@cleocode/skills 2026.9.20 → 2026.9.22

package/skills/{ct-skill-validator → ct-skill-author}/references/cleo-ecosystem-rules.md

@@ -45,10 +45,14 @@ Or the domain.operation shorthand when describing operations abstractly: `tasks.
 - `cleo add`, `cleo update`, `cleo complete`
 - `cleo session status`, `cleo session start`, `cleo session end`
 - `cleo memory find`, `cleo memory timeline`, `cleo memory fetch`, `cleo memory observe`
-- `cleo dash`, `cleo health`, `cleo help`
-- `cleo pipeline stage.status`, `cleo manifest append`
-- `cleo skill list`, `cleo skill show`
-- `cleo orchestrator status`, `cleo orchestrator spawn`
+- `cleo dash`, `cleo doctor`, `cleo <command> --help` (there is no `help` verb)
+- `cleo manifest append`
+- `cleo skills list`, `cleo skills info`
+- `cleo orchestrate status`, `cleo orchestrate spawn`
+
+Gate 31 (`scripts/lint-skill-commands.mjs`) checks every `cleo` invocation in a
+canonical skill against the live command manifest; run it rather than relying
+on this list.
 
 **Fail condition**: Skill references a domain.operation that does not exist in the constitution.
 

package/skills/{ct-skill-creator → ct-skill-author}/references/provider-deployment.md

@@ -10,7 +10,7 @@ Skills follow a single-source-of-truth model:
 packages/skills/skills/         <-- canonical location
   ct-cleo/SKILL.md
   ct-orchestrator/SKILL.md
-  ct-skill-creator/SKILL.md
+  ct-skill-author/SKILL.md
   ...
   manifest.json                    <-- CLEO-only metadata
 ```
@@ -57,7 +57,7 @@ CLEO-aware providers read both SKILL.md and manifest.json. The manifest provides
 
 ### CLEO Package Skills
 
-Skills in `packages/skills/skills/` are managed by CLEO infrastructure. They are deployed via the CLEO skill system and do not need manual symlink setup. The manifest.json, dispatch-config.json, and provider-skills-map.json coordinate deployment automatically.
+Skills in `packages/skills/skills/` are managed by CLEO infrastructure. They are deployed via the CLEO skill system and do not need manual symlink setup. `manifest.json` (generated from SKILL.md frontmatter) drives installation: every skill with `metadata.install: harness` is installed.
 
 ### User Global Skills
 
@@ -164,12 +164,16 @@ To add a new skill to the CLEO package (`packages/skills/`):
    }
    ```
 
-4. **Add entry to dispatch-config.json** (`packages/skills/dispatch-config.json`):
-   Add the skill to relevant `by_task_type`, `by_keyword`, and/or `by_protocol` mappings if it should participate in dispatch routing.
+4. **Add dispatch routing** if the skill should participate: add it to the
+   `dispatch_matrix` (`by_task_type`, `by_keyword`, `by_protocol`) in
+   `packages/skills/skills/manifest.json`. (`dispatch-config.json` was removed
+   in T12649; nothing read it.)
 
-5. **Update totalSkills** in manifest.json `_meta.totalSkills` to reflect the new count.
+5. **Regenerate the manifest**: `node scripts/skills/generate-manifest.mjs`.
+   It writes the identity fields and `_meta.totalSkills` from SKILL.md
+   frontmatter; gate 29 fails if you hand-edit them.
 
 6. **Validate**: Run the skill validator to confirm the new skill passes all checks:
    ```bash
-   python3 packages/skills/skills/ct-skill-creator/scripts/quick_validate.py packages/skills/skills/my-new-skill
+   python3 packages/skills/skills/ct-skill-author/scripts/quick_validate.py packages/skills/skills/my-new-skill
    ```

package/skills/{ct-skill-validator/SKILL.md → ct-skill-author/references/validating.md}

@@ -1,9 +1,4 @@
----
-name: ct-skill-validator
-description: Validates an existing skill folder against the full CLEO standard and ecosystem. Use when auditing skills for structural compliance, verifying a skill fits into the CLEO ecosystem and constitution, running quality A/B evals, or preparing a skill for distribution. Runs a 3-phase validation loop — structural, ecosystem fit, and quality eval — then presents all findings as an HTML report opened in the user's browser. Iterates until all required phases pass.
-disable-model-invocation: true
-allowed-tools: Bash(python *)
----
+<!-- Merged from the ct-skill-validator skill into ct-skill-author (T12649, D11157). -->
 
 # CLEO Skill Validator
 
@@ -26,7 +21,7 @@ python ${CLAUDE_SKILL_DIR}/scripts/validate.py <skill-dir>
 
 # With manifest checks (Tier 4):
 python ${CLAUDE_SKILL_DIR}/scripts/validate.py <skill-dir> \
-  --manifest <manifest.json> --dispatch-config <dispatch-config.json>
+  --manifest packages/skills/skills/manifest.json
 
 # JSON output (for scripting):
 python ${CLAUDE_SKILL_DIR}/scripts/validate.py <skill-dir> --json
@@ -35,7 +30,10 @@ python ${CLAUDE_SKILL_DIR}/scripts/validate.py <skill-dir> --json
 python ${CLAUDE_SKILL_DIR}/scripts/audit_body.py <skill-dir>
 
 # Manifest alignment check: bundled into validate.py Tier 4. Use:
-#   python validate.py <skill-dir> --manifest <manifest.json> --dispatch-config <dispatch-config.json>
+#   python validate.py <skill-dir> --manifest packages/skills/skills/manifest.json
+# (CLEO's own package ships no dispatch-config.json or provider-skills-map.json
+# since T12649/T12679; --dispatch-config/--provider-map only apply to external
+# libraries that still ship them. For CLEO skills, gates 29-32 are authoritative.)
 
 # Progressive-disclosure depth check (T9684 — CI gate):
 python ${CLAUDE_SKILL_DIR}/scripts/check_depth.py <skill-dir>
@@ -56,7 +54,7 @@ python ${CLAUDE_SKILL_DIR}/scripts/check_depth.py <skill-dir> --audit-allowlist
 
 Pre-existing stubs are allowlisted with follow-up task IDs in
 `scripts/check_depth.py::ALLOWLIST`. Gold-standard skills:
-`ct-orchestrator` (9 refs) and `ct-skill-creator` (7 refs).
+`ct-orchestrator` (9 refs) and `ct-skill-author` (7 refs).
 
 **Allowlist hygiene:** every entry carries `last_reviewed: YYYY-MM-DD HH:MM:SS`.
 `check_depth.py` runs a silent background audit on every invocation and emits
@@ -75,8 +73,8 @@ Repeat until errors = 0. Do not proceed to Phase 2 while errors remain.
 - Tier 1 — Structure: SKILL.md exists, frontmatter parseable, no CLEO-only fields
 - Tier 2 — Frontmatter Quality: name matches dir, description has trigger indicators
 - Tier 3 — Body Quality: length, no placeholder text, file references exist on disk
-- Tier 4 — CLEO Integration: manifest and dispatch-config alignment (optional)
-- Tier 5 — Provider Compatibility: provider-skills-map check (optional)
+- Tier 4 — CLEO Integration: manifest alignment (dispatch-config only for external libraries that ship one)
+- Tier 5 — Provider Compatibility: provider-skills-map check (external libraries only; CLEO removed its map in T12679)
 
 See [references/validation-rules.md](references/validation-rules.md) for full rule set.
 
@@ -130,11 +128,11 @@ Repeat until verdict is `PASS` or `PASS_WITH_WARNINGS`. WARN is acceptable; ERRO
 ## Phase 3: Quality A/B Eval
 
 Tests whether the skill actually improves agent output quality vs. no skill context.
-Phase 3 is **delegated** — `ct-skill-validator` does static analysis; runtime
+Phase 3 is **delegated** — `ct-skill-author` does static analysis; runtime
 quality evals live in a dedicated skill (`skill-evaluator` preferred,
-`ct-skill-creator` as legacy fallback).
+`ct-skill-author` as legacy fallback).
 
-> **Scope boundary:** `ct-skill-validator` is *static* — it checks structure,
+> **Scope boundary:** `ct-skill-author` is *static* — it checks structure,
 > frontmatter, body, manifest, depth, ecosystem fit. For deep runtime A/B
 > benchmarking, regression detection, and auto-improvement, the dispatcher
 > below routes to `skill-evaluator`, which owns that workflow end-to-end.
@@ -177,7 +175,7 @@ loop: generate → run → grade → aggregate → analyze → detect-regression
 propose. See `skill-evaluator/SKILL.md` for the workflow it actually
 executes.
 
-When `ct-skill-creator` is the resolved fallback, the wrapper invokes its
+When `ct-skill-author` is the resolved fallback, the wrapper invokes its
 `run_eval.py` with the same arguments translated to its CLI shape.
 
 ### Manual A/B (if you want to drive runs yourself)
@@ -228,7 +226,7 @@ Open the report in the browser: omit `--no-open` (default behaviour opens browse
 
 ## Self-Validation
 
-This skill validates itself. To validate ct-skill-validator:
+This skill validates itself. To validate ct-skill-author:
 
 ```bash
 python ${CLAUDE_SKILL_DIR}/scripts/validate.py ${CLAUDE_SKILL_DIR}

package/skills/{ct-skill-validator → ct-skill-author}/references/validation-rules.md

@@ -9,8 +9,8 @@ The CLEO Skill Validator enforces compliance across five tiers of increasing dep
 1. **Structure** — Does the skill have the required files and valid frontmatter?
 2. **Frontmatter Quality** — Are all frontmatter fields correct, well-formed, and non-contradictory?
 3. **Body Quality** — Is the body content complete, concise, and free of placeholders?
-4. **CLEO Integration** — Does the skill align with manifest.json and dispatch-config.json?
-5. **Provider Compatibility** — Is the skill referenced in the provider-skills-map?
+4. **CLEO Integration** — Does the skill align with manifest.json (and dispatch-config.json, for external libraries that ship one)?
+5. **Provider Compatibility** — Is the skill referenced in the provider-skills-map (external libraries only; CLEO's was removed in T12679)?
 
 Tiers 1-3 run on every validation. Tiers 4-5 are opt-in via CLI flags.
 

package/skills/{ct-skill-validator → ct-skill-author}/scripts/_skill_finder.py

@@ -109,7 +109,7 @@ def _candidates(name: str, caller_skill_dir: Path) -> Iterator[Path]:
     #      - <child>/skills/<name>
     #      - <child>/packages/skills/skills/<name>
     #    This finds skills under sibling project roots — e.g. when the
-    #    caller is in /mnt/projects/cleocode/.../ct-skill-validator/ and
+    #    caller is in /mnt/projects/cleocode/.../ct-skill-author/ and
     #    the target is in /mnt/projects/proxmox/skills/<name>/. The walk
     #    eventually reaches the common ancestor /mnt/projects/ where both
     #    cleocode and proxmox are children. Bounded by MAX_SIBLINGS per
@@ -176,7 +176,7 @@ def find_skill(name: str, *, caller: Path | None = None) -> Path | None:
 def find_first(names: list[str], *, caller: Path | None = None) -> tuple[str, Path] | None:
     """Return the (name, path) of the first found skill from a preference list.
 
-    Lets callers say "prefer skill-evaluator, fall back to ct-skill-creator"
+    Lets callers say "prefer skill-evaluator, fall back to ct-skill-author"
     without hardcoding either path.
     """
     for n in names:

package/skills/{ct-skill-validator → ct-skill-author}/scripts/check_depth.py

@@ -5,7 +5,7 @@ CLEO Skill Depth Check — progressive-disclosure-depth rule (T9684).
 Fails when a skill's SKILL.md is below the depth threshold AND it has
 no references/ subdir with at least the manifest-declared reference
 files. The gold standard is ct-orchestrator (9 references) and
-ct-skill-creator (7 references); the rule is calibrated to flag
+ct-skill-author (7 references); the rule is calibrated to flag
 stubs without forcing every skill to that depth.
 
 Rule logic:
@@ -41,7 +41,7 @@ from pathlib import Path
 # Adjust here, then re-run the audit to verify all 19 active skills pass.
 MIN_BODY_LINES = 100
 MIN_REF_FILES = 3
-GOLD_STANDARDS = ("ct-orchestrator", "ct-skill-creator")
+GOLD_STANDARDS = ("ct-orchestrator", "ct-skill-author")
 
 # Cadence for the allowlist audit — entries older than this are flagged stale.
 ALLOWLIST_STALE_DAYS = 30
@@ -62,9 +62,6 @@ LAST_REVIEWED_RE = re.compile(r"last_reviewed:\s*(\d{4}-\d{2}-\d{2} \d{2}:\d{2}:
 # Format: skill-name -> "task-id: rationale | last_reviewed: YYYY-MM-DD HH:MM:SS"
 ALLOWLIST: dict[str, str] = {
     "ct-codebase-mapper": "T9567-followup: pre-existing; depth-backfill deferred | last_reviewed: 2026-05-21 14:00:18",
-    "ct-master-tac":      "T9567-followup: pre-existing; depth-backfill deferred | last_reviewed: 2026-05-21 14:00:18",
-    "ct-memory":          "T9567-followup: pre-existing; depth-backfill deferred | last_reviewed: 2026-05-21 14:00:18",
-    "ct-stickynote":      "T9567-followup: ephemeral note skill; minimal-by-design | last_reviewed: 2026-05-21 14:00:18",
 }
 
 

package/skills/{ct-skill-validator → ct-skill-author}/scripts/generate_validation_report.py

@@ -344,7 +344,7 @@ def generate_html(
     {grading_html}
     {comparison_html}
 
-    <div class="footer">Generated by ct-skill-validator &mdash; CLEO Full Validation Report</div>
+    <div class="footer">Generated by ct-skill-author &mdash; CLEO Full Validation Report</div>
 </body>
 </html>
 """

package/skills/{ct-skill-validator → ct-skill-author}/scripts/run_quality_eval.py

@@ -31,7 +31,7 @@ from _skill_finder import find_first  # noqa: E402
 
 # Preference order — first found wins. Lets the user opt-in to a different
 # eval skill via $SKILL_FINDER_PATH without code changes.
-PREFERENCE = ["skill-evaluator", "ct-skill-creator"]
+PREFERENCE = ["skill-evaluator", "ct-skill-author", "ct-skill-creator"]
 
 
 def main() -> int:
@@ -83,7 +83,7 @@ def main() -> int:
         if args.executor:
             cmd += ["--executor", args.executor]
     else:
-        # ct-skill-creator legacy paths
+        # ct-skill-author (formerly ct-skill-creator) eval paths
         if args.trigger:
             script = eval_skill_path / "scripts" / "run_eval.py"
             cmd = ["python3", str(script), "--skill-path", str(target_skill)]

package/skills/ct-spec-writer/SKILL.md

@@ -1,12 +1,8 @@
 ---
 name: ct-spec-writer
 description: Technical specification writing using RFC 2119 language for clear, unambiguous requirements. Creates protocol specifications, technical requirements, API specifications, and architecture documents with testable requirements and compliance criteria. Use when writing specifications, defining protocols, documenting requirements, or creating API contracts. Triggers on specification tasks, protocol definition needs, or requirement documentation.
-version: 2.1.0
-tier: 2
-core: false
-category: recommended
+version: 2.1.2
 protocol: specification
-loomStage: specification
 adrRefs:
   - ADR-014
   - ADR-023
@@ -20,6 +16,16 @@ compatibility:
   - windsurf
   - gemini-cli
 license: MIT
+metadata:
+  version: 2.1.2
+  tier: on-demand
+  install: harness
+  covers:
+    - packages/core/src/validation/protocols/cant/specification.cant
+    - packages/core/src/validation/protocols/protocols-markdown/specification.md
+  loomStage: specification
+  lastReviewed: 2026-09-28
+  stability: stable
 ---
 
 # Specification Writer Context Injection
@@ -225,7 +231,7 @@ Spec blobs live in the docs SSoT; published copies on disk go in
 1. Read task: `{{TASK_SHOW_CMD}} {{TASK_ID}}`
 2. Start task: `{{TASK_START_CMD}} {{TASK_ID}}` (if not already started by orchestrator)
 3. Write specification to `docs/specs/{{SPEC_NAME}}.md`
-4. Append manifest entry to `{{MANIFEST_PATH}}`
+4. Record the manifest entry: `cleo manifest append --task {{TASK_ID}} --type specification --content "<one-paragraph summary>"`
 5. Complete task: `{{TASK_COMPLETE_CMD}} {{TASK_ID}}`
 6. Return summary message
 
@@ -238,7 +244,7 @@ Spec blobs live in the docs SSoT; published copies on disk go in
 ### Output Requirements
 
 1. MUST write specification to: `docs/specs/{{SPEC_NAME}}.md`
-2. MUST append ONE line to: `{{MANIFEST_PATH}}`
+2. MUST record ONE manifest entry: `cleo manifest append --entry '<entry JSON>'` (the flat manifest file is retired, ADR-027)
 3. MUST return ONLY: "Specification complete. Manifest appended to pipeline_manifest."
 4. MUST NOT return specification content in response
 

package/skills/ct-task-executor/SKILL.md

@@ -1,16 +1,8 @@
 ---
 name: ct-task-executor
 description: General implementation task execution for completing assigned CLEO tasks by following instructions and producing concrete deliverables. Handles coding, configuration, documentation work with quality verification against acceptance criteria and progress reporting. Use when executing implementation tasks, completing assigned work, or producing task deliverables. Triggers on implementation tasks, general execution needs, or task completion work.
-version: 2.2.0
-metadata:
-  version: 2.2.0
-  lastReviewed: 2026-09-19
-  stability: stable
-tier: 2
-core: true
-category: core
+version: 2.7.3
 protocol: implementation
-loomStage: implementation
 adrRefs:
   - ADR-070
   - ADR-062
@@ -25,8 +17,16 @@ compatibility:
   - gemini-cli
 license: MIT
 metadata:
-  version: 2.7.0
-  lastReviewed: 2026-09-18
+  version: 2.7.3
+  tier: core
+  install: harness
+  covers:
+    - packages/cleo/src/cli/commands/verify.ts
+    - packages/cleo/src/cli/commands/complete.ts
+    - packages/core/src/validation/protocols/cant/implementation.cant
+    - packages/core/src/validation/protocols/protocols-markdown/implementation.md
+  loomStage: implementation
+  lastReviewed: 2026-09-28
   stability: stable
 ---
 
@@ -99,8 +99,8 @@ Context injection for implementation tasks spawned via cleo-subagent. Provides d
 2. Focus already set by orchestrator (set if working standalone)
 3. Execute instructions (see Methodology below)
 4. Verify deliverables against acceptance criteria
-5. Write output: `{{OUTPUT_DIR}}/{{DATE}}_{{TOPIC_SLUG}}.md`
-6. Append manifest: `{{MANIFEST_PATH}}`
+5. Record output: `cleo docs add {{TASK_ID}} --content - --type note --slug {{TOPIC_SLUG}}`
+6. Record the manifest entry: `cleo manifest append --task {{TASK_ID}} --type implementation --content "<one-paragraph summary>"`
 7. Complete task: `{{TASK_COMPLETE_CMD}} {{TASK_ID}}`
 8. Return summary message
 
@@ -159,8 +159,8 @@ The routing prints a one-line info message to stderr (suppress with
 
 ### Output Requirements
 
-1. MUST write findings to: `{{OUTPUT_DIR}}/{{DATE}}_{{TOPIC_SLUG}}.md`
-2. MUST append ONE line to: `{{MANIFEST_PATH}}`
+1. MUST record findings with `cleo docs add {{TASK_ID}} --content - --type note --slug {{TOPIC_SLUG}}` (never a raw file under `.cleo/agent-outputs/`)
+2. MUST record ONE manifest entry: `cleo manifest append --entry '<entry JSON>'` (the flat manifest file is retired, ADR-027)
 3. MUST return ONLY: "Implementation complete. Manifest appended to pipeline_manifest."
 4. MUST NOT return implementation details in response
 
@@ -168,7 +168,7 @@ The routing prints a one-line info message to stderr (suppress with
 
 ## Output File Format
 
-Write to `{{OUTPUT_DIR}}/{{DATE}}_{{TOPIC_SLUG}}.md`:
+Record it with `cleo docs add {{TASK_ID}} --content - --type note --slug {{TOPIC_SLUG}}`, using this body:
 
 ```markdown
 # {{TASK_NAME}}
@@ -193,7 +193,7 @@ Write to `{{OUTPUT_DIR}}/{{DATE}}_{{TOPIC_SLUG}}.md`:
 
 ## Acceptance Criteria Verification
 
-Record each criterion's changed artifacts and actual verification results. A merged PR with green CI provides provenance; it cannot automatically satisfy implementation, testing and review. Use `pr:<number>;files:<changed-path>` for implementation and actual result atoms for test/review gates, with explicit `satisfies:T1234#AC1` links for canonical criteria. The PR must relate to the task; documentation-only changes cannot prove a code fix. Research and documentation tasks may use appropriately scoped documentary evidence. Fetch the merge commit before claiming its artifact bytes were inspected. Criterion edits require fresh evidence. A completed child does not establish that its parent's independent criteria were met.
+Record each criterion's changed artifacts and actual verification results. A merged PR with green CI provides provenance; it cannot automatically satisfy implementation, testing and review. Use `pr:<number>;files:<changed-path>` for implementation (`pr:<component>@<integration>` when your PR merged into an integration branch) and actual result atoms for test/review gates, with explicit `satisfies:T1234#AC1` links for canonical criteria. The PR must relate to the task; documentation-only changes cannot prove a code fix. Research and documentation tasks may use appropriately scoped documentary evidence. Fetch the merge commit before claiming its artifact bytes were inspected. Criterion edits require fresh evidence. A completed child does not establish that its parent's independent criteria were met.
 
 
 | Criterion | Status | Notes |
@@ -216,7 +216,7 @@ Record each criterion's changed artifacts and actual verification results. A mer
 
 ## Manifest Entry Format
 
-Append ONE entry via `cleo manifest append <json>` (writes to pipeline_manifest table per ADR-027):
+Append ONE entry via `cleo manifest append --entry '<json>'` (writes to pipeline_manifest table per ADR-027):
 
 ```json
 {"id":"{{TOPIC_SLUG}}-{{DATE}}","file":"{{DATE}}_{{TOPIC_SLUG}}.md","title":"{{TASK_NAME}}","date":"{{DATE}}","status":"complete","agent_type":"implementation","topics":{{TOPICS_JSON}},"key_findings":["Completed: deliverable 1","Completed: deliverable 2","All acceptance criteria passed"],"actionable":false,"needs_followup":[],"linked_tasks":["{{EPIC_ID}}","{{TASK_ID}}"]}
@@ -240,7 +240,7 @@ Append ONE entry via `cleo manifest append <json>` (writes to pipeline_manifest
 - [ ] All instructions executed
 - [ ] All deliverables produced
 - [ ] Acceptance criteria verified
-- [ ] Output file written to `{{OUTPUT_DIR}}/`
+- [ ] Output recorded with `cleo docs add` (slug in the return message)
 - [ ] Manifest entry appended (single line, valid JSON)
 - [ ] Task completed via `{{TASK_COMPLETE_CMD}}`
 - [ ] Session ended with summary note (if executor owns session)
@@ -307,8 +307,8 @@ cleo session list --all
 # Clean up stale sessions (72h+ inactive)
 cleo session gc
 
-# Force cleanup including active sessions (use cautiously)
-cleo session gc --include-active
+# Also end active sessions idle longer than N days (use cautiously)
+cleo session gc --max-age 1
 ```
 
 ### Best Practices

package/skills/ct-task-executor/references/common-failures.md

@@ -43,8 +43,8 @@ not in the worktree's branch.
 (persistent shell state was not reset between tool calls), or
 deliberately followed an absolute path from a prior session's notes.
 
-**Fix.** The spawn prompt's `FIRST ACTION: cd <path>` MUST be the first
-command. All subsequent paths SHOULD be absolute within the worktree.
+**Fix.** The spawn prompt's FIRST ACTION guard, `cd '<path>' || exit 1`
+(single-quoted, so it survives spaces), MUST start every Bash call. All subsequent paths SHOULD be absolute within the worktree.
 If unsure, prefix with `git rev-parse --show-toplevel` first.
 
 ## Cherry-Pick Instead of Merge
@@ -61,7 +61,7 @@ relate commits to the task.
 without reading ADR-062. The CLEO contract is that workers commit on
 their task branch; the integrator MUST use `git merge --no-ff
 task/<id>` to preserve SHAs, author identity, and the
-`cleo find <task-id> --commits` trace.
+`git log --grep <task-id>` trace.
 
 **Fix.** Always `git merge --no-ff task/<TID>` for integration. See
 `feedback_cherry_pick_worktrees.md` for the full pattern.

package/skills/ct-task-executor/references/evidence-and-gates.md

@@ -140,6 +140,7 @@ cleo memory observe "..." --title "..."
 | — | `E_EVIDENCE_INSUFFICIENT` | Gate atom kind doesn't match required | See gate-atom table above |
 | — | `E_EVIDENCE_TESTS_FAILED` | `tool:test` exit non-zero | Fix failing tests first |
 | — | `E_EVIDENCE_TOOL_FAILED` | Lint/typecheck/etc exit non-zero | Fix source and re-run |
+| — | `E_EVIDENCE_TOOL_VACUOUS` | Tool exited 0 but provably checked nothing (`tsc` without `-b` on a references-only tsconfig) | Add a covering `typecheck` script (e.g. `tsc -b`) or set `typecheck.command` in `.cleo/project-context.json` |
 | — | `E_EVIDENCE_STALE` | Files or commit changed after verify | Re-verify before complete |
 | — | `E_EVIDENCE_INVALID_DECISION` | Decision ID not found in BRAIN | Use `cleo memory decision-find` |
 | — | `E_FLAG_REMOVED` | Tried `cleo complete --force` | `--force` removed per ADR-051 |

package/skills/ct-validator/SKILL.md

@@ -1,12 +1,8 @@
 ---
 name: ct-validator
 description: Compliance validation for verifying systems, documents, or code against requirements, schemas, or standards. Performs schema validation, code compliance checks, document validation, and protocol compliance verification with detailed pass/fail reporting. Use when validating compliance, checking schemas, verifying code standards, or auditing protocol implementations. Triggers on validation tasks, compliance checks, or quality verification needs.
-version: 2.0.0
-tier: 2
-core: false
-category: recommended
+version: 2.0.4
 protocol: validation
-loomStage: validation
 adrRefs:
   - ADR-051
   - ADR-023
@@ -20,6 +16,16 @@ compatibility:
   - windsurf
   - gemini-cli
 license: MIT
+metadata:
+  version: 2.0.4
+  tier: on-demand
+  install: harness
+  covers:
+    - packages/core/src/validation/protocols/cant/validation.cant
+    - packages/core/src/validation/protocols/protocols-markdown/validation.md
+  loomStage: validation
+  lastReviewed: 2026-09-28
+  stability: stable
 ---
 
 # Validator Context Injection
@@ -190,8 +196,8 @@ the Validate-phase Lead prompt, listing the touched packages and the exact
 1. Read task: `{{TASK_SHOW_CMD}} {{TASK_ID}}`
 2. Start task: `{{TASK_START_CMD}} {{TASK_ID}}` (if not already started by orchestrator)
 3. Execute validation checks
-4. Write validation report to `{{OUTPUT_DIR}}/{{DATE}}_{{TOPIC_SLUG}}.md`
-5. Append manifest entry to `{{MANIFEST_PATH}}`
+4. Record validation report with `cleo docs add {{TASK_ID}} --content - --type note --slug {{TOPIC_SLUG}}`
+5. Record the manifest entry: `cleo manifest append --task {{TASK_ID}} --type validation --content "<one-paragraph summary>"`
 6. Complete task: `{{TASK_COMPLETE_CMD}} {{TASK_ID}}`
 7. Return summary message
 
@@ -203,8 +209,8 @@ the Validate-phase Lead prompt, listing the touched packages and the exact
 
 ### Output Requirements
 
-1. MUST write validation report to: `{{OUTPUT_DIR}}/{{DATE}}_{{TOPIC_SLUG}}.md`
-2. MUST append ONE line to: `{{MANIFEST_PATH}}`
+1. MUST record validation report with `cleo docs add {{TASK_ID}} --content - --type note --slug {{TOPIC_SLUG}}` (never a raw file under `.cleo/agent-outputs/`)
+2. MUST record ONE manifest entry: `cleo manifest append --entry '<entry JSON>'` (the flat manifest file is retired, ADR-027)
 3. MUST return ONLY: "Validation complete. Manifest appended to pipeline_manifest."
 4. MUST NOT return validation content in response
 

package/skills/ct-validator/references/compliance-reports.md

@@ -106,7 +106,7 @@ unactionable — the consumer cannot prioritize.
 ### Warnings
 
 **W-001**: `packages/cleo/src/dispatch.ts` is 487 lines (warn at 400).
-- Rule: ct-skill-validator audit_body §body-length
+- Rule: ct-skill-author audit_body §body-length
 - Fix: Extract sub-handlers into sibling files.
 - Verification: re-run audit_body.py.
 

package/skills/ct-validator/references/validation-modes.md

@@ -93,9 +93,9 @@ links; scan for placeholder text; verify formatting.
 **Tool examples.**
 
 ```bash
-# Use the ct-skill-validator scripts as a model
-python packages/skills/skills/ct-skill-validator/scripts/validate.py <skill-dir>
-python packages/skills/skills/ct-skill-validator/scripts/audit_body.py <skill-dir>
+# Use the ct-skill-author scripts as a model
+python packages/skills/skills/ct-skill-author/scripts/validate.py <skill-dir>
+python packages/skills/skills/ct-skill-author/scripts/audit_body.py <skill-dir>
 
 # Generic markdown link check
 markdown-link-check docs/specs/*.md