Self-improvement tested before trusted: nightly evolution rounds propose a playbook and a rewritten builder control policy (sandboxed, AST-checked, no sealed values), run both against the incumbent on a fixed dev benchmark, adopt only on a margin with no regression or integrity flag; code changes need human approval; canary rollback on live papers; improver strategies scored by measured gain (meta level, depth 1); referee hash-pinned per round