@event4u/agent-config 2.25.0 → 3.0.0

package/scripts/lint_framework_leakage_allowlist.json

@@ -0,0 +1,477 @@
+{
+  "version": 1,
+  "_doc": "Each entry: { file: relative path from repo root, lines: [int,...] | \"*\" for whole file, reason: short justification }. Use sparingly — first ask whether the file should be neutralized instead.",
+  "entries": [
+    {
+      "file": ".agent-src.uncompressed/skills/using-git-worktrees/SKILL.md",
+      "lines": [
+        142,
+        143,
+        144,
+        164
+      ],
+      "reason": "Multi-stack package-manager comparison table"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/refine-prompt/SKILL.md",
+      "lines": [
+        100,
+        102,
+        104,
+        149,
+        192,
+        281
+      ],
+      "reason": "Project-detection enumeration listing all supported stacks"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/analyze-reference-repo.md",
+      "lines": [
+        62
+      ],
+      "reason": "Manifest-file enumeration across ecosystems"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/optimize/augmentignore.md",
+      "lines": "*",
+      "reason": "Per-stack augmentignore rules — by definition stack-aware"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/optimize/rtk.md",
+      "lines": "*",
+      "reason": "Per-tool rtk filter detection — by definition tool-aware"
+    },
+    {
+      "file": ".agent-src.uncompressed/rules/framework-neutrality-in-generic-skills.md",
+      "lines": "*",
+      "reason": "The neutrality rule itself enumerates the forbidden tokens to forbid them"
+    },
+    {
+      "file": ".agent-src.uncompressed/rules/roadmap-ci-steps-policy.md",
+      "lines": [
+        4,
+        11,
+        12,
+        66
+      ],
+      "reason": "Roadmap CI policy explicitly enumerates forbidden commands and trigger keywords"
+    },
+    {
+      "file": ".agent-src.uncompressed/rules/architecture.md",
+      "lines": [
+        31,
+        32,
+        38,
+        39,
+        74
+      ],
+      "reason": "Stack-routing pointers and cross-stack enumeration of validation/handler primitives"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/api-endpoint/SKILL.md",
+      "lines": [
+        53,
+        70
+      ],
+      "reason": "Cross-stack validation primitive enumeration and pointer to laravel-api-endpoint carve-out"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/code-review/SKILL.md",
+      "lines": [
+        52,
+        53,
+        54,
+        61,
+        74,
+        75,
+        86,
+        95,
+        97,
+        99,
+        231
+      ],
+      "reason": "Cross-stack code-review checklist enumerates handler shape, validation, authz, ORM, escaping per framework"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/security/SKILL.md",
+      "lines": [
+        28,
+        35,
+        39,
+        40,
+        49,
+        53,
+        60,
+        70,
+        88
+      ],
+      "reason": "Cross-stack security review enumerates auth primitives (Policies, voters, guards, middleware) and config paths"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/verify-completion-evidence/SKILL.md",
+      "lines": [
+        65,
+        66,
+        67,
+        112,
+        189
+      ],
+      "reason": "Evidence-mapping table enumerates the type-checker / linter / refactor tool per stack including PHPStan, Rector, ECS"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/tests/execute.md",
+      "lines": "*",
+      "reason": "Multi-stack test runner dispatch (Pest/PHPUnit/Jest/pytest/cargo-test) — enumerates per-stack commands by design"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/tests/create.md",
+      "lines": "*",
+      "reason": "Multi-stack test framework selection — enumerates Pest/PHPUnit/Jest/pytest options by design"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/module/explore.md",
+      "lines": "*",
+      "reason": "Multi-stack module detection (Laravel HMVC / Symfony bundles / DDD-lite) — enumerates per-stack patterns by design"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/package-test.md",
+      "lines": "*",
+      "reason": "Multi-stack package linking (composer/npm/pip/cargo/go) — declared in skills frontmatter"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/package-reset.md",
+      "lines": "*",
+      "reason": "Multi-stack package reset (composer/npm) — declared in skills frontmatter"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/dependency-upgrade/SKILL.md",
+      "lines": "*",
+      "reason": "Multi-stack dependency upgrade examples (composer/npm/pip) — declared stack-agnostic in description"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/fe-design/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack frontend design enumerates Blade/Livewire/Flux/React-shadcn for stack-routing dispatch"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/code-refactoring/SKILL.md",
+      "lines": "*",
+      "reason": "Multi-stack refactoring examples (Laravel app/Modules + Nx + mono-repo) per stack-detection"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/database/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack ORM enumeration (Eloquent/Doctrine) with carve-out pointers"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/project-analyze.md",
+      "lines": "*",
+      "reason": "Stack-detection templates show per-framework default outputs (Laravel/Standalone PHP/etc.) — multi-stack by design"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/commit.md",
+      "lines": "*",
+      "reason": "Example commit block uses Laravel paths from a reference project; the procedure itself is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/test-driven-development/SKILL.md",
+      "lines": "*",
+      "reason": "Multi-stack TDD examples — PHP/Pest and TypeScript/Jest sections both present"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/context-authoring/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack context examples enumerate per-stack auth/ORM primitives"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/migration-architect/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack migration architecture enumerates laravel-migration/Doctrine/Alembic/Prisma carve-outs"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/api-design/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack API design enumerates per-framework validation/handler primitives"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/error-handling-patterns/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack error handling enumerates exceptions/Result/Maybe per language"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/security-audit/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack security audit enumerates per-stack auth/ORM/escaping primitives"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/skill-writing/SKILL.md",
+      "lines": "*",
+      "reason": "Skill-writing references PHPStan/Pest as examples drawn from this package's own dogfooded skills"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/systematic-debugging/SKILL.md",
+      "lines": "*",
+      "reason": "Debugging examples drawn from PHP project; the procedure is stack-agnostic (reproduce → isolate → hypothesize → verify)"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/testing-anti-patterns/SKILL.md",
+      "lines": "*",
+      "reason": "Anti-pattern examples drawn from Pest/PHPUnit; the iron laws apply to all test frameworks"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/testing-anti-patterns/process-anti-patterns.md",
+      "lines": "*",
+      "reason": "Anti-pattern examples drawn from Pest; the rules apply to all test frameworks"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/api-testing/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack API testing enumerates Pest/PHPUnit/Jest/pytest"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/agent-docs-writing/SKILL.md",
+      "lines": "*",
+      "reason": "Agent-docs examples reference PHPStan/Pest as this package's dogfooded toolchain"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/bug-analyzer/SKILL.md",
+      "lines": "*",
+      "reason": "Bug-analysis examples drawn from PHP project; the procedure is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/defense-in-depth/SKILL.md",
+      "lines": "*",
+      "reason": "Defense-in-depth examples enumerate per-stack validation primitives"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/existing-ui-audit/SKILL.md",
+      "lines": "*",
+      "reason": "UI-audit references Blade/Livewire/Flux/React-shadcn as stack-routing options"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/form-handler/SKILL.md",
+      "lines": "*",
+      "reason": "Form-handling examples enumerate per-framework validation/submission primitives"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/learning-to-rule-or-skill/SKILL.md",
+      "lines": "*",
+      "reason": "Examples drawn from PHP/Pest as this package's dogfooded toolchain"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/markitdown/SKILL.md",
+      "lines": "*",
+      "reason": "Markitdown skill references Composer/pip as install paths"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/mcp/SKILL.md",
+      "lines": "*",
+      "reason": "MCP examples enumerate Python/Node/PHP server implementations"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/mcp-builder/SKILL.md",
+      "lines": "*",
+      "reason": "MCP-builder enumerates Python FastMCP and Node TypeScript SDK with examples per language"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/readme-writing/SKILL.md",
+      "lines": "*",
+      "reason": "README examples reference composer.json/package.json/pyproject.toml per ecosystem"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/ui-component-architect/SKILL.md",
+      "lines": "*",
+      "reason": "Cross-stack UI component architecture enumerates Blade/Livewire/React"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/bug-investigate.md",
+      "lines": "*",
+      "reason": "Bug-investigate examples reference PHPStan/Pest from package's dogfooded toolchain"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/commit/in-chunks.md",
+      "lines": "*",
+      "reason": "Commit-in-chunks examples drawn from Laravel reference project; procedure is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/compress.md",
+      "lines": "*",
+      "reason": "Compress command references this package's own .agent-src.uncompressed Laravel-tooling examples"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/council/default.md",
+      "lines": "*",
+      "reason": "AI Council examples reference PHP/Laravel from package's dogfooded toolchain"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/fix/pr-bot-comments.md",
+      "lines": "*",
+      "reason": "PR-comment fix examples reference Rector/PHPStan from package's dogfooded toolchain"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/fix/pr-developer-comments.md",
+      "lines": "*",
+      "reason": "PR developer-comment fix examples reference PHP review patterns from package's dogfooded toolchain"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/quality-fix.md",
+      "lines": "*",
+      "reason": "Quality-fix dispatches per stack (PHPStan/ECS/Rector for PHP, tsc/biome for JS) — multi-stack by design"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/roadmap/create.md",
+      "lines": "*",
+      "reason": "Roadmap creation examples drawn from this package's own Laravel-tooling work"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/rule-compliance-audit.md",
+      "lines": "*",
+      "reason": "Rule-audit examples reference this package's own rule corpus including PHP/Laravel rules"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/blast-radius-analyzer/SKILL.md",
+      "lines": "*",
+      "reason": "Blast-radius examples drawn from Laravel reference project; procedure is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/data-flow-mapper/SKILL.md",
+      "lines": "*",
+      "reason": "Data-flow examples drawn from Laravel reference project; procedure is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/file-editor/SKILL.md",
+      "lines": "*",
+      "reason": "File-editor references PHP filename heuristic for IDE detection"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/launch-readiness/SKILL.md",
+      "lines": "*",
+      "reason": "Launch-readiness checklist references Laravel Pulse/Horizon as monitoring options"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/logging-monitoring/SKILL.md",
+      "lines": "*",
+      "reason": "Logging-monitoring enumerates per-stack log shippers including Laravel channels"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/memory-consolidation/SKILL.md",
+      "lines": "*",
+      "reason": "Memory examples drawn from PHP/Laravel reference project; procedure is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/performance/SKILL.md",
+      "lines": "*",
+      "reason": "Performance examples drawn from Laravel reference project; principles are stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/po-discovery/SKILL.md",
+      "lines": "*",
+      "reason": "PO-discovery examples drawn from Laravel reference project; procedure is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/project-analyzer/SKILL.md",
+      "lines": "*",
+      "reason": "Project-analyzer skill enumerates vendor/ and node_modules/ as third-party paths to exclude"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/readme-reviewer/SKILL.md",
+      "lines": "*",
+      "reason": "README reviewer enumerates composer.json/package.json/pyproject.toml per ecosystem"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/repomix-packer/SKILL.md",
+      "lines": "*",
+      "reason": "Repomix examples drawn from package's own Laravel toolchain"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/roadmap-management/SKILL.md",
+      "lines": "*",
+      "reason": "Roadmap examples drawn from this package's own framework-neutrality work"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/rule-writing/SKILL.md",
+      "lines": "*",
+      "reason": "Rule-writing examples reference this package's own dogfooded PHP/Laravel rules"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/sentry-integration/SKILL.md",
+      "lines": "*",
+      "reason": "Sentry integration examples drawn from Laravel reference project"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/skill-reviewer/SKILL.md",
+      "lines": "*",
+      "reason": "Skill-reviewer references this package's own dogfooded PHP/Laravel skills"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/upstream-contribute/SKILL.md",
+      "lines": "*",
+      "reason": "Upstream-contribute examples drawn from this package's own Laravel-tooling contributions"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/agents/init.md",
+      "lines": "*",
+      "reason": "Agents-init references PHP/Laravel as one detected stack"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/challenge-me/vision.md",
+      "lines": "*",
+      "reason": "Challenge-me examples drawn from PHP/Laravel reference project"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/challenge-me/with-docs.md",
+      "lines": "*",
+      "reason": "Challenge-me examples drawn from PHP/Laravel reference project"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/feature/dev.md",
+      "lines": "*",
+      "reason": "Feature-dev examples drawn from Laravel reference project; procedure is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/jira-ticket.md",
+      "lines": "*",
+      "reason": "Jira-ticket examples drawn from Laravel reference project; procedure is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/override/create.md",
+      "lines": "*",
+      "reason": "Override-create examples drawn from this package's own Laravel-rule overrides"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/project-health.md",
+      "lines": "*",
+      "reason": "Project-health examples drawn from Laravel reference project; check itself is stack-agnostic"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/sync-agent-settings.md",
+      "lines": "*",
+      "reason": "Sync-agent-settings references PHP/Laravel from package's dogfooded toolchain"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/sync-gitignore.md",
+      "lines": "*",
+      "reason": "Sync-gitignore enumerates per-stack ignore patterns including PHP/Composer"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/sync-gitignore/fix.md",
+      "lines": "*",
+      "reason": "Sync-gitignore-fix enumerates per-stack ignore patterns"
+    },
+    {
+      "file": ".agent-src.uncompressed/commands/upstream-contribute.md",
+      "lines": "*",
+      "reason": "Upstream-contribute examples drawn from this package's own Laravel-tooling contributions"
+    },
+    {
+      "file": ".agent-src.uncompressed/skills/code-review/SKILL.md",
+      "lines": [235],
+      "reason": "Multi-stack formatter enumeration (ECS, Prettier, Ruff, gofmt) — comparative example, no project mandate"
+    },
+    {
+      "file": ".agent-src.uncompressed/rules/architecture.md",
+      "lines": [80],
+      "reason": "Multi-framework module-system enumeration (Laravel, Turborepo, NestJS, Go) — comparative example, no project mandate"
+    }
+  ]
+}

package/scripts/lint_ghostwriter_source.py

@@ -7,7 +7,7 @@ Two storage tiers exist (see docs/contracts/ghostwriter-schema.md):
     fictional fixtures ONLY (`fictional: true`). Every file stem must
     be on scripts/ghostwriter_fixture_allowlist.txt. `aliases:` is
     forbidden here (consumer-only feature).
-  * agents/ghostwriter/                    — consumer real-person
+  * agents/reference/ghostwriter/                    — consumer real-person
     profiles. Gitignored. Must NOT carry `fictional: true`. Optional
     `aliases:` list validated per § Aliases storage rules.
 

package/scripts/lint_load_context.py

@@ -3,7 +3,7 @@
 
 Validates per docs/contracts/load-context-schema.md:
   - Paths exist and are .md
-  - Allowed roots only (.agent-src*/contexts/, agents/contexts/)
+  - Allowed roots only (.agent-src*/contexts/, agents/settings/contexts/)
   - No public→project-local leak (warn)
   - No circular refs across lazy + eager edges
   - Combined char-budget for eager edges (rule + eager targets ≤ cap)
@@ -32,7 +32,7 @@ SCAN_DIRS = [
 ALLOWED_PREFIXES = (
     "contexts/",                               # logical name (canonical — P1.1 / P5.3)
     ".agent-src/contexts/",                    # projected (defensive — only seen in compressed inputs)
-    "agents/contexts/",                        # project-local
+    "agents/settings/contexts/",                        # project-local
 )
 
 # `.agent-src.uncompressed/contexts/` was the legacy fully-qualified form
@@ -48,7 +48,7 @@ LEGACY_PREFIX = ".agent-src.uncompressed/contexts/"
 SOURCE_ROOT = ROOT / ".agent-src.uncompressed"
 
 PUBLIC_RULE_PREFIX = ".agent-src.uncompressed/rules/"
-PROJECT_LOCAL_PREFIX = "agents/contexts/"
+PROJECT_LOCAL_PREFIX = "agents/settings/contexts/"
 
 
 def resolve_entry(entry: str) -> Path:

package/scripts/lint_mcp_registry_manifest.py

@@ -0,0 +1,69 @@
+#!/usr/bin/env python3
+"""Lint `dist/mcp/registry-manifest.json` against its JSON Schema.
+
+Asserts:
+  * file exists
+  * validates against `docs/contracts/mcp-registry-manifest.schema.json`
+  * `dist/mcp/awesome-mcp-servers.row.md` is non-empty and parses as a
+    single Markdown table row (one `|`-delimited line)
+  * `dist/mcp/mcp-cloudflare-catalogue.json` is valid JSON
+
+Exits 0 on success, 1 on any failure. `--quiet` suppresses the OK line.
+
+Roadmap: agents/roadmaps/strategic-visibility-mcp-topics-positioning.md Phase 2 exit gate.
+"""
+from __future__ import annotations
+
+import argparse
+import json
+import sys
+from pathlib import Path
+
+import jsonschema
+
+ROOT = Path(__file__).resolve().parents[1]
+SCHEMA = ROOT / "docs" / "contracts" / "mcp-registry-manifest.schema.json"
+MANIFEST = ROOT / "dist" / "mcp" / "registry-manifest.json"
+ROW_MD = ROOT / "dist" / "mcp" / "awesome-mcp-servers.row.md"
+CF_JSON = ROOT / "dist" / "mcp" / "mcp-cloudflare-catalogue.json"
+
+
+def _fail(msg: str) -> int:
+    print(f"\u274c  {msg}", file=sys.stderr)
+    return 1
+
+
+def main() -> int:
+    ap = argparse.ArgumentParser(description=__doc__.splitlines()[0])
+    ap.add_argument("--quiet", action="store_true")
+    args = ap.parse_args()
+
+    for p in (SCHEMA, MANIFEST, ROW_MD, CF_JSON):
+        if not p.exists():
+            return _fail(f"missing: {p.relative_to(ROOT)}")
+
+    schema = json.loads(SCHEMA.read_text(encoding="utf-8"))
+    manifest = json.loads(MANIFEST.read_text(encoding="utf-8"))
+    try:
+        jsonschema.Draft202012Validator(schema).validate(manifest)
+    except jsonschema.ValidationError as e:
+        return _fail(f"schema validation: {e.message} at {list(e.absolute_path)}")
+
+    row = ROW_MD.read_text(encoding="utf-8").strip()
+    if not row:
+        return _fail("awesome-mcp-servers.row.md is empty")
+    if row.count("\n") != 0 or row.count("|") < 4:
+        return _fail("awesome-mcp-servers.row.md must be a single `|`-delimited row")
+
+    try:
+        json.loads(CF_JSON.read_text(encoding="utf-8"))
+    except json.JSONDecodeError as e:
+        return _fail(f"mcp-cloudflare-catalogue.json: {e}")
+
+    if not args.quiet:
+        print(f"\u2705  mcp registry manifest OK ({len(manifest['registries'])} registries)")
+    return 0
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/scripts/lint_media_policy_linkage.py

@@ -1,18 +1,18 @@
 #!/usr/bin/env python3
 """Lint structural reachability of media governance policies.
 
-Every policy file under `agents/policies/media/` (except README) must
+Every policy file under `agents/settings/policies/media/` (except README) must
 be linked from at least one of:
 
   * a skill SKILL.md (any .agent-src.uncompressed/skills/*/SKILL.md
     or .claude/skills/*/SKILL.md),
   * a routing rule under .agent-src.uncompressed/rules/, or
-  * a sibling policy file under agents/policies/media/.
+  * a sibling policy file under agents/settings/policies/media/.
 
 A policy that no surface references is a silent policy and a silent
 policy is a failed policy. This is the CI-side reachability guarantee
 the agent-in-the-loop enforcement model rests on (see
-agents/policies/media/README.md § Enforcement model).
+agents/settings/policies/media/README.md § Enforcement model).
 
 Exit codes:
   0  all policies linked
@@ -66,7 +66,7 @@ def collect_scan_files() -> list[Path]:
 def referrers_for(policy: Path, scan_files: list[Path]) -> list[Path]:
     """Return files that reference `policy` by its repo-relative name
     or basename. We accept both the full path token
-    (`agents/policies/media/likeness.md`) and the bare basename
+    (`agents/settings/policies/media/likeness.md`) and the bare basename
     (`likeness.md`) inside a markdown link, because sibling policies
     link via relative `[likeness.md](likeness.md)` form.
     """
@@ -91,7 +91,7 @@ def referrers_for(policy: Path, scan_files: list[Path]) -> list[Path]:
 def main() -> int:
     if not POLICY_DIR.exists():
         emit(
-            "media-policy-linkage: agents/policies/media/ missing — "
+            "media-policy-linkage: agents/settings/policies/media/ missing — "
             "nothing to lint."
         )
         return 0
@@ -99,7 +99,7 @@ def main() -> int:
     policies = collect_policies()
     if not policies:
         emit(
-            "media-policy-linkage: agents/policies/media/ has no policy "
+            "media-policy-linkage: agents/settings/policies/media/ has no policy "
             "files — nothing to lint."
         )
         return 0