@echopath-labs/forgerail 0.1.0-alpha.1

package/scripts/validate-release.mjs

@@ -0,0 +1,194 @@
+#!/usr/bin/env node
+
+import { existsSync, readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+
+const root = resolve(dirname(fileURLToPath(import.meta.url)), "..");
+const expectedPackageName = "@echopath-labs/forgerail";
+const expectedVersion = "0.1.0-alpha.1";
+const expectedTag = `v${expectedVersion}`;
+const expectedDate = "2026-08-13";
+const expectedPlugins = [
+  "forgerail",
+  "forgerail-cross-workspace-orchestration",
+  "forgerail-github-rulesets",
+  "forgerail-release-safety",
+  "forgerail-thread-closure",
+];
+const checks = [];
+
+function record(id, passed, detail) {
+  checks.push({ id, passed, detail });
+}
+
+function read(path) {
+  return readFileSync(resolve(root, path), "utf8");
+}
+
+function json(path) {
+  return JSON.parse(read(path));
+}
+
+function findExisting(candidates) {
+  const path = candidates.find((candidate) => existsSync(resolve(root, candidate)));
+  if (!path) throw new Error(`none of the expected paths exist: ${candidates.join(", ")}`);
+  return path;
+}
+
+const packageJson = json("package.json");
+const packageLock = json("package-lock.json");
+record("package-name", packageJson.name === expectedPackageName, packageJson.name);
+record("package-lock-name", packageLock.name === expectedPackageName && packageLock.packages?.[""]?.name === expectedPackageName, packageLock.name);
+record("package-version", packageJson.version === expectedVersion, packageJson.version);
+record("package-lock-version", packageLock.version === expectedVersion && packageLock.packages?.[""]?.version === expectedVersion, packageLock.version);
+record("package-license", packageJson.license === "Apache-2.0", packageJson.license);
+record("package-lock-license", packageLock.packages?.[""]?.license === "Apache-2.0", packageLock.packages?.[""]?.license ?? null);
+record("npm-next-tag", packageJson.publishConfig?.tag === "next", packageJson.publishConfig?.tag ?? null);
+record(
+  "prepublish-gate",
+  ["npm test", "npm run test:shadow", "npm run test:release", "npm run test:consumer"].every((command) => packageJson.scripts?.prepublishOnly?.includes(command)),
+  packageJson.scripts?.prepublishOnly ?? null,
+);
+
+const pluginPaths = {
+  forgerail: ".codex-plugin/plugin.json",
+  "forgerail-cross-workspace-orchestration": findExisting([
+    "../forgerail-cross-workspace-orchestration/.codex-plugin/plugin.json",
+    "plugins/forgerail-cross-workspace-orchestration/.codex-plugin/plugin.json",
+  ]),
+  "forgerail-github-rulesets": findExisting([
+    "../forgerail-github-rulesets/.codex-plugin/plugin.json",
+    "plugins/forgerail-github-rulesets/.codex-plugin/plugin.json",
+  ]),
+  "forgerail-release-safety": findExisting([
+    "../forgerail-release-safety/.codex-plugin/plugin.json",
+    "plugins/forgerail-release-safety/.codex-plugin/plugin.json",
+  ]),
+  "forgerail-thread-closure": findExisting([
+    "../forgerail-thread-closure/.codex-plugin/plugin.json",
+    "plugins/forgerail-thread-closure/.codex-plugin/plugin.json",
+  ]),
+};
+
+for (const name of expectedPlugins) {
+  const plugin = json(pluginPaths[name]);
+  record(`${name}-identity`, plugin.name === name, plugin.name);
+  record(`${name}-version`, plugin.version === expectedVersion, plugin.version);
+  record(`${name}-license`, plugin.license === "Apache-2.0", plugin.license);
+  const licensePath = name === "forgerail" ? "LICENSE" : pluginPaths[name].replace(".codex-plugin/plugin.json", "LICENSE");
+  record(`${name}-license-file`, existsSync(resolve(root, licensePath)), licensePath);
+}
+
+const changelog = read("CHANGELOG.md");
+const releaseHeading = `## ${expectedVersion} - ${expectedDate}`;
+const unreleased = changelog.slice(changelog.indexOf("## Unreleased") + "## Unreleased".length, changelog.indexOf(releaseHeading)).trim();
+record("changelog-version", changelog.includes(releaseHeading), releaseHeading);
+record("changelog-clean-unreleased", unreleased === "No shipping changes yet.", unreleased);
+for (const phrase of ["Workspace Diagnosis", "Return Receipts", "GitHub Rulesets", "Node.js 22 and 24", "Apache-2.0"]) {
+  record(`changelog-${phrase.toLowerCase().replaceAll(/[^a-z0-9]+/g, "-")}`, changelog.includes(phrase), phrase);
+}
+
+const marketplacePath = findExisting(["marketplace/.agents/plugins/marketplace.json", ".agents/plugins/marketplace.json"]);
+const marketplace = json(marketplacePath);
+const marketplacePlugins = new Map(marketplace.plugins.map((plugin) => [plugin.name, plugin]));
+record("marketplace-name", marketplace.name === "echopath-labs", marketplace.name);
+for (const name of expectedPlugins) {
+  const plugin = marketplacePlugins.get(name);
+  record(`marketplace-${name}`, Boolean(plugin), plugin?.source?.path ?? null);
+  if (name !== "forgerail") record(`marketplace-${name}-on-use`, plugin?.policy?.authentication === "ON_USE", plugin?.policy?.authentication ?? null);
+}
+
+const installation = `${read("docs/installation.md")}\n${read("docs/installation.zh-CN.md")}`;
+for (const phrase of [
+  `codex plugin marketplace add echopath-labs/forgerail --ref ${expectedTag}`,
+  "codex plugin add forgerail@echopath-labs",
+  "codex plugin add forgerail-cross-workspace-orchestration@echopath-labs",
+  "codex plugin add forgerail-github-rulesets@echopath-labs",
+  `${expectedPackageName}@${expectedVersion}`,
+  "new Codex task",
+  "adoption-plan --workspace . --host codex",
+  "Host Binding Receipt",
+]) {
+  record(`installation-${phrase.toLowerCase().replaceAll(/[^a-z0-9]+/g, "-")}`, installation.includes(phrase), phrase);
+}
+
+for (const path of [
+  "contracts/adoption-plan.schema.json",
+  "contracts/host-adapter.schema.json",
+  "contracts/host-binding-receipt.schema.json",
+  "adapters/codex.json",
+  "adapters/claude-code.json",
+  "adapters/cursor.json",
+  "templates/FORGERAIL.md",
+  "templates/bindings/codex-compact.md",
+  "docs/adoption.md",
+  "docs/adoption.zh-CN.md",
+]) record(`adoption-path-${path.replaceAll(/[^a-z0-9]+/gi, "-").toLowerCase()}`, existsSync(resolve(root, path)), path);
+
+const codexAdapter = json("adapters/codex.json");
+const claudeAdapter = json("adapters/claude-code.json");
+const cursorAdapter = json("adapters/cursor.json");
+record("codex-adapter-supported", codexAdapter.status === "supported" && codexAdapter.bindingTarget === "AGENTS.md", codexAdapter.status);
+record("claude-adapter-profile-only", claudeAdapter.status === "profile-only", claudeAdapter.status);
+record("cursor-adapter-profile-only", cursorAdapter.status === "profile-only", cursorAdapter.status);
+record("package-adapters", packageJson.files?.includes("adapters/"), packageJson.files ?? null);
+record("package-templates", packageJson.files?.includes("templates/"), packageJson.files ?? null);
+record("no-apply-adoption-script", !read("scripts/forgerail.mjs").includes('command === "apply-adoption"'), "no apply-adoption command");
+
+const releaseEnglish = read("docs/release.md");
+const releaseChinese = read("docs/release.zh-CN.md");
+const releaseDocs = `${releaseEnglish}\n${releaseChinese}`;
+for (const phrase of [
+  "remote_integration_approval",
+  "release_approval",
+  "lifecycle_change_approval",
+  expectedVersion,
+  expectedTag,
+  "Node.js 22 and 24",
+  "release/0.1.0-alpha.1",
+  "Do not unpublish",
+  "AGW",
+  "Host Binding Receipt",
+  ".forgerail/",
+]) {
+  record(`runbook-${phrase.toLowerCase().replaceAll(/[^a-z0-9]+/g, "-")}`, releaseDocs.includes(phrase), phrase);
+}
+for (const [id, document, phrases] of [
+  ["english", releaseEnglish, [
+    "The first public candidate must be an ordinary child of the observed public `main`.",
+    "an ordinary fast-forward successor of the current release head",
+    "the PR base and publication comparison baseline bound to the observed `main`",
+    "the resulting public `main` tree must equal the final signed projection tree",
+    "Install and discover each external Capability Pack separately",
+  ]],
+  ["chinese", releaseChinese, [
+    "首个公共候选必须是已观测 `main` 的普通子 commit。",
+    "当前 release head 的普通 fast-forward successor",
+    "PR base 与 publication comparison baseline 继续绑定已观测 `main`",
+    "公共 `main` tree 必须等于最终签名 projection tree",
+    "每个外部 Capability Pack 分别安装与发现",
+  ]],
+]) {
+  for (const phrase of phrases) {
+    record(`runbook-${id}-${phrase.toLowerCase().replaceAll(/[^a-z0-9]+/g, "-")}`, document.includes(phrase), phrase);
+  }
+}
+record("runbook-no-fixed-external-pack-count", !releaseChinese.includes("三个外部 Capability Pack"), "external Pack count is future-proof");
+
+const workflow = read(".github/workflows/plugin-contracts.yml");
+record("ci-node-22", workflow.includes("- 22"), "Node.js 22");
+record("ci-node-24", workflow.includes("- 24"), "Node.js 24");
+record("ci-release-source", workflow.includes("node scripts/validate-release.mjs"), "release source validator");
+record("ci-progressive-adoption", workflow.includes("node scripts/forgerail.mjs validate-adoption"), "progressive adoption validator");
+
+const failures = checks.filter((check) => !check.passed);
+const report = {
+  schemaVersion: "1.0",
+  release: { version: expectedVersion, tag: expectedTag, date: expectedDate },
+  status: failures.length === 0 ? "passed" : "failed",
+  checks,
+  failures: failures.map(({ id, detail }) => ({ id, detail })),
+};
+console.log(JSON.stringify(report, null, 2));
+if (failures.length > 0) process.exitCode = 1;

package/skills/forgerail/SKILL.md

@@ -0,0 +1,53 @@
+---
+name: forgerail
+description: Use for non-trivial AI-assisted engineering tasks or ForgeRail project adoption that need workspace ownership, rule composition, scope control, independent approval gates, validation expectations, and a verifiable handoff. ForgeRail guides the host Coding Agent without replacing its planning or execution abilities.
+---
+
+# ForgeRail
+
+Act as the engineering guide and guardrail for the current host Agent.
+
+ForgeRail does not implement the task itself. Preserve the Agent's ability to analyze, plan, choose tools, and execute inside explicit boundaries.
+
+## Operating Loop
+
+1. **Observe** the smallest owner workspace, its instructions, Git state, relevant records, and user intent.
+2. **Diagnose only when needed**: first important use, explicit request, material drift, or rule conflict. Use `$forgerail-workspace-diagnosis` rather than broad scanning.
+3. **Compose** the effective Profile from authoritative sources and load only applicable Capability Packs.
+4. **Launch** work with a Task Envelope: goal, owner, allowed scope, prohibited operations, approval gates, validation, and Return Contract.
+5. **Guard** independent approval gates. Remote integration, release, production, destructive, and lifecycle authorization do not inherit from one another.
+6. **Verify** observable files, Git state, tests, logs, and external receipts against the Agent's Return Receipt.
+7. **Learn carefully**: propose reusable Profile changes with provenance. Do not persist them without user confirmation.
+
+Always preserve unrelated user changes and dirty-worktree state. Do not treat a repository, worktree, or task branch as disposable.
+
+## Progressive Adoption
+
+- Installation means capability availability, not project adoption.
+- Default to Plugin Only and the minimum governance level supported by evidence.
+- When durable adoption is requested, generate a read-only Adoption Plan and show its exact paths, base digests, and content before any write.
+- Single-host adoption may use one versioned managed block. Multi-host adoption may use `FORGERAIL.md` as the shared Adoption Contract plus thin Host Bindings.
+- Do not create `.forgerail/` state in alpha.1. Do not treat `profile-only` adapters as verified support.
+- After an approved write, verify discovery in a new task or equivalent supported check and return a Host Binding Receipt.
+
+## Source Precedence
+
+Apply, in order:
+
+1. enforced platform and hosting policy;
+2. nearest owner-workspace instructions and safety rules;
+3. explicit current-task user authorization and restrictions;
+4. confirmed workspace Profile and enabled packs;
+5. repeated observable conventions;
+6. ForgeRail portable defaults.
+
+Surface equal-authority conflicts. Do not silently select one.
+
+## Pack Rules
+
+- Installed means `available`, not `enabled` or `required`.
+- Load a pack only when applicable to the task and permitted by workspace policy.
+- Do not run equivalent ForgeRail and AGW checklists simultaneously; select one owner or stop on conflict.
+- High-risk packs must keep their own authentication, approval, validation, and rollback boundary.
+
+Read `references/contracts.md` when preparing a Task Envelope, Adoption Plan, Host Binding Receipt, or Return Receipt. Read `references/profile-resolution.md` when rules conflict or a durable Profile change is proposed. Read `references/adoption.md` when project adoption or cross-host portability is in scope.

package/skills/forgerail/agents/openai.yaml

@@ -0,0 +1,7 @@
+interface:
+  display_name: "ForgeRail"
+  short_description: "Guide and guard non-trivial engineering work."
+  brand_color: "#B45309"
+  default_prompt: "Use $forgerail to guide this engineering task and verify its handoff."
+policy:
+  allow_implicit_invocation: true

package/skills/forgerail/references/adoption.md

@@ -0,0 +1,13 @@
+# Adoption Rules
+
+Use the minimum level:
+
+1. `plugin-only`: default; no workspace mutation.
+2. `lightweight-adoption`: user-confirmed host instruction binding.
+3. `persisted-governance`: evidence-gated and deferred in alpha.1.
+
+For one host, propose one versioned managed block in its native target. For multiple hosts, propose `FORGERAIL.md` plus thin references. Host files are adapters, not Core sources.
+
+Run `forgerail adoption-plan --workspace <path> --host <adapter>` when the deterministic CLI is available. Never infer permission to apply the returned writes. Display exact content and paths, obtain confirmation, verify base digests immediately before writing, preserve unrelated content, and produce a Host Binding Receipt.
+
+Codex is `supported` in alpha.1. Claude Code and Cursor are `profile-only`; do not close their binding as verified without a host-specific activation check.

package/skills/forgerail/references/contracts.md

@@ -0,0 +1,57 @@
+# Launch And Return Contracts
+
+## Task Envelope
+
+Record the current task's:
+
+- intent and non-goals;
+- owner workspace;
+- allowed and prohibited operations;
+- applicable packs;
+- independent approval gates;
+- validation requirements;
+- required Return Receipt fields.
+
+Task authorization expires with the task. Never promote it into workspace policy automatically.
+
+## Launch Contract
+
+Give the host Agent the Envelope plus the effective rule sources. Specify outcomes and boundaries, not unnecessary implementation steps.
+
+## Return Receipt
+
+Require:
+
+- actual workspace, branch, and commit where applicable;
+- changed scope;
+- validation evidence;
+- external side effects and confirmed non-mutations;
+- residual risks;
+- rollback or recovery entry;
+- deviations from the Launch Contract.
+
+Compare the receipt with observable state. A mismatch keeps closeout incomplete.
+
+## Adoption Plan
+
+Record:
+
+- current and proposed adoption level;
+- explicitly selected Host Adapters and their support status;
+- exact target paths, operations, base SHA-256 digests, candidate content, and content digests;
+- required user confirmation and activation verification;
+- confirmed non-mutations.
+
+Planning is read-only. Do not expose an apply command or generate `.forgerail/` state in alpha.1.
+
+## Host Binding Receipt
+
+After an explicitly approved write, record:
+
+- the plan identity and adopted level;
+- shared contract path when present;
+- each host target, base and applied digests, support check, and verification status;
+- changed files, discovered Skills, and activation verification mode;
+- non-mutations and deviations.
+
+A complete receipt requires every included host to be verified, activation discovery to pass, and deviations to be empty. A `profile-only` host normally keeps closeout incomplete until its host-specific check exists.

package/skills/forgerail/references/profile-resolution.md

@@ -0,0 +1,14 @@
+# Effective Profile Resolution
+
+Treat the Profile as a computed model before treating it as a file.
+
+For each effective rule, retain:
+
+- rule identity;
+- source type and locator;
+- precedence class;
+- observation point;
+- whether it is observed, inferred, confirmed, or a default;
+- owning Capability Pack when applicable.
+
+Do not create `.forgerail/`, edit `AGENTS.md`, or initialize a record system merely to materialize the Profile. When a reusable rule deserves persistence, present a candidate, the proposed owner/source, evidence, effect, and rollback, then wait for user confirmation.

package/skills/forgerail-workspace-diagnosis/SKILL.md

@@ -0,0 +1,42 @@
+---
+name: forgerail-workspace-diagnosis
+description: Use on the first important ForgeRail task, on explicit request, or when workspace rules conflict, drift, or appear insufficient. Performs a bounded read-only diagnosis of existing instructions, records, Git and delivery habits, Skills, and recovery signals before recommending governance changes.
+---
+
+# ForgeRail Workspace Diagnosis
+
+Default to Analyze First and read-only operation.
+
+## Boundaries
+
+- Inspect the smallest owner workspace first.
+- Do not bulk-read archives, dependencies, secrets, unrelated child repositories, or broad history.
+- Do not edit files, install systems, create issues, change repository settings, or persist a Profile without separate authorization.
+- An unavailable integration is not evidence of empty history.
+
+## Diagnosis
+
+1. Identify workspace and nested owner boundaries.
+2. Observe the nearest Agent instructions, Git/default branch evidence, existing record systems, validation/build entries, installed Skills/Plugins, and declared delivery rules.
+3. Classify every finding as `observed_fact`, `inference`, `gap`, `recommendation`, or `requires_confirmation`.
+4. Follow existing habits when they are coherent and sufficient.
+5. Recommend a record-system change only for a concrete gap. OpenSpec may be a preferred example, but Spec Kit, Markdown/ADR, issue-based, or custom documented systems remain valid.
+6. Recommend packs as candidates; installation never implies activation.
+7. Report the observed ForgeRail adoption level and Host Adapter status. Default to Plugin Only; recommend Lightweight Adoption only for an explicit durable-adoption need or a concrete recurring gap.
+8. Never create `.forgerail/` state during diagnosis. Treat Claude Code and Cursor profiles as unverified until host-specific discovery evidence exists.
+
+## Output
+
+Return:
+
+- boundary and evidence inventory;
+- existing habits and source locators;
+- conflicts and gaps;
+- effective defaults that can safely be inherited;
+- at most a few prioritized recommendations;
+- changes requiring explicit approval;
+- whether a full `$workspace-health-review` is warranted.
+
+If the user chooses adoption, hand control back to `$forgerail` for a read-only Adoption Plan, explicit confirmation, bounded write, discovery verification, and Host Binding Receipt.
+
+Read `references/record-strategies.md` when evaluating how the workspace records durable engineering context.

package/skills/forgerail-workspace-diagnosis/agents/openai.yaml

@@ -0,0 +1,7 @@
+interface:
+  display_name: "ForgeRail Workspace Diagnosis"
+  short_description: "Diagnose workspace habits before changing governance."
+  brand_color: "#B45309"
+  default_prompt: "Use $forgerail-workspace-diagnosis to inspect this workspace and recommend only evidence-backed changes."
+policy:
+  allow_implicit_invocation: true

package/skills/forgerail-workspace-diagnosis/references/record-strategies.md

@@ -0,0 +1,13 @@
+# Record Strategy Diagnosis
+
+Diagnose capabilities instead of matching a closed product list.
+
+Look for whether the current practice can:
+
+- discover requirements, decisions, tasks, evidence, status, and recovery entries;
+- route each record to a clear owner;
+- distinguish active and completed work;
+- link related code, docs, changes, and external work;
+- support the current task's review and recovery needs.
+
+OpenSpec, Spec Kit, Markdown, ADRs, issues, Linear, Jira, and custom systems are examples, not an allow-list. Use visible workspace instructions and user context for unknown systems. Recommend a dedicated provider pack only when deterministic schema, API, identity, or mutation semantics are necessary.

package/skills/workspace-health-review/SKILL.md

@@ -0,0 +1,27 @@
+---
+name: workspace-health-review
+description: Use for periodic or requested workspace health reviews focused on durable records, agent instructions, skills, rules, ownership, stale context, context drift, context debt, and recovery risks. Use before large refactors, releases, onboarding, or cleanup. Do not use for implementation or release execution.
+---
+
+# Workspace Health Review
+
+Review whether the workspace remains maintainable, recoverable, and safe for Agents.
+
+This is the first built-in ForgeRail Capability Pack and preserves the established `workspace-health-review` identity. It remains independently invokable and defaults to Analyze First.
+
+## Boundaries
+
+- Do not implement features, execute releases, archive records, rewrite Skills, or change Agent instructions without approval.
+- Follow the smallest owner workspace and distinguish project extensions from portable findings.
+- Do not require ForgeRail Core to be invoked first.
+
+## Review
+
+1. Map workspace and child ownership boundaries.
+2. Inventory existing Agent entries, record systems, Skills, docs, rules, and recovery surfaces.
+3. Review durable-record health, instruction duplication, default context load, ownership, recovery, drift, and debt.
+4. Use categorical status: `Healthy`, `Watch`, `Risky`, or `Critical`. Use a number only with an explained method and evidence.
+5. Return path-based P0/P1/P2 findings and separate observations from proposed modifications.
+6. Recommend ForgeRail Profile or pack changes only as candidates requiring confirmation.
+
+Read `references/health-review.md` for detailed signals.

package/skills/workspace-health-review/agents/openai.yaml

@@ -0,0 +1,7 @@
+interface:
+  display_name: "Workspace Health Review"
+  short_description: "Audit workspace governance, drift, debt, and recovery."
+  brand_color: "#B45309"
+  default_prompt: "Use $workspace-health-review to audit this workspace without changing it."
+policy:
+  allow_implicit_invocation: true

package/skills/workspace-health-review/references/health-review.md

@@ -0,0 +1,21 @@
+# Workspace Health Signals
+
+Review the smallest useful evidence for:
+
+- unclear root versus child workspace ownership;
+- important decisions existing only in chat;
+- completed records left active without reason;
+- duplicated or conflicting Agent instructions;
+- too many globally or implicitly loaded Skills;
+- missing owner, next entry, fallback keyword, lifecycle, or recovery path;
+- stale active links pointing to moved or archived records;
+- release or production rules mixed into generic workflow guidance;
+- hidden durable mutation without human approval.
+
+Prefer categorical status. Recommendations are:
+
+- `P0`: blocks high-risk work or safe recovery;
+- `P1`: should be corrected soon;
+- `P2`: useful cleanup.
+
+Every proposed modification must name its target and state that approval is required.

package/templates/FORGERAIL.md

@@ -0,0 +1,15 @@
+<!-- forgerail:adoption-contract:v1:start -->
+# ForgeRail Adoption Contract
+
+This workspace uses ForgeRail as a guide, initiator, Agent contract, and guardrail. The host Agent remains responsible for analysis, planning, tool choice, and implementation.
+
+- Observe the smallest owner workspace and follow coherent existing record habits before recommending a new system.
+- Use the minimum applicable governance level and load only Capability Packs relevant to the current task.
+- Keep remote integration, release, production, destructive, and lifecycle approvals independent.
+- Do not persist governance changes, enable optional packs, or mutate repository settings without exact user authorization.
+- Verify observable state and return a receipt that includes validation, non-mutations, residual risks, and recovery.
+
+Applicable hosts: {{HOSTS}}.
+
+Host-specific files are thin discovery adapters for this contract. They are not independent governance sources.
+<!-- forgerail:adoption-contract:v1:end -->

package/templates/bindings/claude-code-thin.md

@@ -0,0 +1,5 @@
+<!-- forgerail:binding:claude-code:v1:start -->
+## ForgeRail
+
+For non-trivial AI-assisted engineering work, follow `FORGERAIL.md`. This Claude Code binding is a profile-only adapter in ForgeRail alpha.1 and requires host-specific verification before it can be treated as active.
+<!-- forgerail:binding:claude-code:v1:end -->

package/templates/bindings/codex-compact.md

@@ -0,0 +1,5 @@
+<!-- forgerail:binding:codex:v1:start -->
+## ForgeRail
+
+For non-trivial AI-assisted engineering work, use the installed `$forgerail` Skill as the guide and guardrail while preserving Codex's own analysis and execution ability. Use `$forgerail-workspace-diagnosis` on first important use, explicit request, material drift, or rule conflict. Follow existing coherent workspace record habits; propose changes before writing them. Keep approval gates independent and return verifiable evidence. Installation does not enable optional Capability Packs or authorize external side effects.
+<!-- forgerail:binding:codex:v1:end -->

package/templates/bindings/codex-thin.md

@@ -0,0 +1,5 @@
+<!-- forgerail:binding:codex:v1:start -->
+## ForgeRail
+
+For non-trivial AI-assisted engineering work, follow `FORGERAIL.md` and use the installed `$forgerail` Skill. Host-specific instructions are discovery adapters; `FORGERAIL.md` is the shared adoption contract.
+<!-- forgerail:binding:codex:v1:end -->

package/templates/bindings/cursor-thin.mdc

@@ -0,0 +1,7 @@
+---
+description: Apply the shared ForgeRail adoption contract to non-trivial AI-assisted engineering work
+alwaysApply: true
+---
+<!-- forgerail:binding:cursor:v1:start -->
+Follow `FORGERAIL.md` for non-trivial AI-assisted engineering work. This Cursor binding is a profile-only adapter in ForgeRail alpha.1 and requires host-specific verification before it can be treated as active.
+<!-- forgerail:binding:cursor:v1:end -->