@cobusgreyling/loop-init 1.2.3 → 1.3.2

package/starters/ci-sweeper-opencode/opencode.json.example

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "agent": {
+    "ci-triage": {
+      "name": "ci-triage",
+      "description": "CI-focused triage and fix loop. Reads ci-sweeper-state.md, classifies CI failures, and applies minimal fixes in worktrees with verifier.",
+      "mode": "primary",
+      "prompt": "Read AGENTS.md, LOOP.md, ci-sweeper-state.md, and skills/ci-triage/SKILL.md. Classify each failing check. For clear regressions: worktree + implementer + verifier. Escalate infra and security failures.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "implementer": {
+      "name": "implementer",
+      "description": "L2 implementer for CI-fix patches inside an isolated worktree.",
+      "mode": "subagent",
+      "prompt": "Implement the minimal fix for the identified CI failure inside the supplied worktree. Run tests. Output the diff path. Max 3 attempts per item.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "verifier": {
+      "name": "verifier",
+      "description": "Checker agent for CI fix diffs. APPROVE or REJECT only.",
+      "mode": "subagent",
+      "prompt": "Review the supplied CI-fix diff. Verify tests pass. Do not edit files. APPROVE or REJECT with evidence.",
+      "permission": {
+        "bash": "ask",
+        "edit": "deny"
+      }
+    }
+  }
+}

package/starters/ci-sweeper-opencode/skills/ci-triage/SKILL.md

@@ -0,0 +1,32 @@
+---
+name: ci-triage
+description: >
+  Classify CI failures — distinguish clear regressions from infra flakes
+  and security-test failures. Produces structured failure reports.
+user_invocable: true
+---
+
+# CI Triage Skill
+
+You are a CI triage agent. Classify each failing check and decide the next action.
+
+## Classification
+
+- **Clear regression**: single-file, obvious root cause (candidate for auto-fix)
+- **Infra flake**: network timeout, runner issue, dependency unavailable
+- **Security test failure**: never auto-fix; escalate to human
+- **Non-deterministic**: retry once before classifying
+
+## Output
+
+Update `ci-sweeper-state.md` with:
+
+- List of failures by category
+- Suggested next action per item
+- Attempt count per item
+
+## Rules
+
+- Infra and security failures always escalate.
+- Max 3 fix attempts per item.
+- Worktree isolation required for any code change.

package/starters/dependency-sweeper-opencode/AGENTS.md

@@ -0,0 +1,15 @@
+# AGENTS.md — Dependency Sweeper (Opencode)
+
+## Loop Mode
+- L2 assisted from week one (patch-only with strong verifier gates).
+- Read `dependency-sweeper-state.md` before every run.
+
+## Safety
+- Patch-only by default. Majors and breaking changes escalate to human.
+- Maintain denylist in state file — never touch those packages.
+- One worktree per update attempt.
+- Max 3 fix attempts per run; max 5 auto-PRs per day.
+
+## Verification
+- Verifier must run `npm ci && npm test` (or equivalent).
+- Record attempt count and test evidence in state.

package/starters/dependency-sweeper-opencode/LOOP.md

@@ -0,0 +1,27 @@
+# Loop Configuration — Dependency Sweeper (Opencode)
+
+## Active Loops
+
+| Pattern | Cadence | Status | Command |
+|---------|---------|--------|---------|
+| Dependency Sweeper | 6h | L2 patch-only | `opencode run "Run dependency-triage" --agent loop-triage` via cron |
+
+## Human Gates
+- Major version bumps always human.
+- High-severity CVE requiring breaking change: human.
+- Denylist packages (edit in state) never auto-touched.
+- No auto-merge without verifier pass.
+
+## Worktrees
+- One worktree per package update attempt.
+- Discard on REJECT or human escalation.
+
+## Budget
+- Max sub-agent spawns per run: 3.
+- Max auto-PRs per day: 5.
+- Pause if token budget exceeded.
+
+## Links
+- Pattern: [dependency-sweeper](../../patterns/dependency-sweeper.md)
+- Example: [examples/opencode/dependency-sweeper.md](../../examples/opencode/dependency-sweeper.md)
+- Safety: [docs/safety.md](../../docs/safety.md)

package/starters/dependency-sweeper-opencode/README.md

@@ -0,0 +1,44 @@
+# Dependency Sweeper — Opencode Starter
+
+Clone-and-run scaffold for the **Dependency Sweeper** pattern with opencode. Discover, safely apply, and verify dependency updates.
+
+## Quick Start
+
+```bash
+npx @cobusgreyling/loop-init . --pattern dependency-sweeper --tool opencode
+```
+
+Or copy manually:
+
+```bash
+cp -r starters/dependency-sweeper-opencode/skills .
+cp starters/dependency-sweeper-opencode/AGENTS.md .
+cp starters/dependency-sweeper-opencode/LOOP.md .
+cp starters/dependency-sweeper-opencode/dependency-sweeper-state.md.example dependency-sweeper-state.md
+cp starters/dependency-sweeper-opencode/opencode.json.example opencode.json
+```
+
+Start (L2 assisted, patch-only):
+
+```bash
+opencode run \
+  "Run skills/dependency-triage/SKILL.md. Scan package manifests for outdated and vulnerable deps. Patch-only auto-fix in worktree with verifier. Escalate majors, high-sev CVEs, and denylist packages. Update state." \
+  --title "Dependency sweeper"
+```
+
+## What's Included
+
+| File | Purpose |
+|------|---------|
+| `dependency-sweeper-state.md.example` | State spine (in-flight updates, denylist) |
+| `skills/dependency-triage/SKILL.md` | Dependency-focused triage skill |
+| `AGENTS.md` | Always-on safety rules |
+| `LOOP.md` | Cadence, gates, budget |
+| `opencode.json.example` | Named agent definitions |
+
+## Next Steps
+
+- [patterns/dependency-sweeper.md](../../patterns/dependency-sweeper.md)
+- [examples/opencode/dependency-sweeper.md](../../examples/opencode/dependency-sweeper.md)
+- [docs/loop-design-checklist.md](../../docs/loop-design-checklist.md)
+- [stories/dependency-sweeper-week-one.md](../../stories/dependency-sweeper-week-one.md)

package/starters/dependency-sweeper-opencode/dependency-sweeper-state.md.example

@@ -0,0 +1,11 @@
+# Dependency Sweeper State
+Last run: 2026-06-20 09:00 UTC
+Outdated packages: 0
+Attempt counts: {}
+Auto-PRs today: 0
+
+## Denylist (never touch)
+- <!-- Add packages the loop must never update -->
+
+## Escalated to Human
+- <!-- Major bumps and high-sev CVEs -->

package/starters/dependency-sweeper-opencode/opencode.json.example

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "agent": {
+    "dependency-triage": {
+      "name": "dependency-triage",
+      "description": "Dependency-focused triage loop. Reads dependency-sweeper-state.md, scans manifests, and applies patch-only upgrades with verifier.",
+      "mode": "primary",
+      "prompt": "Read AGENTS.md, LOOP.md, dependency-sweeper-state.md, and skills/dependency-triage/SKILL.md. Scan manifests for outdated and vulnerable deps. Patch-only auto-fix in worktree. Escalate majors and denylisted packages.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "implementer": {
+      "name": "implementer",
+      "description": "L2 implementer for patch-only dependency upgrades in a worktree.",
+      "mode": "subagent",
+      "prompt": "Apply the identified patch-only upgrade inside the supplied worktree. Run npm ci && npm test. Never touch denylisted packages. Output the diff.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "verifier": {
+      "name": "verifier",
+      "description": "Checker agent for dependency upgrade diffs. APPROVE or REJECT only.",
+      "mode": "subagent",
+      "prompt": "Verify the dependency patch passes tests and touches no denylisted packages. Do not edit files. APPROVE or REJECT with evidence.",
+      "permission": {
+        "bash": "ask",
+        "edit": "deny"
+      }
+    }
+  }
+}

package/starters/dependency-sweeper-opencode/skills/dependency-triage/SKILL.md

@@ -0,0 +1,35 @@
+---
+name: dependency-triage
+description: >
+  Scan package manifests and lockfiles for outdated and vulnerable
+  dependencies. Classify by severity and update type.
+user_invocable: true
+---
+
+# Dependency Triage Skill
+
+You are a dependency sweeper agent. Scan for outdated and vulnerable packages.
+
+## Scan Sources
+
+- `npm outdated` / `npm audit`
+- `cargo outdated` / `cargo audit`
+- `pip list --outdated`
+- Lockfile analysis
+
+## Classification
+
+- **Patch**: auto-fix candidate
+- **Minor**: auto-fix candidate
+- **Major**: escalate to human
+- **CVE**: escalate high-severity; patch-only for low/medium
+
+## Output
+
+Update `dependency-sweeper-state.md` with prioritized update list.
+
+## Rules
+
+- Patch-only by default in week one.
+- Honour denylist in state file.
+- Run `npm ci && npm test` (or equivalent) before approving.

package/starters/issue-triage-opencode/AGENTS.md

@@ -0,0 +1,16 @@
+# AGENTS.md — Issue Triage (Opencode)
+
+## Loop Mode
+- Start in L1 propose-only mode.
+- Read `issue-triage-state.md` before every run.
+- Never auto-label, auto-close, or auto-comment in week one.
+
+## Safety
+- P0/P1 on auth, payments, security, or public API: always escalate.
+- L2 auto-labels limited to curated allowlist.
+- Verifier gate required before applying any label.
+
+## Verification
+- L1: human reviews proposed labels before application.
+- L2: verifier confirms labels are in the allowlist.
+- Duplicates: propose as "possible duplicate of #NNN" — never auto-close.

package/starters/issue-triage-opencode/LOOP.md

@@ -0,0 +1,21 @@
+# Loop Configuration — Issue Triage (Opencode)
+
+## Active Loops
+
+| Pattern | Cadence | Status | Command |
+|---------|---------|--------|---------|
+| Issue Triage | 2h-1d | L1 propose-only | `opencode run "Run issue-triage" --agent loop-triage` via cron |
+
+## Human Gates
+- P0/P1 on auth, payments, security, public API: always human.
+- Duplicate proposals noted as "possible duplicate of #NNN" — never auto-close.
+- L2 auto-labels limited to allowlist.
+
+## Budget
+- Max sub-agent spawns per run: 0 (L1), 1 (L2).
+- Early exit if no new issues since last run.
+
+## Links
+- Pattern: [issue-triage](../../patterns/issue-triage.md)
+- Example: [examples/opencode/issue-triage.md](../../examples/opencode/issue-triage.md)
+- Safety: [docs/safety.md](../../docs/safety.md)

package/starters/issue-triage-opencode/README.md

@@ -0,0 +1,43 @@
+# Issue Triage — Opencode Starter
+
+Clone-and-run scaffold for the **Issue Triage** pattern with opencode. Keep the issue queue legible so morning triage always knows the top five.
+
+## Quick Start
+
+```bash
+npx @cobusgreyling/loop-init . --pattern issue-triage --tool opencode
+```
+
+Or copy manually:
+
+```bash
+cp -r starters/issue-triage-opencode/skills .
+cp starters/issue-triage-opencode/AGENTS.md .
+cp starters/issue-triage-opencode/LOOP.md .
+cp starters/issue-triage-opencode/issue-triage-state.md.example issue-triage-state.md
+cp starters/issue-triage-opencode/opencode.json.example opencode.json
+```
+
+Start (L1 propose-only, week 1):
+
+```bash
+opencode run \
+  "Run skills/issue-triage/SKILL.md. Scan open issues since last run. Update issue-triage-state.md with top 5, proposed labels, and needs-human bucket. Propose only — do not apply labels or close issues." \
+  --title "Issue triage"
+```
+
+## What's Included
+
+| File | Purpose |
+|------|---------|
+| `issue-triage-state.md.example` | State spine (issue queue health) |
+| `skills/issue-triage/SKILL.md` | Issue-focused triage skill |
+| `AGENTS.md` | Always-on safety rules |
+| `LOOP.md` | Cadence, gates, budget |
+| `opencode.json.example` | Named agent definitions |
+
+## Next Steps
+
+- [patterns/issue-triage.md](../../patterns/issue-triage.md)
+- [examples/opencode/issue-triage.md](../../examples/opencode/issue-triage.md)
+- [docs/loop-design-checklist.md](../../docs/loop-design-checklist.md)

package/starters/issue-triage-opencode/issue-triage-state.md.example

@@ -0,0 +1,11 @@
+# Issue Triage State
+Last run: 2026-06-20 09:00 UTC
+Open actionable: 0
+New since last run: 0
+Needs human: 0
+
+## Top 5 (by loop score)
+- <!-- #NNN (type, priority) — summary — proposed labels -->
+
+## Proposed Labels (not applied — L1)
+- <!-- #NNN: label1, label2 -->

package/starters/issue-triage-opencode/opencode.json.example

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "agent": {
+    "issue-triage": {
+      "name": "issue-triage",
+      "description": "Issue triage loop. Reads issue-triage-state.md, scans open issues, and proposes labels and priorities. Propose-only in L1 mode.",
+      "mode": "primary",
+      "prompt": "Read AGENTS.md, LOOP.md, issue-triage-state.md, and skills/issue-triage/SKILL.md. Scan open issues since last run. Update state with top 5, proposed labels, and needs-human bucket. Propose only — do not apply labels or close issues.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "implementer": {
+      "name": "implementer",
+      "description": "L2 implementer for auto-labeling allowlisted labels.",
+      "mode": "subagent",
+      "prompt": "Apply only allowlisted labels (area:*, needs-repro, needs-info, duplicate?) after verifier passes. Never auto-apply P0, P1, security, or breaking-change labels. Never close or comment without human approval.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "verifier": {
+      "name": "verifier",
+      "description": "Checker agent for issue label proposals. APPROVE or REJECT only.",
+      "mode": "subagent",
+      "prompt": "Verify proposed labels are in the allowlist. Confirm no P0/P1/security labels are being auto-applied. Do not edit. APPROVE or REJECT.",
+      "permission": {
+        "bash": "ask",
+        "edit": "deny"
+      }
+    }
+  }
+}

package/starters/issue-triage-opencode/skills/issue-triage/SKILL.md

@@ -0,0 +1,33 @@
+---
+name: issue-triage
+description: >
+  Scan open issues and discussions, deduplicate, prioritize,
+  and propose labels. Provides a clean actionable queue.
+user_invocable: true
+---
+
+# Issue Triage Skill
+
+You are an issue triage agent. Keep the issue queue legible.
+
+## Scan Sources
+
+- Open issues and discussions
+- Prior state in `issue-triage-state.md`
+- Labels, milestones, linked PRs
+
+## Output
+
+Update `issue-triage-state.md` with:
+
+- Top 5 prioritized items (P0-P3)
+- Proposed labels per item
+- Needs-human bucket for ambiguous or security-sensitive items
+- Possible duplicates
+
+## Rules
+
+- L1: propose only — never auto-label, auto-close, or auto-comment.
+- P0/P1 on auth, payments, security, public API: always escalate.
+- Duplicates: note as "possible duplicate of #NNN" — never auto-close.
+- L2 auto-labels limited to curated allowlist.

package/starters/minimal-loop-opencode/AGENTS.md

@@ -0,0 +1,23 @@
+# AGENTS.md — Opencode Minimal Loop
+
+These rules are loaded by opencode before loop work.
+
+## Loop Mode
+
+- Start in L1 report-only mode.
+- Read `STATE.md` before any triage.
+- Update `STATE.md` after every loop run.
+- Do not edit source code until the human explicitly enables L2.
+
+## Safety
+
+- Never push or merge without human approval.
+- Never edit `.env`, `.env.*`, `auth/`, `payments/`, `secrets/`, or `credentials/`.
+- Use a git worktree for every code-changing attempt.
+- Max 3 fix attempts per item; escalate after that.
+
+## Verification
+
+- For L2+ changes, dispatch a verifier sub-agent after implementation.
+- Run the project's documented tests before proposing a fix.
+- Record test evidence in `STATE.md`.

package/starters/minimal-loop-opencode/LOOP.md

@@ -0,0 +1,33 @@
+# Loop Configuration — Minimal Triage (Opencode)
+
+## Active Loops
+
+| Pattern | Cadence | Status | Command |
+|---------|---------|--------|---------|
+| Daily Triage | 1d | L1 report-only | `opencode run "Run loop-triage" --agent loop-triage` via cron/systemd |
+
+## Human Gates
+
+- No auto-fix until L2 checklist complete.
+- All high-risk paths require human review (see docs/safety.md denylist).
+
+## Worktrees
+
+- Use an explicit `git worktree` and run opencode with `--dir <worktree>` for implementer runs (L2+).
+- One worktree per fix attempt; discard after verifier REJECT.
+
+## Connectors (MCP)
+
+- MCP optional for L1 report-only loops.
+- For L2+: GitHub MCP can read CI/issues; scope connectors to read + comment until trusted.
+
+## Budget
+
+- Max sub-agent spawns per run: 0 (L1).
+- Review STATE.md daily.
+- If token spend hits 80% of daily cap, switch to report-only.
+
+## Links
+
+- Pattern: [daily-triage](../../patterns/daily-triage.md)
+- Checklist: [loop-design-checklist](../../docs/loop-design-checklist.md)

package/starters/minimal-loop-opencode/README.md

@@ -0,0 +1,50 @@
+# Minimal Loop Starter — Opencode
+
+Clone this into your project root to run a **report-only daily triage loop** (L1 readiness) with opencode.
+
+## Quick Start
+
+1. Scaffold (recommended):
+
+   ```bash
+   npx @cobusgreyling/loop-init . --pattern daily-triage --tool opencode
+   ```
+
+   Or copy manually:
+
+   ```bash
+   cp -r starters/minimal-loop-opencode/skills .
+   cp starters/minimal-loop-opencode/AGENTS.md .
+   cp starters/minimal-loop-opencode/LOOP.md .
+   cp starters/minimal-loop-opencode/STATE.md.example STATE.md
+   cp starters/minimal-loop-opencode/opencode.json.example opencode.json
+   ```
+
+2. Customize `STATE.md` project name.
+
+3. Start the loop:
+
+   ```bash
+   opencode run "Run loop-triage. Read STATE.md first. Append high-priority and watch items. Update Last run timestamp. Do not auto-fix anything in week one." --agent loop-triage
+   ```
+
+4. Read `STATE.md` each morning for 1-2 weeks. Tune the triage skill.
+
+5. When triage quality is good, add `minimal-fix` from `templates/SKILL.md.minimal-fix` and enable small auto-wins with a verifier agent in a worktree.
+
+## What's Included
+
+| File | Purpose |
+|------|---------|
+| `STATE.md.example` | State spine template |
+| `skills/loop-triage/SKILL.md` | Triage skill |
+| `AGENTS.md` | Always-on project rules for opencode |
+| `LOOP.md` | Loop config doc for your team |
+| `opencode.json.example` | Example opencode agent definitions |
+
+## Next Steps
+
+- [Loop Design Checklist](../../docs/loop-design-checklist.md)
+- [Daily Triage pattern](../../patterns/daily-triage.md)
+- [Opencode example](../../examples/opencode/daily-triage.md)
+- Run `npx @cobusgreyling/loop-audit .` for readiness score

package/starters/minimal-loop-opencode/STATE.md.example

@@ -0,0 +1,12 @@
+# Loop State — My Project
+
+Last run: never
+
+## High Priority (loop is acting or waiting on human)
+
+## Watch List
+
+## Recent Noise (ignored this run)
+
+---
+Run log: —

package/starters/minimal-loop-opencode/opencode.json.example

@@ -0,0 +1,35 @@
+{
+  "$schema": "https://opencode.ai/config.json",
+  "agent": {
+    "loop-triage": {
+      "name": "loop-triage",
+      "description": "Report-only daily triage loop. Reads STATE.md, updates high-priority items, and does not edit source code in L1 mode.",
+      "mode": "primary",
+      "prompt": "Read AGENTS.md, LOOP.md, STATE.md, and skills/loop-triage/SKILL.md. Run report-only triage. Update STATE.md. Do not edit source code unless the human has explicitly enabled L2.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "implementer": {
+      "name": "implementer",
+      "description": "L2 implementer agent for minimal scoped fixes inside an isolated worktree.",
+      "mode": "subagent",
+      "prompt": "Implement only the requested minimal fix. Stay within the supplied worktree, respect AGENTS.md and LOOP.md, run documented tests, and stop for human approval on denylisted paths.",
+      "permission": {
+        "bash": "ask",
+        "edit": "ask"
+      }
+    },
+    "verifier": {
+      "name": "verifier",
+      "description": "Checker agent for L2+ changes. Reviews diffs and test evidence; APPROVE or REJECT only.",
+      "mode": "subagent",
+      "prompt": "Review the supplied diff or worktree summary against project rules, tests, and docs/safety.md. Do not edit files. Respond with APPROVE or REJECT and concise evidence.",
+      "permission": {
+        "bash": "ask",
+        "edit": "deny"
+      }
+    }
+  }
+}

package/starters/minimal-loop-opencode/skills/loop-triage/SKILL.md

@@ -0,0 +1,59 @@
+---
+name: loop-triage
+description: >
+  Triage recent changes, CI failures, issues, and conversations.
+  Produces a concise, actionable findings report suitable for a loop to consume.
+  Writes structured output to a state file or issue tracker.
+user_invocable: true
+---
+
+# Loop Triage Skill
+
+You are an expert engineering triage agent. Your job is to produce a clean, prioritized list of things that a loop should consider acting on.
+
+## Inputs (the loop will provide these)
+
+- Recent CI / test failures (last 24h)
+- Open issues / tickets assigned to the team
+- Recent commits on main (last 24-48h)
+- Any chat threads the loop has visibility into
+- The current state file (what the loop already knows about)
+
+## Output Format
+
+Produce a markdown report with these sections:
+
+### 1. High-Priority Items (act on these)
+
+- Clear, one-line description
+- Why it matters (impact, risk, or customer pain)
+- Suggested next action for the loop (for example, "draft minimal fix in isolated worktree")
+- Rough effort estimate
+
+### 2. Watch Items (monitor, do not act yet)
+
+- Same format but lower urgency
+
+### 3. Noise / Ignore
+
+- Brief list of things the loop looked at and decided were not worth action
+
+### 4. State Updates
+
+- Any facts the loop should remember for the next run (for example, "PR #1234 now has 2 approvals")
+
+## Rules
+
+- Be brutally concise. The loop and the human reading the state will thank you.
+- Only put something in "High-Priority" if a reasonable engineer would want to know about it today.
+- When in doubt, put it in Watch or Noise rather than creating work.
+- Never propose architectural overhauls during triage — this skill is for signal, not invention.
+- Respect the project's existing skills and conventions (they will be provided in context).
+
+## Example Invocation (in an opencode loop)
+
+```bash
+opencode run "Call loop-triage and append high-priority items to STATE.md. Do not edit code."
+```
+
+The triage skill should be the "eyes" of the loop. Keep it focused and honest.

package/starters/post-merge-cleanup-opencode/AGENTS.md

@@ -0,0 +1,15 @@
+# AGENTS.md — Post-Merge Cleanup (Opencode)
+
+## Loop Mode
+- Start in L1 report-only mode.
+- Read `post-merge-state.md` before any scan.
+- Run off-peak (evening) to avoid colliding with active branches.
+
+## Safety
+- Never auto-fix architectural debt — file a ticket.
+- Denylist paths always go to a human.
+- Max 2 fix attempts per run.
+
+## Verification
+- For L2+ changes, verifier confirms fix scope and tests.
+- Record attempt evidence in state.

package/starters/post-merge-cleanup-opencode/LOOP.md

@@ -0,0 +1,26 @@
+# Loop Configuration — Post-Merge Cleanup (Opencode)
+
+## Active Loops
+
+| Pattern | Cadence | Status | Command |
+|---------|---------|--------|---------|
+| Post-Merge Cleanup | 1d | L1 report-only | `opencode run "Run post-merge-scan"` via cron (off-peak) |
+
+## Human Gates
+- Architectural debt is ticketed, never auto-fixed.
+- Denylist paths always human.
+- Max 2 fix attempts per run.
+
+## Worktrees
+- Use `git worktree` for any code-change attempt (L2+).
+- One worktree per fix; discard after REJECT.
+
+## Budget
+- Max sub-agent spawns per run: 0 (L1), 2 (L2).
+- Run off-peak (evening) to avoid collision.
+- Pause if token budget exceeded.
+
+## Links
+- Pattern: [post-merge-cleanup](../../patterns/post-merge-cleanup.md)
+- Example: [examples/opencode/post-merge-cleanup.md](../../examples/opencode/post-merge-cleanup.md)
+- Safety: [docs/safety.md](../../docs/safety.md)