@bongos/core 1.20.5 → 1.20.6

package/.bongos-core.json

@@ -2,22 +2,22 @@
   "artifact": "bongos-core",
   "manifest_schema": 1,
   "generator": "scripts/gds/package-core.js",
-  "core_version": "1.20.5",
-  "core_contract": "1.20.5",
-  "source_commit": "f8c753cef2672efe171e4fe602085b792e6386d1",
+  "core_version": "1.20.6",
+  "core_contract": "1.20.6",
+  "source_commit": "7887b42a9147d4ca749389bca6fbff6120c41766",
   "source_ref": "HEAD",
-  "built_at": "2026-09-30T03:35:13.655Z",
+  "built_at": "2026-09-30T04:05:09.203Z",
   "redaction": {
     "model": "docs-redacted+functional-verbatim",
-    "docs_redacted": 554,
+    "docs_redacted": 556,
     "agent_docs_stubbed": 25,
-    "functional_verbatim": 2611,
+    "functional_verbatim": 2619,
     "rules": 3,
     "gate_literals": 3,
     "gate": "passed"
   },
-  "file_count": 3191,
-  "tree_sha256": "1073eeb8e65fd705725fd70e257cdc88e19f13f523952cac80cd758b9c685d84",
+  "file_count": 3201,
+  "tree_sha256": "e7197c9a0497ef19bdfcd4085f7d6509536dbd1a85e1e52629d416a46530bce2",
   "files": [
     {
       "path": ".claude/skills/ask-for-help/SKILL.md",
@@ -152,7 +152,12 @@
     {
       "path": ".claude/skills/goal-review/SKILL.md",
       "mode": "0000644",
-      "sha256": "39016b0c0bf7c42e0b0ee1dc9bff23b90401a1ad29c34f7a475406660855be79"
+      "sha256": "bcee363c7e38108d43a8a1ada4bec72e21e4ac9439ed702d2ee905fc83156d15"
+    },
+    {
+      "path": ".claude/skills/goal-uat/SKILL.md",
+      "mode": "0000644",
+      "sha256": "a9a59d541ce5956b36cfd7f170f242f996297fdced7ff0bea73d37bc19c02b8e"
     },
     {
       "path": ".claude/skills/grade-audit/SKILL.md",
@@ -322,12 +327,12 @@
     {
       "path": "clients/bongos-client/README.md",
       "mode": "0000644",
-      "sha256": "aeb6b6285117097aa891b659cdcaf20755098355556a9bfa6e11557c8f980366"
+      "sha256": "655edd2659cc7ea8267529eb86f3a9454df4765f84ab5090208bab74b9befc93"
     },
     {
       "path": "clients/bongos-client/bongos-client.global.js",
       "mode": "0000644",
-      "sha256": "1b36ddb96f6ca78135b0628b18f53d68c04c7ce950b60bb7916d2fcb08544474"
+      "sha256": "1b5dfe77f736f8da7059734b1e38b7ae991810245799678235866ce7c2a02494"
     },
     {
       "path": "clients/bongos-client/examples/hello-world.mjs",
@@ -337,17 +342,17 @@
     {
       "path": "clients/bongos-client/index.cjs",
       "mode": "0000644",
-      "sha256": "65ba46030b9c7eec610029bd6fa0e55bc660618a81d50e3af1293f795a533a1c"
+      "sha256": "5fa483ccc721ed1b1ed715bfd01fe432486397eeb6d0ae8f6e504b3f28a8b72d"
     },
     {
       "path": "clients/bongos-client/index.d.ts",
       "mode": "0000644",
-      "sha256": "922701156282c55e3d7aa4a4ed4746fe47a579a189fd76065f868b21e319045a"
+      "sha256": "bb4de29e1723e57afe52bccbd86b22c768272917951551ac3612ba732efa8d07"
     },
     {
       "path": "clients/bongos-client/index.mjs",
       "mode": "0000644",
-      "sha256": "3b4c0ae08ee72672d580355da8fd99109d075d85c650516f8b273641ddbff3f6"
+      "sha256": "bc339a45e590e5e5e1d3f75abb63e10304d2a980e20122bf8d1f44f1ee315277"
     },
     {
       "path": "clients/bongos-client/package.json",
@@ -1372,7 +1377,7 @@
     {
       "path": "docs/adr/0183-criteria-close-themselves.md",
       "mode": "0000644",
-      "sha256": "ede5b4722f831ed0a73370744d9dacbc576dd4d8168ec69ec29c2c143305d34b"
+      "sha256": "83d29d1d09d4b77f8281fc63b30c99cf357c82425ee3792e1539e22e5d11f635"
     },
     {
       "path": "docs/adr/0184-a-task-visual-inherits-its-summary-audience.md",
@@ -2017,7 +2022,7 @@
     {
       "path": "docs/adr/0310-a-speciality-offers-skills-and-the-adopter-chooses-them.md",
       "mode": "0000644",
-      "sha256": "7641ba652bf937b55808ef0f6e10f14654800d60ad9bfb4326cd407fc1b8adcf"
+      "sha256": "26c9bcf97fdfbbd6fb8da07c7bd0be58b6f7c0b778e1296fe6a5431824e51810"
     },
     {
       "path": "docs/adr/0311-an-idea-is-a-permanent-origin-tag.md",
@@ -2219,25 +2224,30 @@
       "mode": "0000644",
       "sha256": "a2049480333d5cf3ff6890463a7381d80182ff7f934edf841a7e92c0c58990e6"
     },
+    {
+      "path": "docs/adr/0351-a-criterion-closes-on-a-uat.md",
+      "mode": "0000644",
+      "sha256": "4ca4eae961c994cae0dd9d306ea0a5a6f9ce660de161a62c5ccd125d910f70ec"
+    },
     {
       "path": "docs/adr/README.md",
       "mode": "0000644",
-      "sha256": "a119fea5a14ba259d190ea6ee4fbfa1df490e74b9bdcca37a9e4a41130092dcb"
+      "sha256": "bcfa8004aeaebbfb6c32c53042665d7da49098e80dd858a3f353420f8ef2c523"
     },
     {
       "path": "docs/api-reference.md",
       "mode": "0000644",
-      "sha256": "46c90700bd3b16d25e1c7b7753f270b23a7ec801fd7ca2c6c9d88125e270eca6"
+      "sha256": "822f6c627d3bf4b7470740dd6a6f37cfeaef934d88bd44cd8616534481d8c1cf"
     },
     {
       "path": "docs/api/openapi.json",
       "mode": "0000644",
-      "sha256": "5d4be73b912ed2682fbcab207b4c83d58ca6530712de5ba350bbcb69b545079c"
+      "sha256": "6dea7c163c31d7b5128ebaea93d97c03262a560f489fd68f0edba551dc46403b"
     },
     {
       "path": "docs/architecture.md",
       "mode": "0000644",
-      "sha256": "6d5ec710417177cfd729c60e083f062b70b212b8eb412892b6c5cfe593cfcefa"
+      "sha256": "682588d5c6f8dc16bfd25c23b441d333691678ac49f55500e6745fedf7c7851d"
     },
     {
       "path": "docs/branding-contract.md",
@@ -2257,12 +2267,12 @@
     {
       "path": "docs/copy-inventory.md",
       "mode": "0000644",
-      "sha256": "3c78ba6c1c958d024141c68f2b99e71a665a042d2bccd187cb9ae3676c00b502"
+      "sha256": "3efebbe96dcf76fa9e6f30e66594641b906c8b04b1d9c4c3ea57a8634dc143d8"
     },
     {
       "path": "docs/copy-registry.json",
       "mode": "0000644",
-      "sha256": "920b392dc53e07b5b290f8add28f9b1a3a50f9b2a13391c2a649250084656c5f"
+      "sha256": "efd6dd52270465cfc046d2283321e7513769807fe795c57e2207ac284dcf4a0b"
     },
     {
       "path": "docs/design/apex-pass-2-direction.md",
@@ -2752,7 +2762,7 @@
     {
       "path": "docs/file-map.md",
       "mode": "0000644",
-      "sha256": "276ba8de9d54cbc168206194fbeee533e6ab26ebb1acc47068106e5a15d2ae50"
+      "sha256": "803f616840f604487828796195cdc74a3f834dc5f5117309ef01725b9d13b7aa"
     },
     {
       "path": "docs/handoff-template.md",
@@ -2762,7 +2772,7 @@
     {
       "path": "docs/module-api-changelog.md",
       "mode": "0000644",
-      "sha256": "15217249e22ff2fcfff4699248db09ff0df84d3a43ddace4d47349b7fdf8a203"
+      "sha256": "4604938cde7776d0076401f0a76aea306838b3498cd6c6834bf2ce34e68d84c9"
     },
     {
       "path": "docs/modules-contract.md",
@@ -2852,7 +2862,7 @@
     {
       "path": "docs/page-readings.json",
       "mode": "0000644",
-      "sha256": "5397c8af5143f2e9a16f008bae0cd172713f641e1d810c87113f01e620499172"
+      "sha256": "3a08cbdaca08161fd7db132153a0e43badc9b7b156ad24825d38e2e760193226"
     },
     {
       "path": "docs/project-context.template.md",
@@ -5147,7 +5157,7 @@
     {
       "path": "modules/hall-ui/public/goals-page.js",
       "mode": "0000644",
-      "sha256": "73984097345dbd40278f9646dbc67e9c66ed68063d2e753c10bba71f5a564242"
+      "sha256": "14e688e5adbffc9c9d15fb5baa8637a60b8f4536fee7351c9a7e1e10747d80ca"
     },
     {
       "path": "modules/hall-ui/public/goals-render.js",
@@ -5662,17 +5672,17 @@
     {
       "path": "modules/hall-ui/public/tweak-editor.css",
       "mode": "0000644",
-      "sha256": "128beb7600783e2f3845d4934504a06d653cc5fbb1c7b5bd0dff54ada9ccad2e"
+      "sha256": "4bfbc72980f2b4e51eb98d26542a0ceabd39b7fa591781017953a3365a76323a"
     },
     {
       "path": "modules/hall-ui/public/tweak-editor.html",
       "mode": "0000644",
-      "sha256": "c2b50937b4c6d3df7b743859de92dce40887a8ac1d628a3809a9ec32573a284a"
+      "sha256": "dc0d329e5e65a38febfcdb3d0e1a2b14073c85ed3aa1db3788e2ecd8ace7e7e7"
     },
     {
       "path": "modules/hall-ui/public/tweak-editor.js",
       "mode": "0000644",
-      "sha256": "e3daaaf62333552395b7fd9882b5f326ccd97b02cbef706654a820298b03cb76"
+      "sha256": "c44ee76a48bb651d313a3bd36fb825d9908df0dbf66606fa753f341054c23fb5"
     },
     {
       "path": "modules/hall-ui/public/tweak-editor.states.json",
@@ -6054,6 +6064,16 @@
       "mode": "0000644",
       "sha256": "4a4a513ed0759e1e999454e6b6972b921789a5c2a88521755812d97fb6194f83"
     },
+    {
+      "path": "modules/lifecycle/criterion-uat-db.js",
+      "mode": "0000644",
+      "sha256": "c564838f98186f8d95c248711837205a5b4b659f508868eb2d06ae82299496a5"
+    },
+    {
+      "path": "modules/lifecycle/criterion-uat.js",
+      "mode": "0000644",
+      "sha256": "4ba38d17487e75217941a51cb26befe2168fe50dfb013c3ab3ae3f96d5c75f17"
+    },
     {
       "path": "modules/lifecycle/db-analytics.js",
       "mode": "0000644",
@@ -6082,7 +6102,7 @@
     {
       "path": "modules/lifecycle/db-goals.js",
       "mode": "0000644",
-      "sha256": "7ccf5c7da12a8d76c34b3ceccfa0d491612804599b9c04359a0378a0d545c8f0"
+      "sha256": "405501ea6a190c2c0f35daa813a5fc48ff236015cfa90d6e52e358cc834cdb30"
     },
     {
       "path": "modules/lifecycle/db-grade.js",
@@ -6142,7 +6162,7 @@
     {
       "path": "modules/lifecycle/done-when.js",
       "mode": "0000644",
-      "sha256": "3c0611085910c9673faa1b26c76370b010c2d1cc663d2f56138e92a9cdce2cda"
+      "sha256": "5d2bba7da9bd898ab58f788ef405beec15932de619f3ccb734f98c3ec8af9a43"
     },
     {
       "path": "modules/lifecycle/est-advisory.js",
@@ -6319,6 +6339,11 @@
       "mode": "0000644",
       "sha256": "ee6fd18f9752022fa97513032742a737f96571363946be1917ae52ff27056362"
     },
+    {
+      "path": "modules/lifecycle/migrations/lifecycle_015_criterion_uat.sql",
+      "mode": "0000644",
+      "sha256": "896a41413ab6a21ac2083b60e70502cd8e35cc594c3defaffc122c01cfea9239"
+    },
     {
       "path": "modules/lifecycle/mingle.js",
       "mode": "0000644",
@@ -6332,7 +6357,7 @@
     {
       "path": "modules/lifecycle/module.json",
       "mode": "0000644",
-      "sha256": "1000432a0e72ba4fbc0888f86ab889325a1c5fd2a848a684f6eb08eee0ba6c23"
+      "sha256": "75b5ab14761c7c83b44219a0d4540b064548a38ecb1de20eab540c5cbebf162b"
     },
     {
       "path": "modules/lifecycle/page-tweak-approve.js",
@@ -6424,6 +6449,11 @@
       "mode": "0000644",
       "sha256": "1ad8e353ead5c3fe39fadc1d48a2fc65725762cc298e206464ef242f7fdd292d"
     },
+    {
+      "path": "modules/lifecycle/routes/criterion-uat.js",
+      "mode": "0000644",
+      "sha256": "f2e91e940a5b35f4320a461f826cc2053d09acbaa323898a1d9f7cd3228e453c"
+    },
     {
       "path": "modules/lifecycle/routes/dependencies.js",
       "mode": "0000644",
@@ -6432,7 +6462,7 @@
     {
       "path": "modules/lifecycle/routes/done-when.js",
       "mode": "0000644",
-      "sha256": "13acccfc01be1760dc016519ccb430c448b237d6e02db83aa01815b2e45db7de"
+      "sha256": "503d1b4f483dcca715146530e8ca71e33f72d855dd19aa7a59eebe7a8ba574d1"
     },
     {
       "path": "modules/lifecycle/routes/gate-approvals.js",
@@ -6652,7 +6682,7 @@
     {
       "path": "modules/npm-release/module.json",
       "mode": "0000644",
-      "sha256": "724ee8a1687f7cb7e4489bf7ae79e024cd6dc692463f52da6766c5bf47fb6bb4"
+      "sha256": "ede907b6b579c3213eaf45d12320a8765aebaa11adc9b534e9402271c5eb39f7"
     },
     {
       "path": "modules/npm-release/preview/commands.js",
@@ -6707,7 +6737,7 @@
     {
       "path": "modules/npm-release/routes/task-where.js",
       "mode": "0000644",
-      "sha256": "73eabf312c639861177d3b19b491e2b689f8ef2c0ccbc4ea917ab06fbf82f560"
+      "sha256": "b68888b27f70fceb70c2a4a3272ee592179b4e9d46d0d274012afe122f4b3458"
     },
     {
       "path": "modules/npm-release/routes/work.js",
@@ -6717,7 +6747,7 @@
     {
       "path": "modules/npm-release/work.js",
       "mode": "0000644",
-      "sha256": "6efc698a25cf0546fecc73401a0a5d9819ffbdf60143d77fae49858e4a5d0acc"
+      "sha256": "fc5b52e97baf435dcc090104258209a48aa34e417835754df0a4b17cd73f6605"
     },
     {
       "path": "modules/onboarding/CLAUDE.md",
@@ -8317,7 +8347,7 @@
     {
       "path": "modules/specialities/routes/specialities.js",
       "mode": "0000644",
-      "sha256": "b12e3feba6f79e96f8e43ae41252d1136c37575b9a79201cbffb87d91b4f237c"
+      "sha256": "2b5983c0014f6e103d6bee21256f696364498ed6f955db3043c12b69c84ac3c6"
     },
     {
       "path": "modules/specialities/skills.js",
@@ -8327,7 +8357,7 @@
     {
       "path": "modules/specialities/specialities.js",
       "mode": "0000644",
-      "sha256": "a27607e3760d1fb31d1f6e78d920cc8ab0a94e0add3ea7497d4989637ce3173a"
+      "sha256": "d88a1cd7e457d816ff267d7b40956e87577814eaa026cc4a357f71782d5f4355"
     },
     {
       "path": "modules/status-ui/CLAUDE.md",
@@ -8822,12 +8852,12 @@
     {
       "path": "package-lock.json",
       "mode": "0000644",
-      "sha256": "d98f4919cb3c6dea66d2cc9fa26bdadd331a0477d218675a1f9044cef97bea31"
+      "sha256": "d445839a2e943ee2d1f3309b1366f72132d11925c29aa19a46891ce7925ad116"
     },
     {
       "path": "package.json",
       "mode": "0000644",
-      "sha256": "496d627f9b1d7654c79d602684aa0c926f2d8826def762f62c74ea0a28a0fec0"
+      "sha256": "d5d908e1d217603998e494d6c8343087d61dacc1b8fe894983a56cc4d809b819"
     },
     {
       "path": "public-docs/index.html",
@@ -8847,7 +8877,7 @@
     {
       "path": "release-notes.json",
       "mode": "0000644",
-      "sha256": "e1e71eaf5a604fcf92bd03ff51fd906531452bc989fe263b75a57a1588e9f7dc"
+      "sha256": "0836c84d2d1fbda2104f75831bcc05bd10fa3e05d29db763c250d8d4416769b3"
     },
     {
       "path": "scripts/bongos-mcp.js",
@@ -9167,7 +9197,7 @@
     {
       "path": "scripts/gds/cli-lib.js",
       "mode": "0000644",
-      "sha256": "3a8fb499b3057c49f293ed4a85d99a970aafd58e9e5ec33edc251f3a17e0484d"
+      "sha256": "2e83ab5c93b100c0bcce0079b4434fdc9cef6358e50e3c2d6be163bd4fd6e35b"
     },
     {
       "path": "scripts/gds/client-baseurl-guard.js",
@@ -9392,7 +9422,7 @@
     {
       "path": "scripts/gds/fitness-checks-write-validation.js",
       "mode": "0000644",
-      "sha256": "2b47198433f9c185b6c3d03e5f68e8f750c3533d74b83a04cb8d1c6872465f01"
+      "sha256": "58fbc88c10e24a0b2fbfbaeef69ed47c65501a98039518c8bc542642d2a965f4"
     },
     {
       "path": "scripts/gds/fitness-lib.js",
@@ -10397,7 +10427,7 @@
     {
       "path": "scripts/gds/status.js",
       "mode": "0000644",
-      "sha256": "a14cdf323206caf991d67d7530d84cae722972a1699b4d301e484b2afadb319c"
+      "sha256": "fc43101db90a2f2d58b99e8428ad8546403147a99bba43785c2ca1ce1d0c506f"
     },
     {
       "path": "scripts/gds/strand-watch.js",
@@ -10444,6 +10474,11 @@
       "mode": "0000644",
       "sha256": "db4039de7f45d063f712bfabbde447497dfea233d885812d95c7e5285491555a"
     },
+    {
+      "path": "scripts/gds/uat.js",
+      "mode": "0000644",
+      "sha256": "f03a4d8400702954eebe159c8b42f84f101908cbf4b4a10ccf83be6acb43bb6a"
+    },
     {
       "path": "scripts/gds/ui-kit-transform.js",
       "mode": "0000644",
@@ -10802,7 +10837,7 @@
     {
       "path": "src/bongos/route-rank-check.js",
       "mode": "0000644",
-      "sha256": "cc7310a3b0da72cacd85cb962dc22462aa0324960270cda9bd192013afe411b4"
+      "sha256": "3d8c71836bd7a33ed336497ad98a5085ef1aaed216d6427dec09f6dcebe59250"
     },
     {
       "path": "src/bongos/routes.js",
@@ -10947,7 +10982,7 @@
     {
       "path": "src/module-api.js",
       "mode": "0000644",
-      "sha256": "9041c5f070b7321ff0d7f10452dcbcbe961edd273c0b26d94c496f0a238c1837"
+      "sha256": "b76b3ccf9bc56f911703cf59e4e02652ab73076407ab164ef746f1177b7f72aa"
     },
     {
       "path": "src/module-loader/catalog.js",
@@ -11377,7 +11412,7 @@
     {
       "path": "tests/auto_satisfy_criteria.mjs",
       "mode": "0000644",
-      "sha256": "d7ac18d14e8e9e5e7b9e913a76953fe69bfefea4912e77ca30b285647bfcfca8"
+      "sha256": "121d5d7458015f3a6337512b566fc303232f4f37e8622eb826d7496fc496acd2"
     },
     {
       "path": "tests/autobongos_cadence.mjs",
@@ -11974,6 +12009,16 @@
       "mode": "0000644",
       "sha256": "446395813f17cea373ad888e5bcaab5a64607567a31c4f19e98102220a782949"
     },
+    {
+      "path": "tests/criterion_uat.mjs",
+      "mode": "0000644",
+      "sha256": "7b5fd90bbb824503bc89a9e02160c54ba4c2d67ee66494df54c37a653bdb4cda"
+    },
+    {
+      "path": "tests/criterion_uat_routes.mjs",
+      "mode": "0000644",
+      "sha256": "438befd036d86c930263cf7b35d7b70467091f7df77833bb22593a33b5c7b1fa"
+    },
     {
       "path": "tests/cross_discipline_priority_direction.mjs",
       "mode": "0000644",
@@ -12302,7 +12347,7 @@
     {
       "path": "tests/fitness.mjs",
       "mode": "0000644",
-      "sha256": "e19021a6f2aeba77ce67183a9d5a7c6637cb41029e893e93afdc52001d484027"
+      "sha256": "5b2372305e439920a251c3827bf3781f3e1ed683f28dc4eedebe5865066507b8"
     },
     {
       "path": "tests/fitness_gds_ratchet.mjs",
@@ -12447,7 +12492,7 @@
     {
       "path": "tests/goal_achievement.mjs",
       "mode": "0000644",
-      "sha256": "3e157d5bf44370e4935b70203fe59e40cf9120d12c472f24ed7bd85cb33cbe91"
+      "sha256": "8060a0e09cbb8a175cbb152ab45414c8b2390c0b164bacdc0e5822d72f85c102"
     },
     {
       "path": "tests/goal_admission_override.mjs",
@@ -12572,7 +12617,7 @@
     {
       "path": "tests/goal_routes.mjs",
       "mode": "0000644",
-      "sha256": "0cc660cffe989b0d8efe5e2e73731d34e7e761ed4d27349809cd1dc9f26fcd75"
+      "sha256": "9657bccd720cc1003d6c924bb5a42cfe0c986d8f0e74bddf43ae4f9b2fe04564"
     },
     {
       "path": "tests/goal_scope_check.mjs",
@@ -13422,7 +13467,7 @@
     {
       "path": "tests/ideator_full_idea_shapes_space_proof.mjs",
       "mode": "0000644",
-      "sha256": "a252af1b02861bc89906cedd6c5c044a250ecefa5c38d1b6d4c29766e1ff8070"
+      "sha256": "d4084edce2ae88811b5ef459d7594acb96cf56a8423dce33ef8d401d322cd409"
     },
     {
       "path": "tests/ideator_large_dead_thought_proof.mjs",
@@ -14007,7 +14052,7 @@
     {
       "path": "tests/npm_release_where.mjs",
       "mode": "0000644",
-      "sha256": "95e826751d5ae490187a17bd6e343a3598333ce512078f7a72ffcb8de69e6314"
+      "sha256": "36da5656e5d6c3d90611e3e67ad218f7f6ea1a15ef1b1e38aad4b7767fce2b2d"
     },
     {
       "path": "tests/npm_release_work.mjs",
@@ -15434,6 +15479,11 @@
       "mode": "0000644",
       "sha256": "13d7be30c41855ac4a39689bc88ea2be2c896ca071b884bbd0e81cc9c29bc180"
     },
+    {
+      "path": "tests/speciality_session_skills.mjs",
+      "mode": "0000644",
+      "sha256": "c08ac1cff3955a0fc55d285402353f34c820855a4e019c40a3d507d45d126862"
+    },
     {
       "path": "tests/speciality_skills.mjs",
       "mode": "0000644",

package/.claude/skills/goal-review/SKILL.md

@@ -1,27 +1,21 @@
 ---
 name: goal-review
 description: >-
-  Walk the criterion review queue — not a gate, since criteria whose tasks all shipped satisfy themselves. Confirm, reject or defer the residue. Metic+ only. Triggers: "/goal-review", "review goals", "confirm criteria".
+  Decide criteria a UAT can't close: work abandoned or unlinked. Metic+. Triggers: "/goal-review".
 ---
 
-You are running the **goal-review** session for this Cloud Bongos instance. It mirrors `/idea-triage`, but for the *closing* end of the work hierarchy (ADR 0086 §6): criteria that have **auto-flagged "met — pending review"** get walked one-at-a-time and dispositioned, so finished work actually closes out instead of sitting in limbo.
+You are running the **goal-review** session: the residue of the criterion close. It mirrors `/idea-triage`, for the *closing* end of the work hierarchy (ADR 0086 §6).
 
-> **The other end of this lifecycle is [`/goal-create`](../goal-create/SKILL.md)** — it opens a goal (scope wall, criteria, seed tasks); this one closes it out.
+> **Criteria close on a UAT now, and that is [`/goal-uat`](../goal-uat/SKILL.md), not this skill** ([ADR 0351](../../../docs/adr/0351-a-criterion-closes-on-a-uat.md), task 1004392, superseding ADR 0183's "shipped is enough"). A criterion whose linked work has shipped reads **Awaiting UAT** and closes when someone who did not ship it tests it on the live site and signs it off. If the builder wants to close finished work, send them to `/goal-uat`.
+>
+> **The other end of this lifecycle is [`/goal-create`](../goal-create/SKILL.md)** — it opens a goal (scope wall, criteria, seed tasks).
 
-**The auto-flag is derived, not stored.** When every task linked to a criterion has shipped — and the criterion has not yet been confirmed — the server flags it `pending_review` (deterministic from `task_criteria` + ship status; no manual propose step). Confirming sets the criterion `satisfied=true`; confirming a goal's **last** unsatisfied criterion auto-flips the goal `open → achieved`.
+**What is left for this skill.** The review queue (`GET /done-when/pending-review`) also holds criteria nothing was delivered for, and a UAT cannot test those (every row carries `uat_state`; skip the `awaiting_uat` ones, they are `/goal-uat`'s):
 
-## ⚠ This skill is no longer a GATE (task 1002069 / [ADR 0183](../../../docs/adr/0183-criteria-close-themselves.md))
+1. **A criterion whose linked tasks were ALL ABANDONED.** Nothing shipped, so there is nothing to test. *Somebody must decide whether the criterion still means anything now that its work is gone*: reject it (file the work that will really deliver it, linked to it), or, if it was genuinely met another way, override it with the reason.
+2. **A criterion with NO linked tasks.** It cannot even reach Awaiting UAT. Link the tasks that deliver it (better — it makes the board true); it then goes through `/goal-uat` like any other.
 
-**A criterion now closes itself.** `doneWhen.autoSatisfyShippedCriteria` runs inside `shipTask`'s transaction (immediately, for the ship that completed it) and unscoped on every `publish-reconciler` tick (draining the backlog and self-healing). A goal whose criteria are all satisfied achieves itself the same way. Nobody has to run this skill for finished work to close — that dependence was producing a **lying board** (goal 1000072 measured `6/9 shipped, 0/5 criteria`).
-
-So expect the queue to be **mostly empty**, and read what IS in it as a signal rather than a chore. Automation refuses exactly two shapes, and they are what you are here for:
-
-1. **A criterion whose linked tasks were ALL ABANDONED.** Auto-close requires ≥1 task actually `shipped`, so cut work can never complete anything — but the review flag deliberately still surfaces it, because *somebody must decide whether the criterion still means anything now that its work is gone*. Options: confirm (it was satisfied another way), reject, or re-link it to the work that will actually deliver it. **This is the main reason the skill still exists.**
-2. **A criterion with NO linked tasks.** Automation requires ≥1 linked task, so it never auto-closes. If a criterion is genuinely met by work that was never linked, link the tasks (better — it makes the board true) or confirm manually.
-
-A criterion sitting here with shipped tasks and no explanation means the sweep has not run or errored — check the `publish-reconciler` logs rather than confirming by hand, or you will paper over a broken sweep.
-
-**Rejecting is now the more valuable verdict.** Confirming mostly duplicates what automation already did; rejecting is information only a human has.
+**Rejecting is the valuable verdict here**; an override is the exception and says so forever ("Satisfied (override)").
 
 ## Rank gate — Metic+ only
 
@@ -37,8 +31,8 @@ A criterion sitting here with shipped tasks and no explanation means the sweep h
 ## What this skill does
 
 1. Lists flagged criteria via `GET /api/bongos/done-when/pending-review` (optionally `?version=<id>`).
-2. For each, prompts the user with: **confirm** (the criterion is genuinely met → mark satisfied), **reject** (the tasks shipped but the criterion is NOT actually met → leave it open and capture why), or **note / defer** (leave it flagged; it resurfaces next session).
-3. Applies confirm via `POST /api/bongos/done-when/:criterionId/satisfy` — and reports any goal that auto-achieved as a result.
+2. For each row that is NOT `awaiting_uat`, prompts the user with: **reject** (leave it open and file the work that delivers it), **override** (it was met another way: close it with a written reason), or **note / defer** (it resurfaces next session).
+3. Applies an override via `POST /api/bongos/done-when/:criterionId/satisfy` with `override_reason` — and reports any goal that auto-achieved as a result.
 
 ## How to use
 
@@ -60,21 +54,19 @@ Present each criterion with: its `criterion_md`, its goal (`goal_title`), how ma
 
 > ⚠️ This is the LAST open criterion in **{goal_title}** — confirming it will mark the whole goal **achieved**.
 
-Then ask the user (concise; frame in product/outcome terms — Lars is an EE, not a software engineer):
+Then ask the user (concise; frame in product/outcome terms):
 
-> Criterion C{n} — "{criterion_md}". {task_total} task(s) shipped under it. **Confirm it's met, reject (not actually done), or defer?**
+> Criterion C{n} — "{criterion_md}". None of its linked work was delivered. **Reject and file the real work, override (it was met another way), or defer?**
 
 **Step 3 — apply the verdict.**
 
-**Confirm** → mark it satisfied. Optionally pass the ship-task that fulfilled it:
+**Override** (only for a criterion met some other way, never for one awaiting UAT) → it closes WITHOUT a UAT, so the server requires the reason and records it; the criterion reads "Satisfied (override)" from then on:
 
 ```
-node scripts/gds/api.js POST /api/bongos/done-when/<criterion_id>/satisfy --body '{}'
-# or, to record which task fulfilled it:
-node scripts/gds/api.js POST /api/bongos/done-when/<criterion_id>/satisfy --body '{"satisfied_by_task_id":<task_id>}'
+node scripts/gds/api.js POST /api/bongos/done-when/<criterion_id>/satisfy --body '{"override_reason":"<why this is met without a UAT>"}'
 ```
 
-The response is `{ criterion, goal_achieved, goal }`. **If `goal_achieved` is true**, announce it: *"🎯 Goal '{goal.title}' is now achieved — all its criteria are confirmed."* (That goal now awaits disposition — see Step 4.)
+The response is `{ criterion, goal_achieved, goal }`. **If `goal_achieved` is true**, announce it: *"Goal '{goal.title}' is now achieved — all its criteria are closed."* (That goal now awaits disposition — see Step 4.)
 
 **Reject** → the criterion's tasks all shipped, but on review it is **not actually met** (the work missed something, or "done" was mis-scoped). There is no "unsatisfy the flag" — the flag is *derived* from shipped tasks, so the durable fix is to **add the missing work**: capture what's still needed (a follow-up task linked to this criterion, or an idea via `node scripts/gds/capture.js "..."`), and note the rejection in the session log. Once an unshipped task is linked to the criterion, it drops out of `pending_review` on its own. If no follow-up is filed, the criterion simply stays flagged and resurfaces next session — an honest signal that a human said "not done" but nothing was queued to close the gap. **Do not confirm a criterion you would not stake the version on.**
 

package/.claude/skills/goal-uat/SKILL.md

@@ -0,0 +1,84 @@
+---
+name: goal-uat
+description: >-
+  Test criteria awaiting UAT on the live site, then sign off. Metic+. Triggers: "/goal-uat", "what's awaiting UAT".
+---
+
+You are running the **goal-uat** session: the closing step of a goal. A criterion no longer closes because its linked tasks shipped ([ADR 0351](../../../docs/adr/0351-a-criterion-closes-on-a-uat.md), task 1004392). Once its work has shipped it reads **Awaiting UAT**, and it closes only when a person who did **not** ship that work does what the criterion describes **on the live site** and signs it off.
+
+This is the owner's rule because criteria were being closed by any tasks that happened to be linked to them, whether or not the thing the criterion describes was real. A UAT is the check against the criterion's **words**, not against the task list. Hold it to that.
+
+## Rank gate: Metic+ only
+
+Signing off rides `criterion.review` (Metic+); the server enforces it. Check first so a Xenos is not walked into a wall of 403s: `node scripts/gds/api.js GET /api/bongos/me` and read `builder.rank`. If it lowercases to `xenos` or `thetes`, stop and say: *"Signing off a UAT is a Metic+ step. Ask an Archon to promote you, or ask a Metic to run it."*
+
+## The three checks (what you are verifying)
+
+| Check | Passes when | Who decides |
+|---|---|---|
+| **Code** | every linked task is done and at least one shipped | automatic |
+| **Live** | the shipped work is running on the deployed site | read automatically where the site can tell; otherwise the signer confirms it |
+| **UAT** | a signed-in person performed the criterion on the live site; a recording is stored | the signer, who must not have shipped any linked task (the project owner excepted) |
+
+A criterion marked **backend-only** (set when it was written, visible on the criterion) has no screen to record, so it takes a recording-free **backend sign-off** instead. It still needs a non-shipper to sign it.
+
+## Step 1: the queue
+
+```
+node scripts/gds/uat.js --queue
+```
+
+(Add `--version <id>` to scope it.) If nothing is awaiting UAT, say so and stop. If the builder named a goal, keep only that goal's rows.
+
+## Step 2: one criterion at a time
+
+For each, run `node scripts/gds/uat.js <criterion-id>` and present, in plain words:
+
+- the criterion's text, in full;
+- its goal, and whether it is the goal's **last** open criterion (then signing it off achieves the goal);
+- the Live line (running, not yet, or "this site cannot tell");
+- whether it is backend-only.
+
+Then tell the tester exactly what to do **on the live site**, derived from the criterion's words: which page, what to click, what they should see. Write it as a short numbered script. If the criterion's words describe something the tester cannot find on the live site, that is the answer: **it is not met.** Say so and go to Step 4 (reject) rather than looking for a reading under which it passes.
+
+## Step 3: record and sign off
+
+The tester records their screen doing the script (any screen recorder that saves **mp4 or webm**, up to **100 MB**; Windows: Win+Alt+R with Xbox Game Bar, or the Snipping Tool's record button; macOS: Cmd+Shift+5). Then:
+
+```
+node scripts/gds/uat.js <criterion-id> --recording <path-to-file> --note "<one line: what was checked>"
+```
+
+For a backend-only criterion, after the tester has checked it by whatever means proves it (a log line, an API read, a test run against live):
+
+```
+node scripts/gds/uat.js <criterion-id> --backend-signoff --note "<how it was checked>"
+```
+
+Add `--live-attested` only when the server says this site cannot tell whether the work is live, and only if the tester really did it on the live site.
+
+**Refusals, in the words to give the builder:**
+
+| Refusal | Meaning |
+|---|---|
+| `signer_shipped_this_work` | they shipped linked work; someone else signs this one |
+| `work_not_live` | shipped but not deployed yet; sign off after the deploy |
+| `criterion_not_awaiting_uat` | linked work still open (or none linked, or all abandoned: that is `/goal-review`) |
+| `criterion_needs_recording` / `criterion_is_backend_only` | wrong kind of sign-off for this criterion |
+| `live_attestation_required` | confirm it was tested on the live site (`--live-attested`) |
+
+A sign-off on a goal's last open criterion reports the goal achieved; say so.
+
+## Step 4: when it is NOT met
+
+The shipped work does not do what the criterion says. Do not sign off. File the missing work as a task linked to the criterion (`POST /api/bongos/tasks`, then `POST /api/bongos/tasks/<id>/criteria` with `{"criterion_id": <criterion-id>}`) so the criterion drops back to Open until that ships. That is what happened to `wa7-government` (task 1004400).
+
+## What this skill does NOT do
+
+- It never uses `POST /done-when/:id/satisfy`. That is the **override** now: it requires a written `override_reason` and the criterion reads "Satisfied (override)" for good. Use it only when the owner asks, and never to get past a refusal above.
+- It never marks a criterion backend-only to avoid recording one. Backend-only is set while a criterion is still open (`uat.js <id> --backend-only on`), and the server refuses it once the criterion is awaiting UAT.
+- The all-abandoned and no-linked-task residue is `/goal-review`'s, not this skill's.
+
+## Summary to give at the end
+
+Criteria walked · signed off (ids) · goals achieved · rejected, with the follow-up task filed for each · left waiting (not live yet, or no tester available).