@antoneeo/kb-agentic-skill 1.26.0 → 1.28.0

package/CHANGELOG.md

@@ -2,6 +2,28 @@
 
 Every significant change to this skill is recorded here.
 
+## [1.28.0] - 2026-10-19
+
+Includes everything listed under [1.27.0], which was tagged but never published to npm.
+
+### Added
+- Docs site: each card in Open work and each feature in Features links its merge review and its end-to-end test script, when they exist. They were reachable only inside a feature's chain page; who merges looks in Open work while the work is open, who tests looks in Features after it closed.
+
+### Changed
+- Docs site: Features are listed newest first by their declared start date; those without a start date come last.
+
+## [1.27.0] - 2026-10-18
+
+### Changed
+- F-071: a review weighs effort against what the owner asked for. In a design review, each outcome the owner named (the opening request, any entry widening scope, an approved north star) is a row of the conformance statement, saying where the design serves it and what share of the design goes to it; an outcome no section serves, or one served by a minor share while a secondary concern takes the bulk, is a finding. `review.md` §Reviewing.
+- F-071: a review runs where something is left to judge. At level 2 the closure review is due only on a security-sensitive area the lens's Rule Zero names, or at the owner's request; otherwise it does not run and logs no row. After a design or closure PASS, a delta made only of version and release metadata, regenerated indexes and audit-mark records, tool-verified copies of a shared file, and CHANGELOG lines adding no claim is not reviewed: its own check runs and a `NOT DUE` row records it. README or overview prose, an E2E script, a rulings row, doctrine, behaviour, tests and any correction of a review finding are still reviewed. `review.md` §When a review is due.
+- `sdlc_check.py benefit` counts `NOT DUE` rows apart, in no review or findings figure.
+
+## [1.26.1] - 2026-10-18
+
+### Fixed
+- F-072 (field run): the `SKILL.md` line that announces the docs site now reads `scripts/docs_site.py --root <project> --open` and says to use it to show the project state. Asked for the state, an agent had opened the site in its own client pane, where it renders blank, and improvised a local server; `--open` opens it in the user's browser, where it works offline.
+
 ## [1.26.0] - 2026-10-18
 
 ### Added

package/gemini-extension.json

@@ -1,6 +1,6 @@
 {
   "name": "kb-agentic-skill",
-  "version": "1.26.0",
+  "version": "1.28.0",
   "description": "Knowledge-Base & Document-First protocol with risk triage, Vision governance, signal distillation and optional devPNT integration.",
   "author": "Antonio Pinto (https://github.com/Antoneeo)"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antoneeo/kb-agentic-skill",
-  "version": "1.26.0",
+  "version": "1.28.0",
   "description": "Knowledge-Base & Document-First protocol for Claude Code, Gemini CLI, Google Antigravity and Codex with risk triage, Vision governance, signal distillation and optional devPNT integration.",
   "keywords": [
     "claude-code",

package/skills/kb-agentic-skill/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: kb-agentic
-version: 1.26.0
+version: 1.28.0
 description: Knowledge-Base & Document-First protocol with risk-proportional triage, Vision as a guide, Signal Distillation, a complete Standalone mode and optional symbiosis with devPNT. Use for user documentation, knowledge extraction, SOPs, research notes, decision logs, knowledge management — and for answering project questions from the claim ledger and topic graph.
 author: Antonio Pinto (https://github.com/Antoneeo)
 copyright: (c) 2026 Antonio Pinto
@@ -25,7 +25,7 @@ Support files in the skill directory:
 - `dispatch.md`: opt-in subagent execution of an approved plan, plus the family-wide delegation boundary (what may be delegated at all) — that part applies at any level.
 - `routing.md`: which lens owns this unit of work. Read ONLY when a sibling lens skill is installed alongside this one; a single-lens install never reads it.
 - `scripts/sdlc_check.py` + `scripts/sdlc_core.py`: the mechanical validator for the docs root (`check`, `validate`, `index`, `mark`, `benefit`, `gate`, `plan`, `orient`, `migrate`, and the knowledge overlay: `graph`, `corpus`, `claim-id`, `anchor`, `export`, `import`, `stale` (spine staleness plus `## claims` -- the time cycle's consolidated view), plus `remind` — the opt-in per-turn one-line reminder, ENFORCEMENT §4).  Keep the entry point, `scripts/sdlc_core.py` and `scripts/knowledge.py` together; the last supplies common memory and KB integrity.
-- `scripts/docs_site.py --root <project>`: writes an offline, read-only site of what the agent reads here, for the user to browse.
+- `scripts/docs_site.py --root <project> --open`: opens in the user's browser a read-only site of what the agent reads; use it to show the project state.
 - `ENFORCEMENT.md`: optional setup for CI and hooks.
 
 Read these files only when needed. `SKILL.md` is the operating contract; the support files are progressive resources.

package/skills/kb-agentic-skill/docs_site/app.js

@@ -273,6 +273,11 @@
       C.chronology.length ? eventList(C.chronology) : el("p", { "class": "empty", text: t("chronology_empty") }));
   }
 
+  function verifyLinks(o) {
+    return [o.merge ? docLink(o.merge, t("chain_merge")) : null,
+            o.e2e ? docLink(o.e2e, t("chain_e2e")) : null].filter(Boolean);
+  }
+
   function pageWork() {
     setNav("work");
     var w = C.work;
@@ -289,7 +294,7 @@
             el("h3", { text: c.name }),
             el("dl", null, rows),
             c.next ? el("div", { "class": "next" }, el("b", { text: t("work_next") }), c.next) : null,
-            el("div", { "class": "links" }, docLink(c.path, t("work_resume"))));
+            el("div", { "class": "links" }, docLink(c.path, t("work_resume")), verifyLinks(c)));
         }))
       : el("p", { "class": "empty", text: t("work_empty") });
     main(heading(t("work_title"), t("work_why")), cards,
@@ -331,14 +336,15 @@
             return el("div", { "class": "unit" },
               el("span", { "class": "id", text: u.id || "" }),
               docLink(u.path, u.name),
-              el("div", { "class": "muted" }, [u.status, u.level ? levelLabel(u.level) : null, lensName(u.lens), dates(u)].filter(written).join(" · ")));
+              el("div", { "class": "muted" }, [u.status, u.level ? levelLabel(u.level) : null, lensName(u.lens), dates(u)].filter(written).join(" · ")),
+              verifyLinks(u).length ? el("div", { "class": "links" }, verifyLinks(u)) : null);
           }));
       }));
     } else {
       body = el("table", { "class": "list" },
         el("thead", null, el("tr", null, [t("units_id"), t("units_name"), t("work_status"), t("work_level"), t("units_lens"), t("units_dates")].map(function (h) { return el("th", { text: h }); }))),
         el("tbody", null, shown.map(function (u) {
-          return el("tr", null, el("td", null, el("code", { text: u.id || "" })), el("td", null, docLink(u.path, u.name)),
+          return el("tr", null, el("td", null, el("code", { text: u.id || "" })), el("td", null, docLink(u.path, u.name), verifyLinks(u).length ? el("div", { "class": "links" }, verifyLinks(u)) : null),
             el("td", null, u.status ? statusPill(u.status, u.group) : ""), el("td", { text: u.level ? levelLabel(u.level) : "" }),
             el("td", { text: lensName(u.lens) }), el("td", { text: dates(u) }));
         })));

package/skills/kb-agentic-skill/review.md

@@ -15,7 +15,24 @@ Two moments, and they review different things:
 |---|---|---|---|
 | **1. Design review** | End of Phase 3 — **before any implementation** | the ANALYSIS (Standalone) / the `E-ISP`+`E-TDD` (Hybrid) | L3 |
 | **1b. Late arrival** | Work that became L3 *after* code existed — an L1/L2 reclassified mid-flight, or a design increment on a feature already implemented — runs moment 1 **now**, before any further implementation, logged `design (late)` | same | L3 |
-| **2. Closure review** | Phase 5, before DONE | the actual diff, against that approved design | L2 / L3 — the L2 closure review is optional; every review that runs logs its row |
+| **2. Closure review** | Phase 5, before DONE | the actual diff, against that approved design | L2 / L3 — at level 2 (L2; E2 in a lens that counts E-levels) it is due only on a security-sensitive area the lens's Rule Zero names, or at the owner's request, and otherwise does not run and logs no row; every review that runs logs its row |
+
+**A delta after a PASS reopens a review only where it changes what was judged.**
+A review lowers one risk — a judgement its author is blind to — at the cost of a
+deep reviewer's full read. After a design or closure PASS, a delta made only of
+these kinds carries no new judgement, and the closure review is **not due** on it:
+version numbers and release metadata; regenerated indexes and audit-mark records;
+copies of a shared file that a tool verifies identical to the reviewed one; and
+CHANGELOG lines that state nothing the reviewed artifacts do not already state. The
+list is closed and content governs it: a CHANGELOG line adding a claim is judged
+work, and a change answering a review finding is never in it (§Review-driven
+corrections governs that). Such a delta is verified by its own check and logged as a
+row with `tier` `closure`, `model` `none (not due)`, findings `0`, rounds `0` and
+verdict `NOT DUE: <the kinds; the check that ran and its result>`; a failing check
+makes the delta judged work. Any other change after the PASS — README or overview
+prose, an E2E script, a rulings row, doctrine, design, behaviour, a test — is
+reviewed, scoped to that part. In Hybrid, devPNT doctrine §4.6 adds to this rule,
+never yields to it.
 
 **The agent review comes first, the human's after — never instead (Hybrid).**
 No governed artifact that this file reviews — the design (`E-ISP`, `E-TDD`),
@@ -172,7 +189,7 @@ logging only passes would erase exactly that evidence. The row goes in
 `| date | doc_key | tier | model | reviewer | findings_raised | findings_real | verdict | revise_rounds |`,
 with `tier` = `design` or `closure` in Standalone. **`model` records the capability
 tier that actually ran** — `deep`, `light`, `economy`, `single (client exposes no
-choice)`, or `below floor: <reason>` — never a provider name in doctrine (a project
+choice)`, `below floor: <reason>`, or `none (not due)` on a NOT DUE row — never a provider name in doctrine (a project
 may of course write its own model names in its own log). Without it the floor above
 is a belief: the row would say a gate ran and never whether it could do its job, and
 the correlation with `revise_rounds` and `findings_real` — the only evidence the
@@ -394,7 +411,15 @@ When you are the reviewer:
   every use-case/user-need (and the Actor it serves — a use-case with no defined Actor,
   or an Actor UX expectation the solution does not meet, is a finding), every threat, and
   every applicable Vision benefit/Non-Goal, state WHERE the artifact satisfies it (section
-  or `file:line`) or raise it as a finding. A PASS/approve is **not valid on "found nothing"** — the conformance
+  or `file:line`) or raise it as a finding. **For an L3/E3 unit, each outcome the owner
+  named — in the request record (the opening request and every entry widening scope) or
+  in an approved north star — is a row too, weighed by effort**: where the design serves
+  it and what share of the design (its sections and planned changes) goes to it. An
+  outcome no section serves, or one served by a minor share while a secondary concern
+  takes the bulk, is a finding — the drift every per-constraint row misses when each
+  constraint is met. In the lens whose `SKILL.md` defines Execute-Before-Specify, an
+  outcome whose owner's words name a comparative effect also needs, as evidence, the
+  probe that shows it, red on the baseline; you rule whether the words name one. A PASS/approve is **not valid on "found nothing"** — the conformance
   statement is the proof the check ran; an unfalsifiable "I checked" is the review
   theater this discipline exists to prevent (the reviewer-side twin of §Receiving's
   silent-drop rule). Plain code reviews stay findings-only.

package/skills/kb-agentic-skill/scripts/docs_site.py

@@ -947,6 +947,21 @@ def analysis_chain(body):
     return [{"step": s, "sections": found[s]} for s in CHAIN_STEPS]
 
 
+def companion_paths(stem):
+    """The documents named after a unit's stem: (key, docs-relative path). One list,
+    read by the chain page and by the work and feature lists."""
+    return (("merge", "solutions/MERGE_REVIEW_%s.md" % stem),
+            ("e2e", "solutions/E2E_TEST_%s.md" % stem),
+            ("request", "audit/requests/REQUEST_%s.md" % stem))
+
+
+def verify_links(docs, stem):
+    """The merge brief and E2E script of a unit, where they exist: who merges reads the
+    first while the work is open, who tests reads the second after it closed."""
+    return {key: path for key, path in companion_paths(stem)
+            if key in ("merge", "e2e") and (docs / path).is_file()}
+
+
 def link_companions(docs, pages):
     """Each analysis's merge brief, E2E script and request record, where they exist,
     and the project's North Star (R25)."""
@@ -962,11 +977,8 @@ def link_companions(docs, pages):
             continue
         stem = chain.pop("_stem")
         chain["north_star"] = north_star
-        chain["companions"] = {
-            key: path if path in pages else None
-            for key, path in (("merge", "solutions/MERGE_REVIEW_%s.md" % stem),
-                              ("e2e", "solutions/E2E_TEST_%s.md" % stem),
-                              ("request", "audit/requests/REQUEST_%s.md" % stem))}
+        chain["companions"] = {key: path if path in pages else None
+                               for key, path in companion_paths(stem)}
 
 
 def orientation_sources(docs):
@@ -1055,6 +1067,7 @@ def build_work(project, docs, facts):
         for key in ("status", "level", "since", "updated", "branch", "next"):
             if _v(meta, key):
                 card[key] = _v(meta, key)
+        card.update(verify_links(docs, p.stem[len("HANDOFF_"):]))
         cards.append(card)
     cards.sort(key=lambda c: c["name"].lower())
     cards.sort(key=lambda c: c.get("updated", ""), reverse=True)
@@ -1083,8 +1096,12 @@ def build_units(project, lens):
                 u[key] = _v(meta, field)
         if "id" not in u and _v(meta, "feature"):
             u["id"] = _v(meta, "feature")
+        u.update(verify_links(sdlc_core.ai_path(project), p.stem[len("ANALYSIS_"):]))
         units.append(u)
+    # newest first by declared start date (owner, 2026-10-19); undated last, by id
     units.sort(key=lambda u: (u.get("id", ""), u["path"]))
+    units.sort(key=lambda u: u.get("start", ""), reverse=True)
+    units.sort(key=lambda u: not u.get("start"))
     return units
 
 

package/skills/kb-agentic-skill/scripts/sdlc_core.py

@@ -2598,6 +2598,13 @@ def _is_pass(verdict):
     return re.search(r"\bPASS\b", (verdict or "").upper()) is not None
 
 
+def _is_not_due(verdict):
+    """A review ruled not due (review.md, a delta that only restates judged
+    work): logged so a skip stays visible, but it is neither a review nor a
+    finding, so it stays out of every count below (F-071)."""
+    return (verdict or "").strip().upper().startswith("NOT DUE")
+
+
 def _print_read_cost():
     """The cost side, printed with the benefit and NEVER without it: a catch
     rate with no cost term justifies unbounded doctrine, and a cost term with
@@ -2638,6 +2645,8 @@ def cmd_benefit(root):
         _print_read_cost()
         return 0
     rows, unparsed = parse_review_log(read_text(log))
+    not_due = [r for r in rows if _is_not_due(r["verdict"])]
+    rows = [r for r in rows if not _is_not_due(r["verdict"])]
     # `tier` carries the MOMENT in Standalone (design / closure) and the
     # reviewer WEIGHT in Hybrid (deep / light / code / guide / vision). A
     # Hybrid row is a real review whose moment this column does not state, so
@@ -2662,9 +2671,11 @@ def cmd_benefit(root):
                     unstated_code += n
     classified = moments["design"] + moments["closure"]
     print("rows parsed: %d   rows unparsed: %d%s"
-          % (len(rows), len(unparsed),
+          % (len(rows) + len(not_due), len(unparsed),
              ("  -> " + "; ".join("line %d: %s" % u for u in unparsed[:5]))
              if unparsed else ""))
+    print("reviews ruled not due (logged, counted in no figure below): %d"
+          % len(not_due))
     print("reviews with a stated moment: %d   moment not stated by `tier`: %d%s"
           % (len(classified), sum(unstated.values()),
              ("  (" + ", ".join("%s x%d" % (t, n) for t, n

package/skills/kb-agentic-skill/templates.md

@@ -555,7 +555,8 @@ columns: Standalone adds `reviewer`, a Hybrid row adds `instrument` and
 and `closure` (Standalone); `deep`, `light`, `code`, `guide`, `vision` (devPNT gates
 and the Vision blind check). `model` is a different question about the same review: `tier` says WHICH GATE ran,
 `model` says WHAT CAPABILITY ran it (`deep`, `light`, `economy`,
-`single (client exposes no choice)`, `below floor: <reason>` — the floor and its
+`single (client exposes no choice)`, `below floor: <reason>`, `none (not due)` on a
+NOT DUE row — the floor and its
 arbitration are `review.md` §The capability floor). The two columns share the words
 `deep`/`light` and mean different things by them, which is why they are read by
 header and never by position. The validator reads this column by its header name, so
@@ -580,6 +581,7 @@ round verifies them (`review.md` §Receiving) — and 3 is the ceiling, past whi
 residue goes to the user rather than into a fourth round. `verdict` carries the
 round-1 verdict and the final one when they differ (`FAIL → PASS`): collapsing a
 first-round FAIL into a bare `PASS` erases the evidence this log exists to keep.
+A restating delta ruled not due (`review.md` §When a review is due) is still a row: `tier` `closure`, `model` `none (not due)`, findings and rounds `0`, verdict `NOT DUE: <the kinds; the check that ran and its result>`; `benefit` counts it apart.
 Concurrent reviews: `init` writes a `.gitattributes` stanza giving this file
 `merge=union` — a **built-in** driver (no per-clone `git config`, unlike
 `merge=ours`, which silently does nothing until every clone configures it).