@dzhechkov/p-replicator 1.13.2 → 1.13.3

package/.dz-manifest.json

@@ -109,7 +109,7 @@
       },
       {
         "path": "package.json",
-        "sha256": "c9186f299be209dd8aecd28229225dece4fdb76e6750a0d43c31ae19cbeda387"
+        "sha256": "09d9074650a09fe7715324b47211685755777381c8219cdecb0bfbc4d562bd0f"
       },
       {
         "path": "scripts/check-pipeline-gaps.sh",
@@ -149,7 +149,7 @@
       },
       {
         "path": "src/utils.js",
-        "sha256": "86ed569a58e07f5aa2d31f6b932019345bc33abc00f5185601eb1f6ef9ce3815"
+        "sha256": "90d7b12ca01b7ee2cfee6aac68ca11431fa1a507ddfbac155c5d9802d9d91a1e"
       },
       {
         "path": "templates/.claude/agents/doc-validator.md",
@@ -201,7 +201,7 @@
       },
       {
         "path": "templates/.claude/commands/replicate.md",
-        "sha256": "165d7b3c0606be6817893b53cbfc5ca55c7b81cbe35cbdd0dccf8679d702e81a"
+        "sha256": "f176d8ec871459b5a8d2111b8527331f34340d6e169da8cc7792953e3e334774"
       },
       {
         "path": "templates/.claude/commands/run.md",
@@ -231,9 +231,13 @@
         "path": "templates/.claude/hooks/check-canon.cjs",
         "sha256": "99e6bff9b0078eb2ec23f7df98b7ac06c894f9018eba4a8c358e8f92e5ec7b06"
       },
+      {
+        "path": "templates/.claude/hooks/check-dangling-refs.cjs",
+        "sha256": "8f012876b1af110a1093319d36a2f84208a15780dbb8abb5a43eb4aeb8f76865"
+      },
       {
         "path": "templates/.claude/hooks/check-docs-complete.cjs",
-        "sha256": "27c05c2adcedc806e395b30b455243193a4fbd0968ce96e415679e1f78db951a"
+        "sha256": "0f516df0882c9da53d166a1b4e30ff1fc37bd5a2027c7e5fbdab6cba116ca828"
       },
       {
         "path": "templates/.claude/hooks/check-embed-contract.cjs",
@@ -305,7 +309,7 @@
       },
       {
         "path": "templates/.claude/hooks/statusline.cjs",
-        "sha256": "50c08decec3e80ed325f50d7b062fbe0add47e8594002fcc165248492242ab56"
+        "sha256": "bac385da01dd9f1548d0db48a2acdada5e89a7822a7f0ecfb61cb74ff4cda138"
       },
       {
         "path": "templates/.claude/hooks/write-insight.cjs",
@@ -313,11 +317,11 @@
       },
       {
         "path": "templates/.claude/rules/cost-of-detection-ladder.md",
-        "sha256": "f15309ee8f1494478ff7678380dbe8fc8eecd154be36d57c9090cd17126a07da"
+        "sha256": "d2e7da3d56c8d4c6d1aa58e793fa0d5eecd65a5c01be38dfa0dc434273306838"
       },
       {
         "path": "templates/.claude/rules/docker-ports.md",
-        "sha256": "59eb430f29dd762e8b76ad6d1177fe8b5b250de007856c743387cb88ee157942"
+        "sha256": "a9e5bb9a797ea4ef4c0671cee2cbec95f2557f8b9e1d20b84bbcee7ce4c21162"
       },
       {
         "path": "templates/.claude/rules/embeddable-widget.md",
@@ -325,7 +329,7 @@
       },
       {
         "path": "templates/.claude/rules/feature-lifecycle.md",
-        "sha256": "4e926f84f244feb6824114a0624733738669c93e0508693fa2afa4e9a35c2aa3"
+        "sha256": "a7d0adf6bc63b942d3dec339b3ae68972c3dedc0b48a91d27653309c7da7f11f"
       },
       {
         "path": "templates/.claude/rules/git-workflow.md",
@@ -353,7 +357,7 @@
       },
       {
         "path": "templates/.claude/rules/replicate-pipeline.md",
-        "sha256": "13bf073273820addeb87167402495b2f683cefac70a9f6cb07b6e054b1851e0f"
+        "sha256": "9c4bbaa9ac628ec5d4e44d3ace6eec0b5bd602b5dccc5d36f123d73be448f159"
       },
       {
         "path": "templates/.claude/rules/skill-interface-protocol.md",
@@ -381,7 +385,7 @@
       },
       {
         "path": "templates/.claude/skills/brutal-honesty-review/resources/assessment-rubrics.md",
-        "sha256": "dac09c91c765e2211799cc230738fb72a966f47511edb872306a906e49640cbe"
+        "sha256": "b64894e1ddf8b9da7f2f146c737d35215e7281e3d8be10891d4a9b8aa2bd6d07"
       },
       {
         "path": "templates/.claude/skills/brutal-honesty-review/resources/review-template.md",
@@ -465,7 +469,7 @@
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/security-patterns-library.md",
-        "sha256": "5f1d650c426cbd2c9536b385306605ea62a5a520ee4566d23ca7254409c672a5"
+        "sha256": "4a7fae9ea1870c30b71c923fd5d3626a8926c5e960209fad709f4b8e0534fc80"
       },
       {
         "path": "templates/.claude/skills/cc-toolkit-generator-enhanced/references/templates/automation-commands.md",
@@ -869,7 +873,7 @@
       },
       {
         "path": "tests/snapshot/baseline.json",
-        "sha256": "2e442fcb5f39de9f94c2284d385368f2e984bb17998556c41ac9f4f676a6134e"
+        "sha256": "31801798e099c5e43e60de29c3487a586fe6b906b2135ea1060861567d36fdfb"
       },
       {
         "path": "tests/snapshot/templates.test.js",
@@ -901,12 +905,16 @@
       },
       {
         "path": "tests/unit/capture-source-path.test.js",
-        "sha256": "771ee1bb495fe4a60b2fa58cc8009e52610c38145059532d3e158581fdb66d93"
+        "sha256": "cce205634906882d7b8dc9c54dbbfc89abcafe59dd0ff5d0a9ef595e8e1c5356"
       },
       {
         "path": "tests/unit/check-canon.test.js",
         "sha256": "df1aad467e0ed38471dad55547c1af6115ec9daaa5c40e9142e4ce67fedcb1bf"
       },
+      {
+        "path": "tests/unit/check-dangling-refs.test.js",
+        "sha256": "8571d325047e0624d273b2058ca55732360ede48e433750a86aa79b3aba9b273"
+      },
       {
         "path": "tests/unit/check-docs-complete.test.js",
         "sha256": "2c6f16a61f0876f637ac492d5fb2af1ea35ad00161fd1468446ea0d08cd97f4b"
@@ -1029,11 +1037,11 @@
       },
       {
         "path": "tests/unit/guard-honest-input-meta.test.js",
-        "sha256": "b8e6513e09e774b83b2f05ac42d35c4849ef81b58e600e442dd22cf1071d02f3"
+        "sha256": "5996879d9fdf6e194f40b32fff525bf9f257bbfb90719438e21850b15150ded1"
       },
       {
         "path": "tests/unit/honest-failure-rules.test.js",
-        "sha256": "176115fafdca146eff0ebf87361fe6d0f26c7c3621cda03da0140ab72ba9f1ac"
+        "sha256": "f42d66af4e430e5915b7e8daec9bb2c9a5df9f43960863443ec0076d99f6ad67"
       },
       {
         "path": "tests/unit/hooks-project-anchored.test.js",
@@ -1065,7 +1073,11 @@
       },
       {
         "path": "tests/unit/negative-conclusion-gate.test.js",
-        "sha256": "7ffbcfdf638941511dc78c048d5056812e63af203cdf7c9bc757a22540cca14e"
+        "sha256": "6c6a470d22d12ff46301c4ae61ba7a2563c4ff8a3a2d5b3a84c81c6b8c11b067"
+      },
+      {
+        "path": "tests/unit/optional-doc-idiom.test.js",
+        "sha256": "f25338f5928e9d1cba82cdc88506d46256f2b567d7524f159512cb8e06b21f06"
       },
       {
         "path": "tests/unit/pipeline-file-ownership.test.js",
@@ -1073,7 +1085,7 @@
       },
       {
         "path": "tests/unit/quote-provenance.test.js",
-        "sha256": "e9f50ec67b8dde73d609c1df6bbeafa7eaf23f3ae62785362b57d09e3b7e6c70"
+        "sha256": "a6e5416318e22107e728e8800716d4697ff4b8edf00f6fc16019754afe03bbb1"
       },
       {
         "path": "tests/unit/roadmap-one-schema.test.js",
@@ -1117,7 +1129,7 @@
       },
       {
         "path": "tests/unit/traceability-negative-fixture.test.js",
-        "sha256": "abc54e0e00138ecc6d75e0cbc496cbd888cd97b1ed567b7d23557f0674b5c161"
+        "sha256": "f27e812e6ea45e3cc5b21a531e0b3e95517ad7419431ed4fa8dd27628d33faff"
       },
       {
         "path": "tests/unit/utils.test.js",
@@ -1126,8 +1138,12 @@
       {
         "path": "tests/unit/validation-gate-teeth.test.js",
         "sha256": "d4f42a26b67b2fa1dfa8db9984c301a7d7e91657e5e2cdabb1bab307c766138d"
+      },
+      {
+        "path": "tests/unit/verdict-vocabulary.test.js",
+        "sha256": "55982f29de66852d085b561195b495d348a649079f5799658de3b43b697d0532"
       }
     ]
   },
-  "signature": "3K1btPFoe+6u7Nk2opxXnAGF/NbPIv3vow6HbjRyiaCvDUVAUf/KLukvcH9uxbz9eZlTilznynFrRLZmEpj5Dw=="
+  "signature": "DsIFOeT4ntNvUrhbFwpDHt7FDAAAq0dlLrVkPqSmxOmk8sER5xd7d2L7OvMEeaFFzfobe6IYFNtJlv5ISvtiCA=="
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@dzhechkov/p-replicator",
-  "version": "1.13.2",
+  "version": "1.13.3",
   "description": "P-Replicator — Claude Code toolkit for AI-assisted product development (Vibe Coding). Full /replicate pipeline, 10 modular skills (880K+ chars), /harvest knowledge extraction, swarm agents, quality gates, security patterns, cross-project learning.",
   "main": "src/cli.js",
   "bin": {
@@ -73,11 +73,12 @@
     "access": "public"
   },
   "scripts": {
-    "test": "node --test tests/unit/honest-failure-rules.test.js tests/unit/generator-swarm-contract.test.js tests/unit/check-swarm-receipts.test.js tests/unit/check-embed-contract.test.js tests/unit/check-model-cost.test.js tests/unit/check-canon.test.js tests/unit/check-file-ownership.test.js tests/unit/check-source-version.test.js tests/unit/check-handoff-manifest.test.js tests/unit/check-external-deps.test.js tests/unit/check-metric-source.test.js tests/unit/negative-conclusion-gate.test.js tests/unit/check-webhook-contract.test.js tests/unit/check-job-contract.test.js tests/unit/detection-ladder-contract.test.js tests/unit/detection-ladder-registry.test.js tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/insights-dz-delegation.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/doctor-insight-flow.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/check-look-trace.test.js tests/unit/check-look-origin.test.js tests/unit/quote-provenance.test.js tests/unit/guard-honest-input-meta.test.js tests/unit/look-phase-contract.test.js tests/unit/capture-source-path.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/check-review-contract.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/unit/insights-writer.test.js tests/unit/check-pipeline-gaps.test.js tests/unit/traceability-machine-ids.test.js tests/unit/traceability-completion-gate.test.js tests/unit/traceability-negative-fixture.test.js tests/e2e/lifecycle.test.js tests/e2e/feature-contour.test.js tests/e2e/packed-insights-writer.test.js tests/snapshot/templates.test.js",
-    "test:unit": "node --test tests/unit/honest-failure-rules.test.js tests/unit/generator-swarm-contract.test.js tests/unit/check-swarm-receipts.test.js tests/unit/check-embed-contract.test.js tests/unit/check-model-cost.test.js tests/unit/check-canon.test.js tests/unit/check-file-ownership.test.js tests/unit/check-source-version.test.js tests/unit/check-handoff-manifest.test.js tests/unit/check-external-deps.test.js tests/unit/check-metric-source.test.js tests/unit/negative-conclusion-gate.test.js tests/unit/check-webhook-contract.test.js tests/unit/check-job-contract.test.js tests/unit/detection-ladder-contract.test.js tests/unit/detection-ladder-registry.test.js tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/insights-dz-delegation.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/doctor-insight-flow.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/check-look-trace.test.js tests/unit/check-look-origin.test.js tests/unit/quote-provenance.test.js tests/unit/guard-honest-input-meta.test.js tests/unit/look-phase-contract.test.js tests/unit/capture-source-path.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/check-review-contract.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/unit/insights-writer.test.js tests/unit/check-pipeline-gaps.test.js tests/unit/traceability-machine-ids.test.js tests/unit/traceability-completion-gate.test.js tests/unit/traceability-negative-fixture.test.js",
+    "test": "node --test tests/unit/honest-failure-rules.test.js tests/unit/generator-swarm-contract.test.js tests/unit/check-swarm-receipts.test.js tests/unit/check-embed-contract.test.js tests/unit/check-model-cost.test.js tests/unit/check-canon.test.js tests/unit/check-file-ownership.test.js tests/unit/check-source-version.test.js tests/unit/check-handoff-manifest.test.js tests/unit/check-external-deps.test.js tests/unit/check-metric-source.test.js tests/unit/negative-conclusion-gate.test.js tests/unit/check-webhook-contract.test.js tests/unit/check-job-contract.test.js tests/unit/detection-ladder-contract.test.js tests/unit/detection-ladder-registry.test.js tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/insights-dz-delegation.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/doctor-insight-flow.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/check-look-trace.test.js tests/unit/check-look-origin.test.js tests/unit/quote-provenance.test.js tests/unit/guard-honest-input-meta.test.js tests/unit/look-phase-contract.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/check-review-contract.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/unit/insights-writer.test.js tests/unit/check-pipeline-gaps.test.js tests/unit/traceability-machine-ids.test.js tests/unit/traceability-completion-gate.test.js tests/unit/traceability-negative-fixture.test.js tests/e2e/lifecycle.test.js tests/e2e/feature-contour.test.js tests/e2e/packed-insights-writer.test.js tests/snapshot/templates.test.js tests/unit/optional-doc-idiom.test.js tests/unit/verdict-vocabulary.test.js tests/unit/check-dangling-refs.test.js test/mutation-registry-freshness.test.js",
+    "test:unit": "node --test tests/unit/honest-failure-rules.test.js tests/unit/generator-swarm-contract.test.js tests/unit/check-swarm-receipts.test.js tests/unit/check-embed-contract.test.js tests/unit/check-model-cost.test.js tests/unit/check-canon.test.js tests/unit/check-file-ownership.test.js tests/unit/check-source-version.test.js tests/unit/check-handoff-manifest.test.js tests/unit/check-external-deps.test.js tests/unit/check-metric-source.test.js tests/unit/negative-conclusion-gate.test.js tests/unit/check-webhook-contract.test.js tests/unit/check-job-contract.test.js tests/unit/detection-ladder-contract.test.js tests/unit/detection-ladder-registry.test.js tests/unit/utils.test.js tests/unit/adr-scanner-contract.test.js tests/unit/sparc-reconciliation.test.js tests/unit/pipeline-file-ownership.test.js tests/unit/validation-gate-teeth.test.js tests/unit/hooks-project-anchored.test.js tests/unit/insights-dz-delegation.test.js tests/unit/statusline-two-roots.test.js tests/unit/external-dependency-check.test.js tests/unit/spec-pseudocode-traceability.test.js tests/unit/sync-templates-guard.test.js tests/unit/db-port-rule.test.js tests/unit/roadmap-one-schema.test.js tests/unit/hooks-report-failures.test.js tests/unit/growth-module-b2b-gate.test.js tests/unit/detect-parse-anchor.test.js tests/unit/statusline-honest-labels.test.js tests/unit/autocommit-deletion.test.js tests/unit/check-ports.test.js tests/unit/doctor-insight-flow.test.js tests/unit/adr-decision-coverage.test.js tests/unit/growth-requirements-bridge.test.js tests/unit/check-growth-trace.test.js tests/unit/check-look-trace.test.js tests/unit/check-look-origin.test.js tests/unit/quote-provenance.test.js tests/unit/guard-honest-input-meta.test.js tests/unit/look-phase-contract.test.js tests/unit/growth-gate-conditional.test.js tests/unit/module-copy-identity.test.js tests/unit/growth-axes-and-compliance.test.js tests/unit/skill-paths-prebaked.test.js tests/unit/check-docs-complete.test.js tests/unit/check-review-contract.test.js tests/unit/absence-is-not-emptiness.test.js tests/unit/guard-forms.test.js tests/unit/generated-guard-templates.test.js tests/unit/shipped-suite-context.test.js tests/unit/assess-scripts.test.js tests/unit/insights-docs-tell-the-truth.test.js tests/unit/insights-writer.test.js tests/unit/check-pipeline-gaps.test.js tests/unit/traceability-machine-ids.test.js tests/unit/traceability-completion-gate.test.js tests/unit/traceability-negative-fixture.test.js tests/unit/optional-doc-idiom.test.js tests/unit/verdict-vocabulary.test.js tests/unit/check-dangling-refs.test.js",
     "test:e2e": "node --test tests/e2e/lifecycle.test.js tests/e2e/packed-insights-writer.test.js",
     "test:snapshot": "node --test tests/snapshot/templates.test.js",
     "test:doctor": "node bin/cli.js doctor",
-    "snapshot:baseline": "node tests/snapshot/update-baseline.js"
+    "snapshot:baseline": "node tests/snapshot/update-baseline.js",
+    "test:browser": "node --test tests/unit/capture-source-path.test.js"
   }
 }

package/sbom.json

@@ -279,7 +279,7 @@
         },
         {
           "name": "dz:canonical-json-sha256-v2",
-          "value": "c9186f299be209dd8aecd28229225dece4fdb76e6750a0d43c31ae19cbeda387"
+          "value": "09d9074650a09fe7715324b47211685755777381c8219cdecb0bfbc4d562bd0f"
         }
       ]
     },
@@ -379,7 +379,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "86ed569a58e07f5aa2d31f6b932019345bc33abc00f5185601eb1f6ef9ce3815"
+          "content": "90d7b12ca01b7ee2cfee6aac68ca11431fa1a507ddfbac155c5d9802d9d91a1e"
         }
       ]
     },
@@ -509,7 +509,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "165d7b3c0606be6817893b53cbfc5ca55c7b81cbe35cbdd0dccf8679d702e81a"
+          "content": "f176d8ec871459b5a8d2111b8527331f34340d6e169da8cc7792953e3e334774"
         }
       ]
     },
@@ -583,13 +583,23 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "templates/.claude/hooks/check-dangling-refs.cjs",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "8f012876b1af110a1093319d36a2f84208a15780dbb8abb5a43eb4aeb8f76865"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "templates/.claude/hooks/check-docs-complete.cjs",
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "27c05c2adcedc806e395b30b455243193a4fbd0968ce96e415679e1f78db951a"
+          "content": "0f516df0882c9da53d166a1b4e30ff1fc37bd5a2027c7e5fbdab6cba116ca828"
         }
       ]
     },
@@ -769,7 +779,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "50c08decec3e80ed325f50d7b062fbe0add47e8594002fcc165248492242ab56"
+          "content": "bac385da01dd9f1548d0db48a2acdada5e89a7822a7f0ecfb61cb74ff4cda138"
         }
       ]
     },
@@ -789,7 +799,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "f15309ee8f1494478ff7678380dbe8fc8eecd154be36d57c9090cd17126a07da"
+          "content": "d2e7da3d56c8d4c6d1aa58e793fa0d5eecd65a5c01be38dfa0dc434273306838"
         }
       ]
     },
@@ -799,7 +809,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "59eb430f29dd762e8b76ad6d1177fe8b5b250de007856c743387cb88ee157942"
+          "content": "a9e5bb9a797ea4ef4c0671cee2cbec95f2557f8b9e1d20b84bbcee7ce4c21162"
         }
       ]
     },
@@ -819,7 +829,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "4e926f84f244feb6824114a0624733738669c93e0508693fa2afa4e9a35c2aa3"
+          "content": "a7d0adf6bc63b942d3dec339b3ae68972c3dedc0b48a91d27653309c7da7f11f"
         }
       ]
     },
@@ -889,7 +899,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "13bf073273820addeb87167402495b2f683cefac70a9f6cb07b6e054b1851e0f"
+          "content": "9c4bbaa9ac628ec5d4e44d3ace6eec0b5bd602b5dccc5d36f123d73be448f159"
         }
       ]
     },
@@ -959,7 +969,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "dac09c91c765e2211799cc230738fb72a966f47511edb872306a906e49640cbe"
+          "content": "b64894e1ddf8b9da7f2f146c737d35215e7281e3d8be10891d4a9b8aa2bd6d07"
         }
       ]
     },
@@ -1169,7 +1179,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "5f1d650c426cbd2c9536b385306605ea62a5a520ee4566d23ca7254409c672a5"
+          "content": "4a7fae9ea1870c30b71c923fd5d3626a8926c5e960209fad709f4b8e0534fc80"
         }
       ]
     },
@@ -2179,7 +2189,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "2e442fcb5f39de9f94c2284d385368f2e984bb17998556c41ac9f4f676a6134e"
+          "content": "31801798e099c5e43e60de29c3487a586fe6b906b2135ea1060861567d36fdfb"
         }
       ]
     },
@@ -2259,7 +2269,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "771ee1bb495fe4a60b2fa58cc8009e52610c38145059532d3e158581fdb66d93"
+          "content": "cce205634906882d7b8dc9c54dbbfc89abcafe59dd0ff5d0a9ef595e8e1c5356"
         }
       ]
     },
@@ -2273,6 +2283,16 @@
         }
       ]
     },
+    {
+      "type": "file",
+      "name": "tests/unit/check-dangling-refs.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "8571d325047e0624d273b2058ca55732360ede48e433750a86aa79b3aba9b273"
+        }
+      ]
+    },
     {
       "type": "file",
       "name": "tests/unit/check-docs-complete.test.js",
@@ -2579,7 +2599,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "b8e6513e09e774b83b2f05ac42d35c4849ef81b58e600e442dd22cf1071d02f3"
+          "content": "5996879d9fdf6e194f40b32fff525bf9f257bbfb90719438e21850b15150ded1"
         }
       ]
     },
@@ -2589,7 +2609,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "176115fafdca146eff0ebf87361fe6d0f26c7c3621cda03da0140ab72ba9f1ac"
+          "content": "f42d66af4e430e5915b7e8daec9bb2c9a5df9f43960863443ec0076d99f6ad67"
         }
       ]
     },
@@ -2669,7 +2689,17 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "7ffbcfdf638941511dc78c048d5056812e63af203cdf7c9bc757a22540cca14e"
+          "content": "6c6a470d22d12ff46301c4ae61ba7a2563c4ff8a3a2d5b3a84c81c6b8c11b067"
+        }
+      ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/optional-doc-idiom.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "f25338f5928e9d1cba82cdc88506d46256f2b567d7524f159512cb8e06b21f06"
         }
       ]
     },
@@ -2689,7 +2719,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "e9f50ec67b8dde73d609c1df6bbeafa7eaf23f3ae62785362b57d09e3b7e6c70"
+          "content": "a6e5416318e22107e728e8800716d4697ff4b8edf00f6fc16019754afe03bbb1"
         }
       ]
     },
@@ -2799,7 +2829,7 @@
       "hashes": [
         {
           "alg": "SHA-256",
-          "content": "abc54e0e00138ecc6d75e0cbc496cbd888cd97b1ed567b7d23557f0674b5c161"
+          "content": "f27e812e6ea45e3cc5b21a531e0b3e95517ad7419431ed4fa8dd27628d33faff"
         }
       ]
     },
@@ -2822,6 +2852,16 @@
           "content": "d4f42a26b67b2fa1dfa8db9984c301a7d7e91657e5e2cdabb1bab307c766138d"
         }
       ]
+    },
+    {
+      "type": "file",
+      "name": "tests/unit/verdict-vocabulary.test.js",
+      "hashes": [
+        {
+          "alg": "SHA-256",
+          "content": "55982f29de66852d085b561195b495d348a649079f5799658de3b43b697d0532"
+        }
+      ]
     }
   ]
 }

package/src/utils.js

@@ -354,6 +354,7 @@ const COMPONENTS = {
       'write-insight':       'Validate and append one harvest insight to the project Markdown carrier',
       'check-ports':              'Enforce docker-ports Правило №0 against a real compose (invoke deliberately; exits 0/1/2)',
       'check-growth-trace':       'Did the M5 growth seed reach docs/Specification.md (invoke deliberately; exits 0/1/2)',
+      'check-dangling-refs':      'Does shipped prose reference a file that does not exist? (invoke deliberately; exits 0 within baseline, 1 above it, 2 when .claude is absent)',
       'check-look-trace':         'Did the Phase-0.5 source-look seed reach docs/Specification.md (invoke deliberately; exits 0/1/2)',
       'check-look-origin':        'Did a third-party-analysis HYPOTHESIS row reach Specification.md without dated live confirmation (invoke deliberately; exits 0/1/2)',
       'check-review-contract':    'Does review-report.md answer every AC id, disclose the reviewer family and name the spec revision it judged (exits 0/1/2)',

package/templates/.claude/commands/replicate.md

@@ -343,7 +343,15 @@ Security Pattern: # If external integrations
   server_side: "No key storage on backend"
 ```
 
-**Mode:** MANUAL (checkpoint at each phase inside sparc-prd-mini)
+**Mode:** MANUAL — checkpoint at each phase inside `sparc-prd-mini`.
+
+> **Решение владельца 2026-09-03: MANUAL остаётся.** Ночью 2026-09-03 строка была изменена на AUTO
+> как устранение противоречия: навык `sparc-prd-mini` объявляет AUTO своим режимом по умолчанию
+> (`SKILL.md:35`), а эта команда навязывала MANUAL. Противоречие реально, но владелец разрешил его
+> в другую сторону: остановки на фазах — не накладной расход, а точки, где он может отказаться от
+> рамки до того, как она станет кодом. ИЗМЕРЕНО, чтобы цена решения была известна: остановок до
+> первой строки кода тринадцать — пять в этом файле и восемь внутри навыка. Их сохраняют
+> сознательно.
 
 **Output location:** `docs/` directory (NOT `/output/` — write directly into the project)
 

package/templates/.claude/hooks/check-dangling-refs.cjs

@@ -0,0 +1,89 @@
+#!/usr/bin/env node
+'use strict';
+/**
+ * check-dangling-refs.cjs — текст ссылается на файл, которого нет?
+ *
+ * NOT an event hook. Как `check-look-trace.cjs` и соседи, лежит здесь потому, что каталог уже несёт
+ * простые утилиты на Node; в `settings.json` он не зарегистрирован и потому вправе отказывать
+ * ненулевым кодом.
+ *
+ * ─── ЗАЧЕМ ───────────────────────────────────────────────────────────────────
+ * Один класс дефекта ловился вручную минимум четыре раза: список хуков называл 4 из 8; таблица
+ * говорила «Rules 5» при шести; справка обещала 18 видов отказа при 17 в массиве; путь вывода
+ * называл каталог, которого не бывает. Форма всегда одна — ТЕКСТ ССЫЛАЕТСЯ НА ОБЪЕКТ, КОТОРОГО НЕТ,
+ * и ни одна застава об этом не спрашивала. `verify` спросить не может по построению: он обходит
+ * зарегистрированные КОМПОНЕНТЫ и проверяет их наличие, то есть идёт от объекта к тексту, а не от
+ * текста к объекту.
+ *
+ * ─── ЧТО ОН ДЕЛАЕТ, И ЧЕГО НЕ ДЕЛАЕТ ─────────────────────────────────────────
+ * Обходит отгружаемые `*.md`, вытаскивает ссылки вида `` `.claude/<путь>` `` на файлы с известными
+ * расширениями и проверяет существование цели. Он НЕ разбирает прозу и НЕ угадывает намерение:
+ * ссылка засчитывается, только если она в обратных кавычках и оканчивается на расширение из списка.
+ * Ссылка на каталог не проверяется вовсе — каталог может создаваться в работе.
+ *
+ * ─── ПОЧЕМУ БАЗА, А НЕ ПРОСТО ОТКАЗ ──────────────────────────────────────────
+ * ИЗМЕРЕНО 2026-09-03 на свежем дереве: 58 висячих ссылок в 23 файлах, и они не появляются после
+ * `init` — проверено на пустом проекте. Отказать на всех значило бы отказать каждому проекту прямо
+ * сейчас, то есть выключить заставу в первый же день. Поэтому база ЗАКРЕПЛЕНА числом и может только
+ * УМЕНЬШАТЬСЯ: новая висячая ссылка даёт отказ, а починка старой обязана уменьшить базу, иначе
+ * тест краснеет. Это тот же приём, которым в пакете уже ретирован `Final_Summary.md`: сообщаем,
+ * пока не решили, но фиксируем состояние датой и не даём ему ухудшаться.
+ *
+ * Коды: 0 — не хуже базы · 1 — база превышена (названы новые) · 2 — не удалось установить.
+ */
+
+const fs = require('node:fs');
+const path = require('node:path');
+
+/** ИЗМЕРЕНО 2026-09-03 на снимке дерева; может только уменьшаться. */
+const BASELINE = 58;
+
+const REF = /`(\.claude\/[A-Za-z0-9_\-./]+\.(?:cjs|mjs|js|sh|md|json|yaml|yml))`/g;
+
+function walk(dir) {
+  return fs.readdirSync(dir, { withFileTypes: true }).flatMap((e) => {
+    const p = path.join(dir, e.name);
+    return e.isDirectory() ? walk(p) : [p];
+  });
+}
+
+/** Pure half: given a root holding `.claude/`, return every dangling reference found. */
+function danglingRefs(root) {
+  const base = path.join(root, '.claude');
+  if (!fs.existsSync(base)) return null; // не установлено — код 2, а не «чисто»
+  const out = [];
+  for (const file of walk(base)) {
+    if (!file.endsWith('.md')) continue;
+    const src = fs.readFileSync(file, 'utf8');
+    let m;
+    while ((m = REF.exec(src))) {
+      const target = path.join(root, m[1]);
+      if (!fs.existsSync(target)) out.push({ from: path.relative(root, file), to: m[1] });
+    }
+  }
+  return out;
+}
+
+function main(argv) {
+  const root = argv[2] || process.cwd();
+  const found = danglingRefs(root);
+  if (found === null) {
+    console.error(`НЕ УСТАНОВЛЕНО: каталог .claude не найден в ${root} — проверка не выполнялась, и это не «чисто»`);
+    return 2;
+  }
+  const unique = [...new Set(found.map((f) => `${f.from} → ${f.to}`))];
+  if (unique.length > BASELINE) {
+    console.error(`❌ висячих ссылок ${unique.length} при базе ${BASELINE} — текст обещает файлы, которых нет:`);
+    unique.slice(0, 20).forEach((u) => console.error(`   ${u}`));
+    if (unique.length > 20) console.error(`   … и ещё ${unique.length - 20}`);
+    return 1;
+  }
+  console.log(`✅ висячих ссылок ${unique.length}, база ${BASELINE} — не хуже. Проверено файлов: ${walk(path.join(root, '.claude')).filter((f) => f.endsWith('.md')).length}`);
+  if (unique.length < BASELINE) {
+    console.log(`   База устарела в лучшую сторону: опустите BASELINE до ${unique.length}, чтобы достижение закрепилось.`);
+  }
+  return 0;
+}
+
+module.exports = { danglingRefs, BASELINE, REF };
+if (require.main === module) process.exit(main(process.argv));

package/templates/.claude/hooks/check-docs-complete.cjs

@@ -43,7 +43,14 @@ const DOCS = [
   // practice — and blocking on it would have refused every project that ran like that one.
   // The discrepancy is filed; until it is settled this reports rather than refuses.
   { file: 'Final_Summary.md', optional: true, expected: true },
+  // Both entries below were made optional with no recorded reason — the gap the dated-receipt
+  // guard (`tests/unit/optional-doc-idiom.test.js`) found. What would SETTLE it is unmeasured:
+  // whether real projects produce them. So `expected` is deliberately NOT set on either — calling
+  // them expected asserts something nobody measured, calling them dispensable retires a promise
+  // silently. The receipts record the state; they do not resolve it.
+  // MEASURED 2026-09-03: promised twice by `commands/replicate.md`, required by nothing here.
   { file: 'C4_Diagrams.md', optional: true },
+  // MEASURED 2026-09-03: promised SEVEN times by `commands/replicate.md`, required by nothing here.
   { file: 'ADR.md', optional: true },
 ];
 

package/templates/.claude/hooks/statusline.cjs

@@ -245,7 +245,7 @@ function parseExpectedToolkit() {
     commandsExpected: 11,
     agentsExpected: 4,    // pre-shipped only (project agents are extra)
     rulesExpected: 13,    // pre-shipped only (project rules are extra)
-    hooksExpected: 25,    // 4 event hooks + statusline + state-update + writer + 15 checks + 1 capture
+    hooksExpected: 26,    // 4 event hooks + statusline + state-update + writer + 15 checks + 1 capture
   };
 }
 

package/templates/.claude/rules/cost-of-detection-ladder.md

@@ -62,9 +62,9 @@ directly—for example, a static grep cannot establish runtime resilience.
 Every safeguard must connect the reason for the property to an observable signal, a recurring trigger,
 and a response. Record it with this shape:
 
-| Cause / property | Observable signal | Check kind | Layer | Trigger / cadence | Reaction | Owner |
-|---|---|---|---|---|---|---|
-| Why the constraint exists | What changes when it is violated | How it is observed | Where it is enforced | When it runs | What happens on failure | Who acts |
+| Cause / property | Observable signal | Check kind | Layer | Scope — what it does NOT cover | Trigger / cadence | Reaction | Owner |
+|---|---|---|---|---|---|---|---|
+| Why the constraint exists | What changes when it is violated | How it is observed | Where it is enforced | The boundary, stated so nobody has to infer it | When it runs | What happens on failure | | Who acts |
 
 **Reaction must name a concrete action.** Valid reactions include: block or return the change, repair
 the practice or implementation, escalate to the named owner, or revisit the decision explicitly.
@@ -77,7 +77,12 @@ A blank cell, “note the warning,” or “the reviewer decides” does not clo
 3. Select a check kind that can observe that signal.
 4. Place the check on the strongest layer that can express it reliably.
 5. Define its trigger or cadence, concrete Reaction, and owner.
-6. Test that the safeguard fires on a deliberately bad input before trusting the happy path.
+6. Test that the safeguard FIRES on a deliberately bad input — and, in the same breath, that it
+   stays CLEAN on a correct and COMPLETE one. Both halves or neither: a guard proven only to fire is
+   indistinguishable from one that fires at everything, and a guard proven only to pass is
+   indistinguishable from one that cannot see. The two cases are cheap together and worthless apart.
+7. State the check's SCOPE — what it does not look at. Every guard has a boundary, and a boundary
+   left unsaid is read by the next person as "covers everything".
 
 ## Anti-pattern: “the critic/reviewer will catch it”
 
@@ -94,3 +99,31 @@ may complement the check for semantics; it must not carry a deterministic invari
 The same property written only as “remember to include the file” would sit on Layer 5 and could fail
 silently. The artifact test observes the real distribution boundary and defines what happens when it
 breaks.
+
+---
+
+## A guard that cannot fail is not on Layer 1 — it is decoration
+
+A check earns its layer by what it does on BAD input, not by existing. A guard nobody ever saw refuse
+is indistinguishable from a guard that cannot refuse, and the two are told apart by one act: feed it
+the thing it exists to catch and watch it go red.
+
+**The rule.** Every guard you add ships with a case that makes it FAIL. Not a case that exercises it —
+a case that would pass if the guard were deleted, and fails because it is there.
+
+Three ways a guard silently cannot fail, all of them observed:
+
+| How it dies | What it looks like | How to tell |
+|---|---|---|
+| Its predicate matches nothing | green forever, no findings ever | inject the exact shape it names; it must go red |
+| It is never invoked | green because it never ran | grep the pipeline for its invocation and for consumption of its exit code |
+| It refuses on absence | red always, for a reason unrelated to the defect | run it on known-good input; it must go green |
+
+**The honest half of this rule.** No mechanism in this package enforces it. There is no meta-test
+walking every guard and demanding a failing case beside it. Until such a test exists, this rule lives
+on **Layer 4** — it works when someone reads it and applies it, and lapses silently when nobody does.
+Writing it here does not make it Layer 1; only the meta-test would.
+
+That admission is the point. A rule that overstates its own layer is exactly the defect it warns
+about: a Layer-4 habit wearing Layer-1 clothes, which is the worst outcome the ladder describes,
+because it buys the confidence of a deterministic check while keeping the reliability of a reminder.