diogenes 0.1.2 → 0.1.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: '08d2422f892a3b523fc4d070427ab497c9ddaaaaff0ec32725ad33517845770c'
-  data.tar.gz: d3fbdc336893928d6314c327d8e22033b8145c064d003259cf5c7a33f7518339
+  metadata.gz: 23508c589817a7a8faac15185d7c803745553d4d7789ba279de8c871a6103336
+  data.tar.gz: 21405f813bf767dd43f88bfb554d611201480f1de7f75d73868e0ce65a02d419
 SHA512:
-  metadata.gz: 5b9ebb439a576b36eaf6d672efe491ebf9e75a4ee3429b16447674b3b277dcd435ba2a9abf171a33372289fd816727d6cba9cfa3549a3a1401f95cc872032bf9
-  data.tar.gz: 48eb55874a309cf8c6c8d87f95854c472de8de53f1a3a830ac67cc1ad563772af2c240c23e3d9cddb1f3a6307804124d79ac1ebd6ebab2722c024573b79574bd
+  metadata.gz: c66d6ecd7165e10aad7db8e036d74060d9e8d32dbaa627711fbd3bcbc490768e074da7042d42dc3dfb6bbe9a7f14d2b874780863ffd57a27d6a2a99d79ab6ac0
+  data.tar.gz: 6be0cb67ee1592d32ff288acf254c7521562c45e860fdd0dd87da5b2ab86b940565810ef30d31d9522b10c09366e81ea552ccff1efad814d18f40406e4fc0b72

data/.mise/config.toml

@@ -0,0 +1,72 @@
+[settings]
+experimental = true
+lockfile = true
+
+[env]
+HK_MISE = 1
+
+[tools]
+ruby = "4.0.5"
+hk = "latest"
+pkl = "latest"
+actionlint = "1.7.12"
+yamlfmt = "0.21.0"
+
+[hooks]
+# Automatically install/update hooks when tools are installed
+postinstall = '''
+if [ "$CI" != "true" ]; then
+    mise run bootstrap
+fi
+'''
+
+[tasks.bootstrap]
+alias = "up"
+run = ["hk install", { task = "update-hk-import" }, "bundle install"]
+
+[tasks.update]
+alias = ["upd", "upg"]
+run = [
+  "mise upgrade --bump",
+  "mise lock",
+  "bundle update --all",
+  "bundle clean --force",
+  { task = "update-hk-import" },
+]
+
+[tasks."types:check"]
+alias = ["tc", "types", "typecheck"]
+run = ["bundle exec rake steep:check"]
+
+[tasks."types:generate"]
+alias = ["tg", "typegen"]
+run = ["bundle exec rake rbs:generate"]
+
+[tasks.run]
+alias = ["diogenes"]
+run = "bundle exec exe/diogenes"
+
+[tasks.pre-commit]
+run = "hk run pre-commit"
+
+[tasks.check]
+alias = ["chk", "lint"]
+run = [{ task = "typecheck" }, "hk run check --all"]
+
+[tasks.fix]
+alias = ["fmt", "format"]
+run = [{ task = "types:generate" }, "hk run fix --all"]
+
+[tasks.clean]
+alias = ["cln", "nuke"]
+run = [
+  "rm -f *.gem",
+  "rm -rf .bundle",
+  "rm -rf .ruby-lsp",
+  "rm -rf .yardoc",
+  "rm -rf coverage",
+  "rm -rf pkg",
+  "rm -rf tmp",
+  "rm -rf vendor/bundle",
+  "bundle clean --force",
+]

data/.mise/mise.lock

@@ -0,0 +1,179 @@
+# @generated - this file is auto-generated by `mise lock` https://mise.en.dev/dev-tools/mise-lock.html
+
+[[tools.actionlint]]
+version = "1.7.12"
+backend = "aqua:rhysd/actionlint"
+
+[tools.actionlint."platforms.linux-arm64"]
+checksum = "sha256:325e971b6ba9bfa504672e29be93c24981eeb1c07576d730e9f7c8805afff0c6"
+url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_arm64.tar.gz"
+provenance = "github-attestations"
+
+[tools.actionlint."platforms.linux-arm64-musl"]
+checksum = "sha256:325e971b6ba9bfa504672e29be93c24981eeb1c07576d730e9f7c8805afff0c6"
+url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_arm64.tar.gz"
+provenance = "github-attestations"
+
+[tools.actionlint."platforms.linux-x64"]
+checksum = "sha256:8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8"
+url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz"
+provenance = "github-attestations"
+
+[tools.actionlint."platforms.linux-x64-musl"]
+checksum = "sha256:8aca8db96f1b94770f1b0d72b6dddcb1ebb8123cb3712530b08cc387b349a3d8"
+url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_linux_amd64.tar.gz"
+provenance = "github-attestations"
+
+[tools.actionlint."platforms.macos-arm64"]
+checksum = "sha256:aba9ced2dee8d27fecca3dc7feb1a7f9a52caefa1eb46f3271ea66b6e0e6953f"
+url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_darwin_arm64.tar.gz"
+provenance = "github-attestations"
+
+[tools.actionlint."platforms.macos-x64"]
+checksum = "sha256:5b44c3bc2255115c9b69e30efc0fecdf498fdb63c5d58e17084fd5f16324c644"
+url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_darwin_amd64.tar.gz"
+provenance = "github-attestations"
+
+[tools.actionlint."platforms.windows-x64"]
+checksum = "sha256:6e7241b51e6817ea6a047693d8e6fed13b31819c9a0dd6c5a726e1592d22f6e9"
+url = "https://github.com/rhysd/actionlint/releases/download/v1.7.12/actionlint_1.7.12_windows_amd64.zip"
+provenance = "github-attestations"
+
+[[tools.hk]]
+version = "1.48.0"
+backend = "aqua:jdx/hk"
+
+[tools.hk."platforms.linux-arm64"]
+checksum = "sha256:d72463103d9682094e9b1fb2f20ef8824d1ec7a9b23f79163921bac7785fcd51"
+url = "https://github.com/jdx/hk/releases/download/v1.48.0/hk-aarch64-unknown-linux-gnu.tar.gz"
+
+[tools.hk."platforms.linux-arm64-musl"]
+checksum = "sha256:c6ba1ed78e6d205f442e013ffb20e815ff6498ae12aac0705fd3132a9a9b92a0"
+url = "https://github.com/jdx/hk/releases/download/v1.48.0/hk-aarch64-unknown-linux-musl.tar.gz"
+
+[tools.hk."platforms.linux-x64"]
+checksum = "sha256:6b7f9a28391a8b13b88208d723cbde7b945d095cbb03455c7dd5f8df551ed380"
+url = "https://github.com/jdx/hk/releases/download/v1.48.0/hk-x86_64-unknown-linux-gnu.tar.gz"
+
+[tools.hk."platforms.linux-x64-musl"]
+checksum = "sha256:bde5bcaab4035488520ab977f23bfe0b1b639152c6ed7200c9592724e2afe88d"
+url = "https://github.com/jdx/hk/releases/download/v1.48.0/hk-x86_64-unknown-linux-musl.tar.gz"
+
+[tools.hk."platforms.macos-arm64"]
+checksum = "sha256:e3985a14f41ba5eb849bf79502ad19201d0a582114a5ebe35a9afff16742024b"
+url = "https://github.com/jdx/hk/releases/download/v1.48.0/hk-aarch64-apple-darwin.tar.gz"
+
+[tools.hk."platforms.windows-x64"]
+checksum = "sha256:6349ab27cd7a9c07e68edc7c2af0859c8a540482e97a5b7306e9e88460a5ca43"
+url = "https://github.com/jdx/hk/releases/download/v1.48.0/hk-x86_64-pc-windows-msvc.zip"
+
+[[tools.pkl]]
+version = "0.31.1"
+backend = "aqua:apple/pkl"
+
+[tools.pkl."platforms.linux-arm64"]
+checksum = "sha256:7ef10e743daa921fb94ae7bdb9ec6986f362bf250c55814b9ea2aeb13f2d083e"
+url = "https://github.com/apple/pkl/releases/download/0.31.1/pkl-linux-aarch64"
+
+[tools.pkl."platforms.linux-arm64-musl"]
+checksum = "sha256:7ef10e743daa921fb94ae7bdb9ec6986f362bf250c55814b9ea2aeb13f2d083e"
+url = "https://github.com/apple/pkl/releases/download/0.31.1/pkl-linux-aarch64"
+
+[tools.pkl."platforms.linux-x64"]
+checksum = "sha256:618f13955d755cafbfe8c9cba1d27635848cd49dbc6abffd398d2751db1231bf"
+url = "https://github.com/apple/pkl/releases/download/0.31.1/pkl-linux-amd64"
+
+[tools.pkl."platforms.linux-x64-musl"]
+checksum = "sha256:618f13955d755cafbfe8c9cba1d27635848cd49dbc6abffd398d2751db1231bf"
+url = "https://github.com/apple/pkl/releases/download/0.31.1/pkl-linux-amd64"
+
+[tools.pkl."platforms.macos-arm64"]
+checksum = "sha256:1b6a5438d9624cd2798a7530721bbbfa27ef72efe5c878a1b6c546c6e7ca0e8f"
+url = "https://github.com/apple/pkl/releases/download/0.31.1/pkl-macos-aarch64"
+
+[tools.pkl."platforms.macos-x64"]
+checksum = "sha256:22123ed4ae4c03afa8c54c69f77f0bec39b0fa0f67b09d6d148e0a376a2a471d"
+url = "https://github.com/apple/pkl/releases/download/0.31.1/pkl-macos-amd64"
+
+[tools.pkl."platforms.windows-x64"]
+checksum = "sha256:a8834481667325b44c539dbb758d7365a16389070f343c04b639bbe525ede013"
+url = "https://github.com/apple/pkl/releases/download/0.31.1/pkl-windows-amd64.exe"
+
+[[tools.ruby]]
+version = "4.0.5"
+backend = "core:ruby"
+
+[tools.ruby.options]
+compile = "false"
+precompiled_url = "jdx/ruby"
+ruby_build_repo = "https://github.com/rbenv/ruby-build.git"
+ruby_install = "false"
+
+[tools.ruby."platforms.linux-arm64"]
+checksum = "sha256:142cc75048232c19fedca2748f4882f5d40443eb3d3532dc65efab44e6107553"
+url = "https://github.com/jdx/ruby/releases/download/4.0.5-2/ruby-4.0.5.arm64_linux.tar.gz"
+provenance = "github-attestations"
+
+[tools.ruby."platforms.linux-arm64-musl"]
+checksum = "sha256:142cc75048232c19fedca2748f4882f5d40443eb3d3532dc65efab44e6107553"
+url = "https://github.com/jdx/ruby/releases/download/4.0.5-2/ruby-4.0.5.arm64_linux.tar.gz"
+provenance = "github-attestations"
+
+[tools.ruby."platforms.linux-x64"]
+checksum = "sha256:15a8cb9e40784fe3d2309e1bf30a8cb92932ec83513e93dc90d8b507608344a0"
+url = "https://github.com/jdx/ruby/releases/download/4.0.5-2/ruby-4.0.5.x86_64_linux.tar.gz"
+provenance = "github-attestations"
+
+[tools.ruby."platforms.linux-x64-musl"]
+checksum = "sha256:15a8cb9e40784fe3d2309e1bf30a8cb92932ec83513e93dc90d8b507608344a0"
+url = "https://github.com/jdx/ruby/releases/download/4.0.5-2/ruby-4.0.5.x86_64_linux.tar.gz"
+provenance = "github-attestations"
+
+[tools.ruby."platforms.macos-arm64"]
+checksum = "sha256:2ceac7dbfb7ce73e7efbf0198fb859c23144169af9bd417b3996c6176e60ae80"
+url = "https://github.com/jdx/ruby/releases/download/4.0.5-2/ruby-4.0.5.macos.tar.gz"
+provenance = "github-attestations"
+
+[tools.ruby."platforms.macos-x64"]
+checksum = "sha256:7d6149079a63f8ae1d326c9fa65c6019ba2dc3155eae7b39159817911c88958e"
+url = "https://cache.ruby-lang.org/pub/ruby/4.0/ruby-4.0.5.tar.gz"
+
+[[tools.ruby]]
+version = "4.0.5"
+backend = "core:ruby"
+
+[tools.ruby."platforms.windows-x64"]
+checksum = "sha256:74e31613fc71e6e23431dfc4d8b6ec2818a4dc1fd16e0983b074144c16719c8b"
+url = "https://github.com/oneclick/rubyinstaller2/releases/download/RubyInstaller-4.0.5-1/rubyinstaller-4.0.5-1-x64.7z"
+
+[[tools.yamlfmt]]
+version = "0.21.0"
+backend = "aqua:google/yamlfmt"
+
+[tools.yamlfmt."platforms.linux-arm64"]
+checksum = "sha256:5b2689c963b177271330c5ce8ca7396751107e5a826be46f03d2cb9b6f0c7784"
+url = "https://github.com/google/yamlfmt/releases/download/v0.21.0/yamlfmt_0.21.0_Linux_arm64.tar.gz"
+
+[tools.yamlfmt."platforms.linux-arm64-musl"]
+checksum = "sha256:5b2689c963b177271330c5ce8ca7396751107e5a826be46f03d2cb9b6f0c7784"
+url = "https://github.com/google/yamlfmt/releases/download/v0.21.0/yamlfmt_0.21.0_Linux_arm64.tar.gz"
+
+[tools.yamlfmt."platforms.linux-x64"]
+checksum = "sha256:1f300d9257b232bb3b541d7fb1b0e6b3c121bcbab381c86cd38cb8722be8a566"
+url = "https://github.com/google/yamlfmt/releases/download/v0.21.0/yamlfmt_0.21.0_Linux_x86_64.tar.gz"
+
+[tools.yamlfmt."platforms.linux-x64-musl"]
+checksum = "sha256:1f300d9257b232bb3b541d7fb1b0e6b3c121bcbab381c86cd38cb8722be8a566"
+url = "https://github.com/google/yamlfmt/releases/download/v0.21.0/yamlfmt_0.21.0_Linux_x86_64.tar.gz"
+
+[tools.yamlfmt."platforms.macos-arm64"]
+checksum = "sha256:4b417ecb94339d57e4c122ecc948c1a00fe328b5853266de9806e652a92858fa"
+url = "https://github.com/google/yamlfmt/releases/download/v0.21.0/yamlfmt_0.21.0_Darwin_arm64.tar.gz"
+
+[tools.yamlfmt."platforms.macos-x64"]
+checksum = "sha256:060e943bcb8583c456810eb1ff4721b4f46c4a0c1a4432449d5dc3bbfe29a22b"
+url = "https://github.com/google/yamlfmt/releases/download/v0.21.0/yamlfmt_0.21.0_Darwin_x86_64.tar.gz"
+
+[tools.yamlfmt."platforms.windows-x64"]
+checksum = "sha256:07f80ce5d741eb4b0a9380ac78a19c7cb5bd44e2a9a47a5a04839e3ba54dd463"
+url = "https://github.com/google/yamlfmt/releases/download/v0.21.0/yamlfmt_0.21.0_Windows_x86_64.tar.gz"

data/.mise/tasks/update-hk-import

@@ -0,0 +1,79 @@
+#!/usr/bin/env bash
+
+set -o errexit
+set -o nounset
+set -o pipefail
+
+if [[ "${TRACE:-}" == true || "${DEBUG:-}" == true ]]; then
+	set -o xtrace # Trace the execution of the script (debug)
+fi
+
+# Resolves to the calling script's name
+declare -r script_name="${0##*/}"
+
+function log_info() {
+	local -r message="${1:-}"
+	echo -e "[${script_name}] ${message}"
+}
+
+function log_error() {
+	local -r message="${1:-}"
+	echo -e "[${script_name}] ERROR: ${message}" >&2
+}
+
+function handle_error() {
+	local -ri exit_code=$?
+	local -r line_number="$1"
+
+	# Disable errexit so we don't fail inside the handler
+	set +o errexit
+
+	log_error "Command failed (exit $exit_code) at line $line_number: $BASH_COMMAND"
+	exit "${exit_code}"
+}
+trap 'handle_error ${LINENO}' ERR
+
+function now_utc() {
+	date -u +%Y%m%dT%H%M%SZ
+}
+
+function init() {
+	if [[ -n "${__COMMON_BASH_LOADED:-}" ]]; then
+		return 0
+	fi
+	__COMMON_BASH_LOADED=1
+
+	# Set project-specific environment variables
+	: "${PROJECT_ROOT:="$(cd "$(dirname "${BASH_SOURCE[0]}")/../.." && pwd)"}"
+	: "${BUILD_DIR:="${PROJECT_ROOT}/.build"}"
+	export PROJECT_ROOT BUILD_DIR
+}
+
+# Example import headers to be updated:
+# amends "package://github.com/jdx/hk/releases/download/v1.34.0/hk@1.34.0#/Config.pkl"
+# import "package://github.com/jdx/hk/releases/download/v1.34.0/hk@1.34.0#/Builtins.pkl"
+
+function main() {
+    init "$@"
+
+	local -r config_path="${PROJECT_ROOT}/hk.pkl"
+	if [[ ! -f "${config_path}" ]]; then
+		log_error "Config file not found: ${config_path}"
+		exit 1
+	fi
+
+	local -r hk_version="$(mise exec -- hk version | head -n 1)"
+
+	log_info "Updating hk imports in ${config_path} to version ${hk_version}"
+
+	local -r temp_path="$(mktemp)"
+	{
+		echo "amends \"package://github.com/jdx/hk/releases/download/v${hk_version}/hk@${hk_version}#/Config.pkl\""
+		echo "import \"package://github.com/jdx/hk/releases/download/v${hk_version}/hk@${hk_version}#/Builtins.pkl\""
+		tail -n +3 "${config_path}"
+	} >"${temp_path}"
+
+	mv "${temp_path}" "${config_path}"
+}
+
+main "$@"

data/.release-please-config.json

@@ -13,4 +13,4 @@
         }
     },
     "$schema": "https://raw.githubusercontent.com/googleapis/release-please/main/schemas/config.json"
-}
+}

data/.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-    ".": "0.1.2"
-}
+    ".": "0.1.3"
+}

data/CHANGELOG.md

@@ -1,5 +1,12 @@
 ## [Unreleased]
 
+## [0.1.3](https://github.com/meaganewaller/diogenes/compare/diogenes/v0.1.2...diogenes/v0.1.3) (2026-06-27)
+
+
+### Features
+
+* introduce Diogenes CLI with initialization and command structure ([e4d5f82](https://github.com/meaganewaller/diogenes/commit/e4d5f8201c83b54f03c7d7b722e26e0d47c70cb0))
+
 ## [0.1.2](https://github.com/meaganewaller/diogenes/compare/diogenes/v0.1.1...diogenes/v0.1.2) (2026-06-27)
 
 

data/CLAUDE.md

@@ -1,138 +1,146 @@
-# Diogenes — Claude Context
+# Diogenes — Claude Instructions
 
-This file provides context for working in the Diogenes codebase. Read it before making changes.
+> This file is generated by `diogenes build --target claude-code`.
+> Edit the source in `.diogenes/` and rebuild. Do not edit this file directly.
 
 ---
 
-## What This Gem Does
+## What This Gem Is
 
-Diogenes is a responsible AI accountability layer for Rails applications. It has five distinct responsibilities:
+Diogenes is a Ruby gem with two surfaces:
 
-1. **Gate enforcement** — declaring and validating constraints on AI features at boot
-2. **Grounding verification** — actively checking that AI output is supported by retrieved context
-3. **Drift detection** — tracking when indexed documents go stale relative to their sources
-4. **Eval running** — testing AI features against golden pairs on a schedule, alerting on regression
-5. **Dashboard** — surfacing all of the above in a mounted Rails engine
+**CLI / Build Tool** — Takes a canonical `.diogenes/` source (skills, rules, hooks, artifacts defined in a Ruby DSL) and builds agent-specific configuration files for Claude Code, Cursor, Copilot, Codex, Gemini, and other agents. One source of truth, many targets.
 
-It is not a RAG toolkit, not an LLM client wrapper, and not a general observability tool. Every feature should serve one of those five responsibilities.
+**Runtime Library** — A `Diogenes::Gated` module you include in Ruby classes that touch AI. It enforces a five-gate decision framework at class load time (loud in development, graceful in production) and provides RSpec/Minitest matchers so gate decisions live in the test suite.
+
+The gem is grounded in a decision framework for AI features derived from Ruby's core principles: least surprise, programmer happiness, and human-centered design.
 
 ---
 
-## Architecture
+## Codebase Map
 
-```
+```text
 lib/
-  diogenes/
-    feature.rb              # Main module; DSL entry point for gate declarations
-    gates/
-      base.rb               # Abstract gate interface
-      failure_mode.rb
-      user_calibration.rb
-      human_in_loop.rb
-      observability.rb
-      necessity.rb
-      compatibility.rb      # Cross-gate incompatibility matrix
-    grounding/
-      verifier.rb           # Second-pass LLM grounding check
-      result.rb             # Structured grounding result (supported/unsupported/contradicted)
-      prompt.rb             # The verifier prompt; versioned separately
-    drift/
-      tracker.rb            # Source update ingestion and staleness calculation
-      staleness_score.rb    # Scoring logic; separate from storage
-      reindex_job.rb        # Base job class; host app subclasses with embedding logic
-    evals/
-      runner.rb             # Executes eval suites against live features
-      suite.rb              # DSL for defining golden pairs
-      matchers.rb           # grounded_in, contains, semantically_similar_to, etc.
-      result.rb             # Per-run result with pass/fail per eval
-      regression.rb         # Regression detection and diffing
-    audit/
-      log.rb                # Audit record creation and querying
-      record.rb             # Plain Ruby struct; no ActiveRecord dependency
-    review/
-      queue.rb              # Human review queue logic; framework-agnostic
-    engine.rb               # Rails engine; only loaded when Rails is present
-    configuration.rb        # Diogenes.configure block
-    errors.rb               # UnsafeFeatureError and friends
+├── diogenes.rb                  # entry point, autoloads, top-level configure block
+├── diogenes/
+│   ├── cli/                     # Thor-based CLI commands
+│   │   ├── init.rb              # diogenes init
+│   │   ├── build.rb             # diogenes build
+│   │   ├── evaluate.rb          # diogenes evaluate (interactive)
+│   │   └── validate.rb          # diogenes validate
+│   ├── dsl/                     # source format DSL
+│   │   ├── skill.rb             # Diogenes.skill { ... }
+│   │   ├── rule.rb              # Diogenes.rule { ... }
+│   │   ├── hook.rb              # Diogenes.hook { ... }
+│   │   └── artifact.rb          # Diogenes.artifact { ... }
+│   ├── gates/                   # one file per gate
+│   │   ├── base.rb              # shared validation interface
+│   │   ├── failure_mode.rb      # Gate 1
+│   │   ├── user_verifiable.rb   # Gate 2
+│   │   ├── human_in_loop.rb     # Gate 3
+│   │   ├── observability.rb     # Gate 4
+│   │   └── right_tool.rb        # Gate 5
+│   ├── targets/                 # one file per agent target
+│   │   ├── base.rb              # shared emit interface
+│   │   ├── claude_code.rb       # .claude/ + CLAUDE.md
+│   │   ├── cursor.rb            # .cursor/rules/
+│   │   ├── copilot.rb           # .github/copilot-instructions.md
+│   │   ├── codex.rb             # codex-instructions.md + tools.json
+│   │   └── gemini.rb            # .gemini/instructions.md
+│   ├── runtime/                 # the Gated module and GateResult
+│   │   ├── gated.rb             # include Diogenes::Gated
+│   │   ├── gate_result.rb       # structured pass/fail response
+│   │   └── environment.rb       # development vs production behaviour
+│   └── rspec/                   # RSpec matchers
+│       └── matchers.rb          # have_gate, pass_gate, fail_gate
+spec/                            # mirrors lib/
+exe/
+└── diogenes                     # CLI entry point
+.diogenes/                       # this gem's own canonical source
 ```
 
-### Engine (Dashboard)
+---
 
-```
-lib/diogenes/engine/
-  app/
-    controllers/diogenes/
-      dashboard_controller.rb
-      dashboard/
-        grounding_controller.rb
-        drift_controller.rb
-        evals_controller.rb
-    views/diogenes/dashboard/
-      overview.html.erb
-      grounding/
-      drift/
-      evals/
-    assets/
-      diogenes.css          # Minimal; no framework dependency
-  config/
-    routes.rb
-  db/
-    migrate/                # Audit log, drift tracking, eval results tables
-```
+## Key Conventions
+
+**Error messages are human.** When a gate fails or a configuration is invalid, the message should say what happened, why it matters, and what to do instead. Not just what went wrong — what to do about it.
+
+**Development is loud, production is graceful.** Gate failures raise in development (`Diogenes::GateFailed`), return a `GateResult` in production. Environment is detected via `Rails.env` if present, otherwise `ENV["DIOGENES_ENV"]`.
+
+**The DSL is the source of truth.** Nothing in `lib/` should have an opinion about what format a particular agent uses. Targets do the translation. Gates do the validation. The DSL holds the intent.
+
+**Agent-agnostic means agent-agnostic.** When working on a target, resist any temptation to leak target-specific concepts into the DSL or gates. A skill is a skill. A rule is a rule. The target decides what to do with them.
 
 ---
 
-## Key Decisions and Why
+## Available Skills
 
-**Gates are boot-time, not runtime.** Misconfiguration should be caught before anything reaches production. Runtime gate checks sound useful but create a false sense of safety — a feature that fails a gate at runtime has already been partially executed.
+Use these commands in any Claude session while working on this gem:
 
-**No LLM dependency in core.** The grounding verifier accepts any callable. This avoids version conflicts and keeps Diogenes focused on accountability rather than API clients.
+### `/evaluate-feature <description>`
 
-**Grounding verification has a versioned prompt.** `grounding/prompt.rb` is versioned separately from the verifier logic. When the prompt changes, old audit records remain interpretable because they store the prompt version used.
+Walk a proposed gem feature through the five Diogenes gates. Yes, the gem evaluates itself. Produces a decision record you should commit alongside the PR.
 
-**The necessity gate is intentionally soft.** It requires documentation but enforces nothing programmatically. Some constraints are better enforced by code review and culture. The necessity gate creates a paper trail.
+*Use when:* You're about to build something new and want to check it against the framework before writing code.
 
-**Audit records are structs, not ActiveRecord.** The core audit layer has no database dependency. The engine provides an ActiveRecord-backed persistence layer, but the host app can substitute any store that accepts the struct.
+### `/new-target <agent-name>`
 
-**Drift detection is passive by default.** Diogenes doesn't poll source documents or crawl file systems. The host app informs Diogenes when sources change via `Diogenes::Drift.source_updated`. Active polling is opt-in and configured via `config.drift.check_interval`.
+Scaffold a new build target. Generates `lib/diogenes/targets/<name>.rb`, the corresponding spec file, and a stub entry in `docs/targets.md`.
 
-**Eval golden pairs live in code, not in a database.** They are version-controlled, reviewed in PRs, and treated as tests. Storing them in the database would make them invisible to code review and prone to silent modification.
+*Use when:* Adding support for a new agent.
 
-**The dashboard has no authentication.** Authentication is the host app's concern. The engine documents patterns for common setups but enforces nothing.
+### `/review-philosophy`
 
----
+Review the current working context (open files, recent changes) for alignment with Diogenes' principles. Flags anything that feels like scope creep, API surface bloat, or a violation of the "agent-agnostic source" rule.
+
+*Use when:* You've been in the weeds for a while and want a sanity check.
+
+### `/generate-stories <feature description>`
+
+Draft user stories with acceptance criteria for a proposed feature, scoped to the demo or the full roadmap depending on what you specify.
 
-## Conventions
+*Use when:* Scoping new work before opening a PR.
 
-- Gates inherit from `Diogenes::Gates::Base` and implement `#valid?` and `#failure_message`
-- Failure messages always include the feature class name, the gate name, and a plain-English instruction for what to change — not what went wrong
-- Errors raised by Diogenes are never rescued internally — they propagate to the host app
-- Audit records never store raw query or response content — only hashes and structured metadata
-- All public-facing configuration goes through `Diogenes.configure`; no environment variable reading inside lib/
-- The engine and all ActiveRecord code lives under `lib/diogenes/engine/` and is never required by the core
+### `/gate-schema <gate-name> <option-name>`
+
+Help design the schema and validation logic for a new gate option. Asks targeted questions about what passes, what fails, and what the failure message should say.
+
+*Use when:* Adding new options to an existing gate.
 
 ---
 
-## Testing Approach
+## Active Rules
+
+These apply to every session working on this gem:
+
+**Stay agent-agnostic.** The `.diogenes/` DSL and the gate framework should never reference Claude, Cursor, or any specific agent. Targets handle translation. If you find yourself writing agent-specific logic outside a target file, stop.
+
+**The gates are not a checklist to game.** When evaluating proposed features with `/evaluate-feature`, engage honestly with each gate. A gate failure is information, not an obstacle.
+
+**Prefer explicit Ruby over clever Ruby.** This gem will be read by contributors who are encountering it for the first time. Clarity beats elegance. The person debugging this at midnight should understand it without context.
 
-- Gate logic is unit tested in isolation without Rails
-- The grounding verifier has a stub: `Diogenes::Grounding::Verifier.stub(result: :pass)`
-- Drift tracker tests use fixed timestamps; never `Time.now` directly
-- Eval matchers are tested against fixture responses, not live LLM calls
-- The engine is tested with a minimal Rails app in `spec/dummy/`
-- `Diogenes::TestMode` disables gate enforcement while still recording gate declarations — use in specs that test the host app's AI features, not Diogenes itself
+**Gate failure messages are first-class.** When you write or modify a gate, the failure message is as important as the validation logic. Draft it first. It should sound like a thoughtful colleague pointing something out, not a compiler.
 
-Never silence a Diogenes error in a test. If a gate is raising, fix the configuration.
+**Tests are not optional.** Every gate option, every target, every CLI command needs tests. If you're uncertain what to test, that uncertainty is a sign the API needs clarification, not that tests can be skipped.
 
 ---
 
-## What Not to Build Here
+## Running the Gem Locally
 
-- LLM client integrations for any specific provider
-- A RAG pipeline or embedding implementation
-- General observability tooling unrelated to AI feature health
-- Anything that makes a gate failure non-fatal
-- Database-backed golden pairs for the eval runner
-- Authentication for the dashboard
+```bash
+bundle exec exe/diogenes --help
+bundle exec exe/diogenes init
+bundle exec exe/diogenes evaluate "some feature idea"
+bundle exec exe/diogenes build --all
+bundle exec rspec
+```
+
+---
 
-If a feature request requires Diogenes to know about a specific LLM provider, vendor API, or embedding model, it belongs in the host app.
+## Rebuilding This File
+
+This file was generated from `.diogenes/`. To regenerate after source changes:
+
+```bash
+bundle exec exe/diogenes build --target claude-code
+```