From f357d262bb8d6aebf7a24483a9dd226bf1b84a76 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 17 Aug 2026 06:08:20 +0000
Subject: [PATCH 1/5] Update dependency voku/agent-loop to v0.16.6

---
 tools/agent-loop/composer.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/agent-loop/composer.json b/tools/agent-loop/composer.json
index fce1fa4..d33c882 100644
--- a/tools/agent-loop/composer.json
+++ b/tools/agent-loop/composer.json
@@ -4,7 +4,7 @@
   "type": "project",
   "license": "Apache-2.0",
   "require-dev": {
-    "voku/agent-loop": "0.16.5",
+    "voku/agent-loop": "0.16.6",
     "voku/simple-php-code-parser": "0.22.3"
   },
   "minimum-stability": "dev",

From 47d3f62889a79bb2f6af3338dcd10ecd3e0dc915 Mon Sep 17 00:00:00 2001
From: Lars Moelleken <lars@moelleken.org>
Date: Mon, 17 Aug 2026 12:39:32 +0200
Subject: [PATCH 2/5] Keep agent-loop replay pins in Renovate updates

---
 renovate.json | 31 +++++++++++++++++++++++++++++--
 1 file changed, 29 insertions(+), 2 deletions(-)

diff --git a/renovate.json b/renovate.json
index 18d32a7..4d55b37 100644
--- a/renovate.json
+++ b/renovate.json
@@ -3,9 +3,36 @@
         "config:recommended",
         ":preserveSemverRanges"
     ],
-    "packageRules": [{
+    "customManagers": [
+        {
+            "customType": "regex",
+            "managerFilePatterns": [
+                "/^tools\\/agent-loop\\/dogfood\\/issue-\\d+\\.json$/"
+            ],
+            "matchStrings": [
+                "\\\"agent_loop_release\\\"\\s*:\\s*\\\"(?<currentValue>[^\\\"]+)\\\""
+            ],
+            "depNameTemplate": "voku/agent-loop",
+            "datasourceTemplate": "packagist",
+            "versioningTemplate": "composer"
+        }
+    ],
+    "packageRules": [
+        {
+            "description": "Keep agent-loop tool and replay provenance updates together",
+            "matchPackageNames": [
+                "voku/agent-loop"
+            ],
+            "matchManagers": [
+                "composer",
+                "custom.regex"
+            ],
+            "groupName": "agent-loop toolchain"
+        },
+        {
             "matchPackageNames": [
                 "!phpunit/phpunit"
             ]
-    }]
+        }
+    ]
 }

From d217eb94c335ad80b3d233368ddddd55725d03f0 Mon Sep 17 00:00:00 2001
From: Lars Moelleken <lars@moelleken.org>
Date: Mon, 17 Aug 2026 12:39:47 +0200
Subject: [PATCH 3/5] Align issue 60 replay with agent-loop 0.16.6

---
 tools/agent-loop/dogfood/issue-60.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/agent-loop/dogfood/issue-60.json b/tools/agent-loop/dogfood/issue-60.json
index d89438e..ed420ee 100644
--- a/tools/agent-loop/dogfood/issue-60.json
+++ b/tools/agent-loop/dogfood/issue-60.json
@@ -10,7 +10,7 @@
   },
   "target_base_commit": "5156d5d74ca1bce275219f4571efd54ec44be911",
   "toolchain": {
-    "agent_loop_release": "0.16.5",
+    "agent_loop_release": "0.16.6",
     "agent_skills_commit": "c7e9d8bdda59d957600bca8dc9f787f03286b277",
     "operating_prompt": "reproduce-before-fix"
   }

From 53e4eb11b95e2872afa8a7a0f1d6bfe1203b64de Mon Sep 17 00:00:00 2001
From: Lars Moelleken <lars@moelleken.org>
Date: Mon, 17 Aug 2026 12:39:58 +0200
Subject: [PATCH 4/5] Align issue 101 replay with agent-loop 0.16.6

---
 tools/agent-loop/dogfood/issue-101.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/tools/agent-loop/dogfood/issue-101.json b/tools/agent-loop/dogfood/issue-101.json
index 46f2dd2..568c8cb 100644
--- a/tools/agent-loop/dogfood/issue-101.json
+++ b/tools/agent-loop/dogfood/issue-101.json
@@ -10,7 +10,7 @@
   },
   "target_base_commit": "53f1b5085ee883560afa9326ee914f6b23acd6ae",
   "toolchain": {
-    "agent_loop_release": "0.16.5",
+    "agent_loop_release": "0.16.6",
     "agent_skills_commit": "c7e9d8bdda59d957600bca8dc9f787f03286b277",
     "operating_prompt": "reproduce-before-fix"
   }

From 53b6aeae7d69206dfc72c2bad2154b686517249c Mon Sep 17 00:00:00 2001
From: Lars Moelleken <lars@moelleken.org>
Date: Mon, 17 Aug 2026 12:40:07 +0200
Subject: [PATCH 5/5] Document agent-loop replay version ownership

---
 tools/agent-loop/README.md | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/tools/agent-loop/README.md b/tools/agent-loop/README.md
index fcea1b0..e6c85b4 100644
--- a/tools/agent-loop/README.md
+++ b/tools/agent-loop/README.md
@@ -13,9 +13,11 @@ The first replay uses historical issue #60, `Update for use with PHP 8.4`.
 The workflow freezes three things before context discovery:
 
 - issue title/body and the pre-fix base commit `5156d5d74ca1bce275219f4571efd54ec44be911`;
-- `agent-loop 0.16.5` as the direct first-party release-set authority;
+- the `agent-loop` release recorded in the replay input as the direct first-party release-set authority;
 - agent-skills commit `c7e9d8bdda59d957600bca8dc9f787f03286b277` and the `reproduce-before-fix` L2 recipe.
 
+The replay `agent_loop_release` value and `tools/agent-loop/composer.json` intentionally describe the same direct dependency. Renovate owns updating those direct-version references together. Do not copy sibling `agent-*` versions into Composer or replay metadata; they are resolved evidence owned transitively by `agent-loop`.
+
 Before resolution, `verify-release-set.php` fails if the tool project or replay input reintroduces sibling `agent-*` version authority. After resolution, the same verifier requires the complete first-party release set to be present in `composer.lock` and reports the versions Composer actually selected.
 
 If a replay needs byte-for-byte dependency identity rather than compatibility through the frozen `agent-loop` release, commit and install an exact lock file. Do not approximate a lock by copying transitive package versions into another JSON authority.