@dzhechkov/p-replicator 1.10.4 → 1.12.0

package/.dz-manifest.json

@@ -5,7 +5,7 @@
     "files": [
       {
         "path": "CHANGELOG.md",
-        "sha256": "63092c71ea7153d562c26db68f2774f233b7c5d37e78e4e3cdfaa1546c42668d"
+        "sha256": "866333345d0c618caf68dac1d522b2b3f003fd97d5a0a5c91fc2b6f226137a6c"
       },
       {
         "path": "KNOWN_LIMITATIONS.md",
@@ -17,27 +17,27 @@
       },
       {
         "path": "MULTIPLATFORM_ROADMAP.md",
-        "sha256": "a6fed19895b2c93a1be5f3416f021b2d5165449ff6dadd9bf6d96ba8c0491192"
+        "sha256": "59388dee254e5b292c642425c28b110ca9c8ebd260e01e935e9641fb2cff18fb"
       },
       {
         "path": "README.md",
-        "sha256": "d65437974585200f0db8ef082dfbd0519f61cc29cadf3224732ae7a459a20186"
+        "sha256": "ef2ce567e7221d6732ba8c085571adb0af28bcf512e11322c242b7f44dbf8f98"
       },
       {
         "path": "README/eng/01_quickstart.md",
-        "sha256": "8fe8dc32ddb603bfae2c71c8bafed51dd4d291a3f32942c06a049cab25dbf490"
+        "sha256": "eaa6082c03470f61d6b5cfd2acb180143f9f206e25a2fc81f977fc3119f58843"
       },
       {
         "path": "README/eng/02_user_guide.md",
-        "sha256": "307cf6c2a9bd6ebee678e47c0a13c15fdaaebcfdc9a17a0a08fe7892ed1afee0"
+        "sha256": "33c1d4bd0fed5c33cafedc74aa702a9d16b4f93a828b9bef125811a3019c139e"
       },
       {
         "path": "README/eng/03_admin_guide.md",
-        "sha256": "e4c5c190383570dd0f9853ec18221d0ccd24a85a4a42575e819c7b283fc42077"
+        "sha256": "dbcb4f7df564f749a7db8c58286f734f0b33801d85c65f9dd677921a4bae2113"
       },
       {
         "path": "README/eng/04_api_reference.md",
-        "sha256": "0a4879f346ac965cb2011515545c3fca0d922b7b8fcb817cf74dddbb01448f01"
+        "sha256": "d55a2280f6619ac63303028df64b8a1fcd2d74dd66301c6c2565b4906522e966"
       },
       {
         "path": "README/eng/05_architecture.md",
@@ -53,23 +53,23 @@
       },
       {
         "path": "README/eng/README.md",
-        "sha256": "19cddc3b70de2f8ae440d7dfcd5268cf195df32e35a0b17f861f727df76cc3ca"
+        "sha256": "fd8839b2c0291fabedb1273905bb9858fd01618153eaff8e3a64dbaf8772f360"
       },
       {
         "path": "README/ru/01_quickstart.md",
-        "sha256": "3d5b2a8dd9c9f7c0f35ae7b280ed22d865086a07a5f07866ce496549d4623e9b"
+        "sha256": "ba8080f582a98d43c08658f5dad1856e64975603df152f9134107110bf61bc48"
       },
       {
         "path": "README/ru/02_user_guide.md",
-        "sha256": "20b8f60be4755fcdacfb845b8bfc9f12cc26bd999fefb5f98ab6dd0a2948f1c7"
+        "sha256": "94059cfd16d23c3b91df018538ce827f16dc8a2fa9b659eb8a1ccb208e3aa9bc"
       },
       {
         "path": "README/ru/03_admin_guide.md",
-        "sha256": "c7923e865819d4d544f64066a4ef9ab729266dc2e11eeaed5e736f0357fcd2e8"
+        "sha256": "d5aa4d481b6fd34abfc2b6a0f6d4beffa26c25bfa46f943d40609eaf9616fb47"
       },
       {
         "path": "README/ru/04_api_reference.md",
-        "sha256": "6921d471039d970f132f2b451d5ae147f38e8064479a0774cd706a633fd4b527"
+        "sha256": "09064d2c3726b6121bd3a9885129b305c2ef1c973b216be3c64db732a5cb7bff"
       },
       {
         "path": "README/ru/05_architecture.md",
@@ -85,7 +85,7 @@
       },
       {
         "path": "README/ru/README.md",
-        "sha256": "b98cda9099c19497ddcdc1b58d17d62a75ef73cf6c6e64beac723b0e0363b661"
+        "sha256": "c44296a2696af4055081297affb18c2669c3f982a8e52c85f9dbe9de6e607147"
       },
       {
         "path": "README/ru/html/build.js",
@@ -93,7 +93,7 @@
       },
       {
         "path": "README/ru/html/index.html",
-        "sha256": "31baddce9668e9802bc042c8a0df326061c1db7662f64df6861f7ed419890b88"
+        "sha256": "2833632ec01f00e0524048d859f8265b3c7dc059e74e0c5112939e3f91e7c874"
       },
       {
         "path": "README/ru/html/script.js",
@@ -109,7 +109,11 @@
       },
       {
         "path": "package.json",
-        "sha256": "f3741d83e7bb92a60d95f7fcefb5a601e15e3b8cc01d9d7d887c88b2d9a79532"
+        "sha256": "d2e2977cfcea59cf56bb7bf3ad1cf6b52262e71000a65dc0865cd8cfc4761e46"
+      },
+      {
+        "path": "scripts/check-pipeline-gaps.sh",
+        "sha256": "349dbc45876cd5765ae48ff2224ab7f96d5df01a0d86361866b7740ed3cf4de0"
       },
       {
         "path": "src/cli.js",
@@ -117,7 +121,7 @@
       },
       {
         "path": "src/commands/doctor.js",
-        "sha256": "566a8cf554420fbbb734705de283f04d40048ee3eb38f1877304d2cc5e56a47f"
+        "sha256": "e8f985c2cbfa1bb151bf705261c45e5609215d22b047a0b94d1e2e9108b41918"
       },
       {
         "path": "src/commands/init.js",
@@ -139,9 +143,13 @@
         "path": "src/commands/verify.js",
         "sha256": "18f5442af9b3a549dfb284cd0d8aef83ba973bd34a3a04e7c656262baebb0e57"
       },
+      {
+        "path": "src/rule-components.json",
+        "sha256": "9508acdf6b2324c75024f1beb4e7c9542d2876bd2afb737b549dec65c6d56e4d"
+      },
       {
         "path": "src/utils.js",
-        "sha256": "43f6abbf447478bae423bce742cfbdace1725946621925eb2ffb3a3ab5b3379e"
+        "sha256": "553a343104da5f2366ea5879fd6140aaee5035924d9d567c519450d0324660c5"
       },
       {
         "path": "templates/.claude/agents/doc-validator.md",
@@ -149,7 +157,7 @@
       },
       {
         "path": "templates/.claude/agents/harvest-coordinator.md",
-        "sha256": "70fa884057669902e18744915305705cf9e45e738a83d7bb5ab011a3b72d683c"
+        "sha256": "71e524e8379df46bbf457dbc1d4480634e05c99b7d3a4f59a356b8d71a0a4166"
       },
       {
         "path": "templates/.claude/agents/product-discoverer.md",
@@ -169,19 +177,19 @@
       },
       {
         "path": "templates/.claude/commands/feature.md",
-        "sha256": "3b605c004ae6d794dee30892956dc0a9536195e828929bdaff134f3e952e87bb"
+        "sha256": "2df6ab3e6c015dc294955234192843c24a00e07784ac30994c7fe7572f8de775"
       },
       {
         "path": "templates/.claude/commands/go.md",
-        "sha256": "655dc9cad37b61a9f283cef15e435c492ee7cbc88a6ce59295ac32c975dee858"
+        "sha256": "df92c2ec060707638cc7d26d9c9e6a5fecc381e89915bdb0671c5489fb530574"
       },
       {
         "path": "templates/.claude/commands/harvest.md",
-        "sha256": "c074fe7799f594dda44c5f8166da707f25cee51b12f758dea562a8c1e6ac5dcd"
+        "sha256": "5d78e189947b8c91602de89742099f25df4c85f5625299bd77bc073af667e155"
       },
       {
         "path": "templates/.claude/commands/myinsights.md",
-        "sha256": "93258a3340f99a0f14b374746ae2934b01d7cefe06d575434868eb98da2d854a"
+        "sha256": "f31c5e133b5027197359e4179cbba1ab535f990634a69ea7c5c73bd2bc329d68"
       },
       {
         "path": "templates/.claude/commands/next.md",
@@ -193,7 +201,7 @@
       },
       {
         "path": "templates/.claude/commands/replicate.md",
-        "sha256": "8862d0dc117815b1c3fc7f6e929996e2458783f1ac443eb70bc2a7ebe63a67c3"
+        "sha256": "7dbf352a122f415bb987d3c968b905d5a9bda932e619382ce24f9ef2c099723a"
       },
       {
         "path": "templates/.claude/commands/run.md",
@@ -201,7 +209,7 @@
       },
       {
         "path": "templates/.claude/commands/start.md",
-        "sha256": "4aaebc10ca8d607d4b2b43883d82392e9788c2f183878a49fc0d1ed54d07ee95"
+        "sha256": "2c9d2bd450d6a8cd6f8f0e958b77ae4430efc745645a11300cf29e85dcb468a6"
       },
       {
         "path": "templates/.claude/hooks/autocommit-insights.cjs",
@@ -225,11 +233,11 @@
       },
       {
         "path": "templates/.claude/hooks/check-ports.cjs",
-        "sha256": "1813aa60e4d15c5f6ce54a9b3471c3772efe60c332316183c7ad8f5b619f2169"
+        "sha256": "2385687994c882ebb430cdf8ae2bef9309fe5ba284354671413dc134f8e17694"
       },
       {
         "path": "templates/.claude/hooks/session-insights.cjs",
-        "sha256": "46f8357e3886a6d54db1ab4af969b9b8643ae5937ba59038a5651ffbcfd0d30e"
+        "sha256": "31fbe90d81b01dfb56557ed5d68dbde2211a14d5469c5d3761f45fb63c07c3a7"
       },
       {
         "path": "templates/.claude/hooks/state-update.cjs",
@@ -237,35 +245,51 @@
       },
       {
         "path": "templates/.claude/hooks/statusline.cjs",
-        "sha256": "465190ab21610357094fd6eba188ba9f7086dc5a933568f40a7f7c715ccd6745"
+        "sha256": "5a842162e710b6cb07f59ee0711f2b190d5e505e4546ea01931ba4ba25be8228"
+      },
+      {
+        "path": "templates/.claude/hooks/write-insight.cjs",
+        "sha256": "743f2d85b037cf522dfaf4775947b0cd331e52f2f304e88360c160e0e8e9a589"
+      },
+      {
+        "path": "templates/.claude/rules/cost-of-detection-ladder.md",
+        "sha256": "f15309ee8f1494478ff7678380dbe8fc8eecd154be36d57c9090cd17126a07da"
       },
       {
         "path": "templates/.claude/rules/docker-ports.md",
-        "sha256": "bef41c25c875479341f68783c2d64572800d4710f55401e55519245f03d22efb"
+        "sha256": "59eb430f29dd762e8b76ad6d1177fe8b5b250de007856c743387cb88ee157942"
       },
       {
         "path": "templates/.claude/rules/feature-lifecycle.md",
-        "sha256": "f9ddc8c889ab7938a7207b36ae46c36be05e9b870956ef16617bf31b2f78c758"
+        "sha256": "4a7bb631bc3600c8aeb5a5a484258298688d87604ac5d2d3cacdff9139d05edc"
       },
       {
         "path": "templates/.claude/rules/git-workflow.md",
         "sha256": "7d8d2ded47fcc0fb95da3dc226efa6cb3c80d6adf7296977588c181dfce20192"
       },
+      {
+        "path": "templates/.claude/rules/honest-configuration.md",
+        "sha256": "851bc28e9e2baf1043bc09b982f3df3431bc7af1e076f8ff9df3d6729835bad5"
+      },
       {
         "path": "templates/.claude/rules/insights-capture.md",
-        "sha256": "488d694caffe7a32915b0ec1beb7a84b223fe602722c5bb91ab8bf2785626387"
+        "sha256": "d529e6be79178636ca362d83366b1dd7a843371e8ba4f2b09d65c009fab52dc4"
       },
       {
         "path": "templates/.claude/rules/replicate-pipeline.md",
-        "sha256": "99289f711c34cfddddbef5328b74749fc63d1f74636c6a4e4d61caa202fad05d"
+        "sha256": "fce6480a56bd4ab2d6908faac5985d7557527b1ca36ad597bb00feabca3688bd"
       },
       {
         "path": "templates/.claude/rules/skill-interface-protocol.md",
-        "sha256": "7669309b0ae4330bc6cf6b26bd9cfc01d7b99a8e70c1f056a52574430db9378e"
+        "sha256": "c3f624d0a8a4c7e0f5744e529eb4486cc0589fdb732b9799bccc75091a6d63ca"
+      },
+      {
+        "path": "templates/.claude/rules/swarm-file-evidence.md",
+        "sha256": "c71a216dbc3fd633c30949823ceac354f8439b96279a1a8dd606afb1b3ef5c45"
       },
       {
         "path": "templates/.claude/settings.json",
-        "sha256": "b1df6cf834ccfa227f3318a70862115c17838ab31253e9d8d89381b7763e61fd"
+        "sha256": "18db09827dce410667b93e2b1a41ef8e46d4431114733e4304a5fc2192b2fc66"
       },
       {
         "path": "templates/.claude/skills/brutal-honesty-review/README.md",
@@ -521,7 +545,7 @@
       },
       {
         "path": "templates/.claude/skills/knowledge-extractor/modules/01-agent-review.md",
-        "sha256": "53883f182c26c710190399a23193cddb4a94b0f35bb42169a353f354aae4083a"
+        "sha256": "33395c8b87c4d7d1f63dff0891aaebcf50e302cbe2026005b3c6d51817f35a70"
       },
       {
         "path": "templates/.claude/skills/knowledge-extractor/modules/02-classify.md",
@@ -681,7 +705,7 @@
       },
       {
         "path": "templates/.claude/skills/sparc-prd-mini/SKILL.md",
-        "sha256": "71f97e269e8b1807550a4ef91b2f0ac4dd892a074781504890d33db8f32685d2"
+        "sha256": "29c74d628f86f79fe2ba7b4d2a69b34de332519b8a11c945568e59830535742a"
       },
       {
         "path": "templates/.claude/skills/sparc-prd-mini/references/sparc-methodology.md",
@@ -697,15 +721,27 @@
       },
       {
         "path": "tests/e2e/lifecycle.test.js",
-        "sha256": "fd4af066e9e20c7c0f711337f3afdfd2f8e13ec8c845f8784befeb0785270e14"
+        "sha256": "4c51f9c38396b115a875f397168b82c50312c2b93436b32ae501ac3bd0978fc9"
+      },
+      {
+        "path": "tests/e2e/packed-insights-writer.test.js",
+        "sha256": "3477f63db3f531e3c2970b85d784f22d268695030764319457a543b2e9d49758"
+      },
+      {
+        "path": "tests/fixtures/prep-traceability-fixture/docs/features/order-refund/01_specification.md",
+        "sha256": "86e366e17ff16f7dbe161bdd1bf3351212e6bb2bac7a5d2c20616fb9c6fd454a"
+      },
+      {
+        "path": "tests/fixtures/prep-traceability-fixture/docs/features/order-refund/02_pseudocode.md",
+        "sha256": "848b3afb83e2d4151c1774900b33983b824e88c03e651085c4a9a1952ba78e64"
       },
       {
         "path": "tests/snapshot/baseline.json",
-        "sha256": "8215cb40b13954c4d651c28d2ee6f6a7a1d39fd3ff5bf8b0d31cdfb1970c3b37"
+        "sha256": "a5a8123c4fdc9297b44cd521c87ce8dd46caaafcd849a237c0224d3ec52facce"
       },
       {
         "path": "tests/snapshot/templates.test.js",
-        "sha256": "7a262bd459982aa9c2cbd9abd471ae05eca5fa1794e0ee30660164c17294ab59"
+        "sha256": "79b4d3d48a5d132af19f4a25ee6efb4e9907cbed4ca21e6102a29346e719321f"
       },
       {
         "path": "tests/snapshot/update-baseline.js",
@@ -713,7 +749,7 @@
       },
       {
         "path": "tests/unit/absence-is-not-emptiness.test.js",
-        "sha256": "6c7c1c8086461eac16415ebcccea081d3169212826f23e835cf109d741dd6ac3"
+        "sha256": "db7d0531dfb1a355c51bf867e156397723b7f3ea48dd8831880f8ed3a945e65b"
       },
       {
         "path": "tests/unit/adr-decision-coverage.test.js",
@@ -739,21 +775,37 @@
         "path": "tests/unit/check-growth-trace.test.js",
         "sha256": "733d87fe8eca897fcfc5cad9342d4db2085270c21d0d8866d817a9b9418511c2"
       },
+      {
+        "path": "tests/unit/check-pipeline-gaps.test.js",
+        "sha256": "88bd501cf7716dec34435c6265033d6819ca30b65f8bbd3a991c984557fe139f"
+      },
       {
         "path": "tests/unit/check-ports.test.js",
-        "sha256": "d8e2e1f22dadb40fbb03ffbd25ed945fa85fe7b5d49fe0f3597cfc3facc2c118"
+        "sha256": "3d927f6bece5bcf163f9fbbc599d77d74dd51fb0f2978e7f0b1dfe3a086a76c6"
       },
       {
         "path": "tests/unit/db-port-rule.test.js",
-        "sha256": "a97c913ccba8da16f7b8ef3094cac4ba8b499df2d644b3094c58945306d98c09"
+        "sha256": "9c652a4453b5812a3e8e021193a45a5e08571ba483b0b82cc80138fada4816a3"
       },
       {
         "path": "tests/unit/detect-parse-anchor.test.js",
         "sha256": "ecfa57bfcb34e12081009d0bdf4be83a6eab7a8b7a6a0dc27c1cb02ae5561be0"
       },
+      {
+        "path": "tests/unit/detection-ladder-contract.test.js",
+        "sha256": "8ff509273436f10432bed8d34568d88d3bcbf6d85c9e7e290310ab771b9785b0"
+      },
+      {
+        "path": "tests/unit/detection-ladder-registry.test.js",
+        "sha256": "22383f72a1d629e2bdfb3649350237751012cf9edc289af058d44f7a64d56a29"
+      },
+      {
+        "path": "tests/unit/doctor-insight-flow.test.js",
+        "sha256": "80da9e5aee65413d9cf72c49ee25d370c2a5a36ceebf1e061210cb7d22ce7219"
+      },
       {
         "path": "tests/unit/external-dependency-check.test.js",
-        "sha256": "d85109f8e86648d61fc17d0128e9d4881950a70641c246e667d7e54ffc1f0273"
+        "sha256": "37bcea52089d32a6a33fc5155f487be0b20dd050a63216af899e2562a786c7ba"
       },
       {
         "path": "tests/unit/generated-guard-templates.test.js",
@@ -779,9 +831,13 @@
         "path": "tests/unit/guard-forms.test.js",
         "sha256": "61a219a7748e0b56bc4207eee107815a4b4111fbebd41b68f6d390130506cd42"
       },
+      {
+        "path": "tests/unit/honest-failure-rules.test.js",
+        "sha256": "22ad3d2196049fafbb549688c2506fd1883d592a1e563a93f8ffbf078c4c1891"
+      },
       {
         "path": "tests/unit/hooks-project-anchored.test.js",
-        "sha256": "2fa5b44982d72701d7a8486ac24ee3a91c6fa6123ef7303a0e065bf1e60987d7"
+        "sha256": "c7b8e757190e1f88132f660394447d691a7915b77babb385b15ae5af7f94bb67"
       },
       {
         "path": "tests/unit/hooks-report-failures.test.js",
@@ -789,7 +845,15 @@
       },
       {
         "path": "tests/unit/insights-docs-tell-the-truth.test.js",
-        "sha256": "d73ebce2f729911cad452897883b3d55d69e19613c7c1fc7c9bcfa3b5569fc1b"
+        "sha256": "b49143cc5c179b419c6aa2349b5a93824652ba89004bc8f026240293febe33fc"
+      },
+      {
+        "path": "tests/unit/insights-dz-delegation.test.js",
+        "sha256": "4d0943a66ffbbed3dfd1c44cc5d1165d8d9879bae59094cea052ea1d5af77bc2"
+      },
+      {
+        "path": "tests/unit/insights-writer.test.js",
+        "sha256": "e723a1fe9cd392196aae4f0c421915b6487f78ee213cfa1eab3f1b66106ec243"
       },
       {
         "path": "tests/unit/module-copy-identity.test.js",
@@ -805,7 +869,7 @@
       },
       {
         "path": "tests/unit/shipped-suite-context.test.js",
-        "sha256": "fd6128505f3272aa7349d21d18a2494eaa8e5e2397ee85047f9828471c99d721"
+        "sha256": "181aefbb2e9c867471f62ce87989434f359ab58c5400f49fa6b3b10c1eb40583"
       },
       {
         "path": "tests/unit/skill-paths-prebaked.test.js",
@@ -831,9 +895,17 @@
         "path": "tests/unit/sync-templates-guard.test.js",
         "sha256": "e4fc7687dcf37d17bf2a059d3248c8c00526c104f6a0f6e104fa9ca6e00039ae"
       },
+      {
+        "path": "tests/unit/traceability-machine-ids.test.js",
+        "sha256": "8160e026f485c43fb747b0089abe6c1e0f5bdd03223c3b7990e478c3aa386a5b"
+      },
+      {
+        "path": "tests/unit/traceability-negative-fixture.test.js",
+        "sha256": "abc54e0e00138ecc6d75e0cbc496cbd888cd97b1ed567b7d23557f0674b5c161"
+      },
       {
         "path": "tests/unit/utils.test.js",
-        "sha256": "2ccc68f9a91d188d56ebad77c4a64653cc5ff7aec093a739eb707774a37e1732"
+        "sha256": "81ee9906aecc8419553a28c410883854a2009de9109ef1ffaafa2ea53b1ec2c7"
       },
       {
         "path": "tests/unit/validation-gate-teeth.test.js",
@@ -841,5 +913,5 @@
       }
     ]
   },
-  "signature": "59EM4oLsL+Y97yXQ1+vTn2b5G6UNGUSnzk9Uqk38ehEewsQbKCX7nXmhtxKyG/ahnpXHzTKSCysf0qE3E+OFAA=="
+  "signature": "v5SdpgSuqVtv8AuAucBYVzJVG2LOXwFCUpKkdpto/9hkjjU84KTM+4UaJm1O/qaEeuIRPSY3uDLEmQoUxHskDA=="
 }

package/CHANGELOG.md

@@ -5,6 +5,91 @@ All notable changes to `@dzhechkov/p-replicator` are documented here.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [Unreleased]
+
+_Nothing yet._
+
+## [1.12.0] - 2026-08-31
+
+**MINOR — the pre-shipped rule contract moves from seven rules to nine, and the port check gains a
+second, deliberately chosen scope.**
+
+Note for anyone upgrading from 1.10.4: `1.11.0` was prepared but never published, so this release
+carries its ladder work as well. Read both entries.
+
+### Added
+
+- `check-ports.cjs --machine`: a second scope that inventories the running containers of the current
+  Docker context, recognizes storage through the shared image taxonomy, attributes Compose ownership
+  from labels, and probes Redis auth live. The rule always stated a MACHINE invariant while the check
+  answered for one DIRECTORY — a green receipt was reported on a host where three neighbouring
+  databases sat on `0.0.0.0` and a Redis ran with no password at all. Catalog mode never queries the
+  runtime; the loopback exception stays, and revoking it would be a separate decision.
+- `swarm-file-evidence` rule: every parallel work unit has a named file result. A narrative reply is
+  only a pointer, silence is neither progress nor completion, and a status of `running` beside a dead
+  recorded PID closes the unit as failed rather than reporting work from silence.
+- `honest-configuration` rule: a value governing external output, access, limits, routing, or an
+  authoritative measurement must not become plausible or permissive when its meaning is absent or
+  unproven. `undefined` stays distinct from `''`, the allowlist lives in code while the environment
+  only selects from it, and `0/0` renders unavailable rather than `0%`.
+- The packaged `write-insight.cjs` boundary is the required final persistence gate for quick and full
+  `/harvest` runs carrying a candidate. Its structured-stdin contract lazily creates the Markdown
+  carrier, preserves prior bytes on append, and returns `duplicate` for an exact normalized replay.
+  Runtime behaviour has no `dz` dependency. Until this landed, `/harvest` had no writer at all: a
+  field project ran three days and 69 commits with 19 fixes and zero insights recorded, every
+  surface green.
+- Exact-artifact acceptance installs `npm pack` output into a fresh consumer and exercises
+  absent → create → append → replay → delete → doctor → recreate without checkout substitution.
+- Targeted mutation defenses for receipt enforcement, first-write creation, exact-repeat idempotence
+  and missing-carrier visibility.
+- `doctor` reports the insight FLOW: fix commits against insight records for a named period. It is
+  informational by construction — a low ratio can equally mean the work went smoothly — and it never
+  changes doctor's exit code.
+
+### Changed
+
+- The SessionStart insight hook now prints `инсайтов пока нет; /myinsights создаст первую запись`
+  when the carrier is absent, while remaining exit-zero and non-mutating; empty and read-error states
+  stay distinct from that ordinary missing branch. The hook's silence was the named cause of the
+  three-day invisibility above.
+- The pre-shipped hook/utility contract grows from 9 to 10.
+- Insight delivery delegates to `dz` only when recall is genuinely ARMED. `command -v dz` is not the
+  condition: local output is suppressed only after a successful, non-empty recall carrying
+  `--domain p-replicator-insights`. Absent, failing, and empty recall each fall back to local output,
+  and a failure is named rather than swallowed. Markdown remains the source of truth throughout.
+- `docker-ports.md` now names EXPOSURE as the consequence of a miss instead of port conflicts, and
+  explains that the left-hand side of `${DB_PORT:-11432}:5432` says nothing about the publish
+  address — the address is the third element, defaulting to all interfaces.
+
+### Honest limits
+
+- An unreadable state — no git, not a repository, an unreadable carrier, a config that cannot be
+  parsed — renders as NOT PERFORMED with its reason named, never as a measured zero. A check that
+  answers "clean" about a state it could not read is worse than no check.
+- `--machine` is a snapshot of the current Docker context at the moment it is invoked. It is not
+  continuous monitoring, and it says nothing about stopped containers or another context.
+- The flow check counts; it does not judge whether the captured insights are worth anything.
+
+## [1.11.0] - 2026-08-30
+
+**MINOR — the pre-shipped consumer rule contract moves from six rules to seven.**
+
+### Added
+
+- Added the consumer-local `cost-of-detection-ladder` rule: five enforcement layers, signal-fit
+  check selection, and an owned reaction for every violation.
+- Registered and shipped the ladder as the seventh rule required by `init`, `doctor`, and `verify`,
+  with link-backs from the two ADR-named quality-gate rules.
+
+### Fixed
+
+- Made the backlink contract ignore the ladder link itself when detecting prose allusions, so
+  removing either required link now makes the focused gate fail.
+- Replaced the distribution tautology with an assertion over the actual `npm pack --dry-run --json`
+  file listing.
+- Added a mutation-gate case for removing the seventh-rule requirement, restored the count scanner's
+  cross-line reach, and aligned the signed manifest with the files npm actually packs.
+
 ## [1.10.0] - 2026-08-27
 
 **Every guard in this package can now be shown to fail — and three that could not, now can.**

package/MULTIPLATFORM_ROADMAP.md

@@ -112,7 +112,7 @@ Beyond Level 2 — adapt logic for platform-specific capabilities:
 | `/myinsights`, `/docs`, `/harvest`, `/start`, `/deploy` | ✅ universal | path-translate | **Yes** |
 | 10 skills (sparc-prd-mini, etc.) | ⚠️ Claude-specific composition | inline-compile into commands | **Compromise** — sacrifice runtime-loading |
 | 4 pre-shipped agents | ⚠️ Claude Task-tool specific | translate to platform sub-agents | **Yes if platform supports** |
-| 6 rules | ✅ universal markdown | path-translate | **Yes** |
+| 9 rules | ✅ universal markdown | path-translate | **Yes** |
 | Hooks (SessionStart insights, Stop autocommit) | ❌ Claude-only | bake into commands as instructions | **Compromise** — degraded UX |
 | Statusline dashboard | ❌ Claude-only | optional `progress.md` file? | **Skip** — Claude-exclusive feature |
 | `verify` CLI command | ✅ universal | works as-is | **Yes** (already works) |

package/README/eng/01_quickstart.md

@@ -22,7 +22,7 @@ This creates:
 - `.claude/skills/` — 10 pre-shipped skills
 - `.claude/commands/` — 11 slash commands (`/replicate`, `/run`, `/feature`, ...)
 - `.claude/agents/` — 4 pipeline agents
-- `.claude/rules/` — 5 governance rules
+- `.claude/rules/` — 9 governance rules
 - `.claude/hooks/` — 6 cross-platform Node scripts
 - `.claude/settings.json` — hooks + statusline configuration
 - `.p-replicator.json` — install manifest
@@ -162,7 +162,7 @@ npx @dzhechkov/p-replicator verify
 
 The command checks:
 
-- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 6 rules + settings.json
+- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 9 rules + settings.json
 - **Post-/replicate hints** (advisory): CLAUDE.md, project-specific agents,
   feature-roadmap.json, security rules, etc.
 
@@ -225,7 +225,7 @@ your-project/
 │   ├── skills/              # 10 skills
 │   ├── commands/            # 11 slash commands
 │   ├── agents/              # 4 pipeline agents
-│   ├── rules/               # 6 rules
+│   ├── rules/               # 9 rules
 │   ├── hooks/               # 6 Node scripts
 │   └── settings.json        # hooks + statusline config
 ├── .p-replicator.json       # install manifest

package/README/eng/02_user_guide.md

@@ -501,7 +501,7 @@ npx @dzhechkov/p-replicator verify
 ```
 
 Should report:
-- ✅ Pre-shipped contract intact (10 skills + 11 commands + 4 agents + 6 rules + settings.json)
+- ✅ Pre-shipped contract intact (10 skills + 11 commands + 4 agents + 9 rules + settings.json)
 - ✅ Post-/replicate hints — many will be absent in Mode 2 (this is normal)
 - 📊 Per-feature artifacts: `docs/features/<id>/01_specification.md`...`05_completion.md`,
   `validation-report.md`, `review-report.md`

package/README/eng/03_admin_guide.md

@@ -83,7 +83,7 @@ P-Replicator V1.5.0 ● user │ Sonnet 4.7
 🚀 Pipeline   /<cmd> ▓▓▓░░░░ 50%  │ Phase: VALIDATE (2/4)  │ Last: /replicate
 🎯 Roadmap    [●●●○○○○○] mvp 3/8   │ Done 5/12  │ ▶ auth-jwt  │ Domain: banking
 📊 SPARC      ●11/11  │ 🟢 78/100  │ Plans ●3  │ ADRs ●2  │ Harvest 2026-05-05
-🛠️ Toolkit   Skills ●10/10 │ Cmds ●11/11 │ Agents ●4+3 │ Rules ●6+2 │ Hooks ●7/7
+🛠️ Toolkit   Skills ●10/10 │ Cmds ●11/11 │ Agents ●4+3 │ Rules ●9+2 │ Hooks ●7/7
 💡 Insights   ●12 (2026-05-06) │ Tests 85/85 ✓ │ MCP ●1/1 │ Settings ✓ │ 🧬 Keysarium ✓
 ```
 
@@ -245,7 +245,7 @@ from PRD MVP scope, or by hand).
 
 | Tool | Checks | When |
 |---|---|---|
-| `npx @dzhechkov/p-replicator doctor` | Pre-shipped contract: 10 skills + 11 commands + 4 agents + 6 rules + settings.json + 7 hooks + git on PATH | After init / when something seems broken |
+| `npx @dzhechkov/p-replicator doctor` | Pre-shipped contract: 10 skills + 11 commands + 4 agents + 9 rules + settings.json + 7 hooks + git on PATH | After init / when something seems broken |
 | `npx @dzhechkov/p-replicator verify` | Pre-shipped + post-/replicate hints (CLAUDE.md, planner.md, security.md, feature-roadmap.json, etc.) | After every `/replicate` to confirm |
 
 **`doctor` exit codes:**

package/README/eng/04_api_reference.md

@@ -51,7 +51,7 @@ Formal reference: CLI commands, flags, JSON schemas.
   ],
   "shippedDefaults": {
     "settings.json": {
-      "hooks": { "SessionStart": [...], "Stop": [...] },
+      "hooks": { "SessionStart": [...], "UserPromptSubmit": [...], "Stop": [...] },
       "statusLine": { "type": "command", "command": "..." }
     }
   }
@@ -176,6 +176,7 @@ node .claude/hooks/state-update.cjs --json '{"currentCommand":"/run", ...}'
   },
   "hooks": {
     "SessionStart": [ /* matchers + hooks */ ],
+    "UserPromptSubmit": [ /* matchers + hooks */ ],
     "Stop": [ /* matchers + hooks */ ],
     "PreToolUse": [ /* user-added */ ],
     "PostToolUse": [ /* user-added */ ]
@@ -216,6 +217,7 @@ Each entry:
 
 **Event types in Claude Code:**
 - `SessionStart` — at session start (stdout injected into context)
+- `UserPromptSubmit` — after the real user prompt is available (structured context injection)
 - `Stop` — at turn end (side-effects: commit, log)
 - `PreToolUse`, `PostToolUse` — around tool calls
 
@@ -268,10 +270,14 @@ Used by `verify`, `doctor`, `list` for uniform path resolution.
 
 ### `session-insights.cjs`
 
-**Trigger:** `SessionStart` hook.
-**Reads:** `.claude/insights/index.md` (`## YYYY-MM-DD` headings)
-**Writes:** stdout (Claude Code injects into session context)
-**Output:** up to 3 recent insights as `## Recent project insights\n\n## ... ## ... ## ...`
+**Trigger:** `SessionStart` and `UserPromptSubmit` hooks.
+**Reads:** the Markdown source of truth at `.claude/insights/index.md`; prompt-time delivery also
+invokes optional `dz recall` with the project root pinned.
+**Writes:** the missing-carrier hint at SessionStart, or one UserPromptSubmit context envelope.
+**Output:** only a successful, non-empty dz recall result suppresses local output. Absent, failing,
+or empty recall uses the local fallback of up to 3 recent Markdown entries; failure is named and the
+other two states are quiet. The writer establishes Markdown first and only then attempts a
+best-effort, idempotent `dz teach` duplicate, so projection failure cannot erase the record.
 
 ### `autocommit-roadmap.cjs` / `autocommit-insights.cjs` / `autocommit-plans.cjs`
 

package/README/eng/README.md

@@ -6,7 +6,7 @@ product development in Claude Code (Vibe Coding).
 ## What it is
 
 `p-replicator` installs a ready-made `.claude/` toolkit into any project:
-**11 slash commands**, **10 skills**, **4 agents**, **6 rules**, **7 hook
+**11 slash commands**, **10 skills**, **4 agents**, **9 rules**, **7 hook
 scripts**, and a `settings.json` with pre-configured hooks. The flagship
 `/replicate` command takes a project through a 5-phase pipeline (Discovery →
 Planning → Validation → Toolkit Generation → Finalize), generating SPARC

package/README/ru/01_quickstart.md

@@ -22,7 +22,7 @@ npx @dzhechkov/p-replicator init
 - `.claude/skills/` — 10 предустановленных skills
 - `.claude/commands/` — 11 slash-команд (`/replicate`, `/run`, `/feature`, ...)
 - `.claude/agents/` — 4 пайплайн-агента
-- `.claude/rules/` — 5 governance-правил
+- `.claude/rules/` — 9 governance-правил
 - `.claude/hooks/` — 6 cross-platform Node-скриптов
 - `.claude/settings.json` — конфигурация hooks + statusline
 - `.p-replicator.json` — манифест установки
@@ -162,7 +162,7 @@ npx @dzhechkov/p-replicator verify
 
 Команда проверит:
 
-- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 6 rules + settings.json
+- **Pre-shipped contract** (must-have): 10 skills + 11 commands + 4 agents + 9 rules + settings.json
 - **Post-/replicate hints** (advisory): CLAUDE.md, project-specific агенты,
   feature-roadmap.json, security-правила и т.д.
 
@@ -225,7 +225,7 @@ npx @dzhechkov/p-replicator doctor
 │   ├── skills/              # 10 skills
 │   ├── commands/            # 11 slash-команд
 │   ├── agents/              # 4 pipeline-агента
-│   ├── rules/               # 6 правил
+│   ├── rules/               # 9 правил
 │   ├── hooks/               # 6 Node-скриптов
 │   └── settings.json        # hooks + statusline config
 ├── .p-replicator.json       # манифест установки