@bonesofspring/ai-rules 0.2.26 → 0.2.28

package/presets/opencode/go/agents/build-verifier.md

@@ -10,6 +10,23 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/go-tooling.md`
+- `.opencode/rules/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the build verifier for **Go hexagonal** services (and for **ai-rules preset packaging** when scope says so).
 
 ## Consumer Go repos
@@ -36,7 +53,7 @@ From `packages/ai-rules/`:
 yarn check:preset-structure
 ```
 
-Hard gates: twin-map (stacks include **go**), token-budget (alwaysApply/session-start = 3), leakage (`GO_FORBIDDEN_*`, chain forks go≠next≠ios-swift≠java), shared-core drift (`AI_RULES_DRIFT_FAIL=1` via `check:preset-structure`).
+Hard gates: twin-map (stacks include **go**), token-budget (alwaysApply / session-start 3–5), leakage (`GO_FORBIDDEN_*`, chain forks go≠next≠ios-swift≠java), shared-core drift (`AI_RULES_DRIFT_FAIL=1` via `check:preset-structure`).
 
 Document PASS/FAIL in `validation-report.md`.
 

package/presets/opencode/go/agents/ci-investigator.md

@@ -6,6 +6,35 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/domain-layer.md`
+- `.opencode/rules/application-usecases.md`
+- `.opencode/rules/ports-interfaces.md`
+- `.opencode/rules/adapters-driven.md`
+- `.opencode/rules/adapters-driving.md`
+- `.opencode/rules/composition-root.md`
+- `.opencode/rules/module-public-api.md`
+- `.opencode/rules/persistence-adapters.md`
+- `.opencode/rules/messaging-adapters.md`
+- `.opencode/rules/go-conventions.md`
+- `.opencode/rules/api-http.md`
+- `.opencode/rules/api-grpc.md`
+- `.opencode/rules/go-tooling.md`
+- `.opencode/rules/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Triage red CI for Go repos (and ai-rules preset-structure when relevant).
 
 ## Steps

package/presets/opencode/go/agents/code-reviewer.md

@@ -10,6 +10,22 @@ permission:
 
 Write only review artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/code-review-mr.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a senior Go hexagonal code reviewer. Write only review artifacts under `.ai.local/team/**`; do not modify production code.
 
 ## Inputs

package/presets/opencode/go/agents/codebase-analyzer.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a specialist at understanding HOW this Go hexagonal service works. Document implementation details with precise `path:line` references.
 
 ## CRITICAL — explain as-is only

package/presets/opencode/go/agents/debugger.md

@@ -6,6 +6,35 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/domain-layer.md`
+- `.opencode/rules/application-usecases.md`
+- `.opencode/rules/ports-interfaces.md`
+- `.opencode/rules/adapters-driven.md`
+- `.opencode/rules/adapters-driving.md`
+- `.opencode/rules/composition-root.md`
+- `.opencode/rules/module-public-api.md`
+- `.opencode/rules/persistence-adapters.md`
+- `.opencode/rules/messaging-adapters.md`
+- `.opencode/rules/go-conventions.md`
+- `.opencode/rules/api-http.md`
+- `.opencode/rules/api-grpc.md`
+- `.opencode/rules/go-tooling.md`
+- `.opencode/rules/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Investigate with **runtime evidence**: failing `go test` output, logs, stack traces, minimal repro.
 
 Use the **`debug-investigation` skill** for the investigation loop.

package/presets/opencode/go/agents/feature-developer.md

@@ -6,6 +6,35 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/domain-layer.md`
+- `.opencode/rules/application-usecases.md`
+- `.opencode/rules/ports-interfaces.md`
+- `.opencode/rules/adapters-driven.md`
+- `.opencode/rules/adapters-driving.md`
+- `.opencode/rules/composition-root.md`
+- `.opencode/rules/module-public-api.md`
+- `.opencode/rules/persistence-adapters.md`
+- `.opencode/rules/messaging-adapters.md`
+- `.opencode/rules/go-conventions.md`
+- `.opencode/rules/api-http.md`
+- `.opencode/rules/api-grpc.md`
+- `.opencode/rules/go-tooling.md`
+- `.opencode/rules/post-change-test.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Implement Go features following hexagonal boundaries.
 
 ## Order

package/presets/opencode/go/agents/integration-test-generator.md

@@ -6,6 +6,23 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-integration.md`
+- `.opencode/rules/tests-e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-generator** for Go hexagonal services.
 
 ## Scope

package/presets/opencode/go/agents/integration-test-healer.md

@@ -6,6 +6,23 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-integration.md`
+- `.opencode/rules/tests-e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-healer** for Go hexagonal services.
 
 ## Scope

package/presets/opencode/go/agents/integration-test-planner.md

@@ -10,6 +10,23 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-integration.md`
+- `.opencode/rules/tests-e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are the **integration-test-planner** for Go hexagonal services.
 
 ## Scope

package/presets/opencode/go/agents/migration-specialist.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You plan migrations for **Go modules** (toolchain, deps, layout refactors). Do not edit production code.
 
 ## Inputs

package/presets/opencode/go/agents/openspec-author.md

@@ -11,6 +11,21 @@ permission:
 
 Write team artifacts under `.ai.local/team/**` and scoped files (`openspec/**`). Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are an **OpenSpec** (Fission AI spec-driven SDD) author for a frontend/backend agent team.
 
 Your only writes target `openspec/**` (and team artifact manifests). Production code lives behind `feature-developer`; you are **docs / spec only**.

package/presets/opencode/go/agents/performance-auditor.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Audit Go performance risks on the task scope.
 
 ## Focus

package/presets/opencode/go/agents/qa-tester.md

@@ -6,6 +6,24 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-unit.md`
+- `.opencode/rules/tests-integration.md`
+- `.opencode/rules/tests-e2e.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Ensure test coverage for the Go task scope.
 
 ## Prefer

package/presets/opencode/go/agents/security-reviewer.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Review Go diffs against `security-go.md`.
 
 ## Focus

package/presets/opencode/go/agents/solution-architect.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Design solutions for **Go hexagonal** services.
 
 ## Deliverable

package/presets/opencode/go/agents/task-analyst.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Analyze and decompose work for **Go hexagonal** backends.
 
 ## Classify first

package/presets/opencode/go/agents/task-router.md

@@ -10,6 +10,21 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 You are a task router for a **Go hexagonal backend** agent team. You **do not** implement tasks — you classify intent and plan the agent pipeline.
 
 ## Inputs

package/presets/opencode/go/agents/tech-writer.md

@@ -11,6 +11,21 @@ permission:
 
 Write team artifacts under `.ai.local/team/**` and scoped files (`docs/**`). Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Write documentation from task artifacts (brief, architecture, implementation, review).
 
 ## Go preset / services

package/presets/opencode/go/agents/unit-test-generator.md

@@ -6,6 +6,22 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Generate `*_test.go` from the plan. Prefer table-driven tests and port fakes.
 
 ## Rules

package/presets/opencode/go/agents/unit-test-healer.md

@@ -6,6 +6,22 @@ permission:
   edit: allow
 ---
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Heal failing `go test` unit failures. Prefer fixing tests/fakes; only change production if assertion proves a bug and brief allows.
 
 Follow `tests-unit.md`. Never introduce Playwright/XCUITest.

package/presets/opencode/go/agents/unit-test-planner.md

@@ -10,6 +10,22 @@ permission:
 
 Write only team artifacts under `.ai.local/team/**`. Do not edit production code.
 
+## Rules to load (subagent context)
+
+This subagent does **not** inherit `opencode.json` `instructions`. Read these rules explicitly before acting:
+
+- `.opencode/rules/go-app-core.md`
+- `.opencode/rules/architecture-boundaries.md` — layer boundaries and allowed imports
+- `.opencode/rules/code-quality-and-refactoring.md`
+- `.opencode/rules/ai-local-overlay.md`
+- `.opencode/rules/feature-delivery-workflow.md` — layer order, mockup gate, ux-design gate
+- `.opencode/rules/reference-features.md` — analog files first
+- `.opencode/rules/anti-sycophancy-discipline.md` — procedural anti-sycophancy rules
+- `.opencode/rules/mcp-usage.md` — when verifying third-party APIs (Context7)
+- `.opencode/rules/tests-unit.md`
+
+Also read matching `.ai.local/rules/*.md` (local overlay) for the active zone, and the project strict rules if present.
+
 Plan **Go unit tests** (`testing`, table-driven). No production edits.
 
 ## Focus

package/presets/opencode/go/commands/spec-start.md

@@ -1,5 +1,5 @@
 ---
-description: Bootstrap or generate docs/specs (INDEX + page/feature) via task-analyst author mode. Optional docs-only path with human gate.
+description: "Bootstrap or generate docs/specs (INDEX + page/feature) via task-analyst author mode. Optional docs-only path with human gate."
 ---
 
 ## Invocation arguments

package/presets/opencode/go/commands/task-continue.md

@@ -1,5 +1,5 @@
 ---
-description: Continue an agent-team task after a human gate, pause, or review changes request using pipeline.json and status.json.
+description: "Continue an agent-team task after a human gate, pause, or review changes request using pipeline.json and status.json."
 ---
 
 ## Invocation arguments

package/presets/opencode/go/commands/task.md

@@ -1,5 +1,5 @@
 ---
-description: Route a natural-language task through the agent-team pipeline: task-router, pipeline.json, and the first planned specialist.
+description: "Route a natural-language task through the agent-team pipeline: task-router, pipeline.json, and the first planned specialist."
 ---
 
 ## Invocation arguments

package/presets/opencode/go/commands/technical-retro.md

@@ -1,5 +1,5 @@
 ---
-description: Facilitate a technical retrospective for a period, incident, release, or completed agent-team task slug.
+description: "Facilitate a technical retrospective for a period, incident, release, or completed agent-team task slug."
 ---
 
 ## Invocation arguments

package/presets/opencode/go/hooks/chain-team-phases.sh

@@ -43,7 +43,10 @@ try {
 }
 
 const slug = active.slug;
-if (!slug) {
+// Reject non-kebab / traversal slugs: the runtime writes status.json and
+// metrics.json under tasks/<slug>, so an unchecked slug could escape the tree.
+const SLUG_RE = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
+if (typeof slug !== 'string' || slug.length > 48 || !SLUG_RE.test(slug)) {
   process.stdout.write('{}');
   process.exit(0);
 }
@@ -70,6 +73,9 @@ function waitForMetricsLock() {
   // and never blocked on the lock file, so two concurrent subagentStop events
   // could both acquire the lock and corrupt metrics.json. Retry EEXIST with a
   // 10 ms sleep up to 200 attempts (2 s ceiling). On any other error, throw.
+  // A lock left behind by a killed process is reclaimed once its mtime is older
+  // than STALE_LOCK_MS, so one crash cannot brick the task forever.
+  const STALE_LOCK_MS = 30000;
   for (let attempt = 0; attempt < 200; attempt += 1) {
     try {
       const fd = fs.openSync(METRICS_LOCK, 'wx');
@@ -77,6 +83,13 @@ function waitForMetricsLock() {
       return;
     } catch (error) {
       if (!error || error.code !== 'EEXIST') throw error;
+      try {
+        const lockStat = fs.statSync(METRICS_LOCK);
+        if (Date.now() - lockStat.mtimeMs > STALE_LOCK_MS) {
+          fs.unlinkSync(METRICS_LOCK);
+          continue;
+        }
+      } catch {}
       const until = Date.now() + 10;
       while (Date.now() < until) { /* 10 ms busy-wait */ }
     }
@@ -490,7 +503,10 @@ function legacyFlow() {
 
 
 if (hookInput.action === 'end_human_gate') {
-    status.awaitingHumanGate = false;
+  // Only advance when a gate was actually open. A duplicate or retried
+  // end_human_gate must be a no-op, not a silent pipeline skip.
+  const gateWasOpen = Boolean(status.activeHumanGateEventId) || status.awaitingHumanGate === true;
+  status.awaitingHumanGate = false;
   // A2 (retro §8): pin a single runId per pipeline so subsequent events don't
   // fragment the metrics ledger across multiple runId sequences. Prefer
   // metrics.json.task.runId when metrics already exist, then status.metricsRunId,
@@ -517,7 +533,7 @@ if (hookInput.action === 'end_human_gate') {
     });
     delete status.activeHumanGateEventId;
   }
-  if (hookInput.activateNext && fs.existsSync(pipelinePath)) {
+  if (gateWasOpen && hookInput.activateNext && fs.existsSync(pipelinePath)) {
     let resumePipeline = null;
     try { resumePipeline = JSON.parse(fs.readFileSync(pipelinePath, 'utf8')); } catch {}
     if (resumePipeline) {
@@ -539,6 +555,19 @@ if (hookInput.action === 'end_human_gate') {
         else out(handoffForAgent(resumeAgents[0], resumeNext.step.scope, resumeNext.step));
         process.exit(0);
       }
+      // Gate on the final step: no executable step remains. Complete the
+      // pipeline instead of leaving it in_progress forever.
+      status.state = 'completed';
+      completeTaskMetrics();
+      writeStatus({
+        pipelineIndex: resumeSteps.length,
+        phase: 'done',
+        state: 'completed',
+        currentAgent: null,
+        awaitingHumanGate: false,
+      });
+      out(`Pipeline complete for "${slug}". Run /technical-retro ${slug}.`);
+      process.exit(0);
     }
   }
   // A2 (retro §8): if gate closes the final human gate of the pipeline