@etiquekit/etq 1.0.12 → 1.0.13

package/scripts/release-pack-canary.sh

@@ -0,0 +1,97 @@
+#!/bin/sh
+# Build a fresh npm tarball in a temp dir and verify the public package surface.
+set -eu
+
+ROOT=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
+TMPDIR_ROOT=${TMPDIR:-/tmp}
+TMP=$(mktemp -d "$TMPDIR_ROOT/etiquette-pack-canary.XXXXXX")
+trap 'rm -rf "$TMP"' EXIT INT TERM
+
+cd "$ROOT"
+npm run release:scan >/dev/null
+npm pack --pack-destination "$TMP" >/dev/null
+
+TGZ=$(find "$TMP" -maxdepth 1 -name '*.tgz' -print | sort | sed -n '1p')
+if [ -z "$TGZ" ]; then
+  echo "release-pack-canary: npm pack did not produce a tarball" >&2
+  exit 1
+fi
+
+FILES="$TMP/files.txt"
+tar -tzf "$TGZ" | sort > "$FILES"
+
+FILE_COUNT=$(wc -l < "$FILES" | tr -d ' ')
+MAX_FILES=190
+if [ "$FILE_COUNT" -gt "$MAX_FILES" ]; then
+  echo "release-pack-canary: package file count $FILE_COUNT exceeds budget $MAX_FILES" >&2
+  exit 1
+fi
+
+require_file() {
+  rel=$1
+  if ! grep -Fxq "$rel" "$FILES"; then
+    echo "release-pack-canary: missing required package file: $rel" >&2
+    exit 1
+  fi
+}
+
+forbid_prefix() {
+  prefix_re=$1
+  label=$2
+  if grep -Eq "^$prefix_re" "$FILES"; then
+    echo "release-pack-canary: forbidden package surface included: $label" >&2
+    grep -E "^$prefix_re" "$FILES" >&2
+    exit 1
+  fi
+}
+
+require_file "package/package.json"
+require_file "package/LICENSE"
+require_file "package/bin/etiquette"
+require_file "package/bin/etiquette-core"
+require_file "package/README.md"
+require_file "package/QuickStart.md"
+require_file "package/AGENTS.md"
+require_file "package/docs/README.md"
+require_file "package/docs/TEAM_HANDOFF.md"
+require_file "package/docs/CODEX_CLIENT_COMPATIBILITY.md"
+require_file "package/docs/RELEASE_SURFACE_AUDIT.md"
+require_file "package/packages/control/src/cli.ts"
+require_file "package/packages/control/src/core-cli.ts"
+require_file "package/packages/protocol/src/index.ts"
+require_file "package/release/lineage.v0.json"
+require_file "package/scripts/release-candidate-verify.sh"
+require_file "package/scripts/install.sh"
+require_file "package/scripts/uninstall.sh"
+require_file "package/scripts/release-scan.sh"
+require_file "package/scripts/release-pack-canary.sh"
+require_file "package/scripts/release-checksum.sh"
+require_file "package/scripts/release-sign.sh"
+require_file "package/templates/etiquette-vanilla-v0/README.md"
+require_file "package/templates/github-actions/README.md"
+require_file "package/templates/github-actions/w1-webhook-wake-canary.yml"
+require_file "package/templates/seat-packs-v0/README.md"
+
+forbid_prefix 'package/\.codex/' '.codex'
+forbid_prefix 'package/\.etiquette/' '.etiquette'
+forbid_prefix 'package/\.git' '.git'
+forbid_prefix 'package/apps/' 'apps'
+forbid_prefix 'package/conformance/' 'conformance'
+forbid_prefix 'package/coverage/' 'coverage'
+forbid_prefix 'package/dist/' 'dist'
+forbid_prefix 'package/fixtures/' 'fixtures'
+forbid_prefix 'package/internal/' 'internal'
+forbid_prefix 'package/docs/INTERNAL_HANDOFF\.md$' 'internal handoff doc'
+forbid_prefix 'package/node_modules/' 'node_modules'
+forbid_prefix 'package/docs/work/' 'repo-local workspace scaffold docs'
+forbid_prefix 'package/packages/control/src/cli/commands/slice\.ts$' 'legacy slice command'
+forbid_prefix 'package/packages/control/src/cli/commands/runtime\.ts$' 'infra runtime command'
+forbid_prefix 'package/packages/control/src/runtime/' 'infra runtime source'
+forbid_prefix 'package/packages/adapter-' 'legacy adapter packages'
+forbid_prefix 'package/packages/dbt-core/' 'legacy dbt-core package'
+forbid_prefix 'package/packages/[^/]*/fixtures/' 'workspace fixtures'
+forbid_prefix 'package/packages/[^/]*/package\.json$' 'workspace package metadata'
+forbid_prefix 'package/site/' 'site'
+forbid_prefix 'package/templates/hosted-receiver/' 'hosted receiver template'
+
+echo "release-pack-canary: ok $(basename "$TGZ") files=$FILE_COUNT budget=$MAX_FILES"

package/scripts/release-scan.sh

@@ -0,0 +1,249 @@
+#!/bin/sh
+# Fail if release-hostile local/private markers are committed.
+set -eu
+
+ROOT=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
+
+if ! command -v rg >/dev/null 2>&1; then
+  echo "release-scan requires rg" >&2
+  exit 2
+fi
+
+forbidden_path='/'"Users/"
+forbidden_name='justine'"massawe"
+old_repo_name='discipline-'"control"
+pattern="(${forbidden_path}|${forbidden_name}|${old_repo_name})"
+
+if rg -n --hidden --glob '!.git' --glob '!.git/**' --glob '!_worktrees/**' --glob '!node_modules/**' --glob '!bun.lock' "$pattern" "$ROOT"; then
+  echo "release-scan: found forbidden local/private marker" >&2
+  exit 1
+fi
+
+vanilla_root="$ROOT/templates/etiquette-vanilla-v0"
+github_actions_root="$ROOT/templates/github-actions"
+seat_packs_root="$ROOT/templates/seat-packs-v0"
+control_src_root="$ROOT/packages/control/src"
+protocol_src_root="$ROOT/packages/protocol/src"
+shop_marker_pattern="(El""sa|7""ven|Za""ch|bo""ss|Bo""ss)"
+prior_run_pattern="(El""sa|7""ven|Za""ch|bo""ss|Bo""ss|ale-""felicity|codex-spark-""ale-seat|felicity-""review-seat|v3-""handshake|V3-""SCR|LMS-""SCR|bus""://|claude""logs|last""talk\.log|last""miles\.log|karp""athy|lee""pick|LP-""SCR)"
+
+allowed_docs='docs/README.md
+docs/ARCHITECTURE.md
+docs/MANAGED_RUNTIME_COMPATIBILITY.md
+docs/CODEX_CLIENT_COMPATIBILITY.md
+docs/CONCEPTS.md
+docs/CONCEPT_STATUS.md
+docs/CORE_PROFILE.md
+docs/HOSTED_RUNTIME_PARITY.md
+docs/LANE_PROVISIONING.md
+docs/PORTAL.md
+docs/RELEASE_SURFACE_AUDIT.md
+docs/SEAT_DISCIPLINE.md
+docs/SEAT_PROVISIONING.md
+docs/TEAM_HANDOFF.md
+docs/WORKTREE_QOL.md
+docs/work/bus-feed/README.md
+docs/work/consumer-registry/README.md
+docs/contracts/ledger-entry/ledger-entry.v0.2.md
+docs/contracts/ledger-entry/README.md
+docs/contracts/ledger-entry/ledger-query-cli.v0.1.md
+docs/contracts/ledger-entry/ledger-entry.v0.1.md
+docs/contracts/ledger-entry/ledger-entry.v0.md
+docs/work/seats/owner-cards/default-review-seat.yaml'
+
+for doc_path in $(find "$ROOT/docs" -type f | sed "s#^$ROOT/##" | sort); do
+  if ! printf '%s\n' "$allowed_docs" | grep -qx "$doc_path"; then
+    echo "release-scan: unexpected all-dev docs file: $doc_path" >&2
+    exit 1
+  fi
+done
+
+allowed_templates='templates/etiquette-vanilla-v0
+templates/github-actions
+templates/seat-packs-v0'
+
+for template_path in $(find "$ROOT/templates" -mindepth 1 -maxdepth 1 -type d | sed "s#^$ROOT/##" | sort); do
+  if ! printf '%s\n' "$allowed_templates" | grep -qx "$template_path"; then
+    echo "release-scan: unexpected public template directory: $template_path" >&2
+    exit 1
+  fi
+done
+
+allowed_scripts='scripts/release-checksum.sh
+scripts/install.sh
+scripts/uninstall.sh
+scripts/release-candidate-verify.sh
+scripts/release-pack-canary.sh
+scripts/release-scan.sh
+scripts/release-sign.sh'
+
+for script_path in $(find "$ROOT/scripts" -type f | sed "s#^$ROOT/##" | sort); do
+  if ! printf '%s\n' "$allowed_scripts" | grep -qx "$script_path"; then
+    echo "release-scan: unexpected public script: $script_path" >&2
+    exit 1
+  fi
+  sh -n "$ROOT/$script_path"
+done
+
+allowed_bins='bin/etiquette
+bin/etiquette-core'
+
+for bin_path in $(find "$ROOT/bin" -type f | sed "s#^$ROOT/##" | sort); do
+  if ! printf '%s\n' "$allowed_bins" | grep -qx "$bin_path"; then
+    echo "release-scan: unexpected public executable: $bin_path" >&2
+    exit 1
+  fi
+  sh -n "$ROOT/$bin_path"
+done
+
+default_surface_files="$ROOT/README.md
+$ROOT/QuickStart.md
+$ROOT/AGENTS.md
+$ROOT/docs/README.md
+$ROOT/docs/ARCHITECTURE.md
+$ROOT/docs/CONCEPTS.md
+$ROOT/docs/CONCEPT_STATUS.md
+$ROOT/docs/LANE_PROVISIONING.md
+$ROOT/docs/SEAT_DISCIPLINE.md
+$ROOT/docs/SEAT_PROVISIONING.md
+$ROOT/docs/WORKTREE_QOL.md
+$ROOT/templates/etiquette-vanilla-v0/README.md"
+
+if rg -n 'internal/docs' $default_surface_files; then
+  echo "release-scan: found maintainer-doc path in default onboarding surface" >&2
+  exit 1
+fi
+
+if command -v git >/dev/null 2>&1 && git -C "$ROOT" rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+  tracked_forbidden=$(
+    git -C "$ROOT" ls-files \
+      '.etiquette/**' \
+      '.llm-substrate/**' \
+      'site/public/fonts/**' \
+      '*.woff' \
+      '*.woff2' \
+      '*.ttf' \
+      '*.otf' \
+      || true
+  )
+  if [ -n "$tracked_forbidden" ]; then
+    echo "$tracked_forbidden" >&2
+    echo "release-scan: tracked release-hostile local state or font assets" >&2
+    exit 1
+  fi
+fi
+
+if rg -n "$prior_run_pattern" \
+  "$ROOT/README.md" \
+  "$ROOT/QuickStart.md" \
+  "$ROOT/AGENTS.md" \
+  "$ROOT/docs" \
+  "$ROOT/scripts" \
+  "$control_src_root" \
+  "$protocol_src_root" \
+  "$vanilla_root" \
+  "$github_actions_root" \
+  "$seat_packs_root"; then
+  echo "release-scan: found prior-run marker in all-dev onboarding surface" >&2
+  exit 1
+fi
+
+third_party_concept_pattern="\bC""MA\b"
+if rg -n "$third_party_concept_pattern" \
+  --glob '!**/HOSTED_RUNTIME_PARITY.md' \
+  --glob '!**/src/mcp/**' \
+  "$ROOT/README.md" \
+  "$ROOT/QuickStart.md" \
+  "$ROOT/AGENTS.md" \
+  "$ROOT/docs" \
+  "$ROOT/scripts" \
+  "$control_src_root" \
+  "$protocol_src_root" \
+  "$vanilla_root" \
+  "$github_actions_root" \
+  "$seat_packs_root"; then
+  echo "release-scan: found third-party concept marker in all-dev onboarding surface" >&2
+  exit 1
+fi
+
+if command -v git >/dev/null 2>&1 && git -C "$ROOT" rev-parse --is-inside-work-tree >/dev/null 2>&1; then
+  archive_bad=$(
+    git -C "$ROOT" archive --worktree-attributes --format=tar HEAD \
+      | tar -tf - \
+      | sed 's#^\./##' \
+      | grep -E '^(\.etiquette/|\.llm-substrate/|apps/|conformance/|dist/|fixtures/|internal/|site/)' \
+      || true
+  )
+  if [ -n "$archive_bad" ]; then
+    echo "$archive_bad" >&2
+    echo "release-scan: source archive includes maintainer-only or generated surfaces" >&2
+    exit 1
+  fi
+fi
+
+check_max_lines() {
+  rel=$1
+  max=$2
+  lines=$(wc -l < "$ROOT/$rel" | tr -d ' ')
+  if [ "$lines" -gt "$max" ]; then
+    echo "release-scan: $rel has $lines lines; max allowed for onboarding surface is $max" >&2
+    exit 1
+  fi
+}
+
+check_max_lines "README.md" 80
+check_max_lines "QuickStart.md" 95
+check_max_lines "AGENTS.md" 45
+check_max_lines "docs/README.md" 30
+check_max_lines "docs/ARCHITECTURE.md" 100
+check_max_lines "docs/CODEX_CLIENT_COMPATIBILITY.md" 85
+check_max_lines "docs/CONCEPTS.md" 130
+check_max_lines "docs/CONCEPT_STATUS.md" 75
+check_max_lines "docs/CORE_PROFILE.md" 95
+check_max_lines "docs/SEAT_DISCIPLINE.md" 120
+check_max_lines "docs/SEAT_PROVISIONING.md" 100
+check_max_lines "docs/TEAM_HANDOFF.md" 190
+check_max_lines "docs/WORKTREE_QOL.md" 100
+check_max_lines "docs/RELEASE_SURFACE_AUDIT.md" 160
+check_max_lines "templates/etiquette-vanilla-v0/README.md" 70
+check_max_lines "templates/github-actions/README.md" 70
+check_max_lines "templates/github-actions/w1-webhook-wake-canary.yml" 130
+check_max_lines "templates/seat-packs-v0/README.md" 90
+
+normalize_words() {
+  tr ' ' '\n' | sed '/^$/d' | sort | tr '\n' ' ' | sed 's/ $//'
+}
+
+seat_types=$(sed -n 's/^  \([a-z0-9-]*\)) src=.*$/\1/p' "$seat_packs_root/bin/provision-seat" | normalize_words)
+
+check_seat_pack_catalog() {
+  rel=$1
+  found=$(rg -o 'provision-seat [a-z0-9-]+' "$ROOT/$rel" | sed 's/provision-seat //' | grep -v '^auto$' | normalize_words)
+  if [ "$found" != "$seat_types" ]; then
+    echo "release-scan: $rel seat-pack list '$found' does not match provision-seat '$seat_types'" >&2
+    exit 1
+  fi
+}
+
+check_seat_pack_catalog "README.md"
+check_seat_pack_catalog "QuickStart.md"
+check_seat_pack_catalog "docs/SEAT_PROVISIONING.md"
+check_seat_pack_catalog "templates/etiquette-vanilla-v0/README.md"
+check_seat_pack_catalog "templates/seat-packs-v0/README.md"
+
+if [ -d "$vanilla_root" ] && rg -n "$shop_marker_pattern" "$vanilla_root"; then
+  echo "release-scan: found shop marker in vanilla package" >&2
+  exit 1
+fi
+
+if [ -d "$seat_packs_root" ] && rg -n "$shop_marker_pattern" "$seat_packs_root"; then
+  echo "release-scan: found shop marker in seat packs package" >&2
+  exit 1
+fi
+
+if [ -d "$ROOT/templates/hosted-receiver" ]; then
+  echo "release-scan: hosted receiver template belongs outside thin devkit" >&2
+  exit 1
+fi
+
+echo "release-scan: ok"

package/scripts/release-sign.sh

@@ -0,0 +1,34 @@
+#!/bin/sh
+# Sign the checksum manifest when an operator provides a release signing key.
+set -eu
+
+ROOT=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
+CHECKSUMS="$ROOT/dist/SHA256SUMS"
+
+if [ ! -f "$CHECKSUMS" ]; then
+  echo "release-sign: missing dist/SHA256SUMS; run npm run release:checksum first" >&2
+  exit 1
+fi
+
+if [ -n "${ETIQUETTE_RELEASE_SIGNING_KEY:-}" ]; then
+  if [ ! -f "$ETIQUETTE_RELEASE_SIGNING_KEY" ]; then
+    echo "release-sign: ETIQUETTE_RELEASE_SIGNING_KEY does not point to a file" >&2
+    exit 1
+  fi
+  openssl dgst -sha256 -sign "$ETIQUETTE_RELEASE_SIGNING_KEY" -out "$CHECKSUMS.sig" "$CHECKSUMS"
+  printf 'method=openssl-rsa-sha256\nsigned_ref=dist/SHA256SUMS.sig\n' > "$ROOT/dist/SIGNATURE_MANIFEST.txt"
+  rm -f "$ROOT/dist/SIGNATURE_REQUIRED.txt"
+  echo "release-sign: wrote dist/SHA256SUMS.sig"
+  exit 0
+fi
+
+cat > "$ROOT/dist/SIGNATURE_REQUIRED.txt" <<'MSG'
+Release signing was not performed.
+
+Set ETIQUETTE_RELEASE_SIGNING_KEY to an operator-held private key file, then rerun:
+
+  npm run release:sign
+MSG
+
+echo "release-sign: signing key missing; wrote dist/SIGNATURE_REQUIRED.txt" >&2
+exit 1

package/templates/etiquette-vanilla-v0/README.md

@@ -11,7 +11,7 @@ default_surface:
 ```
 
 It does not create runtime seats, product repos, backplanes, hosted services, dashboards, or sample products.
-It starts unauthenticated: `workspace-secure-profile.v0` is `open`, with upgrade paths for `screening-warn`, `screening-enforced`, and `enterprise-reactor`.
+It starts local and unauthenticated. Seat identity, readiness, and task authority stay in the local workflow records.
 
 ## Quick Start
 
@@ -23,7 +23,6 @@ sh /tmp/etiquette-start/validate-vanilla.sh
 ```
 
 The first person who claims the stamped `control-seat` reports readiness before assigning work.
-For restricted seats, change the secure profile, add provider-derived policy/claims, then run `sh source/control-seat/bin/access-assurance-check`.
 
 ## Local Receipt Proof
 
@@ -55,7 +54,7 @@ cannot:
   - clone product repos before assignment
   - bypass validation
   - treat chat as evidence
-  - grant access from the secure profile or reactor
+  - grant authority from local profile metadata
 ```
 
 Provision these later only after the control seat grants them:

package/templates/etiquette-vanilla-v0/source/control-seat/README.md

@@ -8,9 +8,3 @@ For local-only proof, append events with `bin/local-event` and compact them with
 
 Inside a live runtime session, run `bin/session-init` after `bin/seat-init`
 to prepare the local ledger, receipts, tasks, outbox, and session state.
-
-Access assurance is explicit and optional. The default profile is
-`docs/work/access/workspace-secure-profile.v0.json` with `mode: open`. Run
-`bin/access-assurance-check` before routing restricted seats, and switch to
-`screening-warn`, `screening-enforced`, or `enterprise-reactor` only when the
-workspace actually needs provider-backed screening.

package/templates/etiquette-vanilla-v0/source/control-seat/bin/seat-doctor

@@ -5,16 +5,11 @@ ROOT=$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)
 
 test -f "$ROOT/.llm-substrate/HANDOFF.md"
 test -f "$ROOT/docs/work/ledger/LEDGER.md"
-test -f "$ROOT/docs/work/access/workspace-secure-profile.v0.json"
-test -f "$ROOT/docs/work/access/ACCESS-ASSURANCE.md"
 test -f "$ROOT/docs/work/playbacks/PLAYBACK_TEMPLATE.md"
 test -f "$ROOT/docs/work/tasks/CONTROL-001.yaml"
 test -d "$ROOT/docs/work/receipts"
-test -f "$ROOT/bin/access-assurance-check"
 test -f "$ROOT/bin/session-init"
 test -f "$ROOT/bin/local-event"
 test -f "$ROOT/bin/compact-local-events"
 
-sh "$ROOT/bin/access-assurance-check" >/dev/null
-
 echo "control-seat: ok"

package/templates/etiquette-vanilla-v0/validate-vanilla.sh

@@ -7,22 +7,17 @@ test -f "$ROOT/README.md"
 test -d "$ROOT/source/etiquette-kernel"
 test -d "$ROOT/source/control-seat"
 grep -Fq ".etiquette/events/*.ndjson" "$ROOT/source/control-seat/.gitignore"
-grep -q '"schema": "workspace-secure-profile.v0"' "$ROOT/source/control-seat/docs/work/access/workspace-secure-profile.v0.json"
-grep -q '"mode": "open"' "$ROOT/source/control-seat/docs/work/access/workspace-secure-profile.v0.json"
-grep -q "enterprise-reactor" "$ROOT/source/control-seat/docs/work/access/ACCESS-ASSURANCE.md"
 grep -q "Controlled drills require one operator approval per drill" "$ROOT/source/etiquette-kernel/contracts/playback.v0.md"
 grep -q "batch_approval_allowed: false" "$ROOT/source/control-seat/docs/work/playbacks/PLAYBACK_TEMPLATE.md"
 
 sh "$ROOT/source/etiquette-kernel/bin/kernel-doctor"
 sh "$ROOT/source/control-seat/bin/seat-doctor"
-sh "$ROOT/source/control-seat/bin/access-assurance-check" | grep -q "mode=open"
 
 tmp_root=$(mktemp -d "${TMPDIR:-/tmp}/etiquette-vanilla-compact.XXXXXX")
 trap 'rm -rf "$tmp_root"' EXIT
 
 cp -R "$ROOT/source/control-seat/." "$tmp_root/control-seat/"
 sh "$tmp_root/control-seat/bin/seat-init" --execution-seat control-seat >/dev/null
-sh "$tmp_root/control-seat/bin/access-assurance-check" | grep -q "mode=open"
 sh "$tmp_root/control-seat/bin/session-init" --task-id SESSION-INIT --operator local-operator >/tmp/session-init.out
 test -f "$tmp_root/control-seat/.etiquette/state/session.json"
 grep -q "session_opened" "$tmp_root/control-seat/docs/work/ledger/LEDGER.md"

package/templates/seat-packs-v0/README.md

@@ -62,8 +62,9 @@ project head-start surfaces before pickup:
 - `docs/work/manuals/SEAT_OPERATING_MANUAL.md`
 - `docs/work/cookbooks/ADD_A_LANE.md` when routing work
 
-Re-orient with `etiquette whereami` before pickup after stale context, resume,
-runner/model/profile swaps, or workflow migration.
+After interrupted sessions, cwd/worktree ambiguity, role changes, or vendor
+swaps, rerun `whereami`, `doctor`, and `notify poll` before pickup.
+Lifecycle/readiness checks are evidence only; they do not authorize work.
 
 ## Validate Catalog
 

package/templates/seat-packs-v0/source/claude-code-seat/README.md

@@ -14,32 +14,6 @@ Before pickup in the target project, read:
 4. `docs/work/manuals/SEAT_OPERATING_MANUAL.md`
 5. `docs/work/cookbooks/ADD_A_LANE.md` when routing new work
 
-Re-orient with `etiquette whereami` before pickup after stale context, resume,
-runner/model/profile swaps, or workflow migration. Hooks and readiness are
-evidence only; the task envelope is the work authority.
-
-## Claude Code QoL
-
-**Monitoring posture (push vs pull):**
-
-- Default OFF. A solo seat has no counterpart returns to catch — poll on
-  demand at natural checkpoints (`etiquette notify poll --seat <seat>` after
-  dispatching, before gates) instead of arming a watcher.
-- Arm the Monitor tool (push) only when counterpart seats are actively
-  working or during a coordination window. Wrap a cursor-based poll loop —
-  never `tail -F` an event file from byte 0 (git operations rewrite it and
-  replay history).
-- Push and the interactive agents view are mutually exclusive: any
-  persistent background task blocks the agents shortcut. Toggle deliberately
-  and say which posture you are in.
-
-**Context-compaction hazards (Claude Code specific):**
-
-- Compaction can silently swap your model. Render the active model in your
-  statusline; verify it after every compaction or resume.
-- Re-orient with `etiquette whereami` after compaction — chat memory is not
-  a task binding. Durable facts belong in files, not context.
-
-**Continuity:** prefer forked subagents for work that must survive your
-session; a plain subagent dies with you. Keep persistent background tasks to
-a minimum — each one is a posture commitment.
+After interrupted sessions, cwd/worktree ambiguity, role changes, or vendor
+swaps, rerun `whereami`, `doctor`, and `notify poll` before pickup. Hooks and
+readiness are evidence only; the task envelope is the work authority.

package/templates/seat-packs-v0/source/codex-seat/README.md

@@ -14,23 +14,9 @@ Before pickup in the target project, read:
 4. `docs/work/manuals/SEAT_OPERATING_MANUAL.md`
 5. `docs/work/cookbooks/ADD_A_LANE.md` when routing new work
 
-Re-orient with `etiquette whereami` before pickup after stale context, resume,
-runner/model/profile swaps, or workflow migration. Hooks and readiness are
-evidence only; the task envelope is the work authority.
+After interrupted sessions, cwd/worktree ambiguity, role changes, or vendor
+swaps, rerun `whereami`, `doctor`, and `notify poll` before pickup. Hooks and
+readiness are evidence only; the task envelope is the work authority.
 
 For bounded, cursor-based wake checks use the portable core command
 `etiquette notify poll --seat <id> --after-seq <n>` instead of raw `tail -F` monitors.
-
-## Codex QoL
-
-**Runner claims:** one seat, one active runner per task. Before occupying a
-seat another runner may hold, claim explicitly and record your runner id; if
-you find another runner's work in the worktree, preserve it and stand down or
-counter — never overwrite.
-
-**Honest substitution:** when your sandbox/safety layer refuses a declared
-command (e.g. a disable-sandbox flag), run the stricter variant and disclose
-the substitution in your return — never silently claim the declared gate ran.
-
-**Notifications:** use bounded cursor-based polls (`etiquette notify poll`);
-pair long waits with an explicit re-check cadence in your session notes.

package/templates/seat-packs-v0/source/gemini-seat/README.md

@@ -14,26 +14,6 @@ Before pickup in the target project, read:
 4. `docs/work/manuals/SEAT_OPERATING_MANUAL.md`
 5. `docs/work/cookbooks/ADD_A_LANE.md` when routing new work
 
-Re-orient with `etiquette whereami` before pickup after stale context, resume,
-runner/model/profile swaps, or workflow migration. Hooks and readiness are
-evidence only; the task envelope is the work authority.
-
-## Gemini QoL
-
-**Role fit:** this seat shines as a divergent-advisory and review seat —
-fast structured review-returns (`confirm_with_amendments` with concrete
-amendments), coverage sweeps, and alternative-angle pressure tests. Treat
-its returns as first-class evidence.
-
-**Calibration duties:**
-
-- Every claim in a return carries file:line evidence read on the consuming
-  surface — speed invites overclaim; evidence is the antidote.
-- Do not act as the sole verifier for promotion-grade claims; pair with a
-  second party or an executable check.
-- Keep ledger-facing writes in a plain technical register — schemas, fields,
-  checks; metaphors stay in chat.
-
-**Notifications:** Claude-style push monitors do not port to this runtime.
-Use bounded cursor-based polls (`etiquette notify poll --seat <seat>`); no
-persistent watchers, no tail-based loops.
+After interrupted sessions, cwd/worktree ambiguity, role changes, or vendor
+swaps, rerun `whereami`, `doctor`, and `notify poll` before pickup. Hooks and
+readiness are evidence only; the task envelope is the work authority.

package/templates/seat-packs-v0/source/ollama-seat/README.md

@@ -14,6 +14,6 @@ Before pickup in the target project, read:
 4. `docs/work/manuals/SEAT_OPERATING_MANUAL.md`
 5. `docs/work/cookbooks/ADD_A_LANE.md` when routing new work
 
-Re-orient with `etiquette whereami` before pickup after stale context, resume,
-runner/model/profile swaps, or workflow migration. Hooks and readiness are
-evidence only; the task envelope is the work authority.
+After interrupted sessions, cwd/worktree ambiguity, role changes, or vendor
+swaps, rerun `whereami`, `doctor`, and `notify poll` before pickup. Hooks and
+readiness are evidence only; the task envelope is the work authority.

package/templates/seat-packs-v0/source/openrouter-seat/README.md

@@ -14,6 +14,6 @@ Before pickup in the target project, read:
 4. `docs/work/manuals/SEAT_OPERATING_MANUAL.md`
 5. `docs/work/cookbooks/ADD_A_LANE.md` when routing new work
 
-Re-orient with `etiquette whereami` before pickup after stale context, resume,
-runner/model/profile swaps, or workflow migration. Hooks and readiness are
-evidence only; the task envelope is the work authority.
+After interrupted sessions, cwd/worktree ambiguity, role changes, or vendor
+swaps, rerun `whereami`, `doctor`, and `notify poll` before pickup. Hooks and
+readiness are evidence only; the task envelope is the work authority.