Use case

The worker can finish before the work is ready.

Agent output needs a gate that can say no. Orcho puts review inside the run: findings are typed, rejection changes control flow, repair resumes the same record, and final acceptance reads the evidence instead of trusting the worker's last message.

PUBLIC ALPHA
run / review-gates gated
plan accepted
validate_plan accepted
implement evidence open
review_changes findings open
repair_changes queued
final_acceptance awaiting signoff

False-ready

A green local step is not a delivery decision.

The failure mode is familiar: the agent says done, a local check passes, and the human reviewer still finds a blocker. Orcho makes that blocker a state transition, not an after-the-fact comment.

  • validate_plan can reject unclear or unsafe plans before code starts.
  • review_changes can block the run with named findings.
  • repair_changes resumes from the same record, preserving the rejection and the fix.

Decision

The final call reads evidence.

Final acceptance can see the plan, diffs, checks, findings, repair history and handoff decisions in one record. The claim of readiness is separated from the proof of readiness.