@event4u/agent-config 14.12.0 → 14.14.0

package/.augment-plugin/marketplace.json

@@ -1,20 +1,20 @@
 {
   "name": "event4u-agent-config",
   "description": "Governed agent system — skills, rules, commands, and guidelines for AI-assisted development.",
-  "version": "14.12.0",
+  "version": "14.14.0",
   "owner": {
     "name": "event4u",
     "email": "dev@event4u.app"
   },
   "metadata": {
     "description": "A policy-driven execution system that enforces quality, consistency, and developer-like behavior for AI agents.",
-    "version": "14.12.0"
+    "version": "14.14.0"
   },
   "plugins": [
     {
       "name": "agent-config",
       "description": "Full governed agent system — rules, skills, commands, guidelines, and runtime tooling.",
-      "version": "14.12.0",
+      "version": "14.14.0",
       "source": ".",
       "category": "governance",
       "tags": [

package/.augment-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-config",
   "description": "A governed skill framework for AI agents — runtime execution, tooling, observability, feedback, and lifecycle management with policy-driven quality enforcement.",
-  "version": "14.12.0",
+  "version": "14.14.0",
   "author": {
     "name": "event4u",
     "email": "dev@event4u.app"

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "14.12.0",
+    "version": "14.14.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -14,6 +14,20 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > (`tests/lib/changelog_eras.test.ts`) forces an era split before the
 > current era grows past 250 lines.
 
+> **Retro-curation disposition, 2026-09-01** — roadmap
+> `road-to-publication-integrity-hard-fail`, blocker `b-retro-curation-scope`,
+> option (c). The `### Release highlights` heads of 14.9.0 through 14.13.0 were
+> written by the release generator and published without the editorial pass they
+> ask for. Two things were repaired: the generator's own authoring instruction,
+> which was never release content, is deleted from this file, and the writer no
+> longer emits it. The generator-derived head lines below are **preserved as
+> published** and deliberately not paraphrased — rewriting a derived claim is
+> editorial judgement two prior councils reserved, and a paraphrase of the
+> generator's own reason would be truthfully documented uselessness.
+> [`docs/archive/`](docs/archive/) is left untouched as historical record. The
+> annotated tag messages and the published GitHub Release bodies for 14.9.0
+> through 14.13.0 are **immutable** and cannot be repaired at all.
+
 ## [Unreleased]
 
 ### Changed
@@ -404,188 +418,137 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > keeps the active era under the 250-line drift cap enforced by
 > `tests/test_changelog_eras.py`.
 
-# Era: 14.12.x — current
+# Era: pre-14.14.0 — archived
+
+> All entries before `14.14.0` live in
+> [`docs/archive/CHANGELOG-pre-14.14.0.md`](docs/archive/CHANGELOG-pre-14.14.0.md).
+> The archive is read-only; git tags remain the canonical
+> source for what shipped. Splitting them out of the main file
+> keeps the active era under the 250-line drift cap enforced by
+> `tests/test_changelog_eras.py`.
 
-> Started at `14.12.0`. Full entries live inline below.
+# Era: 14.14.x — current
+
+> Started at `14.14.0`. Full entries live inline below.
 > The drift test caps this era at 250 lines of entry body; growth past
-> that forces a new era split (`# Era: 14.13.x`, etc.) — see
+> that forces a new era split (`# Era: 14.15.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
-## [14.12.0](https://github.com/event4u-app/agent-config/compare/14.11.0...14.12.0) (2026-08-25)
+## [14.14.0](https://github.com/event4u-app/agent-config/compare/14.13.0...14.14.0) (2026-09-02)
 
 ### Release highlights
 
-<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
-- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 952e94b, cb5446e.
-- **Default changes + migration:** _auto-derived, rewrite before merge:_ commits naming a default, migration or migrate in 10a4b2c.
-- **Security and correctness:** _auto-derived, rewrite before merge:_ security-scoped commits or fixes to executable surface in 1081512, 12f7477, b0e82fd, ca4adaa, 9de9ed4, 6e839d4 +2 more.
-- **Honest nulls:** _auto-derived, rewrite before merge:_ commits recording a null, waived or falsified result in 12606f7, 8898b48, 3803945, 2a67719, f224d28, c4fc798.
+- **Behaviour changes:** `lint_code_comments` becomes a blocking source gate — comment discipline was claimed by two rules and enforced by neither, and it now reds the build on the authored tree (448f31f; the blind spots its first real corpus exposed are closed in 6edf1ad). Authoring-side only: no rule, skill, or command was removed or renamed in this span.
+- **Default changes + migration:** _none_
+- **Security and correctness:** No security-scoped fix in this span. One correctness fix reaches shipped behaviour — the language-pin carrier now skips host-injected wrapper regions instead of ending the human lead on them (27f3233). The other ten repair gates, fixtures, locks, typing and pinned evidence in the evolution harness and its records (6edf1ad, 9411964, 0c7fce0, ecf05c4, 32203ec, 01de2a3, f87eb79, 04a5a0b, 25647d0, 92549c4).
+- **Honest nulls:** _none_
 - **Known limitations:** _none_
 
 ### Features
 
-* **rules:** close the enum case in downstream-changes ([cb5446e](https://github.com/event4u-app/agent-config/commit/cb5446e5bb2eff580349f81ec722028c241d3a30))
-* **guidelines:** teach the taxonomy naming — the dual of an echo ([12606f7](https://github.com/event4u-app/agent-config/commit/12606f75fcc8e0a226b0b7dc677fe73a114415d8))
-* **council:** the argument-exhaustion stop, with the ordering as a conjunct ([7755110](https://github.com/event4u-app/agent-config/commit/775511082b6738f43c87b2a35930202ed544bf43))
-* **baselines:** one switch migrates all 18 ratchet read sites ([9df0b9b](https://github.com/event4u-app/agent-config/commit/9df0b9bb8fbca57cf57150eec0914ae4acc7f321))
-* **baselines:** the ABSOLUTE invariant, read from the target commit ([3a6a668](https://github.com/event4u-app/agent-config/commit/3a6a66850f4e842a4bd55ee9efbd627f71d6e4c7))
-* **web-launch:** the benchmark fixtures, and the verdict that stops short ([eee0500](https://github.com/event4u-app/agent-config/commit/eee050022f75d3eb3c806e47fd2cb4908877d47e))
-* **web-launch:** the remaining eight checks, and a region axis that escalates ([627f1a2](https://github.com/event4u-app/agent-config/commit/627f1a23cf2a589cc00ce8138a06b74a46df006e))
-* **guidelines:** one redundancy authority, cited at all three moments ([9df7908](https://github.com/event4u-app/agent-config/commit/9df7908899a36c6dc430ab75afe8205e54897705))
-* **corpus:** enforce the routing-matrix discipline on the corpus that exists ([3803945](https://github.com/event4u-app/agent-config/commit/3803945780d3663f25318289d09cd6f35add886a))
-* **routing:** a description-surface regression check a PR can afford ([7c9edc6](https://github.com/event4u-app/agent-config/commit/7c9edc6aaeff0d83a082296c03865ce5b13c2e21))
-* **gates:** ratchet routing-corpus coverage per scope, not in aggregate ([707fd4f](https://github.com/event4u-app/agent-config/commit/707fd4f0269b0ca2016a463a1f0cbb07dfbb7402))
-* **command:** the web-launch indexability check, default-off ([10a4b2c](https://github.com/event4u-app/agent-config/commit/10a4b2c71e917e1213a882427154620e33626ac7))
-* **config:** register the web-launch site-type axis before any code exists ([e3d0e67](https://github.com/event4u-app/agent-config/commit/e3d0e67c59fdebe6cba07b8e29596e5efe6faa91))
-* **sync:** classify the generated paths the census actually found conflicting ([3bbb571](https://github.com/event4u-app/agent-config/commit/3bbb571df14619922c0dd0a4dc07308e28385202))
-* **script:** pr_conflict_census -- which paths actually cost merge conflicts ([ca06337](https://github.com/event4u-app/agent-config/commit/ca06337251c5f7228148db21f28681ad6fecce62))
-* **gate:** a committed admission and refusal ledger for new skills ([93f2312](https://github.com/event4u-app/agent-config/commit/93f2312283f6898b6b90e29c6a7d78c8c7b271cb))
-* **gate:** ratchet the skill estate on the machinery the roadmap estate uses ([5c9ab3e](https://github.com/event4u-app/agent-config/commit/5c9ab3eda97bad125d9ef6338a10989da763cd6d))
-* **lib:** measure the skill corpus in two dimensions ([d3bbf83](https://github.com/event4u-app/agent-config/commit/d3bbf8300e0a1a1fe613109aba6d6bc04a103509))
-* **analysis:** an improvement mode that re-reads the artefact instead of the tree ([5a78ee5](https://github.com/event4u-app/agent-config/commit/5a78ee5c3ff85f4f6625bf7d4e988400fd7b5b00))
-* **context:** re-orient when the tree contradicts what you last read ([883654b](https://github.com/event4u-app/agent-config/commit/883654b989c97d1511b7ddee6ff23848b97a5f9d))
-* **gate:** check_command_examples -- three sub-checks over the visible surface ([5c2be5e](https://github.com/event4u-app/agent-config/commit/5c2be5ed0d700d6c96eee4667f6aabfd695e9e02))
-* **commands:** a controlled pattern vocabulary for command Why lines ([10bb45a](https://github.com/event4u-app/agent-config/commit/10bb45a3865ce27f071d989910e1da3437158af4))
-* **ci:** arm the preamble payload gate on pull requests, behind a grace ceiling ([4ef90d3](https://github.com/event4u-app/agent-config/commit/4ef90d350316291d7c095e97e6d6db22cb0fb38a))
-* **gate:** scan published markdown for path leakage, with a zero-unapproved floor ([0dbf252](https://github.com/event4u-app/agent-config/commit/0dbf252dea054f789161cbd4e8ab556aae37a88c))
-* **hooks:** suggestion-block capture as a two-slot latch, counts only ([05e0bd4](https://github.com/event4u-app/agent-config/commit/05e0bd4ea12c1fd6fdc35c45831ca028df4b969d))
-* **pack:** a behavioural global-install harness, and a branch-vs-base delta report ([c5bebfd](https://github.com/event4u-app/agent-config/commit/c5bebfd4926114be891a12e1a03d77b7ec1192de))
-* **gate:** check_score_contract makes a scorecard status derived, not awarded ([4587d70](https://github.com/event4u-app/agent-config/commit/4587d70cc8ea95680a7b9b8b7037d1a3599c8567))
-* **evidence:** seed the AC capability scorecard, and document a fourth register ([4d6c23d](https://github.com/event4u-app/agent-config/commit/4d6c23d68a9d79c884dcbe2f35979dc9ba6da51e))
-* **skills:** branch Tailwind tokens on the css axis, correct the version surface ([810a495](https://github.com/event4u-app/agent-config/commit/810a495c24af0abade21611ee399b94e16cd9426))
+* **gates:** enforce comment discipline in source, where two rules claimed it and neither could (#1806) ([448f31f](https://github.com/event4u-app/agent-config/commit/448f31ff8b3ef3752283d877bd68975dc6eaca1d))
+* **council:** read-only retention probe for council artefacts ([1ac4a53](https://github.com/event4u-app/agent-config/commit/1ac4a53f118d190fa38bb1f282f225412ddb614d))
+* **council:** corpus assembler for the provider-leakage bench ([f287afd](https://github.com/event4u-app/agent-config/commit/f287afd6c4ecc11eaec7cbb57a72cac58dffaad8))
+* **harness:** lexical shortlist over the BM25 core, as a tie-break the matcher outranks ([ef9d74b](https://github.com/event4u-app/agent-config/commit/ef9d74b6669537e5425b4dcc42fbeaf79fd94004))
+* **harness:** derive the index input set from the 5.1 verdict, closes 6.5 ([dce00d9](https://github.com/event4u-app/agent-config/commit/dce00d9a972062b4f5666ba7160d849303734e87))
+* **harness:** measure delivery sets and set compatibility, closes 6.4 ([b7aafbb](https://github.com/event4u-app/agent-config/commit/b7aafbb3b3fe8b32d9a0d5fe6d22d6c8aefe4a4d))
+* **harness:** run report with a mandatory evolution-ROI figure, and a cheapest-first model ladder ([83f1006](https://github.com/event4u-app/agent-config/commit/83f1006fedab78f364ddf8a11e39f36081bab3d4))
+* **harness:** measure the description-vs-body routing signal, closes 5.1 ([a86bd89](https://github.com/event4u-app/agent-config/commit/a86bd899c5b32b8cee00e78e144695a0deac69bb))
+* **harness:** deterministic evaluation cascade, wired into the runner ([211477d](https://github.com/event4u-app/agent-config/commit/211477d38819432ae4c4783ffddb122ff705da50))
+* **harness:** pathology archive per WHERE x WHY cell, closes 4.4 ([c0fdd42](https://github.com/event4u-app/agent-config/commit/c0fdd42b1172c4f0664f906f920d1210c9174845))
+* **council:** free explain mode for routing, with the unanswerable field marked ([07a717a](https://github.com/event4u-app/agent-config/commit/07a717afe8f259ed21564c1d67764da46922d045))
+* **council:** route record for decision replay, with the one field that cannot exist ([f0954ed](https://github.com/event4u-app/agent-config/commit/f0954eddad2c024bafe0808fc38924f0a4e8caaa))
+* **harness:** the promotion bridge mechanism — steps 7.1 through 7.7 ([ad0962f](https://github.com/event4u-app/agent-config/commit/ad0962f2e546fd87d77a1ad37cc570f6c6f1fbd7))
+* **council:** one synthesis-strategy interface behind the five candidates ([b1e6001](https://github.com/event4u-app/agent-config/commit/b1e6001ac4a3d62e4a50c3d1b0100354cdbd0ffa))
+* **council:** routing training-row schema with no free-text field ([8004341](https://github.com/event4u-app/agent-config/commit/8004341005335575f0eac5cb8ad4e43e7b5fa8cc))
+* **council:** deterministic expected-information-gain-per-cost scoring ([8af7598](https://github.com/event4u-app/agent-config/commit/8af759869268d7e9682e4a04bc74500b72bcc90c))
+* **council:** targeted cross-examination that quotes the claim verbatim ([de4bada](https://github.com/event4u-app/agent-config/commit/de4bada83e2ba266b8b15b30ac85c5dc5d602b5c))
+* **gates:** lint_promotion_paths — the promotion-path structural invariant ([13999df](https://github.com/event4u-app/agent-config/commit/13999df0e46a3f754c9e9b1b709e1a5b1ddb4146))
+* **council:** reviewer budget k with a balance-feasible diversity floor ([6afb3ae](https://github.com/event4u-app/agent-config/commit/6afb3ae24f791e5e65ab5370c27fd59455ee3b0f))
+* **council:** freeze the majority-laundering fixture and its retention gate ([045fb8d](https://github.com/event4u-app/agent-config/commit/045fb8dea1b0176572fe7a05bc0d6db2dcd78071))
+* **council:** reconstruct re-council savings offline and settle the retention cause ([44bc2e4](https://github.com/event4u-app/agent-config/commit/44bc2e4071f15791f8a518d91c794aa177b79a65))
 
 ### Bug Fixes
 
-* **roadmap:** correct an arithmetically false estate claim before it lands ([f65ae48](https://github.com/event4u-app/agent-config/commit/f65ae488bde4ad6a0f18ca71db7c7cfd837ef625))
-* **payload:** move the closed-set procedure out of the rule and into a guideline ([952e94b](https://github.com/event4u-app/agent-config/commit/952e94b5e4cda042efc78e647dec334a521bcdc3))
-* **evidence:** pin the twin metric, and correct a number that was encoded twice ([cefd23d](https://github.com/event4u-app/agent-config/commit/cefd23d7f955856f9301bd87f26d26e6629dc859))
-* **evidence:** declare the census artifact's evidence type ([85685f5](https://github.com/event4u-app/agent-config/commit/85685f574f8b48d4adfb8d1ae255b94632559652))
-* **security:** re-pin the secret-allow line the new manifest row pushed down ([1081512](https://github.com/event4u-app/agent-config/commit/10815120f3b9758ce4bfb7e53ec9c262bc08be19))
-* **stub:** point the transfer provenance at the archived parent ([b04093b](https://github.com/event4u-app/agent-config/commit/b04093bdd492e63b621495d1e33dfecea9dd5746))
-* **skill:** the router path must resolve in a consumer install ([37fa427](https://github.com/event4u-app/agent-config/commit/37fa4271b0700fe3dcbaef46819a92a3566bdcee))
-* **hook:** suggestion-capture was a silent no-op on every live dispatch ([12f7477](https://github.com/event4u-app/agent-config/commit/12f747714a1b3a4211dd733c63bd34be87b3d360))
-* **ci:** a diagnostic step that says it never gates must not fail the job ([b0e82fd](https://github.com/event4u-app/agent-config/commit/b0e82fd92f58dc3db61c53aedcb2d9da4b28b3eb))
-* **test:** the bucket field is `name`, not `label` ([ca4adaa](https://github.com/event4u-app/agent-config/commit/ca4adaa1af3d4cd09b0983147bcb62a3bfa85f9c))
-* **gate:** govern budgets.yml by an explicit row, not a widened glob ([9de9ed4](https://github.com/event4u-app/agent-config/commit/9de9ed4e76b7750c33d9e8d47c6a1ef3bedc550a))
-* **config:** the built surface is ungated by a recorded decision, and it is +8.6 MB ([ab398ed](https://github.com/event4u-app/agent-config/commit/ab398ed0507abb2bda0a449179fde03492d8dc45))
-* **roadmap:** four estate offsets, and a corrected reason on each ([3c0d33f](https://github.com/event4u-app/agent-config/commit/3c0d33f28d2f083d43f8aeca44c8b055950c3517))
-* **ci:** three downstream surfaces the new concern and settings key required ([6e839d4](https://github.com/event4u-app/agent-config/commit/6e839d4b8a58ae1e329781d183593c684cd8e139))
-* **ci:** declare report_pack_delta CI-only, and tighten the loose parity ratchet ([a7e3324](https://github.com/event4u-app/agent-config/commit/a7e3324f5e186b620dfa116f40c3d63e4cbf9c62))
-* **ci:** resolve a companion roadmap in any disposition, re-pin an audited false positive ([0665e0a](https://github.com/event4u-app/agent-config/commit/0665e0a3e1b631db5307f09e51ae6215ad5315ca))
-* **evidence:** type the register index as analysis, per lint_evidence_artifacts ([c356dec](https://github.com/event4u-app/agent-config/commit/c356dec3d6f4334bb7c4083c09141b4744582f52))
-* **test:** narrow the semver-major capture to satisfy strict null checks ([e2f8b80](https://github.com/event4u-app/agent-config/commit/e2f8b805060f4c7f69d674c6925c2304bc887f4c))
-* **roadmap:** state the council convergence inline instead of linking it ([d3f96a7](https://github.com/event4u-app/agent-config/commit/d3f96a7231b4ca91f0feea005231e711ca4ecb97))
-* **roadmap:** mark three verbatim German quotes for the language gate ([c27ec81](https://github.com/event4u-app/agent-config/commit/c27ec81a6eb6044c9d4b829f71636c3f233914cc))
-* **roadmap:** correct three claims in the placeholder-guard roadmap ([c1cbd1e](https://github.com/event4u-app/agent-config/commit/c1cbd1ef184b4b765e86e5efd8f2d53d4e5ca5cc))
-* **evidence:** declare the evidence type on both new analysis artifacts ([5e187b8](https://github.com/event4u-app/agent-config/commit/5e187b846b95fb44b76df1ee67c6c389023ea349))
-* **roadmap:** claim the later/ growth a draft still charges, and record why ([50fc67f](https://github.com/event4u-app/agent-config/commit/50fc67f8a4a271a4f84213c5cf951c4cb7664e83))
-* **roadmap:** mark three planned-deliverable paths ref-ignore ([3e6847d](https://github.com/event4u-app/agent-config/commit/3e6847d3d54547520c9e252da9bc2af7e3cfcef2))
-* **roadmap:** make the growth claim a single line so the gate reads the reason ([476438c](https://github.com/event4u-app/agent-config/commit/476438c2d732f50945c56613b5a70855dbd59ff5))
-
-### Performance
-
-* **pack:** exclude the three payload patterns a harness proved safe, and lower the cap ([a94312a](https://github.com/event4u-app/agent-config/commit/a94312ac0a4c58dbf58cdf57040f53339b5d908c))
-
-### Reverts
-
-* **ci:** restore the local-only baseline to 165 — the 164 was a local reading ([f904999](https://github.com/event4u-app/agent-config/commit/f904999b17af0c6942526c7ebdd3d72645044b26))
+* **gates:** close two blind spots lint_code_comments had on its first real corpus (#1807) ([6edf1ad](https://github.com/event4u-app/agent-config/commit/6edf1add75881f9db6a9ff293a956722c8026503))
+* **language-pin:** skip host-injected wrapper regions instead of ending the human lead on them (#1800) ([27f3233](https://github.com/event4u-app/agent-config/commit/27f323304be26c3514ad66f78852c6c207d31fb9))
+* **guarded-baseline:** resolve what the blockers actually permit, and record why the rest cannot close (#1786) ([9411964](https://github.com/event4u-app/agent-config/commit/9411964fb85c92777b8138494ab0042747ea3671))
+* **tests:** stop a test fixture from shifting the skill-catalogue count ([0c7fce0](https://github.com/event4u-app/agent-config/commit/0c7fce0d292c015e49c05f12421431bea89cac6c))
+* **roadmap:** repair five stale line anchors in the governed harness ([52e0287](https://github.com/event4u-app/agent-config/commit/52e0287af36dd0be566a426284629c4877a308e0))
+* **roadmap:** record three discharged conjuncts and the retention diagnosis ([869d76a](https://github.com/event4u-app/agent-config/commit/869d76a14a205bcc8a2359d7ff47eb6c24deddaa))
+* **roadmap:** repair four stale claims in the governed harness ([94f17a3](https://github.com/event4u-app/agent-config/commit/94f17a33b65e6981c9809ce639062011ee1ae929))
+* **roadmap:** repair two stale claims in the promotion bridge ([c96aa53](https://github.com/event4u-app/agent-config/commit/c96aa53de58050daeca6e9624e8288cff89562d3))
+* **harness:** widen the cascade's optional inputs for exactOptionalPropertyTypes ([ecf05c4](https://github.com/event4u-app/agent-config/commit/ecf05c4c6cf5ea10d31428a2d946a9b15451c985))
+* **harness:** repair two type errors the branch merge introduced ([32203ec](https://github.com/event4u-app/agent-config/commit/32203ec34a28effdee62f23fc035c160261d2850))
+* **test:** take the shared clones lock, and close AC-10b at completion ([01de2a3](https://github.com/event4u-app/agent-config/commit/01de2a3ddac14dc1027702e1575105a3d8ccf373))
+* **test:** scope the cascade end-to-end case so it stops breaking siblings ([f87eb79](https://github.com/event4u-app/agent-config/commit/f87eb7936d141650544c998e1bcecc35f83c8e51))
+* **evidence:** declare the type on the re-council savings analysis ([7280750](https://github.com/event4u-app/agent-config/commit/7280750fad20fd990de57c6aa4bf5ed5b238dcf8))
+* **test:** satisfy exactOptionalPropertyTypes and readonly-array typing ([04a5a0b](https://github.com/event4u-app/agent-config/commit/04a5a0b35d5aaab3f3ee6eabc798fcb541fdce03))
+* **test:** the 7.3 tripwire reddened on its own documentation ([25647d0](https://github.com/event4u-app/agent-config/commit/25647d0249c1d4a8eb2a5ba91e4bc964e7cb3000))
+* **evidence:** re-pin the trigger-corpus holdout hashes and guard them ([92549c4](https://github.com/event4u-app/agent-config/commit/92549c4a9983724fc47fbb5467de325ada98a28c))
 
 ### Documentation
 
-* **roadmap:** resolve redundancy-governance 3.2 as a split, not one answer ([d953a45](https://github.com/event4u-app/agent-config/commit/d953a45c9c0c772c0b6c4e8fce9c8386f35e11e8))
-* **evidence:** the Run E drain summary — five decisions, two declined ([8898b48](https://github.com/event4u-app/agent-config/commit/8898b480d0a2011b6a4ba228fcd6e55c3d348e18))
-* **roadmap:** resolve capability-native-execution's three council-owned blockers ([232450f](https://github.com/event4u-app/agent-config/commit/232450f3b3932853b5aac4a39a8f09411205e950))
-* **evidence:** measure the redundancy baseline, and correct four claims ([9c64a01](https://github.com/event4u-app/agent-config/commit/9c64a01d42eb74a7990165e2f3dd9726e69f9c12))
-* **routing:** pre-register the routing-assurance metric set and its three claims ([bbcb8e7](https://github.com/event4u-app/agent-config/commit/bbcb8e7321cc346dbf8ee5e90cded856b15d67ff))
-* **roadmap:** web-launch-readiness Phase 2 core -- 13 of 19, AC-1..AC-4 met ([eb52c33](https://github.com/event4u-app/agent-config/commit/eb52c33e414ca0b75d6d6d8f29587cb8556fc23b))
-* **roadmap:** ten-across-the-board 1.5 -- real payload defect, not an overlap artifact ([82a207f](https://github.com/event4u-app/agent-config/commit/82a207ff567f2d463bf81e00a73cbd21d60ba00d))
-* **roadmap:** the envelope DROP band never triggered -- its population says non-local ([f8cf861](https://github.com/event4u-app/agent-config/commit/f8cf861d30b108003c362b1521ee937b7e0aba28))
-* **roadmap:** web-launch-readiness -- NO skill slot, the domain ships as a command ([e283045](https://github.com/event4u-app/agent-config/commit/e2830455acd9f699ad8bad86be19ecb2a8d49c92))
-* **claims:** pre-register the web-launch benchmark, decoy as a hard gate ([cd48376](https://github.com/event4u-app/agent-config/commit/cd48376b109392d376e4f81b0efa0be2f2e18e5b))
-* **roadmap:** merge-surface-zero -- 1.1 done, and two blockers the phase order hid ([945fec4](https://github.com/event4u-app/agent-config/commit/945fec4f97a61951c59b7929181cde9cec60648e))
-* **roadmap:** close skill-estate-drawdown -- the input does not exist, the mechanism does ([57dd342](https://github.com/event4u-app/agent-config/commit/57dd342b7adcb084c6d464afd3118c6a9a59bc25))
-* **roadmap:** re-anchor merge-surface-zero on history, and correct Phase 1's targets ([dc7e111](https://github.com/event4u-app/agent-config/commit/dc7e111cec7560d8e3fe1e63c6edbd6916c65940))
-* **evidence:** 50% of merge-conflict resolutions are on generated paths ([2603229](https://github.com/event4u-app/agent-config/commit/26032296e401e6e4a494ff8f2509026b844efe82))
-* **roadmap:** close opencode-enforcement -- three criteria transferred, archived ([2cc7a0f](https://github.com/event4u-app/agent-config/commit/2cc7a0ffd81917b59fe802cb115857126c2f1a7c))
-* **roadmap:** skill-estate-drawdown Phase 3 closed -- 14 of 16, 6 of 7 ACs ([327dae4](https://github.com/event4u-app/agent-config/commit/327dae47bbb566c115fa37b75b4fba9f3298538c))
-* **skill:** the skill-growth answers go in the ledger, not the PR body ([91dd259](https://github.com/event4u-app/agent-config/commit/91dd259a1cb4c99b3ae62669660786fc5b2fa9ea))
-* **proof:** regenerate after the claim correction ([d140bec](https://github.com/event4u-app/agent-config/commit/d140beca77bc4fbe10a5decbc46e79b0233b6048))
-* **roadmap:** skill-estate-drawdown -- three blockers resolved, Phases 1, 2, 4.2 closed ([2a67719](https://github.com/event4u-app/agent-config/commit/2a67719d7c0d68230edf3bf41f1ef38fcac19263))
-* **evidence:** four historical readings of the skill estate, backfilled ([4f597fe](https://github.com/event4u-app/agent-config/commit/4f597fe911ebf081c61ed761d5a0155310a91769))
-* **roadmap:** close suggestion-block-capture with two criteria transferred ([53e1bc0](https://github.com/event4u-app/agent-config/commit/53e1bc0afe635199ba7ed94bfd791fc3429c1831))
-* **roadmap:** close command-surface-legibility Phase 2+3, archived ([f224d28](https://github.com/event4u-app/agent-config/commit/f224d285c66bbc0370790a8a615588f0b5e7d4da))
-* **roadmap:** a first outside-in probe against a real estate, and what it refuted ([a6974ef](https://github.com/event4u-app/agent-config/commit/a6974ef61a045cafc4a3a6bc7e54fb9ed5faf347))
-* **roadmap:** close standing-payload-truth, all four blockers resolved, archived ([6926279](https://github.com/event4u-app/agent-config/commit/6926279dd2831e3de3d3ee061d1b75f7b80d0ed7))
-* **roadmap:** the harvest bundle's one clean phase, and a routing correction ([f3c780f](https://github.com/event4u-app/agent-config/commit/f3c780f690c6dd60cb6cb519927986ab5347cd99))
-* **roadmap:** 86 lapsed contract deadlines, and the gate that checks the other way ([9e72a71](https://github.com/event4u-app/agent-config/commit/9e72a71fafe287cbe9f480c2776a2a88e8207978))
-* **roadmap:** the two defects that survived the LinkedIn ask ([5b50d55](https://github.com/event4u-app/agent-config/commit/5b50d55b10209d607a61718c9fde8d7b54a65651))
-* **roadmap:** one component-granularity roadmap from two atomic-design drafts ([a983799](https://github.com/event4u-app/agent-config/commit/a983799b0611784f233af98b15c2fed465638103))
-* **roadmap:** two roadmaps from the hard-feedback-1 drain, defect-first ([3825824](https://github.com/event4u-app/agent-config/commit/3825824dad5e000b61f29424097351694cf7655a))
-* **evidence:** the Run C drain summary, including what it did not reach ([225b775](https://github.com/event4u-app/agent-config/commit/225b77533d646fe5b02a10e825a290e886b5656f))
-* **roadmap:** close command-surface Phase 0, transfer Phases 1 and 4, add a step ledger ([9697c08](https://github.com/event4u-app/agent-config/commit/9697c083fd1fc8801e8ddbf3b2a4e244f3b2e282))
-* **roadmap:** close opencode Phase 0, transfer the runtime probe, replace AC-2 ([c4fc798](https://github.com/event4u-app/agent-config/commit/c4fc7983d112b1dca17e1407feed4f0eb3e4d498))
-* **opencode:** the plugin channel is real, the deny is narrow, the matrix was wrong ([5cf26ad](https://github.com/event4u-app/agent-config/commit/5cf26ad69f855ba0e4e9c8b2e5812159095ec555))
-* **roadmap:** transfer the soak window to a stub, and record AC-2 as OPEN ([330bcc0](https://github.com/event4u-app/agent-config/commit/330bcc078fcd1a5271a28ecd89facc4636f1094a))
-* **evidence:** probe the hook payload, pre-register the claim and the schema ([e298849](https://github.com/event4u-app/agent-config/commit/e29884966f09c9d950ce0ebb58c7996ed470e3db))
-* **evidence:** the per-subtree payload verdicts, each citing a harness run ([c6d69fe](https://github.com/event4u-app/agent-config/commit/c6d69fed2b99a2ff913da8234720aa16cdde26cd))
-* **roadmap:** close npm-payload-reduction and archive it ([770d57c](https://github.com/event4u-app/agent-config/commit/770d57c0b77b03e8afd35071e71eb1f11c30a8e6))
-* **roadmap:** close score-contract, and qualify every all-32 claim it rests on ([7a960b7](https://github.com/event4u-app/agent-config/commit/7a960b7c59642a4bc9d76bd3bc701d86ff8c1596))
-* **roadmap:** revert release-placeholder-guard to a stub by council verdict ([42015b2](https://github.com/event4u-app/agent-config/commit/42015b2ab08a17b031db0c861407ee922e3a52d0))
-* **evidence:** derive which release-marker surfaces are still repairable ([3ef1f1e](https://github.com/event4u-app/agent-config/commit/3ef1f1e462d0d869f1fa669a035ce80a4acacae5))
-* **roadmap:** close component-library-lifecycle Phase 5 and all eight AC ([30e17d9](https://github.com/event4u-app/agent-config/commit/30e17d9c3eaf01f0114b22c6e7ede85ca3d35b0d))
-* **evidence:** triage the feedback-14.11.0 bundle, land nothing from ten of it ([a718b92](https://github.com/event4u-app/agent-config/commit/a718b92071631464fd475a47b1c3fd3fc4f2f7dd))
-* **roadmap:** record the estate-ratchet asymmetry, measured against this run ([bf19315](https://github.com/event4u-app/agent-config/commit/bf193155917df46c112b3ee02d5c98ecd7ee6fe1))
-* **roadmap:** point the Source line at the consumed inbox file ([4531665](https://github.com/event4u-app/agent-config/commit/4531665f1f52b800cdc0a46cf06669c59d7a0ab7))
-* **roadmap:** record that the stub about phantom claims emitted one ([ee62d1d](https://github.com/event4u-app/agent-config/commit/ee62d1d8f4a4c2cfab894b36307bb6d0dcaf935f))
-* **roadmap:** record the folded-estate-claim defect as a stub ([ab9e9c0](https://github.com/event4u-app/agent-config/commit/ab9e9c0a2ceb666eaa1ce4a5334d09cf438adcd9))
-* **roadmap:** flip npm-payload-reduction to ready, correct the cap value ([fb06b65](https://github.com/event4u-app/agent-config/commit/fb06b65f144ab15228211fd82fa0749bc80c2ee3))
-* **roadmap:** close two executed roadmaps, carry four deferrals to stubs ([8e948b8](https://github.com/event4u-app/agent-config/commit/8e948b86120349af9511a3b9f277d1a58e705877))
-
-### Tests
+* **evidence:** record the council round on drain run 13's five open questions (#1792) ([b92b74e](https://github.com/event4u-app/agent-config/commit/b92b74efe7cb541df0371e15d7782b82ab3849cc))
+* **evidence:** commit the pending terminal-disposition council question ([e8c17f9](https://github.com/event4u-app/agent-config/commit/e8c17f9ebed1af047494c7f6ba31b23d1875f4a5))
+* correct the red-check record — the failure is intermittent, CI is green ([95a435c](https://github.com/event4u-app/agent-config/commit/95a435cfa4acc19e63a2c76844cc72e34cdef3ed))
+* **evidence:** record the CI-only red check in the run-11 summary ([df02075](https://github.com/event4u-app/agent-config/commit/df02075f63e9f6431012bccbb7ac7ca0eeba7507))
+* track the CI-only routing-verdict drift found by this branch ([d088d81](https://github.com/event4u-app/agent-config/commit/d088d81a11515683eb8e74cc503570eca9390915))
+* **evidence:** drain run 11 summary — three PRs, one council verdict, zero descopes ([41c8925](https://github.com/event4u-app/agent-config/commit/41c8925a6d204da29fcc8602ef33dbcd222bbe37))
+* **bench:** pre-register the leakage protocol and emit the Phase-2 schedule ([bde70ef](https://github.com/event4u-app/agent-config/commit/bde70efec38a240ab05e51802510894151f76a0c))
+* **evidence:** drain run 10 summary — PRs, council decisions, descopes ([18af540](https://github.com/event4u-app/agent-config/commit/18af5407551588abe5878c761f555523f03d2820))
+* **roadmap:** pin the 6.4 measurement commit SHA beside the prereg SHA ([e595917](https://github.com/event4u-app/agent-config/commit/e59591765f681ae5a1f22b1746cf426a3f1ec668))
+* **roadmap:** re-audit AC-8 after 5.6 — shape half closed, subject half unreachable here ([41f1d4c](https://github.com/event4u-app/agent-config/commit/41f1d4cfcab5b67266fe3497016e0dda956280bc))
+* **roadmap:** pin the 5.1 measurement commit SHA beside the prereg SHA ([4e9eb72](https://github.com/event4u-app/agent-config/commit/4e9eb7278fa648e7507f2eaa2c97e07a7609663d))
+* **evidence:** pre-register the routing-signal and delivery-set measurements ([fe87494](https://github.com/event4u-app/agent-config/commit/fe874945812138f1f28455f4a0540b41766b8012))
+* **council:** pre-register the early-stop promotion gate before either arm runs ([4f4ca01](https://github.com/event4u-app/agent-config/commit/4f4ca014a546dec9720684ce03a18ae62cb555a1))
 
-* **routing:** assert the seed IS the measurement, not a snapshot of it ([83a0b1f](https://github.com/event4u-app/agent-config/commit/83a0b1ff9b01cb27d2375f0b194561f00cfa23c7))
-* **admissions:** assert the ledger's invariant, not its row count ([6072a45](https://github.com/event4u-app/agent-config/commit/6072a45ac772909e2ade1dbe6399f9b26f048b6b))
-* **hooks:** a registry-wide signature contract, not a does-not-throw smoke ([eae5b6c](https://github.com/event4u-app/agent-config/commit/eae5b6c3c14116d8c5a66fca49a5dbfd8e85483e))
-* **fixtures:** pin shadcn and Storybook majors to a real scaffold ([635defc](https://github.com/event4u-app/agent-config/commit/635defc6b54f5ffd12189296e572fc83974901c7))
+### Refactoring
 
-### Build
+* **adr:** move the reopen-authority vocabulary into the shared reader ([cb81e2d](https://github.com/event4u-app/agent-config/commit/cb81e2dd1abf926c8e969d74b051e60479231fa9))
 
-* **install:** refresh the committed install bundle for the new settings key ([72725da](https://github.com/event4u-app/agent-config/commit/72725da060b66410bce3313e546d914747334130))
-
-### CI
+### Tests
 
-* **pack:** report the branch-vs-base payload delta on pull requests only ([a55a803](https://github.com/event4u-app/agent-config/commit/a55a803706ced0e37a033878e3fbce55929a3e3e))
+* **harness:** pin the proposer survival bar, 5.4 as an absence assertion ([4cb3c4c](https://github.com/event4u-app/agent-config/commit/4cb3c4c37eb6f5416bfc84f305949277c9c9ce16))
+* **council:** pin the probe-above-council precedence as a guarded baseline ([b635f4e](https://github.com/event4u-app/agent-config/commit/b635f4efca1fedb516fcd20690114627fccdb962))
+* **council:** pin the early-stop cost/quality separation as a guarded baseline ([0b4b922](https://github.com/event4u-app/agent-config/commit/0b4b92205bd80dfcca995873de8b6ad9499fe1b7))
 
 ### Chores
 
-* **roadmap:** close redundancy-governance — two were never open, three carried ([955ed2c](https://github.com/event4u-app/agent-config/commit/955ed2caf3a289e478db632b81ba6c9b8c3a4e71))
-* **index:** regenerate for the downstream-changes-mechanics guideline ([2fb27ea](https://github.com/event4u-app/agent-config/commit/2fb27ea6bcf8c5c0ecd3c587ded0a6c6ae50c97b))
-* **roadmap:** record the payload ceiling as the reason 5.1 moved ([705b8de](https://github.com/event4u-app/agent-config/commit/705b8de1ce825ee1e2298fd8112409589f733503))
-* **roadmap:** add Phases 4 and 5, five items deferred ([9a30ae3](https://github.com/event4u-app/agent-config/commit/9a30ae3b27c8b5ca8129965a9c3402312c3e1f2c))
-* **index:** regenerate for the redundancy-taxonomy guideline ([4aeabe4](https://github.com/event4u-app/agent-config/commit/4aeabe4cb011ccfa779b786a8112379916fd9bcc))
-* **roadmap:** close Phase 1-3 of redundancy-governance, one item deferred ([2822dc9](https://github.com/event4u-app/agent-config/commit/2822dc986c1fcebe6bb8d5f22f178a549cb4fe49))
-* **dist:** project the 14 new skill trigger corpora ([52eec8e](https://github.com/event4u-app/agent-config/commit/52eec8e9bd850e73ea2a07ea78770dfb5d4568a5))
-* **roadmap:** close routing-assurance at its own cut line, park the live half ([63ae003](https://github.com/event4u-app/agent-config/commit/63ae003b7ff4c701d0e3c651f463fda753bda2e5))
-* **ci:** register check_skill_admissions, and re-pin the secret-allow line ([570242a](https://github.com/event4u-app/agent-config/commit/570242aada90ecab5b0c54a7f57726e441540c47))
-* **roadmap:** archive completed road-to-score-contract ([1c43a07](https://github.com/event4u-app/agent-config/commit/1c43a0705c8a9ef48981938e5f27b1268e21f7d8))
-* **roadmap:** archive completed road-to-component-library-lifecycle ([103045a](https://github.com/event4u-app/agent-config/commit/103045aa7b1a1d825fd294ecb7064cfb211d52a7))
-* **deps:** bump actions/upload-artifact in the github-actions group ([daa7f21](https://github.com/event4u-app/agent-config/commit/daa7f21e7b8c7181b9ffdec05a396e1d869e2243))
-* **deps-dev:** bump happy-dom in the npm-development group ([7ea916d](https://github.com/event4u-app/agent-config/commit/7ea916de9cf787b65e498e18ea00d863c257e590))
+* **deps-dev:** bump @cloudflare/workers-types from 5.20260819.1 to 5.20260829.1 in /deploy/telemetry-worker in the telemetry-worker group (#1797) ([de6708b](https://github.com/event4u-app/agent-config/commit/de6708b3625aaca778d58db995183255270b0b00))
+* **deps:** bump the site group in /site with 4 updates (#1798) ([044d141](https://github.com/event4u-app/agent-config/commit/044d141404b6a717beffc1c58ea6ae4dd271753f))
 
 ### Other
 
-* **ready:** skill-estate drawdown -- 299 skills, no gate objects ([9f4cfc4](https://github.com/event4u-app/agent-config/commit/9f4cfc4570df2c5edf267fc5b05e0fc1a5c9a09d))
-* **draft:** land opencode enforcement, with its own premise as phase 0 ([03d2f19](https://github.com/event4u-app/agent-config/commit/03d2f199fed7da03fafc54db989b56ad5bc7c411))
-* **ready:** standing-payload truth, and withdraw an invalid strike I made ([f2625bd](https://github.com/event4u-app/agent-config/commit/f2625bdd8188de1fba6d53b6640133e260b94126))
-* **ready:** promote the release-placeholder guard after eight rounds ([2d210e2](https://github.com/event4u-app/agent-config/commit/2d210e2a9a71b24839cb2df553a702560b5192c7))
-* land routing assurance ready, park two, distil a third to a stub ([26e45c5](https://github.com/event4u-app/agent-config/commit/26e45c5e5f7b64d576f3fb228dcd2ffa23db09e6))
-* **draft:** land capability-native execution; dissolve its frontend twin into two stubs ([c28a4c3](https://github.com/event4u-app/agent-config/commit/c28a4c3547d58a5d1ca072e929327d00cd4a1d82))
-* **draft:** land the council-topology and command-surface harvests ([377bea3](https://github.com/event4u-app/agent-config/commit/377bea3bc3d49e837ca7f7837d4bc6946c7dbe60))
-* **draft:** land four from the road-to-10 cluster, drop four rivals ([dd1fa71](https://github.com/event4u-app/agent-config/commit/dd1fa71db8de3a3165f93b07bcc66d22d78a8497))
-* **draft:** carry merge-surface-zero, and record that its premise dissolved ([0c3c028](https://github.com/event4u-app/agent-config/commit/0c3c028bd61be469448fa98a69fbc7780865b042))
-* **ready:** land suggestion-block capture from the 2026-08-24 inbox run ([182cbf8](https://github.com/event4u-app/agent-config/commit/182cbf8e3ebadfa2d3f6707f80ee0d9b01f9c168))
-
-Tests: 17665 (+441 since 14.11.0)
+* complete the deferral-carry guard, and give a carrier a status that costs something (#1810) ([6641d47](https://github.com/event4u-app/agent-config/commit/6641d471993726174dde2f9d14734be8098a01fd))
+* **governed-evidence:** cure F-A and F-C, and record 2A as owner-reserved (#1809) ([4ea82c2](https://github.com/event4u-app/agent-config/commit/4ea82c2f3239d4b36240108cbaf68ac2fecc5e1f))
+* complete comment-enforcement-completion (#1808) ([183f9af](https://github.com/event4u-app/agent-config/commit/183f9afafa515f3619e9057b7cd9b6771b212ebe))
+* complete harness-promotion-bridge (#1802) ([56c3338](https://github.com/event4u-app/agent-config/commit/56c3338557b634670f9098c913e6b907bac5809c))
+* complete publication-integrity-hard-fail (#1801) ([f7fc5a1](https://github.com/event4u-app/agent-config/commit/f7fc5a135e7b8e38a6ce35f3be956ec449364bb9))
+* complete blocked-quickwin-visibility (#1803) ([ef30b1f](https://github.com/event4u-app/agent-config/commit/ef30b1f3e80a03032e8ba29d272cdd97d8a6cdc8))
+* **governed-evidence:** record the drain-15 1B disposition (#1804) ([7a3fe86](https://github.com/event4u-app/agent-config/commit/7a3fe8646f436449df98adbcb9e88c81763561af))
+* **council-topology:** record the carrier's terminal disposition (#1805) ([31b2db2](https://github.com/event4u-app/agent-config/commit/31b2db292c8c3ce158220692d860695af7af85f9))
+* **publication-integrity:** make the discarded detection refuse, and escalate the Phase 2 authority split (#1796) ([23391ae](https://github.com/event4u-app/agent-config/commit/23391aec24d4f7d47d71d1c4aeb86be46e81023c))
+* **blocked-quickwin:** give stubs:due a fourth bucket, and delete the dispatcher definition that hid it (#1799) ([94000b3](https://github.com/event4u-app/agent-config/commit/94000b3bb5026fd78e788939d5cfd0b4e7ed00a6))
+* **governed-evidence:** refuse the metered capture on validity, and repair six defects found proving it (#1795) ([1f6961d](https://github.com/event4u-app/agent-config/commit/1f6961da96128f7b04c9c572226c120fd59a6a2b))
+* record the terminal owner-reserved disposition, and measure the unguarded carrier (#1794) ([597bf38](https://github.com/event4u-app/agent-config/commit/597bf3816d3c6212bce349b443b9b569b1967ae6))
+* fix the release-head placeholder defect, and surface the quick-win the estate ratchet was holding (#1793) ([03d61a1](https://github.com/event4u-app/agent-config/commit/03d61a1161109d6704d8c9f9e528b2fe75f45511))
+* **harness-bridge:** make a merge-authority refusal recordable, and record drain-13's dispositions (#1789) ([b50b272](https://github.com/event4u-app/agent-config/commit/b50b272817513325d30a2500039a379e9cd5a336))
+* **governed-evidence:** close Phase 1, narrow the metered park, build Phase 2's arm and record its execution refusal (#1791) ([1e4b97b](https://github.com/event4u-app/agent-config/commit/1e4b97b286ddc4ebe6853ff588ed90efedea8661))
+* **topology:** verify every deferral trigger, repair what the receiver mis-states, and record why it is not drained (#1790) ([35e1a3d](https://github.com/event4u-app/agent-config/commit/35e1a3d089f744d9dc1a2b477c80501acdc62626))
+* complete road-to-governed-harness-evolution (#1785) ([0a567e9](https://github.com/event4u-app/agent-config/commit/0a567e949e7936c438d8d06db2e3b273d3f89ca7))
+* close road-to-inbox-harvest-2026-08-e-council-topology-evidence (#1787) ([468eeef](https://github.com/event4u-app/agent-config/commit/468eeefc7f45af21414bf2e42de769249a84a31d))
+* transfer the four governed-harness obligations to an owned receiver, and archive the source (#1788) ([50457b8](https://github.com/event4u-app/agent-config/commit/50457b898e65b2c92e4a0c6df066ff80da8ba9da))
+* complete road-to-harness-promotion-bridge (#1784) ([7259c40](https://github.com/event4u-app/agent-config/commit/7259c407f46036bf88bcb2edbf8dbe9d76897cd4))
+* advance road-to-inbox-harvest-2026-08-e-council-topology-evidence (#1782) ([8a9b97a](https://github.com/event4u-app/agent-config/commit/8a9b97af5485d8f96e268503ff1528051e0ef90b))
+* drop two imports the merge left unused ([dae43b1](https://github.com/event4u-app/agent-config/commit/dae43b1e8785ee8ceebee6f60bc2dac0dc361b70))
+* record that the merge-authority council route was refused, twice ([ba41097](https://github.com/event4u-app/agent-config/commit/ba41097eb4b15e584fcf3a0388eb771badcda638))
+* harness-promotion-bridge 0/9 -> 7/9 — Phase 7 closed as mechanism, AC-9 re-audited and still open ([0040258](https://github.com/event4u-app/agent-config/commit/004025839a1528511544e5fb1ef219eb385d9ac4))
+* harness-promotion-bridge — the carried condition is discharged by route 1 ([4a1e2f9](https://github.com/event4u-app/agent-config/commit/4a1e2f9163cd4e7253994f80a407dc2b9a6642a0))
+* archive obligation-delivery-verification, all items disposed ([6d4dea9](https://github.com/event4u-app/agent-config/commit/6d4dea906e171fa96a9bb7e73ff2ddb3076b01ec))
+* obligation-delivery closes BLOCKED-BY-ARCHITECTURE, criterion transferred not dropped ([991d4aa](https://github.com/event4u-app/agent-config/commit/991d4aa60eb5492a29bed58e5591adce82c22fd0))
+
+Tests: 20561 (+674 since 14.13.0)
 
 # Era: pre-4.0.0 — archived
 

package/CONTRIBUTING.md

@@ -102,6 +102,44 @@ task lint-skills      # ./scripts-run src/scripts/skill_linter --all
 - Open the PR against `main` with a short description of the change,
   motivation, and any notes for reviewers.
 
+### Branch names, PR text and commit messages are a gated surface
+
+A branch name, a PR title, a PR body and a commit message are **public on push
+and effectively permanent once merged** — this repository does not rewrite trunk
+history, by a recorded decision, so a source name that lands there stays
+recoverable. None of them is a tracked file, so the tree-scanning gate
+(`check_no_external_sources`) cannot see any of them.
+
+Two checks cover that surface, and they run at different moments on purpose:
+
+- **`.github/workflows/pr-metadata-sources.yml`** — on `pull_request`
+  (including `edited`, because a title changed after opening is a new
+  disclosure). This is the backstop; by the time it runs the branch and commits
+  are already on the remote.
+- **`src/scripts/hooks/prepush_metadata_sources.sh`** — a **pre-push** hook, and
+  the only one of the two that runs while the metadata is still private. Opt-in,
+  because this repository does not write to your `.git/hooks`:
+
+  ```bash
+  ln -s ../../src/scripts/hooks/prepush_metadata_sources.sh .git/hooks/pre-push
+  ```
+
+  If you already have a pre-push hook, call it from there instead. It checks the
+  branch name and the commit messages the push would add; the PR title and body
+  do not exist locally, so those two stay CI-only — a local pass is not a full
+  pass. Bypass with `AGENT_CONFIG_SKIP_METADATA_GATE=1`.
+
+Run it by hand at any time:
+
+```bash
+./scripts-run src/scripts/sweep_source_surfaces --gate-metadata \
+  --branch "$(git rev-parse --abbrev-ref HEAD)" \
+  --commit-range origin/main..HEAD
+```
+
+Use an opaque round identifier (`inbox-2026-08-h`, `round-a91f3c`, `S17`) where
+a name is needed. See [`source-confidentiality`](src/rules/source-confidentiality.md).
+
 ## Reviewability and the self-imposed gate
 
 This is a governance standard, so the maintainer holds themselves to the same