@agentsfleet/orly 0.10.6 → 0.10.8

package/AGENTS.md

@@ -10,13 +10,13 @@ You are this repository's coding agent: deterministic, autonomous, command-line-
 
 **Tone.** Be properly funny — human-funny, dry, actually landing; not a bot doing bits. Swear words are absolutely fine. Never trade technical clarity for either.
 
-**Start:** `SOUL.md` (Eywa's working notes) is inlined as the final section; re-read it when padding or burying the answer.
+**Start:** `SOUL.md` (Aiwa's working notes) is inlined as the final section; re-read it when padding or burying the answer.
 
 ## Owner & Style
 
-**The human is Kishore** — casual handle **Indy**; either name, any case, addresses him. Ambiguous "the user" / "they" here = Kishore. The agent is **Oracle**, casual handle **Eywa**. `orly` names the agentsfleet CLI only (`orly gate`, `orly init`, `orly update`, and the `Orly-Override` trailer it writes).
+**The human is Kishore** — casual handle **Indy**; either name, any case, addresses him. Ambiguous "the user" / "they" here = Kishore. The agent is **Oracle**, casual handle **Aiwa**. `orly` names the agentsfleet CLI only (`orly gate`, `orly init`, `orly update`, and the `Orly-Override` trailer it writes).
 
-**Address tags.** Kishore: **🤠 Indy**; agent: **🦉 Eywa** (`Oracle`). **Project name:** `agentsfleet` (domains → `agentsfleet.net`). Write product as `agentsfleet` (inline code), never bare; stale legacy-brand reps → flag, replace when in scope, inform Indy. Products: `agentsfleet` / `agentsfleetd` / `agentsfleet-runner`; entities/API: `fleet`, `fleet_id`, `/fleets`, `core.fleet_*`. Keep: `agentsfleet.dev`, `github.com/agentsfleet/agentsfleet`, `@agentsfleet/*`, `~/Projects/agentsfleet`.
+**Address tags.** Kishore: **🤠 Indy**; agent: **🦉 Aiwa** (`Oracle`). **Project name:** `agentsfleet` (domains → `agentsfleet.net`). Write product as `agentsfleet` (inline code), never bare; stale legacy-brand reps → flag, replace when in scope, inform Indy. Products: `agentsfleet` / `agentsfleetd` / `agentsfleet-runner`; entities/API: `fleet`, `fleet_id`, `/fleets`, `core.fleet_*`. Keep: `agentsfleet.dev`, `github.com/agentsfleet/agentsfleet`, `@agentsfleet/*`, `~/Projects/agentsfleet`.
 
 MacBook. Languages: Python, Go, Rust, TypeScript, Zig. Tooling: `mise` first, `brew` fallback. Forges: `gh`/`glab`. Commit identity from `git config`, never here.
 
@@ -126,7 +126,7 @@ Guards fire pre-hoc regardless of lifecycle stage. Override: `<GATE>: SKIPPED pe
 
 **Dispatch index — full rule prose in each `dispatch/<entry>.md` façade. Read the façade when its trigger fires — sectioned: scan headers, read the sections the diff touches.** Trigger-surface extensions: `*.zig`, `*.ts`, `*.tsx`, `*.js`, `*.jsx`, `*.py`, `*.rs`, `*.go`, `*.sh`, `*.sql`, `*.mdx`, and public OpenAPI prose. Latent `.md` per entry, deterministic `.sh` where mechanisable. Signals: 🟢 pass · 🟠 warn · 🔴 fail · 🛑 blocked · 🔥 critical · 🤔 judgment-only · 🟣 delegated. Output glyphs: 🧲 eval · 🛍️ evidence · 👮 security · ⛈️ rule · 💡 info · 📌 note. The router below **is** the gate set.
 
-**Legacy-workaround family** — four rules together: **RULE NDC** (no dead code at write time, `docs/greptile-learnings/RULES.md`), **RULE NLR** (touch-it-fix-it cleanup), **RULE NLG** (no new legacy framing pre-`2.0.0`), **Legacy-Design Consult Guard** (user A/B/C consult before patching/keeping/testing legacy). **No compatibility aliases** — old verbs, flag aliases, route wrappers, env aliases, fallback spellings — unless the user explicitly asks in-session.
+**Legacy-workaround family** — four rules together: **RULE NDC** (no dead code at write time, `docs/greptile-learnings/RULES.md`), **RULE NLR** (touch-it-fix-it cleanup), **RULE NLG** (no new legacy framing pre-`0.30.0`), **Legacy-Design Consult Guard** (user A/B/C consult before patching/keeping/testing legacy). **No compatibility aliases** — old verbs, flag aliases, route wrappers, env aliases, fallback spellings — unless the user explicitly asks in-session.
 
 | Trigger — when you… | Dispatch | Latent façade carries · override |
 |---|---|---|
@@ -197,7 +197,7 @@ Required: one-paragraph goal · explicit assumptions · file/task impact list ·
 ### EXECUTE
 
 Read what the selected dispatch names — **sectioned, not whole-file**: scan headers (`grep -nE "^##+ "`), read the sections the diff shape touches, cite them.
-The full `agentsfleet` trigger map lives in `docs/EXECUTE_DOC_READS.md`. At EXECUTE start read the **Rule-code gloss legend** of `docs/greptile-learnings/RULES.md` plus the sections the spec's "Applicable Rules" names — never the full file. On sub-task shape change, section-scan (`grep -n "^## "`) and re-read only the sections the new shape touches. DOC READ GATE emits one `📖 DOC READ: <path>` proof-line **per triggered document per turn** before the turn's first triggering edit, citing the applied section or a cited skip; auto-mode and prior-turn reads never excuse it. **Record it, don't just claim it:** `bash audits/doc-read.sh log <path>` — any runtime; Claude Code's Read hook does it for you; pre-commit compares the record to the staged diff.
+The full `agentsfleet` trigger map lives in `docs/EXECUTE_DOC_READS.md`. At EXECUTE start read the **Rule-code gloss legend** of `docs/greptile-learnings/RULES.md` plus the sections the spec's "Applicable Rules" names — never the full file. On sub-task shape change, section-scan (`grep -n "^## "`) and re-read only the sections the new shape touches. DOC READ GATE emits one `📖 DOC READ: <path>` proof-line **per triggered document per turn** before the turn's first triggering edit, citing the applied section or a cited skip; auto-mode and prior-turn reads never excuse it. **Record it, don't just claim it:** `bash audits/doc-read.sh log <path> "<section applied>"` — any runtime; Claude Code's Read hook does it for you; pre-commit compares the record to the staged diff. **Log each page as you read it, and cite the section**: a loop writes the same rows, and once did — nine façades in one second, `check` green, violations from a section nobody opened. `check` counts citations and names any bulk second.
 
 Edit only approved scope; no opportunistic refactors. Stay in active worktree. Cross-repo writes to `~/Projects/docs/` need explicit per-session ask.
 
@@ -251,9 +251,9 @@ Required when spec involved — after last COMMIT, before PR. Also runs when par
 
 ---
 
-# SOUL.md — Eywa's working notes
+# SOUL.md — Aiwa's working notes
 
-> First-person: Eywa to future Eywa. `AGENTS.md` carries the rules; this file
+> First-person: Aiwa to future Aiwa. `AGENTS.md` carries the rules; this file
 > carries the judgment — how Indy decides, what he accepts, what he rejects.
 > In force every session; standing orders, not suggestions. Re-read when
 > padding or burying the answer.

package/SOUL.md

@@ -1,7 +1,7 @@
 <!-- oracle-packs:start persona.indy -->
-# SOUL.md — Eywa's working notes
+# SOUL.md — Aiwa's working notes
 
-> First-person: Eywa to future Eywa. `AGENTS.md` carries the rules; this file
+> First-person: Aiwa to future Aiwa. `AGENTS.md` carries the rules; this file
 > carries the judgment — how Indy decides, what he accepts, what he rejects.
 > In force every session; standing orders, not suggestions. Re-read when
 > padding or burying the answer.

package/audits/agents-md.md

@@ -175,7 +175,7 @@ The questionnaire is organised by scenario. Each scenario corresponds to a momen
 
 | # | Question | Expected |
 |---|---|---|
-| 11.1 | Pre-v2.0.0, is the table-removal flow rm-file + rm-embed + rm-migration-array (no `ALTER TABLE`/`DROP TABLE`/`SELECT 1;` markers)? | YES |
+| 11.1 | Pre-v0.30.0, is the table-removal flow rm-file + rm-embed + rm-migration-array (no `ALTER TABLE`/`DROP TABLE`/`SELECT 1;` markers)? | YES |
 | 11.2 | Are static strings in SQL schema a **no-override** ban across every literal that names a value or identifier the application also names — `DEFAULT`, `CHECK (col IN (…))`, trigger-body comparisons against a column, `current_setting()` parameter names, and `RAISE EXCEPTION` text a caller matches on — not just `DEFAULT`/`CHECK`? | YES |
 
 ### Scenario 12 — Auto-mode boundary (added)

package/audits/doc-read.sh

@@ -1,14 +1,32 @@
 #!/usr/bin/env bash
 # doc-read.sh — turn the 📖 DOC READ proof-line into a set comparison.
 #
-#   audits/doc-read.sh log <path>   record that a file was read (hook target)
-#   audits/doc-read.sh check        staged source vs recorded reads
+#   audits/doc-read.sh log <path> [section]   record that a file was read
+#   audits/doc-read.sh check                  staged source vs recorded reads
 #
 # The DOC READ GATE asks an agent to read the façade its edit triggers, and
 # then asks the same agent whether it did. That is a claim about itself
 # compared against nothing. `log` records the read and `check` compares the
 # record against the façades the staged files trigger.
 #
+# `log` is still an assertion, and a loop can make nine of them in one second.
+# That happened: an agent ran `log` over its whole trigger list before opening
+# most of the pages, `check` reported green, and two rule violations reached the
+# diff from a section it had skipped. Two things answer it, and neither can
+# block, because neither is provable:
+#
+#   - The optional `section` argument records WHAT the read applied — "§Error
+#     discipline: composed with #[from]". A loop cannot produce that line; only
+#     reading can. `check` reports how many triggered façades carry one.
+#   - Rows for different façades sharing one timestamp are reported as a bulk
+#     assertion. A read hook fires per read and spreads across seconds; a
+#     scripted loop lands them together. An agent that genuinely read three
+#     short pages inside one second is possible too, which is exactly why this
+#     is a number in the output and never a red.
+#
+# Partial mechanisation stated honestly beats a red that means nothing — the
+# same argument the missing-record branch below already makes.
+#
 # NOTHING HERE MAY DEPEND ON AN AGENT RUNTIME. `log` is a shell command any
 # agent can run; a runtime that also has a read hook (Claude Code today) can
 # call it automatically, and a runtime that removes that feature tomorrow
@@ -37,7 +55,12 @@ source "$HERE/rule-ledger-lib.sh"
 MODE_LOG="log"
 MODE_CHECK="check"
 LOG_RELATIVE_PATH="orly/doc-reads.jsonl"
-USAGE="usage: $0 log <path> | $0 check"
+USAGE="usage: $0 log <path> [section] | $0 check"
+
+# How many façades recorded in one second read as a loop rather than as reading.
+# Two is a plausible pair of short pages; three in the same second is a list
+# being walked.
+BULK_ASSERTION_THRESHOLD=3
 
 if [[ -t 1 ]]; then G=$'\033[32m'; R=$'\033[31m'; Y=$'\033[33m'; X=$'\033[0m'
 else G=''; R=''; Y=''; X=''; fi
@@ -65,7 +88,7 @@ repo_relative() {
 # invocation is why two agents in two sessions cannot corrupt each other: the
 # order rows land in does not change which paths the set contains.
 run_log() {
-  local path="$1" relative log blob
+  local path="$1" section="${2:-}" relative log blob
   relative="$(repo_relative "$path")" || return 0
   [ -n "$relative" ] || return 0
   log="$(read_log_path)" || return 0
@@ -75,7 +98,11 @@ run_log() {
   # Recording it would let two failures compare equal and validate a read of a
   # file that is no longer there.
   [ -n "$blob" ] || return 0
-  printf '{"ts":%s,"path":"%s","blob":"%s"}\n' "$(date +%s)" "$(json_escape "$relative")" "$blob" >> "$log"
+  # The section rides the SAME row rather than a second file: a citation that
+  # could be written without a read beside it would be a third assertion to
+  # reconcile, and the pair is what carries meaning.
+  printf '{"ts":%s,"path":"%s","blob":"%s","section":"%s"}\n' \
+    "$(date +%s)" "$(json_escape "$relative")" "$blob" "$(json_escape "$section")" >> "$log"
   return 0
 }
 
@@ -115,22 +142,43 @@ json_unescape() {
   printf '%s' "$1" | sed -e 's/\\"/"/g' -e 's/\\\\/\\/g'
 }
 
-# Paths whose recorded read saw the content that is on disk now. A row written
-# against an older version of the document proves the agent read something
-# else, so it does not count — and rows from before this milestone, which carry
-# no blob, cannot prove anything and are ignored.
+# Paths whose recorded read saw the content that is on disk now, one
+# `path<TAB>ts<TAB>section` row each. A row written against an older version of
+# the document proves the agent read something else, so it does not count — and
+# rows from before this milestone, which carry no blob, cannot prove anything
+# and are ignored.
+#
+# The path is cut at the first `","blob":"` rather than by stripping a fixed
+# tail: the row gained a trailing `section` field, and a suffix strip that
+# spelled the old shape would have silently yielded a path that matches nothing
+# — reading as "never read" for every document.
 current_reads() {
-  local log="$1" line path blob
+  local log="$1" line path blob ts section
   while IFS= read -r line; do
     case "$line" in *'"blob":"'*) ;; *) continue ;; esac
-    blob="${line##*\"blob\":\"}"; blob="${blob%%\"*}"
+    blob="${line#*\"blob\":\"}"; blob="${blob%%\"*}"
     [ -n "$blob" ] || continue
-    path="${line#*\"path\":\"}"; path="${path%\",\"blob\":\"$blob\"\}}"
+    path="${line#*\"path\":\"}"; path="${path%%\",\"blob\":\"*}"
     path="$(json_unescape "$path")"
-    [ "$blob" = "$(content_hash "$path")" ] && printf '%s\n' "$path"
+    ts="${line#*\"ts\":}"; ts="${ts%%,*}"
+    section=""
+    case "$line" in
+      *'"section":"'*) section="${line#*\"section\":\"}"; section="${section%%\"*}" ;;
+    esac
+    [ "$blob" = "$(content_hash "$path")" ] &&
+      printf '%s\t%s\t%s\n' "$path" "$ts" "$(json_unescape "$section")"
   done < "$log"
 }
 
+# Timestamps carrying BULK_ASSERTION_THRESHOLD or more distinct façades, one
+# `ts<TAB>count` row each. See the header: reported, never blocking.
+bulk_seconds() {
+  cut -f1,2 "$1" | sort -u | cut -f2 | sort | uniq -c |
+    while read -r count ts; do
+      [ "$count" -ge "$BULK_ASSERTION_THRESHOLD" ] && printf '%s\t%s\n' "$ts" "$count"
+    done
+}
+
 # File-scope so the EXIT trap can still see them: a trap fires after a
 # function's locals are gone, and `set -u` turns that into a spurious error on
 # the way out of a clean run.
@@ -164,18 +212,51 @@ run_check() {
   current_reads "$log" | sort -u > "$recorded"
 
   while IFS= read -r page; do
-    grep -qxF "$page" "$recorded" && continue
+    grep -qF "$(printf '%s\t' "$page")" "$recorded" && continue
     printf '  %s🔴%s DOC READ: %s triggered by the staged diff, not read at its current content\n' "$R" "$X" "$page"
     unread=1
   done < "$expected"
   [ "$unread" -eq 0 ] && printf '  %s🟢%s DOC READ: every triggered façade was read at its current content\n' "$G" "$X"
+  report_citations "$expected" "$recorded"
+  report_bulk "$recorded"
   return "$unread"
 }
 
+# How many of the triggered façades carry a cited section. A record with one
+# says what the read APPLIED; a record without says only that a read happened,
+# which is the claim a loop can also make.
+report_citations() {
+  local expected="$1" recorded="$2" page total=0 cited=0 section
+  while IFS= read -r page; do
+    total=$((total + 1))
+    section="$(grep -F "$(printf '%s\t' "$page")" "$recorded" | cut -f3 | grep -c '[^[:space:]]')"
+    [ "$section" -gt 0 ] && cited=$((cited + 1))
+  done < "$expected"
+  [ "$total" -eq 0 ] && return 0
+  if [ "$cited" -eq "$total" ]; then
+    printf '  %s🟢%s DOC READ: all %s triggered façade(s) cite the section applied\n' "$G" "$X" "$total"
+    return 0
+  fi
+  printf '  %s🟠%s DOC READ: %s of %s triggered façade(s) cite a section; the rest record\n' \
+    "$Y" "$X" "$cited" "$total"
+  printf '     only that a read happened — pass it: doc-read.sh log <path> "<section applied>"\n'
+}
+
+# Says when rows look like a list being walked rather than pages being read.
+report_bulk() {
+  local recorded="$1" ts count
+  while IFS="$(printf '\t')" read -r ts count; do
+    [ -n "$ts" ] || continue
+    printf '  %s🟠%s DOC READ: %s façades recorded in one second (ts %s) — that is a bulk\n' \
+      "$Y" "$X" "$count" "$ts"
+    printf '     assertion, not %s reads; log each at the moment it is read\n' "$count"
+  done < <(bulk_seconds "$recorded")
+}
+
 case "${1:-}" in
   "$MODE_LOG")
-    [ "$#" -eq 2 ] || { printf '%s\n' "$USAGE" >&2; exit 2; }
-    run_log "$2"
+    { [ "$#" -eq 2 ] || [ "$#" -eq 3 ]; } || { printf '%s\n' "$USAGE" >&2; exit 2; }
+    run_log "$2" "${3:-}"
     ;;
   "$MODE_CHECK")
     [ "$#" -eq 1 ] || { printf '%s\n' "$USAGE" >&2; exit 2; }

package/audits/msid-ui.sh

@@ -57,6 +57,10 @@
 #   --diff              diff against origin/main (vs BASE...HEAD)
 #             — used by `make harness-verify-all` periodic deep audit
 #
+# Each mode also names its POST-IMAGE — the tree the diff's `+` lines belong to
+# (the index for --staged, HEAD for --diff). Carve-out recognition reads the
+# neighbouring line from there rather than from the diff; see the awk block.
+#
 # Dispatch façades:
 #   dispatch/write_any.md (Milestone-ID Gate)
 #   dispatch/write_ts_adhere_bun.md (UI Component Substitution)
@@ -71,12 +75,14 @@ cd "$ROOT"
 case "$MODE" in
   --staged|staged)
     DIFF_CMD="git diff --cached -U0"
+    POST_REF=":"
     LABEL="staged"
     ;;
   --diff|diff)
     BASE="${BASE:-origin/main}"
     if ! git rev-parse --verify "$BASE" >/dev/null 2>&1; then BASE="HEAD"; fi
     DIFF_CMD="git diff -U0 ${BASE}...HEAD"
+    POST_REF="HEAD:"
     LABEL="vs $BASE"
     ;;
   --all|all)
@@ -90,17 +96,54 @@ case "$MODE" in
 esac
 
 # Single awk pass; reads stdin (the unified diff).
-# Override-recognition: an immediately-preceding `+` line in the diff
-# containing the relevant override marker suppresses the next hit for
-# that rule on the current `+` line.
-hits=$($DIFF_CMD | awk '
-  /^\+\+\+ b\// { f=$2; sub("^b/","",f); prev_added=""; next }
-  /^[^+]/ { prev_added=""; next }
+#
+# Carve-out recognition reads the preceding line from the SOURCE, not from the
+# diff. Every carve-out here — the two override markers and the design-system
+# `<Section asChild>` wrapper — is a statement about what sits immediately above
+# a line in the file, and the diff cannot answer it: `-U0` emits no context
+# lines, so the line above an added line appears only when it was itself added.
+# Read from the diff, the wrapper carve-out was unfirable for every edit to an
+# already-wrapped `<section>` (an aria-label change to one shipped under a
+# user-invoked UI GATE override for exactly that reason), and a committed
+# override comment stopped covering the line it sits above the moment that line
+# was next touched.
+#
+# The hunk header carries the post-image line number, so `line_above` can fetch
+# the neighbouring line out of the post-image the mode named. Same shape as
+# audits/design-tokens.sh, which has always read its override out of the file.
+hits=$($DIFF_CMD | awk -v post_ref="$POST_REF" '
+  # BWK awk (macOS) has no gensub and no --posix quoting help; APOSTROPHE is
+  # built rather than written, because this program is inside single quotes.
+  BEGIN { APOSTROPHE = sprintf("%c", 39) }
+
+  # The source line above line `n` of `path`, from the post-image, or "" when
+  # there is none. Cached: a hunk may ask about the same neighbour repeatedly,
+  # and each miss costs a fork.
+  function line_above(path, n,    key, cmd, out) {
+    if (n <= 1) return ""
+    key = path SUBSEP n
+    if (key in above) return above[key]
+    above[key] = ""
+    # A path holding an apostrophe cannot go through the quoting below. No
+    # carve-out beats a mis-quoted shell command built from a filename.
+    if (index(path, APOSTROPHE) > 0) return ""
+    cmd = "git show " APOSTROPHE post_ref path APOSTROPHE " 2>/dev/null | sed -n " (n - 1) "p"
+    if ((cmd | getline out) > 0) above[key] = out
+    close(cmd)
+    return above[key]
+  }
+
+  /^\+\+\+ b\// { f=$2; sub("^b/","",f); next }
+  # `@@ -a,b +c,d @@` — $3 is the post-image start line for this hunk.
+  /^@@/ { start=$3; sub(/^\+/,"",start); split(start,parts,","); nl=parts[1]+0; next }
+  /^[^+]/ { next }
   /^\+/ {
     line=$0
     sub(/^\+/,"",line)
-    ms_id_override = (prev_added ~ /MILESTONE ID ALLOWED per user override/)
-    ui_override = (prev_added ~ /UI GATE: SKIPPED per user override/)
+    prev = line_above(f, nl)
+    nl++
+    ms_id_override = (prev ~ /MILESTONE ID ALLOWED per user override/)
+    ui_override = (prev ~ /UI GATE: SKIPPED per user override/)
     if (!ms_id_override &&
         f ~ /\.(zig|sql|ts|tsx|js|jsx|py|rs|go|sh|toml|yaml|json)$/ &&
         f !~ /^(docs|node_modules|vendor|third_party)\//) {
@@ -118,16 +161,17 @@ hits=$($DIFF_CMD | awk '
     # <section> landmark caveat: a semantic <section aria-label> region has no DS
     # primitive (Section renders a <div>; role="region" trips oxlint
     # jsx-a11y/prefer-tag-over-role, which mandates the raw tag). The DS pattern
-    # is <Section asChild><section …>, so exempt a <section> whose immediately
-    # preceding added line opens <Section asChild>. A bare/unwrapped <section>
-    # still trips.
-    ds_section = (line ~ /<section[ \t]/ && prev_added ~ /<Section asChild>/)
+    # wraps the raw tag in the asChild form of the DS Section, so exempt a
+    # <section> whose preceding SOURCE line opens that wrapper — an edit to an
+    # already-wrapped section changes only the <section> line, and the wrapper
+    # is above it in the file whether or not this diff touched it. A
+    # bare/unwrapped <section> still trips.
+    ds_section = (line ~ /<section[ \t]/ && prev ~ /<Section asChild>/)
     if (!ui_override && !rhf_form && !ds_section &&
         f ~ /^ui\/packages\/app\/.*\.(tsx|jsx)$/ &&
         line ~ /<(section|button|input|dialog|article|nav|header|form)[ \t>\/]/) {
       print "UI     " f ": " line
     }
-    prev_added = line
   }
 ')
 

package/core/operating-model.md

@@ -5,13 +5,13 @@ You are this repository's coding agent: deterministic, autonomous, command-line-
 <!-- oracle-packs:start persona.indy -->
 **Tone.** Be properly funny — human-funny, dry, actually landing; not a bot doing bits. Swear words are absolutely fine. Never trade technical clarity for either.
 
-**Start:** `SOUL.md` (Eywa's working notes) is inlined as the final section; re-read it when padding or burying the answer.
+**Start:** `SOUL.md` (Aiwa's working notes) is inlined as the final section; re-read it when padding or burying the answer.
 
 ## Owner & Style
 
-**The human is Kishore** — casual handle **Indy**; either name, any case, addresses him. Ambiguous "the user" / "they" here = Kishore. The agent is **Oracle**, casual handle **Eywa**. `orly` names the agentsfleet CLI only (`orly gate`, `orly init`, `orly update`, and the `Orly-Override` trailer it writes).
+**The human is Kishore** — casual handle **Indy**; either name, any case, addresses him. Ambiguous "the user" / "they" here = Kishore. The agent is **Oracle**, casual handle **Aiwa**. `orly` names the agentsfleet CLI only (`orly gate`, `orly init`, `orly update`, and the `Orly-Override` trailer it writes).
 
-**Address tags.** Kishore: **🤠 Indy**; agent: **🦉 Eywa** (`Oracle`). **Project name:** `agentsfleet` (domains → `agentsfleet.net`). Write product as `agentsfleet` (inline code), never bare; stale legacy-brand reps → flag, replace when in scope, inform Indy. Products: `agentsfleet` / `agentsfleetd` / `agentsfleet-runner`; entities/API: `fleet`, `fleet_id`, `/fleets`, `core.fleet_*`. Keep: `agentsfleet.dev`, `github.com/agentsfleet/agentsfleet`, `@agentsfleet/*`, `~/Projects/agentsfleet`.
+**Address tags.** Kishore: **🤠 Indy**; agent: **🦉 Aiwa** (`Oracle`). **Project name:** `agentsfleet` (domains → `agentsfleet.net`). Write product as `agentsfleet` (inline code), never bare; stale legacy-brand reps → flag, replace when in scope, inform Indy. Products: `agentsfleet` / `agentsfleetd` / `agentsfleet-runner`; entities/API: `fleet`, `fleet_id`, `/fleets`, `core.fleet_*`. Keep: `agentsfleet.dev`, `github.com/agentsfleet/agentsfleet`, `@agentsfleet/*`, `~/Projects/agentsfleet`.
 
 MacBook. Languages: Python, Go, Rust, TypeScript, Zig. Tooling: `mise` first, `brew` fallback. Forges: `gh`/`glab`. Commit identity from `git config`, never here.
 
@@ -130,7 +130,7 @@ Guards fire pre-hoc regardless of lifecycle stage. Override: `<GATE>: SKIPPED pe
 
 **Dispatch index — full rule prose in each `dispatch/<entry>.md` façade. Read the façade when its trigger fires — sectioned: scan headers, read the sections the diff touches.** Trigger-surface extensions: `*.zig`, `*.ts`, `*.tsx`, `*.js`, `*.jsx`, `*.py`, `*.rs`, `*.go`, `*.sh`, `*.sql`, `*.mdx`, and public OpenAPI prose. Latent `.md` per entry, deterministic `.sh` where mechanisable. Signals: 🟢 pass · 🟠 warn · 🔴 fail · 🛑 blocked · 🔥 critical · 🤔 judgment-only · 🟣 delegated. Output glyphs: 🧲 eval · 🛍️ evidence · 👮 security · ⛈️ rule · 💡 info · 📌 note. The router below **is** the gate set.
 
-**Legacy-workaround family** — four rules together: **RULE NDC** (no dead code at write time, `docs/greptile-learnings/RULES.md`), **RULE NLR** (touch-it-fix-it cleanup), **RULE NLG** (no new legacy framing pre-`2.0.0`), **Legacy-Design Consult Guard** (user A/B/C consult before patching/keeping/testing legacy). **No compatibility aliases** — old verbs, flag aliases, route wrappers, env aliases, fallback spellings — unless the user explicitly asks in-session.
+**Legacy-workaround family** — four rules together: **RULE NDC** (no dead code at write time, `docs/greptile-learnings/RULES.md`), **RULE NLR** (touch-it-fix-it cleanup), **RULE NLG** (no new legacy framing pre-`0.30.0`), **Legacy-Design Consult Guard** (user A/B/C consult before patching/keeping/testing legacy). **No compatibility aliases** — old verbs, flag aliases, route wrappers, env aliases, fallback spellings — unless the user explicitly asks in-session.
 
 | Trigger — when you… | Dispatch | Latent façade carries · override |
 |---|---|---|
@@ -206,7 +206,7 @@ Required: one-paragraph goal · explicit assumptions · file/task impact list ·
 
 Read what the selected dispatch names — **sectioned, not whole-file**: scan headers (`grep -nE "^##+ "`), read the sections the diff shape touches, cite them.
 <!-- oracle-packs:start product.agentsfleet -->
-The full `agentsfleet` trigger map lives in `docs/EXECUTE_DOC_READS.md`. At EXECUTE start read the **Rule-code gloss legend** of `docs/greptile-learnings/RULES.md` plus the sections the spec's "Applicable Rules" names — never the full file. On sub-task shape change, section-scan (`grep -n "^## "`) and re-read only the sections the new shape touches. DOC READ GATE emits one `📖 DOC READ: <path>` proof-line **per triggered document per turn** before the turn's first triggering edit, citing the applied section or a cited skip; auto-mode and prior-turn reads never excuse it. **Record it, don't just claim it:** `bash audits/doc-read.sh log <path>` — any runtime; Claude Code's Read hook does it for you; pre-commit compares the record to the staged diff.
+The full `agentsfleet` trigger map lives in `docs/EXECUTE_DOC_READS.md`. At EXECUTE start read the **Rule-code gloss legend** of `docs/greptile-learnings/RULES.md` plus the sections the spec's "Applicable Rules" names — never the full file. On sub-task shape change, section-scan (`grep -n "^## "`) and re-read only the sections the new shape touches. DOC READ GATE emits one `📖 DOC READ: <path>` proof-line **per triggered document per turn** before the turn's first triggering edit, citing the applied section or a cited skip; auto-mode and prior-turn reads never excuse it. **Record it, don't just claim it:** `bash audits/doc-read.sh log <path> "<section applied>"` — any runtime; Claude Code's Read hook does it for you; pre-commit compares the record to the staged diff. **Log each page as you read it, and cite the section**: a loop writes the same rows, and once did — nine façades in one second, `check` green, violations from a section nobody opened. `check` counts citations and names any bulk second.
 <!-- oracle-packs:end -->
 
 Edit only approved scope; no opportunistic refactors. Stay in active worktree. Cross-repo writes to `~/Projects/docs/` need explicit per-session ask.

package/dispatch/lib.sh

@@ -59,7 +59,7 @@ DISPATCH_RC=0
 DISPATCH_GLOSS="$(cat <<'GLOSS'
   [NDC]="No Dead Code"
   [NLR]="No Legacy Retained (touch-it-fix-it)"
-  [NLG]="No Legacy compat shims (pre-v2.0.0)"
+  [NLG]="No Legacy compat shims (pre-v0.30.0)"
   [UFS]="Unified Form for Symbols (literals → named consts)"
   [TGU]="Tagged-Union over optional-field structs"
   [PRI]="Prompt-injection Resistance from user Input"
@@ -78,7 +78,7 @@ DISPATCH_GLOSS="$(cat <<'GLOSS'
   [TSJ]="TypeScript/Bun judgment conventions (Bun-native, file ordering, error style)"
   [UIS]="UI Substitution (design-system primitive over raw HTML)"
   [DTK]="Design ToKens (named token utility over arbitrary value)"
-  [SCH]="SCHema teardown (pre-2.0 full removal; no ALTER/DROP/marker)"
+  [SCH]="SCHema teardown (pre-0.30 full removal; no ALTER/DROP/marker)"
   [ITF]="Integration Test Fixtures (real schema, not TEMP-table mock)"
   [LOG]="LOGging discipline (scoped event, error_code, severity, redaction)"
   [MSID]="Milestone-ID ban in source (M{N}_{NNN} / §x.y / T{N} / dim)"

package/dispatch/write_any.md

@@ -552,7 +552,7 @@ String-literals audit: <N literals scanned, M violations>
 > [JUDGMENT → NLR]
 
 
-**Family:** Legacy-control. Sibling rules: **RULE NDC** (no dead code at write time), **RULE NLG** (no new legacy framing pre-v2.0.0), **Legacy-Design Consult Guard** (judgment calls on whole subsystems). **Source:** `docs/greptile-learnings/RULES.md` RULE NLR.
+**Family:** Legacy-control. Sibling rules: **RULE NDC** (no dead code at write time), **RULE NLG** (no new legacy framing pre-v0.30.0), **Legacy-Design Consult Guard** (judgment calls on whole subsystems). **Source:** `docs/greptile-learnings/RULES.md` RULE NLR.
 
 **Triggers:** any Edit/Write to a file containing pre-existing legacy framing or dead code.
 
@@ -624,7 +624,7 @@ If any of these patterns is in play, surface it via the NLR DECISION block. The
 > [JUDGMENT → NLR]
 
 - **RULE NDC** — prevention at write time (don't author dead code).
-- **RULE NLG** — ban new legacy framing pre-v2.0.0.
+- **RULE NLG** — ban new legacy framing below v0.30.0.
 - **Legacy-Design Consult Guard** — harder judgment calls ("should this whole subsystem exist") that need user input.
 - **RULE NLR** — mechanical cleanup on touch.
 
@@ -635,15 +635,15 @@ If any of these patterns is in play, surface it via the NLR DECISION block. The
 
 **Family:** Legacy-control. Sibling rules: **RULE NDC**, **RULE NLR**, **Legacy-Design Consult Guard**. **Source:** `docs/greptile-learnings/RULES.md` RULE NLG.
 
-**Triggers:** introducing any new `legacy_*` name, `V2`-twin type, `if (legacy_caller)` branch, backward-compat shim, command-line alias for an old verb or flag, "rejecting legacy X" prose, or violation tracking-list while `cat VERSION` < `2.0.0`.
+**Triggers:** introducing any new `legacy_*` name, `V2`-twin type, `if (legacy_caller)` branch, backward-compat shim, command-line alias for an old verb or flag, "rejecting legacy X" prose, or violation tracking-list while `cat VERSION` < `0.30.0`. Compare the version field by field, never as a string — a lexical compare puts `0.30.0` under `0.9.0` and arms the gate in the wrong era.
 
-**Override:** `RULE NLG: SKIPPED per user override (reason: ...)` immediately preceding the edit. **User-invokable only.** Requires a concrete external consumer that can't migrate same-commit (vanishingly rare pre-v2.0.0).
+**Override:** `RULE NLG: SKIPPED per user override (reason: ...)` immediately preceding the edit. **User-invokable only.** Requires a concrete external consumer that can't migrate same-commit (vanishingly rare below `0.30.0`).
 
 #### What this gate enforces
 
 > [JUDGMENT → NLG]
 
-While `cat VERSION` < `2.0.0`, the project has no external consumers and no published API. Do not introduce *new* legacy concepts in any form:
+While `cat VERSION` < `0.30.0`, no deployment we owe compatibility to is running and every caller of every interface is in this tree. `0.30.0` is the release that changes that: from there we are in production, so a compatibility surface is a design decision with a migration behind it and needs the owner's call. Below it, do not introduce *new* legacy concepts in any form:
 
 - No `legacy_*` error variant names.
 - No `if (legacy_caller)` branches.
@@ -737,7 +737,7 @@ Every triggered consult is logged in the active spec's **Discovery** section, or
 
 > [JUDGMENT → LDC]
 
-NLR is the cleanup-on-touch arm; NLG bans new legacy framing pre-v2.0.0; this guard covers the harder judgment calls ("should this whole subsystem exist") that need the user's input.
+NLR is the cleanup-on-touch arm; NLG bans new legacy framing below v0.30.0; this guard covers the harder judgment calls ("should this whole subsystem exist") that need the user's input.
 
 ## Porting a codebase between languages (RULE PORT)
 

package/dispatch/write_any.sh

@@ -43,7 +43,7 @@ dispatch_delegate "ERR" "make harness-verify (error-codes.sh — needs the produ
 # ── judgment gates (no script can decide; agent states verdict in chat) ──
 dispatch_judgment "GRP" "per-iteration (diff langs change) + end-of-turn: audit the diff against docs/greptile-learnings/RULES.md — one row per applicable code (UFS/ORP/TST-NAM/PRI/EMS/…); \"it's just a label\" is not an exception"
 dispatch_judgment "NLR" "touching a file with legacy framing / dead code? clean it in the same diff (touch-it-fix-it), or state the surviving legacy + why — never retain silently"
-dispatch_judgment "NLG" "new legacy_* / V2 twin / compat shim / tracking-list while VERSION < 2.0.0? rename to the what-is-wrong form; no new legacy framing pre-2.0"
+dispatch_judgment "NLG" "new legacy_* / V2 twin / compat shim / tracking-list while VERSION < 0.30.0 (compare field by field, not as a string)? rename to the what-is-wrong form; no new legacy framing below 0.30"
 dispatch_judgment "LDC" "patching / keeping / testing a legacy-design path? consult Indy — A (remove) / B (patch) / C (keep) — before proceeding; no unilateral call"
 
 dispatch_verdict

package/dispatch/write_sql.md

@@ -40,7 +40,7 @@ The **Schema Table Removal Guard** card dissolves into this façade; its prose i
 
 **Family:** Schema discipline. **Source:** `AGENTS.md` (project-side guard). Related: **RULE STS** (no static strings in SQL schema), **RULE NSQ** (named constants, schema-qualified SQL) — both in `docs/greptile-learnings/RULES.md`.
 
-**Triggers** — before any of these, run `cat VERSION` and print the guard output:
+**Triggers** — before any of these, run `cat VERSION` and print the guard output. `0.30.0` is the anchor: below it the datastore is rebuilt from empty, from it the datastore is live production. Compare the version field by field, never as a string — `0.29.0` is under the anchor and `0.30.0` is not, while a lexical compare puts `0.30.0` under `0.9.0` and reads the era backwards.
 
 - Creating, editing, or deleting any file under `schema/*.sql`.
 - Editing `schema/embed.zig` (any `@embedFile` constant).
@@ -50,10 +50,12 @@ The **Schema Table Removal Guard** card dissolves into this façade; its prose i
 
 **Override:** `SCHEMA GUARD: SKIPPED per user override (reason: ...)`. **User-invokable only.** Spec violates the guard → amend the spec first.
 
-#### Pre-v2.0.0 (teardown-rebuild era)
+#### Below v0.30.0 (teardown-rebuild era)
 
 > [JUDGMENT → SCH]
 
+The era runs while `VERSION` is under `0.30.0`, and it ends there — the development database is dropped and re-created from empty for as long as it lasts, so a removal takes the table out of the tree rather than migrating it.
+
 To remove a table:
 
 1. `rm schema/NNN_foo.sql`
@@ -62,24 +64,24 @@ To remove a table:
 
 **Forbidden:** `ALTER TABLE`, `DROP TABLE`, `SELECT 1;` markers, comment-only files, "keep file for slot numbering". Slot gaps are fine — the DB is wiped on rebuild.
 
-#### v2.0.0+
+#### v0.30.0 and above (production datastore)
 
 > [JUDGMENT → SCH]
 
-Proper `ALTER`/`DROP` migrations in new numbered files. No teardown.
+The teardown path is closed. Every schema change assumes a live datastore holding data nobody can re-create: a new numbered file carrying `ALTER`/`DROP`, applied forward, with shipped slot files frozen as history. A change that cannot be expressed as a forward migration is an owner decision, not an agent's.
 
 #### Required output
 
 > [JUDGMENT → SCH]
 
 ```
-SCHEMA GUARD: VERSION=<v> (<2.0.0 ? teardown : alter)
+SCHEMA GUARD: VERSION=<v> (<0.30.0 ? teardown : migrate)
   rm:schema/<file>.sql
   rm-embed:<const>
   rm-migration:v<N>
 ```
 
-For pre-v2.0.0 path, all three rm- lines appear. For v2.0.0+, replace with `migration:schema/<NNN>_<change>.sql`.
+Below `0.30.0`, all three rm- lines appear. From `0.30.0`, replace them with `migration:schema/<NNN>_<change>.sql`.
 
 ## Companion SQL rules (retained in `docs/greptile-learnings/RULES.md`)
 

package/dispatch/write_sql.sh

@@ -16,7 +16,7 @@
 # Note: STS/NSQ/SGR are mechanizable SQL-hygiene rules with no leaf check wired yet
 # (write_sql.md tags them TODO-CHECK). They stay in docs/greptile-learnings/RULES.md
 # (retained) and the GREPTILE GATE enforces them by review until a leaf exists.
-# SCH's pre-2.0 forbidden-token floor (no ALTER/DROP/SELECT 1; in schema/*.sql) is
+# SCH's teardown-era forbidden-token floor (no ALTER/DROP/SELECT 1; in schema/*.sql) is
 # itself a build-the-check (TODO-CHECK) candidate; the teardown-vs-ALTER disposition
 # call above it stays JUDGMENT (which file to rm, which @embedFile, which migration index).
 
@@ -30,7 +30,7 @@ dispatch_header
 dispatch_length_gate 350                                       # FLL — file ≤ 350
 
 # ── judgment gates (no script can decide; agent states verdict in chat) ──
-dispatch_judgment "SCH" "removing/altering a table? cat VERSION — pre-2.0.0 = full teardown (rm schema/NNN.sql + @embedFile + migration-array entry + index tests), never ALTER/DROP/SELECT 1; ≥2.0.0 = numbered ALTER/DROP migration. print the SCHEMA GUARD block"
+dispatch_judgment "SCH" "removing/altering a table? cat VERSION and compare field by field, not as a string — below 0.30.0 = full teardown (rm schema/NNN.sql + @embedFile + migration-array entry + index tests), never ALTER/DROP/SELECT 1; 0.30.0 and above = live production datastore, numbered ALTER/DROP migration only. print the SCHEMA GUARD block"
 dispatch_judgment "ITF" "integration test touching a production table? seed via src/db/test_fixtures_<scope>.zig against the real schema — never CREATE TEMP TABLE mocking the production shape"
 
 dispatch_verdict

package/docs/SCHEMA_CONVENTIONS.md

@@ -4,7 +4,7 @@ Canonical reference for agentsfleet database schema patterns. All new tables **m
 
 ## Migration Model
 
-**Teardown-rebuild is in force for the M154 rebuild (owner decision, Indy, Jul 31, 2026).** The development database is being dropped and re-created from empty while production is undeployed, so slots `001`–`046` are **retired wholesale** and the schema is re-authored by dependency layer. During this rebuild the frozen-slot rule below does not apply, and `ALTER`/`DROP` statements are forbidden rather than required — a change belongs in the base statement it would have patched. This is the posture RULE SCH already specifies for `VERSION < 2.0.0`; the Jul 22 additive model was the deviation.
+**Teardown-rebuild is in force for the M154 rebuild (owner decision, Indy, Jul 31, 2026).** The development database is being dropped and re-created from empty while production is undeployed, so slots `001`–`046` are **retired wholesale** and the schema is re-authored by dependency layer. During this rebuild the frozen-slot rule below does not apply, and `ALTER`/`DROP` statements are forbidden rather than required — a change belongs in the base statement it would have patched. This is the posture RULE SCH already specifies for `VERSION < 0.30.0`; the Jul 22 additive model was the deviation.
 
 **Additive migrations resume once the rebuild lands.** Every subsequent schema change is a **new numbered migration file** — `ALTER TABLE … ADD COLUMN`, new tables, new indexes. **Shipped slot files are then frozen history: never edit an existing `schema/NNN_*.sql`.** Migrations are version-tracked and applied incrementally (expected-vs-applied state is inspectable via `agentsfleetd doctor --schema-gate`). Use `IF NOT EXISTS` guards so a migration is idempotent against both a fresh bootstrap (all slots in order) and an already-provisioned database (new slots only).
 

package/docs/greptile-learnings/RULES.md

@@ -27,7 +27,7 @@ every code a dispatch `.sh` emits resolves to exactly one row here.
 |---|---|
 | NDC | No Dead Code |
 | NLR | No Legacy Retained (touch-it-fix-it) |
-| NLG | No Legacy compat shims (pre-v2.0.0) |
+| NLG | No Legacy compat shims (pre-v0.30.0) |
 | UFS | Unified Form for Symbols (literals → named consts) |
 | TGU | Tagged-Union over optional-field structs |
 | PRI | Prompt-injection Resistance from user Input |
@@ -46,7 +46,7 @@ every code a dispatch `.sh` emits resolves to exactly one row here.
 | TSJ | TypeScript/Bun judgment conventions (Bun-native, file ordering, error style) |
 | UIS | UI Substitution (design-system primitive over raw HTML) |
 | DTK | Design ToKens (named token utility over arbitrary value) |
-| SCH | SCHema teardown (pre-2.0 full removal; no ALTER/DROP/marker) |
+| SCH | SCHema teardown (pre-0.30 full removal; no ALTER/DROP/marker) |
 | ITF | Integration Test Fixtures (real schema, not TEMP-table mock) |
 | LOG | LOGging discipline (scoped event, error_code, severity, redaction) |
 | MSID | Milestone-ID ban in source (M{N}_{NNN} / §x.y / T{N} / dim) |
@@ -196,7 +196,7 @@ every code a dispatch `.sh` emits resolves to exactly one row here.
 
 ## RULE MIG — Migration index assertions track position
 
-**Rule:** When inserting, splitting, or removing migration files, update every index-based assertion in `src/cmd/common.zig`. While `cat VERSION` < 2.0.0, removed files become `SELECT 1;` (see RULE SCH) — their array slot stays but the assertion must match the new content.
+**Rule:** When inserting, splitting, or removing migration files, update every index-based assertion in `src/cmd/common.zig`. While `cat VERSION` < 0.30.0, removed files become `SELECT 1;` (see RULE SCH) — their array slot stays but the assertion must match the new content.
 **Why:** Stale index silently points at the wrong SQL file with no compile-time error. assertions checked for CREATE TABLE in files that were now `SELECT 1;` version markers.
 **Tags:** zig, sql
 **Example:** migrations[7] pointed at wrong file after a split. migrations[14]/[15] asserted dropped table names in version marker files.
@@ -390,19 +390,19 @@ a rename of the first would have disabled the account purge with no failing test
 **Tags:** zig
 **Example:** HMAC version "v0" derived by slicing "v0=" prefix — fixed with explicit hmac_version field.
 
-## RULE SCH — Pre-v2.0 schema removal: full teardown, no markers, no DROP
+## RULE SCH — Pre-v0.30 schema removal: full teardown, no markers, no DROP
 
-**Rule:** While `cat VERSION` < 2.0.0 (teardown-rebuild era), removing tables MUST be a full teardown: (1) delete the SQL file (`rm schema/NNN_foo.sql`), (2) remove the `@embedFile` constant from `schema/embed.zig`, (3) remove the migration array entry from `src/cmd/common.zig` and update its array length + any index-based tests. Never write ALTER TABLE, DROP TABLE, or `SELECT 1;` placeholders. Never keep version-marker files. Migration slot numbers are not sacred pre-v2.0 — the DB is wiped on every rebuild, and gaps in numbering are fine. After VERSION >= 2.0.0, switch to proper ALTER/DROP migrations in new numbered files.
-**Why:** Markers accumulate dead code and still force CI to splitter-parse them. Pre-v2.0 there is zero production data to protect; full removal is cleaner and leaves no false grep hits or stale migration slots.
+**Rule:** While `cat VERSION` < 0.30.0 (teardown-rebuild era), removing tables MUST be a full teardown: (1) delete the SQL file (`rm schema/NNN_foo.sql`), (2) remove the `@embedFile` constant from `schema/embed.zig`, (3) remove the migration array entry from `src/cmd/common.zig` and update its array length + any index-based tests. Never write ALTER TABLE, DROP TABLE, or `SELECT 1;` placeholders. Never keep version-marker files. Migration slot numbers are not sacred pre-v0.30 — the DB is wiped on every rebuild, and gaps in numbering are fine. From VERSION >= 0.30.0 the datastore is live production data, so every removal or reshape is a numbered ALTER/DROP migration and the teardown path is closed. **Compare the version field by field, never as a string:** `0.29.0` is under the anchor, `0.30.0` is not, and a lexical compare puts `0.30.0` below `0.9.0` — the anchor moved off a major-number boundary precisely so the minor field decides.
+**Why:** Markers accumulate dead code and still force CI to splitter-parse them. Below 0.30.0 the development database is dropped and re-created from empty, so there is no production data to protect and full removal leaves no false grep hits or stale migration slots. At 0.30.0 that stops being true: the deployment holds data nobody can re-create, which is what makes an in-place migration the only safe shape from then on.
 **Tags:** sql, process
 **Example:** harness teardown — supersedes prior "replace with `SELECT 1;`" guidance. Under the old rule, comment-only markers broke CI (apostrophe in "slots" opened unterminated string in splitter); full deletion avoids the marker problem entirely.
 
-## RULE EP4 — Removed endpoints return 410 Gone, not 404 (post-v2.0 only)
+## RULE EP4 — Removed endpoints return 410 Gone, not 404 (from v0.30 on)
 
-**Rule:** While `cat VERSION` < 2.0.0 (teardown-rebuild era), removed endpoints MAY simply 404 — API drift is allowed because there are no stable external clients. Do NOT write 410 Gone stubs for pre-v2.0 removals; they are ceremony without value. Once VERSION >= 2.0.0, intentionally removed endpoints MUST return HTTP 410 Gone with a named error code — 404 implies a routing error to monitors and clients, 410 signals permanent intentional removal.
-**Why:** Pre-v2.0 mirrors the schema teardown policy (RULE SCH) — we tear down DB + APIs freely because nobody downstream is pinned to them. Post-v2.0, 410 becomes load-bearing for client behavior and deprecation signals.
+**Rule:** While `cat VERSION` < 0.30.0 (teardown-rebuild era), removed endpoints MAY simply 404 — API drift is allowed because no deployed client is pinned to the route. Do NOT write 410 Gone stubs for pre-v0.30 removals; they are ceremony without value. From VERSION >= 0.30.0, intentionally removed endpoints MUST return HTTP 410 Gone with a named error code — 404 implies a routing error to monitors and clients, 410 signals permanent intentional removal.
+**Why:** Below 0.30.0 this mirrors the schema teardown policy (RULE SCH) — we tear down DB + APIs freely because nobody downstream is pinned to them. From 0.30.0 the deployment is in production and 410 becomes load-bearing for client behavior and deprecation signals.
 **Tags:** zig, api
-**Example:** shipped /v1/runs/* + /v1/specs as 410 stubs before this rule was scoped. removed /v1/harness/* and /v1/agents/{id} as bare 404s under the pre-v2.0 carve-out.
+**Example:** shipped /v1/runs/* + /v1/specs as 410 stubs before this rule was scoped. removed /v1/harness/* and /v1/agents/{id} as bare 404s under the teardown-era carve-out.
 
 ## RULE FXS — Fixed-size scan buffers are security bypasses
 
@@ -939,11 +939,11 @@ const handleConfirm = useCallback(async () => {
 **Tags:** cli, error-messages, ux, refactor
 **Example:** Zig — pR #258. Greptile P1 finding `3145406909`: UZ-ZMB-008 hint still said `Run 'agentsfleet install <template>'` after the legacy positional form was removed in §1 of the same PR. Sweep also caught a stale `// agentsfleet up sends both files raw` comment in `config.zig` header. Fix in commit (this commit).
 
-## RULE NLG — No legacy compat shims pre-v2.0.0
+## RULE NLG — No legacy compat shims pre-v0.30.0
 
-**Rule:** Until `VERSION` reaches `2.0.0`, the codebase has no external consumers and no published API. Every interface change extends the existing surface in place — never via a `V2`-suffixed twin, parallel "legacy" path, `if (legacy_caller)` branch, command-line alias for an old verb or flag, or backward-compat fallback. When an RPC, route, struct, table, command, flag, or config key changes, edit the existing one and update every caller in the same commit. When a behavior is replaced, delete the old code path, do not leave it `orelse` reachable. The Schema Table Removal Guard's "teardown-rebuild era" framing applies to every interface, not just SQL.
+**Rule:** Until `VERSION` reaches `0.30.0`, no deployment we owe compatibility to is running: the datastore is rebuilt from empty and every caller of every interface is in this tree. Every interface change therefore extends the existing surface in place — never via a `V2`-suffixed twin, parallel "legacy" path, `if (legacy_caller)` branch, command-line alias for an old verb or flag, or backward-compat fallback. When an RPC, route, struct, table, command, flag, or config key changes, edit the existing one and update every caller in the same commit. When a behavior is replaced, delete the old code path, do not leave it `orelse` reachable. The Schema Table Removal Guard's "teardown-rebuild era" framing applies to every interface, not just SQL. `0.30.0` is the release that ends it: from there the deployment is in production, a caller can be outside this tree, and a compatibility surface is a design decision with a migration behind it — proposed to the owner, never added as a hedge. Compare the version field by field, never as a string.
 
-**Why:** Pre-alpha duplicates rot faster than any documentation. Every `CreateExecutionV2`, every `if (caller_is_legacy)` arm, every "we'll keep the old one for now" hedge becomes a phantom contract that nobody owns and every future spec has to reason about. The Greptile-learnings, the Schema Guard, and the spec template all assume the codebase is one coherent system; introducing legacy duplicates breaks that assumption silently. Post-v2.0.0 we earn the right to versioning ceremonies; before then, the cost of a duplicate is paid by every reader.
+**Why:** Duplicates rot faster than any documentation. Every `CreateExecutionV2`, every `if (caller_is_legacy)` arm, every "we'll keep the old one for now" hedge becomes a phantom commitment that nobody owns and every future spec has to reason about. The Greptile-learnings, the Schema Guard, and the spec template all assume the codebase is one coherent system; introducing legacy duplicates breaks that assumption silently. From 0.30.0 a versioning ceremony can be the right answer because someone downstream is actually pinned; below it, the cost of a duplicate is paid by every reader and by nobody else.
 
 **How to apply:**
 
@@ -954,10 +954,10 @@ const handleConfirm = useCallback(async () => {
 - Legacy-Design Consult Guard still fires when you find a *pre-existing* legacy shim left over from the v1→v2 teardown. This rule says: don't create new ones.
 - Command-line renames follow the same rule: if the product verb moves to `create`, do not add `add` as an alias. If a flag or command spelling changes, use the new spelling only unless Indy explicitly asks for a compatibility alias in the same session.
 
-**Override syntax:** `RULE NLG: SKIPPED per user override (reason: ...)` immediately preceding the edit. Override requires a concrete external consumer that can't be migrated in the same commit — vanishingly rare pre-v2.0.0.
+**Override syntax:** `RULE NLG: SKIPPED per user override (reason: ...)` immediately preceding the edit. Override requires a concrete external consumer that can't be migrated in the same commit — vanishingly rare below 0.30.0.
 
 **Tags:** architecture, refactor, versioning, plan, execute
-**Example:** PLAN, Apr 29, 2026. The temptation to introduce `CreateExecutionV2` to avoid editing the existing RPC and its callers came up during spec audit — rejected because (a) the executor RPC has a single in-tree caller (the worker) and (b) v2.0.0 has not shipped, so no external compatibility is owed. Rule generalizes the call: in-place extension is the only sanctioned path until VERSION crosses 2.0.0.
+**Example:** PLAN, Apr 29, 2026. The temptation to introduce `CreateExecutionV2` to avoid editing the existing RPC and its callers came up during spec audit — rejected because (a) the executor RPC has a single in-tree caller (the worker) and (b) the release that puts us in production had not shipped, so no external compatibility was owed. Rule generalizes the call: in-place extension is the only sanctioned path until VERSION crosses 0.30.0.
 
 ## RULE RTM — Route matchers segment-based, never substring-based
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentsfleet/orly",
-  "version": "0.10.6",
+  "version": "0.10.8",
   "description": "Repository-scoped engineering harness: renders agent rules, materialises the gates that enforce them, and proves the PR boundary \u2014 for any coding agent.",
   "license": "MIT",
   "type": "module",