@danmoisan/drm-copilot-mcp 1.1.6 → 1.1.8

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusConfig.psm1

@@ -28,12 +28,14 @@
         rely on the PSCustomObject conversion this module performs; no other
         shape is accepted.
       - Every returned collection is deduplicated and ordinally sorted.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force -ErrorAction Stop
 
 # Keys read from the parsed config/blast-radius.json truth table.
 $script:ConfigSharedSurfaceKey = 'shared_surfaces'

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusExtraction.psm1

@@ -33,16 +33,18 @@
       - Every returned collection is deduplicated and ordinally sorted via
         [StringComparer]::Ordinal, so identical inputs produce identical output
         in both languages regardless of the current culture.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Get-OrdinalSortedEntry moved to BlastRadiusGlob.psm1, where its sibling ordinal
 # primitive Get-OrdinalSmallestEntry already lives, so this module stays within
 # the 500-line limit (issue #452). The import keeps every pre-existing call site
 # and test source-compatible, and introduces no cycle because the Glob module
 # imports no sibling.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force -ErrorAction Stop
 
 # Test-MultipleFeatureFolderSpan moved to BlastRadiusTokenShape.psm1, joining the
 # new Test-PlaceholderMarker predicate that could not be added here: this module
@@ -52,7 +54,7 @@ Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1')
 # introduces no cycle, because the TokenShape module imports no sibling. This
 # follows the same re-import-and-re-export pattern used above for the relocated
 # ordinal-sort helper.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusTokenShape.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusTokenShape.psm1') -Force -ErrorAction Stop
 
 # Plan-structure patterns. The regex text mirrors the Python constants so radius
 # derivation and the plan validator can never disagree about which lines are

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusGlob.psm1

@@ -31,9 +31,11 @@
         newline in .NET.
       - Comparisons and ordering use [StringComparer]::Ordinal and
         [string]::CompareOrdinal so results do not vary with the current culture.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Wildcards that make a path entry a pattern rather than a file. The question
 # mark is included because the subsumption helper treats it as a pattern;

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusNormalization.psm1

@@ -27,13 +27,15 @@
       - An empty mandate-read collection excludes nothing, so a truth table with
         no mandate_reads key reproduces pre-change behaviour exactly.
       - Every returned collection is deduplicated and ordinally sorted.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force -ErrorAction Stop
 
 # Markdown ATX heading pattern used to locate spec interface sections. Relocated
 # with Get-ContractIdentifier: $script: scope is per module, so the variable must

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusTokenShape.psm1

@@ -49,9 +49,11 @@
         throws for any input, because the classifier that calls them runs over
         every inline-code span in a document and a throw would abort an entire
         derivation over one stray span.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Placeholder and interpolation markers. A token carrying any of these was
 # written to document a shape, not to name a file, so it can never be a write

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusValidation.psm1

@@ -30,14 +30,16 @@
         explicitly because the Python reference rejects it.
       - Finding message text is a contract literal shared with the Python
         reference and the cross-language fixture corpus; do not reword it.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusNormalization.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusNormalization.psm1') -Force -ErrorAction Stop
 
 # Finding vocabulary. These strings are contract literals consumed by the
 # downstream parallel schema and planner features.

package/resources/claude-customizations/.claude/lib/codex-routing/CodexDeployment.psm1

@@ -36,9 +36,11 @@
 
     The function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The complexity-band vocabulary, ordered lowest to highest. Pinned to BAND_ORDER
 # in scripts/dev_tools/compute_complexity_floor.py.

package/resources/claude-customizations/.claude/lib/codex-routing/CodexTopology.psm1

@@ -47,9 +47,11 @@
 
     The function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The three permitted execution contexts, the sorted tuple rendering the Python
 # message interpolates, and the two contexts that mark epic child work.

package/resources/claude-customizations/.claude/lib/discovery-validation/DiscoveryValidation.psm1

@@ -29,29 +29,29 @@
     OR on non-empty output, so the previous Python CLI's success line
     ("<type> validation passed: <path>") turned a PASSING validation into a DENY.
 
-    PARITY with `validate_discovery_profile.py` / `validate_discovery_schema_artifacts.py`.
-    Error families are preserved: `invalid JSON (...)`,
-    `JSON root must be an object for validation`, `schema resolution failed (...)`,
-    `Profile document is empty.`, `Profile document root must be a mapping.`,
-    `Missing required field: <field>.` Schema location resolves solely from each
-    artifact's own `$schema`, as in the reference; the type-to-file table below is
-    documentation and artifact-type validation only. Deliberate divergences: an
-    `http(s)://` `$schema` is NOT fetched (no guaranteed destination network, so a
-    non-`file` scheme is reported fail-closed in the `schema resolution failed (...)`
-    family), and `file://` resolves through `[uri]::LocalPath` rather than the
-    reference's `Path(parsed.path)`, which mishandles a Windows `file:///C:/...` path.
-    Unavoidable divergence: per-violation wording comes from `Test-Json`, not
-    `jsonschema`, so violation strings differ while family and verdict match. The
-    profile check reproduces the placeholder contract without a YAML parser (PowerShell
-    ships none); see `Get-DiscoveryProfileValidationError` for what is and is not
-    detected.
+    PARITY with `validate_discovery_profile.py` / `validate_discovery_schema_artifacts.py`. Error
+    families are preserved: `invalid JSON (...)`, `JSON root must be an object for validation`,
+    `schema resolution failed (...)`, `Profile document is empty.`,
+    `Profile document root must be a mapping.`, `Missing required field: <field>.` Schema
+    location resolves solely from each artifact's own `$schema`, as in the reference; the
+    type-to-file table below is documentation and artifact-type validation only. Deliberate
+    divergences: an `http(s)://` `$schema` is NOT fetched (no guaranteed destination network,
+    so a non-`file` scheme is reported fail-closed in the `schema resolution failed (...)`
+    family), and `file://` resolves through `[uri]::LocalPath` rather than the reference's
+    `Path(parsed.path)`, which mishandles a Windows `file:///C:/...` path. Unavoidable
+    divergence: per-violation wording comes from `Test-Json`, not `jsonschema`, so violation
+    strings differ while family and verdict match. The profile check reproduces the
+    placeholder contract without a YAML parser (PowerShell ships none); see
+    `Get-DiscoveryProfileValidationError` for what is and is not detected.
 .EXAMPLE
     Invoke-DiscoveryArtifactValidation -ValidatorArgs @('evidence-reference', $path)
 
     Returns @{ ExitCode = 0; Output = '' } when the artifact conforms.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Schema-governed artifact types mapped to their filenames under `schemas/discovery/v1/`.
 # Verified against `validate_discovery_artifacts.py`: `runtime-scenario`,

package/resources/claude-customizations/.claude/lib/hook-payload/HookPayload.psm1

@@ -37,9 +37,11 @@
     Compatible with PowerShell 7+. No external module dependencies, no filesystem
     access, no subprocess, no network, and no wall-clock read. Mirrored
     byte-identically under extensions/drm-copilot/resources/claude-customizations/.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Anomaly codes. These are the only values Get-ClaudeHookPayloadAnomalyReason maps.
 $script:AnomalyEmptyPayload = 'EmptyPayload'

package/resources/claude-customizations/.claude/lib/mermaid/MermaidGrammar.psm1

@@ -28,9 +28,11 @@
     policy for free-text and plugin-backed grammars. Brackets are structural only
     where they delimit node shapes or attribute blocks: a gantt task named
     `Deploy (phase 1` must never be blocked as unbalanced.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 $script:MermaidGrammarVersion = '11.17.0'
 $script:MermaidGrammarSourceUrl = 'https://mermaid.js.org/intro/syntax-reference.html'

package/resources/claude-customizations/.claude/lib/mermaid/MermaidLineScanner.psm1

@@ -30,11 +30,13 @@
     Pinned to Mermaid 11.17.0 through MermaidGrammar.psm1. Every function is
     pure: no filesystem, subprocess, network, or wall-clock access, and no input
     is mutated.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidGrammar.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidGrammar.psm1') -Force -ErrorAction Stop
 
 # Arrow-token affix tables. An arrow candidate is a run of `-`, `=`, `.`, or `~`
 # (the "core") optionally extended by one of these affixes on either side. The

package/resources/claude-customizations/.claude/lib/mermaid/MermaidMarkdownFences.psm1

@@ -32,9 +32,11 @@
     Pinned to Mermaid 11.17.0 through MermaidGrammar.psm1. Every function is pure:
     no filesystem, subprocess, network, or wall-clock access, and no input is
     mutated.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The marker text must be exactly `mermaid-validator: ignore` and is
 # case-sensitive. Whitespace is permitted around the line, around the comment

package/resources/claude-customizations/.claude/lib/mermaid/MermaidValidation.psm1

@@ -37,13 +37,15 @@
     no filesystem, subprocess, network, or wall-clock access, and no input is
     mutated. CRLF, CR, and LF inputs produce identical verdicts because line
     splitting is normalized once in MermaidMarkdownFences.psm1.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidGrammar.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidLineScanner.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidMarkdownFences.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidGrammar.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidLineScanner.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidMarkdownFences.psm1') -Force -ErrorAction Stop
 
 function Get-MermaidFinding {
     <#

package/resources/claude-customizations/.claude/lib/model-routing/ModelRouting.psm1

@@ -18,9 +18,11 @@
     model_budget) by a static config-parity Pester test, and the Python modules
     remain the validator's authoritative reference. This module is one half of a
     two-language mirror; it never imports validator logic.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The fixed complexity-band vocabulary, ordered from lowest to highest rigor.
 # The array order defines "higher" and "lower" band comparisons used by the

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorState.psm1

@@ -27,9 +27,11 @@
     (Invoke-OrchestratorStatePreflight) consumed by
     .claude/hooks/enforce-pr-author-skill.ps1. Its default seam runs the portable
     in-process validation and names no interpreter on any code path.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The canonical top-level checkpoint keys required by the primary validator.
 # Pinned to REQUIRED_STATE_KEYS in scripts/dev_tools/validate_orchestrator_state.py.
@@ -139,6 +141,15 @@ function Get-OrchestratorStateCheckpoint {
           - Ok    (bool): $true when the file exists and parsed to a JSON object.
           - State (object): the parsed PSCustomObject on success, otherwise $null.
           - Error (string): a non-empty failure message on failure, otherwise ''.
+    .NOTES
+        VALUE CONTRACT. An ISO-8601-valued key in the returned State is date-coerced by ConvertFrom-Json
+        into System.DateTime, not the string the checkpoint holds. The module-declared ISO-8601 key
+        families are last_updated, started_at, completed_at, and verified_at. Every current validation
+        is presence-only, so the coercion is unobservable today. Two future exposures make it worth
+        stating: value comparison in OrchestratorStateCheckpointValue.psm1, which reports a mismatch
+        when one side is a string and the other is not, and the [string] $ComputedAt binding in
+        BlastRadius.psm1, which would coerce a DateTime to a culture-dependent string with no error.
+        A post-parse repair back to a string is PROHIBITED as lossy in both offset and format.
     #>
     [CmdletBinding()]
     [OutputType([hashtable])]

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCheckpointValue.psm1

@@ -23,9 +23,11 @@
     Every function is pure: it reads no file, starts no process, and never mutates
     its input. The module imports nothing, so it is the leaf of the parity family's
     import graph and cannot participate in a load-order cycle.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The numeric CLR types a JSON number can deserialize to, used by the Python
 # zero-equivalence predicate so a value is compared numerically, not by type.

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCodexModelReceipts.psm1

@@ -22,16 +22,18 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the single Codex deployment
 # resolver, resolved relative to this module's directory so both imports travel
 # with the pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 $script:CodexDeploymentModulePath = Join-Path -Path (Join-Path -Path $PSScriptRoot -ChildPath '..') -ChildPath (Join-Path -Path 'codex-routing' -ChildPath 'CodexDeployment.psm1')
-Import-Module $script:CodexDeploymentModulePath -Force
+Import-Module $script:CodexDeploymentModulePath -Force -ErrorAction Stop
 
 # The checkpoint key this family validates.
 $script:CODEX_MODEL_ROUTING_RECEIPTS_KEY = 'codex_model_routing_receipts'

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCodexTopologyReceipts.psm1

@@ -25,16 +25,18 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the single Codex topology
 # resolver, resolved relative to this module's directory so both imports travel
 # with the pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 $script:CodexTopologyModulePath = Join-Path -Path (Join-Path -Path $PSScriptRoot -ChildPath '..') -ChildPath (Join-Path -Path 'codex-routing' -ChildPath 'CodexTopology.psm1')
-Import-Module $script:CodexTopologyModulePath -Force
+Import-Module $script:CodexTopologyModulePath -Force -ErrorAction Stop
 
 # The checkpoint key this family validates.
 $script:CODEX_TOPOLOGY_RECEIPTS_KEY = 'codex_topology_receipts'

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCompletion.psm1

@@ -44,21 +44,23 @@
     receipt still yields error text containing the literal token
     `model_routing_receipts`, so the completion hook maps the failure to its
     `MODEL_ROUTING_BLOCKED:` block reason.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the sibling shared module, the portable model-routing formulas, and the
 # ported check families, resolved relative to this module's directory so every
 # import travels with the pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorState.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorState.psm1') -Force -ErrorAction Stop
 $script:ModelRoutingModulePath = Join-Path -Path (Join-Path -Path $PSScriptRoot -ChildPath '..') -ChildPath (Join-Path -Path 'model-routing' -ChildPath 'ModelRouting.psm1')
-Import-Module $script:ModelRoutingModulePath -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateModelReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateUnconditional.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCompletionChecks.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingContract.psm1') -Force
+Import-Module $script:ModelRoutingModulePath -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateModelReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateUnconditional.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCompletionChecks.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingContract.psm1') -Force -ErrorAction Stop
 
 # The two optional keys the M3 leg re-validates, guarded on key presence so an
 # absent key does not emit a spurious "must be a list when present" error.

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCompletionChecks.psm1

@@ -33,15 +33,17 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the pinned routing matrix,
 # resolved relative to this module's directory so both imports travel with the
 # pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingMatrix.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingMatrix.psm1') -Force -ErrorAction Stop
 
 # The six step-status keys, in report order.
 $script:STEP_STATUS_KEYS = @(

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateModelReceipts.psm1

@@ -19,16 +19,18 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input. Each check returns a string array, empty when the block is valid.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the two reference formulas,
 # resolved relative to this module's directory so the imports travel with the
 # pushed-down pack regardless of the consumer repository's working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 $script:ModelRoutingModulePath = Join-Path -Path (Join-Path -Path $PSScriptRoot -ChildPath '..') -ChildPath (Join-Path -Path 'model-routing' -ChildPath 'ModelRouting.psm1')
-Import-Module $script:ModelRoutingModulePath -Force
+Import-Module $script:ModelRoutingModulePath -Force -ErrorAction Stop
 
 # The complexity-band vocabulary, ordered lowest to highest. Pinned to BAND_ORDER
 # in scripts/dev_tools/compute_complexity_floor.py and to the identical ordering

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateReceipts.psm1

@@ -27,14 +27,16 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input. Each check returns a string array, empty when the block is valid.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives, resolved relative to this
 # module's directory so the import travels with the pushed-down pack regardless
 # of the consumer repository's working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 
 # The eight keys every list-form delegation receipt must carry. Pinned to
 # REQUIRED_RECEIPT_KEYS in scripts/dev_tools/validate_orchestrator_state.py.

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateRoutingContract.psm1

@@ -45,15 +45,17 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the pinned routing matrix,
 # resolved relative to this module's directory so both imports travel with the
 # pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingMatrix.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingMatrix.psm1') -Force -ErrorAction Stop
 
 # The promotion-entry MCP tools and the promotion type that triggers substitution.
 $script:FEATURE_PROMOTION_ENTRY_TOOL = 'new_potential_entry'

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateRoutingMatrix.psm1

@@ -33,13 +33,15 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives, resolved relative to this
 # module's directory so the import travels with the pushed-down pack.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 
 # The pinned routing-matrix subset. Each route records the two gate flags and the
 # three required-name lists the completion checks consume. A gate flag of $null

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateUnconditional.psm1

@@ -37,20 +37,22 @@
 
     The function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the four leaf check modules eagerly. None of them imports this module,
 # so this import graph has no cycle. OrchestratorState.psm1 is deliberately NOT
 # imported here; it is loaded lazily inside the function, because the preflight
 # path in that module imports this one and an eager import in both directions
 # would couple their load order.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateModelReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCodexModelReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCodexTopologyReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateModelReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCodexModelReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCodexTopologyReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 
 # The checkpoint key whose value carries the delegation receipts. It is read with
 # the Python `is not None` guard rather than a presence guard, matching the

package/resources/claude-customizations/.claude/lib/requirements/GeneratedDocumentCounters.psm1

@@ -0,0 +1,44 @@
+<#
+.SYNOPSIS
+    Markdown checkbox counting for generated requirement documents.
+
+.DESCRIPTION
+    Provides Get-NamedSectionCheckboxCount, a pure function that counts the
+    markdown checkbox items contained by a named heading section. It reads no
+    file, starts no process, and never mutates its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
+#>
+
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+
+<#
+.SYNOPSIS
+Counts markdown checkbox items contained by a named heading section.
+#>
+function Get-NamedSectionCheckboxCount {
+    [CmdletBinding()]
+    [OutputType([int])]
+    param(
+        [Parameter(Mandatory = $true)][AllowEmptyString()][string] $Document,
+        [Parameter(Mandatory = $true)][string] $Heading
+    )
+
+    $headingPattern = '^(?<marks>#{1,6})\s+' + [regex]::Escape($Heading) + '\s*$'
+    $inside = $false
+    $level = 0
+    $count = 0
+    foreach ($line in ($Document -split "`r?`n")) {
+        if (-not $inside) {
+            $match = [regex]::Match($line, $headingPattern)
+            if ($match.Success) { $inside = $true; $level = $match.Groups['marks'].Value.Length }
+            continue
+        }
+        $nextHeading = [regex]::Match($line, '^(?<marks>#{1,6})\s+')
+        if ($nextHeading.Success -and $nextHeading.Groups['marks'].Value.Length -le $level) { break }
+        if ($line -match '^\s*[-*]\s+\[[ xX]\]\s+') { $count++ }
+    }
+    return $count
+}
+
+Export-ModuleMember -Function Get-NamedSectionCheckboxCount

package/resources/claude-customizations/.claude/settings.json

@@ -239,6 +239,15 @@
           }
         ]
       },
+      {
+        "matcher": "prd-feature",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "pwsh -NoProfile -File .claude/hooks/validate-prd-feature-output.ps1"
+          }
+        ]
+      },
       {
         "matcher": "pr-author",
         "hooks": [

package/resources/claude-customizations/.claude/skills/acceptance-criteria-tracking/SKILL.md

@@ -35,6 +35,8 @@ When multiple AC source files exist, track checkboxes in **each** applicable fil
 
 ## AC Identification
 
+For generated-document summaries, call `.claude/lib/requirements/GeneratedDocumentCounters.psm1` and supply `Acceptance Criteria` as the named section. The counter begins after that heading and ends at the next equal-or-shallower heading. Do not use `scripts/dev_tools/plan_progress_report.py`, which counts plan tasks rather than generated requirements criteria.
+
 Acceptance criteria are markdown checkbox items within AC source files.
 
 Deterministic heading rule:

package/resources/claude-customizations/.claude/skills/atomic-plan-contract/SKILL.md

@@ -155,6 +155,10 @@ Declaration requirement. Every plan handoff MUST carry exactly one of these two
 
 ## Preflight Validation (Planner ↔ Executor)
 
+### Planner Internal Review Record
+
+Before executor preflight, the planner must emit exactly one bounded record between `PLANNER-INTERNAL-REVIEW: PASS` and the existing `PREFLIGHT:` signal. The record requires exactly one passing declaration each for `CITATION-TO-TREE`, `AC-TRACEABILITY`, and `SCOPE-BOUNDARY`; one or more `CITATION: <repository-relative path> | <nonblank locator>` entries; exactly one `AC-INVENTORY:` declaration containing unique nonblank IDs; one `AC-MAPPING: <ID> | IMPLEMENTATION: <nonblank> | TESTS: <nonblank> | EVIDENCE: <nonblank>` for every and only inventory ID; and exactly one `UNRESOLVED-GAPS: NONE`. Missing, blank, duplicate, non-passing, out-of-bounds, or inventory/mapping-disagreeing declarations block handoff. If review cannot pass, emit `SELF-REVIEW: BLOCKED` and do not hand the plan to preflight. `SELF-REVIEW: RE-DERIVED THIS PASS` remains distinct and does not replace executor clearance.
+
 When validating or handing off plans for execution:
 - Use the directive line: `DIRECTIVE: PREFLIGHT VALIDATION ONLY`.
 - Require one of the exact signals: