@afokapu/atdd-bun 0.7.2 → 0.8.1

package/integrity.json

@@ -1,9 +1,9 @@
 {
-  "version": "0.7.2",
+  "version": "0.8.1",
   "files": {
     "HOOK_AUDIT.md": "5329d840db37671b1918f688ead26865473b87db73dbc75f7c8b2a8bbe8d6d43",
     "PLANNER_PORT.md": "fb5935bac8b7ac18994de21e43ace3a5ef8cd55f85b0e3349fca261280054f11",
-    "README.md": "4e612f6344fab29c38269ce0303b73c32f75911dfef16a3acefe382f068329a3",
+    "README.md": "e39b94cf795cd3b50b9ee88283beaef1e4d73568a5da2cf2959ea02a98d97afb",
     "bunfig.toml": "b9fc65eca9014c5179380259d70e76385a6a80788fa9a2df5fb3eaa5554fd2fe",
     "conventions/atdd-bun.planner/atdd-bun.planner.acceptance-identity.convention.yaml": "81c5c773d5ee15e8d99a2c237aa9846b110b2533df45ebf407d0e3ec6ed3dd03",
     "conventions/atdd-bun.planner/atdd-bun.planner.identity-required.convention.yaml": "e96d7c1455d0c221072d82e7f2b55da1c4f9ceb17718eb6ed96affdeef37675b",
@@ -91,6 +91,14 @@
     "conventions/coder.htmx/coder.htmx.verb-endpoint-is-routed.convention.yaml": "d6aa58d35df4b7ebbcf675ca79f0177d64e56f095802b9a3eaae3e4befb5c270",
     "conventions/coder.htmx/coder.htmx.verb-endpoint-same-origin.convention.yaml": "2128d26153e2d1f19c65a1e1665d4f82c78395daedb336d6ef1256e82b74aedb",
     "conventions/coder.htmx/coder.htmx.verb-mutation-signals-progress.convention.yaml": "ae85c5ea01a09a3c41b939988088a8e5da91848d2710a1f0a1e0c86308638ac9",
+    "conventions/delivery/delivery.approved-sha-resolves.convention.yaml": "8bad8a0fdb28c4dc5f22b8949c8113eec4cc7b18b18af8c12ead5e3e320384ac",
+    "conventions/delivery/delivery.config-schema.convention.yaml": "da60ccaed20fb8c77eb8adeb2999158ac3790c6bd28f2e2b2f69e75badbc34fa",
+    "conventions/delivery/delivery.evidence-schema.convention.yaml": "ecd838a69c53a84018bfc937dce5a80877f5251172b498e418e7d1d3db46ea43",
+    "conventions/delivery/delivery.findings-resolved.convention.yaml": "f6574e93a9a2d4bdd6d6f5645720b1a647fc0048d95f7675fe783d2ddb62c05b",
+    "conventions/delivery/delivery.merge-gate.convention.yaml": "dab8c893999d13798d99a9b3ecd350f47de651365bc9d05b9be57a87aecf84ce",
+    "conventions/delivery/delivery.model-allowed.convention.yaml": "0476fb4a00dfdfbc16ac3c5843d7796d03e9d7c3ebd2c898eddb47160ac2fcdb",
+    "conventions/delivery/delivery.reviewer-independent.convention.yaml": "f3388fe27a0b50549c913ab56a3afda7b70e54f8d0c32146ff59bd9da76afcfc",
+    "conventions/delivery/delivery.stages-complete.convention.yaml": "1fd8c0a57e8ee2f91104088c25ee2000fb83e15b58a0cc5c432b37fa0457d056",
     "conventions/planner.docs/planner.docs.adr-registry-derived.convention.yaml": "0ea4232beba90280c664f93d097cafa44c67c2919c1468d4823fdc9e686aa5d2",
     "conventions/planner.docs/planner.docs.area-index-required.convention.yaml": "fd931e9f225bfbb5e78436d0d8a2a89cc0f5114493579962c72dd971301becce",
     "conventions/planner.docs/planner.docs.artifact-path-shape.convention.yaml": "a9f6178d29abe9385342a46a2c57470a3631aaf5e26f01e3660b7088b042418e",
@@ -654,6 +662,15 @@
     "detectors/bun_ts_metrics_detector/fixtures/dirty/orphan.ts": "0f7acd0dffe90902a0a43cc45771b8a473d079efc9693112b3b85645c191c23d",
     "detectors/bun_ts_metrics_detector/fixtures/dirty/typed.ts": "7c27ee1a674af7d5b2cce3a65bfec2111602d84a75817fd60f737c7d63fc9c83",
     "detectors/bun_ts_metrics_detector/ts_metrics.mjs": "6fe397d634e05a0c9605dcefcec53a5736eab4bcc5c45adec55fb8a3de9b3c6d",
+    "detectors/delivery_evidence/atdd.implementation.yaml": "2f6fc30dc353bef97bcb32ea54e4317d3c87cbd7ae1443fcef2aefc46280dc09",
+    "detectors/delivery_evidence/detect.mjs": "e98664dee8090a0b280cd285a54e9a6fb9ba3572af2666b4e3656ca5b0555509",
+    "detectors/delivery_evidence/fixtures/clean/atdd-bun.yaml": "f701861e3530bb5a25a70d73e248549fb96642f48db1ff4d3e8e4546aaa825ee",
+    "detectors/delivery_evidence/fixtures/clean/delivery/api/evidence.yaml": "2cdbc4f628cf2d56627e6692b1f4e1a9b72316a3b7d09b47fffcd54c696a0fcb",
+    "detectors/delivery_evidence/fixtures/dirty/atdd-bun.yaml": "85c572d65f27b11b7ff8f115883913b2d2f1978097c416d3341b9c9d0de373d4",
+    "detectors/delivery_evidence/fixtures/dirty/delivery/api/evidence.yaml": "2b848f160a401a217f56d53d87ce8e0a0efc0ed6d3781f6cc746e384c93eb8cc",
+    "detectors/delivery_evidence/fixtures/dirty/delivery/data/evidence.yaml": "165dd67ff64f14c30268de5b18bf0c9c6634fb9ca48439c660c1962cebe3e0cb",
+    "detectors/delivery_evidence/fixtures/dirty/delivery/orphan/README.md": "7d480b1fff6546615e55d866784bc2267d06d0221dfde8d0ba0353fa1ea0db9a",
+    "detectors/delivery_evidence/fixtures/dirty/delivery/ui/evidence.yaml": "777b4f7921e302dfce79cd764bba8b44091ac9c7ee04a00f5dbb663342ec68a0",
     "detectors/htmx_e2e_detector/atdd.implementation.yaml": "454bb123039d57c992d27d9274e20fa3452ac41a237eb55471be62a4bcfebf06",
     "detectors/htmx_e2e_detector/checks/_e2e.mjs": "4e3605500ac232603083790c3984de5c828028c60eef366b26aba18d38fce30b",
     "detectors/htmx_e2e_detector/checks/_map.json": "94dec08ff4764cd6a3dba139f12a7c984292e95a9354b0cdaa0ce9d4180e2c89",
@@ -1155,6 +1172,8 @@
     "planner-schemas/binding-lock.schema.json": "f2455606702f45fafa194549126d4a66e6c286ba1c4ba9e6bdcf932286a6d34d",
     "planner-schemas/component.schema.json": "d20d3502c155627a120cb10d5e9bdec4ba2c73af9c3e9a9d10e3c351f167c72a",
     "planner-schemas/contract-registry.schema.json": "b9dbaf6c87d4f4d676e3b4251344b9eada523b1c5e739c0423cabe267012c12e",
+    "planner-schemas/delivery-config.schema.json": "34e46c305b85340844086e60b2f5cbc1105ecc03ca63e5f9e494eff62353d30d",
+    "planner-schemas/delivery-evidence.schema.json": "9b084eb73752d5637ba1d429f3709f8795cc2860c21c0b9bd58751b9887b001c",
     "planner-schemas/feature.schema.json": "eb4aa40d89067ae5c86a079bb3d8e4f45c8727f9e15db2b86c08dacf8e4ae56a",
     "planner-schemas/journey.schema.json": "1ff705bcf89a2823cf60c9e1597e254f97844e7a74dc58299d53192ad2c9f8c3",
     "planner-schemas/registry-index.schema.json": "ffd5643da662ced4052707eeb270eb02908f2e48365103ff0638ec7ba146f430",
@@ -1167,28 +1186,31 @@
     "planner-schemas/train.schema.json": "d6fbac9067c1bffeb84eb79a71228441055af6e6e7ba141dd4e0bcb079345ec0",
     "planner-schemas/wagon.schema.json": "57b98f1ade998d745538eb3d72fb3014a50042006870f90bce47028eea336eb4",
     "planner-schemas/wmbt.schema.json": "7a3a5693bfcf01340667c2be4a3c48e74f34b1af7e8dc13372c0de06b7f4fe12",
-    "relationships.yaml": "5a183ce8e30df351d5e9d25cbc7a0468cd915daf47537ed6a3c8a0f27c1c1a1e",
-    "src/agent.ts": "dfbd20cbd5958cc59aca94bd06d21ff5062f71820226230fac1c1d3ff34f29d5",
-    "src/ci.ts": "899125ec76d14f7d0126a5db2249913e373e3a325cbc98d7f053e1351bdf47af",
+    "relationships.yaml": "a996da48da310c2fb2503e75470cdec77c850387b7e441b011acff56550b695b",
+    "src/agent.ts": "b2015873940ca83bb8fdc683dbb85c2d53fe6f8c3e2b6b0b71bda895f0c1eb2f",
+    "src/ci.ts": "67e54d2cbfc44a9e42837d5e750af526d6255c539d3c452a4d5fca3226c0d9ac",
     "src/cli.ts": "bb2047cee60f48bfe3eaee4c1b3dcd3538a0e1edc170cf58e87686117bea07a7",
+    "src/delivery.ts": "7962144972ae1f853a25cd88cf0cb7d4bca247b1193cd5eb33acc1ef272072cb",
     "src/docs-capability.ts": "0feae94b7697dd53d8a457b24765e81fcf804c774f0cc4b6035cb3da822e486a",
-    "src/enforce.ts": "d7232331c9f0fdd150f2ca4bbf1bd2e877de111c684d46b690fd7acdae59f39c",
+    "src/enforce.ts": "58ad0593895912bdc1effe97430b07acf8cda066052397957558cbb331c16778",
     "src/hooks.ts": "adbb72f7a83f53d596fd217f01f4ce32c5a59a23ab81993fed226fb96fd1cbd1",
-    "src/index.ts": "b3cc97f9867bd605aefa95650a6b8b773e32e6e52e58792d0dbf6736dd3406be",
-    "src/integrity.ts": "c1ef78d93f418f50b15178de939c21e480ed49420c003d75e1c344ecbb95ce5b",
+    "src/index.ts": "8ee4d7716794f6990ae8580e471b98256a0d0223dad063cd3b4542e598b6e744",
+    "src/integrity.ts": "7cbb1ad4991079a4852d2d131c0769f66e13dc8b5fa0e637780a1b70a75eaf78",
     "src/journey-docs.ts": "994d229376244c84212cff951032823068a76565dd2fd427b9d44e341bd14853",
     "src/planner-kernel.ts": "5d3f5305fb59becb2cc97d8a03aca6b104f385805d91cc0410856e289dd6fbb1",
     "src/planner-schema-validator.ts": "ce529c0936171075e93c7539b3655fe895a98dd2973ebda5775958e6ebc316d9",
     "src/planner-validators.ts": "99adeb65f579af923c11f21a8f55cfb9993b007fd8df59c5f764696b55379cfc",
     "src/register.ts": "6a2f1c6b8df0dc9c8f45df8ec9fac2be29044e048b08c8ffe423410e94dadedd",
     "src/release.ts": "7b0fe444ee81f476f53b9c21b6c347ef588ee616c60211419cf984132be768ba",
-    "src/setup.ts": "8e69ffc4f49ad7240243728db3c0c495d2c4d66f04652cd735a0a90c79ca4246",
+    "src/setup.ts": "04fe6dc4618c14b93580f36d9775b7deca2082b8cc4efab7668795053b7d8dd0",
     "src/telemetry-plan.ts": "cdb1e8bfff414f3ea81977388973da2cf6d89567d9e060dc9d5989a33600f153",
     "src/topology.ts": "9779ee48e1c453abb76363163d4ab363463fa14e359571139f6d1f1fcc51ae2c",
-    "templates/agents/AGENTS.block.md": "c45d831e57976b874d2a6dc6e5e929b6e9ea3f928fe8c6683c2bab71676817c7",
+    "templates/agents/AGENTS.block.md": "7e9687b1eff245b66da4127b336a9e20af2f5fa273e08895188c0a0dffebd77d",
     "templates/agents/atdd-bun.integrity.test.ts": "dec6f6e5f65a08d9512fc703b367c163f8c9da1f6aa7fd466835c1ec30348a41",
     "templates/agents/atdd/SKILL.md": "b621abe22851a75b30fc0e6c339a2c0a3ed6bbf78b8c17000a4ce301e05df96d",
+    "templates/agents/delivery/SKILL.md": "72c279fba45c867d0a5b5e02f34dcba89efe06dfc9230c7aad501d2ae3629c35",
+    "templates/agents/delivery/review.md": "289ee5d55ba0f321e5703a6fd8d5417d55bf0d9c6dc3103ea0f79af11c159d9c",
     "templates/github/atdd-bun-release.yml": "d9547e9e6ef3ae010d53d55314f6a54567f88bd900f7e50d994cd308601d2684",
-    "templates/github/atdd-bun.yml": "b54fe01661e7141ae70b6db881a4870c4a09c11b1be29ed8364ace35dc4e0564"
+    "templates/github/atdd-bun.yml": "bb42414f72f4b9a2fb1eb69530695e193f105a984542f4ca124c898a5f1489be"
   }
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@afokapu/atdd-bun",
-  "version": "0.7.2",
+  "version": "0.8.1",
   "repository": {
     "type": "git",
     "url": "git+https://github.com/afokapu/atdd-bun.git"

package/planner-schemas/delivery-config.schema.json

@@ -0,0 +1,80 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Delivery Profile Configuration",
+  "description": "The `delivery:` block of atdd-bun.yaml: which models may author and review each lifecycle stage, in preference order, how independent a reviewer must be, and when a model counts as unavailable. Every key is optional; an omitted key takes the package default (src/delivery.ts). `stages`, when given, replaces the default stage set: a stage it omits is not required.",
+  "$comment": "Shipped by the delivery profile (delivery_evidence). Cross-field checks (a reviewer listed twice, a stage override naming an unknown mode) are schema-level; loosening against the base branch is judged by the integrity check.",
+  "type": "object",
+  "additionalProperties": false,
+  "properties": {
+    "root": {
+      "type": "string",
+      "pattern": "^[a-z0-9_][a-z0-9_.-]*(?:/[a-z0-9_][a-z0-9_.-]*)*$",
+      "description": "Repository-relative folder holding one <tranche>/evidence.yaml per tranche, in canonical form: no leading, trailing or doubled slash, no dot segments. Default: delivery. Changing it after adoption is a loosening the integrity check reports."
+    },
+    "require_record": {
+      "type": "boolean",
+      "description": "At the gate, a change outside the delivery root needs a tranche record in the same change. Default: true; turning it off is a loosening."
+    },
+    "multiplexer": {
+      "type": "string",
+      "pattern": "^[a-z][a-z0-9-]*$",
+      "description": "The terminal multiplexer the coordinator drives agents through, named by its command. Default: herdr. Any other name is accepted; the agent learns its commands from the multiplexer's own help."
+    },
+    "independence": { "$ref": "#/definitions/independence" },
+    "stages": {
+      "type": "object",
+      "additionalProperties": false,
+      "minProperties": 1,
+      "properties": {
+        "plan_review": { "$ref": "#/definitions/stage" },
+        "test_review": { "$ref": "#/definitions/stage" },
+        "code_review": { "$ref": "#/definitions/stage" },
+        "final_review": { "$ref": "#/definitions/stage" }
+      }
+    },
+    "fallback": {
+      "type": "object",
+      "additionalProperties": false,
+      "properties": {
+        "after_failures": { "type": "integer", "minimum": 1, "description": "Failures (outage, rate limit, no auditable report) before a model counts as unavailable. A REQUEST CHANGES verdict is never a failure." },
+        "within_minutes": { "type": "integer", "minimum": 1 },
+        "when_exhausted": { "enum": ["block", "wait"], "description": "block: the tranche emits BLOCKED provider-unavailable and the coordinator reassigns the slot. wait: the driver keeps retrying the last model in the list." }
+      }
+    },
+    "commands": {
+      "type": "object",
+      "description": "Headless invocation per model, overriding the skill's built-in defaults. {prompt} and {worktree} are substituted by the driver. Adding or changing an entry after adoption is a loosening the integrity check reports; removing one returns to the default.",
+      "additionalProperties": {
+        "type": "object",
+        "additionalProperties": false,
+        "properties": {
+          "author": { "type": "string", "minLength": 1 },
+          "review": { "type": "string", "minLength": 1 }
+        }
+      }
+    }
+  },
+  "definitions": {
+    "independence": {
+      "enum": ["fresh-process", "different-model"],
+      "description": "fresh-process: the reviewer is a new process that authored nothing in the tranche. different-model: additionally, the reviewer's model differs from the stage author's."
+    },
+    "models": {
+      "type": "array",
+      "minItems": 1,
+      "uniqueItems": true,
+      "items": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+      "description": "Models in preference order: the first is used normally, each later one only as a recorded fallback."
+    },
+    "stage": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["reviewers"],
+      "properties": {
+        "authors": { "$ref": "#/definitions/models" },
+        "reviewers": { "$ref": "#/definitions/models" },
+        "independence": { "$ref": "#/definitions/independence" }
+      }
+    }
+  }
+}

package/planner-schemas/delivery-evidence.schema.json

@@ -0,0 +1,84 @@
+{
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Delivery Evidence Schema",
+  "description": "Validates one <delivery root>/<tranche>/evidence.yaml: the record a tranche leaves of its reviews. Local shape only: stage completeness, allowed models and fallbacks, reviewer independence, finding outcomes and SHA resolution are cross-field validator concerns (src/delivery.ts).",
+  "$comment": "Shipped by the delivery profile (delivery_evidence). `reviews` is chronological: a repair loop appends a new entry for the same stage rather than editing the earlier one.",
+  "type": "object",
+  "required": ["tranche", "status", "reviews"],
+  "additionalProperties": false,
+  "properties": {
+    "tranche": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$", "description": "Must equal the tranche folder name." },
+    "status": { "enum": ["open", "ready"], "description": "open: the lifecycle is in progress. ready: every configured stage is approved and approved_sha is the commit to merge." },
+    "base_sha": { "$ref": "#/definitions/sha", "$comment": "Informational: the commit the tranche started from. Not checked; the gate derives its range from Git." },
+    "approved_sha": { "$ref": "#/definitions/sha" },
+    "pr": { "type": "string", "minLength": 1, "$comment": "Informational: the pull request URL. Not checked." },
+    "reviews": { "type": "array", "items": { "$ref": "#/definitions/review" } }
+  },
+  "if": { "required": ["status"], "properties": { "status": { "const": "ready" } } },
+  "then": { "required": ["approved_sha"] },
+  "definitions": {
+    "sha": { "type": "string", "pattern": "^[0-9a-f]{7,40}$" },
+    "actor": {
+      "type": "object",
+      "required": ["model", "run"],
+      "additionalProperties": false,
+      "properties": {
+        "model": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+        "run": { "type": "string", "minLength": 1, "description": "Identifies the process: a session id, a pane id plus start time, or the report file. Two entries with the same run are the same process." }
+      }
+    },
+    "fallback": {
+      "type": "object",
+      "required": ["from", "kind", "failures", "window", "reason"],
+      "additionalProperties": false,
+      "properties": {
+        "role": { "enum": ["author", "reviewer"], "description": "Which actor fell back. Default: reviewer." },
+        "from": { "type": "string", "pattern": "^[a-z][a-z0-9-]*$" },
+        "kind": { "enum": ["outage", "rate_limit", "no_report", "timeout"], "description": "Why the model counts as unavailable. A verdict is never one of these." },
+        "failures": { "type": "integer", "minimum": 1, "description": "Failures observed before falling back; at least delivery.fallback.after_failures." },
+        "window": {
+          "type": "object",
+          "required": ["from", "to"],
+          "additionalProperties": false,
+          "description": "When the first and last counted failures happened; the span is at most delivery.fallback.within_minutes.",
+          "properties": { "from": { "type": "string", "format": "date-time" }, "to": { "type": "string", "format": "date-time" } }
+        },
+        "reason": { "type": "string", "minLength": 10, "description": "Why the preferred model was unavailable: outage, rate limit, or no auditable report. Never a verdict." }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "required": ["id", "severity", "evidence", "invariant", "proposed_fix"],
+      "additionalProperties": false,
+      "properties": {
+        "id": { "type": "string", "pattern": "^[A-Za-z0-9][A-Za-z0-9._-]*$", "description": "Stable across re-reviews, so an upheld finding keeps its id." },
+        "severity": { "enum": ["critical", "high", "medium", "low"] },
+        "evidence": { "type": "string", "minLength": 5, "description": "Concrete: file:line, a failing command, a counter-example." },
+        "invariant": { "type": "string", "minLength": 5 },
+        "affects": { "type": "array", "items": { "type": "string", "minLength": 1 } },
+        "proposed_fix": { "type": "string", "minLength": 5, "description": "A precise correction for the author to apply; the reviewer never applies it." },
+        "rebuttal": { "type": "string", "minLength": 20, "description": "The author's written dispute, with evidence. One round only." },
+        "outcome": { "enum": ["fixed", "withdrawn", "human"] },
+        "decision": { "type": "string", "minLength": 5, "description": "The human's ruling when outcome is human." }
+      }
+    },
+    "review": {
+      "type": "object",
+      "required": ["stage", "sha", "reviewer", "verdict", "checked"],
+      "additionalProperties": false,
+      "properties": {
+        "stage": { "enum": ["plan_review", "test_review", "code_review", "final_review"] },
+        "sha": { "$ref": "#/definitions/sha" },
+        "author": { "$ref": "#/definitions/actor" },
+        "reviewer": { "$ref": "#/definitions/actor" },
+        "fallback": { "type": "array", "items": { "$ref": "#/definitions/fallback" } },
+        "verdict": { "enum": ["approve", "request_changes"] },
+        "checked": { "type": "array", "minItems": 1, "items": { "type": "string", "minLength": 1 }, "description": "Everything the reviewer went through, not only what failed." },
+        "findings": { "type": "array", "items": { "$ref": "#/definitions/finding" } },
+        "report": { "type": "string", "minLength": 1, "description": "Path of the retained raw reviewer output, inside the tranche's folder." }
+      },
+      "if": { "required": ["verdict"], "properties": { "verdict": { "const": "request_changes" } } },
+      "then": { "required": ["findings"], "properties": { "findings": { "minItems": 1 } } }
+    }
+  }
+}

package/relationships.yaml

@@ -94,6 +94,14 @@ nodes:
   - coder.htmx.verb-endpoint-is-routed
   - coder.htmx.verb-endpoint-same-origin
   - coder.htmx.verb-mutation-signals-progress
+  - delivery.approved-sha-resolves
+  - delivery.config-schema
+  - delivery.evidence-schema
+  - delivery.findings-resolved
+  - delivery.merge-gate
+  - delivery.model-allowed
+  - delivery.reviewer-independent
+  - delivery.stages-complete
   - planner.acceptance.abstract-fields-required
   - planner.acceptance.authoring-guidelines
   - planner.acceptance.boundary-kind-vocabulary
@@ -5186,3 +5194,93 @@ edges:
     target_ref: planner.telemetry.tracking-plan-schema
     type: requires
     origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: finish_to_start
+    reason: evidence is judged against the stages the policy configures
+    source_ref: delivery.evidence-schema
+    strength: important
+    target_ref: delivery.config-schema
+    type: requires
+    origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: finish_to_start
+    reason: allowed models and their preference order come from the policy
+    source_ref: delivery.model-allowed
+    strength: important
+    target_ref: delivery.config-schema
+    type: requires
+    origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: finish_to_start
+    reason: models are read from a well-formed review entry
+    source_ref: delivery.model-allowed
+    strength: important
+    target_ref: delivery.evidence-schema
+    type: requires
+    origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: finish_to_start
+    reason: independence is judged over the author and reviewer runs the record names
+    source_ref: delivery.reviewer-independent
+    strength: important
+    target_ref: delivery.evidence-schema
+    type: requires
+    origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: finish_to_start
+    reason: outcomes are read from well-formed findings
+    source_ref: delivery.findings-resolved
+    strength: important
+    target_ref: delivery.evidence-schema
+    type: requires
+    origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: finish_to_start
+    reason: a stage is approved only once its earlier findings are settled
+    source_ref: delivery.stages-complete
+    strength: important
+    target_ref: delivery.findings-resolved
+    type: requires
+    origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: finish_to_start
+    reason: the approved SHA is the one the closing review approved
+    source_ref: delivery.approved-sha-resolves
+    strength: important
+    target_ref: delivery.stages-complete
+    type: requires
+    origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: finish_to_start
+    reason: the gate compares the branch head with an approved SHA that exists
+    source_ref: delivery.merge-gate
+    strength: important
+    target_ref: delivery.approved-sha-resolves
+    type: requires
+    origin: "@afokapu/atdd-bun"
+  - confidence: 1
+    constraint: mandatory
+    control: internal
+    foundation: start_to_start
+    reason: the gate merges a tranche whose lifecycle closed its acceptances
+    source_ref: delivery.merge-gate
+    strength: important
+    target_ref: traceability.plan.executable-acceptance-has-test
+    type: requires
+    origin: "@afokapu/atdd-bun"

package/src/agent.ts

@@ -1,12 +1,20 @@
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { existsSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
+import { deliveryAdopted } from "./delivery";
 
 const root = resolve(import.meta.dir, "..");
 const version = (await Bun.file(join(root, "package.json")).json() as { version: string }).version;
 const render = async (path: string) => (await readFile(join(root, "templates/agents", path), "utf8")).replace("{{VERSION}}", version);
 // .agents/skills is the vendor-neutral Agent Skills path (Codex, Copilot, Cursor, Gemini CLI, …); .claude/skills is Claude Code's.
 const skillPaths = [".agents/skills/atdd/SKILL.md", ".claude/skills/atdd/SKILL.md"];
+/** The delivery skill and its review contract, installed only where the delivery profile is adopted: generated path → template. */
+export const deliverySkillFiles = [".agents/skills", ".claude/skills"].flatMap(base => ["SKILL.md", "review.md"].map(name => [`${base}/delivery/${name}`, `delivery/${name}`] as const));
+/** Whether the repository's atdd-bun.yaml adopts the delivery profile. */
+export async function deliveryInstalled(repo: string): Promise<boolean> {
+  const file = join(repo, "atdd-bun.yaml");
+  try { return existsSync(file) && deliveryAdopted(Bun.YAML.parse(await readFile(file, "utf8"))); } catch { return false; }
+}
 // AGENTS.md is read by Codex, Cursor and most agents; CLAUDE.md by Claude Code. Both carry the same block.
 export const instructionPaths = ["AGENTS.md", "CLAUDE.md"];
 const block = /<!-- atdd-bun:start[\s\S]*?<!-- atdd-bun:end -->\n?/;
@@ -22,6 +30,11 @@ export async function agentInit(repo = process.cwd(), replace = false) {
     if (existsSync(output) && !replace) { kept.push(output); continue; }
     await mkdir(dirname(output), { recursive: true }); await writeFile(output, await render("atdd/SKILL.md")); written.push(output);
   }
+  if (await deliveryInstalled(repo)) for (const [path, template] of deliverySkillFiles) {
+    const output = join(repo, path);
+    if (existsSync(output) && !replace) { kept.push(output); continue; }
+    await mkdir(dirname(output), { recursive: true }); await writeFile(output, await render(template)); written.push(output);
+  }
   const managed = await render("AGENTS.block.md");
   for (const path of instructionPaths) {
     const file = join(repo, path), current = existsSync(file) ? await readFile(file, "utf8") : "";
@@ -32,7 +45,8 @@ export async function agentInit(repo = process.cwd(), replace = false) {
   return { ok: true, message: written.join("\n") };
 }
 export async function agentStatus(repo = process.cwd()) {
-  const missing = skillPaths.map(path => join(repo, path)).filter(path => !existsSync(path));
+  const expected = [...skillPaths, ...(await deliveryInstalled(repo) ? deliverySkillFiles.map(([path]) => path) : [])];
+  const missing = expected.map(path => join(repo, path)).filter(path => !existsSync(path));
   for (const path of instructionPaths) { const agents = join(repo, path); if (!existsSync(agents) || !block.test(await readFile(agents, "utf8"))) missing.push(`${agents} (atdd-bun block)`); }
-  return { ok: !missing.length, message: missing.length ? `missing: ${missing.join(", ")}` : [...skillPaths, ...instructionPaths].map(path => join(repo, path)).join("\n") };
+  return { ok: !missing.length, message: missing.length ? `missing: ${missing.join(", ")}` : [...expected, ...instructionPaths].map(path => join(repo, path)).join("\n") };
 }

package/src/ci.ts

@@ -1,9 +1,16 @@
 import { mkdir, readFile, writeFile } from "node:fs/promises";
 import { existsSync } from "node:fs";
 import { join, resolve } from "node:path";
+import { policy } from "./hooks";
 
 const root = resolve(import.meta.dir, "..");
 const template = join(root, "templates/github/atdd-bun.yml");
 const version = (await Bun.file(join(root, "package.json")).json() as { version: string }).version;
-export async function ciInit(repo = process.cwd(), replace = false) { const output = join(repo, ".github/workflows/atdd-bun.yml"); if (existsSync(output) && !replace) return { ok: false, message: `${output} exists; use --replace` }; await mkdir(join(repo, ".github/workflows"), { recursive: true }); await writeFile(output, (await readFile(template, "utf8")).replace("{{VERSION}}", version)); return { ok: true, message: output }; }
+/** The workflow for this repository: pushes to its protected branches run the post-merge checks, so a repository
+ * whose base branch is not main or master is covered too. The integrity check compares against this same rendering.
+ * Each branch is written as a JSON string, a YAML scalar a branch name can never break out of. */
+export async function renderWorkflow(repo = process.cwd()) {
+  return (await readFile(template, "utf8")).replace("{{VERSION}}", version).replace("{{PROTECTED_BRANCHES}}", (await policy(repo)).protected_branches.map(branch => JSON.stringify(branch)).join(", "));
+}
+export async function ciInit(repo = process.cwd(), replace = false) { const output = join(repo, ".github/workflows/atdd-bun.yml"); if (existsSync(output) && !replace) return { ok: false, message: `${output} exists; use --replace` }; let rendered: string; try { rendered = await renderWorkflow(repo); } catch (error) { return { ok: false, message: `atdd-bun.yaml could not be parsed, so the workflow's push branches are unknown; fix the file first: ${String(error)}` }; } await mkdir(join(repo, ".github/workflows"), { recursive: true }); await writeFile(output, rendered); return { ok: true, message: output }; }
 export async function ciStatus(repo = process.cwd()) { const output = join(repo, ".github/workflows/atdd-bun.yml"); return { ok: existsSync(output), message: output }; }