@danmoisan/drm-copilot-mcp 1.1.7 → 1.1.9

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusConfig.psm1

@@ -28,12 +28,14 @@
         rely on the PSCustomObject conversion this module performs; no other
         shape is accepted.
       - Every returned collection is deduplicated and ordinally sorted.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force -ErrorAction Stop
 
 # Keys read from the parsed config/blast-radius.json truth table.
 $script:ConfigSharedSurfaceKey = 'shared_surfaces'

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusExtraction.psm1

@@ -33,16 +33,18 @@
       - Every returned collection is deduplicated and ordinally sorted via
         [StringComparer]::Ordinal, so identical inputs produce identical output
         in both languages regardless of the current culture.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Get-OrdinalSortedEntry moved to BlastRadiusGlob.psm1, where its sibling ordinal
 # primitive Get-OrdinalSmallestEntry already lives, so this module stays within
 # the 500-line limit (issue #452). The import keeps every pre-existing call site
 # and test source-compatible, and introduces no cycle because the Glob module
 # imports no sibling.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force -ErrorAction Stop
 
 # Test-MultipleFeatureFolderSpan moved to BlastRadiusTokenShape.psm1, joining the
 # new Test-PlaceholderMarker predicate that could not be added here: this module
@@ -52,7 +54,7 @@ Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1')
 # introduces no cycle, because the TokenShape module imports no sibling. This
 # follows the same re-import-and-re-export pattern used above for the relocated
 # ordinal-sort helper.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusTokenShape.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusTokenShape.psm1') -Force -ErrorAction Stop
 
 # Plan-structure patterns. The regex text mirrors the Python constants so radius
 # derivation and the plan validator can never disagree about which lines are

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusGlob.psm1

@@ -31,9 +31,11 @@
         newline in .NET.
       - Comparisons and ordering use [StringComparer]::Ordinal and
         [string]::CompareOrdinal so results do not vary with the current culture.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Wildcards that make a path entry a pattern rather than a file. The question
 # mark is included because the subsumption helper treats it as a pattern;

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusNormalization.psm1

@@ -27,13 +27,15 @@
       - An empty mandate-read collection excludes nothing, so a truth table with
         no mandate_reads key reproduces pre-change behaviour exactly.
       - Every returned collection is deduplicated and ordinally sorted.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force -ErrorAction Stop
 
 # Markdown ATX heading pattern used to locate spec interface sections. Relocated
 # with Get-ContractIdentifier: $script: scope is per module, so the variable must

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusTokenShape.psm1

@@ -49,9 +49,11 @@
         throws for any input, because the classifier that calls them runs over
         every inline-code span in a document and a throw would abort an entire
         derivation over one stray span.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Placeholder and interpolation markers. A token carrying any of these was
 # written to document a shape, not to name a file, so it can never be a write

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusValidation.psm1

@@ -30,14 +30,16 @@
         explicitly because the Python reference rejects it.
       - Finding message text is a contract literal shared with the Python
         reference and the cross-language fixture corpus; do not reword it.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusNormalization.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusExtraction.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusNormalization.psm1') -Force -ErrorAction Stop
 
 # Finding vocabulary. These strings are contract literals consumed by the
 # downstream parallel schema and planner features.

package/resources/claude-customizations/.claude/lib/codex-routing/CodexDeployment.psm1

@@ -36,9 +36,11 @@
 
     The function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The complexity-band vocabulary, ordered lowest to highest. Pinned to BAND_ORDER
 # in scripts/dev_tools/compute_complexity_floor.py.

package/resources/claude-customizations/.claude/lib/codex-routing/CodexTopology.psm1

@@ -47,9 +47,11 @@
 
     The function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The three permitted execution contexts, the sorted tuple rendering the Python
 # message interpolates, and the two contexts that mark epic child work.

package/resources/claude-customizations/.claude/lib/discovery-validation/DiscoveryValidation.psm1

@@ -29,29 +29,29 @@
     OR on non-empty output, so the previous Python CLI's success line
     ("<type> validation passed: <path>") turned a PASSING validation into a DENY.
 
-    PARITY with `validate_discovery_profile.py` / `validate_discovery_schema_artifacts.py`.
-    Error families are preserved: `invalid JSON (...)`,
-    `JSON root must be an object for validation`, `schema resolution failed (...)`,
-    `Profile document is empty.`, `Profile document root must be a mapping.`,
-    `Missing required field: <field>.` Schema location resolves solely from each
-    artifact's own `$schema`, as in the reference; the type-to-file table below is
-    documentation and artifact-type validation only. Deliberate divergences: an
-    `http(s)://` `$schema` is NOT fetched (no guaranteed destination network, so a
-    non-`file` scheme is reported fail-closed in the `schema resolution failed (...)`
-    family), and `file://` resolves through `[uri]::LocalPath` rather than the
-    reference's `Path(parsed.path)`, which mishandles a Windows `file:///C:/...` path.
-    Unavoidable divergence: per-violation wording comes from `Test-Json`, not
-    `jsonschema`, so violation strings differ while family and verdict match. The
-    profile check reproduces the placeholder contract without a YAML parser (PowerShell
-    ships none); see `Get-DiscoveryProfileValidationError` for what is and is not
-    detected.
+    PARITY with `validate_discovery_profile.py` / `validate_discovery_schema_artifacts.py`. Error
+    families are preserved: `invalid JSON (...)`, `JSON root must be an object for validation`,
+    `schema resolution failed (...)`, `Profile document is empty.`,
+    `Profile document root must be a mapping.`, `Missing required field: <field>.` Schema
+    location resolves solely from each artifact's own `$schema`, as in the reference; the
+    type-to-file table below is documentation and artifact-type validation only. Deliberate
+    divergences: an `http(s)://` `$schema` is NOT fetched (no guaranteed destination network,
+    so a non-`file` scheme is reported fail-closed in the `schema resolution failed (...)`
+    family), and `file://` resolves through `[uri]::LocalPath` rather than the reference's
+    `Path(parsed.path)`, which mishandles a Windows `file:///C:/...` path. Unavoidable
+    divergence: per-violation wording comes from `Test-Json`, not `jsonschema`, so violation
+    strings differ while family and verdict match. The profile check reproduces the
+    placeholder contract without a YAML parser (PowerShell ships none); see
+    `Get-DiscoveryProfileValidationError` for what is and is not detected.
 .EXAMPLE
     Invoke-DiscoveryArtifactValidation -ValidatorArgs @('evidence-reference', $path)
 
     Returns @{ ExitCode = 0; Output = '' } when the artifact conforms.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Schema-governed artifact types mapped to their filenames under `schemas/discovery/v1/`.
 # Verified against `validate_discovery_artifacts.py`: `runtime-scenario`,

package/resources/claude-customizations/.claude/lib/hook-payload/HookPayload.psm1

@@ -37,9 +37,11 @@
     Compatible with PowerShell 7+. No external module dependencies, no filesystem
     access, no subprocess, no network, and no wall-clock read. Mirrored
     byte-identically under extensions/drm-copilot/resources/claude-customizations/.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Anomaly codes. These are the only values Get-ClaudeHookPayloadAnomalyReason maps.
 $script:AnomalyEmptyPayload = 'EmptyPayload'

package/resources/claude-customizations/.claude/lib/mermaid/MermaidGrammar.psm1

@@ -28,9 +28,11 @@
     policy for free-text and plugin-backed grammars. Brackets are structural only
     where they delimit node shapes or attribute blocks: a gantt task named
     `Deploy (phase 1` must never be blocked as unbalanced.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 $script:MermaidGrammarVersion = '11.17.0'
 $script:MermaidGrammarSourceUrl = 'https://mermaid.js.org/intro/syntax-reference.html'

package/resources/claude-customizations/.claude/lib/mermaid/MermaidLineScanner.psm1

@@ -30,11 +30,13 @@
     Pinned to Mermaid 11.17.0 through MermaidGrammar.psm1. Every function is
     pure: no filesystem, subprocess, network, or wall-clock access, and no input
     is mutated.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidGrammar.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidGrammar.psm1') -Force -ErrorAction Stop
 
 # Arrow-token affix tables. An arrow candidate is a run of `-`, `=`, `.`, or `~`
 # (the "core") optionally extended by one of these affixes on either side. The

package/resources/claude-customizations/.claude/lib/mermaid/MermaidMarkdownFences.psm1

@@ -32,9 +32,11 @@
     Pinned to Mermaid 11.17.0 through MermaidGrammar.psm1. Every function is pure:
     no filesystem, subprocess, network, or wall-clock access, and no input is
     mutated.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The marker text must be exactly `mermaid-validator: ignore` and is
 # case-sensitive. Whitespace is permitted around the line, around the comment

package/resources/claude-customizations/.claude/lib/mermaid/MermaidValidation.psm1

@@ -37,13 +37,15 @@
     no filesystem, subprocess, network, or wall-clock access, and no input is
     mutated. CRLF, CR, and LF inputs produce identical verdicts because line
     splitting is normalized once in MermaidMarkdownFences.psm1.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidGrammar.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidLineScanner.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidMarkdownFences.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidGrammar.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidLineScanner.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'MermaidMarkdownFences.psm1') -Force -ErrorAction Stop
 
 function Get-MermaidFinding {
     <#

package/resources/claude-customizations/.claude/lib/model-routing/ModelRouting.psm1

@@ -18,9 +18,11 @@
     model_budget) by a static config-parity Pester test, and the Python modules
     remain the validator's authoritative reference. This module is one half of a
     two-language mirror; it never imports validator logic.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The fixed complexity-band vocabulary, ordered from lowest to highest rigor.
 # The array order defines "higher" and "lower" band comparisons used by the

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorState.psm1

@@ -27,9 +27,11 @@
     (Invoke-OrchestratorStatePreflight) consumed by
     .claude/hooks/enforce-pr-author-skill.ps1. Its default seam runs the portable
     in-process validation and names no interpreter on any code path.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The canonical top-level checkpoint keys required by the primary validator.
 # Pinned to REQUIRED_STATE_KEYS in scripts/dev_tools/validate_orchestrator_state.py.
@@ -139,6 +141,15 @@ function Get-OrchestratorStateCheckpoint {
           - Ok    (bool): $true when the file exists and parsed to a JSON object.
           - State (object): the parsed PSCustomObject on success, otherwise $null.
           - Error (string): a non-empty failure message on failure, otherwise ''.
+    .NOTES
+        VALUE CONTRACT. An ISO-8601-valued key in the returned State is date-coerced by ConvertFrom-Json
+        into System.DateTime, not the string the checkpoint holds. The module-declared ISO-8601 key
+        families are last_updated, started_at, completed_at, and verified_at. Every current validation
+        is presence-only, so the coercion is unobservable today. Two future exposures make it worth
+        stating: value comparison in OrchestratorStateCheckpointValue.psm1, which reports a mismatch
+        when one side is a string and the other is not, and the [string] $ComputedAt binding in
+        BlastRadius.psm1, which would coerce a DateTime to a culture-dependent string with no error.
+        A post-parse repair back to a string is PROHIBITED as lossy in both offset and format.
     #>
     [CmdletBinding()]
     [OutputType([hashtable])]

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCheckpointValue.psm1

@@ -23,9 +23,11 @@
     Every function is pure: it reads no file, starts no process, and never mutates
     its input. The module imports nothing, so it is the leaf of the parity family's
     import graph and cannot participate in a load-order cycle.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # The numeric CLR types a JSON number can deserialize to, used by the Python
 # zero-equivalence predicate so a value is compared numerically, not by type.

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCodexModelReceipts.psm1

@@ -22,16 +22,18 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the single Codex deployment
 # resolver, resolved relative to this module's directory so both imports travel
 # with the pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 $script:CodexDeploymentModulePath = Join-Path -Path (Join-Path -Path $PSScriptRoot -ChildPath '..') -ChildPath (Join-Path -Path 'codex-routing' -ChildPath 'CodexDeployment.psm1')
-Import-Module $script:CodexDeploymentModulePath -Force
+Import-Module $script:CodexDeploymentModulePath -Force -ErrorAction Stop
 
 # The checkpoint key this family validates.
 $script:CODEX_MODEL_ROUTING_RECEIPTS_KEY = 'codex_model_routing_receipts'

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCodexTopologyReceipts.psm1

@@ -25,16 +25,18 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the single Codex topology
 # resolver, resolved relative to this module's directory so both imports travel
 # with the pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 $script:CodexTopologyModulePath = Join-Path -Path (Join-Path -Path $PSScriptRoot -ChildPath '..') -ChildPath (Join-Path -Path 'codex-routing' -ChildPath 'CodexTopology.psm1')
-Import-Module $script:CodexTopologyModulePath -Force
+Import-Module $script:CodexTopologyModulePath -Force -ErrorAction Stop
 
 # The checkpoint key this family validates.
 $script:CODEX_TOPOLOGY_RECEIPTS_KEY = 'codex_topology_receipts'

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCompletion.psm1

@@ -44,21 +44,23 @@
     receipt still yields error text containing the literal token
     `model_routing_receipts`, so the completion hook maps the failure to its
     `MODEL_ROUTING_BLOCKED:` block reason.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the sibling shared module, the portable model-routing formulas, and the
 # ported check families, resolved relative to this module's directory so every
 # import travels with the pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorState.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorState.psm1') -Force -ErrorAction Stop
 $script:ModelRoutingModulePath = Join-Path -Path (Join-Path -Path $PSScriptRoot -ChildPath '..') -ChildPath (Join-Path -Path 'model-routing' -ChildPath 'ModelRouting.psm1')
-Import-Module $script:ModelRoutingModulePath -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateModelReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateUnconditional.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCompletionChecks.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingContract.psm1') -Force
+Import-Module $script:ModelRoutingModulePath -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateModelReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateUnconditional.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCompletionChecks.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingContract.psm1') -Force -ErrorAction Stop
 
 # The two optional keys the M3 leg re-validates, guarded on key presence so an
 # absent key does not emit a spurious "must be a list when present" error.

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateCompletionChecks.psm1

@@ -33,15 +33,17 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the pinned routing matrix,
 # resolved relative to this module's directory so both imports travel with the
 # pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingMatrix.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingMatrix.psm1') -Force -ErrorAction Stop
 
 # The six step-status keys, in report order.
 $script:STEP_STATUS_KEYS = @(

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateModelReceipts.psm1

@@ -19,16 +19,18 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input. Each check returns a string array, empty when the block is valid.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the two reference formulas,
 # resolved relative to this module's directory so the imports travel with the
 # pushed-down pack regardless of the consumer repository's working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 $script:ModelRoutingModulePath = Join-Path -Path (Join-Path -Path $PSScriptRoot -ChildPath '..') -ChildPath (Join-Path -Path 'model-routing' -ChildPath 'ModelRouting.psm1')
-Import-Module $script:ModelRoutingModulePath -Force
+Import-Module $script:ModelRoutingModulePath -Force -ErrorAction Stop
 
 # The complexity-band vocabulary, ordered lowest to highest. Pinned to BAND_ORDER
 # in scripts/dev_tools/compute_complexity_floor.py and to the identical ordering

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateReceipts.psm1

@@ -27,14 +27,16 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input. Each check returns a string array, empty when the block is valid.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives, resolved relative to this
 # module's directory so the import travels with the pushed-down pack regardless
 # of the consumer repository's working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 
 # The eight keys every list-form delegation receipt must carry. Pinned to
 # REQUIRED_RECEIPT_KEYS in scripts/dev_tools/validate_orchestrator_state.py.

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateRoutingContract.psm1

@@ -45,15 +45,17 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives and the pinned routing matrix,
 # resolved relative to this module's directory so both imports travel with the
 # pushed-down pack regardless of the working directory.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingMatrix.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateRoutingMatrix.psm1') -Force -ErrorAction Stop
 
 # The promotion-entry MCP tools and the promotion type that triggers substitution.
 $script:FEATURE_PROMOTION_ENTRY_TOOL = 'new_potential_entry'

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateRoutingMatrix.psm1

@@ -33,13 +33,15 @@
 
     Every function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the shared checkpoint-value primitives, resolved relative to this
 # module's directory so the import travels with the pushed-down pack.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 
 # The pinned routing-matrix subset. Each route records the two gate flags and the
 # three required-name lists the completion checks consume. A gate flag of $null

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorStateUnconditional.psm1

@@ -37,20 +37,22 @@
 
     The function is pure: it reads no file, starts no process, and never mutates
     its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 # Import the four leaf check modules eagerly. None of them imports this module,
 # so this import graph has no cycle. OrchestratorState.psm1 is deliberately NOT
 # imported here; it is loaded lazily inside the function, because the preflight
 # path in that module imports this one and an eager import in both directions
 # would couple their load order.
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateModelReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCodexModelReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCodexTopologyReceipts.psm1') -Force
-Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateModelReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCodexModelReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCodexTopologyReceipts.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'OrchestratorStateCheckpointValue.psm1') -Force -ErrorAction Stop
 
 # The checkpoint key whose value carries the delegation receipts. It is read with
 # the Python `is not None` guard rather than a presence guard, matching the

package/resources/claude-customizations/.claude/lib/requirements/GeneratedDocumentCounters.psm1

@@ -1,4 +1,16 @@
+<#
+.SYNOPSIS
+    Markdown checkbox counting for generated requirement documents.
+
+.DESCRIPTION
+    Provides Get-NamedSectionCheckboxCount, a pure function that counts the
+    markdown checkbox items contained by a named heading section. It reads no
+    file, starts no process, and never mutates its input.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
+#>
+
 Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
 
 <#
 .SYNOPSIS

package/resources/claude-customizations/.claude/skills/epic-orchestrate/SKILL.md

@@ -292,10 +292,10 @@ Every field needed to re-derive state durably on resume (`worktree_path`, `branc
 and `gh pr view --json state,mergedAt,headRefOid` — the checkpoint is a cache of that durable
 state, not the source of truth.
 
-Validate the checkpoint via
-`python -m scripts.dev_tools.validate_orchestration_artifacts epic-orchestrator-state <path> --require-complete`
-(or the equivalent `mcp__drm-copilot__validate_orchestration_artifacts` call with
-`artifact_type: "epic-orchestrator-state"`), implemented in
+Validate the checkpoint through the
+`mcp__drm-copilot__validate_orchestration_artifacts` call with
+`artifact_type: "epic-orchestrator-state"`, supplying the `require_complete` argument on
+that same call at the completion gate. The validation is implemented in
 `scripts/dev_tools/validate_epic_orchestrator_state.py`.
 
 ## Completion Requirements

package/resources/claude-customizations/.claude/skills/parallel-add/SKILL.md

@@ -61,15 +61,18 @@ re-derivation is mandatory and is not an optimization to skip when the checkpoin
 3. **Compute conflict edges over ALL items, including in-flight ones.** Invoke the contention
    relation `Test-BlastRadiusConflict` from the destination-runtime PowerShell port
    `.claude/lib/blast-radius/BlastRadius.psm1`, which is published by push-down and needs no Python
-   interpreter (`Import-Module .claude/lib/blast-radius/BlastRadius.psm1 -Force`). Its two radius
-   arguments are the two items' radius hashtables, not strings, and the third argument is the
-   required parsed `config/blast-radius.json` mapping, which push-down publishes into the
-   destination workspace. `conflicts(a, b, config)` in `scripts/dev_tools/compute_blast_radius.py`
-   (defined in `scripts/dev_tools/_blast_radius_conflicts.py`) remains the repository authority and
-   the parity reference. Read the verdict from the conflict key of the returned hashtable.
-   The hashtable itself is always truthy, so a bare boolean test on the result treats every pair as
-   conflicting. Map each conflicting pair onto an `(int, int)` conflict edge
-   of `items[].issue_num` values, normalized so `a < b`. Do not reimplement the relation and do not
+   interpreter (the default PowerShell 5.1 execution policy blocks `Import-Module` of a `.psm1`
+   file, so `pwsh` is mandatory: run as `$repoRoot = git rev-parse --show-toplevel; Import-Module
+   (Join-Path $repoRoot '.claude/lib/blast-radius/BlastRadius.psm1') -Force -ErrorAction Stop`).
+   Its two radius arguments are the two items' radius hashtables, not strings, and the third
+   argument is the required parsed `config/blast-radius.json` mapping, which push-down publishes
+   into the destination workspace. `conflicts(a, b, config)` in
+   `scripts/dev_tools/compute_blast_radius.py` (defined in
+   `scripts/dev_tools/_blast_radius_conflicts.py`) remains the repository authority and the parity
+   reference. Read the verdict from `$result['conflict']`; do not test the returned hashtable
+   itself, since it is always truthy under PowerShell boolean coercion, so a bare `if ($result)`
+   check treats every pair as conflicting. Map each conflicting pair onto an `(int, int)` conflict
+   edge of `items[].issue_num` values, normalized so `a < b`. Do not reimplement the relation and do not
    compute edges over the unstarted subset only: an in-flight conflict is precisely what the
    admission decision turns on.
 

package/resources/claude-customizations/.claude/skills/parallel-orchestrate/SKILL.md

@@ -478,9 +478,9 @@ pull-request state, merge time, and merge commit. Where the checkpoint disagrees
 commands, the commands win and the checkpoint is rewritten from them.
 
 Validate through `mcp__drm-copilot__validate_orchestration_artifacts` with
-`artifact_type: "parallel-orchestrator-state"`, or the equivalent CLI invocation
-`poetry run python -m scripts.dev_tools.validate_orchestration_artifacts parallel-orchestrator-state <path>`,
-adding `--require-complete` at the completion gate.
+`artifact_type: "parallel-orchestrator-state"`. At the completion gate, pass the
+`require_complete` argument on that same MCP call; no repository-local Python
+interpreter is required at a destination runtime.
 
 ## Completion Requirements