@event4u/agent-config 11.0.0 → 12.0.0

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-f33d22f3d9b5701a1f97bf3a9502abc616f9b4145f28842793d5a44ea29cb54a  discovery-manifest.json
+1f3def9df2aafa22184906d7d5ca0c5a4b3df01910297740edebe0717d7de28d  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,7 +1,7 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-08-13T21:21:23Z`
-- Scanner: `1eaf68b6e9c9`
+- Generated: `2026-08-14T23:10:05Z`
+- Scanner: `de0a22b4ac4c`
 - Artefacts: **607**
 - Unassigned: **0**
 

package/dist/discovery/dormancy-report.md

@@ -1,6 +1,6 @@
 # Discovery — Dormancy Report
 
-- Generated: `2026-08-13T21:21:23Z`
+- Generated: `2026-08-14T23:10:05Z`
 - Window: **6 months** without a commit
 
 > Dormancy triggers **review, never auto-deprecation**

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-08-13T21:21:23Z`
+- Generated: `2026-08-14T23:10:05Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
-  "checksum": "sha256:b374e255b7b97cbde52ce8315706c94b4d61db7e4699ab4428acdfa333e68b5d",
-  "generated_at": "2026-08-13T21:21:23Z",
+  "checksum": "sha256:ddfc3dea1e837066fb3f48b8cc8a2d4cdc326908cd22f67fc2629d63f8a5b53f",
+  "generated_at": "2026-08-14T23:10:05Z",
   "packs": [
     {
       "always_on": false,
@@ -1818,5 +1818,5 @@
       ]
     }
   ],
-  "scanner_version": "1eaf68b6e9c9"
+  "scanner_version": "de0a22b4ac4c"
 }

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-08-13T21:21:23Z`
+- Generated: `2026-08-14T23:10:05Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 

package/dist/discovery/workspaces.json

@@ -1,7 +1,7 @@
 {
-  "checksum": "sha256:b374e255b7b97cbde52ce8315706c94b4d61db7e4699ab4428acdfa333e68b5d",
-  "generated_at": "2026-08-13T21:21:23Z",
-  "scanner_version": "1eaf68b6e9c9",
+  "checksum": "sha256:ddfc3dea1e837066fb3f48b8cc8a2d4cdc326908cd22f67fc2629d63f8a5b53f",
+  "generated_at": "2026-08-14T23:10:05Z",
+  "scanner_version": "de0a22b4ac4c",
   "workspaces": [
     {
       "artefact_count": 206,

package/dist/hooks/dispatch.js

@@ -26113,6 +26113,13 @@ function handleStart(root, payload, nowIso, sessionId2) {
     event: "subagent_start",
     ts: nowIso,
     ref,
+    // Phase 1 Step 4 correction (b): without this the dispatch denominator
+    // is not per-session. Three sessions share one ledger file, so a rate
+    // computed over the file aggregates strangers — the measured window
+    // held 7 starts against 25 stops, one of them an agent type this
+    // session never dispatched. The open record already carried it; the
+    // appended line did not, and the line is what a rate is computed from.
+    session_id: sessionId2,
     agent_type: rec.agent_type,
     parent_ref: parentRef,
     depth,
@@ -26120,7 +26127,7 @@ function handleStart(root, payload, nowIso, sessionId2) {
     concurrent_open: countOpen(root)
   });
 }
-function handleStop(root, payload, nowIso) {
+function handleStop(root, payload, nowIso, sessionId2) {
   const agentId = str4(payload, "agent_id", "agentId");
   if (agentId === null) {
     appendUnidentified(root, "subagent_stop", nowIso, payload);
@@ -26139,6 +26146,11 @@ function handleStop(root, payload, nowIso) {
     event: "subagent_stop",
     ts: nowIso,
     ref,
+    // The session this stop was OBSERVED in, read from the same envelope
+    // position as the start's — never back-filled from `rec`, which would
+    // relabel a cross-session stop as belonging to the dispatching session
+    // and hide exactly the mismatch this field exists to expose.
+    session_id: sessionId2,
     agent_type: rec?.agent_type ?? str4(payload, "agent_type", "agentType", "subagent_type", "subagentType"),
     depth: rec?.depth ?? null,
     depth_basis: rec?.depth_basis ?? null,
@@ -26164,7 +26176,7 @@ function processEnvelope2(envelope, consumerRoot) {
     const sessionId2 = str4(payload, "session_id", "sessionId") ?? str4(envelope, "session_id", "sessionId");
     reapStaleOpenRecords(consumerRoot, nowIso);
     if (event === "subagent_start") handleStart(consumerRoot, payload, nowIso, sessionId2);
-    else handleStop(consumerRoot, payload, nowIso);
+    else handleStop(consumerRoot, payload, nowIso, sessionId2);
   } catch {
     return EXIT_ALLOW18;
   }

package/dist/mcp/registry-manifest.json

@@ -1,15 +1,15 @@
 {
   "discovery": {
     "artefact_count": 607,
-    "scanner_version": "1eaf68b6e9c9"
+    "scanner_version": "de0a22b4ac4c"
   },
-  "generated_at": "2026-08-13",
+  "generated_at": "2026-08-14",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "11.0.0"
+    "version": "12.0.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "11.0.0"
+      "version": "12.0.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "11.0.0"
+  "version": "12.0.0"
 }

package/dist/mcp/server.mjs

@@ -15262,7 +15262,7 @@ function lint_wing4_boundaries(text) {
   }
   return issues;
 }
-function lint_execution_metadata(execution, frontmatter) {
+function lint_execution_metadata(execution, frontmatter, body = "") {
   const issues = [];
   const execType = execution.type;
   if (execType !== void 0) {
@@ -15332,6 +15332,15 @@ function lint_execution_metadata(execution, frontmatter) {
       new Issue("error", "invalid_safety_mode", `Invalid safety_mode '${String(safetyMode)}'; must be 'strict'`)
     );
   }
+  if (safetyMode === "strict" && body !== "" && !STRICT_WRITE_GATE_PATTERNS.some((p) => p.test(body)) && !SKILL_REFERENCE_DEFERRAL_PATTERN.test(body)) {
+    issues.push(
+      new Issue(
+        "warning",
+        "strict_mode_missing_write_gate",
+        "execution.safety_mode is 'strict' but the body names no precondition on the write path and defers no write-path steps to the skill's references/ \u2014 state the gate inline (propose-then-confirm, --dry-run) or defer it, per skill-writing \xA7 Action-reference split"
+      )
+    );
+  }
   const timeout = execution.timeout_seconds;
   if (timeout !== void 0) {
     if (typeof timeout !== "number" || !Number.isInteger(timeout) || timeout <= 0) {
@@ -15506,9 +15515,18 @@ function lint_skill(p, text, absPath = null) {
         issues.push(new Issue("warning", "superseded_skill", msg));
       }
     }
+    if (COMPATIBILITY_KEY_PATTERN.test(frontmatter) && !HARNESS_COMPAT_KEY_PATTERN.test(frontmatter)) {
+      issues.push(
+        new Issue(
+          "warning",
+          "deprecated_compatibility_field",
+          "Frontmatter declares the deprecated free-text 'compatibility:' without the structured 'harness_compat:' that supersedes it \u2014 add harness_compat (see skill.schema.json and docs/MIGRATION.md \xA7 Scheduled deprecations); compatibility stays accepted until removal"
+        )
+      );
+    }
     const execution = parseExecutionBlock(frontmatter);
     if (execution !== null) {
-      issues.push(...lint_execution_metadata(execution, frontmatter));
+      issues.push(...lint_execution_metadata(execution, frontmatter, text.replace(FRONTMATTER_PATTERN, "")));
     }
     const tierMatch = TIER_PATTERN.exec(frontmatter);
     if (tierMatch && tierMatch[1] === "senior") {
@@ -18030,7 +18048,7 @@ function _isCliEntry7() {
     return false;
   }
 }
-var _HERE4, REQUIRED_PERSONA_SECTIONS_CORE, REQUIRED_PERSONA_SECTIONS_SPECIALIST, VALID_PERSONA_TIERS, PERSONA_LINE_BUDGETS, REQUIRED_USERTYPE_SECTIONS, USERTYPE_LINE_BUDGET, VALID_PERSONA_WINGS, PERSONA_LINE_BUDGETS_BY_WING, REQUIRED_SKILL_SECTIONS, SECTION_ALIASES, RECOMMENDED_SKILL_SECTIONS, CONDITIONAL_SKILL_SECTIONS, RULE_BAD_SIGNS, FRUGALITY_WRITER_SKILLS, FRUGALITY_CHARTER_RELPATH, FRUGALITY_CHARTER_INDEX_RULES, VAGUE_VALIDATION_PATTERNS, TRIGGER_WARNING_PATTERNS, ORDERED_STEP_PATTERN, SECTION_PATTERN, FRONTMATTER_PATTERN, DESCRIPTION_PATTERN, STATUS_PATTERN, REPLACED_BY_PATTERN, TIER_PATTERN, TYPE_PATTERN, SOURCE_PATTERN, SENIOR_RELATED_SKILLS_PATTERN, SENIOR_RELATED_WHEN_PATTERN, SENIOR_RELATED_WHEN_NOT_PATTERN, SENIOR_PROACTIVE_PATTERN, SENIOR_OUTPUT_PATTERN, H1_PATTERN, DOUBLE_BLANK_PATTERN, VALID_RULE_TYPES, VALID_RULE_SOURCES, ROUTER_ALLOWED_TRIGGER_KEYS, KERNEL_RULE_IDS2, VALID_EXECUTION_TYPES, VALID_EXECUTION_HANDLERS, VALID_EXECUTION_SAFETY_MODES, EXTERNAL_EXECUTION_HANDLERS, RUNTIME_REQUIRES_BLOCK_PATTERN, VALID_EXECUTION_FIELDS, WING3_SPINE_SLOTS, CONTEXT_SPINE_INLINE_PATTERN, WING3_SAAS_URL_PATTERN, WING3_VENDOR_BLACKLIST, WING3_STACK_LOCKED_PATTERN, WING3_CHANNEL_TACTIC_PATTERN, WING4_SPINE_SLOTS, WING4_SAAS_URL_PATTERN, WING4_VENDOR_BLACKLIST, WING4_STAGE_AGNOSTIC_PATTERN, Issue, LintResult, _ROLE_CONTRACT_CANDIDATES, _ROLE_CONTRACT_SLUGS_CACHE, _ROLE_CONTRACT_REF_PATTERN, PROCEDURE_HEADING_PATTERN, COMMAND_FRONTMATTER_DELEGATION_KEYS, MD_LINK_PATTERN_G, NAME_PATTERN, DISABLE_MODEL_PATTERN, _INSPECT_VERB_PATTERN, last_changed_scope_reason, last_changed_base_diff_ok, _INTERACTION_NAME_PATTERNS, _INTERACTION_CONTENT_KEYWORDS, _EXEC_FILE_SIGNALS, _EXEC_CONTENT_SIGNALS, _TASK_TYPE_SIGNALS, _VERIFICATION_TOOLS, _FRUGALITY_STANDARDS_PATTERN, _FRUGALITY_CHARTER_LINK_PATTERN, _MD_LINK_PATTERN, _MALICE_CRED_EXFIL, _MALICE_REMOTE_EXEC, _MALICE_FORCE_PUSH, _MALICE_CHMOD_SECRETS, _MALICE_SHELL_INJECT, _MALICE_PATTERNS, _NAG_UPDATE_CHECK, _NAG_STAY_CURRENT, _NAG_SELF_PROMO, _NAG_BEST_SKILL, _NAG_MUST_USE, _NAG_ALWAYS_USE, _NAG_PATTERNS, _OUTPUT_SCHEMA_KEY_PATTERN, _SCHEMA_ARTEFACT_TYPES, ArgError, isCliEntry2;
+var _HERE4, REQUIRED_PERSONA_SECTIONS_CORE, REQUIRED_PERSONA_SECTIONS_SPECIALIST, VALID_PERSONA_TIERS, PERSONA_LINE_BUDGETS, REQUIRED_USERTYPE_SECTIONS, USERTYPE_LINE_BUDGET, VALID_PERSONA_WINGS, PERSONA_LINE_BUDGETS_BY_WING, REQUIRED_SKILL_SECTIONS, SECTION_ALIASES, RECOMMENDED_SKILL_SECTIONS, CONDITIONAL_SKILL_SECTIONS, RULE_BAD_SIGNS, FRUGALITY_WRITER_SKILLS, FRUGALITY_CHARTER_RELPATH, FRUGALITY_CHARTER_INDEX_RULES, VAGUE_VALIDATION_PATTERNS, TRIGGER_WARNING_PATTERNS, ORDERED_STEP_PATTERN, SECTION_PATTERN, FRONTMATTER_PATTERN, DESCRIPTION_PATTERN, STATUS_PATTERN, REPLACED_BY_PATTERN, TIER_PATTERN, TYPE_PATTERN, SOURCE_PATTERN, SENIOR_RELATED_SKILLS_PATTERN, SENIOR_RELATED_WHEN_PATTERN, SENIOR_RELATED_WHEN_NOT_PATTERN, SENIOR_PROACTIVE_PATTERN, SENIOR_OUTPUT_PATTERN, H1_PATTERN, DOUBLE_BLANK_PATTERN, VALID_RULE_TYPES, VALID_RULE_SOURCES, ROUTER_ALLOWED_TRIGGER_KEYS, KERNEL_RULE_IDS2, VALID_EXECUTION_TYPES, VALID_EXECUTION_HANDLERS, VALID_EXECUTION_SAFETY_MODES, EXTERNAL_EXECUTION_HANDLERS, RUNTIME_REQUIRES_BLOCK_PATTERN, COMPATIBILITY_KEY_PATTERN, HARNESS_COMPAT_KEY_PATTERN, STRICT_WRITE_GATE_PATTERNS, SKILL_REFERENCE_DEFERRAL_PATTERN, VALID_EXECUTION_FIELDS, WING3_SPINE_SLOTS, CONTEXT_SPINE_INLINE_PATTERN, WING3_SAAS_URL_PATTERN, WING3_VENDOR_BLACKLIST, WING3_STACK_LOCKED_PATTERN, WING3_CHANNEL_TACTIC_PATTERN, WING4_SPINE_SLOTS, WING4_SAAS_URL_PATTERN, WING4_VENDOR_BLACKLIST, WING4_STAGE_AGNOSTIC_PATTERN, Issue, LintResult, _ROLE_CONTRACT_CANDIDATES, _ROLE_CONTRACT_SLUGS_CACHE, _ROLE_CONTRACT_REF_PATTERN, PROCEDURE_HEADING_PATTERN, COMMAND_FRONTMATTER_DELEGATION_KEYS, MD_LINK_PATTERN_G, NAME_PATTERN, DISABLE_MODEL_PATTERN, _INSPECT_VERB_PATTERN, last_changed_scope_reason, last_changed_base_diff_ok, _INTERACTION_NAME_PATTERNS, _INTERACTION_CONTENT_KEYWORDS, _EXEC_FILE_SIGNALS, _EXEC_CONTENT_SIGNALS, _TASK_TYPE_SIGNALS, _VERIFICATION_TOOLS, _FRUGALITY_STANDARDS_PATTERN, _FRUGALITY_CHARTER_LINK_PATTERN, _MD_LINK_PATTERN, _MALICE_CRED_EXFIL, _MALICE_REMOTE_EXEC, _MALICE_FORCE_PUSH, _MALICE_CHMOD_SECRETS, _MALICE_SHELL_INJECT, _MALICE_PATTERNS, _NAG_UPDATE_CHECK, _NAG_STAY_CURRENT, _NAG_SELF_PROMO, _NAG_BEST_SKILL, _NAG_MUST_USE, _NAG_ALWAYS_USE, _NAG_PATTERNS, _OUTPUT_SCHEMA_KEY_PATTERN, _SCHEMA_ARTEFACT_TYPES, ArgError, isCliEntry2;
 var init_skill_linter = __esm({
   "src/scripts/skill_linter.ts"() {
     "use strict";
@@ -18171,6 +18189,17 @@ var init_skill_linter = __esm({
     VALID_EXECUTION_SAFETY_MODES = /* @__PURE__ */ new Set(["strict"]);
     EXTERNAL_EXECUTION_HANDLERS = /* @__PURE__ */ new Set(["shell", "php", "node"]);
     RUNTIME_REQUIRES_BLOCK_PATTERN = /^runtime_requires:[ \t]*(\{.*)?$/m;
+    COMPATIBILITY_KEY_PATTERN = /^compatibility:[ \t]*\S/m;
+    HARNESS_COMPAT_KEY_PATTERN = /^harness_compat:[ \t]*\S/m;
+    STRICT_WRITE_GATE_PATTERNS = [
+      /--dry-run/i,
+      /\bnever silent[- ]run/i,
+      /\bpropose,? never\b/i,
+      /\bconfirms? before\b/i,
+      /\bexplicit (?:user )?confirmation\b/i,
+      /\basks? (?:the user )?(?:first|before)\b/i
+    ];
+    SKILL_REFERENCE_DEFERRAL_PATTERN = /\]\(\.{0,2}\/?references\//;
     VALID_EXECUTION_FIELDS = /* @__PURE__ */ new Set([
       "type",
       "handler",
@@ -35377,6 +35406,13 @@ function handleStart(root, payload, nowIso, sessionId) {
     event: "subagent_start",
     ts: nowIso,
     ref,
+    // Phase 1 Step 4 correction (b): without this the dispatch denominator
+    // is not per-session. Three sessions share one ledger file, so a rate
+    // computed over the file aggregates strangers — the measured window
+    // held 7 starts against 25 stops, one of them an agent type this
+    // session never dispatched. The open record already carried it; the
+    // appended line did not, and the line is what a rate is computed from.
+    session_id: sessionId,
     agent_type: rec.agent_type,
     parent_ref: parentRef,
     depth,
@@ -35384,7 +35420,7 @@ function handleStart(root, payload, nowIso, sessionId) {
     concurrent_open: countOpen(root)
   });
 }
-function handleStop(root, payload, nowIso) {
+function handleStop(root, payload, nowIso, sessionId) {
   const agentId = str2(payload, "agent_id", "agentId");
   if (agentId === null) {
     appendUnidentified(root, "subagent_stop", nowIso, payload);
@@ -35403,6 +35439,11 @@ function handleStop(root, payload, nowIso) {
     event: "subagent_stop",
     ts: nowIso,
     ref,
+    // The session this stop was OBSERVED in, read from the same envelope
+    // position as the start's — never back-filled from `rec`, which would
+    // relabel a cross-session stop as belonging to the dispatching session
+    // and hide exactly the mismatch this field exists to expose.
+    session_id: sessionId,
     agent_type: rec?.agent_type ?? str2(payload, "agent_type", "agentType", "subagent_type", "subagentType"),
     depth: rec?.depth ?? null,
     depth_basis: rec?.depth_basis ?? null,
@@ -35428,7 +35469,7 @@ function processEnvelope(envelope, consumerRoot) {
     const sessionId = str2(payload, "session_id", "sessionId") ?? str2(envelope, "session_id", "sessionId");
     reapStaleOpenRecords(consumerRoot, nowIso);
     if (event === "subagent_start") handleStart(consumerRoot, payload, nowIso, sessionId);
-    else handleStop(consumerRoot, payload, nowIso);
+    else handleStop(consumerRoot, payload, nowIso, sessionId);
   } catch {
     return EXIT_ALLOW4;
   }

package/docs/MIGRATION.md

@@ -16,6 +16,7 @@ releaser here on every `release:major`.
 
 | Surface | Committed | Deprecation notice due | Removal due | Reversal condition |
 |---|---|---|---|---|
+| Free-text `compatibility` skill-frontmatter field (`src/scripts/schemas/skill.schema.json`) | 2026-08-14 | shipped 2026-08-14 — `deprecated: true` + superseded-by note in the schema; `harness_compat` lands beside it, additively | next major after the notice — **not pinned here** (removal date is maintainer-owned, same stance as the manifest `tier` entry, whose `sunset` shipped `null`) | The public Agent-Skills spec makes `compatibility` load-bearing for cross-host portability, or an external consumer is found reading it. `harness_compat` is package-local; `compatibility` mirrors the public spec, so keeping the mirror stays cheaply reversible. Superseded by `harness_compat` (class) + `runtime_requires` (probeable detail); both users (`docx-authoring`, `pdf-tools`) already carry both fields, so nothing breaks on removal day. |
 | `code_graph` native code-graph engine (`code_graph.enabled`, the `code-intelligence` skill's native arm, `code_graph_nudge_hook`) | 2026-07-28 | next major after 9.x | the major after that | A consumer case the graph answers and disciplined grep cannot. Measured null: recall 0.365 vs grep 0.797 (`docs/CLAIMS.md` `code-graph-retrieval-null`). Until then `enabled: false` is permanent. **Its parser pair (`web-tree-sitter@0.24.7` / `tree-sitter-wasms@0.1.13`, ~51 MB unpacked) moved from `dependencies` to `devDependencies` ahead of the schedule, so consumers no longer install it — the runtime paths (CLI leaf, nudge hook, skill, rule) stay registered until the removal date above, but re-enabling now also means installing that ABI-locked pair yourself.** |
 
 **Adding a row:** any change that ships a capability as default-off-pending-removal,

package/docs/contracts/settings-classes.md

@@ -142,6 +142,47 @@ larger set; it is the set that passes both halves.
 | `personal.canary_name` | un-inferrable, and answering arms the session-degradation canary; one keypress to accept the prefill | `""` (canary dark) |
 | `memory.learn_on_session_end` | it turns on automatic memory writes at the end of every session — a standing write the user should authorise | `false` |
 
+## Class B is a persistence property, not an enforcement claim
+
+Recorded 2026-08-13, from `road-to-zero-settings` step 3.2 — the step that asked
+each class-B key *"does the action need authorising at all?"*. Two of the three
+answers turned out not to be about the keys.
+
+```
+CLASS B SAYS: MAY BE ASKED ONCE, THEN PERSISTED. IT SAYS NOTHING ABOUT
+WHETHER ANYTHING CAN REFUSE THE ACTION. THE DISPOSITION SAYS THAT.
+A `consent` KEY NEEDS A MECHANISM THAT CAN WITHHOLD, OR AN EXPLICIT
+PROSE-ONLY LABEL. AN `un-inferrable` KEY NEEDS ONLY PERSISTENCE.
+```
+
+The two axes are independent, and reading class B as implying an enforcement
+obligation is what made two non-problems look like problems:
+
+- **`personal.canary_name`** authorises nothing — it holds a nickname used as a
+  liveness marker. It is class B because it cannot be inferred and is worth
+  keeping once answered, and its disposition (`un-inferrable`) already says so.
+  There is no gate to build here and never was.
+- **`personal.open_edited_files`** is a genuine `consent` key with **no mechanism
+  that can refuse the action** — its only reader is prose in
+  `src/skills/file-editor/SKILL.md`. The suite's standing rule is *never claim
+  enforcement you do not have*, and the discharge of that rule is to **declare
+  the limit**, not to delete the user's choice: it is carried as an explicitly
+  prose-only preference. An unenforceable flag that says it is unenforceable is
+  honest; one that presents as a gate is not.
+- **`memory.learn_on_session_end`** is what a consent key looks like when the
+  mechanism exists: `src/scripts/memory_learn_hook.ts` reads it and can withhold
+  the write, and the default is conservative.
+
+Splitting class B into `B-consent` and `B-config` was considered and **not
+taken** — it would churn a contract, a linter and every consumer's mental model
+to express what this paragraph expresses. What the split would have bought is
+the obligation stated above; stating it directly costs one section.
+
+**Consequence for anyone adding a class-B key:** the § B eligibility invariant
+still binds in full. This section adds one question on top of it — *if the
+disposition is `consent`, what can refuse the action?* An answer of "nothing"
+is allowed, and must then be written down as such.
+
 ## The one exception — `emergency.orchestration_halt`
 
 The always-on-orchestration doctrine (subagents, council, team) deletes every

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@event4u/agent-config",
     "mcpName": "io.github.event4u-app/agent-config",
-    "version": "11.0.0",
+    "version": "12.0.0",
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including \"zero runtime daemon\".",
     "license": "MIT",
     "private": false,

package/src/config/agent-settings.template.yml

@@ -133,6 +133,40 @@ projection:
 # (vendor-granular unknown_defaults in src/config/host-capabilities.yml).
 discipline_profile: __DISCIPLINE_PROFILE__
 
+# OPT-IN PRESET — the measured-lift configuration, shown but NOT shipped.
+#
+# The evidence above says `essential` carries the significant discipline lift
+# (+0.458, p=0.0135) while `full`'s residual over it is not significant
+# (p=0.37). That reads like an argument to flip the shipped default. It is not,
+# for two independent reasons, and both are worth stating where the key lives
+# rather than in a roadmap nobody reads at install time.
+#
+#   1. This key family is marked "do not set this from automation". That reads
+#      as ABSOLUTE — it forbids an automated CHOICE of default for the family,
+#      not merely a script rewriting your file. No measurement, however clean,
+#      licenses an agent to flip it on your behalf.
+#   2. The flip was pre-registered against a fresh-install census of
+#      <= 30k tokens of always-on rule prose. Measured at audit time: ~163k as
+#      loaded, i.e. 5.4x the target. The criterion fails on its own terms
+#      regardless of point 1.
+#
+# So the better-evidenced value is carried here as a visible option you may
+# uncomment, with its cost stated inline. Uncomment the line below to replace
+# the resolved value above:
+#
+#   discipline_profile: essential      # ~3.3x kernel tokens (vs ~11.7x for full)
+#
+# Read the two factors as what they are: multiples of the kernel-only baseline
+# from the cost-factor sweep, NOT the fresh-install census. They answer "what
+# does this tier cost relative to `off`", never "does this tier reach 30k" —
+# nothing has measured the latter for `essential`, and this comment does not
+# claim it does.
+#
+# Recorded 2026-08-14 on an outside opinion (1 seat, 2 rounds; the second seat
+# failed to start, so a single-model judgement on its checkable merit and NOT a
+# convergence). It rejected both the flip and the do-nothing, and proposed this
+# third route: you see the option, nothing automated chose for you.
+
 # --- Cost profile (legacy knob — superseded by discipline_profile above) ---
 #
 # Master switch that controls which rule tiers load each session.

package/src/config/gate-violation-baselines.json

@@ -8,9 +8,9 @@
       "falsifier": "./scripts-run src/scripts/check_ci_local_parity"
     },
     "check_no_new_legacy_path:hardcoded-scan-roots": {
-      "count": 48,
-      "landed": "2026-08-09",
-      "note": "Lines under src/scripts/**/*.{ts,mts,mjs} that pass the retired `.agent-src.uncondensed` directory into `path.join(...)` — a filesystem path CONSTRUCTED against the tree ADR-051 abandoned, which is the exact shape of all 14 dead gates. Deliberately narrow so the number is signal, not noise: 236 raw mentions under src/scripts → 147 string-literal lines → 67 path-constructing lines when the pass was written, after exempting src/scripts/_lib/agent_src.ts (the shared resolver, whose job IS owning the constant — gates that route through it survived the move). Detectors holding the literal as data to match, strip, or print are not counted, and no prose, docs, tests or fixtures are read: that full-tree shape was measured at 44 files / 213 hits and rejected as the wrong lint (see the note in check_no_new_legacy_path.ts::find_offenders). Recorded at 58 rather than 67 because Phase 1's scan-root repairs were landing on this branch while the pass was being written and had already removed 9 — a baseline above the truth silently permits new violations. This count goes to ZERO as the remaining repairs land; every repair is a lowering commit. Lowered 56→51 by the road-to-renewal-foundation Phase 1 dead-root sweep (check_always_budget, check_portability, check_references, lint_framework_leakage, lint_agents_md). Lowered 51→49 by the gate-hardening adoption PR: skill_collision_clusters and skill_overlap were repointed at the live skills tree via the shared resolver — two gates that had been reading the retired container and scoring 0 of 288 skills. Lowered 49→48 by road-to-rule-delivery-integrity P2.2: score_skill_selection was repointed at the live skills tree via the shared resolver. It is the same shape as the two gates lowered before it — a scorer reading the retired container and scoring 0 of 288 skills — and here the consequence was sharper than a dead gate: the roadmap's pre-registered selection-accuracy criteria would have been compared against a baseline of silent zeros."
+      "count": 47,
+      "landed": "2026-08-13",
+      "note": "Lines under src/scripts/**/*.{ts,mts,mjs} that pass the retired `.agent-src.uncondensed` directory into `path.join(...)` — a filesystem path CONSTRUCTED against the tree ADR-051 abandoned, which is the exact shape of all 14 dead gates. Deliberately narrow so the number is signal, not noise: 236 raw mentions under src/scripts → 147 string-literal lines → 67 path-constructing lines when the pass was written, after exempting src/scripts/_lib/agent_src.ts (the shared resolver, whose job IS owning the constant — gates that route through it survived the move). Detectors holding the literal as data to match, strip, or print are not counted, and no prose, docs, tests or fixtures are read: that full-tree shape was measured at 44 files / 213 hits and rejected as the wrong lint (see the note in check_no_new_legacy_path.ts::find_offenders). Recorded at 58 rather than 67 because Phase 1's scan-root repairs were landing on this branch while the pass was being written and had already removed 9 — a baseline above the truth silently permits new violations. This count goes to ZERO as the remaining repairs land; every repair is a lowering commit. Lowered 56→51 by the road-to-renewal-foundation Phase 1 dead-root sweep (check_always_budget, check_portability, check_references, lint_framework_leakage, lint_agents_md). Lowered 51→49 by the gate-hardening adoption PR: skill_collision_clusters and skill_overlap were repointed at the live skills tree via the shared resolver — two gates that had been reading the retired container and scoring 0 of 288 skills. Lowered 49→48 by road-to-rule-delivery-integrity P2.2: score_skill_selection was repointed at the live skills tree via the shared resolver. It is the same shape as the two gates lowered before it — a scorer reading the retired container and scoring 0 of 288 skills — and here the consequence was sharper than a dead gate: the roadmap's pre-registered selection-accuracy criteria would have been compared against a baseline of silent zeros. Lowered 48→47 on 2026-08-13, and this one is a catch-up rather than a repair: the pass reported 47 against a baseline of 48, so a gain had already landed without the ratchet following it. Attributed to 455160160 (fix(evals): resolve the eval orchestrator against the live skills tree), the most recent repair in this branch's base that removes a path-constructing line — SKILLS_ROOT repointed through _lib/agent_src.ts::SRC_SKILLS(). A loose ratchet is not harmless: it silently permits one new violation to be added back without any gate noticing, which is the shape this entry exists to prevent."
     },
     "audit_user_type_axis": {
       "count": 1,

package/src/scripts/_dispatch.bash

@@ -447,6 +447,9 @@ require_tsx() {
 # command surface (`sync`, `doctor`, `validate`, `upgrade`, …) and its
 # basenames are unique, so the mapping is collision-free. Other exec_ts
 # callers (resolve_script results, the work engine, …) are unaffected.
+#
+# In a DEV tree the bundle is also suppressed when any `src/**/*.ts` is newer
+# than it — see cli_delegate_bundle_is_stale.
 cli_delegate_bundle() {
   local ts_abs="$1"
   case "$ts_abs" in
@@ -457,18 +460,52 @@ cli_delegate_bundle() {
   name="$(basename "${ts_abs%.ts}")"
   local bundle="$PACKAGE_ROOT/dist/cli-delegate/$name.js"
   if [[ -f "$bundle" ]] && command -v node >/dev/null 2>&1; then
+    cli_delegate_bundle_is_stale "$bundle" && return 0
     printf '%s' "$bundle"
   fi
 }
 
+# Is a `dist/cli-delegate/` bundle older than the sources it was built from?
+#
+# Only asked in a DEV tree — `$PACKAGE_ROOT/src` exists there and nowhere else.
+# A consumer install ships no `src/`, so it returns "not stale" without a single
+# stat and the ADR-204 fast path is untouched.
+#
+# The scan covers `src` WHOLE, not `src/scripts`: `_cli/*.ts` imports reach into
+# `src/shared`, `src/install`, `src/server`, `src/agent`, `src/config` and
+# `src/agent-src`, and the defect this guard exists for lived two hops away in
+# `src/scripts/_lib/cc_transcript.ts` — a scan narrowed to the entry point's own
+# directory would have missed it.
+#
+# Cost, measured 2026-08-14 on the local tree (1075 `.ts` files): 78 ms when the
+# bundle is current (the full walk) and ~12 ms when it is not (`-quit` exits at
+# the first newer file). The bundle saves ~290 ms against the tsx path, so the
+# worst case still leaves most of that — and buys the guarantee that a dev-tree
+# edit is never silently ignored in favour of a stale compile.
+cli_delegate_bundle_is_stale() {
+  local bundle="$1"
+  [[ -d "$PACKAGE_ROOT/src" ]] || return 1
+  local newer
+  newer="$(find "$PACKAGE_ROOT/src" -name '*.ts' -newer "$bundle" -print -quit 2>/dev/null)"
+  [[ -n "$newer" ]]
+}
+
 # Run an absolute script path. The argument is an absolute path that may carry
 # a `.py` (legacy) or `.ts` extension; we resolve the `.ts` twin.
 #
-# A precompiled `dist/cli-delegate/` bundle wins when present — the consumer
-# tree ships no tsx (see require_tsx), and the bundle is also ~5.7x faster
-# than the npx path it replaces (p50 56-71 ms vs 346-392 ms, measured
-# 2026-07-31; see docs/decisions/ADR-204). The tsx path stays as the dev-tree
-# route and as the fallback for every non-`_cli` caller.
+# A precompiled `dist/cli-delegate/` bundle wins when present AND not stale —
+# the consumer tree ships no tsx (see require_tsx), and the bundle is also
+# ~5.7x faster than the npx path it replaces (p50 56-71 ms vs 346-392 ms,
+# measured 2026-07-31; see docs/decisions/ADR-204). The tsx path stays as the
+# dev-tree route and as the fallback for every non-`_cli` caller.
+#
+# "Not stale" is the load-bearing qualifier, and it was added because the
+# unqualified version shipped a real failure: a dev-tree `dist/cli-delegate/`
+# built before a `projectStoreSlug` fix kept running the OLD slug, so
+# `agent-config handoff --list` reported "no recent sessions" in any worktree
+# whose path carried a `+`, while the fixed source right next to it listed ten.
+# A compiled copy that silently outranks the source it was built from turns
+# every edit into a coin flip — see cli_delegate_bundle_is_stale.
 #
 # Argv/stdin/stdout/stderr/exit-code pass through unchanged in both routes —
 # mirrors src/scripts/run.ts resolution.

package/src/scripts/audit_command_surface.ts

@@ -57,9 +57,14 @@ const SIZE_BUDGETS: Record<string, number> = {
     platform: 10,
 };
 // ADR-092: `visibility:` is the named source of truth (visible / advanced /
-// internal); the integer `tier:` is a back-compat alias. A command counts
-// toward the per-pack budget when it is surfaced — visibility in {visible,
-// advanced} (or, when only the alias is present, tier in {0,1}). `internal`
+// internal). The integer `tier:` alias was REMOVED from live command files in
+// road-to-tier-removal Phase 4, but this file still parses it on purpose: the
+// surface-growth check reads PAST git revisions (`_tier_at_ref`), and pre-ADR-092
+// blobs carry only the alias. The live-file tier read below is therefore a
+// harmless residue on current files and the correct read on historical ones.
+// A command counts toward the per-pack budget when it is surfaced — visibility
+// in {visible, advanced} (or, when only the alias is present, tier in {0,1}).
+// `internal`
 // (or absent → defaults to internal) is uncapped.
 const VISIBLE_TIERS: ReadonlySet<number> = new Set([0, 1]);
 const VISIBLE_VISIBILITIES: ReadonlySet<string> = new Set(['visible', 'advanced']);
@@ -622,17 +627,17 @@ export function render_md(commands: Command[], pairs: OverlapPair[]): string {
             '[`command-surface-synthesis.md`](command-surface-synthesis.md). Every command ' +
             "in this table maps to `keep` unless named in that file's tables.",
         '',
-        '| Name | Path | Tier | Cluster | Aliases | Lines | Commits | Age (d) | Bucket |',
+        '| Name | Path | Visibility | Cluster | Aliases | Lines | Commits | Age (d) | Bucket |',
         '|---|---|---:|---|---|---:|---:|---:|---|',
     );
     const sortedCmds = _stableSortStr(commands, (c) => c.relpath);
     for (const c of sortedCmds) {
         const aliases = c.aliases.length ? c.aliases.join(', ') : '—';
-        const tier = c.tier === null ? '—' : String(c.tier);
+        const visibility = c.visibility === null ? '—' : c.visibility;
         const cluster = c.cluster || '—';
         const age = c.days_since_first_commit === null ? '—' : String(c.days_since_first_commit);
         lines.push(
-            `| \`${c.name}\` | \`${c.relpath}\` | ${tier} | ${cluster} | ${aliases} | ` +
+            `| \`${c.name}\` | \`${c.relpath}\` | ${visibility} | ${cluster} | ${aliases} | ` +
                 `${c.line_count} | ${c.commit_count} | ${age} | |`,
         );
     }
@@ -738,7 +743,7 @@ function _is_visible(c: Command): boolean {
 
 interface VisibleCommand {
     name: string;
-    tier: number | null;
+    visibility: string | null;
     cluster: string;
     citations_docs: number;
     commit_count: number;
@@ -797,7 +802,7 @@ export function build_budget_audit(
         if (over) {
             const vis = visible.map((c) => ({
                 name: c.name,
-                tier: c.tier,
+                visibility: c.visibility,
                 cluster: c.cluster,
                 citations_docs: citation_count(c.name),
                 commit_count: c.commit_count,
@@ -832,8 +837,9 @@ export function render_budget_md(audit: BudgetAudit): string {
     L.push('# Command budget audit (6.0.0-B Phase 2 Step 4)\n');
     L.push(
         '> Per-pack VISIBLE-command counts vs. the `size_class` budget ' +
-            '(capability-packs.md). `visible` = tier ∈ {0,1}; tier 2 / absent = ' +
-            'internal (uncapped). Citations = docs/ files referencing `/<name>`.\n' +
+            '(capability-packs.md). `visible` = visibility ∈ {visible, advanced}; ' +
+            '`internal` / absent = uncapped. Citations = docs/ files referencing ' +
+            '`/<name>`.\n' +
             '>\n' +
             '> **Signal note:** docs-citations is the load-bearing signal (rank ' +
             'candidates low→high). The git commit/idle columns are low-variance on ' +
@@ -862,11 +868,11 @@ export function render_budget_md(audit: BudgetAudit): string {
                 `budget ${p.budget} (${p.size_class}), over by ${p.over_by}\n`,
         );
         L.push('Decide per command: keep-visible · set `internal` · relocate-to-pack-X.\n');
-        L.push('| Command | tier | cluster | docs citations | commits | days idle |');
-        L.push('|---|--:|---|--:|--:|--:|');
+        L.push('| Command | visibility | cluster | docs citations | commits | days idle |');
+        L.push('|---|---|---|--:|--:|--:|');
         for (const c of p.visible_commands ?? []) {
             L.push(
-                `| \`${c.name}\` | ${c.tier} | ${c.cluster || '—'} | ` +
+                `| \`${c.name}\` | ${c.visibility ?? '—'} | ${c.cluster || '—'} | ` +
                     `${c.citations_docs} | ${c.commit_count} | ` +
                     `${c.days_since_modified !== null ? c.days_since_modified : '—'} |`,
             );
@@ -1050,8 +1056,8 @@ export function check_new_budget(baseline: string, quiet: boolean): number {
             );
         }
         process.stdout.write(
-            '\nResolve by one of: set the command to `tier: 2` (internal, ' +
-                'uncapped) · merge into a sibling cluster · relocate to a pack ' +
+            '\nResolve by one of: set the command to `visibility: internal` ' +
+                '(uncapped) · merge into a sibling cluster · relocate to a pack ' +
                 'with budget headroom · file a budget-exemption ADR ' +
                 '(docs/contracts/capability-packs.md § Budget exemption process).\n',
         );

package/src/scripts/build_catalog_index.ts

@@ -138,7 +138,7 @@ export function buildEntries(): CatalogIndexEntry[] {
             cls: 'command',
             name,
             description: _str(fm['description']) || _str(fm['intent']),
-            tags: [_str(fm['pack']), _str(fm['tier']), _str(fm['visibility'])].filter((s) => s.length > 0),
+            tags: [_str(fm['pack']), _str(fm['visibility'])].filter((s) => s.length > 0),
             path: _rel(abs),
         });
     }