@dzhechkov/p-replicator 1.13.1 → 1.13.3

package/templates/.claude/skills/requirements-validator/SKILL.md

@@ -65,11 +65,14 @@ Always flag these terms and suggest specific replacements:
 **Score <50 = BLOCKED from development.** Provide rewrite suggestions.
 
 **Blocking floor — the weakest link decides, never the average.** Independently of the score, a
-requirement is BLOCKED if `Testable = 0` (no acceptance criteria) or `Completeness = 0` (rubric "No
-AC"). A story can total 72/100 with neither, and 72 reads as "minor fixes" in the table above. A non-zero `Testable` or `Completeness` REQUIRES quoting the acceptance criteria it scores — no quote
-means 0, because the agent that scores is the agent the floor binds. The
-floor is closed at those two: `Measurable` and `Traceability` are deliberately excluded — see
-`references/scoring-system.md` → "Blocking floor" for the worked case and the reason.
+requirement is BLOCKED if `Testable = 0` (no acceptance criteria), `Completeness = 0` (rubric "No
+AC"), or `Traceability = 0` (no AC has a named scenario in the Criterion scenarios table). A story can
+total 72/100 with no acceptance criteria, and 72 reads as "minor fixes" in the table above. A
+non-zero `Testable` or `Completeness` REQUIRES quoting the acceptance criteria it scores; a non-zero
+`Traceability` REQUIRES quoting the Criterion scenarios table or referencing its document and heading.
+No artifact means 0, because the agent that scores is the agent the floor binds. The floor is closed
+at those three; `Measurable` is deliberately excluded — see `references/scoring-system.md` →
+"Blocking floor" for the worked cases and the reason.
 
 ## Output Format
 
@@ -77,6 +80,7 @@ floor is closed at those two: `Measurable` and `Traceability` are deliberately e
 
 ```markdown
 # Requirements Testability Analysis
+Spec revision: sha256:<digest of 01_specification.md>
 
 ## Summary
 - Stories analyzed: X
@@ -90,6 +94,11 @@ floor is closed at those two: `Measurable` and `Traceability` are deliberately e
 | US-001 | ... | 92/100 | 6/6 ✓ | 5/5 ✓ | READY |
 | US-002 | ... | 45/100 | 3/6 ✗ | 2/5 ✗ | BLOCKED |
 
+## Criterion scenarios
+| Criterion | Scenario |
+|-----------|----------|
+| AC-example-1 | Successful example flow |
+
 ## Detailed Analysis: US-002 (BLOCKED)
 
 ### INVEST Analysis
@@ -110,6 +119,10 @@ floor is closed at those two: `Measurable` and `Traceability` are deliberately e
 - Add AC: "Given X, when Y, then Z within 200ms"
 ```
 
+Compute the revision line from the specification bytes with
+`sha256sum docs/features/<f>/01_specification.md`. The `## Criterion scenarios` table is the artifact
+the Traceability score keys on: it maps each AC id to a named scenario.
+
 ### Security Acceptance Criteria (scoring: +5 present / -10 missing, see Scoring Bonus below)
 
 When requirements involve authentication, data storage, external APIs, or multi-tenancy,

package/templates/.claude/skills/requirements-validator/references/feature-report-contracts.md

@@ -0,0 +1,67 @@
+# Feature report contracts (`/feature`, Phases 2–4)
+
+Byte-level formats that the packaged gates enforce. Read this when WRITING one of the three reports;
+the gates are the machine half: `scripts/check-pipeline-gaps.sh` (`--report-revision`,
+`--criterion-scenarios`, `--completion`) and `.claude/hooks/check-review-contract.cjs`. Exit codes
+everywhere: `0` pass · `1` named gap(s), one line each · `2` could not establish (missing, unreadable,
+symlinked or malformed input). Neither non-zero status is ever a warning.
+
+## Shared keys
+
+- **AC ids** are `### AC-<slug>-<n>` headings in `docs/features/<f>/01_specification.md`
+  (`(FR|NFR|AC)-[A-Za-z0-9]+(-[A-Za-z0-9]+)*-[0-9]+`; fenced code blocks are ignored). FR/NFR stay under
+  the Phase 1 specification↔pseudocode gate; the three contracts below key on **AC-** ids only.
+- **Spec revision line** — `Spec revision: sha256:<64 lowercase hex>`, the SHA-256 of the BYTES of
+  `01_specification.md` (`sha256sum docs/features/<f>/01_specification.md`), within the first 20 lines
+  of `validation-report.md` and of `review-report.md`. A report is bound to the revision it judged;
+  editing the specification afterwards makes the report stale by construction.
+
+## validation-report.md (Phase 2)
+
+```markdown
+# Requirements Testability Analysis
+Spec revision: sha256:<digest of 01_specification.md>
+
+## Criterion scenarios
+| Criterion | Scenario |
+|-----------|----------|
+| AC-example-1 | Successful example flow |
+```
+
+`## Criterion scenarios` maps every AC id to the named BDD scenario that covers it — the artifact the
+`Traceability` blocking floor keys on (`references/scoring-system.md`). It is NOT the algorithm-level
+`## Scenario Coverage` block that `sparc-prd-mini` writes into `02_pseudocode.md`. An AC id without a
+row, an undeclared id, or an empty scenario cell is a named gap; a missing table cannot be established.
+
+## 05_completion.md (Phase 3)
+
+```markdown
+## Criterion coverage
+| Criterion | Test file | Test title |
+|-----------|-----------|------------|
+| AC-example-1 | tests/example.test.js | rejects an invalid request |
+```
+
+One row per AC id. `Test file` is relative to the project root and must be a regular file inside it
+(absolute, `..`-escaping and symlinked paths are refused); `Test title` must occur verbatim in that
+file. Both directions compare: an AC id without a row and a row whose id is not in the specification
+are gaps. A table of names is not evidence — the gate opens the file.
+
+## review-report.md (Phase 4)
+
+```markdown
+Reviewer family: claude|codex|human|unknown
+Spec revision: sha256:<64 lowercase hex>
+
+## Spec conformance
+| Criterion | Verdict | Evidence |
+|-----------|---------|----------|
+| AC-example-1 | met | tests/example.test.js — rejects an invalid request |
+```
+
+Input contract: the review receives `01_specification.md` and `validation-report.md`; a review that
+was not given the specification is incomplete by construction and must say so instead of grading code
+quality alone. Output contract: both header lines within the first 20 lines (`Reviewer family:` is a
+DISCLOSURE — the package refuses silence but cannot verify which family reviewed); every AC id exactly
+once in `## Spec conformance`; `Verdict` is exactly `met`, `not met` or `unverifiable` (lowercase);
+a `met` or `not met` row carries non-empty evidence; a `not met` row ideally carries a reproducer.

package/templates/.claude/skills/requirements-validator/references/scoring-system.md

@@ -31,7 +31,7 @@ Total Score = INVEST Score (50%) + SMART Score (30%) + Quality Score (20%)
 
 | Criterion | Weight | Points | Calculation |
 |-----------|--------|--------|-------------|
-| Traceability | 10% | 0-10 | 10 if linked to tests, 5 if partial, 0 if none |
+| Traceability | 10% | 0-10 | 10 if every AC id has a named scenario in the Criterion scenarios table; 5 if some do (the uncovered AC ids MUST be listed by name); 0 if none do, or the block is absent ⇒ the floor applies |
 | Completeness | 10% | 0-10 | See completeness rubric below |
 
 ### Completeness Rubric
@@ -56,12 +56,13 @@ Total Score = INVEST Score (50%) + SMART Score (30%) + Quality Score (20%)
 ### Blocking floor (overrides the total, both directions)
 
 **The weakest link decides, never the average.** A requirement is BLOCKED — whatever its total says —
-if either of these is zero:
+if any of these is zero:
 
 | Criterion | Zero means | Why it vetoes |
 |-----------|-----------|---------------|
 | `Testable` (INVEST, 8) | no acceptance criteria exist | the gate exists to block untestable requirements |
 | `Completeness` (Quality, 10) | "No AC" on the rubric above | nothing states what "done" is |
+| `Traceability` (Quality, 10) | no AC has a named scenario in the Criterion scenarios table | a story can otherwise pass validation with no scenario or test on any criterion |
 
 Without this floor the total alone lets an untestable requirement through. Worked case: a story with
 NO acceptance criteria and NO test links loses `Testable` 8, `Completeness` 10 and `Traceability` 10,
@@ -76,10 +77,18 @@ criteria AND is bound by the floor, so a score is not evidence of anything — r
 > the actual text, with its document and heading. `Testable = 4` means the AC exist and are vague:
 > quote them. **No quote ⇒ the score is 0 ⇒ the floor applies.**
 
-**The floor is CLOSED at these two.** `Measurable` and `Traceability` are deliberately NOT on it: a
-requirement with no number is often correct ("the user can export the report as PDF" is specific,
-testable and unmeasurable), so vetoing on `Measurable` would turn a false pass into a false block.
-Widening this list needs the same kind of worked case as the one above.
+> A non-zero `Traceability` REQUIRES the Criterion scenarios table (AC id → named scenario) quoted,
+> or referenced by document and heading. **No table ⇒ the score is 0 ⇒ the floor applies.**
+
+Measured worked case: story FR-009 had 27 criteria with no IDs, more than 10 of them uncovered by
+any scenario, and passed validation. Its validation report 3.1 was written against document revision
+2; only a human noticed. With no named AC-id → scenario artifact, `Traceability = 0` and the floor
+blocks that contour instead of letting its total hide the missing coverage.
+
+**The floor is CLOSED at these three.** `Measurable` is deliberately NOT on it: a requirement with no
+number is often correct ("the user can export the report as PDF" is specific, testable and
+unmeasurable), so vetoing on `Measurable` would turn a false pass into a false block. Widening this
+list needs the same kind of worked case as the ones above.
 
 ## Quality Gate Rules
 

package/tests/e2e/feature-contour.test.js

@@ -0,0 +1,176 @@
+'use strict';
+
+// Assert lifecycle contract content, not a template hash: a sha256 pin detects any change but
+// cannot distinguish a defect from an intentional edit that preserves every required gate.
+
+const { describe, test } = require('node:test');
+const assert = require('node:assert/strict');
+const crypto = require('node:crypto');
+const fs = require('node:fs');
+const os = require('node:os');
+const path = require('node:path');
+const { spawnSync } = require('node:child_process');
+
+const PACKAGE_ROOT = path.resolve(__dirname, '..', '..');
+const FIXTURE = path.join(PACKAGE_ROOT, 'tests', 'fixtures', 'feature-contour');
+const CHECKER = path.join(PACKAGE_ROOT, 'scripts', 'check-pipeline-gaps.sh');
+const REVIEW_HOOK = path.join(
+  PACKAGE_ROOT, 'templates', '.claude', 'hooks', 'check-review-contract.cjs',
+);
+const FEATURE_TEMPLATE = path.join(
+  PACKAGE_ROOT, 'templates', '.claude', 'commands', 'feature.md',
+);
+
+// The fixture ships only the consumer's OWN files (docs/, tests/). The two shipped templates the
+// checker reads for its role maps are materialised from templates/ at run time, byte-identical:
+// a stub copy inside the fixture would be a third copy of a canonical skill and trip no-skill-drift.
+const TEMPLATE_FILES = [
+  ['commands', 'feature.md'],
+  ['skills', 'sparc-prd-mini', 'SKILL.md'],
+];
+
+function project(t) {
+  const root = fs.mkdtempSync(path.join(os.tmpdir(), 'feature-contour-e2e-'));
+  fs.cpSync(FIXTURE, root, { recursive: true });
+  for (const parts of TEMPLATE_FILES) {
+    const target = path.join(root, '.claude', ...parts);
+    fs.mkdirSync(path.dirname(target), { recursive: true });
+    fs.copyFileSync(path.join(PACKAGE_ROOT, 'templates', '.claude', ...parts), target);
+  }
+  t.after(() => fs.rmSync(root, { recursive: true, force: true }));
+  return root;
+}
+
+function execute(command, args, cwd) {
+  const result = spawnSync(command, args, { cwd, encoding: 'utf8', timeout: 10000 });
+  return {
+    status: result.status,
+    signal: result.signal,
+    output: `${result.stdout || ''}${result.stderr || ''}`,
+  };
+}
+
+function checker(root, flags = [
+  '--traceability', '--completion', '--report-revision', '--criterion-scenarios',
+]) {
+  return execute('bash', [CHECKER, root, ...flags], root);
+}
+
+function hook(root) {
+  return execute(process.execPath, [REVIEW_HOOK, root, 'demo-gate'], root);
+}
+
+function replace(root, relative, transform) {
+  const target = path.join(root, relative);
+  fs.writeFileSync(target, transform(fs.readFileSync(target, 'utf8')));
+}
+
+function phase(text, number, nextNumber) {
+  const start = text.indexOf(`### Phase ${number}:`);
+  assert.notEqual(start, -1, `Phase ${number} heading missing`);
+  const end = nextNumber === undefined ? text.length : text.indexOf(`### Phase ${nextNumber}:`, start);
+  assert.notEqual(end, -1, `Phase ${nextNumber} heading missing`);
+  return text.slice(start, end);
+}
+
+describe('feature contour consumer contract', () => {
+  test('green fixture binds specification, validation, completion, review, and executable evidence', (t) => {
+    const root = project(t);
+    const specification = fs.readFileSync(path.join(
+      root, 'docs', 'features', 'demo-gate', '01_specification.md',
+    ));
+    const validation = fs.readFileSync(path.join(
+      root, 'docs', 'features', 'demo-gate', 'validation-report.md',
+    ), 'utf8');
+    const expectedDigest = crypto.createHash('sha256').update(specification).digest('hex');
+    assert.match(validation, new RegExp(`^Spec revision: sha256:${expectedDigest}$`, 'm'),
+      'the checked-in fixture revision must match the specification bytes');
+
+    const gate = checker(root);
+    assert.equal(gate.status, 0, gate.output);
+    assert.match(gate.output, /VERDICT traceability=PASS/);
+    assert.match(gate.output, /VERDICT completion=PASS/);
+    assert.match(gate.output, /VERDICT report-revision=PASS/);
+    assert.match(gate.output, /VERDICT criterion-scenarios=PASS/);
+
+    const review = hook(root);
+    assert.equal(review.status, 0, review.output);
+    const fixtureTests = execute(process.execPath, ['--test', 'tests/demo.test.js'], root);
+    assert.equal(fixtureTests.status, 0, fixtureTests.output);
+  });
+
+  test('deleting AC-demo-gate-2 coverage is a named completion gap', (t) => {
+    const root = project(t);
+    replace(root, 'docs/features/demo-gate/05_completion.md', (body) =>
+      body.replace(/^\| AC-demo-gate-2 .*\n/m, ''));
+    const result = checker(root, ['--completion']);
+    assert.equal(result.status, 1, result.output);
+    assert.match(result.output,
+      /GAP contour=demo-gate completion AC-demo-gate-2 has no row in Criterion coverage/);
+  });
+
+  test('changing specification bytes invalidates both report revision contracts', (t) => {
+    const root = project(t);
+    fs.appendFileSync(path.join(
+      root, 'docs', 'features', 'demo-gate', '01_specification.md',
+    ), '\n');
+    const revision = checker(root, ['--report-revision']);
+    assert.equal(revision.status, 1, revision.output);
+    assert.match(revision.output,
+      /GAP contour=demo-gate report-revision validation-report\.md sha256:.* != specification sha256:/);
+
+    const review = hook(root);
+    assert.equal(review.status, 1, review.output);
+    assert.match(review.output, /GAP Spec revision mismatch report=.* specification=/);
+  });
+
+  test('removing Reviewer family is a named review-contract gap', (t) => {
+    const root = project(t);
+    replace(root, 'docs/features/demo-gate/review-report.md', (body) =>
+      body.replace(/^Reviewer family:.*\n/m, ''));
+    const review = hook(root);
+    assert.equal(review.status, 1, review.output);
+    assert.match(review.output, /GAP Reviewer family line missing/);
+  });
+
+  test('changing a test title breaks completion evidence by name', (t) => {
+    const root = project(t);
+    replace(root, 'tests/demo.test.js', (body) =>
+      body.replace('rejects an invalid value', 'declines an invalid value'));
+    const result = checker(root, ['--completion']);
+    assert.equal(result.status, 1, result.output);
+    assert.match(result.output,
+      /AC-demo-gate-2 test file tests\/demo\.test\.js does not contain title "rejects an invalid value"/);
+  });
+
+  test('deleting AC-demo-gate-1 scenario is a named traceability-floor gap', (t) => {
+    const root = project(t);
+    replace(root, 'docs/features/demo-gate/validation-report.md', (body) =>
+      body.replace(/^\| AC-demo-gate-1 .*\n/m, ''));
+    const result = checker(root, ['--criterion-scenarios']);
+    assert.equal(result.status, 1, result.output);
+    assert.match(result.output,
+      /GAP contour=demo-gate criterion-scenarios AC-demo-gate-1 has no scenario row/);
+  });
+
+  test('feature template carries each blocking gate in its owning phase and AUTO mode', () => {
+    const template = fs.readFileSync(FEATURE_TEMPLATE, 'utf8');
+    const phase2 = phase(template, 2, 3);
+    const phase3 = phase(template, 3, 4);
+    const phase4 = phase(template, 4);
+    assert.match(phase2, /--report-revision/);
+    assert.match(phase2, /--criterion-scenarios/);
+    assert.match(phase3, /--completion/);
+    assert.match(phase3, /## Criterion coverage/);
+    assert.match(phase4, /check-review-contract\.cjs/);
+
+    const autoStart = template.indexOf('## AUTO mode');
+    const autoEnd = template.indexOf('\n## Related', autoStart);
+    assert.notEqual(autoStart, -1, 'AUTO mode heading missing');
+    assert.notEqual(autoEnd, -1, 'AUTO mode boundary missing');
+    const auto = template.slice(autoStart, autoEnd);
+    assert.match(auto, /--report-revision/);
+    assert.match(auto, /--criterion-scenarios/);
+    assert.match(auto, /--completion/);
+  });
+});

package/tests/fixtures/feature-contour/docs/features/demo-gate/01_specification.md

@@ -0,0 +1,15 @@
+# Specification — Demo gate
+
+## Requirements
+
+### FR-demo-gate-1 — Validate a submitted value
+
+The demo validator must distinguish accepted values from rejected values.
+
+### AC-demo-gate-1 — Accept a valid value
+
+Given a valid value, when the validator runs, then it reports acceptance.
+
+### AC-demo-gate-2 — Reject an invalid value
+
+Given an invalid value, when the validator runs, then it reports rejection.

package/tests/fixtures/feature-contour/docs/features/demo-gate/02_pseudocode.md

@@ -0,0 +1,19 @@
+# Pseudocode — Demo gate
+
+## Validation algorithm
+
+### Algorithm: Validate submitted value
+
+REQUIREMENT: `FR-demo-gate-1`
+REQUIREMENT: `AC-demo-gate-1`
+REQUIREMENT: `AC-demo-gate-2`
+
+INPUT: submitted value
+
+OUTPUT: acceptance decision
+
+STEPS:
+
+1. Compare the submitted value with the accepted fixture value.
+2. Return acceptance for a match.
+3. Return rejection otherwise.

package/tests/fixtures/feature-contour/docs/features/demo-gate/03_architecture.md

@@ -0,0 +1,3 @@
+# Architecture — Demo gate
+
+The fixture keeps its executable evidence in `tests/demo.test.js`; the completion artifact binds each acceptance criterion to one named test in that file.

package/tests/fixtures/feature-contour/docs/features/demo-gate/04_refinement.md

@@ -0,0 +1,3 @@
+# Refinement — Demo gate
+
+The negative path uses a deliberately invalid value so the rejection criterion is independently observable.

package/tests/fixtures/feature-contour/docs/features/demo-gate/05_completion.md

@@ -0,0 +1,7 @@
+# Completion — Demo gate
+
+## Criterion coverage
+| Criterion | Test file | Test title |
+|-----------|-----------|------------|
+| AC-demo-gate-1 | tests/demo.test.js | accepts a valid value |
+| AC-demo-gate-2 | tests/demo.test.js | rejects an invalid value |

package/tests/fixtures/feature-contour/docs/features/demo-gate/review-report.md

@@ -0,0 +1,11 @@
+# Review report — Demo gate
+Reviewer family: claude
+Spec revision: sha256:264708a769ad0d07d715420d82278461c5f1b831dd365eaaf6be051db18d47e8
+
+The fixture implementation and its executable tests conform to both declared criteria.
+
+## Spec conformance
+| Criterion | Verdict | Evidence |
+|-----------|---------|----------|
+| AC-demo-gate-1 | met | tests/demo.test.js — accepts a valid value |
+| AC-demo-gate-2 | met | tests/demo.test.js — rejects an invalid value |

package/tests/fixtures/feature-contour/docs/features/demo-gate/validation-report.md

@@ -0,0 +1,10 @@
+# Validation report — Demo gate
+Spec revision: sha256:264708a769ad0d07d715420d82278461c5f1b831dd365eaaf6be051db18d47e8
+
+The specification is ready for implementation: both acceptance criteria have concrete scenarios.
+
+## Criterion scenarios
+| Criterion | Scenario |
+|-----------|----------|
+| AC-demo-gate-1 | Valid input is accepted |
+| AC-demo-gate-2 | Invalid input is rejected |

package/tests/fixtures/feature-contour/tests/demo.test.js

@@ -0,0 +1,16 @@
+'use strict';
+
+const { test } = require('node:test');
+const assert = require('node:assert/strict');
+
+function accepts(value) {
+  return value === 'valid';
+}
+
+test('accepts a valid value', () => {
+  assert.equal(accepts('valid'), true);
+});
+
+test('rejects an invalid value', () => {
+  assert.equal(accepts('invalid'), false);
+});

package/tests/snapshot/baseline.json

@@ -1,6 +1,6 @@
 {
-  "generatedAt": "2026-09-02T06:02:58.142Z",
-  "totalFiles": 164,
+  "generatedAt": "2026-09-03T05:28:07.394Z",
+  "totalFiles": 167,
   "files": {
     ".claude/agents/doc-validator.md": "e57950758cd4764b2cb54b3f1905567e9dbc1ed20ac6ecd30998614894689f4f",
     ".claude/agents/harvest-coordinator.md": "71e524e8379df46bbf457dbc1d4480634e05c99b7d3a4f59a356b8d71a0a4166",
@@ -8,13 +8,13 @@
     ".claude/agents/replicate-coordinator.md": "bbfe18a7642954f357db08e849349fee02681e2f0ffa036539c45d98dbaba960",
     ".claude/commands/deploy.md": "27f5424ee217163c55e5e6b9322a1f0858159407bd24ebd6d6588d6c22a5f890",
     ".claude/commands/docs.md": "be03592cb3f1d61b60dc96d3e26d71281ad4eb2d4626012c080ce609a32c96e4",
-    ".claude/commands/feature.md": "b2bb83fce09f823a36c943f397d63ff9d9406da1dadc055c4f187f8ff964d1ce",
+    ".claude/commands/feature.md": "6908fa6c8ba770f829378a021d5f7e9a9bc79a15bdd67b278d8c6a765968b291",
     ".claude/commands/go.md": "e7337012dccaab09e0cf27a696ebff14bea4626fb5167538af7da2f5cc7b597a",
     ".claude/commands/harvest.md": "ed6355c102af0f2c62bf6714fce63157e0cb1c1ee85bc32c96f137b8b0c0e1ba",
     ".claude/commands/myinsights.md": "f31c5e133b5027197359e4179cbba1ab535f990634a69ea7c5c73bd2bc329d68",
     ".claude/commands/next.md": "1e4984306c3aa80dfc8734dc1c975dfe5fdf2cf6396ddd759e4c7635646107b8",
     ".claude/commands/plan.md": "6fef889f51168981bf4a98b8392a0d595e3d199e1cfaa8e08c0a181ec6c440e4",
-    ".claude/commands/replicate.md": "165d7b3c0606be6817893b53cbfc5ca55c7b81cbe35cbdd0dccf8679d702e81a",
+    ".claude/commands/replicate.md": "f176d8ec871459b5a8d2111b8527331f34340d6e169da8cc7792953e3e334774",
     ".claude/commands/run.md": "87144dfe8c56c15ba7c117daa544d8a08b84d7205f21dafcc48d27c6c3995059",
     ".claude/commands/start.md": "fb8a7762f4073b9e8689dec3830680907efb9ec68bb2faa39b8a547793d9a078",
     ".claude/hooks/autocommit-insights.cjs": "5e7cef87b24d457f25315d79fe15f0dfaf94d9269495d638817f0faee2593c6f",
@@ -22,7 +22,8 @@
     ".claude/hooks/autocommit-roadmap.cjs": "f4dcc9ffd9a3aed91dd56e011e699fcf8af903cc81594e4ab1ef61e5432a36ad",
     ".claude/hooks/capture-source-path.cjs": "bed92548c3313d69110b6cc06e6b2b858d9d548b8c18c82750ae90d514212bf2",
     ".claude/hooks/check-canon.cjs": "99e6bff9b0078eb2ec23f7df98b7ac06c894f9018eba4a8c358e8f92e5ec7b06",
-    ".claude/hooks/check-docs-complete.cjs": "27c05c2adcedc806e395b30b455243193a4fbd0968ce96e415679e1f78db951a",
+    ".claude/hooks/check-dangling-refs.cjs": "8f012876b1af110a1093319d36a2f84208a15780dbb8abb5a43eb4aeb8f76865",
+    ".claude/hooks/check-docs-complete.cjs": "0f516df0882c9da53d166a1b4e30ff1fc37bd5a2027c7e5fbdab6cba116ca828",
     ".claude/hooks/check-embed-contract.cjs": "9e963a07c12350b760264133021e75fb699439b1f060332e1ccdd962b645b4a0",
     ".claude/hooks/check-external-deps.cjs": "7bce49a744170a3193edf4b2238bcc5a6f1b0efa29333760a52e4fd145739d18",
     ".claude/hooks/check-file-ownership.cjs": "c6273e7b0817d15e375586131924a08095722aff7d0e6a6a04c857a480788e1f",
@@ -34,30 +35,31 @@
     ".claude/hooks/check-metric-source.cjs": "315deda6354f91737165786bdb22b799517bd80530e5b4584593c4f4df84c56e",
     ".claude/hooks/check-model-cost.cjs": "425bda547661e0b31f313d6bb371db4d303cc83a43189fb4dc981e1fb43fac06",
     ".claude/hooks/check-ports.cjs": "2b458cf78367ec7752174f08aa40109b3b6217e405f99a46e18e75e4b69bc87e",
+    ".claude/hooks/check-review-contract.cjs": "44e32ea31a4a71ceb6eccb0956006519de270eab787a79ab4884978bc04385ab",
     ".claude/hooks/check-source-version.cjs": "b9dc2eee7403119481ea2c49a94581613f2c134685448736c2734948a638a010",
     ".claude/hooks/check-swarm-receipts.cjs": "9fa83d78b085d8eea28958b4722999ba44a7bd47c98fe5a96127fc5b5230b40c",
     ".claude/hooks/check-webhook-contract.cjs": "dfa27bd24cee8868fd60be5d24749c206f303fe4afcc1e72024d526324562a39",
     ".claude/hooks/session-insights.cjs": "31fbe90d81b01dfb56557ed5d68dbde2211a14d5469c5d3761f45fb63c07c3a7",
     ".claude/hooks/state-update.cjs": "47146a76b768ac2273abe8f2f017856a0e28b45afaf90048148da417dd19604e",
-    ".claude/hooks/statusline.cjs": "6e30ccdcdbe3c36896b85821f8986077a0e4065fdff3b103d669fac7ad44670e",
+    ".claude/hooks/statusline.cjs": "bac385da01dd9f1548d0db48a2acdada5e89a7822a7f0ecfb61cb74ff4cda138",
     ".claude/hooks/write-insight.cjs": "743f2d85b037cf522dfaf4775947b0cd331e52f2f304e88360c160e0e8e9a589",
-    ".claude/rules/cost-of-detection-ladder.md": "f15309ee8f1494478ff7678380dbe8fc8eecd154be36d57c9090cd17126a07da",
-    ".claude/rules/docker-ports.md": "59eb430f29dd762e8b76ad6d1177fe8b5b250de007856c743387cb88ee157942",
+    ".claude/rules/cost-of-detection-ladder.md": "d2e7da3d56c8d4c6d1aa58e793fa0d5eecd65a5c01be38dfa0dc434273306838",
+    ".claude/rules/docker-ports.md": "a9e5bb9a797ea4ef4c0671cee2cbec95f2557f8b9e1d20b84bbcee7ce4c21162",
     ".claude/rules/embeddable-widget.md": "0159224f8e9599b67a860738bb42e3e40adf598176c48ea6c86a01c891f0f18c",
-    ".claude/rules/feature-lifecycle.md": "4e926f84f244feb6824114a0624733738669c93e0508693fa2afa4e9a35c2aa3",
+    ".claude/rules/feature-lifecycle.md": "a7d0adf6bc63b942d3dec339b3ae68972c3dedc0b48a91d27653309c7da7f11f",
     ".claude/rules/git-workflow.md": "7d8d2ded47fcc0fb95da3dc226efa6cb3c80d6adf7296977588c181dfce20192",
     ".claude/rules/honest-configuration.md": "851bc28e9e2baf1043bc09b982f3df3431bc7af1e076f8ff9df3d6729835bad5",
     ".claude/rules/incoming-webhooks.md": "92f3de02814ed0610df644acf554f4b41b2bae2f9d281695e2e217a1d6558e84",
     ".claude/rules/insights-capture.md": "d529e6be79178636ca362d83366b1dd7a843371e8ba4f2b09d65c009fab52dc4",
     ".claude/rules/long-running-job.md": "e6bd0efff89338998d34440a94dc9288cf7bcf790b27bcaa51b83d43f57942ed",
     ".claude/rules/model-call-cost.md": "26c3b20ac3ed7f9cf6deb5e94302ade87f9e3e51fffca7ac2377ff31bc144f34",
-    ".claude/rules/replicate-pipeline.md": "879ca7b6ca9039c7b94f6b9df2eadca9ec5fd0f97da5f468d5ee723f3d47f438",
+    ".claude/rules/replicate-pipeline.md": "9c4bbaa9ac628ec5d4e44d3ace6eec0b5bd602b5dccc5d36f123d73be448f159",
     ".claude/rules/skill-interface-protocol.md": "c3f624d0a8a4c7e0f5744e529eb4486cc0589fdb732b9799bccc75091a6d63ca",
     ".claude/rules/swarm-file-evidence.md": "c71a216dbc3fd633c30949823ceac354f8439b96279a1a8dd606afb1b3ef5c45",
     ".claude/settings.json": "18db09827dce410667b93e2b1a41ef8e46d4431114733e4304a5fc2192b2fc66",
     ".claude/skills/brutal-honesty-review/evals/brutal-honesty-review.yaml": "855c155d55575e12aab23fb3a5fb2fada74d93974ff755dfedac6f2d5bd41f13",
     ".claude/skills/brutal-honesty-review/README.md": "2a026b4af50b21456e50424fbfa089cb983fbbaa0c68024c8c17c695bea25a57",
-    ".claude/skills/brutal-honesty-review/resources/assessment-rubrics.md": "dac09c91c765e2211799cc230738fb72a966f47511edb872306a906e49640cbe",
+    ".claude/skills/brutal-honesty-review/resources/assessment-rubrics.md": "b64894e1ddf8b9da7f2f146c737d35215e7281e3d8be10891d4a9b8aa2bd6d07",
     ".claude/skills/brutal-honesty-review/resources/review-template.md": "95182c8605b1d821360257e1c5dbac4300bda333d861785de417cbb84090b25b",
     ".claude/skills/brutal-honesty-review/schemas/output.json": "2e252a3497b86322e1a6e6bd1aca8708b44389db3a2d81a6f893d467b6351210",
     ".claude/skills/brutal-honesty-review/scripts/assess-code.sh": "2b10d2972b1379adde9a68ddf8bcdb399b7d65075e458a54523ffd8d99ddc746",
@@ -78,7 +80,7 @@
     ".claude/skills/cc-toolkit-generator-enhanced/references/enhanced-recommendations.md": "657e35db0cb77d3a9d1a4d01215a9b8d50441dd863593bee3a84f62aad8b00bc",
     ".claude/skills/cc-toolkit-generator-enhanced/references/extended-mapping.md": "5e87c91956eabc70b4a1084b47b2c9a20ede18bb245735812ead956eafabf3af",
     ".claude/skills/cc-toolkit-generator-enhanced/references/maturity-integration.md": "aa4e743bcd0281525336a298d0489c31481f69ff1a534e1ed1d262d888937deb",
-    ".claude/skills/cc-toolkit-generator-enhanced/references/security-patterns-library.md": "5f1d650c426cbd2c9536b385306605ea62a5a520ee4566d23ca7254409c672a5",
+    ".claude/skills/cc-toolkit-generator-enhanced/references/security-patterns-library.md": "4a7fae9ea1870c30b71c923fd5d3626a8926c5e960209fad709f4b8e0534fc80",
     ".claude/skills/cc-toolkit-generator-enhanced/references/templates/automation-commands.md": "9ce3db4c3c5b9696a312152067c1869b1f421ce77fbcfdca83edaa797c5caf3f",
     ".claude/skills/cc-toolkit-generator-enhanced/references/templates/ddd-agents.md": "c91f81da197a072b57378fd0018eea26c35d909a558bdca6f070eb60153c97b3",
     ".claude/skills/cc-toolkit-generator-enhanced/references/templates/ddd-hooks-commands.md": "8398f2493434db101476300e514a34bf8124a51eb732cf81923f9a5b5a3d5db4",
@@ -145,10 +147,11 @@
     ".claude/skills/problem-solver-enhanced/SKILL.md": "031378aa2e10c98928e35de07d454135e73550cd0c49f0cd886d53e4208d6b9f",
     ".claude/skills/requirements-validator/assets/templates/bdd-feature-template.feature": "5b1e47f10447ce574d0eb3917b69e2613b6e3f9c48b30ff5f4cfb57758c99a1d",
     ".claude/skills/requirements-validator/references/bdd-patterns.md": "04611a8c52c81f3a6d4fc2f9661ebc56159a125b6fb44a4d18b432e2b82de6e3",
+    ".claude/skills/requirements-validator/references/feature-report-contracts.md": "df263cbce17fb5d9dec6514561c66f6283b3f19e2fc85056f0531bac615be0f1",
     ".claude/skills/requirements-validator/references/invest-criteria.md": "ac6976adf776b9b60c784e1a0f6a0d96dd3332b16f4c12b72d3e59f9325bb626",
-    ".claude/skills/requirements-validator/references/scoring-system.md": "49afe072f31f5b4f9a33f6b59487244f494b0f5587b6cc10c797c4de59510114",
+    ".claude/skills/requirements-validator/references/scoring-system.md": "72104b74f07e0610f67f00b246b5225a530203bff225bacf7bf384bc6fd21cdf",
     ".claude/skills/requirements-validator/references/smart-criteria.md": "619a33fdb6bc336872fdf9f1fc91924f8ccd3c2ebef023912124756692b45aef",
-    ".claude/skills/requirements-validator/SKILL.md": "d2b8e71f4053c642f455a0f245ae18471ab25b7a21e0658f0fe410912a47bf8b",
+    ".claude/skills/requirements-validator/SKILL.md": "b4b394adf08feee552f39c83331398f119e0d4abf21e683fe4706da438b4a426",
     ".claude/skills/reverse-engineering-unicorn/examples/noom-cjm-example.md": "01d33586e26bf093a57a7a1082bf3bdba3af801bb8348a685c0418f76987a0b0",
     ".claude/skills/reverse-engineering-unicorn/examples/noom-module1-example.md": "7009cf2e2624a1254913ad2e1ff554e7ff675358b0b99bc0632f2e12132663a3",
     ".claude/skills/reverse-engineering-unicorn/modules/01-intelligence.md": "0770bd63a6a1eeb34e873cb101e2ba0cf88d507e9bc03242046eaa837b9f587c",