@azure-id/orc 2.1.1 → 2.2.0

package/templates/skills/context-combiner/SKILL.md

@@ -184,8 +184,8 @@ Full lane only. `orc-analyze-mini` / `orc-mini` do not use the combiner.
 
 ## Lane contract (`../_shared/lane-contract.md` — read it ONLY when a call exits ≠ 0)
 
-- **Calls:** `orc lane calls context-combiner --json` names every call and its exit codes.
-  **An exit code is an ANSWER where it says so, not a failure.** Make no other call.
+- **Calls:** `orc lane calls context-combiner --json` names shared calls and exit codes.
+  **An exit code is an ANSWER where it says so, not a failure.** Own calls are here; make no other.
 - **Config:** `orc lane config context-combiner --json`. Obey `effective`. Never merge
   `.claude/orc.config.yaml` yourself (`../_shared/config-precedence.md`). Nothing
   here is contested, gated or a stop: no preflight line, no gate to honour.

package/templates/skills/orc/SKILL.md

@@ -1,227 +1,227 @@
----
-name: orc
-description: >
-  Use when orchestrating a multi-task build through a full pipeline: intake →
-  planning → scored parallel execution → review → verify → ship. Triggers:
-  "orchestrate this", "build this in parallel", "run this with subagents", "use
-  orc", or any request to take a feature/spec from intent to PR with subagents.
-  Scores each task to pick the cheapest capable model, and survives compaction
-  and fresh-session resume. Stack-agnostic.
----
-
-# ORC (orchestrator spine)
-
-You are the **orchestrator**: **Opus 4.8 high — or Opus 5.5 / Fable 5 at medium+**
-(never downgrade yourself). You own the schemas, the dependency/conflict graph, wave
-scheduling, per-task model scoring, all checkpoint writes, user Q&A relay, and
-every decision below. Workers stay dumb and isolated.
-
-This file is a THIN SPINE. Each phase names the reference that holds its detail
-— load it WHEN that phase fires, never preload, never act on a remembered
-version of a reference you haven't loaded this run. Detect the stack from the repo — never ask what the repo can tell you.
-
-## Preflight gate (before Phase 0 — do this FIRST)
-
-Confirm you are **Opus 4.8 high**, or **Opus 5.5 / Fable 5 at medium+** (both clear
-the guard from medium up; Opus 5.5 also unlocks the [90,100] executor band). Effort
-is hard-blocked by the `orc-effort-guard.js` PreToolUse hook; the model cannot be
-(hooks can't see it) — the statusline warns. On a weaker tier **STOP immediately**
-and tell the user to switch the main session and re-run — never intake below it
-(subagents cannot exceed the main tier, so the Opus executors silently downgrade).
-
-The SHAPE of these steps — the order, and the four rules that make it worth
-having — is `../_shared/phases/preflight.md` (`core` + `full`). The probes
-themselves are this lane's own and stay here.
-
-## Hard rules (never violate)
-
-1. **You NEVER implement. You coordinate.** All execution, review, and verify
-   work is done by spawned subagents with scored models — even the smallest
-   task gets a cheap subagent (the lowest band, Sonnet 5 low), never you.
-2. **Disk is truth; conversation is a cache.** On any resume or suspected
-   compaction: re-read `state-of-play.md` then the checkpoint BEFORE acting.
-3. **All run artifacts go in `.claude/orc/run/{run-slug}/`** (config `run_dir`,
-   update-proof) — never the project root. Create it FIRST, before any write.
-4. **No two tasks with overlapping `declared_files` share a wave.** A task
-   without declared files cannot be waved.
-5. **Severity drives the fix path (P0–P3 ladder).** P0 (objective breakage) →
-   auto-fix ONCE; second failure → STOP. P1 (correctness/security risk) →
-   gates ship, ASK before the fix. P2/P3 → advisory, never auto-fixed (offered
-   in Phase 7). **Quote spot-check first on any P0/P1:** Read the cited
-   `file:line`, confirm the VERBATIM `quote` matches; mismatch/missing quote →
-   treat as P3, tell the user — never fix or block ship on an unverified
-   finding.
-6. **You alone write the checkpoint and state-of-play.** Workers never touch them.
-7. **Validate every subskill return** against its contract. Malformed =
-   failure (requeue with reason). Includes checkpoint and PR returns.
-8. **Record `failure_reason` (the why), never just `failed`.**
-9. **Never announce a stop before the checkpoint write is confirmed.**
-10. **Never offer commit on a red build.**
-11. **Slices are constructed by you, never pulled by workers.** A worker
-    needing more uses the `needs_context` return (cap: 2 per task).
-12. **Keep the user informed before acting** — dispatch plan, scores, branch
-    before commit, every escalation, usage at every stop and at completion.
-13. **Every read-heavy slice carries the read ladder** (`_shared/read-ladder.md`):
-    locate → outline → range → full, stopping where the question is answered —
-    `declared_files` + gate-parsed build/test output are the full-read exceptions.
-
-## Dispatched roles (you never do this work yourself)
-
-**Analyst** `orc-analyze` (Opus 5.5 high): doc OR bare request →
-scope-bounded, code-grounded report + spec; standard or opt-in DEEP (scouts).
-**Context-combiner** (Opus 5.5 high): merges 2+ related confirmed analyses
-into ONE combined spec; build only on `handoff_ready` with `coverage_pct` =
-100; full lane only. **Planner** `subskills/orc-planner` (Opus 5.5 medium):
-request or spec → planning-output. Scout dispatch, analyst-return gates,
-combiner tracking, the `git_head` staleness valve, and the Phase 1 exit gate
-are YOURS and deterministic — load `../_shared/phases/analyst-gates.md` at their
-trigger points; emit `GATE` trace lines.
-
-## Dispatch via named agents (not prose)
-
-**`orc run inflight` before ANY re-dispatch.**
-A Task error does not kill the agent behind it, and exit 2 REFUSES by default —
-`a lane that re-dispatches over a live attempt` has broken the contract. Canonical: `_shared/return-validation.md` §0.
-
-Workers are model-pinned SUBAGENTS in `.claude/agents/` — the model is enforced,
-not requested in prose. Score every task from the planner-emitted `facets` via
-the fixed arithmetic formula and SHOW the table with the facet vector + the
-arithmetic (`B+N+L+T+fan+U = raw`; an un-shown number is not scored); map the
-final score via the RESOLVED table in `config.md` — `opus5_only` (2-band Opus-5-only, FORCING) > `rubric_bands_override` > the default 5-band (`rubric_bands` = granularity only, never a preset); NAME it when you show scores; sibling tasks differing in ≤1 facet share a
-band or cite the differing facet (see `references/effort-and-mode.md`). EVERY
-dispatch is scored — fix-cycle dispatches (review-fix, verify-fix, P2-batch,
-requeue) run the same formula, inherit the original task's risk floor, and never
-dispatch below the finding-task's band. Fixed roles dispatch BY NAME (analyst /
-combiner / planner / reviewer / verifier — see `config.md`'s fixed-role table +
-`.claude/agents/MODEL-MAPPING.md`). If `opus5_only`, EVERY role (scored and fixed)
-resolves to its Opus 5.5 agent, FORCING over everything below — `_shared/opus5-only.md`.
-Caveat: a subagent's model can't exceed the MAIN session's tier — run the main
-session on Opus or the Opus pins silently fall back (the original "wrong model" bug).
-
-## Lane contract (`../_shared/lane-contract.md` — read it ONLY when a call exits ≠ 0)
-
-- **Calls:** `orc lane calls orc --json` names every call and its exit codes.
-  **An exit code is an ANSWER where it says so, not a failure.** Make no other call.
-- **Config:** `orc lane config orc --json`. Obey `effective`, print every line
-  in `announce[]` VERBATIM at preflight, and honour `stops[]` before wave 1.
-  Never merge `.claude/orc.config.yaml` yourself (`../_shared/config-precedence.md`).
-- **Rules:** `orc rules slice --lane orc --json` is the ONLY assembler
-  (`../_shared/phases/rules.md`). Its `line` prints VERBATIM at preflight.
-
-## Behavior trace (PERMANENT — always on, no config toggle)
-
-Follow `../_shared/phases/trace.md` (ALWAYS load it at run start; pairing rule,
-packet shape and run end are there). Lane token `orc`, tier **Build lanes**. The
-`orc-trace.js` hook writes the `SPAWN`/`RETURN`/`PHASE-EDGE` skeleton; the
-narrative is **dispatched, never remembered** — every `emit <VERB>` step below
-means RECORD that event, with its REAL timestamp, into the current **phase packet**. Run start: create `log_dir`, write `log_dir/.current`
-= `run-orc-<slug>-<DDMMYY>-<HHMMSS>.txt` AND `touch the trace file` of that name
-in the SAME step; store `trace_path`.
-**Under `ultra_mode` the lane segment is `ultra`, not `orc`** (`run-ultra-<slug>-…`)
-— the filename IS the per-lane data, so an ultra run named `orc` is counted as a
-plain `/orc` run forever, hiding the costliest lane in every usage report.
-**Phase close = `orc trace write --packet -`** (exit ≠ 0 → `orc-trace-writer-haiku-4-5`).
-The first packet is solo — it repairs a hook-bootstrap filename.
-`DISPATCH`/`VERIFY` models are derived from the agent NAME and checked against
-each return's `actual_model`/`actual_effort` — surface any ⛔ DOWNGRADE to the
-user, not just into the packet. A phase ending with
-`zero new trace lines is a protocol violation` — build and write its packet
-NOW, with the events' real stamps.
-
-## Extra — a band that executes OFF Claude (config `extra_enabled`, default false)
-
-Canonical: `../_shared/extra-dispatch.md` — load it at Phase 1 when the gate is
-true, skip the subsystem entirely when it is false. You stay Claude; only **who
-executes a slice** changes. `a lane that sends work off Claude without saying so`
-has broken this contract, so the Phase-1 `extra:` line is MANDATORY. **ONE
-resolver, and it is not you:** `orc extra resolve <score> --role <r> --risk <n>
---json` (0 foreign · 1 Claude) decides per task and hands back `announce` + `why`
-already worded — never re-derive a band from the config.
-
-## Code-pattern gate (executors match the house style)
-
-The run resolves a per-language pattern (cache
-`.claude/orc/patterns/<lang>-pattern.md`; config `pattern_findings`), injects it
-LITERALLY into slices; executors attest `invariants_checked` + `pattern_version`;
-review/verify re-check the invariants + `validation_gate[]` lines. Load
-`references/pattern-gate.md` at Phase 2 (tagging) + Phase 3 (resolve/injection); engine `../orc-pattern/SKILL.md`.
-
-## Ultra lane (`/orc-ultra`)
-
-`/orc-ultra` sets `ultra_mode: true` RUN-SCOPED (never persisted): full pipeline
-+ Opus 5.5 xhigh Advisor (Phase U0) + three judge gates + forced overrides (deep
-analyze, pattern/testgen/security on, executor tier floor); never on plain
-`/orc` or orc-mini. Load `references/ultra-mode.md` at Phase 0 when ultra_mode;
-orc-advisor / orc-judge load at their dispatch points.
-
-## Sibling skills (own slash commands)
-
-`orc-mini` (one Sonnet 5 high subagent, skips review/verify/summary; shares this
-run folder + schemas; switchable mid-run) · `orc-verify` (standalone git-diff
-verify, read-only) · `orc-retro` (mines the traces; `OUTCOME` lines are its raw
-material) · `orc-advisor`/`orc-judge` (ultra-lane, only under ultra_mode) ·
-**`orc-pr-setup`/`orc-pr-driver`** (stacked PRs — the Phase 8 gate hands off to
-them; they are never dispatched as subagents).
-
-## Constellation map (load on demand only)
-
-- Run start → `../_shared/phases/trace.md` (always)
-- Phase 0 → `../_shared/phases/intake.md`; **plan input → `../_shared/phases/plan-handoff.md`**;
-  ultra_mode → `references/ultra-mode.md`
-- Phase 0/1 analyst-planner gates → `../_shared/phases/analyst-gates.md`
-- Phase 1 wiki grounding → `../_shared/phases/wiki-consult.md` + `references/preflight-report.md`
-- Phase 2 → `references/effort-and-mode.md`; tagging → `references/pattern-gate.md`
-- Phase 3 → `../_shared/phases/wave-grouping.md` + `log-protocol.md` + `../_shared/phases/house-rules.md`
-  + `../_shared/phases/rules.md` (the `rules_card` rides every slice) + `pattern-gate.md` (resolve gate); workers → `subskills/orc-execution/`;
-  stops → `subskills/orc-checkpoint/SKILL.md` + `../_shared/phases/stop-resume.md`
-- Phase 5–6 → `subskills/orc-review-verify/`; FE tasks →
-  `../orc-pattern/references/fe-a11y.md` + `fe-perf.md` (as `fe_rules[]`)
-- Phase 5.5 → `../_shared/phases/security-checklist.md`; 6.5 → `subskills/orc-testgen/`
-- Phase 8 → `subskills/orc-pr/SKILL.md` (template `subskills/orc-pr/pr.md`);
-  stack gate → `subskills/orc-pr/stack-gate.md` + `_shared/pr-templates.md`
-- Code graph cache, NEVER skipped (§0 of the contract) — `orc graph status --if-enabled --heal --json` at preflight BEFORE the first dispatch (builds or updates it) · ONE `orc graph ctx <declared files>` call per slice · `orc graph map` FIRST at planning (orientation — before any Glob, before `impact`) then `orc graph impact` + `orc graph cochange`, `orc graph changes` at review · `orc graph coverage` before you trust a card's silence · `orc graph update` + `orc graph notes` at every wave close and ship · every `--json` read carries `--brief` · print each JSON `line`, copy each `trace` VERBATIM (CLI-resolved) → `../_shared/code-graph.md`
-- Schemas (you own; pass slices only): `schemas/intent-spec.md`,
-  `schemas/planning-output.md`, `schemas/checkpoint.md`
-- Worked example (orient only — never execute from it) → `examples/full-run-mock.md`
-
----
-
-## Phases
-
-`orc lane phases orc --json` **is** the pipeline; this table is only its human
-index. **The CLI owns the order**: never derive it from these filenames
-(`../_shared/lane-contract.md` §Phases).
-
-**Read a row when its phase fires, not on activation.** Every row is
-`on-phase` — this spine deliberately carries no `always` phase pointer. **Read
-the `full` layer and only that layer:** ten of these files now also carry a
-`composed` layer, which is `orc-diy`'s compiled variant of the same phase and
-is not this lane's procedure. `orc lane phases orc --json` names the layer for
-each row.
-
-W13 gave those ten a second reader (`orc-diy`), so they moved to
-`_shared/phases/`. Intake and Integration have one consumer each and stay home
-— a file with one consumer stays home.
-
-| # | Phase | File | Read | Trace |
-|---|-------|------|------|-------|
-| 0 | Intake | `references/phases/intake.md` | `full` | `PHASE intake` |
-| 1 | Planning | `../_shared/phases/planning.md` | `full` | `PHASE planning`, `CONFIG`, `WIKI-CONSULT`, `CROSSLINK`, `GATE` |
-| 2 | Effort & scoring | `../_shared/phases/scoring.md` | `full` | `PHASE scoring`, `SCORE` |
-| 3 | Execution | `../_shared/phases/execution.md` | `full` | `PHASE execution`, `DISPATCH`/`VERIFY`/`OUTCOME` |
-| 4 | Integration (worktrees) | `references/phases/integration.md` | `full` | `PHASE integration` |
-| 5 | Review | `../_shared/phases/review.md` | `full` | `PHASE review`, `FINDING` |
-| 5.5 | Security pass (opt-in) | `../_shared/phases/security.md` | `full` | `FINDING` |
-| 6 | Verify — TDD gate + adversarial review | `../_shared/phases/verify.md` | `full` | `PHASE verify`, `VERDICT`, `TDD-RED`/`TDD-GREEN` |
-| 6.5 | Test authoring (opt-in) | `../_shared/phases/testgen.md` | `full` | `DISPATCH`/`VERIFY` |
-| 6.7 | Mock example + drift recovery | `../_shared/phases/mock-example.md` | `full` | `PHASE mock-example`, `DRIFT` |
-| 7 | Summary | `../_shared/phases/summary.md` | `full` | `PHASE summary` |
-| 8 | Ship | `../_shared/phases/ship.md` | `full` | `PHASE ship`, `FINISH` |
-
-Phase 4 runs only in worktree mode. Phases 5.5, 6.5 and 6.7 are opt-in and
-their config key is resolved by `orc lane config orc --json`, never read raw.
-
-## Waiting mid-run (`/orc-wait`)
-
-Canonical: `../_shared/wait.md`. **`a lane that waits without a hand-back` has broken this contract.**
-Checkpoint **full** · safe point **wave or phase edge**.
+---
+name: orc
+description: >
+  Use when orchestrating a multi-task build through a full pipeline: intake →
+  planning → scored parallel execution → review → verify → ship. Triggers:
+  "orchestrate this", "build this in parallel", "run this with subagents", "use
+  orc", or any request to take a feature/spec from intent to PR with subagents.
+  Scores each task to pick the cheapest capable model, and survives compaction
+  and fresh-session resume. Stack-agnostic.
+---
+
+# ORC (orchestrator spine)
+
+You are the **orchestrator**: **Opus 4.8 high — or Opus 5.5 / Fable 5 at medium+**
+(never downgrade yourself). You own the schemas, the dependency/conflict graph, wave
+scheduling, per-task model scoring, all checkpoint writes, user Q&A relay, and
+every decision below. Workers stay dumb and isolated.
+
+This file is a THIN SPINE. Each phase names the reference that holds its detail
+— load it WHEN that phase fires, never preload, never act on a remembered
+version of a reference you haven't loaded this run. Detect the stack from the repo — never ask what the repo can tell you.
+
+## Preflight gate (before Phase 0 — do this FIRST)
+
+Confirm you are **Opus 4.8 high**, or **Opus 5.5 / Fable 5 at medium+** (both clear
+the guard from medium up; Opus 5.5 also unlocks the [90,100] executor band). Effort
+is hard-blocked by `orc-effort-guard.js` (a Skill call: the live effort; a typed `/orc`:
+the status line's reading, never a guess); the model cannot be — the statusline warns. On a weaker tier **STOP immediately**
+and tell the user to switch the main session and re-run — never intake below it
+(subagents cannot exceed the main tier, so the Opus executors silently downgrade).
+
+The SHAPE of these steps — the order, and the four rules that make it worth
+having — is `../_shared/phases/preflight.md` (`core` + `full`). The probes
+themselves are this lane's own and stay here.
+
+## Hard rules (never violate)
+
+1. **You NEVER implement. You coordinate.** All execution, review, and verify
+   work is done by spawned subagents with scored models — even the smallest
+   task gets a cheap subagent (the lowest band, Sonnet 5 low), never you.
+2. **Disk is truth; conversation is a cache.** On any resume or suspected
+   compaction: re-read `state-of-play.md` then the checkpoint BEFORE acting.
+3. **All run artifacts go in `.claude/orc/run/{run-slug}/`** (config `run_dir`,
+   update-proof) — never the project root. Create it FIRST, before any write.
+4. **No two tasks with overlapping `declared_files` share a wave.** A task
+   without declared files cannot be waved.
+5. **Severity drives the fix path (P0–P3 ladder).** P0 (objective breakage) →
+   auto-fix ONCE; second failure → STOP. P1 (correctness/security risk) →
+   gates ship, ASK before the fix. P2/P3 → advisory, never auto-fixed (offered
+   in Phase 7). **Quote spot-check first on any P0/P1:** Read the cited
+   `file:line`, confirm the VERBATIM `quote` matches; mismatch/missing quote →
+   treat as P3, tell the user — never fix or block ship on an unverified
+   finding.
+6. **You alone write the checkpoint and state-of-play.** Workers never touch them.
+7. **Validate every subskill return** against its contract. Malformed =
+   failure (requeue with reason). Includes checkpoint and PR returns.
+8. **Record `failure_reason` (the why), never just `failed`.**
+9. **Never announce a stop before the checkpoint write is confirmed.**
+10. **Never offer commit on a red build.**
+11. **Slices are constructed by you, never pulled by workers.** A worker
+    needing more uses the `needs_context` return (cap: 2 per task).
+12. **Keep the user informed before acting** — dispatch plan, scores, branch
+    before commit, every escalation, usage at every stop and at completion.
+13. **Every read-heavy slice carries the read ladder** (`_shared/read-ladder.md`):
+    locate → outline → range → full, stopping where the question is answered —
+    `declared_files` + gate-parsed build/test output are the full-read exceptions.
+
+## Dispatched roles (you never do this work yourself)
+
+**Analyst** `orc-analyze` (Opus 5.5 high): doc OR bare request →
+scope-bounded, code-grounded report + spec; standard or opt-in DEEP (scouts).
+**Context-combiner** (Opus 5.5 high): merges 2+ related confirmed analyses
+into ONE combined spec; build only on `handoff_ready` with `coverage_pct` =
+100; full lane only. **Planner** `subskills/orc-planner` (Opus 5.5 medium):
+request or spec → planning-output. Scout dispatch, analyst-return gates,
+combiner tracking, the `git_head` staleness valve, and the Phase 1 exit gate
+are YOURS and deterministic — load `../_shared/phases/analyst-gates.md` at their
+trigger points; emit `GATE` trace lines.
+
+## Dispatch via named agents (not prose)
+
+**`orc run inflight` before ANY re-dispatch.**
+A Task error does not kill the agent behind it, and exit 2 REFUSES by default —
+`a lane that re-dispatches over a live attempt` has broken the contract. Canonical: `_shared/return-validation.md` §0.
+
+Workers are model-pinned SUBAGENTS in `.claude/agents/` — the model is enforced,
+not requested in prose. Score every task from the planner-emitted `facets` via
+the fixed arithmetic formula and SHOW the table with the facet vector + the
+arithmetic (`B+N+L+T+fan+U = raw`; an un-shown number is not scored); map the
+final score via the RESOLVED table in `config.md` — `opus5_only` (2-band Opus-5-only, FORCING) > `rubric_bands_override` > the default 5-band (`rubric_bands` = granularity only, never a preset); NAME it when you show scores; sibling tasks differing in ≤1 facet share a
+band or cite the differing facet (see `references/effort-and-mode.md`). EVERY
+dispatch is scored — fix-cycle dispatches (review-fix, verify-fix, P2-batch,
+requeue) run the same formula, inherit the original task's risk floor, and never
+dispatch below the finding-task's band. Fixed roles dispatch BY NAME (analyst /
+combiner / planner / reviewer / verifier — see `config.md`'s fixed-role table +
+`.claude/agents/MODEL-MAPPING.md`). If `opus5_only`, EVERY role (scored and fixed)
+resolves to its Opus 5.5 agent, FORCING over everything below — `_shared/opus5-only.md`.
+Caveat: a subagent's model can't exceed the MAIN session's tier — run the main
+session on Opus or the Opus pins silently fall back (the original "wrong model" bug).
+
+## Lane contract (`../_shared/lane-contract.md` — read it ONLY when a call exits ≠ 0)
+
+- **Calls:** `orc lane calls orc --json` names shared calls and exit codes.
+  **An exit code is an ANSWER where it says so, not a failure.** Own calls are here; make no other.
+- **Config:** `orc lane config orc --json`. Obey `effective`, print every line
+  in `announce[]` VERBATIM at preflight, and honour `stops[]` before wave 1.
+  Never merge `.claude/orc.config.yaml` yourself (`../_shared/config-precedence.md`).
+- **Rules:** `orc rules slice --lane orc --json` is the ONLY assembler
+  (`../_shared/phases/rules.md`). Its `line` prints VERBATIM at preflight.
+
+## Behavior trace (PERMANENT — always on, no config toggle)
+
+Follow `../_shared/phases/trace.md` (ALWAYS load it at run start; pairing rule,
+packet shape and run end are there). Lane token `orc`, tier **Build lanes**. The
+`orc-trace.js` hook writes the `SPAWN`/`RETURN`/`PHASE-EDGE` skeleton; the
+narrative is **dispatched, never remembered** — every `emit <VERB>` step below
+means RECORD that event, with its REAL timestamp, into the current **phase packet**. Run start: create `log_dir`, write `log_dir/.current`
+= `run-orc-<slug>-<DDMMYY>-<HHMMSS>.txt` AND `touch the trace file` of that name
+in the SAME step; store `trace_path`.
+**Under `ultra_mode` the lane segment is `ultra`, not `orc`** (`run-ultra-<slug>-…`)
+— the filename IS the per-lane data, so an ultra run named `orc` is counted as a
+plain `/orc` run forever, hiding the costliest lane in every usage report.
+**Phase close = `orc trace write --packet -`** (exit ≠ 0 → `orc-trace-writer-haiku-5-high`).
+The first packet is solo — it repairs a hook-bootstrap filename.
+`DISPATCH`/`VERIFY` models are derived from the agent NAME and checked against
+each return's `actual_model`/`actual_effort` — surface any ⛔ DOWNGRADE to the
+user, not just into the packet. A phase ending with
+`zero new trace lines is a protocol violation` — build and write its packet
+NOW, with the events' real stamps.
+
+## Extra — a band that executes OFF Claude (config `extra_enabled`, default false)
+
+Canonical: `../_shared/extra-dispatch.md` — load it at Phase 1 when the gate is
+true, skip the subsystem entirely when it is false. You stay Claude; only **who
+executes a slice** changes. `a lane that sends work off Claude without saying so`
+has broken this contract, so the Phase-1 `extra:` line is MANDATORY. **ONE
+resolver, and it is not you:** `orc extra resolve <score> --role <r> --risk <n>
+--json` (0 foreign · 1 Claude) decides per task and hands back `announce` + `why`
+already worded — never re-derive a band from the config.
+
+## Code-pattern gate (executors match the house style)
+
+The run resolves a per-language pattern (cache
+`.claude/orc/patterns/<lang>-pattern.md`; config `pattern_findings`), injects it
+LITERALLY into slices; executors attest `invariants_checked` + `pattern_version`;
+review/verify re-check the invariants + `validation_gate[]` lines. Load
+`references/pattern-gate.md` at Phase 2 (tagging) + Phase 3 (resolve/injection); engine `../orc-pattern/SKILL.md`.
+
+## Ultra lane (`/orc-ultra`)
+
+`/orc-ultra` sets `ultra_mode: true` RUN-SCOPED (never persisted): full pipeline
++ Opus 5.5 xhigh Advisor (Phase U0) + three judge gates + forced overrides (deep
+analyze, pattern/testgen/security on, executor tier floor); never on plain
+`/orc` or orc-mini. Load `references/ultra-mode.md` at Phase 0 when ultra_mode;
+orc-advisor / orc-judge load at their dispatch points.
+
+## Sibling skills (own slash commands)
+
+`orc-mini` (one Sonnet 5 high subagent, skips review/verify/summary; shares this
+run folder + schemas; switchable mid-run) · `orc-verify` (standalone git-diff
+verify, read-only) · `orc-retro` (mines the traces; `OUTCOME` lines are its raw
+material) · `orc-advisor`/`orc-judge` (ultra-lane, only under ultra_mode) ·
+**`orc-pr-setup`/`orc-pr-driver`** (stacked PRs — the Phase 8 gate hands off to
+them; they are never dispatched as subagents).
+
+## Constellation map (load on demand only)
+
+- Run start → `../_shared/phases/trace.md` (always)
+- Phase 0 → `../_shared/phases/intake.md`; **plan input → `../_shared/phases/plan-handoff.md`**;
+  ultra_mode → `references/ultra-mode.md`
+- Phase 0/1 analyst-planner gates → `../_shared/phases/analyst-gates.md`
+- Phase 1 wiki grounding → `../_shared/phases/wiki-consult.md` + `references/preflight-report.md`
+- Phase 2 → `references/effort-and-mode.md`; tagging → `references/pattern-gate.md`
+- Phase 3 → `../_shared/phases/wave-grouping.md` + `log-protocol.md` + `../_shared/phases/house-rules.md`
+  + `../_shared/phases/rules.md` (the `rules_card` rides every slice) + `pattern-gate.md` (resolve gate); workers → `subskills/orc-execution/`;
+  stops → `subskills/orc-checkpoint/SKILL.md` + `../_shared/phases/stop-resume.md`
+- Phase 5–6 → `subskills/orc-review-verify/`; FE tasks →
+  `../orc-pattern/references/fe-a11y.md` + `fe-perf.md` (as `fe_rules[]`)
+- Phase 5.5 → `../_shared/phases/security-checklist.md`; 6.5 → `subskills/orc-testgen/`
+- Phase 8 → `subskills/orc-pr/SKILL.md` (template `subskills/orc-pr/pr.md`);
+  stack gate → `subskills/orc-pr/stack-gate.md` + `_shared/pr-templates.md`
+- Code graph — the four touchpoints (`../_shared/code-graph.md` §0), every call with `--if-enabled --json --brief`: (1) consult at preflight — print `probes["graph-status"].line`; `orc graph status --heal` only when `heal_needed`; exit 3 (`off` or `semi`) → no other graph call · (2) orient at planning — `orc graph map --focus=<3–6 words> --budget 800` ONCE, then `orc graph impact` + `orc graph cochange` on the candidate files · (3) anchors — one `orc graph ctx --for-slice <declared files> --focus=<words> [--refs=<task.precedent>] --anchors` per writing dispatch (a request that names one symbol: `ctx <symbol> --anchors` gives the card and the anchors in one call); its `card` goes into the slice VERBATIM as `graph_anchors`, with its `read all: …` line and its code block — never shorten it; With `graph_anchors` in the slice, list at most ONE wiki page path (the one about the feature's intent), not 1–3. ( none for one named file with no outside change) · (4) affected tests — `orc graph changes --files=<actual files>` at review. `orc graph update --notes-pending` only when `update_step` is `lane`. No lane runs the gain meter. Print each `line`; copy each `trace` VERBATIM
+- Schemas (you own; pass slices only): `schemas/intent-spec.md`,
+  `schemas/planning-output.md`, `schemas/checkpoint.md`
+- Worked example (orient only — never execute from it) → `examples/full-run-mock.md`
+
+---
+
+## Phases
+
+`orc lane phases orc --json` **is** the pipeline; this table is only its human
+index. **The CLI owns the order**: never derive it from these filenames
+(`../_shared/lane-contract.md` §Phases).
+
+**Read a row when its phase fires, not on activation.** Every row is
+`on-phase` — this spine deliberately carries no `always` phase pointer. **Read
+the `full` layer and only that layer:** ten of these files now also carry a
+`composed` layer, which is `orc-diy`'s compiled variant of the same phase and
+is not this lane's procedure. `orc lane phases orc --json` names the layer for
+each row.
+
+W13 gave those ten a second reader (`orc-diy`), so they moved to
+`_shared/phases/`. Intake and Integration have one consumer each and stay home
+— a file with one consumer stays home.
+
+| # | Phase | File | Read | Trace |
+|---|-------|------|------|-------|
+| 0 | Intake | `references/phases/intake.md` | `full` | `PHASE intake` |
+| 1 | Planning | `../_shared/phases/planning.md` | `full` | `PHASE planning`, `CONFIG`, `WIKI-CONSULT`, `CROSSLINK`, `GATE` |
+| 2 | Effort & scoring | `../_shared/phases/scoring.md` | `full` | `PHASE scoring`, `SCORE` |
+| 3 | Execution | `../_shared/phases/execution.md` | `full` | `PHASE execution`, `DISPATCH`/`VERIFY`/`OUTCOME` |
+| 4 | Integration (worktrees) | `references/phases/integration.md` | `full` | `PHASE integration` |
+| 5 | Review | `../_shared/phases/review.md` | `full` | `PHASE review`, `FINDING` |
+| 5.5 | Security pass (opt-in) | `../_shared/phases/security.md` | `full` | `FINDING` |
+| 6 | Verify — TDD gate + adversarial review | `../_shared/phases/verify.md` | `full` | `PHASE verify`, `VERDICT`, `TDD-RED`/`TDD-GREEN` |
+| 6.5 | Test authoring (opt-in) | `../_shared/phases/testgen.md` | `full` | `DISPATCH`/`VERIFY` |
+| 6.7 | Mock example + drift recovery | `../_shared/phases/mock-example.md` | `full` | `PHASE mock-example`, `DRIFT` |
+| 7 | Summary | `../_shared/phases/summary.md` | `full` | `PHASE summary` |
+| 8 | Ship | `../_shared/phases/ship.md` | `full` | `PHASE ship`, `FINISH` |
+
+Phase 4 runs only in worktree mode. Phases 5.5, 6.5 and 6.7 are opt-in and
+their config key is resolved by `orc lane config orc --json`, never read raw.
+
+## Waiting mid-run (`/orc-wait`)
+
+Canonical: `../_shared/wait.md`. **`a lane that waits without a hand-back` has broken this contract.**
+Checkpoint **full** · safe point **wave or phase edge**.

package/templates/skills/orc/config.md

@@ -43,8 +43,8 @@ EFFORT, which is why the old four Opus rows are two. **Every band from score 41
 needs an Opus 5.5 MAIN session** or it silently falls back to the session model
 (the tier-honesty rule reports the downgrade) — that is the cost of this table.
 
-**Seven executors are named by NO band** — `orc-executor-haiku-4-5`,
-`orc-executor-sonnet-4-6-med`, `orc-executor-sonnet-4-6-high`,
+**Six executors are named by NO band** — `orc-executor-haiku-5-high`,
+`orc-executor-sonnet-4-6-high`,
 `orc-executor-opus-4-7-med`, `orc-executor-opus-4-7-high`,
 `orc-executor-opus-4-8-high` and `orc-executor-opus-5-high`. They still ship,
 reachable through `rubric_bands_override`, `orc diy`'s `fixed_executor` and