@event4u/agent-config 14.21.0 → 14.22.0

package/.augment-plugin/marketplace.json

@@ -1,20 +1,20 @@
 {
   "name": "event4u-agent-config",
   "description": "Governed agent system — skills, rules, commands, and guidelines for AI-assisted development.",
-  "version": "14.21.0",
+  "version": "14.22.0",
   "owner": {
     "name": "event4u",
     "email": "dev@event4u.app"
   },
   "metadata": {
     "description": "A policy-driven execution system that enforces quality, consistency, and developer-like behavior for AI agents.",
-    "version": "14.21.0"
+    "version": "14.22.0"
   },
   "plugins": [
     {
       "name": "agent-config",
       "description": "Full governed agent system — rules, skills, commands, guidelines, and runtime tooling.",
-      "version": "14.21.0",
+      "version": "14.22.0",
       "source": ".",
       "category": "governance",
       "tags": [

package/.augment-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-config",
   "description": "A governed skill framework for AI agents — runtime execution, tooling, observability, feedback, and lifecycle management with policy-driven quality enforcement.",
-  "version": "14.21.0",
+  "version": "14.22.0",
   "author": {
     "name": "event4u",
     "email": "dev@event4u.app"

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "14.21.0",
+    "version": "14.22.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -657,6 +657,204 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 14.21.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [14.22.0](https://github.com/event4u-app/agent-config/compare/14.21.0...14.22.0) (2026-09-08)
+
+### Release highlights
+
+- **Behaviour changes:** clear the last two ratchets, one of them by correcting a false line (9929006); pay the standing-payload charge at the source, not at the ceiling (640d126); collapse the blank-line run the migration left (aad5201); move the detail to the on-demand mechanics file (d6c3a8d); state the substitution without naming a build tool (2beb484); one command per Bash call, and drop the line that said otherwise (8d106b0); +3 more.
+- **Default changes + migration:** no host reads a skill's triggers: frontmatter, and by default nothing in-tree does (6bb8690); migrate the three carriers to ready, and give them a plan back (b880cf8); collapse the blank-line run the migration left (aad5201).
+- **Security and correctness:** discharge the variant pin, and rename fixtures off the cache linter (483bb66); drop a box-rule comment and re-measure the coverage corpus (7442c39); clear two gates this branch reddened, neither by weakening one (f090905); export the Run type so the delta test typechecks (d1188cf); a counter must be wider than the gate it reports on (cc7819b); reopen the binary class under a mechanically verified predicate (5b4ce1f); +15 more.
+- **Honest nulls:** replace the nudge with a context line that carries staleness (706e20c).
+- **Known limitations:** _none_
+
+> **Governance mix:** governance-only 77 vs consumer-only 18 (taxonomy 1.1.0).
+
+### Features
+
+* **council:** build Phase C1 — dissent retention, stage attribution, ZMV rate ([91d83ac](https://github.com/event4u-app/agent-config/commit/91d83ac0b9b93ae2bee631de759cf9a94578a556))
+* **continuity:** add the `continuity_record` variant and make readers tolerant first ([76290ae](https://github.com/event4u-app/agent-config/commit/76290aea5ff7cc86f592854625122a381bc21387))
+* **gates:** derive the five continuity end-state numbers instead of asserting them ([69ffe9f](https://github.com/event4u-app/agent-config/commit/69ffe9f6261cf2b2fd7253ef189e72abe4539f4f))
+* **rdp-eval:** the paid candidate-forms measurement, steps 3.1 and 3.2 ([00273f6](https://github.com/event4u-app/agent-config/commit/00273f66a892f74f2fdb0b9f10cc3d2d322ce307))
+* **rdp-eval:** instruct the candidates line in the treatment arm, and compute the delta ([4da86f3](https://github.com/event4u-app/agent-config/commit/4da86f395ddb812cc7a7eb862ce982846334a45c))
+* **candidate-lines:** the shape checker, and the blockers on its shipping half ([393df5e](https://github.com/event4u-app/agent-config/commit/393df5e57b5feb57d845469d93f6c33c71de5e4d))
+* **mandated-lines:** build the counter the lock asks for, and read a null ([0cce3e7](https://github.com/event4u-app/agent-config/commit/0cce3e784a196a95f061a9ff8d36c4a7eaffe3c1))
+* **hooks:** chain-nudge carries the one-command-per-call rule to tool-call time ([0a201d6](https://github.com/event4u-app/agent-config/commit/0a201d67967638ba1425cc584ff5ad46c50cec9e))
+* **hook-hosts:** separate "slot bound" from "body arrived", and give the native forms their triggers ([ab57f10](https://github.com/event4u-app/agent-config/commit/ab57f10840a0802c339e9ee323d6cc2e9175f413))
+* **code-graph:** resolve tsconfig aliases and PSR-4 namespaces before guessing ([aa58ed5](https://github.com/event4u-app/agent-config/commit/aa58ed5ac9835414e5813d61673b2f17ab621d64))
+* **code-graph:** every edge records how it resolved and which engine made it ([1c8765b](https://github.com/event4u-app/agent-config/commit/1c8765b35a38a7dc228f1eecc6e848f363803965))
+* **code-graph:** make the SQLite twin an index instead of a blob transport ([8a49bc9](https://github.com/event4u-app/agent-config/commit/8a49bc96a50453dddd8c37255b652e3fce1cc5d4))
+* **code-graph:** refresh the index from git hooks, single-flight, no daemon ([b908dcb](https://github.com/event4u-app/agent-config/commit/b908dcb5b250020961c131afd5a081b103e80c62))
+* **code-graph:** replace the nudge with a context line that carries staleness ([706e20c](https://github.com/event4u-app/agent-config/commit/706e20c6f6aa78f0dd6fa978d37d4816048745d3))
+* **rdp-eval:** score stored transcripts, and publish the dim-5 baseline ([6f833d7](https://github.com/event4u-app/agent-config/commit/6f833d7257e6c2fa432ca9ac00cea4a4fb669ba0))
+* **code-graph:** the parsers ship to consumers, as the three the engine can load ([d52a960](https://github.com/event4u-app/agent-config/commit/d52a9602330f6e89efd13360e1517bc4bfd67a07))
+* **rdp-eval:** a fifth rubric dimension for form-alternative surfacing ([631ebce](https://github.com/event4u-app/agent-config/commit/631ebce9fff151f2329a27b27885b47a9a2703e5))
+* **skill-menu:** census every skill by what can actually reach it ([67d08d3](https://github.com/event4u-app/agent-config/commit/67d08d3661be76d8fecc605d9c152c0814660868))
+* **roadmaps:** candidate-moves floor and limited-commitment horizon ([2be364d](https://github.com/event4u-app/agent-config/commit/2be364d9c9bef8463d8c898afca3ecc66737663e))
+* **inbox:** read the source set three times, and prove the artefacts carry it ([5ff3d44](https://github.com/event4u-app/agent-config/commit/5ff3d44a896a4c42f69fe132a7401c9164d36f39))
+* **inbox:** add the source census that gives a run a denominator ([74ff9d5](https://github.com/event4u-app/agent-config/commit/74ff9d53802dcd4935dc283dffa1c8b67918cef0))
+* **skills:** rank the UNION of every readable catalogue root ([d834520](https://github.com/event4u-app/agent-config/commit/d834520f6d67ca3fccc555c3a3b0a18cd856315f))
+
+### Bug Fixes
+
+* **metrics:** label the skill-usage report non-evidentiary ([b981dad](https://github.com/event4u-app/agent-config/commit/b981dadd5610297fe1d1f65f705f69b2eda78ce4))
+* **roadmap:** correct two file:line citations to the merged tree ([2411b46](https://github.com/event4u-app/agent-config/commit/2411b463e0463b915298b77d19a63ed029b57315))
+* **tests:** discharge the variant pin, and rename fixtures off the cache linter ([483bb66](https://github.com/event4u-app/agent-config/commit/483bb660024c584bd644b9177b541fa7fc363e20))
+* drop a box-rule comment and re-measure the coverage corpus ([7442c39](https://github.com/event4u-app/agent-config/commit/7442c3914522666fd38e451ca02b48acc18a8cfa))
+* **gates:** dispose of the state leaves origin/main added, and drop the one it retired ([2f711c5](https://github.com/event4u-app/agent-config/commit/2f711c5f7aacec67576e6a8953f7ac71d989b6bf))
+* **roadmaps:** state the estate cost as deltas, not as one base ref's reading ([51283b8](https://github.com/event4u-app/agent-config/commit/51283b830e26c53c4f66876a8e92a5275111a949))
+* **roadmaps:** correct the estate claim to what the gate actually measured ([f682101](https://github.com/event4u-app/agent-config/commit/f6821010749dab91f5d9d23bede114dd04eadf2c))
+* **settings:** reconcile the four surfaces that disagreed about one flag ([6093fec](https://github.com/event4u-app/agent-config/commit/6093fec7d506c84a82fc53c595233e259233df49))
+* **ci:** clear the last two ratchets, one of them by correcting a false line ([9929006](https://github.com/event4u-app/agent-config/commit/9929006568e31f20d7f555f1d836eec46b3a7e8c))
+* **ci:** record two consequences of a decision that is already on the trunk ([7ea18fe](https://github.com/event4u-app/agent-config/commit/7ea18fe892f51057951569840e598fc12394483e))
+* **ci:** clear two gates this branch reddened, neither by weakening one ([f090905](https://github.com/event4u-app/agent-config/commit/f09090554c35011f7ee43cadc965ddb20479baaa))
+* **secret-allow:** re-pin the gate-coverage canary, 630 to 634 ([c9106cc](https://github.com/event4u-app/agent-config/commit/c9106cc45d28198829c634b14681708182577e70))
+* **rdp-eval:** export the Run type so the delta test typechecks ([d1188cf](https://github.com/event4u-app/agent-config/commit/d1188cf6a1959551c1f1113d5734c9782adaf18a))
+* **roadmap:** date the PR-1923 mergeability claim instead of asserting it ([b8180e9](https://github.com/event4u-app/agent-config/commit/b8180e9fccdb85040f62226c1c2236e6680c7820))
+* **gate-coverage:** re-measure the honest denominator, 306 to 322 ([1d653ac](https://github.com/event4u-app/agent-config/commit/1d653ac150bb74f0f29b0cc3f570c4672ab227ba))
+* **mandated-lines:** a counter must be wider than the gate it reports on ([cc7819b](https://github.com/event4u-app/agent-config/commit/cc7819b9bb02587ef85be0def8b9443be195e638))
+* **roadmap:** mark the ADR-262 path as a deliberate dangling reference ([dcc1e9a](https://github.com/event4u-app/agent-config/commit/dcc1e9a4763f678684d45099027ee591a895b93f))
+* **observation:** the previous commit claimed purely additive and was wrong once ([063a24a](https://github.com/event4u-app/agent-config/commit/063a24a39f9fbee6f57d35657e078b188758e082))
+* **observation:** the council answered the re-pin, and the fetch was never its to grant ([03d65c6](https://github.com/event4u-app/agent-config/commit/03d65c6b74f8467bacdcb532e3757372918c692e))
+* **observation:** the pinned shadow is a post-upgrade text, so the run stops before it starts ([d5b61a3](https://github.com/event4u-app/agent-config/commit/d5b61a333317ba93edf4cbad658561326263d85e))
+* **token-efficiency:** state the substitution without naming a build tool ([2beb484](https://github.com/event4u-app/agent-config/commit/2beb484c668c25aa768f7e18c22e79e6d611ae9b))
+* **token-efficiency:** one command per Bash call, and drop the line that said otherwise ([8d106b0](https://github.com/event4u-app/agent-config/commit/8d106b00b607588ac643d566912a7f4690d45d97))
+* **pack-size:** reopen the binary class under a mechanically verified predicate ([5b4ce1f](https://github.com/event4u-app/agent-config/commit/5b4ce1f46920e62db482737e8236bc9c9cf6b754))
+* **tests:** the exact-pin exception list is one entry now, not zero ([a36a346](https://github.com/event4u-app/agent-config/commit/a36a346aecfc34e44f10c889b40e1c360dc40dec))
+* **tests:** type the dispatch-hook fixtures instead of casting them to any ([7659b95](https://github.com/event4u-app/agent-config/commit/7659b951df75431d94cb32d2896118c600dcc985))
+* **cli:** the two per-invocation probes survive being bundled ([6d182bd](https://github.com/event4u-app/agent-config/commit/6d182bdb8a15d97e494db2d0781e703bbc60977c))
+* **roadmap-scripts:** fire the entry guard inside the delegate bundle ([0be2043](https://github.com/event4u-app/agent-config/commit/0be2043cab9077fa42475339fe561d16579f3175))
+* **cli:** bundle the roadmap command family, and make the bundle reachable at all ([7ff85c6](https://github.com/event4u-app/agent-config/commit/7ff85c6e4c227da05a187f358e41ed080c369c4b))
+* **contracts:** the RDP beta extension was 8 days past the 90-day ceiling ([02a860f](https://github.com/event4u-app/agent-config/commit/02a860f38b32db154d5c4908cb9e6023b787390e))
+* **pack-size:** binary and archive become closed classes, at an observed zero ([f573d62](https://github.com/event4u-app/agent-config/commit/f573d628c4bed6d401595a173aff2819d8b8a5e8))
+* **analyze-repo:** the bound-claim gate pointed at a ledger field that does not exist ([f1d5f3f](https://github.com/event4u-app/agent-config/commit/f1d5f3f3adebc67844d5aee845f9cfb657e6c17b))
+* **release:** disposition the five 14.21.0 findings that are provable from the tree ([6ef7c0a](https://github.com/event4u-app/agent-config/commit/6ef7c0a7f88f6265cf67ceea72c7e31ccf75efb5))
+* **release-findings:** disposition the 14.21.0 blocking findings, and name why the ledger recurs ([0fbb6c2](https://github.com/event4u-app/agent-config/commit/0fbb6c27e4615490e2ff41593986120ac4941216))
+* **release-findings:** the two 14.21.0 findings that were fixable in place ([848c628](https://github.com/event4u-app/agent-config/commit/848c6284d10f34cd875cf9e53c30c853a6dd45cc))
+* **release:** ingest the 14.21.0 self-review findings ([969250d](https://github.com/event4u-app/agent-config/commit/969250dfe9899410f9054e856572c4b5b9ce2e0d))
+* **build:** rebuild dist/install after the comment pass, refresh the ADR census ([9a81414](https://github.com/event4u-app/agent-config/commit/9a814140319d0fafbf01851cce7175dbae680b51))
+* **delivery:** act on the second review — two of my own fixes were defects ([701ddfa](https://github.com/event4u-app/agent-config/commit/701ddfad2cf8ea8205305ab9e77d13ca35214411))
+* **inbox:** clear the two ratchets the new prose tripped ([9835782](https://github.com/event4u-app/agent-config/commit/983578206ce07b9d305b5d1e628cea52b9d5a3da))
+* **delivery:** act on the neutral review — six real defects, two of them mine to own ([110af8f](https://github.com/event4u-app/agent-config/commit/110af8fe356eaa248554b403deacfe259617e050))
+* **inbox:** narrow the --root argument before resolving it ([9edf09a](https://github.com/event4u-app/agent-config/commit/9edf09a9faea8a81c561e5df6f0bedbc0ed780ca))
+* **build:** rebuild the install bundle without a symlinked node_modules ([424e438](https://github.com/event4u-app/agent-config/commit/424e438c2e46bd9f218bf114fec832594755e182))
+* **skills:** resolve the skill catalogue from the authored tree first ([35eed59](https://github.com/event4u-app/agent-config/commit/35eed590333f93837cc11c14458a1e3a40586846))
+* **gates:** key the commands row on the cluster subpath, not the cluster dir ([d72da97](https://github.com/event4u-app/agent-config/commit/d72da97a23e4722b803dfce7794ab31d78879e5b))
+* **delivery:** withhold per artefact name, never on installed.lock ([0e80440](https://github.com/event4u-app/agent-config/commit/0e80440e5225da26df32aef150a931bc6a79eec1))
+
+### Performance
+
+* **rule:** pay the standing-payload charge at the source, not at the ceiling ([640d126](https://github.com/event4u-app/agent-config/commit/640d126ebc57920f242ade3773648b4a27d84054))
+* **chain-nudge:** read no file until the call is known to be chained ([819aae0](https://github.com/event4u-app/agent-config/commit/819aae0d4f880d70282c6400ed4bdd165ea3c502))
+
+### Documentation
+
+* **evidence:** transcribe the 2026-09-08 continuity-writer disposition council ([ef855e2](https://github.com/event4u-app/agent-config/commit/ef855e2a4011d024a8da61c358297a49c5a76c2d))
+* **evidence:** transcribe the 2026-09-08 council run and the C1 verification ([759813e](https://github.com/event4u-app/agent-config/commit/759813ef2b48e946edd946401eb5f8c34b909b53))
+* **roadmap:** claim the one-in-one-out exemption the new roadmap needs ([0773039](https://github.com/event4u-app/agent-config/commit/0773039b42d2f1083e7155d72ba564e8adcc0853))
+* **roadmap:** correct the blocker count in the archived outcome ([5fd63d2](https://github.com/event4u-app/agent-config/commit/5fd63d2148ded3ec4ec1b57f4f273b4b4e81848f))
+* **evidence:** name the new guideline without a path it cannot resolve ([c2132cf](https://github.com/event4u-app/agent-config/commit/c2132cfad5725b2562345977c10af230e5624a9a))
+* **evidence:** record the 2026-09-08 PR-drain run ([a5bb0bf](https://github.com/event4u-app/agent-config/commit/a5bb0bfe9572c365f97a3b14578f1b3f8604f395))
+* **roadmap:** close five of nine items, carry four with measured reasons ([31fb561](https://github.com/event4u-app/agent-config/commit/31fb561e43be8c067225c06312322c7bc48601ee))
+* **roadmaps:** correct the peer-review attribution in the disposition record ([d6c4fad](https://github.com/event4u-app/agent-config/commit/d6c4fad98321fd5ed25fe6e35c7f197e13adefa5))
+* **evidence:** transcribe the 2026-09-08 continuity-scope council ([cec0ff3](https://github.com/event4u-app/agent-config/commit/cec0ff316aa32c169b95b52cdbbe10377b314eb5))
+* **roadmaps:** repoint the two inbound pointers at the parked receiver ([01bb6ad](https://github.com/event4u-app/agent-config/commit/01bb6ad79c527be51074065b84d230dfa306cacd))
+* **concerns:** record the admission the concern rename left missing ([183cbc0](https://github.com/event4u-app/agent-config/commit/183cbc0d03fda8082e8942784909ae2f8cfa8f87))
+* **evidence:** prepend run 21 to the drain-run ledger ([33871a0](https://github.com/event4u-app/agent-config/commit/33871a08d625d29245ccf663be4b8c62d25d0c37))
+* **roadmap:** give AC-4 the blocked-by marker its sibling steps carry ([2059eab](https://github.com/event4u-app/agent-config/commit/2059eab994536eebbc596e1d4a93af7152439067))
+* **roadmap:** make risk-row 6 test count precise instead of aggregated ([b926379](https://github.com/event4u-app/agent-config/commit/b9263792a569ae42704e3d9af6b1d779d1b6568e))
+* **roadmap:** re-review the risk register — four of six rows have outcomes now ([f1cb3b5](https://github.com/event4u-app/agent-config/commit/f1cb3b53d06886cde538b2abd456e4f357fc2b2e))
+* **roadmap:** align the shipping blocker with the corrected finding and the verdict ([14514e6](https://github.com/event4u-app/agent-config/commit/14514e6ac480bcac7835ef7c702ef369bce320dc))
+* **roadmap:** the verdict is a fourth outcome, and the arithmetic settles why ([a173c81](https://github.com/event4u-app/agent-config/commit/a173c81425dab95eddd87e87d480c80ca7faa1cf))
+* **review:** declare the completion-review skip for a zero-code-path branch ([b6364bd](https://github.com/event4u-app/agent-config/commit/b6364bdc5f9bb432ea01708a5304dc9eb472fcab))
+* **stub:** tell the named producer about the bad pin before they run ([ca509de](https://github.com/event4u-app/agent-config/commit/ca509dea6afba4ab2ba5d48ae2139c27230b563f))
+* **evidence:** the menu-exclusion lever step 1.2 names does not exist ([4cd105a](https://github.com/event4u-app/agent-config/commit/4cd105a7d6de122c444a40ed6e5cf6f4cbaa14d1))
+* **adr:** ADR-262 discloses what it rests on ([d043ed7](https://github.com/event4u-app/agent-config/commit/d043ed7945ee38759b718153c9fc5e349561c1b5))
+* **roadmap:** migrate the three carriers to ready, and give them a plan back ([b880cf8](https://github.com/event4u-app/agent-config/commit/b880cf806e430325243c111e86673f9c42bda2b9))
+* **adr:** ADR-262 — delete `status: carrier`; the repo does not gate the maintainer ([565c58f](https://github.com/event4u-app/agent-config/commit/565c58f6351a0a362edeeb09875ff603c21c4386))
+* **roadmap:** re-review the register — Risk 4 fired and the mitigation caught it ([3e88f50](https://github.com/event4u-app/agent-config/commit/3e88f50917b340f9e5ce3181f0f5b2694f58b28e))
+* **roadmap:** record why the two carriers were not executed, and by whose ruling ([a88a7ea](https://github.com/event4u-app/agent-config/commit/a88a7ea46471deac9d7fda90fc8443b4bbd585d3))
+* **adr-204:** record what the decision missed and what it never reached ([2e47469](https://github.com/event4u-app/agent-config/commit/2e47469320a1c4005dd1dc8748d86f38c9c416e4))
+* **roadmap:** record the acceptance criteria this run actually discharged ([7975528](https://github.com/event4u-app/agent-config/commit/7975528536e51b41f84fe9674952b65051c48fc3))
+* **roadmap:** re-scope Phase 2 around a lock this roadmap walked into ([448eed6](https://github.com/event4u-app/agent-config/commit/448eed68d2ea84b724ef61c3c6eff7fb2c6962a2))
+* **roadmap:** grant the run-specific fetch authorization the roadmap asks for ([ebcf8dd](https://github.com/event4u-app/agent-config/commit/ebcf8dd2c541aa55443138af3ca18f8de96df3c2))
+* **roadmap:** correct the base-ref direction in the menu-economy probe note ([9691169](https://github.com/event4u-app/agent-config/commit/9691169177b3d13f776abcc2c5ce3ea034ba5940))
+* **roadmap:** close AC-6 of road-to-scan-that-fails-closed at 26/26 ([4ce11ae](https://github.com/event4u-app/agent-config/commit/4ce11aef8c9e3110257e56bcd0ff6b08951a07a5))
+* **claims:** record option C beside the census claim, and say what it does not close ([96f2362](https://github.com/event4u-app/agent-config/commit/96f2362acb0b1ce55bc19e76889e5269195d4a5c))
+* **stubs:** the 14.21.0 findings ledger is ingestible, and its recorded cause is refuted ([32f7264](https://github.com/event4u-app/agent-config/commit/32f726439a1e3ea65a08b55413ea4ddd29fb4f65))
+* **roadmaps:** stub the 14.21.0 findings ledger, and refute the carried prediction ([d7e7f8f](https://github.com/event4u-app/agent-config/commit/d7e7f8ffaf49e36b6d96a8af7d44639bb4316fa1))
+* name the limits the review found, including the one not fixed ([c17b9eb](https://github.com/event4u-app/agent-config/commit/c17b9eb474fd86bef67e5cc0f5d40caeb1cc66b2))
+* **rules:** re-derive the requirement, do not inherit the shape ([fdd3703](https://github.com/event4u-app/agent-config/commit/fdd3703c6f0c7a456c40451735ea0927bf6fd3eb))
+* **stubs:** record the lineage gate that does not see the inbox folder ([ba558b6](https://github.com/event4u-app/agent-config/commit/ba558b61fa8b9d0edebea2fdca4397916051613d))
+* **adr:** record the ADR-236 withhold amendment ([aa073f9](https://github.com/event4u-app/agent-config/commit/aa073f973afd5062d3996d944b6fb32f0a024636))
+
+### Refactoring
+
+* **gates:** delete `status: carrier`; rename the carry gate to lint_deferral_integrity ([1a7126d](https://github.com/event4u-app/agent-config/commit/1a7126d17792d06618d95d8fee270fbcb363f2e7))
+* **token-efficiency:** move the detail to the on-demand mechanics file ([d6c3a8d](https://github.com/event4u-app/agent-config/commit/d6c3a8dd0220e4a98bf652a8b56d5219d9b267fb))
+* **agent-src:** one CLI-entry guard for the scripts that also import each other ([2eed2c7](https://github.com/event4u-app/agent-config/commit/2eed2c7e60e42a85189c457c86ab850f544b9699))
+* **rules:** move the re-derive clause out of the preamble, on the gate's evidence ([75b5f22](https://github.com/event4u-app/agent-config/commit/75b5f222b795ac978a1ead53e4926724ea9f1cab))
+
+### Tests
+
+* **cli-delegate:** pin both new roots, and execute what they emit ([f5b7316](https://github.com/event4u-app/agent-config/commit/f5b7316e3817f9ebdd4d936e12d8c76d678d64f9))
+* **contracts:** red when the delivery side and the reader side disagree ([e221d3d](https://github.com/event4u-app/agent-config/commit/e221d3d1defdc275a406ba49a06bdd35d6510e91))
+* **projection:** make the rule-projection assertion partition-aware ([1417c02](https://github.com/event4u-app/agent-config/commit/1417c02869c05a83fe25d3c5ca73f74c52b2666e))
+
+### Build
+
+* **install:** rebuild dist/install tsc output for the applies_when helpers ([14b4cae](https://github.com/event4u-app/agent-config/commit/14b4cae5e50b75e6db5512261a065b6b17f09f00))
+
+### CI
+
+* run the continuity-surface gate remotely, not only in `task ci` ([cc320e4](https://github.com/event4u-app/agent-config/commit/cc320e43da46cf24e7f3b5f1b6fe38227294d0cb))
+
+### Chores
+
+* **roadmap:** repair the continuity-writer dependency model, split the retirement blocker ([686aa33](https://github.com/event4u-app/agent-config/commit/686aa33f435dd77a00a5934fd49c13d6f75ad0bc))
+* **roadmap:** close Phase C1 and park the blocked remainder in later/ ([3e780b6](https://github.com/event4u-app/agent-config/commit/3e780b660d803fcf4fd2a23685471bce26f35b98))
+* refresh the ADR evidence census after ADR-263 gained its Evidence section ([04df444](https://github.com/event4u-app/agent-config/commit/04df444526d9461f3c07393b8473edcec22ff77b))
+* **evidence:** rebind the completion-review skip after merging origin/main ([0136a4e](https://github.com/event4u-app/agent-config/commit/0136a4edb343e088de29272de83946f553ac44df))
+* **evidence:** rebind the completion-review skip after the estate-delta fix ([634eb56](https://github.com/event4u-app/agent-config/commit/634eb562c3a90a9fd73cb64da52fe7a1a9ecd478))
+* **roadmap:** count the receiver — status ready, not draft ([3b9aed6](https://github.com/event4u-app/agent-config/commit/3b9aed66551a4fced89689c551596621e07d045a))
+* **roadmap:** archive continuity-retirement-sequencing and re-read its probe ([ae156f2](https://github.com/event4u-app/agent-config/commit/ae156f2f8ba34c899518c047e100d06b20ae847f))
+* **evidence:** rebind the completion-review skip to the current scope ([6400851](https://github.com/event4u-app/agent-config/commit/640085173151f8488b6393c79bef0f9f5093c583))
+* **evidence:** declare the completion-review skip for this docs-only diff ([1c84057](https://github.com/event4u-app/agent-config/commit/1c84057a93a538ca968e22849877388967af275c))
+* **roadmaps:** park road-to-first-reference-analysis-observation in later/ ([7b91922](https://github.com/event4u-app/agent-config/commit/7b919220ca7a56fe83b8d5c47be5cc48a014761e))
+* **adr:** refresh the evidence census for ADR-262 ([ef6b843](https://github.com/event4u-app/agent-config/commit/ef6b84339d56d29476cb330db413ae248b44318f))
+* **budgets:** record what chain-nudge costs, in the three ledgers that ask ([f0f5229](https://github.com/event4u-app/agent-config/commit/f0f52296d437640510b700066a804a05116a81ec))
+* **pack:** regenerate the meta token passport ([06445b5](https://github.com/event4u-app/agent-config/commit/06445b58e0d0cb5f112fa3e1e8ba95dc4b07e437))
+* **adr-census:** refresh the census artifact after the ADR-204 amendment ([9d99092](https://github.com/event4u-app/agent-config/commit/9d990924707f3b01cb7e64017fdae689e73ddae6))
+* **meta:** regenerate the token passport after the main integration ([1a479dd](https://github.com/event4u-app/agent-config/commit/1a479ddcdabbfe7ee558a83ddcca47b676eac840))
+* **roadmap:** archive road-to-scan-that-fails-closed at 26/26 ([91b0428](https://github.com/event4u-app/agent-config/commit/91b042800311752db0b224f2d2d06d813c38e8fc))
+
+### Other
+
+* count the two parks separately instead of summing them ([d439a53](https://github.com/event4u-app/agent-config/commit/d439a53f0eb9b80ac1d3c08604b590083ad6658e))
+* record drain run 22, and point the current-binding file at it ([880e905](https://github.com/event4u-app/agent-config/commit/880e905d6aab5386a9781f3c2199fa921e986dce))
+* the ADR-number collision recurred within a day — record it, do not re-defer silently ([ab0ce5d](https://github.com/event4u-app/agent-config/commit/ab0ce5df32245f2bd3452a420b969fd04f2e3ca3))
+* fix the risk-type enum the draft flip exposed, and mark risk 2 realised ([8d23e0c](https://github.com/event4u-app/agent-config/commit/8d23e0c829e6ea23ef9e20bf4b58c1517222e8e4))
+* roadmap+adr: the grace ceiling may not rise; the Iron Law reserve is designed, not shipped ([f50af89](https://github.com/event4u-app/agent-config/commit/f50af893d8c9f3bbd506aab0034b476198657861))
+* condition (ii) of the menu-exclusion blocker is satisfied by ADR-263 ([ef829d9](https://github.com/event4u-app/agent-config/commit/ef829d987f4b4a5176aec93fe1834b67e0491b86))
+* record the K6 disposition on delivery-on-hook-hosts — it stays active ([5f666eb](https://github.com/event4u-app/agent-config/commit/5f666eb18845b591a40257c1605195846c05e444))
+* a prohibition-shaped roadmap step closes with [x] and a scoped negative verify ([6688f30](https://github.com/event4u-app/agent-config/commit/6688f305fd4b50991c87ff0623ff1b8acec439cd))
+* close road-to-candidate-moves-floor on two convergent council verdicts ([f193c58](https://github.com/event4u-app/agent-config/commit/f193c58d7c62477dab618deab5cdcace95ab694a))
+* land the two in-place retractions the archive commit dropped ([36a74a3](https://github.com/event4u-app/agent-config/commit/36a74a3e20e0a7dbc2961b8e1f92e9013ec47655))
+* archive road-to-the-skill-surface-framing-choice, and retract the claim that it could not be ([d2ea451](https://github.com/event4u-app/agent-config/commit/d2ea45173eabe164de15bb33aadd61a835fc3dc2))
+* inline the council convergence instead of linking the pruned question file ([2804447](https://github.com/event4u-app/agent-config/commit/2804447a6f79b4df88adba10ceb599f555179ca0))
+* add the ## Evidence section check_new_adr_evidence requires ([025d821](https://github.com/event4u-app/agent-config/commit/025d821af31392dcc1c01ce7e65f96501c725f40))
+* resolve blocker skill-surface-framing-ab-choice with ADR-263 ([9c13f05](https://github.com/event4u-app/agent-config/commit/9c13f0579b9f3a751c1b9ec29eaf5de4d40d2a5f))
+* ADR-263 — skills are explicitly-invoked reference material; no automatic routing claimed ([38def70](https://github.com/event4u-app/agent-config/commit/38def70a8fcc5b434e50bd0366c97f4cd0bc623d))
+* no host reads a skill's triggers: frontmatter, and by default nothing in-tree does ([6bb8690](https://github.com/event4u-app/agent-config/commit/6bb869016e679a556fb5436d64e85b219c6a194f))
+* **delivery-on-hook-hosts:** the ADR-262 collision is silent, and here is the tie-break ([a03c317](https://github.com/event4u-app/agent-config/commit/a03c31750d3e3badd3d1c2c0819f027dd8553586))
+* **delivery-on-hook-hosts:** carry the two blockers this file already had ([1cf4f6c](https://github.com/event4u-app/agent-config/commit/1cf4f6cce0f68cffbfaa7b88f082b75b16bdbd41))
+* **skill-menu-economy:** re-review the risk register against the correction ([ca51791](https://github.com/event4u-app/agent-config/commit/ca5179124b2cd24e932a59eef28ea77439377f7f))
+* **skill-menu-economy:** record the unbuilt lever, correct the step that named it ([6e41200](https://github.com/event4u-app/agent-config/commit/6e4120085d9cf62ff14fe473e5b4f57d1d2d4d9d))
+* **mechanics:** house dialect on the one line this diff authored ([2846b10](https://github.com/event4u-app/agent-config/commit/2846b10f981dc09056f1809ac9360bcce2295f53))
+* **token-efficiency:** collapse the blank-line run the migration left ([aad5201](https://github.com/event4u-app/agent-config/commit/aad5201f8b0719108871419f3eafffb495d62710))
+* **comments:** drop markdown headings and a provenance path from source comments ([85a50a9](https://github.com/event4u-app/agent-config/commit/85a50a9da60948123d3d63f9ae335e18e6f9eda3))
+
+Tests: 22145 (+290 since 14.21.0)
+
 ## [14.21.0](https://github.com/event4u-app/agent-config/compare/14.20.0...14.21.0) (2026-09-07)
 
 ### Release highlights

package/CREDITS.md

@@ -13,6 +13,7 @@ contributors whose skills, rules or commands were merged.
 | `design-intelligence` (`ui-styling`-derived assets) | "claudekit" | Apache-2.0 | [`LICENSE.apache-2.0.txt`](src/skills/design-intelligence/LICENSE.apache-2.0.txt) + modified-file markers per §4b |
 | `corpus-grounding`, `design-tokens`, `react-shadcn-ui`, `tailwind-engineer` (derived slices) | see per-skill notices | MIT / Apache-2.0 | ADR-061 — the per-skill attribution notice is authoritative |
 | `src/scripts/cost/budget.mjs`, `src/scripts/cost/track.mjs` | ruvnet/ruflo — `plugins/ruflo-cost-tracker` | MIT | full notice below; transformation record in [`provenance/borrows.jsonl`](provenance/borrows.jsonl) and [`docs/THIRD-PARTY-NOTICES.md`](docs/THIRD-PARTY-NOTICES.md) |
+| `src/vendor/grammars/*.wasm` (3 compiled tree-sitter grammars) | `tree-sitter/tree-sitter-{php,typescript,javascript}`, packaged by `tree-sitter-wasms` (Unlicense) | MIT | full notice below; provenance and refresh procedure in [`src/vendor/grammars/README.md`](src/vendor/grammars/README.md) |
 
 #### MIT notice — ruvnet/ruflo
 
@@ -46,6 +47,42 @@ IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
 CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 ```
 
+#### MIT notice — tree-sitter grammars
+
+Reproduced in full for the same reason as the notice above: the three
+WebAssembly grammars under `src/vendor/grammars/` are **verbatim, unmodified
+binary copies**, which is the clearest possible case of "copies or substantial
+portions of the Software". They ship in the npm package (`package.json` →
+`files`), so this file travels with them and discharges the obligation for a
+consumer who receives them from the registry.
+
+The compiled `.wasm` artefacts are built from the upstream `tree-sitter`
+grammar repositories (MIT) and were obtained through `tree-sitter-wasms@0.1.13`
+(Unlicense — public domain, imposing no attribution obligation of its own). The
+MIT notice below is the one that travels, because it is the grammars' licence,
+not the packager's.
+
+```
+Copyright (c) 2018-2026 Max Brunsfeld and the tree-sitter grammar authors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of
+this software and associated documentation files (the "Software"), to deal in
+the Software without restriction, including without limitation the rights to
+use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
+the Software, and to permit persons to whom the Software is furnished to do so,
+subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
+FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
+COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
+IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
+CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
+```
+
 ### Comparators (benchmark baselines, no vendored material)
 
 | Comparator | Pinned at | License | Where it is used |