@akagilnc/pi-workflow-roles 0.1.5015 → 0.1.5063

package/dist/package-resources/method-skill.js

@@ -1,259 +0,0 @@
-/**
- * Package-owned role method Skill seam (ADR 0052 / #109).
- * Forced methods load from the installed package copy — never ambient home discovery.
- *
- * This module is intentionally free of @earendil-works/pi-coding-agent so the
- * public ak-role bin can load provenance/path without bundling peer runtime.
- */
-import { createHash } from "node:crypto";
-import { readFile, realpath } from "node:fs/promises";
-import { join } from "node:path";
-import { sha256Hex } from "../sha256.js";
-/** Package-side unavailable method Skill (mirrors CanonicalSkillUnavailableError identity). */
-export class PackagedMethodSkillUnavailableError extends Error {
-    skillName;
-    code = "canonical-skill-unavailable";
-    constructor(skillName, path, cause) {
-        super(`Canonical ${skillName} Skill is unavailable at ${path}`, { cause });
-        this.skillName = skillName;
-        this.name = "CanonicalSkillUnavailableError";
-    }
-}
-const METHOD_SKILL_RELATIVE_ROOT = "resources/methods";
-const GIT_COMMIT_RE = /^[0-9a-f]{40}$/;
-const GIT_BLOB_RE = /^[0-9a-f]{40}$/;
-const SHA256_RE = /^[0-9a-f]{64}$/;
-const REQUIRED_COMPANIONS = {
-    tdd: ["tests.md", "mocking.md", "agents/openai.yaml"],
-    "diagnosing-bugs": ["agents/openai.yaml", "scripts/hitl-loop.template.sh"],
-    "ak-cross-m-review": [
-        "CONTEXT.md",
-        "LICENSE",
-        "prompts/cmr-completeness.md",
-        "prompts/cmr-reviewer.md",
-    ],
-    "resolving-merge-conflicts": ["agents/openai.yaml"],
-};
-/** Git blob OID for raw file bytes (sha1 of `blob <size>\\0` + content). */
-export function gitBlobOid(bytes) {
-    const body = typeof bytes === "string" ? Buffer.from(bytes, "utf8") : Buffer.from(bytes);
-    const header = Buffer.from(`blob ${body.byteLength}\0`, "utf8");
-    return createHash("sha1").update(header).update(body).digest("hex");
-}
-/** Minimal frontmatter strip — body after closing `---` fence (or full text). */
-export function stripSkillFrontmatter(content) {
-    if (!content.startsWith("---"))
-        return content;
-    const end = content.indexOf("\n---", 3);
-    if (end === -1)
-        return content;
-    const after = content.slice(end + "\n---".length);
-    return after.replace(/^\r?\n/, "");
-}
-export function packagedMethodSkillRelativeDirectory(name) {
-    return `${METHOD_SKILL_RELATIVE_ROOT}/${name}`;
-}
-export function resolvePackagedMethodSkillRoot(packageRoot, name) {
-    return join(packageRoot, packagedMethodSkillRelativeDirectory(name));
-}
-export function resolvePackagedMethodSkillPath(packageRoot, name) {
-    return join(resolvePackagedMethodSkillRoot(packageRoot, name), "SKILL.md");
-}
-function isRecord(value) {
-    return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function parseProvenance(raw, expectedName) {
-    if (!isRecord(raw)) {
-        throw new Error(`Packaged method provenance must be an object for ${expectedName}`);
-    }
-    if (raw.name !== expectedName) {
-        throw new Error(`Packaged method provenance name mismatch: expected ${expectedName}, got ${String(raw.name)}`);
-    }
-    if (raw.kind !== "role-method-skill") {
-        throw new Error(`Packaged method provenance kind must be role-method-skill`);
-    }
-    if (typeof raw.packageAdaptation !== "string" || raw.packageAdaptation.trim() === "") {
-        throw new Error(`Packaged method provenance packageAdaptation must be nonblank`);
-    }
-    if (!isRecord(raw.upstream)) {
-        throw new Error(`Packaged method provenance upstream must be an object`);
-    }
-    const upstream = raw.upstream;
-    for (const key of [
-        "repository",
-        "path",
-        "license",
-        "copyright",
-        "attribution",
-    ]) {
-        if (typeof upstream[key] !== "string" || upstream[key].trim() === "") {
-            throw new Error(`Packaged method provenance upstream.${key} must be nonblank`);
-        }
-    }
-    if (typeof upstream.commit !== "string" || !GIT_COMMIT_RE.test(upstream.commit)) {
-        throw new Error(`Packaged method provenance upstream.commit must be a 40-char lowercase git object id`);
-    }
-    const tag = typeof upstream.tag === "string" && upstream.tag.trim() !== ""
-        ? upstream.tag.trim()
-        : undefined;
-    const version = typeof upstream.version === "string" && upstream.version.trim() !== ""
-        ? upstream.version.trim()
-        : undefined;
-    if (tag === undefined && version === undefined) {
-        throw new Error(`Packaged method provenance upstream must include nonblank tag or version`);
-    }
-    if (!isRecord(raw.files)) {
-        throw new Error(`Packaged method provenance files must be an object`);
-    }
-    const files = {};
-    for (const [rel, entry] of Object.entries(raw.files)) {
-        if (!isRecord(entry)) {
-            throw new Error(`Packaged method provenance file entry must be an object: ${rel}`);
-        }
-        if (typeof entry.sha256 !== "string" || !SHA256_RE.test(entry.sha256)) {
-            throw new Error(`Packaged method provenance file sha256 invalid: ${rel}`);
-        }
-        if (typeof entry.byteLength !== "number" ||
-            !Number.isInteger(entry.byteLength) ||
-            entry.byteLength < 0) {
-            throw new Error(`Packaged method provenance file byteLength invalid: ${rel}`);
-        }
-        if (typeof entry.gitBlob !== "string" || !GIT_BLOB_RE.test(entry.gitBlob)) {
-            throw new Error(`Packaged method provenance file gitBlob must be a 40-char lowercase git object id: ${rel}`);
-        }
-        files[rel] = {
-            sha256: entry.sha256,
-            byteLength: entry.byteLength,
-            gitBlob: entry.gitBlob,
-        };
-    }
-    if (files["SKILL.md"] === undefined) {
-        throw new Error(`Packaged method provenance must include SKILL.md`);
-    }
-    return Object.freeze({
-        name: expectedName,
-        kind: "role-method-skill",
-        packageAdaptation: raw.packageAdaptation,
-        upstream: Object.freeze({
-            repository: upstream.repository,
-            path: upstream.path,
-            commit: upstream.commit,
-            ...(tag === undefined ? {} : { tag }),
-            ...(version === undefined ? {} : { version }),
-            license: upstream.license,
-            copyright: upstream.copyright,
-            attribution: upstream.attribution,
-        }),
-        files: Object.freeze(files),
-    });
-}
-/**
- * Load a package-owned method Skill and verify per-file provenance digests.
- * Does not consult HOME or ambient Skill discovery paths.
- */
-export async function loadPackagedMethodSkillMaterial(packageRoot, name) {
-    const rootDirectory = resolvePackagedMethodSkillRoot(packageRoot, name);
-    const skillPathConfigured = join(rootDirectory, "SKILL.md");
-    const provenancePath = join(rootDirectory, "provenance.json");
-    let provenanceRaw;
-    try {
-        provenanceRaw = await readFile(provenancePath, "utf8");
-    }
-    catch (error) {
-        throw new PackagedMethodSkillUnavailableError(name, provenancePath, error);
-    }
-    let provenanceJson;
-    try {
-        provenanceJson = JSON.parse(provenanceRaw);
-    }
-    catch (error) {
-        throw new Error(`Packaged method provenance is not valid JSON at ${provenancePath}`, {
-            cause: error,
-        });
-    }
-    const provenance = parseProvenance(provenanceJson, name);
-    // Verify every declared file digest + independent git blob against package bytes (no network).
-    for (const [rel, expected] of Object.entries(provenance.files)) {
-        const absolute = join(rootDirectory, rel);
-        let bytes;
-        try {
-            bytes = await readFile(absolute);
-        }
-        catch (error) {
-            throw new PackagedMethodSkillUnavailableError(name, absolute, error);
-        }
-        const actualSha = sha256Hex(bytes);
-        const actualBlob = gitBlobOid(bytes);
-        if (actualSha !== expected.sha256 ||
-            bytes.byteLength !== expected.byteLength ||
-            actualBlob !== expected.gitBlob) {
-            throw new Error(`Packaged method file digest mismatch for ${name}/${rel}: expected sha256=${expected.sha256} byteLength=${expected.byteLength} gitBlob=${expected.gitBlob}, got sha256=${actualSha} byteLength=${bytes.byteLength} gitBlob=${actualBlob}`);
-        }
-    }
-    let skillPath;
-    let raw;
-    try {
-        skillPath = await realpath(skillPathConfigured);
-        raw = await readFile(skillPath, "utf8");
-    }
-    catch (error) {
-        throw new PackagedMethodSkillUnavailableError(name, skillPathConfigured, error);
-    }
-    const body = stripSkillFrontmatter(raw).trim();
-    if (body.length === 0) {
-        throw new Error(`Canonical ${name} Skill is empty at ${skillPath}`);
-    }
-    const companionRelativePaths = REQUIRED_COMPANIONS[name].filter((rel) => provenance.files[rel] !== undefined);
-    for (const rel of REQUIRED_COMPANIONS[name]) {
-        if (provenance.files[rel] === undefined) {
-            throw new Error(`Packaged method ${name} missing required companion in provenance: ${rel}`);
-        }
-    }
-    return Object.freeze({
-        name,
-        rootDirectory,
-        skillPath,
-        raw,
-        body,
-        provenance,
-        companionRelativePaths: Object.freeze([...companionRelativePaths]),
-    });
-}
-/**
- * Observe one Pi-native packaged method Skill expansion from a user-turn text.
- * Matches the structured `<skill name location>` block format only; rejects ambient
- * home locations that are not in the allowed package path set.
- */
-export function observePackagedMethodSkillInvocation(text, expected) {
-    // Structured skill-block grammar (same shape Pi expands); not free-text classification.
-    if (!text.startsWith("<skill name=\""))
-        return undefined;
-    const nameStart = "<skill name=\"".length;
-    const nameEnd = text.indexOf("\"", nameStart);
-    if (nameEnd <= nameStart)
-        return undefined;
-    const name = text.slice(nameStart, nameEnd);
-    if (name !== expected.name)
-        return undefined;
-    const locationMarker = "\" location=\"";
-    if (!text.startsWith(locationMarker, nameEnd))
-        return undefined;
-    const locationStart = nameEnd + locationMarker.length;
-    const locationEnd = text.indexOf("\"", locationStart);
-    if (locationEnd <= locationStart)
-        return undefined;
-    const location = text.slice(locationStart, locationEnd);
-    const openTail = ">\n";
-    if (!text.startsWith(openTail, locationEnd + 1))
-        return undefined;
-    const closeTag = "\n</skill>";
-    const closeAt = text.indexOf(closeTag, locationEnd + 1 + openTail.length);
-    if (closeAt === -1)
-        return undefined;
-    const afterClose = text.slice(closeAt + closeTag.length);
-    if (afterClose.length > 0 && !afterClose.startsWith("\n"))
-        return undefined;
-    if (!expected.allowedLocations.includes(location))
-        return undefined;
-    return Object.freeze({ name: expected.name, location });
-}

package/resources/method-host-plugin/.claude-plugin/plugin.json

@@ -1,5 +0,0 @@
-{
-  "name": "ak-methods",
-  "version": "0.0.0",
-  "description": "ak-roles packaged role method skills"
-}

package/resources/methods/ak-cross-m-review/CONTEXT.md

@@ -1,48 +0,0 @@
-# ak-cross-m-review
-
-Local, pre-PR review gate: two independent lenses against a pinned diff, one verdict each; a single lens runs in the invoking session, `all` runs both as parallel sub-agent legs. `SKILL.md` plus the selected lens prompt is the complete active authority; this file is vocabulary only.
-
-## Language
-
-**Fixed target**:
-The pinned base-to-HEAD snapshot under review, resolved to two literal SHAs
-before anything is dispatched.
-_Avoid_: range, worktree diff, working changes
-
-**Authority set**:
-The ordered sources that govern the review — user decisions first, then
-ratified ADRs / specs, then repository contracts.
-_Avoid_: spec (alone), reference docs
-
-**Lens**:
-One review question with its own prompt file — `completeness` (was the
-authority delivered?) or `correctness` (is what exists right?).
-_Avoid_: axis, gate, mode, pass
-
-**Leg**:
-One independent sub-agent running exactly one lens inside an independent copy of the target at `PRE_HEAD`, dispatched only by `all`; the copy is provided by the harness when it can, otherwise created by the caller. A single-lens invocation has no leg: the invoking session applies the lens itself.
-_Avoid_: panel, member, reviewer squad, vendor leg
-
-**Candidate**:
-An evidence-backed claim a leg submits for judgment; never a verdict.
-_Avoid_: finding (before judgment), vote
-
-**Judge**:
-The invoking session, which verifies each candidate against the fixed target
-and authority set and disposes it as live or refuted.
-_Avoid_: orchestrator, runner, merger
-
-**Verdict**:
-The single terminal line a lens ends with, labelled by lens
-(`CMR-VERDICT: completeness=…` / `CMR-VERDICT: correctness=…`).
-_Avoid_: gate result, concur, convergence
-
-**Preset**:
-A named wrapper skill that invokes the engine with one lens and returns its
-report unchanged.
-_Avoid_: gate skill, entry point
-
-**Review only**:
-The outcome boundary — the invocation reports and stops; the caller owns every
-repair, commit, retry, and later review.
-_Avoid_: read-only (that is a filesystem property, not this boundary)

package/resources/methods/ak-cross-m-review/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 Akagi
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/resources/methods/ak-cross-m-review/SKILL.md

@@ -1,170 +0,0 @@
----
-name: ak-cross-m-review
-description: Use when the user requests CMR (cross-model review) of a fixed target, or a CMR preset delegates here.
-allowed-tools:
-  - Agent
-  - Bash
-  - Read
-  - Grep
-  - Glob
----
-
-# /ak-cross-m-review — fixed-target review engine
-
-This file plus each selected prompt is the complete active authority. See `CONTEXT.md` for vocabulary.
-
-**REVIEW ONLY.** Pin one fixed target and authority set, run the selected
-lenses, judge their candidates independently, report, and stop. The caller owns
-every repair, commit, retry, and later review.
-
-Model composition is the caller's: a single lens runs in the invoking session; `all` runs each lens as one leg on whatever the harness supplies.
-
-## Invocation
-
-Direct invocation must provide every required input; these are agent-chat
-arguments, not a shell CLI:
-
-```text
-/ak-cross-m-review --base FIXED_POINT --lens completeness|correctness|all
-  --authority SOURCE [--authority SOURCE ...]
-```
-
-- `--base` supplies the fixed point compared with committed `HEAD`.
-- `--lens` is required and has no default.
-- `--authority` names a governing repository path or labelled user source.
-
-## Step 1 — Pin the fixed target
-
-Run from the target repository:
-
-1. Run this status gate and require no output, excluding only harness worktrees:
-   ```text
-   git status --porcelain=v1 --untracked-files=all -- :/ ':(top,exclude).claude/worktrees/**'
-   ```
-2. Resolve literal `PRE_HEAD` with `git rev-parse --verify 'HEAD^{commit}'`,
-   `BASE_SHA` with `git rev-parse --verify '<base>^{commit}'`, and `TARGET_ROOT`
-   with `git rev-parse --show-toplevel`.
-3. Substitute those SHAs and freeze these commands exactly:
-
-   ```text
-   git log --oneline BASE_SHA..PRE_HEAD
-   git diff --binary BASE_SHA...PRE_HEAD
-   ```
-
-4. Run the frozen log command and require the frozen diff command to produce a
-   non-empty diff.
-
-A dirty tree, unresolved required ref, unexpected failed command, or empty diff is a `hard-stop`. Record the exact failing command and its native output in one sentence.
-
-Completion criterion: clean status, literal pin values, and one non-empty diff represented by the two frozen commands.
-
-## Step 2 — Pin the authority set
-
-Freeze one ordered authority set before dispatch:
-
-1. user decisions and supplied sources;
-2. ratified ADRs, acceptance text, PRD/spec, and originating issue;
-3. repository contracts such as AGENTS/CLAUDE/CONTRIBUTING, public APIs, and
-   behavior tests;
-4. surrounding code as evidence of an established contract only.
-
-Follow references named by higher authority; lower authority cannot override
-higher authority. List repository authority by relative path. Put exact
-user-supplied text in the brief under a stable label such as
-`user-authority-1`, with stable line addresses.
-
-Completeness, alone or inside `all`, requires clause authority addressable as
-repository `path:line` or brief `source-label:line`. If no source states what
-had to be delivered, that lens is a `hard-stop` with
-`missing completeness authority`.
-Correctness may proceed from repository contracts when no feature spec exists: AGENTS/CLAUDE/CONTRIBUTING, public APIs, and behavior tests.
-
-Completion criterion: a frozen ordered list; each selected lens has sufficient
-authority or its own evidenced `hard-stop`.
-
-## Step 3 — Select lenses
-
-`--lens completeness|correctness|all` is required; omission is a usage error (report it; no verdict line).
-
-- `completeness` loads `prompts/cmr-completeness.md` and applies
-  Clause–Wire–Exercise.
-- `correctness` loads `prompts/cmr-reviewer.md` and applies
-  Trace–Break–Prove.
-- `all` launches both lenses as sub-agent legs in one parallel batch.
-
-Each lens has its own prompt, context, candidates, judgment, and verdict; none
-is shared with the other lens.
-
-Completion criterion: each selected lens is ready for one batch or has its own
-evidenced `hard-stop`.
-
-## Step 4 — Run the selected lenses
-
-A single lens runs in the invoking session: apply the selected lens prompt yourself in `TARGET_ROOT` at `PRE_HEAD`, run the frozen commands, read the authority and the repository, probe where useful, and write the complete candidate list under the lens's candidate contract before judging anything in Step 5. Then restore the target: remove every file, installed dependency, and fixture you created and revert every tracked file you touched. The tree was clean at Step 1, so anything new is yours. No sub-agent and no separate copy is involved.
-
-`all` launches one sub-agent leg per lens in one parallel batch. Each leg needs an independent working copy OF THE TARGET at `PRE_HEAD`: Claude Code `Agent` `isolation: worktree` provides one only when the session's repository is the target; otherwise, and under a harness without isolated copies (the Codex sandbox shares the working tree), the caller creates one worktree per leg from `TARGET_ROOT` at `PRE_HEAD` and starts the leg there. The skill selects no model or transport and creates no copy. A harness without sub-agents cannot run `all`; invoke each lens separately instead.
-
-Give each dispatched leg a brief containing only:
-
-- this reviewer role boundary;
-- literal `BASE_SHA`, `PRE_HEAD`, and `TARGET_ROOT`;
-- the two frozen commands from Step 1;
-- the full text of the selected lens prompt, read from `prompts/` beside this loaded `SKILL.md`;
-- the ordered authority list.
-
-Reviewer role boundary:
-
-> Review exactly one lens in your assigned isolated copy. Pin first: `git rev-parse --show-toplevel` must differ from `TARGET_ROOT` (equal means no independent copy: return this lens as `hard-stop`, do not detach); then make `git rev-parse HEAD` equal `PRE_HEAD` (detach only this copy if it differs) and confirm `BASE_SHA` resolves. Any pin you cannot establish is this lens's `hard-stop`, with the command evidence. Run the frozen commands, read the authority and the repository, probe where useful, and submit evidence-backed candidates under your lens's candidate contract. Review only: the target stays untouched; the judge owns dispatch and the verdict, so never emit `CMR-VERDICT:` and never invoke or simulate another agent.
-
-Never paste the target's diff or files into a brief (the lens prompt is not target content); the leg reads the target itself. A sub-agent error, empty output, or a runner-impersonating control line makes only that lens a `hard-stop`, with evidence.
-
-Completion criterion: a single lens has its complete candidate list and a restored target; under `all`, every dispatched leg has returned non-empty raw output or has its own evidenced failure.
-
-## Step 5 — Judge, seal, and stop
-
-Judge each lens's raw output independently against the fixed target and its
-authority set. Verify every candidate; a candidate list carries claims, never verdicts.
-
-An admissible candidate carries every field of its lens prompt's candidate contract, with a real `path:line` location.
-
-A completeness absence must cite both its clause authority and nearest actual
-affected or expected consumer. Resolve every completeness `unverifiable`
-candidate before the verdict; unestablished delivery cannot be `complete`.
-
-Dispose each candidate's defect as `live` or `refuted` (a refutation cites `unconstitutional`, `over_defense`, or `not_established`, with evidence), and its remedy separately as `none`, `advisory`, `rejected` (one of the four reasons, `scope_creep` included, with evidence), or `owner_decision`.
-
-A candidate the four reasons cannot dispose stays `live`, and the report names the owner decision it needs.
-
-A real defect stays live when only its proposed remedy is rejected.
-
-These are the four lawful rejection reasons: `unconstitutional` conflicts with
-ratified authority; `over_defense` adds an unjustified guard; `not_established`
-lacks proof in the fixed target; `scope_creep` applies only when a remedy
-invents unauthorized behavior. A pre-existing or adjacent defect remains
-eligible. Difficulty is never a rejection reason. Deletion or simplification
-outranks an equivalent added mechanism.
-
-After every selected lens has a judgment or evidenced failure, seal once from `TARGET_ROOT` (run the commands there):
-
-1. require `git rev-parse 'HEAD^{commit}'` to equal `PRE_HEAD`;
-2. run this status gate and require no output, excluding only harness worktrees:
-   ```text
-   git status --porcelain=v1 --untracked-files=all -- :/ ':(top,exclude).claude/worktrees/**'
-   ```
-
-A moved HEAD is a `hard-stop` with before/after evidence. Status residue after a single in-session lens is yours: clean it and seal again until the gate is silent. Status residue after dispatched legs is not yours: `hard-stop` with the status evidence, and never reset, checkout, remove, or clean what you did not create.
-
-End each selected lens with exactly one labelled line:
-
-```text
-CMR-VERDICT: completeness=complete|gaps|hard-stop
-CMR-VERDICT: correctness=converged|findings|hard-stop
-```
-
-Completeness is `complete` when no live gap or unresolved `unverifiable` row
-remains; otherwise it is `gaps`. Correctness is `converged` when no live defect
-remains; otherwise it is `findings`.
-`hard-stop` means a prerequisite, seal, or leg failure as defined above; Step 1 pin and seal failures apply to every selected lens, while Step 2 and leg failures apply only to that lens. A `--lens` usage error emits no verdict line.
-
-Completion criterion: after the single successful seal, every selected lens has an independent judgment or evidenced failure and exactly one labelled verdict;
-or, on an evidenced pin or seal failure, every selected lens carries its labelled `hard-stop`. Stop unconditionally.

package/resources/methods/ak-cross-m-review/prompts/cmr-completeness.md

@@ -1,118 +0,0 @@
-# Completeness lens — Clause–Wire–Exercise
-
-You are one independent completeness leg for a fixed, complete diff. Your
-output is evidence-backed **candidate gaps** for a separate judge. You do not
-decide the verdict or fill the gaps yourself. Your current working
-directory holds the target at the pinned HEAD: use it for repository reading,
-search, tests, dependency installation, probes, and local artifacts. Do not
-commit, push, mutate remote state, or implement a repair.
-
-Completeness starts from authority, never from imagination. Do not invent a
-requirement, test obligation, guard, or mechanism because it seems useful. A
-green suite is evidence only for the behavior it actually exercises. Simpler or
-deletion-based delivery outranks adding an equivalent mechanism.
-
-You receive:
-
-- fixed base and HEAD SHAs;
-- one fully resolved log command and one fully resolved diff command;
-- an ordered authority path/source list with enumerable clauses;
-- this lens and the candidate contract below.
-
-Run the supplied log and diff commands yourself. Read every repository authority
-path from the working directory and every labelled user source from the task
-packet, plus the surrounding producers, consumers, tests, and contracts. The task
-packet is an assignment, not a repository substitute; do not assume that an
-omitted file body or non-embedded diff is unavailable.
-
-## 1. Clause
-
-Keep a private ledger of every authoritative requirement. Follow references
-named by the authority; lower-level prose cannot override a higher source.
-
-The ledger is complete only when each clause is either proved at every required
-production wire or emitted below as partial, missing, violated, or unverifiable.
-`unverifiable` names the exact missing evidence. Every candidate gap must name
-its governing authority clause.
-
-## 2. Wire
-
-For each executable clause that appears delivered, trace the real wire:
-
-```text
-production instruction/producer → binding/schema → decoder/consumer → externally visible effect
-```
-
-Confirm that the consumer is invoked on the relevant path and that the effect
-matches the clause. A file, function, flag, or test existing in isolation is not
-delivery when nothing consumes it. For a delegation or exemption, verify the
-named delegate/backstop exists and is connected; otherwise the premise is
-missing or violated.
-
-For a runtime artifact introduced for the first time, trace both its invocation
-and its availability chain: inventory/package/mount/discovery/preflight must make
-the artifact reachable before the runtime consumer calls it.
-
-For each exported seam or shared contract changed by the diff, search every
-reference and authority-required consumer from the canonical source. Reconcile
-every declared variant and production wire individually; a declared capability
-that no required consumer uses is a candidate gap.
-
-For a design document, identify the downstream decision, state transition, or
-implementation boundary that consumes each clause. Do not demand that future
-code already exists merely because the design precedes implementation; audit
-whether the document gives its consumer an unambiguous, usable decision.
-
-## 3. Exercise
-
-Exercise only a **load-bearing** gate, guard, or state machine: a mechanism the
-authority relies on to reject, route, or transition behavior. Do not require a
-probe for ordinary prose, passive data, or a non-load-bearing helper.
-
-When safe and runnable:
-
-1. choose the input/state the mechanism is required to handle;
-2. run the real entry path or the narrowest faithful probe;
-3. observe whether the required rejection, route, or transition occurs;
-4. record the command, injected condition, and result.
-
-Static shape and author-written happy-path tests do not prove a load-bearing
-mechanism works. If it cannot be exercised, record `unverifiable` and the exact
-missing evidence unless other evidence establishes the required behavior. Do
-not manufacture a gap beyond the authority.
-
-A test is required only when the authority requires one or when it is the
-available evidence for a claimed behavioral wire.
-
-## 4. Candidate gaps
-
-Create a candidate for a ledger row proved partial, missing, violated, or hollow
-at its real consumer. Also create one for every `unverifiable` row so the judge
-can resolve it; claim only that delivery is not established and name the missing
-evidence, not that the behavior is absent. Each candidate contains:
-
-```text
-location: nearest actual affected or expected consumer path:line
-claim: what required delivery is absent, contradicted, hollow, or not yet established
-failure scenario: trigger → consumer/path → wrong effect, or required path/effect still unproved
-authority: repository path:line or task-packet source-label:line + governing clause
-evidence: ledger row, files read, commands/probes, and observed result
-severity_hint: impact if the judge establishes the gap
-remedy: optional; omit when uncertain
-```
-
-Even an absence needs both real anchors: the authority repository `path:line` or
-task-packet `source-label:line` that requires the behavior, and the nearest
-affected/expected consumer `path:line`. A proposed filename, stable symbol, or
-unlocated summary is not admissible evidence.
-
-Check the project's constitution as authority. A mechanism that conflicts with
-a ratified ADR or owner decision can be a gap-by-violation even when fully
-implemented; prefer identifying the unnecessary mechanism over proposing more
-machinery around it.
-
-## Output
-
-Return every proved candidate gap and every unverifiable candidate. If none
-exist, state that outcome. Keep the private clause ledger and coverage work
-internal. The judge owns the terminal verdict and every later action.