@azure-id/orc 2.0.2 → 2.1.0

package/templates/skills/orc/references/effort-and-mode.md

@@ -108,7 +108,7 @@ clamp 0..100 → the RESOLVED table (below).
 
 **Which table (highest wins):** `opus5_only: true` (the 2-band Opus-5-only
 preset: `[0,90)` low · `[90,100]` medium) → `rubric_bands_override`
-(hand-written rows) → the default 6-band table. All three are in `config.md`.
+(hand-written rows) → the default 5-band table. All three are in `config.md`.
 The formula, the facets and the risk floor are IDENTICAL in every case — only
 the score→agent mapping changes. Three consequences worth stating so nobody
 re-derives them per run:
@@ -123,14 +123,14 @@ re-derives them per run:
 Show the user the full table (task, the facet vector, the arithmetic
 `B+N+L+T+fan+U = raw`, any risk floor, final, override+reason if any, dispatched
 model) BEFORE dispatching — an un-shown number is not a scored number. **Head it
-with the RESOLVED table's name** (`6-band default` / `Opus-5-only ladder
+with the RESOLVED table's name** (`5-band default` / `Opus-5-only ladder
 (opus5_only)` / `custom (rubric_bands_override)`): the same logic
 applies to the mapping as to the number.
 
 **Extra (v0.50.0, `extra_enabled`) adds a `via` column and can make the head a
 PAIR.** An Extra route row is an OVERLAY that outranks the tables above **only
 for the scores it covers**, so a run can genuinely be running two tables at once
-and the head names both (`6-band default + extra rows [0,30) [30,70)`). The
+and the head names both (`5-band default + extra rows [0,30) [30,70)`). The
 column reads `claude` or `extra:<profile> (<engine>)` and comes from
 `orc extra resolve --json` — the formula, the facets and the risk floor are
 untouched, and **the score is computed before the routing, never after it**. Two
@@ -170,14 +170,14 @@ the band is what matters. Compare a new task to these facet-by-facet.
 
 | Task | breadth·novelty·logic·test · fan_in/out · unc | Arithmetic | Band |
 |---|---|---|---|
-| Rename a config key across 4 files + its test | 5·mechanical·none·update-existing · 0/0 · low | 10+0+0+4 = **14** | haiku [0,30) |
-| New CRUD endpoint following a sibling route | 3·imitate·branching·new-tests · 1/0 · low | 6+8+8+8+5 = **35** | sonnet-4-6-med [30,40) |
-| Bug fix across 2 files with a repro test | 3·imitate·branching·new-tests · 0/0 · medium | 6+8+8+8+6 = **36** | sonnet-4-6-med [30,40) |
-| Isolated component from the design system | 3·new-surface·branching·new-tests · 0/0 · low | 6+18+8+8 = **40** | sonnet-4-6-high [40,55) |
-| Notification model + enum other tasks consume | 3·new-surface·stateful·new-tests · 0/3 · low | 6+18+16+8+9 = **57** | sonnet-5-high [55,65) |
-| Service-layer refactor behind a stable interface | 5·imitate·stateful·update-existing · 0/3 · medium | 10+8+16+4+9+6 = **53** | sonnet-4-6-high [40,55) |
-| Add role check to payment-refund endpoint | 3·imitate·branching·new-tests · 0/0 · low · **risk=[auth,money]** | 30 raw → **floor 70** | opus-5-low [65,90) |
-| Migrate orders table to split-name + backfill | 6·new-surface·stateful·new-tests · 1/3 · high · **risk=[migration,data-integrity]** | 15+18+16+8+5+9+12 = 83 (floor 70) → **83** | opus-5-low [65,90) |
+| Rename a config key across 4 files + its test | 5·mechanical·none·update-existing · 0/0 · low | 10+0+0+4 = **14** | sonnet-5-low [0,21) |
+| New CRUD endpoint following a sibling route | 3·imitate·branching·new-tests · 1/0 · low | 6+8+8+8+5 = **35** | sonnet-5-high [31,41) |
+| Bug fix across 2 files with a repro test | 3·imitate·branching·new-tests · 0/0 · medium | 6+8+8+8+6 = **36** | sonnet-5-high [31,41) |
+| Isolated component from the design system | 3·new-surface·branching·new-tests · 0/0 · low | 6+18+8+8 = **40** | sonnet-5-high [31,41) |
+| Notification model + enum other tasks consume | 3·new-surface·stateful·new-tests · 0/3 · low | 6+18+16+8+9 = **57** | opus-5-low [41,90) |
+| Service-layer refactor behind a stable interface | 5·imitate·stateful·update-existing · 0/3 · medium | 10+8+16+4+9+6 = **53** | opus-5-low [41,90) |
+| Add role check to payment-refund endpoint | 3·imitate·branching·new-tests · 0/0 · low · **risk=[auth,money]** | 30 raw → **floor 70** | opus-5-low [41,90) |
+| Migrate orders table to split-name + backfill | 6·new-surface·stateful·new-tests · 1/3 · high · **risk=[migration,data-integrity]** | 15+18+16+8+5+9+12 = 83 (floor 70) → **83** | opus-5-low [41,90) |
 
 Two disciplines the vectors encode: (1) a small diff is NOT a low score when a
 cited `risk` facet forces the floor (the refund row — 30 raw, floored to 70); (2)
@@ -188,15 +188,15 @@ applies it silently.
 ## Model ladder → the single score→model table
 
 The score→model mapping is NOT hardcoded here — it lives in `config.md` as ONE
-canonical 6-band table (there is no longer a narrow/wide preset). Read config at
+canonical 5-band table (there is no longer a narrow/wide preset). Read config at
 run start and map each task's final score through that table (or
 `rubric_bands_override`). The orchestrator dispatches the executor agent BY NAME;
 it does not request a raw model. `rubric_bands` sets only how many bands the
 rubric REPORTS (score granularity), never which table is used.
 
-The 6 bands (see config.md for the exact edges): `haiku-4-5` [0,30) ·
-`sonnet-4-6-med` [30,40) · `sonnet-4-6-high` [40,55) · `sonnet-5-high` [55,65) ·
-`opus-5-low` [65,90) · `opus-5-med` [90,100]. Effort tiers rank
+The 5 bands (see config.md for the exact edges): `sonnet-5-low` [0,21) ·
+`sonnet-5-med` [21,31) · `sonnet-5-high` [31,41) · `opus-5-low` [41,90) ·
+`opus-5-med` [90,100]. Effort tiers rank
 `low < medium < high < xhigh < max`.
 
 ## Fixed model assignments (not scored)
@@ -204,14 +204,14 @@ The 6 bands (see config.md for the exact edges): `haiku-4-5` [0,30) ·
 - **Orchestrator (you):** Opus 4.8 high — or Opus 5.5 / Fable 5 at medium+, the
   two models that clear the guard from medium up. Never downgrade yourself.
 - **Review** — Superpowers path: Sonnet 4.6, medium. OpenSpec/self path:
-  Opus 5.5, medium (`orc-reviewer-opus-5-med`).
+  Opus 5.5, low (`orc-reviewer-opus-5-low`; medium until v2.1.0).
 - **Verify:** Opus 5.5, medium (`orc-verifier-opus-5-med`).
 - **Analyst:** Opus 5.5, high. **Planner:** Opus 5.5, medium. **Test author:**
   Opus 5.5, medium. **Combiner:** Opus 5.5, high. **Ultra advisor/judge:** Opus 5.5,
   xhigh — every core fixed role is pinned to Opus 5.5 as of v0.34.0.
 - **Merge-conflict resolver:** Opus 4.8, medium.
 
-Note: every band in the table above is a real dispatch target (haiku through
+Note: every band in the table above is a real dispatch target (sonnet-5 through
 opus-5). If a model tier is unavailable in the environment, fall back UP to the
 next capable tier (never silently substitute a different family/effort).
 

package/templates/skills/orc/references/preflight-report.md

@@ -25,7 +25,7 @@ after:     src/payments — 2 shipped files rewritten within 30 days of run stor
 crosslink: 2 boundaries (payments-api) — advisory
 extra:     ON — 4 of 9 tasks foreign · deepseek/deepseek-v4-flash via api [0,30)
                 · glm/glm-4.7 via cli [30,70) · 2 held back (risk: auth, money)
-scoring:   6-band default table
+scoring:   5-band default table
 tdd:       3 tasks with tests (T3, T6, T9) · 2 covered-by-existing · 2 no-behavior
            skipped: R4 translation strings (no-behavior) · R7 file split
                     (covered-by-existing → test/api/health.test.js:41)
@@ -100,7 +100,7 @@ waves:     3 planned — will pause after wave 2 (batch_pause_every=2)
     `EXTRA orphan` line from `trace_extras[]` once you have reported it.
 
   Canonical: `../../_shared/extra-dispatch.md`.
-- **scoring:** which executor table RESOLVED for this run — `6-band default
+- **scoring:** which executor table RESOLVED for this run — `5-band default
   table` · `Opus-5-only ladder (opus5_only)` · `custom
   (rubric_bands_override, <n> rows)`. An un-shown table is as unaccountable as
   an un-shown number, and the Opus-5-only ladder in particular means EVERY
@@ -109,7 +109,7 @@ waves:     3 planned — will pause after wave 2 (batch_pause_every=2)
   append ` · all fixed roles forced to Opus 5.5` and name any selector it
   shadowed (a `rubric_bands_override` present but INERT) — a setting
   the user tuned and the run then ignored has to be said out loud. With Extra in
-  play the table is a COMPOSITE and reads as one (`6-band default table + extra
+  play the table is a COMPOSITE and reads as one (`5-band default table + extra
   rows [0,30) [30,70)`) — Extra is an overlay, so naming only one of the two would
   be naming the wrong half for every covered score.
 - **tdd:** ALWAYS printed on a lane whose TDD policy is on — BOTH branches, not

package/templates/skills/orc/references/ultra-mode.md

@@ -17,7 +17,7 @@ Apply at Phase 0, on top of the normal config resolution:
 - `pattern_findings` = on · `generate_tests` = on · `security_review` = on.
 - Executor **tier floor**: remap the resolved score→model table so no task
   dispatches below `orc-executor-sonnet-5-high`; bands at/above the opus
-  boundary (65) rise to at least `orc-executor-opus-5-low`. The floor only ever
+  boundary (41) rise to at least `orc-executor-opus-5-low`. The floor only ever
   raises a band, so the top `[90,100]` band keeps `orc-executor-opus-5-med`.
   **Under `opus5_only` the floor raises EFFORT, not model** (every band is
   already Opus 5.5, so there is no model left to raise): the `[0,90)` band rises

package/templates/skills/orc/schemas/checkpoint.md

@@ -1,122 +1,122 @@
-# Schema — Durable Checkpoint + State-of-Play
-
-Two files, two jobs:
-- `run/{run-slug}/checkpoint.json` — machine truth. Orchestrator-only writes.
-  Survives pause, compaction, crash, fresh sessions. KEPT after success (audit).
-- `run/{run-slug}/state-of-play.md` — 10-line human-readable re-anchor. Read FIRST on any
-  resume, then the checkpoint for detail.
-
-## run/{run-slug}/checkpoint.json
-
-```jsonc
-{
-  "run_id": "run-020726-1422",
-  "schema_version": "0.2",
-  "phase": "execution",        // intake|planning|scoring|execution|integration|review|verify|summary|ship|done
-  "planner": "openspec",
-  "effort": "medium",
-  "execution_model": "parallel",   // sequential | parallel | parallel_worktrees
-  "source_branch": "feat/notifications",
-  "intent_spec": "run/merchant-notifications/intent-spec.md",
-  "batch_pause_every": 2,
-  "pause_schedule": [2],           // wave indices where a MANDATORY batch stop fires
-                                   // (computed from the Phase 2 answer; last wave never included) —
-                                   // a resumed session enforces the same hard boundaries
-  "logging_enabled": true,         // logging is PERMANENT (always on) — re-anchor the behavior trace on resume
-  "trace_path": null,              // "<log_dir>/run-<lane>-<slug>-<DDMMYY>-<HHMMSS>.txt" — the run's trace file
-  "ultra_mode": false,             // true only on /orc-ultra runs; gates the "ultra" block below
-  "ultra": null,                   /* when ultra_mode — a resumed run continues mid-gate/mid-loop:
-    { "brief_path": "run/…/ultra/advisory-brief.md",
-      "ledger_path": "run/…/ultra/assumption-ledger.md",
-      "matrix_path": null,                    // set before gate 3
-      "gates": {                              // per-gate judgment state
-        "analysis":       { "verdict": "approve", "round": 1, "loops_used": 0 },
-        "plan":           { "verdict": "revise",  "round": 2, "loops_used": 1 },
-        "implementation": { "verdict": null,      "round": 0, "loops_used": 0 } } } */
-  "current_wave": 2,
-  "paused": true,
-  "pause_trigger": "batch_pause",  // batch_pause | token_limit | phase_transition | crash_guard
-
-  "plan": { /* full planning-output object */ },
-
-  // fast-resume mirror; kept in sync on every task state change
-  "task_state": {
-    "T1": { "status": "done", "retry_count": 0, "context_requests": 0,
-            "failure_reason": null, "progress": null,
-            "actual_files": ["db/migrations/0001.sql", "models/notification.x", "models/notification.test.x"] },
-    "T3": { "status": "partial", "retry_count": 0, "context_requests": 1,
-            "failure_reason": null,
-            "progress": { "percent": 60, "files_written": ["services/email_digest/scheduler.x"],
-                          "notes": "daily path done; weekly cron pending" } }
-  },
-
-  // every spawn, for the usage report + rubric audit
-  "dispatch_log": [
-    { "task_id": "T1", "computed_score": 72, "override_score": null,
-      "override_reason": null, "model": "sonnet-5", "effort": "medium",
-      "spawned_at": "020726 14:24:01.100",
-      // claimed-vs-actual (only when logging_enabled): what the worker reported
-      "actual_model": "claude-sonnet-5", "actual_effort": "medium",
-      "verify": "match" },      // match | downgrade
-
-    { "task_id": "T6", "computed_score": 88, "override_score": 62,
-      "override_reason": "rubric over-weighted file count; isolated leaf UI",
-      "model": "sonnet-5", "effort": "high", "spawned_at": "020726 15:01:22.040" }
-  ],
-
-  "worktrees": { /* subagent_worktrees mode: agent → {path, branch, merged} */ },
-  "merge_state": null,           // null | pending_verify | merged | conflict_resolving
-
-  "escalations": [
-    { "id": "E1", "agent": "Agent-C", "task": "T3",
-      "question": "Digest send time?", "answer": "07:00 fixed",
-      "at": "020726 14:28:41.507",
-      "affected_tasks": [], "downstream_flagged": [] }
-  ],
-
-  "review":  { "ran": false },   // when ran: p0[], p1[], p2[], p3[], model, effort
-                                 // (v1 checkpoints used blocking[]/nits[] — on resume
-                                 //  map blocking→p1, nits→p3; never rewrite the old file.
-                                 //  v0.7.0+: each recorded P0–P2 finding keeps its
-                                 //  file:line + verbatim quote so a resumed run can
-                                 //  re-run the quote spot-check before acting)
-  "verify":  { "ran": false },   // result, autofix_used, autofix_remaining (starts 1)
-  "ship":    { "commit": null, "push": null, "create_pr": null,
-               "ticket": null, "pr_title": null, "target_branch": null, "pr_file": null },
-
-  "decision_log": "run/merchant-notifications/decision-log.md",
-  "created_at": "020726 14:22:01.000",
-  "updated_at": "020726 15:02:00.331"
-}
-```
-
-## run/{run-slug}/state-of-play.md (regenerated at every checkpoint write)
-
-```markdown
-# State of Play — run-020726-1422
-Phase: execution · Wave 2 of 3 · PAUSED (batch)
-Done: T1 T2 T4 · Partial: T3 (60%, weekly cron pending) · Pending: T5 T6
-Mode: subagent · Planner: openspec · Branch: feat/notifications
-Last decision: digest send 07:00 fixed (user, via Agent-C)
-Next action on resume: finish T3 from milestone, then dispatch wave 3
-Intent: merchant notifications (in-app + email digest + prefs) — no push, no admin
-```
-
-## Write discipline
-
-- Orchestrator-only. Atomic write (temp file + rename). `updated_at` bumped to
-  ms on every write.
-- Write EAGERLY: after every wave, escalation answer, phase transition, and
-  before any risky operation — so surprise compaction never catches
-  conversation-only state.
-- A failed/malformed checkpoint write is a FAILURE: do not stop the session on
-  it; surface it.
-
-## Resume contract
-
-1. Read state-of-play (orientation) → newest checkpoint (`updated_at` wins).
-2. Fresh session: one-line intent reconfirm from the Intent line.
-3. task_state: done stays done · partial resumes from progress.files_written ·
-   pending awaits wave · requeued/failed re-dispatch reading failure_reason ·
-   stale_review gets a review pass.
-4. Re-attach decision log, regenerate digest, continue from `phase`.
+# Schema — Durable Checkpoint + State-of-Play
+
+Two files, two jobs:
+- `run/{run-slug}/checkpoint.json` — machine truth. Orchestrator-only writes.
+  Survives pause, compaction, crash, fresh sessions. KEPT after success (audit).
+- `run/{run-slug}/state-of-play.md` — 10-line human-readable re-anchor. Read FIRST on any
+  resume, then the checkpoint for detail.
+
+## run/{run-slug}/checkpoint.json
+
+```jsonc
+{
+  "run_id": "run-020726-1422",
+  "schema_version": "0.2",
+  "phase": "execution",        // intake|planning|scoring|execution|integration|review|verify|summary|ship|done
+  "planner": "openspec",
+  "effort": "medium",
+  "execution_model": "parallel",   // sequential | parallel | parallel_worktrees
+  "source_branch": "feat/notifications",
+  "intent_spec": "run/merchant-notifications/intent-spec.md",
+  "batch_pause_every": 2,
+  "pause_schedule": [2],           // wave indices where a MANDATORY batch stop fires
+                                   // (computed from the Phase 2 answer; last wave never included) —
+                                   // a resumed session enforces the same hard boundaries
+  "logging_enabled": true,         // logging is PERMANENT (always on) — re-anchor the behavior trace on resume
+  "trace_path": null,              // "<log_dir>/run-<lane>-<slug>-<DDMMYY>-<HHMMSS>.txt" — the run's trace file
+  "ultra_mode": false,             // true only on /orc-ultra runs; gates the "ultra" block below
+  "ultra": null,                   /* when ultra_mode — a resumed run continues mid-gate/mid-loop:
+    { "brief_path": "run/…/ultra/advisory-brief.md",
+      "ledger_path": "run/…/ultra/assumption-ledger.md",
+      "matrix_path": null,                    // set before gate 3
+      "gates": {                              // per-gate judgment state
+        "analysis":       { "verdict": "approve", "round": 1, "loops_used": 0 },
+        "plan":           { "verdict": "revise",  "round": 2, "loops_used": 1 },
+        "implementation": { "verdict": null,      "round": 0, "loops_used": 0 } } } */
+  "current_wave": 2,
+  "paused": true,
+  "pause_trigger": "batch_pause",  // batch_pause | token_limit | phase_transition | crash_guard
+
+  "plan": { /* full planning-output object */ },
+
+  // fast-resume mirror; kept in sync on every task state change
+  "task_state": {
+    "T1": { "status": "done", "retry_count": 0, "context_requests": 0,
+            "failure_reason": null, "progress": null,
+            "actual_files": ["db/migrations/0001.sql", "models/notification.x", "models/notification.test.x"] },
+    "T3": { "status": "partial", "retry_count": 0, "context_requests": 1,
+            "failure_reason": null,
+            "progress": { "percent": 60, "files_written": ["services/email_digest/scheduler.x"],
+                          "notes": "daily path done; weekly cron pending" } }
+  },
+
+  // every spawn, for the usage report + rubric audit
+  "dispatch_log": [
+    { "task_id": "T1", "computed_score": 72, "override_score": null,
+      "override_reason": null, "model": "sonnet-5", "effort": "medium",
+      "spawned_at": "020726 14:24:01.100",
+      // claimed-vs-actual (only when logging_enabled): what the worker reported
+      "actual_model": "claude-sonnet-5-5", "actual_effort": "medium",
+      "verify": "match" },      // match | downgrade
+
+    { "task_id": "T6", "computed_score": 88, "override_score": 62,
+      "override_reason": "rubric over-weighted file count; isolated leaf UI",
+      "model": "sonnet-5", "effort": "high", "spawned_at": "020726 15:01:22.040" }
+  ],
+
+  "worktrees": { /* subagent_worktrees mode: agent → {path, branch, merged} */ },
+  "merge_state": null,           // null | pending_verify | merged | conflict_resolving
+
+  "escalations": [
+    { "id": "E1", "agent": "Agent-C", "task": "T3",
+      "question": "Digest send time?", "answer": "07:00 fixed",
+      "at": "020726 14:28:41.507",
+      "affected_tasks": [], "downstream_flagged": [] }
+  ],
+
+  "review":  { "ran": false },   // when ran: p0[], p1[], p2[], p3[], model, effort
+                                 // (v1 checkpoints used blocking[]/nits[] — on resume
+                                 //  map blocking→p1, nits→p3; never rewrite the old file.
+                                 //  v0.7.0+: each recorded P0–P2 finding keeps its
+                                 //  file:line + verbatim quote so a resumed run can
+                                 //  re-run the quote spot-check before acting)
+  "verify":  { "ran": false },   // result, autofix_used, autofix_remaining (starts 1)
+  "ship":    { "commit": null, "push": null, "create_pr": null,
+               "ticket": null, "pr_title": null, "target_branch": null, "pr_file": null },
+
+  "decision_log": "run/merchant-notifications/decision-log.md",
+  "created_at": "020726 14:22:01.000",
+  "updated_at": "020726 15:02:00.331"
+}
+```
+
+## run/{run-slug}/state-of-play.md (regenerated at every checkpoint write)
+
+```markdown
+# State of Play — run-020726-1422
+Phase: execution · Wave 2 of 3 · PAUSED (batch)
+Done: T1 T2 T4 · Partial: T3 (60%, weekly cron pending) · Pending: T5 T6
+Mode: subagent · Planner: openspec · Branch: feat/notifications
+Last decision: digest send 07:00 fixed (user, via Agent-C)
+Next action on resume: finish T3 from milestone, then dispatch wave 3
+Intent: merchant notifications (in-app + email digest + prefs) — no push, no admin
+```
+
+## Write discipline
+
+- Orchestrator-only. Atomic write (temp file + rename). `updated_at` bumped to
+  ms on every write.
+- Write EAGERLY: after every wave, escalation answer, phase transition, and
+  before any risky operation — so surprise compaction never catches
+  conversation-only state.
+- A failed/malformed checkpoint write is a FAILURE: do not stop the session on
+  it; surface it.
+
+## Resume contract
+
+1. Read state-of-play (orientation) → newest checkpoint (`updated_at` wins).
+2. Fresh session: one-line intent reconfirm from the Intent line.
+3. task_state: done stays done · partial resumes from progress.files_written ·
+   pending awaits wave · requeued/failed re-dispatch reading failure_reason ·
+   stale_review gets a review pass.
+4. Re-attach decision log, regenerate digest, continue from `phase`.

package/templates/skills/orc/subskills/orc-review-verify/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: orc-review-verify
 description: >
-  Review/verify worker for ORC Phases 5–6 (Opus 5.5 medium). Two modes: a REVIEW
+  Review/verify worker for ORC Phases 5–6 (review Opus 5.5 low, verify medium). Two modes: a REVIEW
   pass — examine the changed files against the code pattern + constraints,
   create/update tests, and classify EVERY finding on the P0–P3 severity
   ladder (P0/P1 gate ship, P2/P3 advisory); a VERIFY
@@ -23,13 +23,13 @@ owns the auto-fix-once loop.
 
 - **Input slice** (the orchestrator builds it): `core.md`.
 - **Procedure + return contract** (the ONE source): the agent file —
-  `phase=review` and `phase=security` → `.claude/agents/orc-reviewer-opus-5-med.md`;
+  `phase=review` and `phase=security` → `.claude/agents/orc-reviewer-opus-5-low.md`;
   `phase=verify` → `.claude/agents/orc-verifier-opus-5-med.md`.
 - **Validator** (the caller checks every return against it):
   `../../../_shared/return-validation.md`. A malformed return is treated as
   failure by the caller.
 
 Fixed models (from `../../references/effort-and-mode.md`): review on the OpenSpec/self
-path = Opus 5.5 medium; review on the Superpowers path is delegated to the
+path = Opus 5.5 low; review on the Superpowers path is delegated to the
 Superpowers review skill instead (Sonnet 4.6 medium). Verify = Opus 5.5 medium,
 always this subskill.

package/templates/skills/orc/subskills/orc-review-verify/core.md

@@ -2,7 +2,7 @@
 
 The INPUT SLICE the orchestrator builds for ONE review, verify or security
 dispatch. The procedure and the return contract live in ONE place, the agent
-file: `phase=review` and `phase=security` → `.claude/agents/orc-reviewer-opus-5-med.md`;
+file: `phase=review` and `phase=security` → `.claude/agents/orc-reviewer-opus-5-low.md`;
 `phase=verify` → `.claude/agents/orc-verifier-opus-5-med.md`. The caller owns
 the auto-fix-once loop and the `tdd_loop_max` repair loop, and validates the
 return against `../../../_shared/return-validation.md`.

package/templates/skills/orc-analyze/SKILL.md

@@ -91,7 +91,9 @@ without the manifest (`../_shared/lane-contract.md` §Phases).
 
 ## Phase A — Ingest & detect source mode
 
-Read the source. **Auto-detect** which of three modes applies:
+First `orc lane config orc-analyze --json`. **`habits{}` in it → print
+`habits.line`, read `../_shared/habits.md` NOW**; none → ignore every `(H …)`.
+Then read the source. **Auto-detect** which of three modes applies:
 - **prose/spec** — a document of narrative requirements, or
 - **audit/structured** — a document with columns like expectation / notes / result, or
 - **requirement** — NO document; the user's plain-language request is the source
@@ -213,7 +215,7 @@ exist). Menu rules, relatedness gate, combiner handling:
 - **Config:** `orc lane config orc-analyze --json`. Obey `effective`, print every line
   in `announce[]` VERBATIM at preflight, and honour `stops[]` before wave 1.
   Never merge `.claude/orc.config.yaml` yourself (`../_shared/config-precedence.md`).
-- **Habits:** `habits{}` in that answer → `../_shared/habits.md`; else ignore `(H …)`.
+- **Habits:** Phase A, first step.
 - **Rules:** `orc rules slice --lane orc-analyze --json` is the ONLY assembler
   (`../_shared/phases/rules.md`). Its `line` prints VERBATIM at preflight.
 

package/templates/skills/orc-claude/SKILL.md

@@ -10,7 +10,7 @@ description: >
   template the user fills in themself. Refresh regenerates ONLY stale sections
   and bumps the file version by 0.0.1. Never trims user-authored content;
   never touches the orc-wiki pointer block. The skill dispatches the pinned
-  orc-claude-writer-opus-4-8-high agent — it never writes the file itself.
+  orc-claude-writer-opus-5-low agent — it never writes the file itself.
 ---
 
 # ORC-CLAUDE (standalone)
@@ -20,11 +20,11 @@ The target is ALWAYS `<repo root>/CLAUDE.md` of the current working directory
 never `~/.claude/CLAUDE.md`, even if ORC is installed globally.
 
 **Dispatch, don't do.** Whatever model this chat runs on, the skill itself only
-selects the mode and spawns `orc-claude-writer-opus-4-8-high` (the pinned
-engine) — so the scan + writing always run at Opus 4.8 high regardless of the
-caller's tier. When `opus5_only: true` the engine is
-`orc-claude-writer-opus-5-med` instead (that mode FORCES it — see
-`../_shared/opus5-only.md`), and it then needs an Opus 5.5 main session.
+selects the mode and spawns `orc-claude-writer-opus-5-low` (the pinned
+engine) — so the scan + writing always run at Opus 5.5 low regardless of the
+caller's tier. `opus5_only` does not change this role. The writer is already
+Opus 5.5 low, so that mode has nothing to flip (see `../_shared/opus5-only.md`).
+The writer needs an Opus 5.5 main session in both modes.
 The one exception: the skill also writes the
 trace pointer + a few markers around that spawn (behavior-trace logging is
 permanent; see "Behavior trace"); that
@@ -70,18 +70,18 @@ set in "Behavior trace").
    `touch the trace file` of that name in the SAME step, BEFORE the spawn (a
    pointer to a file that does not exist reads as dangling — the hook rotates
    away from it and the run splits across two files).
-2. Spawn `orc-claude-writer-opus-4-8-high` — or `orc-claude-writer-opus-5-med`
-   when `opus5_only` — with: `mode`, `repo_root`,
+2. Spawn `orc-claude-writer-opus-5-low` (also under `opus5_only` — that mode
+   does not change this role) with: `mode`, `repo_root`,
    `budget` (from a `budget=N` argument, else null), and the paths to
    `references/template.md` + `references/refresh.md`. **Trace:** emit
-   `DISPATCH orc-claude-writer :: <mode> expect=opus-4-8/high` just before the
-   spawn (`expect=opus-5/medium` under `opus5_only` — the expectation is
-   derived from the agent NAME you actually dispatched, never from this line's
-   default; the hook then adds `SPAWN`/`RETURN` on its own).
+   `DISPATCH orc-claude-writer :: <mode> expect=opus-5/low` just before the
+   spawn (the expectation is derived from the agent NAME you actually
+   dispatched, never from this line's default; the hook then adds
+   `SPAWN`/`RETURN` on its own).
 3. On return, check `actual_model`/`actual_effort` against the pinned tier —
    mismatch → prepend a tier-downgrade warning to the report. **Trace:** emit
    `VERIFY writer actual=<model>/<effort> ✅ MATCH` (or
-   `⛔ DOWNGRADE expected=opus-4-8/high`).
+   `⛔ DOWNGRADE expected=opus-5/low`).
 4. Relay the Phase-3 report verbatim. **Trace:** emit
    `FINISH :: <mode_ran> CLAUDE.md v<X.Y.Z>` (mode_ran may be `noop`), then
    delete `log_dir/.current`. Then stop. The skill NEVER writes CLAUDE.md
@@ -175,7 +175,7 @@ Dispatch-only lane: emit ONLY the markers it can truthfully witness — **not**
 `PHASE`/`SCORE`/`FINDING`/`VERDICT`, because scan/generate/report run INSIDE
 the writer sub-agent and there is no scoring or review here. The marker set, in
 order (actor `orc`, plus the hook's `SPAWN`/`RETURN`): `DISPATCH
-orc-claude-writer :: <mode> expect=opus-4-8/high` before the spawn (the mode
+orc-claude-writer :: <mode> expect=opus-5/low` before the spawn (the mode
 rides in this tail and in `FINISH`, so no separate mode marker) · `VERIFY writer
 actual=<model>/<effort>` · `FINISH :: <mode_ran> CLAUDE.md v<X.Y.Z>`, where
 `mode_ran` may be `noop`. A noop refresh still traces the full cycle.

package/templates/skills/orc-claude/examples/claude-run-mock.md

@@ -1,65 +1,65 @@
-# Worked example — orc-claude runs (mock; orient only, never execute from this)
-
-## Run 1 — UPDATE (existing hand-written CLAUDE.md, 610 lines)
-
-U: /orc-claude
-C: CLAUDE.md exists, no orc-claude:meta header → UPDATE mode. Spawns
-   orc-claude-writer-opus-4-8-high (the skill never writes the file itself).
-W: Scans: pnpm monorepo (3 workspaces), turbo, eslint+prettier, vitest,
-   Postgres migrations under `packages/db/migrations`.
-W: Copies CLAUDE.md → CLAUDE.md.bak. Injects meta header (v0.0.1, 12-07-2026,
-   line-budget: 400) + P0 placeholder at top, appends fenced sections:
-   commands, layout (ownership map), conventions, boundaries, workflow,
-   decisions, patterns, gotchas placeholder, testing, environment, glossary
-   placeholder. Skips `adr` (nothing scannable). Existing 610 lines: untouched.
-
-```
-ORC-CLAUDE — update → CLAUDE.md v0.0.1 (12-07-2026)
-Sections written: p0*, commands, layout, conventions, boundaries, workflow,
-decisions, patterns, gotchas*, testing, environment, glossary*   (*=fill yourself)
-Skipped (empty scan): adr, pointers
-Preserved untouched: user content (610 lines), no wiki block found
-Conflicts flagged (NOT auto-edited):
-  - existing line 42 says "run yarn test" — repo uses pnpm (pnpm test)
-Backup: CLAUDE.md.bak written (add it to .gitignore)
-NOTE: file is 802 lines total (budget covers generated content only) — trim
-unused user content yourself for better instruction-following.
-```
-
-## Run 2 — REFRESH, one stale section
-
-U: /orc-claude   (weeks later; `test` script renamed to `test:unit` + `test:e2e`)
-C: Header found → REFRESH → spawns the writer.
-W: Recomputes fingerprints: only `commands` differs (e3f1a2 → 8c04b1). Writes
-   .bak, replaces the commands fence interior, bumps 0.0.1 → 0.0.2,
-   updated: 03-08-2026. User's edits outside fences + the wiki block:
-   byte-identical. Returns actual_model=claude-opus-4-8, actual_effort=high.
-
-## Run 3 — REFRESH, noop
-
-U: /orc-claude
-W: All fingerprints match →
-   `CLAUDE.md up to date (v0.0.2, 03-08-2026)` — no write, no bump, no bak.
-
-## Run 4 — behavior trace (permanent, always on)
-
-Same dispatch as any run, plus the minimal one-dispatch trace. The skill writes
-the run pointer (`run-claude-<slug>-<DDMMYY>-<HHMMSS>.txt` into `log_dir`)
-FIRST, records these events as they happen, and — as a single-dispatch lane —
-dispatches the trace writer ONCE at run end to append them (`SPAWN`/`RETURN`
-come from the `orc-trace.js` hook as they occur):
-
-```
-[120726 09:14:02.110] writer   DISPATCH orc-claude-writer :: refresh expect=opus-4-8/high
-[120726 09:14:02.230] hook     SPAWN orc-claude-writer-opus-4-8-high
-[120726 09:15:47.900] hook     RETURN
-[120726 09:15:48.010] writer   VERIFY writer actual=claude-opus-4-8/high ✅ MATCH
-[120726 09:15:48.120] writer   FINISH :: refresh CLAUDE.md v0.0.3
-```
-
-Then the writer packet returns and the run pointer is deleted (in that order).
-A noop refresh traces the same shape, ending
-`FINISH :: noop`. No phase/score/gate/finding/verdict markers — orc-claude
-runs none of those phases (they live inside the writer). The `orc-trace.js` hook
-bootstraps the pointer on the writer dispatch, so the SPAWN/RETURN skeleton is
-captured even if the skill's run-start step is skipped.
+# Worked example — orc-claude runs (mock; orient only, never execute from this)
+
+## Run 1 — UPDATE (existing hand-written CLAUDE.md, 610 lines)
+
+U: /orc-claude
+C: CLAUDE.md exists, no orc-claude:meta header → UPDATE mode. Spawns
+   orc-claude-writer-opus-5-low (the skill never writes the file itself).
+W: Scans: pnpm monorepo (3 workspaces), turbo, eslint+prettier, vitest,
+   Postgres migrations under `packages/db/migrations`.
+W: Copies CLAUDE.md → CLAUDE.md.bak. Injects meta header (v0.0.1, 12-07-2026,
+   line-budget: 400) + P0 placeholder at top, appends fenced sections:
+   commands, layout (ownership map), conventions, boundaries, workflow,
+   decisions, patterns, gotchas placeholder, testing, environment, glossary
+   placeholder. Skips `adr` (nothing scannable). Existing 610 lines: untouched.
+
+```
+ORC-CLAUDE — update → CLAUDE.md v0.0.1 (12-07-2026)
+Sections written: p0*, commands, layout, conventions, boundaries, workflow,
+decisions, patterns, gotchas*, testing, environment, glossary*   (*=fill yourself)
+Skipped (empty scan): adr, pointers
+Preserved untouched: user content (610 lines), no wiki block found
+Conflicts flagged (NOT auto-edited):
+  - existing line 42 says "run yarn test" — repo uses pnpm (pnpm test)
+Backup: CLAUDE.md.bak written (add it to .gitignore)
+NOTE: file is 802 lines total (budget covers generated content only) — trim
+unused user content yourself for better instruction-following.
+```
+
+## Run 2 — REFRESH, one stale section
+
+U: /orc-claude   (weeks later; `test` script renamed to `test:unit` + `test:e2e`)
+C: Header found → REFRESH → spawns the writer.
+W: Recomputes fingerprints: only `commands` differs (e3f1a2 → 8c04b1). Writes
+   .bak, replaces the commands fence interior, bumps 0.0.1 → 0.0.2,
+   updated: 03-08-2026. User's edits outside fences + the wiki block:
+   byte-identical. Returns actual_model=claude-opus-4-8, actual_effort=high.
+
+## Run 3 — REFRESH, noop
+
+U: /orc-claude
+W: All fingerprints match →
+   `CLAUDE.md up to date (v0.0.2, 03-08-2026)` — no write, no bump, no bak.
+
+## Run 4 — behavior trace (permanent, always on)
+
+Same dispatch as any run, plus the minimal one-dispatch trace. The skill writes
+the run pointer (`run-claude-<slug>-<DDMMYY>-<HHMMSS>.txt` into `log_dir`)
+FIRST, records these events as they happen, and — as a single-dispatch lane —
+dispatches the trace writer ONCE at run end to append them (`SPAWN`/`RETURN`
+come from the `orc-trace.js` hook as they occur):
+
+```
+[120726 09:14:02.110] writer   DISPATCH orc-claude-writer :: refresh expect=opus-5/low
+[120726 09:14:02.230] hook     SPAWN orc-claude-writer-opus-5-low
+[120726 09:15:47.900] hook     RETURN
+[120726 09:15:48.010] writer   VERIFY writer actual=claude-opus-5-5/low ✅ MATCH
+[120726 09:15:48.120] writer   FINISH :: refresh CLAUDE.md v0.0.3
+```
+
+Then the writer packet returns and the run pointer is deleted (in that order).
+A noop refresh traces the same shape, ending
+`FINISH :: noop`. No phase/score/gate/finding/verdict markers — orc-claude
+runs none of those phases (they live inside the writer). The `orc-trace.js` hook
+bootstraps the pointer on the writer dispatch, so the SPAWN/RETURN skeleton is
+captured even if the skill's run-start step is skipped.