Stage 2 combines a verified upstream signal with tenant-owned repository exposures to identify affected call sites and prepare a bounded remediation draft.

​
Hard boundaries

  • Deterministic signal and call-site intersection remain authoritative.
  • OpenRouter receives only explicit target files and supplied evidence.
  • Every AI output cites valid evidence_ids.
  • The draft cannot write outside the approved target set.
  • Source hashes must still match before a worktree change.
  • Secret and size validation runs before writes.
  • Tests are required after drafting.
  • Pull requests are drafts and require human approval; Lucim cannot merge them.
Stage 2 read surfaces are mounted only when LUCIM_STAGE >= 2. The current services do not imply that scan, rank, draft, test, and pull-request creation are automatically orchestrated end to end in every deployment.