@event4u/agent-config 16.3.0 → 16.4.0

package/.augment-plugin/marketplace.json

@@ -1,20 +1,20 @@
 {
   "name": "event4u-agent-config",
   "description": "Governed agent system — skills, rules, commands, and guidelines for AI-assisted development.",
-  "version": "16.3.0",
+  "version": "16.4.0",
   "owner": {
     "name": "event4u",
     "email": "dev@event4u.app"
   },
   "metadata": {
     "description": "A policy-driven execution system that enforces quality, consistency, and developer-like behavior for AI agents.",
-    "version": "16.3.0"
+    "version": "16.4.0"
   },
   "plugins": [
     {
       "name": "agent-config",
       "description": "Full governed agent system — rules, skills, commands, guidelines, and runtime tooling.",
-      "version": "16.3.0",
+      "version": "16.4.0",
       "source": ".",
       "category": "governance",
       "tags": [

package/.augment-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "agent-config",
   "description": "A governed skill framework for AI agents — runtime execution, tooling, observability, feedback, and lifecycle management with policy-driven quality enforcement.",
-  "version": "16.3.0",
+  "version": "16.4.0",
   "author": {
     "name": "event4u",
     "email": "dev@event4u.app"

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "16.3.0",
+    "version": "16.4.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -32,6 +32,69 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 
 ### Changed
 
+- **46 settings keys are retired; an install that never changed them sees no
+  difference.** Each key's shipped default is now fixed behavior: every reader
+  of it — code, rule and command prose, the wizard — was rewritten to that
+  default in the same change. **If your `.agent-settings.yml` still sets one,
+  that value is ignored** and the loader prints one line per key —
+  `<key> was removed (<what decides instead>); ignored.` — so a non-default
+  value you chose is lost visibly, never silently. Delete the line to silence
+  it. The keys:
+  - Output and tone: `telegraph.speak`, `tokens.rich_skills`, `personal.minimal_output`, `personal.play_by_play`, `personal.pr_comment_bot_icon`, `verbosity.intent_announcements`, `verbosity.preview_artifacts`, `verbosity.routine_confirmations`, `verbosity.post_action_reports`.
+  - Reasoning protocol switches: `reasoning.auto_gate`, `reasoning.components.orchestrator`, `reasoning.components.notes_first`, `reasoning.components.grounding`, `reasoning.components.intent`, `reasoning.components.complexity_first`, `reasoning.components.verifier_default`, `reasoning.components.prediction_tracking`, `reasoning.components.decision_ledger`, `reasoning.components.uncertainty_budget`.
+  - Roadmap cadence: `roadmap.skip_pre_run_gate`, `roadmap.dashboard_regen_cadence`.
+  - Command suggestion and PR creation: `commands.auto_detect`, `commands.suggestion.enabled`, `commands.suggestion.confidence_floor`, `commands.suggestion.cooldown_seconds`, `commands.suggestion.max_options`, `commands.create_pr.api_examples`, `commands.create_pr.ui_paths`, `commands.create_pr.api_paths`.
+  - Memory and knowledge sharing: `memory.cadence`, `memory.review_threshold`, `knowledge.global_sharing.redaction.enabled`, `knowledge.global_sharing.redaction.halt_on_trigger`, `knowledge.global_sharing.auto_promote_threshold`, `knowledge.global_sharing.freshness.hypothesis_after_days`, `knowledge.global_sharing.freshness.stale_after_days`.
+  - Hooks and engine: `hooks.concern_budget.max_per_event`, `hooks.concern_budget.hard_fail`, `decision_engine.surface_traces`, `decision_engine.on_block_fallback`, `explain.enable_last`.
+  - Remaining: `project.pr_template`, `pipelines.skill_improvement`, `consistency.cross_source`, `subagents.downshift`, `ai_team.suppress_setup_hint`.
+  The reference page lists each key with the behavior that replaces it
+  (`templates/agent-settings.md` § Retired keys).
+
+- **A medium security finding now needs a disposition before a release
+  ships.** `check_finding_dispositions` treats `security × medium` as blocking
+  for every release after 16.3.0 (council 2026-10-07, 2/2). Such a row must
+  carry `fixed` (with its commit), `false_positive` or `accepted_risk`, each
+  with a rationale and a `verified_by`, like any blocking row, and
+  `still_open` keeps the release red with a message saying so. On a release
+  pull request (`--pr`), a medium security finding the self-review reported
+  but the ledger lacks is red too. Releases up to 16.3.0 are judged as they
+  shipped. The merge gate (`self_review_gate.classifyBlocking`) is unchanged,
+  so on every other pull request the finding only advises. `claim × medium`
+  stays advisory in both.
+- **No spend bound applies unless you set one.** Owner directive, 2026-10-05,
+  recorded as **ADR-279** and accepted on the owner's own answer (option (a))
+  on 2026-10-06. With nothing configured, no USD or token ceiling this package
+  defines stops a council run, a debate or a paid gate, and none of them asks —
+  because no ceiling exists to ask about. Every ceiling remains settable and
+  behaves exactly as its contract describes once set.
+  **Your own council file is not rewritten.** If you copied
+  `agents/templates/.ai-council.yml.example` before this release it carries
+  these lines explicitly, and they are your figures now:
+  `cost_budget.max_input_tokens: 500000`, `cost_budget.max_output_tokens:
+  200000`, `cost_budget.max_total_usd: 20.0` and `debate.max_cost_usd: 5.00`.
+  Delete them to become unbounded; keep them to stay bounded. The shipped
+  defaults behind an absent key moved to `0` in all three layers — the loader,
+  the command's own fallback for a file with no `cost_budget` block, and the
+  `CostBudget` constructor.
+  **`max_calls` and the debate round limits did not move**: they bound call
+  count per invocation, not money. Nor did any of the controls listed under
+  § What stays in ADR-279 — provider refusals, the per-day plan-quota guards,
+  the `--confirm` a class-1 gate asks for, the debate's between-round
+  confirmation, or the budget an unattended run must still be given.
+  **Two defects were repaired in the same change, and both could bite a
+  configured install.** `0` was documented as disabling a token cap and did
+  not — the two token comparisons carried no zero guard while the two USD
+  comparisons beside them did, so a budget with every cap at zero breached on
+  a ten-token estimate. And the class-1 gate's two caps had to BOTH be set
+  before EITHER applied, so setting one left you bounded by neither. Each cap
+  now bounds alone.
+  **One optional hard stop now works for the first time.** With
+  `cost.enforcement: hard-stop` and a budget configured, the cost preflight
+  resolved its budget script relative to the working directory, read the
+  resulting empty output as "no budget configured", and exited `0` on a spent
+  budget from every working directory. It now resolves the script from its own
+  location and exits non-zero as its contract always said it would.
+
 - **`agent-config init` no longer overwrites a managed file you have edited.**
   Owner ruling, 2026-09-21, taken after an AI council split 1/1 on it. Until
   now the installer's `_resolve_file_conflict` returned `write` for every
@@ -125,6 +188,79 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 
 ### Added
 
+- **An old project keeps its real commit format — `agent-config git:convention
+  measure`.** A repository with no declared convention and no approved card is
+  now measured instead of silently given Conventional Commits: the verb samples
+  the non-merge history of the default branch, resolved as the carrier resolves
+  it (the server's symref, then `refs/remotes/origin/HEAD`) — with no default
+  branch it says so and exits `1` rather than sampling `main`, `master` or the
+  current branch in its place — drops bots, automation and bulk imports, caps
+  each author per half, and names the established subject family or — below the
+  bar — the two strongest. It also proposes a `branch_pattern` from the remote
+  branch names (or reports no clear pattern) and shows the observed update style,
+  which it never adopts. The thresholds are constants of the module the verb
+  runs and are rendered into the commit-subject reference, not restated by hand.
+  `show` and `subject` print `no convention established — run git:convention
+  measure` in that state (`convention_established` under `--json`; exit codes
+  unchanged). An interactive `/commit` asks once — the established family or the
+  two strongest against Conventional Commits — and writes the answer to the
+  approved convention card, also when the answer is Conventional, so the question
+  is never repeated; `/commit:in-chunks` never asks and reports the measurement.
+  Where the choice maps to a setting, `measure` prints the ready-to-commit
+  `.git-convention.yml` (`commit_format`, `branch_pattern`, never
+  `update_strategy`); a human creates and commits it, the agent never writes it.
+
+- **A team's git convention can be declared instead of measured — the new
+  `git:` settings block.** Three Class-C keys, each defaulting to the
+  behaviour every install had before, so an install that sets nothing is
+  unchanged. `git.commit_format: ticket-conventional` writes
+  `DEV-1234 feat(exporter): …` instead of `feat(DEV-1234): …` and treats a
+  ticket in the scope as a wrong subject; `/commit` and `/commit:in-chunks`
+  validate against the regex for the configured format, and the
+  conventional-commits-writing classifier gains a `ticket-conventional` family
+  so such a history is no longer misread as free-text ticket prefixes.
+  `git.branch_pattern` (`{type}`, `{ticket}`, `{slug}`) shapes the branches
+  `/worktree:create` proposes; reading a ticket back out of a branch now takes
+  the first `[A-Z][A-Z0-9]+-[0-9]+` token that is not a standard name (`UTF`,
+  `ISO`, `SHA`, `RFC` prefixes), so `DEV-1234-device-export` yields its ticket.
+  Under `git.update_strategy: rebase`, `/create-pr` asks for
+  `git rebase origin/<base>` plus `--force-with-lease`, and `/pr:merge`,
+  `/prepare-for-review` and `/review:changes` report a behind branch instead of
+  updating it; none of them merges the base into a feature branch — one git-workflow reference
+  (`references/branch-update.md`) now owns that decision, and
+  `sync_pr_branch` exits `3` instead of merging when such a branch is behind
+  (a current branch still exits `0`). **What it does not do:** the setting picks the operation and never
+  authorises it; git-history-discipline still requires the user's request for
+  every rebase, fixup or autosquash. A team declares the keys in
+  `.git-convention.yml`, a tracked file at the repository root that overrides
+  every developer settings file and where either value is a declaration
+  (ADR-283): `git.update_strategy` is read from it at the commit a pull request
+  is judged against, so a worktree, a fresh clone and CI agree and a pull
+  request cannot change the strategy its own update is judged by;
+  `git.commit_format` and `git.branch_pattern` are read at `HEAD`. Without the
+  carrier the keys come from the project settings files as before; the
+  user-global file does not carry them, and the settings GUI no longer offers
+  them while it writes there. `agent-config git:convention show` prints the
+  value in force, the commit it was read at and a differing checkout value as
+  a candidate; `show --key` judges only the named keys. The commit is the
+  `--base` given — a pull request passes `--base origin/<its base>` — else the
+  default branch; nothing asks the forge. A carrier that does not parse makes
+  `sync_pr_branch` exit `4`, a target that names no commit exit `1`, and a named
+  commit that cannot be fetched is `unverified`; none of them merges. A target
+  that moves between the strategy read and the merge is read again at the
+  commit being merged, which is governed by the strategy it carries: the same
+  strategy goes on against it, another one exits `1` before anything is
+  merged. A blank `--base` is a usage error (exit `2`) in `sync_pr_branch`,
+  `git:convention show` and `sync`, and `check_branch_freshness`, never read
+  as no `--base`. A commit-linting config
+  in the repository still outranks `git.commit_format`. In a packed consumer
+  install `git:convention show` is the git surface that resolves, and the
+  consumer matrix proves it with a `git-convention` leg; `sync_pr_branch` and
+  `check_branch_freshness`, which `/pr:merge`, `/create-pr`, `/fix:ci` and
+  `/roadmap:next` run through `./scripts-run`, still need a source checkout of
+  this package.
+  The merge method is not a key: `/pr:merge` already reads it from the forge.
+
 - **A push no longer ships a branch whose tree contradicts its own commits.**
   `check_branch_work_committed` runs first in the pre-push hook, and it exists
   because this branch produced the defect it guards: a merge-reconciled baseline
@@ -742,6 +878,119 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 16.4.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [16.4.0](https://github.com/event4u-app/agent-config/compare/16.3.0...16.4.0) (2026-10-10)
+
+### Release highlights
+
+- **Behaviour changes:** retire 46 default-neutral derivable settings keys (#2274) (b35d432); A team's git convention can be declared: ticket-prefixed commits, branch shape, and rebase instead of merge (#2235) (0f9c32e); ADR-281 and the texts it corrects (partial, self-modification roadmap) (#2251) (82a131f); credit a gate with the obligations it refuses, not the whole rule (#2246) (93a192b); precedence rule, contradiction review, and a reachable MCP-use recorder (#2241) (a6e5942); repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) (7548bfc); +1 more.
+- **Default changes + migration:** Correct AC-2 to 37: one of the 47 selected keys was not default-neutral (#2278) (e48f52c); doctor is offline by default; --online opts the forge read back in (#2277) (60c129b); retire 46 default-neutral derivable settings keys (#2274) (b35d432); Queue 47 default-neutral settings keys for retirement (#2272) (9582574); a default install is served each rule body once; report pending reinstall (#2238) (d7b0955).
+- **Security and correctness:** Findings that get a disposition: medium security blocks a release, and every 16.3.0 row ends somewhere (#2266) (bf7ed4f); an ignored file is not a pass; a green row names the type checker that did not run (#2244) (3e00f5e); a default install is served each rule body once; report pending reinstall (#2238) (d7b0955); land the two review-round defects stranded when #2231 merged mid-lane (#2233) (4e19d06); repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) (7548bfc); round-3..7 review findings (follow-up to #2230) (#2232) (3e7baa1); +4 more.
+- **Honest nulls:** round-3..7 review findings (follow-up to #2230) (#2232) (3e7baa1); refuse a triggerless routed rule; measure the real thinned total (#2226) (52b409e).
+- **Known limitations:** Phase 2 waits on a cancelled instrument, not on a machine (#2282) (0f6209e); retire 46 default-neutral derivable settings keys (#2274) (src/scripts/install.ts declares a residual) (b35d432); release evidence that reproduces (#2250) (src/scripts/_lib/release_highlights.ts declares a residual) (35209c1); a default install is served each rule body once; report pending reinstall (#2238) (src/scripts/check_standing_rule_delivery.ts declares a residual) (d7b0955); land the two review-round defects stranded when #2231 merged mid-lane (#2233) (4e19d06); measure the thinned layer in one unit, and price what stands between it and the ceiling (#2231) (src/scripts/install.ts declares a residual) (96dff15).
+
+> **Governance mix:** governance-only 38 vs consumer-only 1 (taxonomy 1.1.0; range 5550dec9cf92..79e335f1c1b9).
+
+### Features
+
+* **roadmaps:** 6.1's verdict lands, and two things it uncovered are held rather than worked around (#2294) ([79e335f](https://github.com/event4u-app/agent-config/commit/79e335f1c1b9c41d6ee75c6c38ef57eeeb63f010))
+* **roadmaps:** Phase 7's population, measured — and the first sweep that was thrown away (#2293) ([7a7a55b](https://github.com/event4u-app/agent-config/commit/7a7a55b2d8947d2c2e26ff59862bc8e9fac3f573))
+* **roadmaps:** the hold step 1.1 asked for is neither of the two shapes it offered (#2283) ([e90a478](https://github.com/event4u-app/agent-config/commit/e90a4788ec0d9afa07aaeeac00bf73b76ecc30f6))
+* **gates:** bring later/*-carried.md into the blocker lint, and nothing else (#2280) ([11dc63f](https://github.com/event4u-app/agent-config/commit/11dc63fe8521a0f87fb5a72203453497aca04ccf))
+* **settings:** retire 46 default-neutral derivable settings keys (#2274) ([b35d432](https://github.com/event4u-app/agent-config/commit/b35d432b11cc3328517c7963c570bb1a06b8dda7))
+* cross-file blocker refs and declared snapshot exemption (authority-routing phases 4-5) (#2264) ([b01d71d](https://github.com/event4u-app/agent-config/commit/b01d71d94dd8e763d6c1d5f9fc6f7776beffde55))
+* **merge:** auto-merge on the owner's word, with a council danger gate (ADR-282) (#2256) ([edd18fe](https://github.com/event4u-app/agent-config/commit/edd18fea6867255375dc3797121260e137322f26))
+* **roadmaps:** a routed authority for dangerous-action decisions (#2254) ([4b54335](https://github.com/event4u-app/agent-config/commit/4b54335a6217e25ae9c6273b591ee0e2919683c5))
+* **enforcement:** credit a gate with the obligations it refuses, not the whole rule (#2246) ([93a192b](https://github.com/event4u-app/agent-config/commit/93a192bbd36c051032e028a68fed7f8574908907))
+* **probe:** blocking time by cause, the CI-and-subagent hypothesis refuted (#2248) ([179019f](https://github.com/event4u-app/agent-config/commit/179019fb3c310f9ad1226877b7f191ae30f9d394))
+* **release:** release evidence that reproduces (#2250) ([35209c1](https://github.com/event4u-app/agent-config/commit/35209c1f5bd2c7cc2521693c58523402ad03618e))
+* **gates:** a ratification fence that follows the dispatcher's imports (#2247) ([8fdb481](https://github.com/event4u-app/agent-config/commit/8fdb4816921e50fbcb78e70beb0c347bad11890f))
+* **roadmaps:** parked blockers get counted, one owner question gets a blocker, two checks for ticks and citations (#2245) ([764fa4f](https://github.com/event4u-app/agent-config/commit/764fa4fa4c7d88d0214fea4409e234760889d545))
+* **code-graph:** measure the graph feeder's cost on the stop slot (graph-that-feeds-the-gate 3.5) (#2239) ([8d91928](https://github.com/event4u-app/agent-config/commit/8d91928cbd6111293b8eca16fde1240651d853e7))
+* **ci:** gates a pull request can hear (#2249) ([c4051c7](https://github.com/event4u-app/agent-config/commit/c4051c7ed34cd9209496205286af3c5a1ef2d89e))
+* **doctor:** an offline flag, and the 16.3.0 findings' doc and test fixes (partial) (#2243) ([fc1bdec](https://github.com/event4u-app/agent-config/commit/fc1bdec4f4edcf9438d42388e252352617f257b6))
+* **install:** count unresolved installed links per artefact kind (#2240) ([ef32868](https://github.com/event4u-app/agent-config/commit/ef328687cfff78efa57cc957d90344fae7b90979))
+* **ranker:** opt-in unrounded tie-break, tie metrics, and the tuning reading (#2242) ([e92e9dc](https://github.com/event4u-app/agent-config/commit/e92e9dcdb23bb16d596252fdb7c21e51fe7ec64a))
+* **neighbours:** precedence rule, contradiction review, and a reachable MCP-use recorder (#2241) ([a6e5942](https://github.com/event4u-app/agent-config/commit/a6e5942236858a85b01246c0b04345c6148075d7))
+* **spend:** a spend bound applies only where one was set (#2234) ([e3c30fc](https://github.com/event4u-app/agent-config/commit/e3c30fc9d3af3121a03dbc420b4fbaa235993b46))
+* **installed-layer:** measure the thinned layer in one unit, and price what stands between it and the ceiling (#2231) ([96dff15](https://github.com/event4u-app/agent-config/commit/96dff15dd9d5544641b54e5c729becbef6f57306))
+* **reach:** close road-to-modules-that-something-calls — census, repairs, and the five reported counts (#2227) ([3dbb3f9](https://github.com/event4u-app/agent-config/commit/3dbb3f99da8c731a6ba6f34fef48ae90834fb1df))
+
+### Bug Fixes
+
+* **roadmaps:** dispose the two neighbours-carried steps (#2267) ([dc9f98a](https://github.com/event4u-app/agent-config/commit/dc9f98aa05c31fe20e52ec2a38f089771bbbea37))
+* **roadmaps:** carry the archived AC-3 and close parked-blockers step 4.2 (#2262) ([6051d37](https://github.com/event4u-app/agent-config/commit/6051d3744ac67057d6fc9bc178af3d36060ff4c1))
+* **release-findings:** close the ratification-fence roadmap's last step (#2261) ([6a1cb1a](https://github.com/event4u-app/agent-config/commit/6a1cb1a5cfbd9ca582152ea7f3022100d517abfa))
+* **touched-file-quality:** an ignored file is not a pass; a green row names the type checker that did not run (#2244) ([3e00f5e](https://github.com/event4u-app/agent-config/commit/3e00f5e0fb424e6c925058a184ac6942eb8dee89))
+* **rule-inject:** a default install is served each rule body once; report pending reinstall (#2238) ([d7b0955](https://github.com/event4u-app/agent-config/commit/d7b095551302e7dc215d6ac7b2a4191619eb0ed5))
+* **installed-layer:** land the two review-round defects stranded when #2231 merged mid-lane (#2233) ([4e19d06](https://github.com/event4u-app/agent-config/commit/4e19d06651700573df2bf395536011c32381ffc1))
+* **scripts:** repair signals that mean what they say (loop flag, cap comments, verify forms) (#2228) ([7548bfc](https://github.com/event4u-app/agent-config/commit/7548bfca437880a8a3a69b7ce608538ae757f303))
+* **reach:** round-3..7 review findings (follow-up to #2230) (#2232) ([3e7baa1](https://github.com/event4u-app/agent-config/commit/3e7baa13cfe63febf1735be9b17b414d21aa8527))
+* **reach:** three R2-review bugs in the module-reach report (follow-up to #2227) (#2230) ([31e3da5](https://github.com/event4u-app/agent-config/commit/31e3da5baf7aa7bc2a06b53335b18f1846912c3a))
+* **rules:** refuse a triggerless routed rule; measure the real thinned total (#2226) ([52b409e](https://github.com/event4u-app/agent-config/commit/52b409e897e42ab00e7305a6f17e1e27a1a35072))
+* **code-graph:** repair the gate feeder path shape, then publish what step 3.3 actually measures (#2216) ([1668731](https://github.com/event4u-app/agent-config/commit/166873158c1bcbe585a95654376ec021873a4107))
+* **deps:** lift proxy-addr to 2.0.8 so the runtime audit gate can pass (#2219) ([26510a6](https://github.com/event4u-app/agent-config/commit/26510a6c2a0e5d2997d639d6e5f3e9e9bc9dc34f))
+* **rules:** repair the docs/ link group, correct two stale blocker claims (#2213) ([c58d7ea](https://github.com/event4u-app/agent-config/commit/c58d7eae8d1aab76d37f9018a57c5047d4b957bc))
+* **roadmaps:** register step 0.2 blockedness where the carrier reads it (#2212) ([6b79d06](https://github.com/event4u-app/agent-config/commit/6b79d06defecbb3d8bc16d44e41160e0d4e470a5))
+
+### Documentation
+
+* **roadmaps:** close three prerequisites that were performed but never ticked (#2291) ([c393d6b](https://github.com/event4u-app/agent-config/commit/c393d6b244ff3031d46345ebb24b3fd2ffc6611e))
+* **roadmaps:** mark the three Phase-3 steps that share one gate, and refuse to mark two that do not (#2290) ([05329ba](https://github.com/event4u-app/agent-config/commit/05329ba488e7fcf98a93bf2a2df4d4162d013d54))
+* **roadmaps:** measure all five open acceptance criteria instead of assuming them (#2289) ([70bd51a](https://github.com/event4u-app/agent-config/commit/70bd51a8a1221e56cb8a15648282cb31b0b4ce97))
+* **roadmaps:** a sixth reading of three stable negatives, and one rejected substitution (#2287) ([ebefcdc](https://github.com/event4u-app/agent-config/commit/ebefcdc1f0d35d0a7ca5044d33605d4b3247b679))
+* **roadmaps:** the gate refused a comment, which answers the phase block (#2285) ([6715878](https://github.com/event4u-app/agent-config/commit/6715878859af7cd20fcac76855c4c4158b57edf3))
+* **roadmaps:** Phase 1 was done except for three notes nobody wrote (#2284) ([5280e89](https://github.com/event4u-app/agent-config/commit/5280e8912ab480799e433d37df2d402b5b10b791))
+* **roadmaps:** Phase 2 waits on a cancelled instrument, not on a machine (#2282) ([0f6209e](https://github.com/event4u-app/agent-config/commit/0f6209e8eb436f0ffcc679a34663dc6675c1bf8b))
+* **roadmaps:** close 3.2 by council re-scope, and name the accrual trap I hit (#2281) ([d6e75f4](https://github.com/event4u-app/agent-config/commit/d6e75f45fa086dca62f953966479569fd54b93b2))
+* **adr:** amend ADR-281 so a council recommends passage, never grants it (#2257) ([f76e83e](https://github.com/event4u-app/agent-config/commit/f76e83e47cdb823e37c96f4bbd16e53bc5c24c04))
+* **governance:** ADR-281 and the texts it corrects (partial, self-modification roadmap) (#2251) ([82a131f](https://github.com/event4u-app/agent-config/commit/82a131feb5f6309365c962d272e9362ec9820c53))
+* **council:** ADR-281 and the authority-routing decision cannot both stand (#2255) ([61cd5b7](https://github.com/event4u-app/agent-config/commit/61cd5b7ad6a6851f99e97405a20c1e8a9ea61607))
+* **council:** record the authority-routing decision — ratified, 2 of 2 seats (#2253) ([0009ecd](https://github.com/event4u-app/agent-config/commit/0009ecd7c1f0d8f9659dd0ab249414879015b20e))
+* **roadmaps:** close road-to-leading-every-row on the owner's answers and ADR-280 (#2237) ([adaad0a](https://github.com/event4u-app/agent-config/commit/adaad0aa2afd216767bf31404f533beb9393c5c8))
+* **roadmap:** record that the two kernel-held rule links are human-gated (#2236) ([8510ebc](https://github.com/event4u-app/agent-config/commit/8510ebc995d224b1d353eb5042887905b7b16533))
+* **roadmaps:** park the opencode probe and restore the risk-register gate on main (#2229) ([c267eae](https://github.com/event4u-app/agent-config/commit/c267eaef62b49abb38730734509d1a39f1a3d788))
+* **roadmaps:** land inbox-2026-10-e as ten ready roadmaps (#2225) ([0c86ad9](https://github.com/event4u-app/agent-config/commit/0c86ad98fb540e3be196cdead4dcf98a49b03492))
+* **roadmaps:** record the owner's answers to eleven open blockers (#2222) ([a75bb32](https://github.com/event4u-app/agent-config/commit/a75bb32106f695d006aa67f9ffc8185afb54faad))
+* **evidence:** publish the shadow readings the release window opened, and carry 2.3 (#2217) ([2bb3a1a](https://github.com/event4u-app/agent-config/commit/2bb3a1a03d50a58a374f4f6d7600147e930a523e))
+* **roadmaps:** park menu-precision on a two-branch wake after a fourth null probe (#2215) ([f3cc5db](https://github.com/event4u-app/agent-config/commit/f3cc5db98ae15c744a990731f19b88a2508a60a3))
+* **roadmaps:** settle four of seven blockers on road-to-leading-every-row (#2214) ([2bf1067](https://github.com/event4u-app/agent-config/commit/2bf10671424cb09adb179c50512577d7b6b79a52))
+
+### Tests
+
+* **harvest:** re-derive the census pin after two sanctioned provenance tokens (#2224) ([d3973a8](https://github.com/event4u-app/agent-config/commit/d3973a86a13e3e101e3a018ae0567bf2099fd71d))
+
+### Chores
+
+* **roadmaps:** park the rule-triggers roadmap on two human-gated events (#2276) ([9be2b6f](https://github.com/event4u-app/agent-config/commit/9be2b6fad97389eb29ad5f24f561d04e45dacf56))
+* **roadmaps:** park the two owner-blocked drafts in later/ (#2271) ([717aba6](https://github.com/event4u-app/agent-config/commit/717aba62a59685eca54515221e6165bae743dc05))
+* **roadmaps:** archive the settings-classes stagnation roadmap (#2270) ([dd80cbe](https://github.com/event4u-app/agent-config/commit/dd80cbe5ce2f5aa3bb3a833a1d21d1f12a898126))
+* **gates:** reaffirm the derivable-settings baseline after a drain that found nothing (#2268) ([6d603d9](https://github.com/event4u-app/agent-config/commit/6d603d93ecff326e9fc5c49d97dcd3f878bfb4af))
+* **roadmaps:** close and archive road-to-enforcement-per-obligation (#2263) ([ebd8adc](https://github.com/event4u-app/agent-config/commit/ebd8adc37fbcd9ca334f2930653460d26f86437c))
+* **roadmaps:** close and archive road-to-signals-that-mean-what-they-say (#2260) ([bacc2a0](https://github.com/event4u-app/agent-config/commit/bacc2a0dcaee3cab3864b1bb3cd11cc8f6aad4cf))
+* **roadmaps:** archive the neighbours lane and carry its two deferred steps (#2259) ([7dc88a6](https://github.com/event4u-app/agent-config/commit/7dc88a61aae1b75026c14640817f76d18f739fa2))
+* **roadmaps:** park road-to-learning-you-can-see-carried, and publish the reading that moved it (#2221) ([fcd5b9e](https://github.com/event4u-app/agent-config/commit/fcd5b9e0b27307444c15140a6ac56a965654fe2c))
+* **roadmaps:** park road-to-stacks-beyond-php behind owner blocker b5 (#2220) ([d47793a](https://github.com/event4u-app/agent-config/commit/d47793a787dd3c61c4287194be8138e6c624bf6f))
+* **roadmaps:** settle producible-vs-elapsed for the user_prompt_submit timeout and park host-claims-carried (#2218) ([763bc12](https://github.com/event4u-app/agent-config/commit/763bc121c24615027a01811322b73590845a85ad))
+
+### Other
+
+* The modification review — its questions, how a seat closes, how the verdict follows (#2292) ([bbe5b73](https://github.com/event4u-app/agent-config/commit/bbe5b73be4f06faa528d494a271d2c8b21e28bb2))
+* Occasion 3 of 4 — one row corrected, one correction declined (#2288) ([0fd09eb](https://github.com/event4u-app/agent-config/commit/0fd09ebe3bc1ceb54fe06ea593addf609b46c3be))
+* One step needed no council, the other split and found why (#2286) ([55360bb](https://github.com/event4u-app/agent-config/commit/55360bb87e794f8b8e6fd03134c05e1791aa2a66))
+* Four law headings went to a council; one landed and three were refused (#2279) ([40b74b9](https://github.com/event4u-app/agent-config/commit/40b74b948f40e4875e9c9b4a72080cad04132532))
+* Correct AC-2 to 37: one of the 47 selected keys was not default-neutral (#2278) ([e48f52c](https://github.com/event4u-app/agent-config/commit/e48f52cadf551e411aafdfc65d955d23a6bf8e1f))
+* doctor is offline by default; --online opts the forge read back in (#2277) ([60c129b](https://github.com/event4u-app/agent-config/commit/60c129bfa74224abb86254f79909a715535522c6))
+* Park the graph-feeder roadmap on an accrual wait its own repository cannot end (#2275) ([737f0d6](https://github.com/event4u-app/agent-config/commit/737f0d6633d52e51e3eb90115b17bfdc865eb43d))
+* Close the pack-boundary base-into-narrow mismatch with an advisory edge the gate reads (#2273) ([9ecd663](https://github.com/event4u-app/agent-config/commit/9ecd6639fd8f4b2f02a277a8fe3f565d5783e792))
+* Queue 47 default-neutral settings keys for retirement (#2272) ([9582574](https://github.com/event4u-app/agent-config/commit/958257418b9098ef37be6fc3118c7d4bcbc69861))
+* Resolve 15 roadmap blockers, and run the council before any owner question (#2269) ([6d68417](https://github.com/event4u-app/agent-config/commit/6d6841712de38c4dcd8f5ff4c03bd5acc5b09cd3))
+* Findings that get a disposition: medium security blocks a release, and every 16.3.0 row ends somewhere (#2266) ([bf7ed4f](https://github.com/event4u-app/agent-config/commit/bf7ed4f7559d8bd8827551bee21bf9b768262549))
+* Harden the git convention from #2235: correct in a packed install, safe sync and rebase, and measure-and-propose for undeclared projects (#2258) ([b83bcb1](https://github.com/event4u-app/agent-config/commit/b83bcb19a7d5d649fbb8687c00a5327a2704febe))
+* A team's git convention can be declared: ticket-prefixed commits, branch shape, and rebase instead of merge (#2235) ([0f9c32e](https://github.com/event4u-app/agent-config/commit/0f9c32e260c0e213273da9a448044e4403eac5a2))
+* Re-price the neighbours lane on the tree it will be decided on, and stop its census caches leaking home paths (#2223) ([7cd6563](https://github.com/event4u-app/agent-config/commit/7cd6563a8c038b8bebe21f9b4dc6acda06ea5bc6))
+
+Tests: 27198 (+1310 since 16.3.0)
+
 ## [16.3.0](https://github.com/event4u-app/agent-config/compare/16.2.0...16.3.0) (2026-10-05)
 
 ### Release highlights
@@ -753,6 +1002,8 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 - **Known limitations:** An installed layer measured against its limit, and the consent an installer must have before thinning (#2201) (src/scripts/install.ts declares a residual) (df7ea79); Two Phase-0 instruments closed against measurement, and the third blocked by a record rather than a ceiling (#2198) (src/scripts/check_standing_rule_delivery.ts declares a residual) (92027a2); A rule carrier that delivers what the install carries, in the host's form, in a string the host keeps (#2182) (src/scripts/install.ts declares a residual) (7fdfd0a); Rule triggers and installed links that hold (#2174) (src/scripts/install.ts declares a residual) (328a21b); A tree that keeps its neighbours (#2161) (src/scripts/install.ts declares a residual) (4399b5a); make the two pack-boundary gates green on the trunk and run the workflow-security audit in CI (#2155) (90a0ad5); +2 more.
 
 > **Governance mix:** governance-only 23 vs consumer-only 1 (taxonomy 1.1.0).
+>
+> _Re-measured 2026-10-07:_ governance-only 83 vs consumer-only 3 (taxonomy 1.1.0) on `16.2.0..16.3.0` (`8d157f5e7..91aaf5e21`), via `./scripts-run src/scripts/measure_release_mix --from 16.2.0 --to 16.3.0`. The line above was measured to an unrecorded `HEAD` at write time.
 
 ### Features
 

package/README.md

@@ -4,9 +4,9 @@
 
 [![Smoke](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml) [![Public install smoke (3 OS × 2 Node)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml) [![npm](https://img.shields.io/npm/v/@event4u/agent-config?style=flat-square&label=npm&color=orange)](https://www.npmjs.com/package/@event4u/agent-config) [![agent-config MCP server](https://glama.ai/mcp/servers/event4u-app/agent-config/badges/score.svg)](https://glama.ai/mcp/servers/event4u-app/agent-config) [![MCP Toplist](https://mcptoplist.com/badge/glama%2Fevent4u-app%2Fagent-config.svg)](https://mcptoplist.com/server/glama%2Fevent4u-app%2Fagent-config)
 
-[![Skills](https://img.shields.io/badge/Skills-299-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-121-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-205-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-121-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/) <!-- claim:published-artifact-counts -->
+[![Skills](https://img.shields.io/badge/Skills-299-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-122-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-205-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-121-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/) <!-- claim:published-artifact-counts -->
 
-<sub>**How these are counted** — one canonical counter, `agent-config` → `update_counts --check`, re-derives all six from the tree and fails CI on a drift of one. Two bases are not what the linked directory shows, so they are stated here rather than left to be inferred: **Commands 202** counts every command file **recursively** (the linked directory holds 61 at its top level), and **Rules 121** counts the **source** rules while the linked projection holds 120 — one rule is dormant and is not projected. **Personas 29** excludes the directory README. Counts are of files and directories: none of them measures quality, activation, or adoption. <!-- claim:published-artifact-counts --></sub>
+<sub>**How these are counted** — one canonical counter, `agent-config` → `update_counts --check`, re-derives all six from the tree and fails CI on a drift of one. Two bases are not what the linked directory shows, so they are stated here rather than left to be inferred: **Commands 205** counts every command file **recursively** (the linked directory holds 60 at its top level), and **Rules 121** counts the **source** rules while the linked projection holds 120 — one rule is dormant and is not projected. **Personas 29** excludes the directory README. Counts are of files and directories: none of them measures quality, activation, or adoption. <!-- claim:published-artifact-counts --></sub>
 
 **Try it in 30 seconds** — drop one read-only subagent into any repo and watch it gate "done": `@production-validator check this branch is actually done`. No wizard, no lock-in, nothing else installed — the [30-second wedge ↓](#quickstart) is the whole first step. Start at the proof, not the catalog: **[event4u-app.github.io/agent-config/proof/](https://event4u-app.github.io/agent-config/proof/)**.
 

package/agents/templates/.ai-council.yml.example

@@ -29,9 +29,14 @@
 # `api` rung. A vendor CLI under your subscription is preferred whenever one
 # resolves, so the common case costs nothing per token — run
 # `agent-config council status` to see the resolved transport and billing class
-# per member before invoking. The autonomy directive does NOT silently spend
-# tokens — the /council command always asks before invoking, even under
-# autonomy: on.
+# per member before invoking.
+#
+# This block used to end "the /council command always asks before invoking,
+# even under autonomy: on". That was already untrue when ADR-230 replaced the
+# unconditional ask with a three-case bound, and ADR-279 has since removed the
+# last case that asked. The command does not ask; it shows the estimate as
+# information. What bounds a billable run is a ceiling you set below — and
+# with nothing set, nothing bounds it.
 
 # Master switch (true, false). REQUIRED — the loader has no default for it,
 # so this file's value is the only value.
@@ -138,11 +143,21 @@ defaults:
 # Prices come from agents/.agent-prices.md (gitignored, refreshed weekly
 # by `python3 scripts/update_prices.py`; bootstrapped from
 # scripts/ai_council/_default_prices.py on first run).
+#
+# These ship at 0 — no ceiling on tokens or money unless you set one
+# (ADR-279). `max_calls` is NOT a ceiling on money: it bounds fan-out per
+# invocation, so it keeps its value. To get a bound back, replace a 0 with the
+# figure you want; the units are TOKENS for the first two and US DOLLARS for
+# `max_total_usd`.
+#
+# If you copied this file before 2026-10-06 it carries 500000 / 200000 / 20.0
+# explicitly. Those are YOUR figures now and nothing rewrites them — delete the
+# lines to become unbounded, or keep them to stay bounded.
 cost_budget:
-  max_input_tokens: 500000
-  max_output_tokens: 200000
+  max_input_tokens: 0
+  max_output_tokens: 0
   max_calls: 50
-  max_total_usd: 20.0
+  max_total_usd: 0.0
 
 # Phase 8 — Debate cost-visibility + hard refusal cap.
 #
@@ -150,7 +165,10 @@ cost_budget:
 # high-end estimate (expected × 1.20 over-run buffer) exceeds the cap,
 # `/council debate` refuses to start — the user must lower `--rounds`,
 # drop members, or raise the cap explicitly. No --proceed-anyway override.
-# Set to 0 to disable the cap (not recommended).
+#
+# It ships at 0 — disabled, per ADR-279. Set a USD figure to get the refusal
+# back. The between-round confirmation below is a separate control and is NOT
+# a money ceiling: it stays on whatever this is set to.
 #
 # `cost_disclosure.mode` ∈ {"always", "above_threshold", "off"}:
 #   always           — emit the disclosure block before every debate.
@@ -165,7 +183,7 @@ cost_budget:
 #         mode: above_threshold
 #         threshold_usd: 0.50
 debate:
-  max_cost_usd: 5.00
+  max_cost_usd: 0.00
   cost_disclosure:
     mode: always
     threshold_usd: 1.00

package/dist/agent-src/commands/analyze/inbox.md

@@ -672,13 +672,16 @@ attempt. At the third, write the row with what was observed and move on.
 
 This cap is **this phase's own**, and the divergence from
 [`autonomous-execution`](../../../../rules/autonomous-execution.md)
-§ Validation-loop budget is deliberate rather than an oversight: that rule's N=3
-governs a *validation target* it defines as "a single identifiable artefact (file
-path, lint rule ID, test name)", explicitly excluding natural-language clusters —
-and a verbatim step out of a prose file is exactly such a cluster. Its remedy is
-also different (STOP and ask the user). Borrowing the number while failing the
-definition, and then citing the rule as authority, would weaken the rule it
-claims to obey. So: same number, stated here, for a reason stated here.
+§ Validation-loop budget is deliberate rather than an oversight: that rule's
+`execution.fix_loop_max` budget (default 10, with a strategy-shift ladder)
+governs a *validation target* it defines as "a single identifiable artefact
+(file path, lint rule ID, test name)", explicitly excluding natural-language
+clusters — and a verbatim step out of a prose file is exactly such a cluster.
+This phase's own remedy is also different: STOP and ask the user, where the
+rule's remedy at the same count is a mandatory strategy shift, never a stop.
+Borrowing the number while failing the definition, and then citing the rule
+as authority, would weaken the rule it claims to obey. So: same number,
+stated here, for a reason stated here.
 
 One row per selected step:
 

package/dist/agent-src/commands/bug/investigate.md

@@ -26,7 +26,7 @@ packs:
 
 Run `git branch --show-current` and extract ticket IDs:
 
-- Match pattern: `[A-Z]+-[0-9]+` (e.g., `DEV-1234`, `PROJ-567`)
+- Read it with `agent-config git:convention ticket` ([`commit-subject`](../../../../skills/git-workflow/references/commit-subject.md) § Reading the ticket; e.g. `DEV-1234`, `PROJ-567`)
 - Common branch formats: `fix/DEV-1234/description`, `hotfix/DEV-999`, `fix/bug-description`
 
 If a ticket ID is found:

package/dist/agent-src/commands/commit/in-chunks.md

@@ -43,10 +43,16 @@ If there are no uncommitted changes (staged or unstaged), report
 
 ### 2. Determine the ticket number
 
-- Extract the ticket ID from the current branch name (e.g. `feat/DEV-1234/...`
-  → `DEV-1234`).
-- If no ticket ID is found, omit the scope from the messages — write
-  `chore: ...` not `chore(): ...`. Do **not** ask the user for one.
+- Read the ticket exactly as [`/commit`](../commit.md) step 2 does
+  (`agent-config git:convention ticket`, with the card's `ticket_keys` line as
+  `--keys`) and place it per the convention in force —
+  [`commit-subject`](../../../../skills/git-workflow/references/commit-subject.md),
+  including its area-scope clause. A candidate marked `unknown-key` is omitted,
+  never asked about.
+- If no ticket ID is found, omit it — write `chore: ...` not `chore(): ...`.
+  Do **not** ask the user for one.
+  Under an approved convention card this is never a stop: the family's form
+  without the ticket part is valid (`commit-subject` § Placing the ticket).
 
 ### 3. Analyze and split
 
@@ -69,6 +75,12 @@ Splitting rules:
 
 Generate commit messages per [`commit-conventions`](../../rules/commit-conventions.md).
 
+**No convention established — never ask.** When `agent-config git:convention
+show --key commit_format` prints `no convention established`, run
+`agent-config git:convention measure`, carry its `verdict` line into the summary,
+and generate under the convention in force (the default). Asking and writing the
+card belong to the interactive [`/commit`](../commit.md) step 3c only.
+
 ### 3b. Secret-leak pre-flight — MANDATORY, not autonomy-lifted
 
 Run `./scripts-run src/scripts/check_secret_leak`. A high-confidence hit is a
@@ -79,14 +91,22 @@ strip one.
 
 ### 4. Validate, then commit immediately
 
-Before staging anything, run the same `preview-on-error` validator as
-[`/commit`](../commit.md) step 5. Each generated message must match
-`^(feat|fix|chore|docs|refactor|test|perf|style|build|ci|revert)(\([^)]+\))?!?: .+`.
+Before staging anything, pipe every generated subject through
+`agent-config git:convention subject`, as [`/commit`](../commit.md) step 5 does.
+
+- **Exit `0`** → proceed silently; a `note:` line naming a `commit-msg` hook
+  or a commitlint config is not a stop — that validator runs at commit, and a
+  rejection there stops the run like any failed commit.
+- **Exit `1`** → stop, print the verb's output (each failed subject and its
+  rule, or the format it could not read), hand back to the user.
+  Do **not** auto-commit broken messages even though confirmation is
+  otherwise suppressed.
 
-- **All valid** → proceed silently.
-- **Any invalid** → stop, print the failed message(s) + the regex,
-  hand back to the user. Do **not** auto-commit broken messages even
-  though confirmation is otherwise suppressed.
+An approved convention card an earlier [`/commit`](../commit.md) wrote and left
+uncommitted (`agents/memory/curated/conventions/approved/commit-subject.md`,
+unstaged or untracked) rides in the first chunk: add it with that chunk's files
+(`git add -- agents/memory/curated/conventions/approved/commit-subject.md`), so
+every worktree and clone reads the convention it was approved under.
 
 For each planned commit in order:
 
@@ -98,29 +118,18 @@ git commit -m "{message}"
 No "looks good?" prompt. No confirmation step. The user invoked this
 command knowing the plan would be executed.
 
-### 5. Report (verbosity-gated)
-
-Read `verbosity.post_action_reports` from `.agent-settings.yml` (default
-`minimal`). Same contract as [`/commit`](../commit.md) step 7.
-
-- `off` → emit nothing (still run `git log --oneline -N` silently for
-  the agent's own verification).
-- `minimal` (default) → one line:
+### 5. Report
 
-  ```
-  → N commits created
-  ```
+Same contract as [`/commit`](../commit.md) step 7 — one line (run
+`git log --oneline -N` silently for the agent's own verification):
 
-- `full` → full summary:
-
-  ```
-  Created N commits:
-  1. {sha1}  feat(DEV-1234): {summary}
-  2. {sha2}  test(DEV-1234): {summary}
-  3. {sha3}  chore: {summary}
-  ```
+```
+→ N commits created
+```
 
-  Include `git log --oneline -N` output for verification.
+A run that measured because no convention was
+established adds the verb's `verdict` line and `→ run /commit once to choose and
+record the convention`.
 
 ## Rules