@ericrisco/rsc 0.1.44 → 0.1.46

package/skills/init/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: init
-description: "Use when starting from nothing or pointing the rsc-skills harness at an existing project — the front door / bootstrapper. It gauges the user's technical level FIRST (non-technical by default), sets an explanation/accompaniment dial, then discovers what they want to build OR govern (any software stack, OR a non-code harness: running a company/ops, research, personal knowledge, content). It detects greenfield vs brownfield, profiles the user into 02-DOCS, RECOMMENDS which rsc skills to install (printing the exact `npx @ericrisco/rsc add` commands), and hands off to the harness skill to scaffold 01-TOOLS + 02-DOCS. Triggers: 'empezar de cero', 'no sé por dónde empezar', 'start a new project', 'bootstrap', 'set up the harness', 'monta el proyecto', 'quiero montar una empresa/ops/wiki con esto', 'arranca', 'init'. NOT the scaffolder itself (that's the harness skill) and NOT a specific stack skill."
+description: "Use when starting from nothing or pointing rsc at an existing project — the front door. Gauges technical level and the accompaniment dial first (non-technical by default), discovers what the user wants to build or govern (any stack, or a non-code harness: company/ops, research, knowledge, content), writes the profile to 02-DOCS, and installs the skills discovery justified. NOT the scaffolder (that is `harness`), NOT a stack skill."
 tags: [init, bootstrap, start, new, setup]
 recommends: [harness]
 profiles: [minimal, core, full]
@@ -9,213 +9,197 @@ origin: risco
 
 # init — the rsc-skills Front Door
 
-*The very first thing you run. It meets the user where they are — assuming non-technical until told otherwise — figures out what they actually want, recommends the right skills, and hands off to the `harness` skill to build the workspace.*
+*The very first thing you run. It meets the user where they are — assuming non-technical until told
+otherwise — figures out what they actually want, installs the right skills, and hands off to
+`harness` to build the workspace.*
 
-It **profiles, discovers, and recommends**, then prints the exact install commands and the handoff. The boundary is fixed: **`init` writes ONLY the user-profile + decisions log under `02-DOCS/wiki/harness/` and the `CLAUDE.md` Knowledge-map link; ALL other `01-TOOLS/` + `02-DOCS/` scaffolding is the `harness` skill's job.** Think of `init` as the receptionist: it learns who you are and what you need, writes that down where every other skill can read it, and walks you to the right room.
+Think of `init` as the receptionist: it learns who you are and what you need, writes that down where
+every other skill can read it, and walks you to the right room. The boundary is fixed: **`init`
+writes only the user-profile and decisions log under `02-DOCS/wiki/harness/`, plus the `CLAUDE.md`
+Knowledge-map link.** Every other `01-TOOLS/` + `02-DOCS/` scaffold belongs to `harness`.
 
-It is **domain-agnostic**. The thing being built or governed may be:
+It is **domain-agnostic**. The thing being built or governed may be software on any stack, or a
+non-code harness — running a company, an ops desk, a research program, a knowledge base, a content
+operation. No code required; the same structure governs it. Never assume "project" means "code".
 
-- **Software** — any stack (web, mobile, backend, agents, a CLI, a data pipeline).
-- **A non-code harness** — running a company / operations, a research program, a personal knowledge base, or a content operation that connects to tools (email, calendar, CRM, docs, payments). No code required; the same `01-TOOLS/` + `02-DOCS/` structure governs it (scaffolded by the `harness` skill, not here).
+## First contact: two values, set before anything else
 
-## Non-technical-first + the accompaniment dial (read this first)
+The whole harness behaves differently depending on these two. Nothing — no discovery, no
+recommendation — happens before the profile exists and `CLAUDE.md` links it.
 
-This is the most important section. The whole harness behaves differently depending on two values set here. **Set them before doing anything else, on first contact, in this order.**
+**Step 1 — Gauge technical level.** Literally the first thing you say, before any discovery, framed
+so nobody feels small. Ask once, in their language:
 
-### Step 1 — Gauge technical level (the VERY FIRST question)
+> "Antes de nada, para hablarte como te resulte más cómodo: ¿te manejas con código y términos
+> técnicos, o prefieres que te lo explique todo en cristiano? No hay respuesta mala — solo me ayuda
+> a no aburrirte ni perderte."
 
-The system **always starts assuming the user is non-technical.** The very first thing you say, before any discovery, gauges their technical level — framed kindly, never making anyone feel small. Ask once, in their language. For a Spanish speaker:
+> "First, so I talk to you the right way: are you comfortable with code and technical terms, or
+> would you rather I explain everything in plain language? There's no wrong answer — it just helps
+> me not bore you or lose you."
 
-> "Antes de nada, para hablarte como te resulte más cómodo: ¿te manejas con código y términos técnicos, o prefieres que te lo explique todo en cristiano? No hay respuesta mala — solo me ayuda a no aburrirte ni perderte."
+Record `technical_level: non-technical | mixed | technical`. Until they say otherwise, assume
+non-technical: plain language, analogies over acronyms.
 
-For an English speaker:
+**Step 2 — Set the accompaniment dial.** Present it and let them pick; describe the options, do not
+just list letters.
 
-> "First, so I talk to you the right way: are you comfortable with code and technical terms, or would you rather I explain everything in plain language? There's no wrong answer — it just helps me not bore you or lose you."
-
-Until they say otherwise, **default to non-technical framing**: plain language, no jargon, analogies over acronyms. Record the answer as `technical_level: non-technical | mixed | technical`.
-
-### Step 2 — Set the accompaniment / explanation dial
-
-Immediately after, present the dial and let them pick. Describe each option clearly — do not just list letters:
-
-- **L0 — "Modo cavernícola"**: mínimas palabras. Hago las cosas y ya, casi sin explicar. Para quien quiere resultados y cero ruido.
-- **L1 — "Breve"**: una línea de *por qué* en cada paso. Sabes lo que hago sin que te cuente la vida.
-- **L2 — "Explica decisiones"**: justifico cada decisión relevante a medida que avanzo. Para quien quiere entender el porqué de lo importante.
-- **L3 — "Acompañamiento total"**: te lo explico TODO, te hago muchas preguntas para entender bien tu contexto, y razono cada decisión. Ideal si no eres técnico y quieres aprender mientras montamos esto.
-
-Record as `accompaniment_level: L0 | L1 | L2 | L3`. If the user is non-technical and gives no preference, **default to L3**. If technical and silent, default to L1.
-
-### Step 3 — Persist BEFORE anything else
-
-Before discovery, before any recommendation, write the profile to `02-DOCS` and link it from the root `CLAUDE.md`. This is non-negotiable: every other skill reads these values to decide how much to explain and how many questions to ask.
-
-- `02-DOCS/wiki/harness/user-profile.md` — the living profile (technical level, accompaniment level, goals, context, constraints). Format in `references/accompaniment-and-profile.md`.
-- `02-DOCS/wiki/harness/decisions.md` — an **append-only** decisions log. Every significant decision gets one entry, never edited or deleted. Format in `references/accompaniment-and-profile.md`.
-- Root `CLAUDE.md` → a SHORT `## Knowledge map` pointer: the read-first entries (this `user-profile.md` and the `decisions.md` log) plus a "full index → `02-DOCS/wiki/index.md`" line. Keep this pointer tiny — it loads on every turn; ALL other index entries live in `02-DOCS/wiki/index.md`, not here. Create `CLAUDE.md` if absent (additive only — never delete existing sections).
-
-If `02-DOCS/` does not yet exist (greenfield), create `02-DOCS/wiki/harness/` now — just enough to hold these two files. That, plus the `CLAUDE.md` Knowledge-map link, is everything `init` writes; ALL other `01-TOOLS/` + `02-DOCS/` scaffolding is the `harness` skill's job.
-
-### Step 4 — Propose the developer model (the implementation subagent)
-
-rsc installs a **`developer`** subagent (the fan-out / implementation worker) for every assistant that supports file-based agents (Claude Code, Cursor, OpenCode, Gemini, Copilot, Junie, Kiro, Codex). It runs at the **balanced** tier by default — **Sonnet** on Anthropic tools (the provider's mid model elsewhere) — and **never** the cheapest `light` model, which is too weak to build with. Offer the choice once, calibrated to the dial:
-
-- *"La implementación la hará un sub-agente `developer`. ¿Qué modelo? **balanced / Sonnet** (rápido y económico — recomendado) o **heavy / Opus** (máxima calidad, más caro)."* Never offer `light`/Haiku.
-
-Record it to `.rsc/developer.json` (`{ "tier": "balanced" }` or `"heavy"`) and re-run the install/sync so the agent files adopt it. If you skip the question (e.g. L0), default to `balanced`. The default is also written at install time, so the developer agent is always set even when onboarding never asks — "propose at onboarding, and also when it isn't set."
-
-### Opt-out marker — `.rsc/.no-harness`
-
-A freshly-installed session auto-starts `init` while `02-DOCS/wiki/harness/user-profile.md` is absent (the `suggest` Onboarding gate + claude's SessionStart hook). If the user does not want a harness in this repo (e.g. they installed only code skills), write an empty `.rsc/.no-harness` — this permanently silences the auto-start here even before a profile exists. Completing first contact (which writes `user-profile.md`) also silences it. The marker is project-local; commit it so the "no harness here" decision is shared by the team.
-
-### How every skill adapts to the dial
-
-Every rsc skill MUST read `user-profile.md` at the start of a session and adapt:
-
-| Level | Verbosity | Questions it asks | Jargon |
-| --- | --- | --- | --- |
-| L0 | One line of output, results only | None beyond hard blockers | Avoided |
-| L1 | One *why* line per step | Only when genuinely ambiguous | Minimal, defined inline |
-| L2 | Justify each relevant decision | Asks before each significant decision | OK if defined once |
-| L3 | Explain everything, narrate reasoning | Many — contextualizes every choice | Always translated to plain language |
-
-`technical_level` is an orthogonal modifier: even at L0, a non-technical user gets plain-language phrasing; even at L3, a technical user gets to skip the 101 explanations. Full rules and the exact file formats → `references/accompaniment-and-profile.md`.
-
-## The "siempre 3 opciones" decision pattern
-
-For **any** significant decision — deploy target, database, framework, hosting, tooling, which CRM, where to keep documents — never decide silently and never dump ten options. Run this pattern:
-
-1. **Gather requirements first.** Ask the questions that actually drive the choice. For a deploy target: expected number of users, concurrent users, budget, data region / residency rules, the team's comfort operating servers, and scaling needs. Match the number and depth of questions to the accompaniment level (L0: ask only blockers; L3: ask all, explaining why each matters).
-2. **Present EXACTLY 3 options** with honest trade-offs — what each is good at, what it costs, what it demands of them.
-3. **Recommend one**, matched to their answers AND their level, and say why in language they understand.
-4. **Log the decision** to `02-DOCS/wiki/harness/decisions.md` (append-only) once they pick.
-
-Canonical deploy example (tailor the third option to the case):
-
-1. **Hetzner VPS + Coolify** — cheapest, total control, but you self-manage the server (updates, backups, uptime).
-2. **Vercel** — zero-ops, fully managed, scales itself; gets expensive at scale and locks you into its model.
-3. **A third matched to the case** — Fly.io (run close to users, simple containers), Railway (managed, gentle learning curve), or a managed cloud (AWS/GCP) when compliance or an existing org demands it.
-
-Full pattern, the requirements-gathering checklists per decision type, and the worked deploy example → `references/recommend-skills.md`.
+| Level | What they get |
+| --- | --- |
+| L0 — cavernícola | Results, almost no explanation. One line of output; no questions beyond hard blockers. |
+| L1 — breve | One line of *why* per step; questions only when genuinely ambiguous. |
+| L2 — explica decisiones | Each relevant decision justified; asks before each significant one. |
+| L3 — acompañamiento total | Explains everything, reasons out loud, asks a lot. Ideal for learning while building. |
+
+Non-technical and silent → default **L3**. Technical and silent → **L1**. `technical_level` is an
+orthogonal modifier: even at L0 a non-technical user gets plain phrasing; even at L3 a technical one
+skips the 101s. Every rsc skill reads these two values and obeys them — L0 means *do it and stop
+talking*. Full rules and file formats → `references/accompaniment-and-profile.md`.
+
+**Step 3 — Persist immediately.** Before discovery, before any recommendation:
+
+- `02-DOCS/wiki/harness/user-profile.md` — the living profile (levels, goals, context, constraints).
+- `02-DOCS/wiki/harness/decisions.md` — append-only. Entries are never edited or deleted.
+- Root `CLAUDE.md` → a **short** `## Knowledge map` pointer: those two read-first entries plus a
+  "full index → `02-DOCS/wiki/index.md`" line. Keep it tiny; it loads on every turn, and every other
+  index entry belongs in the wiki index. Create `CLAUDE.md` if absent, additive only — never delete
+  user content.
+
+Greenfield? Create just `02-DOCS/wiki/harness/` to hold those two files. That plus the link is
+everything `init` writes.
+
+**Step 4 — Propose the developer model.** rsc installs a `developer` subagent (the implementation
+worker) for every assistant supporting file-based agents. It runs at the **balanced** tier by
+default — Sonnet on Anthropic tools, the provider's mid model elsewhere — and never the cheapest
+`light` model, which is too weak to build with. Offer once, calibrated to the dial:
+
+> *"La implementación la hará un sub-agente `developer`. ¿Qué modelo? **balanced / Sonnet** (rápido y
+> económico — recomendado) o **heavy / Opus** (máxima calidad, más caro)."*
+
+Record to `.rsc/developer.json` and re-run install/sync so the agent files adopt it. Skipped (e.g.
+at L0) → `balanced`, which install also writes by default.
+
+**Opt-out.** A fresh session auto-starts `init` while `user-profile.md` is absent. If the user does
+not want a harness in this repo, write an empty `.rsc/.no-harness` — that silences the auto-start
+permanently, even before a profile exists. Completing first contact silences it too. Commit the
+marker so the decision is shared by the team.
+
+## Significant decisions: requirements first, then exactly three options
+
+For **any** significant decision — deploy target, database, framework, hosting, which CRM, where
+documents live — never decide silently and never dump ten options.
+
+1. **Gather the requirements that actually drive the choice.** For a deploy target: expected users,
+   concurrency, budget, data residency, the team's comfort operating servers, scaling needs. Match
+   the number of questions to the dial.
+2. **Present exactly three options** with honest trade-offs: what each is good at, what it costs,
+   what it demands of them.
+3. **Recommend one**, matched to their answers and their level, and say why in language they follow.
+4. **Log it** to `decisions.md` once they pick.
+
+Canonical deploy example — Hetzner VPS + Coolify (cheapest, total control, you self-manage), Vercel
+(zero-ops, scales itself, expensive at scale), and a third matched to the case (Fly.io, Railway, or
+a managed cloud when compliance demands it). Requirements checklists per decision type and the
+worked example → `references/recommend-skills.md`.
 
 ## The flow
 
-Run these phases in order. Phase 1 is mandatory and comes before everything.
-
 ```text
-PROFILE → DISCOVER → RECOMMEND → HANDOFF
+PROFILE → DISCOVER → INSTALL → GROUND → HANDOFF
 ```
 
 ### Phase 1 — PROFILE
 
-Gauge technical level (Step 1), set the accompaniment dial (Step 2), and persist the profile + Knowledge-map link (Step 3) — all per the section above. Do not proceed until `user-profile.md` exists and `CLAUDE.md` links it.
+Steps 1-3 above. Do not proceed until `user-profile.md` exists and `CLAUDE.md` links it. The
+framing of every later question depends on it, which is why it cannot wait until after discovery.
 
 ### Phase 2 — DISCOVER
 
-Figure out two things: **the state of the ground** and **what they want**.
-
-**Greenfield vs brownfield** — detect, don't ask blindly:
-
-- **Brownfield** if the workspace has subproject manifests (`package.json`, `pyproject.toml`, `pubspec.yaml`, `go.mod`, `Cargo.toml`), source files, legacy `XX-*` folders, or an existing `01-TOOLS/` / `02-DOCS/`. Detect the stack and current state the way `harness` SCAN does (read-only walk; ignore `node_modules/`, `.venv/`, `.next/`, `.git/`, `dist/`, `build/`, `__pycache__/`, `.dart_tool/`). Summarize what you found and confirm with the user.
-- **Greenfield** if the workspace is empty or has only stray notes. Then it's a brand-new idea — interview from zero.
-
-**What they want to build OR govern** — establish the domain. Is it software (which surfaces: backend, frontend, mobile, agents)? Or a non-code harness (company/ops, research, personal knowledge, content)? Then capture goals, audience, constraints, and any tools/providers already in play.
+Establish **the state of the ground** and **what they want**.
 
-Record everything to `02-DOCS/wiki/harness/` as you go. Use the greenfield and brownfield questionnaires (for software AND non-code harnesses) in `references/discovery.md`. Ask in batches sized to the accompaniment level — never dump every question at once.
+Detect greenfield vs brownfield; don't ask blindly. **Brownfield** if the workspace has subproject
+manifests (`package.json`, `pyproject.toml`, `pubspec.yaml`, `go.mod`, `Cargo.toml`), source files,
+legacy `XX-*` folders, or an existing `01-TOOLS/` / `02-DOCS/`. Detect the stack the way `harness`
+SCAN does — a read-only walk ignoring `node_modules/`, `.venv/`, `.next/`, `.git/`, `dist/`,
+`build/`, `__pycache__/`, `.dart_tool/`. Summarize what you found and confirm it. **Greenfield** if
+the workspace is empty or holds only stray notes: interview from zero.
 
-### Phase 3 — DETECT & INSTALL
+Then the domain. Software (backend, frontend, mobile, agents) or a non-code harness (company/ops,
+research, knowledge, content)? Capture goals, audience, constraints, and any tools already in play.
+Record to `02-DOCS/wiki/harness/` as you go. Questionnaires for both cases →
+`references/discovery.md`. Ask in batches sized to the dial; never dump every question at once.
 
-Map what you learned to individual rsc skills. **You have a terminal — install them yourself.** After a one-word confirm, run `npx @ericrisco/rsc add <ids>` via Bash. (If you genuinely cannot run a shell, print the exact command and tell the user to paste it in another terminal tab.) Then tell them the **new skills activate in a fresh session/tab** — see the install note below the table. Skill map:
+### Phase 3 — INSTALL
 
-| Need | Skills | Why (one line, matched to level) |
-| --- | --- | --- |
-| Always | `harness` | The control plane that scaffolds and governs the workspace (`suggest` comes with it as the floor). |
-| Software backend | `fastapi` / `go`, `postgresdb` | The server, the database, the API. |
-| Software frontend | `nextjs` / `flutter`, `design` | The web/mobile UI people see. |
-| Marketing / landing / decks / teaching | `marketing`, `presentations`, `course-storytelling` | The words and slides. |
-| AI agents | `building-agents` | Agent loops, tools, RAG. |
-| Security & shipping / ops (incl. non-code company harness connecting tools) | `secure-coding`, `deployment` | Ship it safely and wire up external tools. |
+Map what you learned to skills. **You have a terminal — install them yourself** after a one-word
+confirm: `npx @ericrisco/rsc add <ids>`. Only if you genuinely cannot run a shell, hand the exact
+command over for another tab. Never install without the confirm; it changes their environment.
 
-Show the shortlist with a one-line *why* per skill (language matched to the user's level), get a one-word confirm, then install:
-
-```text
-npx @ericrisco/rsc add <skill> [<skill> ...]
-```
-
-> **After installing, say this (matched to their IDE):** "Listo, instaladas. Para que se activen, abre una **pestaña/sesión nueva** de Claude Code (o recarga Cursor/Codex/Gemini) en esta carpeta — las skills se cargan al arrancar la sesión." If you couldn't run the command yourself, give it to them to run in another terminal tab, then the same new-session note.
-
-Install only skills their answers justify — same discipline as "no speculative tools". Full skill map, sample printouts per scenario, and the requirements-first decision pattern → `references/recommend-skills.md`.
-
-### Phase 3.5 — GROUND THE PROJECT (git · live docs · skill audit)
-
-Three quick, enforced setup checks once the skills are installed. The SessionStart hook nudges each
-of these too; doing them here means the user starts clean.
-
-1. **Version control is required.** If the workspace has no `.git/`, offer `git init` (recommended —
-   the SDD chain and the ship guard assume git). If the user declines, write an empty `.rsc/.no-git`
-   so the decision is persisted and neither you nor the hook asks again. Log the decision.
-2. **Offer Context7 (live library docs).** For a software project, offer to wire the Context7 MCP
-   once: `claude mcp add --transport http context7 https://mcp.context7.com/mcp`. If they don't want
-   it, write `.rsc/.no-context7`. (It gives version-correct docs instead of guessing from memory.)
-3. **Run a skill audit.** After installing, run `npx @ericrisco/rsc audit`. It inventories the skills
-   installed for this project and on the machine, and flags possible overlap or skills with no
-   footprint here — so the project starts with the right set, not a pile. It re-runs on a cadence via
-   the SessionStart nudge. Summarize the result at the user's accompaniment level.
-4. **Danger guard follows `technical_level`.** When you record `technical_level: non-technical` (or
-   `mixed`, or while no profile exists yet), a `PreToolUse` guard (`.rsc/danger-guard.mjs`) **blocks**
-   irreversible foot-gun commands (`rm -rf`, `git push --force`, `git reset --hard`, `DROP`/`TRUNCATE`,
-   `DELETE`/`UPDATE` with no `WHERE`, `dd` to a device, `curl | bash`, …) and asks for a safer
-   alternative. A fully `technical` user is never guarded. It only turns off if the **user explicitly
-   asks** to allow dangerous commands — then write `.rsc/.no-danger-guard`. Mention this protection
-   exists when you set a non-technical level so the user is not surprised by a block.
+| Need | Skills |
+| --- | --- |
+| Always | `harness` — the control plane that scaffolds and governs the workspace |
+| Software backend | `fastapi` / `go`, `postgresdb` |
+| Software frontend | `nextjs` / `flutter`, `design` |
+| Marketing / landing / decks / teaching | `marketing`, `presentations`, `course-storytelling` |
+| AI agents | `building-agents` |
+| Shipping, security, wiring external tools | `secure-coding`, `deployment` |
 
-### Phase 4 — HANDOFF
+Show the shortlist with a one-line *why* per skill in their language, confirm, install. Recommend
+only what discovery justified — no "you'll probably want agents too".
 
-Tell the user to install `harness` (`npx @ericrisco/rsc add harness`) and then run the **`harness`** skill to actually scaffold the `01-TOOLS/` + `02-DOCS/` workspace. `init` stops here — it has set the profile, recorded the discovery, and recommended the skills. `harness` reads the profile and builds the structure.
+Then flag activation, matched to their IDE: *"Listo, instaladas. Para que se activen, abre una
+pestaña/sesión nueva de Claude Code (o recarga Cursor/Codex/Gemini) en esta carpeta — las skills se
+cargan al arrancar la sesión."* Full skill map and sample printouts → `references/recommend-skills.md`.
 
-> "Tu perfil y lo que hemos hablado ya están guardados. Cuando hayas instalado las skills de arriba (`npx @ericrisco/rsc add …`), ejecuta `harness` y monto el esqueleto del proyecto (`01-TOOLS/` + `02-DOCS/`) leyendo todo lo que acabamos de decidir."
+### Phase 4 — GROUND
 
-## Iron rules (non-negotiable)
+Four checks once the skills are in. The SessionStart hook nudges each of these too; doing them here
+means the user starts clean.
 
-1. **Profile first, always.** Technical-level question is the literal first thing. Nothing — no discovery, no recommendation — happens before `user-profile.md` exists and `CLAUDE.md` links it.
-2. **Non-technical by default.** Plain language until told otherwise. Never assume the user reads code.
-3. **The dial governs verbosity AND question count.** Read it, obey it, in this skill and every skill downstream. L0 means *do it and stop talking*; L3 means *explain everything and ask*.
-4. **Three options, requirements first.** For any significant decision: gather the driving requirements, present exactly 3 options with honest trade-offs, recommend one, log it.
-5. **Install with consent, then flag the new session.** You have a terminal: after a one-word confirm, run `npx @ericrisco/rsc add …` yourself. Newly installed skills load at the START of a session, so tell the user to open a **new tab/session** (or reload) for them to activate. If you cannot run a shell, hand them the exact command for another tab — never install without a confirm.
-6. **No speculative skills.** Recommend a skill only if the discovery justified it. No "you'll probably want agents too".
-7. **Persist as you learn.** Goals, context, constraints, decisions go to `02-DOCS/wiki/harness/` continuously — `user-profile.md` for state, `decisions.md` append-only for choices.
-8. **`init` writes only the profile + the link.** It writes ONLY the user-profile + decisions log under `02-DOCS/wiki/harness/` and the `CLAUDE.md` Knowledge-map link. ALL other `01-TOOLS/` + `02-DOCS/` scaffolding is the `harness` skill's job. Hand off; do not do its job.
-9. **Additive to `CLAUDE.md`.** Create it if absent; otherwise add/update only the `## Knowledge map` section. Never delete user content.
-10. **Domain-agnostic.** Software and non-code harnesses get the same first-class treatment. Never assume "project" means "code".
+1. **Version control.** No `.git/` → offer `git init`; the SDD chain and the ship guard assume it.
+   Declined → write `.rsc/.no-git` so neither you nor the hook asks again, and log the decision.
+2. **Context7 (live library docs).** For software, offer to wire it once:
+   `claude mcp add --transport http context7 https://mcp.context7.com/mcp`. It gives version-correct
+   docs instead of guessing from memory. Declined → `.rsc/.no-context7`.
+3. **Skill audit.** Run `npx @ericrisco/rsc audit`. It inventories what is installed here and on the
+   machine and flags overlap or skills with no footprint, so the project starts with the right set
+   rather than a pile. Summarize at their level.
+4. **Tell them about the danger guard.** A `technical_level` of `non-technical` or `mixed` (and the
+   state before any profile exists) turns on a `PreToolUse` guard that blocks irreversible commands —
+   `rm -rf`, `git push --force`, `git reset --hard`, `DROP`/`TRUNCATE`, `DELETE`/`UPDATE` with no
+   `WHERE`, `dd` to a device, `curl | bash` — and asks for a safer alternative. A fully `technical`
+   user is never guarded. It turns off only if the user explicitly asks: `.rsc/.no-danger-guard`.
+   Mention it when you set a non-technical level, so a later block is not a surprise.
 
-## Rationalizations — STOP
+### Phase 5 — HANDOFF
 
-These thoughts mean the skill is about to break its own rules. Recognize and abort:
+`init` stops here. It has set the profile, recorded the discovery, and installed the skills.
 
-| Excuse | Reality |
-| --- | --- |
-| "They sound technical, I'll skip the level question" | No. The level question is the first thing, always. Ask it. |
-| "I'll just pick Vercel, it's obviously best" | No. Gather requirements, present 3, recommend with reasons, log it. |
-| "I'll recommend every skill to be safe" | No. Recommend only what discovery justified. |
-| "I'll scaffold 01-TOOLS now while I'm here" | No. That's the `harness` skill. `init` profiles and hands off. |
-| "The profile can wait until after discovery" | No. Profile first — every later question's framing depends on it. |
-| "This is a company, not code, so the harness doesn't apply" | No. Domain-agnostic. A non-code harness uses the same structure. |
-| "I'll install the skills for them" | No. A skill can't install. Print the `npx @ericrisco/rsc add` commands. |
-| "They said 'ok', that's enough to pick the database" | No. A significant decision needs the 3-option pattern and a log entry. |
+> "Tu perfil y lo que hemos hablado ya están guardados. Ahora ejecuta `harness` y monto el esqueleto
+> del proyecto (`01-TOOLS/` + `02-DOCS/`) leyendo todo lo que acabamos de decidir."
 
-## Project grounding (02-DOCS + CLAUDE.md)
+Do not scaffold while you are here, however tempting — `harness` reads this same profile and owns
+that job.
 
-This skill's `02-DOCS` record is the **user profile** at `02-DOCS/wiki/harness/user-profile.md` plus the append-only **decisions log** at `02-DOCS/wiki/harness/decisions.md`. Both are written in Phase 1 and updated throughout. Because they are the read-first entries, both stay in the SHORT `## Knowledge map` pointer in the root `CLAUDE.md` (created if absent, additive only) — alongside a "full index → `02-DOCS/wiki/index.md`" line where every OTHER index entry lives. Every rsc skill reads the profile first and adapts its verbosity and question count to `accompaniment_level` and `technical_level`. Those two files plus the Knowledge-map link are everything `init` writes; ALL other `01-TOOLS/` + `02-DOCS/` scaffolding is the `harness` skill's job, and it reads this same profile.
+## Project grounding
 
-Verify the profile and the Knowledge-map link exist with `scripts/verify.sh` (read-only; warns, never fails).
+`init`'s record is the profile plus the append-only decisions log, both written in Phase 1 and
+updated throughout, and both kept in the short `## Knowledge map` pointer because they are the
+read-first entries. `scripts/verify.sh` checks the profile and the link exist (read-only; warns,
+never fails).
 
 ## See Also
 
-- `harness` — the scaffolder this skill hands off to; builds `01-TOOLS/` + `02-DOCS/` from the profile (the SCAN→AUDIT→CONSENT→APPLY→VERIFY engine).
-- `deployment` — invoked at runtime when the deploy decision (the "siempre 3 opciones" canonical example) is made; Hetzner+Coolify, Vercel, Fly.io and friends.
-- `secure-coding` — input validation, authn/z, secret handling; recommended whenever software is being shipped.
-- Stack skills (`fastapi`, `go`, `nextjs`, `flutter`, `building-agents`, …) are **recommended at runtime** by Phase 3 based on discovery — not hardwired here.
-- References: `references/accompaniment-and-profile.md`, `references/discovery.md`, `references/recommend-skills.md`.
+- `harness` — the scaffolder this hands off to; builds `01-TOOLS/` + `02-DOCS/` from the profile.
+- `deployment` — invoked when the deploy decision above is actually made.
+- `secure-coding` — recommended whenever software is being shipped.
+- Stack skills (`fastapi`, `go`, `nextjs`, `flutter`, `building-agents`…) are recommended at runtime
+  by Phase 3 from discovery, never hardwired here.
+- References: `references/accompaniment-and-profile.md`, `references/discovery.md`,
+  `references/recommend-skills.md`.
 
 ## Orientación (siempre)
 
-Cierra cada turno con el **bloque-brújula** (📍 dónde estás · ✅ qué hiciste · 🧭 por qué · ➡️ siguiente, terminando en pregunta), calibrado al dial de `02-DOCS/wiki/harness/user-profile.md`. **Nunca termines en seco.** Protocolo completo: skill `orient` → `skills/orient/references/orientation-contract.md`. (Defiere a `suggest` el "¿instalo la skill que falta?".)
+Cierra cada turno con el **bloque-brújula** (📍 dónde estás · ✅ qué hiciste · 🧭 por qué · ➡️ siguiente,
+terminando en pregunta), calibrado al dial de `02-DOCS/wiki/harness/user-profile.md`. Nunca termines
+en seco. Protocolo completo: skill `orient` → `skills/orient/references/orientation-contract.md`.