@event4u/agent-config 14.12.0 → 14.14.0

package/src/scripts/external_sources_denylist.json

@@ -67,8 +67,9 @@
     "\\bcodeguard\\b",
     "\\bcosai\\b"
   ],
+  "_deny_digests_README": "DORMANT (road-to-source-silence Phase 1.1). HMAC-SHA256 digests of the deny set, derived from the gitignored private master by src/scripts/build_source_digests.ts. It is EMPTY on purpose: the plaintext `deny` array above stays in force and is not deleted. Provisioning the CI secret SOURCE_DENY_KEY, generating production digests, removing the plaintext array and switching CI to strict mode are ONE ATOMIC MAINTAINER CHANGE (AI council 2026-08-28, blocker `where-the-key-lives`, 2/2) — splitting them leaves the gate either failing every run for want of a key or silently degraded to warn mode, which is the failure this whole programme exists to remove. Recipe: docs/maintainers/source-deny-digests.md",
+  "deny_digests": [],
   "skip_paths": [
-    "src/scripts/check_no_external_sources.py",
     "src/scripts/check_no_external_sources.ts",
     "src/scripts/external_sources_denylist.json",
     "src/skills/design-intelligence/*",
@@ -76,8 +77,6 @@
     "src/skills/design-tokens/*",
     "src/skills/react-shadcn-ui/*",
     "src/skills/tailwind-engineer/*",
-    "src/scripts/cost/*",
-    "src/scripts/validate_safe_paths.py",
     "dist/agent-src/skills/design-intelligence/*",
     "dist/agent-src/skills/corpus-grounding/*",
     "dist/agent-src/skills/design-tokens/*",
@@ -88,31 +87,19 @@
     "docs/mcp.md",
     "docs/mcp-registries.md",
     "docs/DISTRIBUTION_CHECKLIST.md",
-    "src/templates/marketing-copy.yml",
     "internal/workers/mcp/content.json",
-    "internal/workers/mcp/content.json.gz",
-    "internal/workers/mcp/manifest.json",
-    "src/rules/source-confidentiality.md",
-    "dist/agent-src/rules/source-confidentiality.md",
-    "agents/roadmaps/archive/road-to-final-state-and-market-readiness.md",
-    "agents/roadmaps/archive/road-to-image-brand-typography.md",
-    "agents/roadmaps/archive/road-to-subagent-value-realization.md",
-    "agents/roadmap-assets/road-to-image-brand-typography.assets.md",
     "CREDITS.md",
-    "agents/roadmaps/archive/road-to-ecosystem-harvest-index.md",
     "provenance/borrows.jsonl",
-    "docs/THIRD-PARTY-NOTICES.md",
-    "agents/evidence/reviews/*.review-input/diff.patch"
+    "docs/THIRD-PARTY-NOTICES.md"
   ],
   "skip_reason": {
     "vendored_cluster": "design-intelligence/corpus-grounding/design-tokens/react-shadcn-ui/tailwind-engineer + cost/*.mjs ship vendored Apache/MIT code; their upstream attribution is license-required and must NOT be stripped (ADR-061). CREDITS.md is the repo-level attribution file FOR that same cluster — it names the upstreams because the licenses require it, which is the one case source-confidentiality explicitly exempts. It was missing here, so the gate flagged the very attribution the rule mandates.",
     "recommendation_docs": "mcp.md, mcp-registries.md, DISTRIBUTION_CHECKLIST.md, ADR-086, marketing-copy.yml reference registries (Smithery/Glama) as recommendations/distribution targets — allowed.",
     "generated_bundles": "content.json* bundle the vendored-cluster skill bodies above.",
     "self": "the linter + its denylist + the source-confidentiality rule necessarily contain the deny tokens as data.",
-    "validate_safe_paths": "telegraph-derived (MIT) ported code; upstream attribution is license-required.",
-    "archived_roadmaps_newly_tracked": "Archived roadmaps (and their assets) that predate the source-confidentiality sweep became tracked via the 2026-07 agents-dir gitignore hygiene change. They are frozen historical records; the claudekit mentions are ADR-061 license-attribution work and the remaining names are historical planning references. New roadmaps stay subject to the gate. road-to-ecosystem-harvest-index.md is the sharpest case: the flagged line is its own acceptance criterion, 'No harvest-family artifact names a real external source' — it quotes the names in order to assert their absence, so the gate fires on the sentence that records the cleanup. road-to-opt-retrieval-and-memory.md was REMOVED from this list on 2026-07-28 (road-to-native-code-intelligence Phase 6): its two clear-text mentions named a gitignored borrow-catalogue inbox file, which carries no historical value that a neutral descriptor loses — so the mentions were rewritten and the exception retired rather than kept. Retiring an exception is preferred over holding one whenever the named token is not license-required attribution and not load-bearing for the record.",
     "provenance_ledger": "provenance/borrows.jsonl and the docs/THIRD-PARTY-NOTICES.md it generates are the license-attribution surfaces for CODE borrows, and code-provenance REQUIRES the upstream name in them: the ledger's `source_url` is a mandatory field (provenance/README.md), and lint_provenance fails when the notices file drifts from it. That is the same license-required-attribution case source-confidentiality already exempts for the vendored cluster and CREDITS.md — the rule forbids derivation-attribution, not the notice a license obliges. The collision only surfaced on 2026-08-13 because the ledger had been empty until its first record; before that there was no name to flag. Scope is deliberately these two paths and not `provenance/*`: the harvest ledger next door governs KNOWLEDGE claims, where anonymisation is the rule and no license compels a name.",
-    "r2_review_diff_capture": "The R2 completion-review dispatcher writes a verbatim `diff.patch` of the branch under review into a tracked input package. It is a MECHANICAL CAPTURE, not authored text: any source name inside it was already written somewhere else in the same branch, where this gate does see it. A branch that touches the vendored cluster's ATTRIBUTION.md — carved out here precisely because its license requires the name — therefore reproduces that name in the capture and fails the gate for content the gate already allowed at its source. Scope is the capture ONLY: `findings.md` and `prompt.md` are authored prose and stay under the gate, so a reviewer who names a harvest source in their findings is still caught."
+    "_dead_entries_removed_2026_08_28": "road-to-source-silence Phase 2.3, first drawdown. Three skip_paths named files that no longer exist and were therefore exempting nothing: src/scripts/check_no_external_sources.py and src/scripts/validate_safe_paths.py (both retired in the ADR-200 Python teardown) and internal/workers/mcp/content.json.gz (a .gz, which the extension skip-list already covers). The roadmap's measurement named ONE dead entry; re-checked at execution there were three. The `validate_safe_paths` reason key went with its path. Removing a dead exemption is pure shrink -- it cannot loosen the gate, and check_suppression_hygiene forbids growth in the other direction.",
+    "_entries_removed_2026_08_29": "road-to-source-silence Phases 2.1/2.3/3.4 drew skip_paths from 32 to 22. TEN entries went, and the arithmetic is stated so it can be checked: three DEAD (suppressed zero hits, measured per entry by removal and re-scan), five archived roadmaps plus ONE roadmap-asset file REDACTED in place under ADR-250 (dated markers, mechanical word-diff audit, 0 unexplained changes) = six, one comment rephrased generically, and the review-snapshot diff.patch carve-out replaced by earned per-finding deduplication in _lib/source_snapshot_dedup.ts. 3 + 6 + 1 + 1 = 10, and 32 - 10 = 22. An earlier version of this note said \"Eleven entries went\" by counting the roadmap-asset file separately from the five archived roadmaps AND in the six; the published ledger was right and this sentence was wrong. Full 32-entry ledger with per-entry suppressed-hit counts and dispositions: agents/evidence/reports/source-skip-paths-ledger.md."
   },
   "_excluded_tokens": {
     "agent-os": "collides with our own coined 'Agent-OS primitive' term (universal-skills) — too FP-prone to auto-deny; scrub external 'agent-os' mentions by review.",

package/src/scripts/extract_audit_patterns.ts

@@ -22,6 +22,8 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 
+import { isPhaseOutcome, PHASE_OUTCOMES } from './_lib/outcome_vocabularies.js';
+
 const _HERE = fileURLToPath(import.meta.url);
 // src/scripts/extract_audit_patterns.py → parent.parent.parent == repo root.
 export const ROOT = path.resolve(path.dirname(_HERE), '..', '..');
@@ -164,11 +166,22 @@ export function mine(auditDir: string, month: string | null, minCount: number):
     const records = _resolveSupersedes([..._iterLines(auditDir, month)]);
     // Preserve insertion order of first-seen keys (Python dict ordering).
     const groups = new Map<string, Pattern>();
+    // `outcome` used to be read as a bare `string`, so a typo silently became
+    // its own pattern and nothing said so (`road-to-experience-loop-broadening`
+    // 1.3; AI council 2026-08-29 named this the consumer-side half). Grouping
+    // is UNCHANGED — this file mirrors a retired Python CLI byte-for-byte and
+    // dropping a record would change pinned stdout. What changes is that an
+    // off-vocabulary value is now observable instead of silent.
+    const unknownOutcomes = new Set<string>();
     for (const rec of records) {
         const t = rec.type;
         if (!(t === undefined || t === null || t === 'phase')) {
             continue;
         }
+        const rawOutcome = rec.outcome;
+        if (rawOutcome !== undefined && rawOutcome !== null && !isPhaseOutcome(rawOutcome)) {
+            unknownOutcomes.add(String(rawOutcome));
+        }
         const key = _patternKey(rec);
         let pat = groups.get(key);
         if (pat === undefined) {
@@ -194,6 +207,14 @@ export function mine(auditDir: string, month: string | null, minCount: number):
             pat.last_seen = ts;
         }
     }
+    if (unknownOutcomes.size > 0) {
+        const seen = [...unknownOutcomes].sort().join(', ');
+        process.stderr.write(
+            `extract_audit_patterns: ${unknownOutcomes.size} off-vocabulary outcome value(s) ` +
+                `grouped as-is: ${seen}. Expected one of: ${PHASE_OUTCOMES.join(' | ')} ` +
+                `(docs/contracts/audit-log-v1.md, src/scripts/_lib/outcome_vocabularies.ts).\n`,
+        );
+    }
     const out: Rec[] = [];
     for (const p of groups.values()) {
         if (p.count >= minCount) {

package/src/scripts/fold_intake.ts

@@ -16,6 +16,16 @@
  *   - **Idempotent** — an existing `fold-<id>.md` is skipped, so re-runs are
  *     no-ops and interrupted runs resume cleanly.
  *
+ * loss_class: recoverable-lossy
+ * loss_recovery: the fold page's per-child `<file>:<first-line>-<last-line>` link-backs
+ *
+ * Named, not changed (`road-to-runtime-context-floors` step 3.1). The fold is
+ * smaller than its children and the children are still there, byte-identical,
+ * addressable by the link-back range the fold page carries — which is precisely
+ * the guarantee `recoverable-lossy` makes and `ephemeral-lossy` does not. The
+ * locator is the load-bearing half: without it this class would be
+ * indistinguishable from the ephemeral one by anything except intention.
+ *
  * MANUAL TRIGGER ONLY (council decision): this script is deliberately NOT
  * wired into hooks or CI. The Phase-0 intake tripwire
  * (`lint_knowledge_scale.ts`, intake > 2000 events) names this script as its
@@ -36,6 +46,7 @@ import * as fs from 'node:fs';
 import * as path from 'node:path';
 import process from 'node:process';
 import { fileURLToPath } from 'node:url';
+import { generatedByQuote } from './_lib/generated_by.js';
 
 const PROG = 'fold_intake.ts';
 
@@ -166,7 +177,7 @@ export function renderFold(plan: FoldPlan, batchSize: number): string {
         '> Idempotent extractive rollup of a completed intake batch',
         `> (batch ${plan.index}, size ${batchSize}). Children are never mutated —`,
         '> this page is an additive archive with link-backs, not a rewrite.',
-        '> Generated by `src/scripts/fold_intake.ts` (deterministic, no LLM).',
+        generatedByQuote('fold_intake', '(deterministic, no LLM.)'),
         '',
         `Fold ID: ${plan.id}`,
         `Batch index: ${plan.index}`,

package/src/scripts/gen_discovery_baseline.ts

@@ -192,7 +192,7 @@ export function main(): number {
     const out: string[] = [];
     out.push('# Discovery Baseline — Inventory (Phase 0.1)\n');
     out.push(
-        '> Generated by `scripts/gen_discovery_baseline.py` on ' + `${_utcStamp()}.\n`,
+        '> Generated by `gen_discovery_baseline`. Do not edit. Stamped ' + `${_utcStamp()}.\n`,
     );
     out.push(
         '> Frozen reference for the Phase 2 scanner — the `no domain` tally below must match the\n' +

package/src/scripts/generate_capabilities_index.ts

@@ -2,7 +2,7 @@
 /**
  * Generate `CAPABILITIES.yaml` — the package's capability-coverage index.
  *
- * Ported from the retired Python `src/scripts/generate_capabilities_index.py` (ADR-200).
+ * Ported from the retired Python `generate_capabilities_index` (ADR-200).
  * The CLI contract is pinned — the `--check` flag, exit codes
  * (0 / 1 / 2), stdout/stderr split, and the byte-identical generated
  * `CAPABILITIES.yaml` (header comment block, `meta:` block, `capability_areas:`
@@ -44,11 +44,18 @@ import { parse as parseYaml } from 'yaml';
 
 import { iter_commands } from './_lib/agent_src.js';
 import { parse_frontmatter } from './validate_frontmatter.js';
+import { resolveRepoRoot } from './_lib/repo_root.js';
 
 const _HERE = fileURLToPath(import.meta.url);
 
-// src/scripts/generate_capabilities_index.ts → parents[2] is repo root.
-const ROOT = path.resolve(path.dirname(_HERE), '..', '..');
+// generate_capabilities_index → parents[2] is repo root.
+// Root resolution goes through the sentinel resolver rather than a bare `..`
+// walk: `path.resolve(dirname, '..', '..')` is correct until this file moves,
+// and then it addresses a parent directory that also exists — the generator
+// writes nothing, reports success, and nothing fails. `resolveRepoRoot` REFUSES
+// when no directory on the walk carries this package's `package.json`
+// (road-to-skill-ecosystem-runtime-enforcement Phase 2 Step 6).
+const ROOT = resolveRepoRoot(path.dirname(_HERE));
 const OUT = path.join(ROOT, 'CAPABILITIES.yaml');
 const PACKS_YML = path.join(ROOT, 'src', 'config', 'discovery', 'packs.yml');
 const SKILLS_DIR = path.join(ROOT, 'src', 'skills');
@@ -358,7 +365,7 @@ export function build(): string {
     const lines: string[] = [];
     lines.push('# CAPABILITIES.yaml — what agent-config already covers');
     lines.push('#');
-    lines.push('# GENERATED by src/scripts/generate_capabilities_index.ts — do NOT hand-edit.');
+    lines.push('# GENERATED by generate_capabilities_index — do NOT hand-edit.');
     lines.push('# Drift-checked in CI (`--check`). Regenerate after adding/removing a');
     lines.push('# skill, command, or capability pack.');
     lines.push('#');
@@ -367,7 +374,7 @@ export function build(): string {
     lines.push('# areas with zero backing skills/commands.');
     lines.push('');
     lines.push('meta:');
-    lines.push('  generated_by: src/scripts/generate_capabilities_index.py');
+    lines.push('  generated_by: generate_capabilities_index');
     lines.push(
         '  purpose: ' + _scalar(
             'Machine-readable coverage index so external reviews stop ' +

package/src/scripts/generate_capability_matrix.ts

@@ -2,7 +2,7 @@
 /**
  * Generate the cross-host capability matrix (road-to-competitive-borrow P1.3).
  *
- * Ported from the retired Python `src/scripts/generate_capability_matrix.py` (ADR-200).
+ * Ported from the retired Python `src/generate_capability_matrix` (ADR-200).
  * The CLI contract is pinned — the `--check` / `--quiet` flags,
  * exit codes (0 / 1 / 2), stdout/stderr split, the byte-identical
  * `docs/capability-matrix.md` (heading prose, the host-header table, the glyph
@@ -222,7 +222,7 @@ export function render_md(matrix: Record<string, Record<string, string>>): strin
     const lines: string[] = [
         '# Capability matrix — what works on which host',
         '',
-        '> **Generated** by `scripts/generate_capability_matrix.py` — do NOT',
+        '> **Generated** by `generate_capability_matrix` — do NOT',
         '> hand-edit. Derived from the `generate_tools()` projection logic in',
         '> `condense.py` (each cell traces to a `generate_*` dispatcher call).',
         '> Drift-checked in CI (`--check`).',
@@ -318,7 +318,7 @@ function _jsonStringAscii(s: string): string {
 export function render_json(matrix: Record<string, Record<string, string>>): string {
     const payload: Record<string, unknown> = {
         schema: 'capability-matrix/1',
-        generated_by: 'scripts/generate_capability_matrix.py',
+        generated_by: 'generate_capability_matrix',
         hosts: HOSTS,
         artifacts: ARTIFACTS,
         matrix,

package/src/scripts/generate_command_flows.ts

@@ -2,7 +2,7 @@
 /**
  * Generate `docs/command-flows.md` — the Flows primary view (road-to-6.1.0 Step 9).
  *
- * Ported from the retired Python `src/scripts/generate_command_flows.py` (ADR-200 —
+ * Ported from the retired Python `src/generate_command_flows` (ADR-200 —
  * Python→TS migration, Phase 8 / Wave 8a). The CLI contract is mirrored
  * EXACTLY: same flag (`--check`), same exit codes, same stdout/stderr
  * split, same byte-identical generated `docs/command-flows.md`. WRITER —
@@ -111,7 +111,7 @@ export function render(): string {
     const idx = _command_index();
 
     const out: string[] = [];
-    out.push('<!-- GENERATED by scripts/generate_command_flows.py — do not edit by hand. -->');
+    out.push('<!-- GENERATED by generate_command_flows — do not edit by hand. -->');
     out.push(
         '<!-- Source: src/flows/surface-map.yaml + src/flows/<flow>.yaml. Re-run: task generate-command-flows. -->',
     );

package/src/scripts/generate_cookbook.ts

@@ -2,7 +2,7 @@
 /**
  * Generate the named cookbook (road-to-competitive-borrow P1.4).
  *
- * Ported from the retired Python `src/scripts/generate_cookbook.py` (ADR-200). Mirrors the
+ * Ported from the retired Python `src/generate_cookbook` (ADR-200). Mirrors the
  * Python CLI contract EXACTLY — the `--check` / `--quiet` flags, exit codes
  * (0 / 1 / 2), stdout/stderr split, and the byte-identical generated
  * `docs/cookbook.md` (heading prose, the named-recipe sections, the four
@@ -152,7 +152,7 @@ export function render(): string {
     const lines: string[] = [
         '# Cookbook — things you can do in a minute',
         '',
-        '> **Generated** by `scripts/generate_cookbook.py` from ' +
+        '> **Generated** by `generate_cookbook` from ' +
             '`src/flows/cookbook.yaml` + `src/flows/<flow>.yaml` — do NOT hand-edit.',
         '> Every command and skill below is validated to exist at generation ' +
             'time; a recipe naming a missing command fails the build.',

package/src/scripts/generate_index.ts

@@ -26,11 +26,18 @@ import {
 } from './_lib/agent_src.js';
 import { computeStatus as domainSoundnessStatus } from './domain_soundness_status.js';
 import { skip_compile_disabled_rule } from './condense.js';
+import { resolveRepoRoot } from './_lib/repo_root.js';
 
 const _HERE = fileURLToPath(import.meta.url);
 
 // src/scripts/generate_index.ts → parents[2] of the .py file is the repo root.
-export const ROOT = path.resolve(path.dirname(_HERE), '..', '..');
+// Root resolution goes through the sentinel resolver rather than a bare `..`
+// walk: `path.resolve(dirname, '..', '..')` is correct until this file moves,
+// and then it addresses a parent directory that also exists — the generator
+// writes nothing, reports success, and nothing fails. `resolveRepoRoot` REFUSES
+// when no directory on the walk carries this package's `package.json`
+// (road-to-skill-ecosystem-runtime-enforcement Phase 2 Step 6).
+export const ROOT = resolveRepoRoot(path.dirname(_HERE));
 
 // Legacy single-root anchor — kept as fallback for pure-condensed consumer
 // projections. Multi-root discovery uses artefact_roots() per ADR-017.

package/src/scripts/generate_knowledge_index.ts

@@ -24,6 +24,7 @@ import * as path from 'node:path';
 import process from 'node:process';
 import { fileURLToPath } from 'node:url';
 import YAML from 'yaml';
+import { generatedByItalic } from './_lib/generated_by.js';
 
 const _HERE = fileURLToPath(import.meta.url);
 const PROG = 'generate_knowledge_index.ts';
@@ -126,7 +127,7 @@ function renderIndex(knowledgeRoot: string): string {
     lines.push('# Knowledge Index');
     lines.push('');
     lines.push(
-        '_Auto-generated by `src/scripts/generate_knowledge_index.ts` — do not edit by hand. Regenerate with `task generate-knowledge-index`._',
+        generatedByItalic('task generate-knowledge-index'),
     );
     lines.push('');
     lines.push(

package/src/scripts/generate_ownership_matrix.ts

@@ -31,6 +31,7 @@ import { fileURLToPath, pathToFileURL } from 'node:url';
 import { parse as parseYaml } from 'yaml';
 
 import { artefact_roots, strip_source_prefix } from './_lib/agent_src.js';
+import { generatedByQuote } from './_lib/generated_by.js';
 
 const _HERE = path.dirname(fileURLToPath(import.meta.url));
 export const ROOT = path.resolve(_HERE, '..', '..');
@@ -425,7 +426,7 @@ function _to_markdown(payload: Json): string {
     const lines: string[] = [
         '# File-ownership matrix (regenerated)',
         '',
-        '> **Do not edit.** Regenerated by `scripts/generate_ownership_matrix.py`.',
+        generatedByQuote('generate_ownership_matrix'),
         '> Schema: [`docs/contracts/file-ownership-matrix.md`](../../../docs/contracts/file-ownership-matrix.md).',
         '',
         `- Schema version: \`${payload['version']}\``,

package/src/scripts/generate_pack_manifests.ts

@@ -31,17 +31,25 @@ import { fileURLToPath, pathToFileURL } from 'node:url';
 import { parse as parseYaml } from 'yaml';
 
 import { SRC_AGENT, iter_all_sources, resolve_logical } from './_lib/agent_src.js';
+import { resolveRepoRoot } from './_lib/repo_root.js';
+import { generatedByComment } from './_lib/generated_by.js';
 
 const _HERE = fileURLToPath(import.meta.url);
 // src/scripts/generate_pack_manifests.ts → parents[2] is the repo root (mirrors
 // `Path(__file__).resolve().parents[2]` in the .py).
-const ROOT = path.resolve(path.dirname(_HERE), '..', '..');
+// Root resolution goes through the sentinel resolver rather than a bare `..`
+// walk: `path.resolve(dirname, '..', '..')` is correct until this file moves,
+// and then it addresses a parent directory that also exists — the generator
+// writes nothing, reports success, and nothing fails. `resolveRepoRoot` REFUSES
+// when no directory on the walk carries this package's `package.json`
+// (road-to-skill-ecosystem-runtime-enforcement Phase 2 Step 6).
+const ROOT = resolveRepoRoot(path.dirname(_HERE));
 const PACKAGES = path.join(ROOT, 'packages');
 const SRC_DOMAINS = path.join(ROOT, 'src', 'domains');
 const SRC_PACKS = path.join(ROOT, 'src', 'packs');
 const PACKS_VOCAB = path.join(ROOT, 'src', 'config', 'discovery', 'packs.yml');
 const GENERATED_HEADER =
-    '# Generated by scripts/generate_pack_manifests.ts — DO NOT EDIT BY HAND\n';
+    `${generatedByComment('generate_pack_manifests')}\n`;
 
 type Json = unknown;
 type Dict = Record<string, unknown>;

package/src/scripts/generate_role_experiences_catalog.ts

@@ -2,7 +2,7 @@
 /**
  * Generate the role-experience catalog (road-to-competitive-borrow P1.0).
  *
- * Ported from the retired Python `src/scripts/generate_role_experiences_catalog.py`
+ * Ported from the retired Python `src/generate_role_experiences_catalog`
  * (ADR-200). The CLI contract is pinned — the `--check` /
  * `--quiet` flags, exit codes (0 / 1 / 2), stdout/stderr split, and the
  * byte-identical generated `docs/role-experiences.md` (heading prose, the
@@ -159,7 +159,7 @@ export function render(): string {
     const lines: string[] = [
         '# Role experiences — taglines at a glance',
         '',
-        '> **Generated** by `scripts/generate_role_experiences_catalog.py` from',
+        '> **Generated** by `generate_role_experiences_catalog` from',
         '> `agents/roles/<role>/index.md` — do NOT hand-edit. Taglines are the',
         '> existing role-level strings (validated by `lint_role_experiences.py`,',
         '> rendered in the GUI workspace); this page surfaces them in a catalog.',

package/src/scripts/generate_settings_reference.ts

@@ -120,7 +120,7 @@ export function renderPage(rows: readonly ReferenceRow[]): string {
     const out: string[] = [];
     out.push('# Settings reference — every key, its class, and its default');
     out.push('');
-    out.push('> **Generated** by `src/scripts/generate_settings_reference.ts` — do NOT');
+    out.push('> **Generated** by `generate_settings_reference` — do NOT');
     out.push('> hand-edit. Derived from the zod settings schema plus the A/B/C class');
     out.push('> table in [`settings-classes`](contracts/settings-classes.md).');
     out.push('> Drift-checked in CI (`--check`).');

package/src/scripts/git_authorization_hook.ts

@@ -38,6 +38,8 @@ import fs from "node:fs";
 import path from "node:path";
 import { fileURLToPath, pathToFileURL } from "node:url";
 
+import { humanTypedThisTurn as _humanTypedThisTurn } from "./_lib/machine_wake.js";
+
 import { atomic_write_json } from "./hooks/state_io.js";
 import { readHookStdin } from "./hooks/hook_stdin.js";
 
@@ -465,6 +467,14 @@ export function takePending(
     }
 }
 
+/**
+ * Re-exported so the ledger's own tests and callers keep one import site. The
+ * predicate lives in `_lib/machine_wake.ts` because the misclassification is a
+ * property of the `user_prompt_submit` SLOT, not of this concern — see that
+ * file for the discriminator and the captured evidence behind it.
+ */
+export { humanTypedThisTurn } from "./_lib/machine_wake.js";
+
 export function run(stdin_text: string, options: { consumer_root: string }): number {
   let envelope: JsonObject = {};
   if (stdin_text.trim()) {
@@ -491,11 +501,22 @@ export function run(stdin_text: string, options: { consumer_root: string }): num
     return EXIT_ALLOW;
   }
 
+  const session = typeof envelope["session_id"] === "string" ? envelope["session_id"] : "";
+
+  // A machine wake is not a user turn. Leave every per-turn record standing —
+  // the ledger AND the pending refusal — and return before either is touched.
+  // Returning early rather than branching per-record is the point: any future
+  // per-turn state added to this function inherits the protection instead of
+  // needing to remember it (risk 4 — the misclassification is a property of the
+  // slot, not of one consumer).
+  if (!_humanTypedThisTurn(prompt)) {
+    return EXIT_ALLOW;
+  }
+
   const { authorized, evidence } = classifyAuthorization(prompt);
 
   // The answer to the guard's own question. Read (and consume) on EVERY prompt,
   // so the record cannot outlive the turn it was raised in.
-  const session = typeof envelope["session_id"] === "string" ? envelope["session_id"] : "";
   const pending = takePending(options.consumer_root, session, Date.now());
   if (pending && !authorized.includes(pending.op) && isAffirmative(prompt)) {
     authorized.push(pending.op);

package/src/scripts/grade_target_readiness.ts

@@ -58,6 +58,12 @@ export interface DimensionResult {
     grade: Grade | null;
     /** Required when `grade` is null: why detection is impossible, not merely absent. */
     notDetectable?: string;
+    /**
+     * Facts observed without being scored. An empty array means "nothing was
+     * observed", which is NOT the same as a failing grade and NOT the same as
+     * `notDetectable` — the three states are kept apart deliberately.
+     */
+    observations?: string[];
     evidence: string;
 }
 
@@ -174,18 +180,51 @@ export function grade(root: string): Matrix {
         evidence: testCfg ? 'a test-runner config is present' : 'no test-runner config',
     });
 
-    // 3. test strength — mutation or property-based
+    // 3. advanced testing signals — OBSERVED, never graded.
+    //
+    // This dimension used to be `test-strength`, graded on config presence. It
+    // was unscored on 2026-08-27: a dormant `stryker.conf` and an unused
+    // `fast-check` dependency both scored, while a rigorous conventional suite
+    // with neither scored 0 — so the number ordered targets by ADOPTION and
+    // read as EFFECTIVENESS. Detection is kept because presence is a real fact
+    // about the repository; the grade is dropped because the inference from it
+    // was not. Three epistemic states are held apart on purpose: a signal was
+    // observed, no signal was observed, and effectiveness is not evaluable at
+    // all — the last is permanent under static inspection and is why
+    // `notDetectable` is emitted whether or not any observation fires.
     const mutation =
         _glob1(root, '.', /^stryker\.conf\./) || _exists(root, 'infection.json', 'infection.json.dist') ||
         /\[tool\.mutmut\]/.test(pyproject) || /\[mutmut\]/.test(_readIfAny(root, 'setup.cfg'));
     const property =
         /fast-check/.test(_readIfAny(root, 'package.json')) || /hypothesis/.test(pyproject + _readIfAny(root, 'requirements.txt'));
+    const mutationCi = mutation && _ciBlocks(ci, 'stryker', 'infection', 'mutmut');
+    // `ci-reference-detected`, not `ci-enforcement-detected`. Static matching over
+    // a workflow file establishes that a mutation tool is REFERENCED there; it
+    // cannot establish that the step is enabled, blocking, reached on the required
+    // branches, or ever executed. Naming it "enforcement" hands a consumer an
+    // assurance token the probe does not earn — and a consumer is entitled to read
+    // a token's name, `notDetectable` disclaimer or no disclaimer.
+    const observed: string[] = [
+        ...(mutation ? ['mutation-testing-config-detected'] : []),
+        ...(property ? ['property-testing-library-detected'] : []),
+        ...(mutationCi ? ['mutation-testing-ci-reference-detected'] : []),
+    ];
     dims.push({
-        id: 'test-strength',
-        label: 'test strength',
+        id: 'advanced-testing-signals',
+        label: 'advanced testing signals',
         knockout: false,
-        grade: _graded(mutation || property, _ciBlocks(ci, 'stryker', 'infection', 'mutmut')),
-        evidence: mutation ? 'mutation config present' : property ? 'property-based library present' : 'neither mutation nor property testing',
+        grade: null,
+        observations: observed,
+        notDetectable:
+            'test effectiveness — static config and dependency signals cannot establish mutation sensitivity, ' +
+            'property quality, or whether either was ever executed. Outcome evidence would be needed: survivor and ' +
+            'timeout counts from a real mutation run, or executed property-test results.',
+        // Derived from `observations`, never a parallel ternary. The original
+        // ternary reported only the mutation signal when BOTH fired — which the
+        // `python` fixture does — so the human-readable string and the machine
+        // list disagreed about the same target. Two representations of one fact
+        // drift; one is computed from the other.
+        evidence: observed.length > 0 ? observed.join(', ') : 'no advanced-testing signal detected',
     });
 
     // 4. static analysis & types — KNOCKOUT, and the not-detectable case
@@ -319,6 +358,10 @@ export function renderMatrix(m: Matrix): string {
     for (const d of m.dimensions) {
         const val = d.grade === null ? `not detectable — ${d.notDetectable ?? ''}` : `${String(d.grade)} ${GRADE_WORD[d.grade] ?? ''}`;
         L.push(`  ${d.knockout ? '!' : ' '} ${d.label.padEnd(28)} ${val}`);
+        // Observations are printed under their dimension, never folded into the
+        // level. An unscored dimension that printed nothing would read as an
+        // omission rather than as a deliberate refusal to grade.
+        for (const o of d.observations ?? []) L.push(`  ${' '.repeat(31)} observed: ${o}`);
     }
     L.push('');
     L.push('  ! = knockout dimension. The level is the MINIMUM over knockouts;');