan reasons may trigger sooner. Both runtime and worker-profile receipt
 record the resolved cadence. Only newly launched attempts use the new default;
 keep existing runs and archived settings pinned.
 
-### Optional Goal in the planning horizon
+### Default Goal context and advanced opt-out
 
-For `heartbeat-resume` and `heartbeat-explore`, add `--planning-horizon-goal`
-to include the full same-source original Goal and acceptance in preselection
-planning context. `--no-planning-horizon-goal` explicitly disables it. Omission
-retains the ordinary disabled treatment. Plain and native-Goal workers reject
+New `heartbeat-resume` and `heartbeat-explore` trials include the same-source
+original Goal and acceptance in preselection planning context by default.
+`--no-planning-horizon-goal` disables it for rollback or comparison;
+`--planning-horizon-goal` explicitly enables it. Plain and native-Goal workers reject
 this setting. It does not enable stride, Explore or TurnEnvelope.
 
 The adapter writes the shared `execution_profile.planning_horizon_goal` through
 `configure-goal`, checks the effective readback before work, and records an
-explicit setting in both worker profile and runtime receipt. Restore follows
-the same path: an explicit true/false overrides the donor setting. An omitted
-setting encountering an enabled donor fails the readback instead of silently
-labeling the run off. Historical receipts without this field remain absent;
+resolved boolean in both worker profile and runtime receipt, including when
+the command-line option is omitted. Restore follows the same path: the new
+attempt's resolved setting overrides the donor setting and must read back as
+that exact boolean before work. To preserve an older off treatment, explicitly
+pass `--no-planning-horizon-goal`. Historical receipts without this field remain absent;
 report export rejects mismatched or malformed settings.
 
 Compare on/off from the same qualified pre-replan checkpoint with equal remaining
 
@@ -304,7 +304,7 @@ threshold, forced Todo closure or periodic audit is introduced.
 
 The replan source codec previously omitted default outcomes and retained only
 seven configured-check summary fields. Ordinary work context already carried
-the complete acceptance readback; the dedicated replan `core_goal` and optional
+the complete acceptance readback; the dedicated replan `core_goal` and
 Goal planning horizon did not. Both now reuse that same owner-projected readback,
 including cumulative requirements, self-review provenance, linked work, check
 results and lifetime/freshness facts. This removes a lossy parallel field list;
@@ -345,8 +345,39 @@ continuation observer qualifies only the complete old-to-new wording once with
 224 characters/bytes, no added lines or shapes. Missing clauses, an upgraded
 baseline, other carriers and excess growth retain ordinary rejection. The two
 host fixtures' guidance costs 1,984 bytes instead of 1,772, so their scoped
-advice ceiling becomes 2,000 instead of 1,800. The 8 KiB envelope warning and
-absolute CLI/runtime budgets are unchanged; this is a measured input cost.
+advice ceiling becomes 2,000 instead of 1,800. That guidance-only change retains
+the absolute CLI/runtime budgets; this is a measured input cost.
+
+### Goal context before work selection
+
+The original Goal and recorded acceptance now enter applicable preselection
+horizons by default. This is a context change, not another planning round or a
+new scheduling rule. The five-work-item summary and explicit completeness/detail
+paths remain bounded; seeing the Goal does not make that summary exhaustive.
+Flat runnable backlogs also receive the bounded work view. Missing declared
+dependencies or gaps do not establish sound ordering; they must not hide that
+view. The summary reports omissions and a complete-read route, not a claim that
+its five items are the whole plan. TurnEnvelope references identical selected
+work text when the reference is smaller, retaining other work and completeness.
+The existing configuration owner retains an explicit false for rollback and
+comparisons. Settings moves this control into Advanced settings, preserves
+machine/Goal precedence and sparse inherited values, and does not rewrite
+persisted configurations on read. EdgeBench heartbeat workers pin and record
+the resolved boolean before work, including for omitted CLI options; existing
+receipts remain historical. TurnEnvelope references an identical inline
+acceptance source instead of repeating its body, retaining mismatched evidence.
+Source/default qualification remains separate from installed/model adoption.
+
+Matched public fixtures measure 8,077 → 9,370 characters for small Turn plan and
+20,805 → 23,745 for multi-Agent quota JSON. The latter initially exceeds the
+23,000-character ceiling and existing horizon migration's 2,800 compact growth
+allowance. The increase includes Goal context and a previously absent bounded
+work summary; discarding the latter would hide useful flat-backlog context.
+Retain it and change only that absolute ceiling to 24,000 and the one-time
+horizon migration's compact allowance to 3,000. Excess and same-schema growth
+remain rejected; other ceilings, per-Todo growth and the 8 KiB envelope warning
+are unchanged.
+This qualifies the input-cost tradeoff, not token, latency or model-quality gains.
 
 ## Decisive acceptance
 
 
@@ -228,7 +228,7 @@ worker owner 负责，本基础切片不交付此行为。使用该 worker 的
 分数阈值、强制 Todo 关闭或定期审计。
 
 此前 replan 来源适配会丢弃默认成果，仅保留已配置检查的七项摘要字段。普通工作
-上下文已有完整验收读取，专门的 replan `core_goal` 与可选 Goal 规划视野却没有。
+上下文已有完整验收读取，专门的 replan `core_goal` 与 Goal 规划视野却没有。
 现在两者复用同一 owner 投影的完整读取，保留累计要求、自查来源、关联工作、
 检查结果及生命周期／新鲜度事实，移除一份有损字段清单。Python 只传输来源，
 既有 TypeScript owner 继续决策，不新增能力、provider、持久词汇或 UI 操作。
@@ -258,7 +258,29 @@ provider 所有，本改动不开放隐藏反馈。
 观察器只对完整旧文案到新文案的一次转换给予 224 字符／字节额度，不增加行数或
 结构额度；缺失条款、已升级基线、其他载体或超额增长仍拒绝。两个 Host 夹具的
 引导从 1,772 增至 1,984 字节，对应局部文案上限从 1,800 调为 2,000。
-8 KiB envelope 警告与 CLI／运行绝对预算不变；这是实测输入成本。
+上述仅引导文案变更保留 CLI／运行绝对预算；这是实测输入成本。
+
+### 选择工作前的 Goal 上下文
+
+原始 Goal 与已登记验收现在默认进入适用的选工作前规划视野。这是上下文变化，
+不增加规划轮次或调度规则。五项工作摘要及明确的完整性／详情入口保持有界；
+看到 Goal 不代表摘要覆盖全部工作。既有配置 owner 保留显式 false 用于回滚与
+对照。平铺的可执行任务同样展示有界工作视野；没有登记依赖或缺口，不能证明排序
+合理，也不能据此隐藏该视野。摘要标明遗漏与完整读取入口，不把五项任务当成全部
+计划。TurnEnvelope 在引用更短时引用同包中完全相同的已选工作正文，保留其他工作
+及完整性说明。设置页把该选项移入高级设置，保留机器／Goal 优先级和稀疏继承值，读取
+不重写持久配置。EdgeBench heartbeat worker 在工作前固定并记录解析后的布尔值，
+包括省略 CLI 选项的情况；历史回执保持原样。TurnEnvelope 引用已有且完全相同
+的内联验收来源，避免重复正文；内容不一致时保留各自证据。
+源码／默认行为验证与已安装版本／模型采用仍需分别验证。
+
+同一公开夹具中，small Turn plan 从 8,077 增至 9,370 字符，多 Agent quota JSON
+从 20,805 增至 23,745。后者起初超过 23,000 字符上限及既有 horizon 迁移的
+2,800 紧凑字符增长额度。增加部分包含 Goal 上下文及原本未展示的有界工作摘要；
+舍弃后者会隐藏有价值的平铺任务上下文。保留这些内容，仅将该绝对上限调为 24,000，
+一次性 horizon 迁移的紧凑额度调为 3,000；超额和同 schema 持续增长仍拒绝。
+其他上限、每 Todo 增长及 8 KiB envelope 警告不变。
+这验证输入成本取舍，不证明 token、延迟或模型质量收益。
 
 ## 决定性验收
 
 
@@ -3,11 +3,14 @@
 `quota_planning_horizon_v0` is the bounded, read-only context that lets an
 agent reason beyond one locally selected Todo without inlining LoopX's full
 Todo store or task graph. It is present on the default `quota should-run` path
-when a planning choice has strategic context. The optional `planning_horizon_goal`
-setting is **off by default**. When enabled it carries the current `core_goal`
+when a planning choice has strategic context. The `planning_horizon_goal`
+setting is **on by default**. It carries the current `core_goal`
 before work selection, including for a single local Todo or flat backlog.
-When disabled, the existing strategic-context condition and projection are
-unchanged. Flat runnable alternatives remain owned by `action_portfolio`.
+The bounded work summary remains visible for a flat runnable backlog: missing
+declared dependencies or gaps do not establish that work ordering is sound.
+Completeness and detail references make omitted work explicit. Action selection
+still belongs to `action_portfolio`. When disabled, the previous
+strategic-context condition and projection are unchanged.
 
 The problem it addresses is narrower than scheduling. A selected regression
 gate can be locally runnable while the strategic path also contains a facts
@@ -46,23 +49,28 @@ available, `core_goal.read_action` reads the same complete Goal state, with the
 source path shell-quoted. A corrected source is read on the next planning
 projection; no copied objective needs synchronization.
 
-This extends planning context only after explicit opt-in. Existing Todo selection,
+This changes the default preselection context, including single-Todo and flat
+backlog cases; an explicit false retains the previous projection and skips the
+extra Goal-document read. Existing Todo selection,
 claim/lease, admission, replan precedence and settlement authority remain
 unchanged. Goal text is scoped decision input; public export remains a separate
 boundary. The complete original objective is not shortened to the Todo display
 budget. Transport-size warnings remain visible rather than discarding its tail.
 
-## Enable, Read Back And Disable
+## Default, Read Back And Advanced Opt-Out
 
 The existing **Goal review and stride** capability editor in Settings →
-Capabilities exposes **Show Goal in planning horizon** at machine and Goal scope.
+Capabilities → **Advanced settings** exposes **Show Goal in planning horizon**
+at machine and Goal scope. Ordinary use requires no configuration step.
 Use its preview, apply and readback flow. Its optional boolean is stored in the
 existing `execution_profile.planning_horizon_goal`; no new capability or Goal
 store is introduced. The v2 machine review configuration accepts the same
-optional boolean; omission preserves its previous shape and disabled default.
+optional boolean; omission preserves its stored shape and now resolves to on.
 As with stride, a Goal with an explicit review cadence uses its own configuration;
 a sparse Goal switch inherits the live interval. An explicit false overrides a
-machine opt-in. Clearing a Goal override restores the applicable inherited value.
+machine value. Clearing a Goal override restores the applicable inherited value.
+The form shows effective values without pinning an unchanged inherited horizon
+when another field is saved. Explicit JSON true/false remains an override.
 
 ```sh
 loopx configure-goal --goal-id example --execution-planning-horizon-goal --execute
@@ -71,8 +79,8 @@ loopx quota should-run --goal-id example --agent-id researcher --format json
 loopx configure-goal --goal-id example --no-execution-planning-horizon-goal --execute
 ```
 
-The quota readback contains `planning_horizon.core_goal` only when this projection
-is enabled and a preselection planning projection is applicable. It is not added
+The quota readback contains `planning_horizon.core_goal` when this projection
+is enabled (the default) and a preselection planning projection is applicable. It is not added
 to receipt-bound replays or ineligible work merely to repeat the Goal. Disabling
 skips the extra Goal-document read. Replan continues to read its existing Goal
 context independently. TurnEnvelope, stride, execution permission and quota are
@@ -210,6 +218,14 @@ may replace the repeated `detail_refs` object with
 `detail_refs_ref="$.detail_ref"`. The Turn envelope's top-level cold path then
 owns those reads. This is transport compaction only: it does not change the
 TypeScript reducer output, completeness accounting, or action authority.
+If the exact same acceptance contract is already inline in
+`work_context.sources`, `core_goal.acceptance_contract_ref` points to that source
+instead of repeating its body. The referenced content remains signed. Different
+scopes/revisions and unavailable sources retain the full inline contract.
+For the Goal-bearing horizon, an identical selected-work description may use
+`text_ref` to the envelope's selected Todo text or recommended action when
+that reference is smaller. Other work, completeness and mismatched text stay
+inline; the reference target remains covered by the action signature.
 
 ## Relation Semantics
 
@@ -253,7 +269,8 @@ A conforming implementation must prove:
 - portfolio, horizon, and agent-Todo detail consume the same typed inventory;
 - task graph consumes the same canonical Todo selector, plus terminal evidence
   rows, without acquiring agent-scoped selection or claim authority;
-- omitted/false settings retain the prior horizon and skip extra Goal reads;
+- omitted settings expose the original Goal; explicit false retains the prior
+  horizon and skips extra Goal reads;
 - when enabled, the same current Goal reaches preselection horizon and replan, with original
   trailing constraints and source readback intact;
 - missing, corrected and fallback sources stay explicit; scoped acceptance and
 
@@ -5,6 +5,7 @@ teaches a reusable control-plane lesson.
 
 | Pattern | Symptoms | Evidence To Read | Likely Root | Durable Repair |
 | --- | --- | --- | --- | --- |
+| `planning_visibility_requires_declared_complexity` | A flat runnable backlog hides the Goal or broader work view because no dependency, blocked work or acceptance gap has been registered. | Same-source default/opt-out planning packets, original Goal, bounded work summary, omission counts and full-read routes. | A supplemental-context condition is mistaken for evidence that no strategic planning is needed; byte reduction removes useful visibility. | Show Goal and bounded work context by default at applicable preselection boundaries, including flat backlogs. Preserve omission counts, complete-read routes and action authority. Reduce exact duplication instead of hiding work; qualify input-cost changes with matched fixtures and keep model benefit unproven until measured. |
 | `history_artifact_observation_failure` | History or status readback fails with `ENAMETOOLONG`, permission denial or an I/O error while checking a recorded artifact path. | Synthetic index row, failing filesystem observation, retained Run evidence, index digest and next-read recovery. | A derived artifact availability lookup propagates an OS error and hides otherwise readable durable history on older Python versions. | Isolate filesystem lookup errors in the shared artifact observer; report availability as unconfirmed through the existing false flag, retain Run evidence and retry on the next read. Do not suppress errors reading the index itself or rewrite evidence. Cover real history/status CLI readback with File and SQLite fixtures. |
 | `status_cache_decode_failure` | Opt-in cached status or quota readback fails with a UTF-8 decoding error while live collection works. | Cache miss metadata and a disposable malformed-cache reproduction through both CLI consumers. | The shared cache reader handles JSON and filesystem errors but lets text decoding abort live fallback. | Classify invalid UTF-8 as an unreadable cache miss in the existing IO owner; preserve damaged bytes on reads, collect live facts, and rewrite only with the explicit cache-write option. Test current Todo selection and successful reuse after repair; never suppress canonical source failures. |
 | `lock_holder_decode_hides_timeout` | Lock diagnostics or a contended acquisition raises `UnicodeDecodeError` instead of reporting unreadable metadata or the typed timeout. | Synthetic damaged holder bytes, liveness readback, and a real held-lock timeout followed by normal reacquisition. | Holder text decoding fails before the JSON/error guard, masking advisory failure and incident recording. | Treat invalid UTF-8 as unreadable at the shared holder reader; retain valid alternate records and kernel ownership. Cover the incident, inspection guidance and recovery after the actual holder exits; never delete the lock as repair. |