@chrono-meta/fh-gate 1.4.70 → 1.4.71

package/.claude-plugin/marketplace.json

@@ -11,13 +11,13 @@
   "plugins": [
     {
       "name": "fh-meta",
-      "version": "1.4.70",
+      "version": "1.4.71",
       "description": "Hub meta-operations toolkit — 35 skills + 7 agents. New in 1.4.53: `fh-codex-doctor` (npm bin) — Codex adapter drift scanner; reads the documented M1/M2/M3 skill tier map + skill/agent source and reports codex-native/adapter-required/claude-native/unclassified per unit, wired into `npm test`/`prepublishOnly` (fail-closed on unclassified Claude-native primitives). New in 1.4.49: steel-quench gains Step 0.6 Verdict-Invariance Probe (groundedness axis — a load-bearing judged gate's verdict must track behavior, not rubric phrasing; measured flip-count over cross-family paraphrases; arXiv:2605.06161 Policy Invariance anchor); multi_model_sidecar_strategy §Vendor-native harness (a model is strongest in its own vendor CLI — Claude/CC, GPT/codex, Gemini/Antigravity; a universal router degrades all of them, so it stays an autocomplete/QA sidecar, never orchestration); predelete_check.sh fail-closed rewrite; memory-hygiene A-TMA anchor. New in 1.4.48: phantom-quench + steel-quench gain external frontier anchors (arXiv:2607.02052 package-hallucination; arXiv:2607.02057 prompt-coverage-adequacy); README model-flat claim reframed from a per-release point-curve to structural invariants (operation flattens across tiers; depth tier-order fixed within a generation). New in 1.4.47: onboarding step ① surfaces the Mode D companion-store session-start load in the auto-read salience anchor (previously only in the local binding + rules, so a greeting could skip the load). New in 1.4.46: context-doctor command-output axis (route to rtk/proxy for verbose CLI stdout, complementing .claudeignore; risk-gated to token-scarce envs). New in 1.4.41: context-doctor 2026 trigger vocab (context engineering/rot/collapse) + phantom-citation hardening; hub measurement-integrity-checklist (cross-model measurement pre-flight: display-name pin/reps≥3/discriminating probe). New in 1.4.40: install-wizard queryable-wiki scaffold (INDEX + session-start read + R/W/C ingest). New in 1.4.39: auto-decorrelation (cross-family verifier sidecar recruitment) + video-ingest (capability-routed video ingestion). New in 1.4.x: verify-axis check-class taxonomy (mandatory-pass/measured/judged), no-reinvention Tier-0 inventory, 7-class failure taxonomy, Destructive-Op Gate, Wave-T (Temper), tier-floor governance, Mode D Model Notice, FC consent lane, default-Sonnet guidance. New in 1.3.0: public-surface-audit, field-harvest Mode B auto-trigger, 4-axis gate scope ext. Validated cross-CLI: Claude Code, Codex, Gemini.",
       "source": "./plugins/fh-meta"
     },
     {
       "name": "fh-commons",
-      "version": "1.4.70",
+      "version": "1.4.71",
       "description": "Project-agnostic utility skills — 4 skills (convergence-loop · deliberation · mcp-circuit-breaker · token-budget-gate) + 1 agent (quench-challenger). Domain-independent utilities transplantable into any project.",
       "source": "./plugins/fh-commons"
     }

package/CATALOG.md

@@ -8,10 +8,20 @@ AI reads this file first when searching past work. Open individual files for det
 
 <!-- Add entries in reverse date order (newest at top) -->
 
+### 2026-07-26 | forge-harness · forge-wiki · llmwiki-template · llmwiki-qa | #gate-locality, #sync-guard, #instrument-calibration, #sister-asset, #cross-corpus-provenance, #wiki-consolidation
+**File:** scripts/gate_pathspec_check.sh · scripts/sync_guard_check.sh · templates/.git-hooks/pre-commit · templates/regression_guard.sh · templates/CLAUDE.md · plugins/fh-meta/skills/dialogue-harvest/SKILL.md · plugins/fh-meta/skills/frontier-digest/SKILL_detail.md · knowledge/shared/harness-core/loop_engineering.md
+FH self-dev session (PR #182 merged; 7 PRs merged across 4 repos). Three defects, each found by measurement rather than review, each closed with a calibrated regression anchor. **(1) Gate-locality, 4th recurrence**: the pre-commit gate and regression_guard both matched the literal `SKILL\.md`, which the string `SKILL_detail.md` does not contain — 17 files / 208,710 B / **27.7% of the skill-spec surface**, 16 of 17 carrying fenced code, entirely ungated. It leaked twice for real (371c04f, e661931 — single-file edits to a *grounding-audit skill's own* behavioral spec). Worst property: `salience-splitter` widened the hole every time it moved content out of SKILL.md, so coverage shrank as the diet succeeded. An adversarial pass argued name-by-name coverage cannot close the class in principle; the resulting **enumeration sweep found a real uncovered file on its first run** (`dialogue-harvest/calibration_pair.md`), and the fix was escalated from a name list to a directory scope. **(2) One-way sync silently overwrote session cards twice** (v9 7,567 B → v8 5,299 B; v10 likewise). Not carelessness — *induced*: the session-start rule says read the mirror first, so the mirror becomes where agents write. The close-checker missed it because "card-last violated" measures timestamp **order**, not overwrite. Fixed with a destination-newer abort (both callers), a mechanically-injected MIRROR COPY banner, and a 7-pair anchor; live calibration caught three self-defects in the fix itself — over-blocking (the exact failure the handoff warned would train the override reflex), a half-fix leaving sync_file open, and banner churn that re-transferred 265 files per run and destroyed the log as an instrument. **(3) dialogue-harvest first real corpus** exposed that single-author input makes provenance labels free; answered with **Step 4-b cross-corpus provenance** (absorbed / held-unused / **declined**), which immediately showed a 44 KB transcript in-house since 06-27 with **zero citations in 29 days** — containing the very kill-switch clause the same day's sister audit had just confirmed FH lacked.
+- **Sister asset**: `PromptPartner/agentsmith` (255★, 10 days old) cross-audited; 3 cross-family adversarial legs all returned NOT-CONVERGED and the governor kept the verdict — P-2's grounds refuted outright (`leak-gate.sh` is fail-closed in behavior, only the vocabulary was absent), P-1 narrowed, a category error accepted, and an arithmetic error caught (mixed baselines: +3,218 → +2,687). Sidecars said *where to dig*; only source-grounding decided.
+- **Wiki consolidation (4 stores)**: the propagation gap ran **opposite** to the assumption — forge-wiki's own upgrades were already downstream; what never came back was a 3.7+ compat fix, leaving the canonical repo with the narrowest Python range of the three. Reverse-harvested. `{FH_ROOT}` variable landed in all four (templates carried one operator's absolute paths into org-visible checkouts — the mirror image of public-surface protection). `llmwiki-template`'s missing `fw_mcp.py` was judged **declined, not a gap** (CONTRACT.md §54 states it).
+- **Instrument failures, five in one session** (BRE-in-ERE · zsh no-word-split · stale cwd · `install` containing `stall` · a 404 JSON body passing a length check). Every one produced a *confident wrong value*; every one was caught only by a known-positive control or by opening the actual line. Two of them recurred **after** the rule against them was written — which is why both new anchors make the control mandatory-pass rather than advice.
+- Decision: operator approved all pushes/merges; company-zone repo pushed via REST Contents API per the account rule (new files only, no overwrite).
+
 ### 2026-07-25 | forge-harness | #dialogue-harvest, #new-skill, #cookbook-tier0, #sister-triage, #cross-family-audit, #ruleset, #calibration
 **File:** plugins/fh-meta/skills/dialogue-harvest/ · plugins/fh-meta/skills/asset-placement-gate/SKILL.md · plugins/fh-meta/skills/context-doctor/SKILL.md · tracks/_audit/session_2026_07_25_claude5-context-rules-sister.md · tracks/_meta/codex_decorrelation_audit_2026-07-25.md
 FH self-dev session (PR #177 merged). **New skill `dialogue-harvest`**: mines argument-shaped corpora (AI dialogue logs) — sycophancy strip first, then induced-vs-independent provenance labeling per proposition (degrade direction fixed toward the induced flag); ships an EN+KO known-pair calibration corpus backing the measured Done When. Gate: challenger HIGH 1 MED 3 LOW 3 → 7/7 repaired (the HIGH: an EN-only calibration pair would vacuously pass a new-language re-run); blind Sonnet sims reproduce both language pairs, and the KO run self-declared UNCALIBRATED when denied the calibration file. **asset-placement-gate Step 0.6**: official corpora (built-ins · claude-plugins-official · Claude Cookbook) registered as the criterion-③ ground, judged-flag semantics; roster-wide cookbook mapping scan found 0 shadowed skills. **context-doctor**: built-in `/doctor`-first sister anchor (Claude 5 gen) with the skill's increment enumerated. **Sister triage** of Anthropic's Claude-5 context-engineering rules: the "no measurable loss" claim ships no method → closed empty on that axis, vendor-claim label; imports = the /doctor Tier-0 boundary + a live confirmation of the substrate-shed trigger. **Cross-family audit** (codex gpt-5.5, repo-grounded) of the "decorrelation as generative principle" proposition: both halves NARROWED — surviving increment is "premature same-family consensus is a bad stop condition for design search", valid only as divergence-then-selection on high-leverage underdetermined decisions; doctrine-ization stays deferred by design. persona-innovator frame scan: BVSR/QD/Best-of-N all lack FH's two clauses → keep the coinage, sister-link on doctrine-ization. **Server-side residual closed**: ruleset `main-no-force-push` (non_fast_forward on main) created and independently GET-verified.
-- Decision: dialogue-harvest built on operator go (manual n=1 proof accepted); npm republish deferred to operator decision at close.
+- Decision: dialogue-harvest built on operator go (manual n=1 proof accepted); npm v1.4.70 published + tagged same session (operator approval, PR #179).
+- **Third block (evening)**: **Matrix Benchmark v0+v1** (qasp-dev #27·#28) — the operator's "blind man with an ultrasonic cane at 60%" metaphor turned into numbers. Planted 4 defects + 2 traps in the admin-surrogate sandbox (calibrated known-pair), probed with isolated same-tier agents differing only in channel access: **detection 4/4 tied, attribution 2/4 (blind) vs 4/4 (matrix), traps 0/0** — the two blind misattributions were exactly the §3-b cell ("absent from source" vs "present but not rendered", both misread as source-defects: spec-optimism bias observed). Pre-registered predictions: 2/3 hit, 1 void. v1: attribution routed repairs (source-defects → code, spec-defect/environment → spec v2) and the AX-Lobby 3-channel E2E generation pattern reproduced locally (12/12 pass · web_rules 0/6 first pass · 3 BE-derived data-integrity assertions · §8 UNVERIFIED label · governor re-ran independently). Next (designed, not run): 3-condition escalation bench — "open eyes only where needed" — gated on semantic_anchor pull-forward wiring. Honest labels: n=1/condition exploratory; C1 blind-miss partially instruction-induced (fixed viewport).
+- **Second half (same day)**: qasp direction review — the "!" located from records (verification moves to the front of the pipeline: mate PR #382 close handed the reviewer seat to AI; workflow inversion "know the criteria → implement → PR already passing"; act-1.5 dual timing; web E2E generation with 3-channel cognition). Its identity tension (§5 producer=verdict) closed as **qasp-dev governance §8 verdict-independence** (domain-respect unbundled from verdict-independence; UNVERIFIED=blocking label; promotion preconditions), codex-audited 8/8. **mate_rules split into mobile_rules (7 common) ⊃ mate extension (4 convention rules)** — full compatibility preserved, 1364 tests green, codex-audited 3/3. Company-handoff tasks landed dev-side: `--checklist` command, review-bot `--diff-json` surface (consumes pr-agent's own artifact), preflight workflow doc, and a mate-dev advisory CI lane (`qasp-rules.yml`, neutral check, 3 marked line-swap points for the company circuit). PR-review video triaged: mostly convergent with existing doctrine; template direction rejected by operator (human-PR fatigue, #382 precedent) — evidence must be a byproduct of pre-PR self-verification, not a demand on authors.
 
 ### 2026-07-24 (2) | forge-harness · forge-wiki · llmwiki-template | #sister-links, #full-gate, #frontier-digest-angle-rule, #query-refresh, #mapping, #light-harness, #graph-engineering
 **File:** knowledge/shared/dialogue/memory_intent_recall.md · knowledge/shared/harness-core/field_harness_diagnostic.md · knowledge/shared/harness-core/multi_model_sidecar_strategy.md · plugins/fh-meta/skills/harness-doctor/SKILL.md · plugins/fh-meta/skills/frontier-digest/SKILL_detail.md · tracks/forge-wiki/ · tracks/llmwiki-template/

package/CLAUDE.md

@@ -263,7 +263,7 @@ Every new `SKILL.md` must clear a **6-item bar** (role-duplication via `/asset-p
 
 ## FH Improvement 4-Axis Auto-Gate (Self-Verification Orchestrator)
 
-**FH 자산을 수정하면**(SKILL.md · `.claude/rules/*.md` · `knowledge/shared/rules/*.md` · `templates/` · `CLAUDE.md` · substantive `knowledge/`·`docs/*.md` · `AGENTS.md`) **4축 검증 체인이 그 세션 첫 커밋 전에 자동 실행된다.** 사용자 요청 불요 — 제안이 아니라 의무 단계다.
+**FH 자산을 수정하면**(SKILL.md · **SKILL_detail.md** · `.claude/rules/*.md` · `knowledge/shared/rules/*.md` · `templates/` · `CLAUDE.md` · substantive `knowledge/`·`docs/*.md` · `AGENTS.md`) **4축 검증 체인이 그 세션 첫 커밋 전에 자동 실행된다.** 사용자 요청 불요 — 제안이 아니라 의무 단계다.
 
 **기계 floor**: `git commit` 은 `templates/.git-hooks/pre-commit` 이 **하드 차단**한다. 축이 전부 PASS 할 때까지 커밋 자체가 안 된다. 아래 상세가 로드되지 않아도 **훅이 막는다** — 이 산문은 훅 위의 살리언스 층이지 유일 floor 가 아니다.
 

package/knowledge/shared/harness-core/loop_engineering.md

@@ -71,7 +71,33 @@ instrument: the next slip finds its leg pre-diagnosed.
 | harvest-loop Step 0-b/0-c evidence check | a harvest run misses completed items despite `fh_completed_*` existing |
 | goal-quench mid-run checkpoint files (70/85/95%) | a /goal run blows through a threshold unnoticed |
 | ~~Substrate-jump detector~~ | **BUILT 2026-07-10** (`scripts/substrate_jump_detector.sh`, SessionStart-wired) — same operator instruction; structure-enforcing class (out-of-context drift), permanent per the durable-mechanization criterion |
-| Quarterly maturity checker (`quarterly_maturity_check.sh` — criterion status + §6.1 BLOCKED emit) | a quarterly re-diagnosis is missed >90d or a phase transition skips the simplification checklist |
+| Quarterly maturity checker (`quarterly_maturity_check.sh`) — **still unbuilt, correctly so** | ⚠️ **TRIGGER WAS UNFIRING — condition rewritten 2026-07-26** (the row stays live; strikethrough in this table means BUILT and must not be used for anything else). Its condition was *"a quarterly re-diagnosis is missed >90d"*, which needs a **last-diagnosis date to measure from, and none exists**: `hub_maturity_roadmap.md` is still the shipped **template** (its own header says *"in actual hub operation… write an operating copy"*), no operating copy was ever created, §5's six indicators still hold their template descriptions rather than counters, and no quarterly diagnosis artifact exists in either store. A backlog row whose trigger cannot fire is not deferred — it is **dead**, and it reads as deferred. **New trigger (observable): the first quarterly re-diagnosis is actually run and dated.** Until an instance-zero exists there is nothing for a checker to check; building the checker first would be the checker-for-a-loop-that-never-ran. |
+| **Tested kill switch for any FH path that runs unattended** — documented one-move stop, *actually exercised once*, recorded | FH runs a genuinely unattended loop. Today the only candidate is the launchd `frontier-digest` (09:00 daily); the moment a second one ships, or that one gains write authority beyond its digest file, this fires |
+
+### On the kill-switch row — provenance and the boundary of what is being proposed
+
+Added 2026-07-26 with **two independent sources naming the same gap**, which is why it is on the
+backlog rather than in a signal:
+1. **External transcript already in-house since 2026-06-27** (a private companion store's
+   cross-audit shelf, `raw_2026-06-27_loop-engineering-transcript.txt` — single-author, 44 KB)
+   — *"실수도 무인으로 쌓이기 때문에 브레이크가 필요하다"* · iteration cap ·
+   stop-on-stall · budget guard. **This corpus was never cited by any FH asset** (whole-repo grep, 0
+   references) — it sat unmined for 13 days while this very file was authored from a different sister.
+   Surfaced by the first real-corpus `dialogue-harvest` run.
+2. **`agentsmith/profiles/autonomous-loops.md`** (2026-07-16) — *"a documented one-move stop you have
+   actually tested. No budget, no cap, no L3."* Cross-audit `session_2026_07_26_agentsmith-sister.md §I-4`.
+
+**Measured absence, instrument-calibrated**: `kill switch` · `emergency stop` · `abort the run/loop` ·
+`정지 스위치` · `tested stop` → **0 hits** repo-wide, with known-positive controls in the same run.
+
+⚠️ **What is deliberately NOT proposed — do not relitigate**: the same two sources also teach
+*stagnation-triggered stopping* ("stop when the number does not improve twice"). FH already
+**considered and declined** that class — `hub_maturity_roadmap.md §(c) Trigger-based`: *"Stagnation
+detection criteria + auto-alerts + trigger tags all require new infra. Simplification principle
+violation risk."* That declination stands; reopening it needs new evidence about **that** decision,
+not a fresh citation of the same idea. Separately, FH **already has** stall detection where it
+measurably mattered — `auto-decorrelation` §sidecar liveness, built on a production miss.
+The kill-switch row is narrower than either source's full prescription, on purpose.
 
 ## Done When (for a new/changed autonomous path)
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@chrono-meta/fh-gate",
-  "version": "1.4.70",
+  "version": "1.4.71",
   "description": "FH runtime adapters — run FH governance, skills, and agents via Claude or Codex with machine-parseable gates.",
   "license": "MIT",
   "keywords": [

package/plugins/fh-commons/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "fh-commons",
-  "version": "1.4.70",
+  "version": "1.4.71",
   "engines": {
     "claudeCode": ">=1.0.0"
   },

package/plugins/fh-meta/.claude-plugin/plugin.json

@@ -1,10 +1,10 @@
 {
   "name": "fh-meta",
-  "version": "1.4.70",
+  "version": "1.4.71",
   "engines": {
     "claudeCode": ">=1.0.0"
   },
-  "description": "Hub meta-engineering toolkit — 35 skills + 7 agents. New in 1.4.70: dialogue-harvest (mines AI-dialogue logs — sycophancy strip first, induced-vs-independent provenance labeling, EN+KO known-pair calibration shipped); asset-placement-gate Step 0.6 official-corpora check (Claude Cookbook as Tier-0 consult corpus, judged-flag semantics); context-doctor built-in-/doctor-first sister anchor. New in 1.4.48: phantom-quench + steel-quench gain external frontier anchors (arXiv:2607.02052 package-hallucination; arXiv:2607.02057 prompt-coverage-adequacy); README model-flat claim reframed from a per-release point-curve to structural invariants (operation flattens across tiers; depth tier-order fixed within a generation). New in 1.4.47: onboarding step ① surfaces the Mode D companion-store session-start load in the auto-read salience anchor (previously only in the local binding + rules, so a greeting could skip the load). New in 1.4.46: context-doctor gains a command-output axis — routes to a command-output proxy/hook (rtk) to trim verbose CLI stdout, complementing .claudeignore; risk-gated to token-scarce environments (lossy filtering, off gate-input paths). New in 1.4.41: context-doctor 2026 trigger vocab (context engineering/rot/collapse) + phantom-citation hardening; hub measurement-integrity-checklist (cross-model measurement pre-flight: display-name pin/reps≥3/discriminating probe). New in 1.4.40: install-wizard scaffolds the companion store as a queryable wiki (INDEX + session-start read + Raw/Wiki/Conversation ingest axis). New in 1.4.39: auto-decorrelation (cross-family verifier sidecar recruitment, calibration-gated) + video-ingest (capability-routed video ingestion). New in 1.4.37: corpus-grounding-expander + persona-roster-expander (field-harvested verbatim-relay capability skills). New in 1.3.0: public-surface-audit (git-tracked private-token leak scan), field-harvest Mode B session-end auto-trigger, 4-axis gate scope extension (docs/ + AGENTS.md). New in 1.2.0: pipeline-conductor (4-pipeline gated sweep), return-path-gate (chain closure audit), goal-quench (Stop hook + quality gate), steel-quench Wave 5 (multi-model sidecar challenger), 2-layer architecture docs, YAML validation script. Validated cross-CLI: Claude Code, Codex, Gemini.",
+  "description": "Hub meta-engineering toolkit — 35 skills + 7 agents. New in 1.4.71: SKILL_detail.md brought inside the 4-axis gate — the gate matched the literal `SKILL.md`, which `SKILL_detail.md` does not contain, leaving 27.7% of the skill-spec surface ungated (measured; it leaked twice for real). Fix escalated from a name list to a directory scope after an enumeration sweep found a real uncovered file on its first run; anchored by scripts/gate_pathspec_check.sh (known-pair, wired into pre-commit). One-way mirror sync gains a destination-newer abort + mechanically injected mirror banner after two session cards were silently overwritten, anchored by scripts/sync_guard_check.sh. dialogue-harvest gains Step 4-b cross-corpus provenance (absorbed / held-unused / declined) for single-author corpora, where the original provenance labels were free and measured nothing. frontier-digest arxiv leg category-scoped after a relevance drift the staleness rule structurally could not catch (known-pair calibration recorded). templates/CLAUDE.md hub paths switched to {FH_ROOT} so a copied harness stops carrying one operator's absolute paths into org-visible checkouts. New in 1.4.70: dialogue-harvest (mines AI-dialogue logs — sycophancy strip first, induced-vs-independent provenance labeling, EN+KO known-pair calibration shipped); asset-placement-gate Step 0.6 official-corpora check (Claude Cookbook as Tier-0 consult corpus, judged-flag semantics); context-doctor built-in-/doctor-first sister anchor. New in 1.4.48: phantom-quench + steel-quench gain external frontier anchors (arXiv:2607.02052 package-hallucination; arXiv:2607.02057 prompt-coverage-adequacy); README model-flat claim reframed from a per-release point-curve to structural invariants (operation flattens across tiers; depth tier-order fixed within a generation). New in 1.4.47: onboarding step ① surfaces the Mode D companion-store session-start load in the auto-read salience anchor (previously only in the local binding + rules, so a greeting could skip the load). New in 1.4.46: context-doctor gains a command-output axis — routes to a command-output proxy/hook (rtk) to trim verbose CLI stdout, complementing .claudeignore; risk-gated to token-scarce environments (lossy filtering, off gate-input paths). New in 1.4.41: context-doctor 2026 trigger vocab (context engineering/rot/collapse) + phantom-citation hardening; hub measurement-integrity-checklist (cross-model measurement pre-flight: display-name pin/reps≥3/discriminating probe). New in 1.4.40: install-wizard scaffolds the companion store as a queryable wiki (INDEX + session-start read + Raw/Wiki/Conversation ingest axis). New in 1.4.39: auto-decorrelation (cross-family verifier sidecar recruitment, calibration-gated) + video-ingest (capability-routed video ingestion). New in 1.4.37: corpus-grounding-expander + persona-roster-expander (field-harvested verbatim-relay capability skills). New in 1.3.0: public-surface-audit (git-tracked private-token leak scan), field-harvest Mode B session-end auto-trigger, 4-axis gate scope extension (docs/ + AGENTS.md). New in 1.2.0: pipeline-conductor (4-pipeline gated sweep), return-path-gate (chain closure audit), goal-quench (Stop hook + quality gate), steel-quench Wave 5 (multi-model sidecar challenger), 2-layer architecture docs, YAML validation script. Validated cross-CLI: Claude Code, Codex, Gemini.",
   "author": {
     "name": "chrono-meta",
     "email": "chrono-meta@users.noreply.github.com"

package/plugins/fh-meta/skills/dialogue-harvest/SKILL.md

@@ -93,6 +93,79 @@ For each proposition, find the **first occurrence** of its core frame/key terms
 Counterpart-authored content the user *selected* as valuable is listed separately, marked
 "selection, not authorship" — selection is a real act but must not be recorded as the user's claim.
 
+## Step 4-b. Cross-Corpus Provenance — the single-author mode (measured need, 2026-07-26)
+
+Step 4 asks *"who first said this — the user or the counterpart?"* On a **single-author corpus**
+(a video transcript, an article, a talk) there is no counterpart, so every proposition is stamped
+`independent` **for free** and the differentiator does not fire at all. The first real-corpus run
+measured exactly that: 12 propositions, 12 free labels, zero discrimination.
+
+On a single-author corpus the load-bearing provenance axis is not *within* the document — it is
+**between the corpus and the assets that were supposed to consume it**:
+
+> *Which of these propositions reached our own assets, and which did we hold and never use?*
+
+**Run it when** the corpus is single-author AND a downstream asset on the same topic exists.
+Skip (and say so) when there is no plausible consumer — the question is meaningless without one.
+
+1. **Name the consumer asset(s)** explicitly in the output header. Guessing is not allowed;
+   an unnamed consumer makes every verdict unfalsifiable.
+2. **Grep locates candidates; the label is assigned by reading them.** A hit count is never a
+   verdict — a consumer that says *"we do not use kill switches"* matches the same pattern as one
+   that adopts them. So:
+   - **absorbed** — requires **quoting the supporting span** from the consumer. No quote, no
+     `absorbed`. (A count-only `absorbed` is the same defect as a whole-file parity grep going
+     green on a line that says "excluded" — measured in this repo the same day.)
+   - **held-unused** — absent from the consumer though the corpus has been in-house since {date}.
+     Before writing it, **try at least two term variants** (synonym / abbreviation / the concept
+     re-said in the consumer's own vocabulary). Concepts get absorbed under different words; a
+     literal-match zero is weak evidence of absence.
+   - **declined** — absent *because a named asset records a decision against it*. Cite the decision.
+     This tier is mandatory and load-bearing: without it, a re-proposal reopens a settled call
+     as if it were an oversight. (First run hit this immediately — stagnation-triggered stopping
+     was `held-unused` by grep and `declined` in fact, recorded in `hub_maturity_roadmap.md`.)
+   **Automation is prohibited here**: the first run produced 2 false positives out of 12, both
+   caught only by opening the matched line.
+3. **Report the ingestion-to-citation gap** — corpus in-house date vs first citation by any asset.
+   A corpus with **zero citations** is the finding, not a null result.
+
+**Instrument discipline (mandatory-pass, learned on the first run — four failures in one session):**
+a **known-positive control** runs beside every measurement and its result is printed. A bare zero is
+not publishable.
+
+⚠️ **The control must be a separate search, not an alternation bolted onto the target pattern.**
+`grep -E "core_term|title"` satisfies "a control ran" while proving nothing: `title` matches, the
+command exits 0, and a malformed `core_term` still silently matches nothing. That is a vacuous pass.
+The control's job is to prove **this pattern form, on this target, through this shell** can return a
+hit at all — so run the *same pattern shape* against something you know contains it, as its own
+command, and print both numbers. The four measured failure modes:
+BRE `\|` inside an ERE pattern · unquoted `$VAR` under zsh (no word-splitting) · a stale `cd` making
+paths unresolvable · substring collision (`install` contains `stall`). Each produced a *confident,
+wrong* zero; each was caught only by the control. Do not redirect stderr away — three of the four
+announced themselves there.
+
+**Degrade direction — and the skip/degrade boundary, which must not be a matter of taste.**
+`skip (N/A)` and `UNCALIBRATED` are **different states with different triggers**, and the boundary is
+mechanical because otherwise the cheaper exit wins under time pressure:
+
+| Situation | State | Why |
+|---|---|---|
+| Corpus is multi-speaker | **N/A** | Step 4 already answered provenance; 4-b's question does not arise |
+| A consumer search was **run and recorded**, and no asset on the topic exists | **N/A**, quoting the search | A real negative, not a failure |
+| A consumer is **named but does not resolve** (bad path, missing file) | **UNCALIBRATED** | Never N/A — a broken pointer is a tooling failure wearing absence's clothes |
+| The known-positive control returns zero | **UNCALIBRATED** | The instrument is not measuring |
+| No search was run | **UNCALIBRATED** | "I didn't look" is not "nothing is there" |
+
+Under `UNCALIBRATED` the step emits **no** absorbed/held-unused/declined labels at all — a provenance
+verdict is a claim about what an organization did with knowledge, and an uncalibrated one is worse
+than none. Under `N/A` the step states the reason **and the search that established it**.
+
+⚠️ **Known weakness, stated rather than papered over**: a hurried session's natural pull is to grep a
+nearby-but-plausible file and report against it without flagging the substitution. The Sonnet
+floor-sim of this step reached `UNCALIBRATED` correctly *and* named that same failure as the more
+likely one in practice. The forcing function is the control returning zero alongside the
+measurement — which is why the control is mandatory-pass and not advice.
+
 ## Step 5. Verification-Status Column
 
 Each proposition gets a status: mechanically checkable / falsifiable-but-untested /
@@ -133,6 +206,12 @@ Routing is **proposal-only**: this skill writes nothing outside its output block
   pair first** — re-running an existing-language pair for a new language is a vacuous pass, not a
   measurement (check-class: **measured**; declare the result in the output header
   `calibration:` field).
+- **Single-author corpus with a named consumer ran Step 4-b** — each proposition carries
+  absorbed / held-unused / declined, the consumer asset is named, and the ingestion-to-citation gap
+  is reported; every grep in the step shows its known-positive control result inline, or the step
+  reports `UNCALIBRATED` and emits no labels (check-class: **mandatory-pass** — the control result
+  is either printed or the labels are absent; N/A when the corpus is multi-speaker or no consumer
+  asset exists, and the N/A must be stated).
 - **Propositions are faithful to source spans** — no meaning drift (check-class: **judged**;
   adversarial pairing: `phantom-quench` back-trace of each proposition to its source ref — a
   proposition whose source span does not support it is an Unsupported finding).

package/plugins/fh-meta/skills/frontier-digest/SKILL_detail.md

@@ -26,17 +26,34 @@ Collection criteria: score > 10, keyword-relevant items only. Max 15 items.
 ### arxiv
 
 ```bash
-# query refresh 2026-07-24: "AI software testing" (exact-phrase) went stale — newest hit was Sept 2024
-# (07-24 run instrument note). Replaced with "LLM agent evaluation"; refresh again when a query's
-# newest hit is >6 months old two runs in a row.
-for Q in "multi-agent LLM" "LLM agent evaluation" "context engineering agents"; do
+# Category-scoped since 2026-07-26. Unscoped `all:` full-text matching drifted off-axis: the 07-26 run
+# returned 6/6 fresh-but-irrelevant papers (diffusion world models, embodied QA, medical-education
+# gamification, RF fingerprinting). Freshness was fine; relevance was not — so the staleness rule below
+# could not catch it.
+for Q in "LLM agent" "agent harness" "context engineering"; do
   curl -s --max-time 8 \
-    "https://export.arxiv.org/api/query?search_query=all:${Q// /+}&max_results=2&sortBy=submittedDate&sortOrder=descending"
+    "https://export.arxiv.org/api/query?search_query=cat:cs.SE+AND+all:%22${Q// /+}%22&max_results=2&sortBy=submittedDate&sortOrder=descending"
 done
 ```
 
 Max 6 items.
 
+**Refresh rule — two independent triggers (both required, neither sufficient alone):**
+- **Staleness**: a query's newest hit is >6 months old, two runs in a row → replace the query.
+- **Relevance** (added 2026-07-26): ≥4 of 6 returned items are off-axis (not about LLM agents /
+  harnesses / agent evaluation / context engineering) → the query is drifting even though it is fresh.
+  Staleness and relevance fail independently; a fresh-but-irrelevant query passes the staleness check.
+
+**Before adopting a replacement query, calibrate it on a known pair** (`measurement-integrity-checklist.md
+§Instrument-Calibration`): pick one paper FH would clearly want and one it clearly would not, and confirm
+the new query returns the first and excludes the second. A query that cannot separate a pair you already
+know the answer to is not filtering — it is generating.
+
+> Calibration on record (2026-07-26, for the `cat:cs.SE` scoping above):
+> **positive** = *"Understanding Agent-Reactive Bugs at the Model-Harness Boundary"* → `cs.SE`, returned.
+> **negative** = *"MedGame: Storytelling Gamification … Medical Education"* → `cs.CL`/`cs.HC`, excluded.
+> `cat:cs.MA` was tested against the same pair and **rejected** — it kept roughly half the off-axis items.
+
 ### TLDR AI (RSS)
 
 ```bash
@@ -48,9 +65,15 @@ Parse `<item>` → title + link. Max 5 items.
 ### The Batch — deeplearning.ai (HTML scraping)
 
 ```bash
-curl -s --max-time 10 -L "https://www.deeplearning.ai/the-batch/"
+curl -s --max-time 10 -L "https://www.deeplearning.ai/the-batch"
 ```
 
+⚠️ **No trailing slash.** `…/the-batch/` returns **HTTP 308** redirecting to the slash-less path (verified
+2026-07-26); the 07-26 automated run read that 308 as a dead endpoint and skipped the leg. The slash-less
+URL returns 200 directly, so the leg no longer depends on redirect-following at all — which matters
+because the fetch path is not always `curl -L` (a WebFetch-based run does not follow redirects the same
+way). Second collection endpoint to churn, after GeekNews `/rss/news` (2026-06-20).
+
 Extract `"title":"..."` + `"slug":"issue-\d+"` pattern → URL: `https://www.deeplearning.ai/the-batch/{slug}/`. Max 5 items.
 
 ### GeekNews — news.hada.io (RSS)