@event4u/agent-config 2.26.0 → 3.1.0

package/.agent-src/rules/no-cheap-questions.md

@@ -4,64 +4,78 @@ tier: "3"
 description: "No cheap questions — never ask what context answers, never offer Iron-Law-violating options, never stage no-trade-off choices; mode-independent (off / auto / on)"
 alwaysApply: true
 source: package
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # No Cheap Questions
 
-A question is **cheap** when context already answers it, an option breaches an Iron Law, choices differ only in sequencing / format, or one option is dominant. Mode-independent. Autonomy never lifts the floor.
+Cheap = context answers it, option breaches an Iron Law, choices differ only in sequencing / format, or one option dominates. Mode-independent; autonomy never lifts the floor.
 
 ## The Iron Laws
 
 ```
-NEVER ASK WHAT THE STATED CONTEXT ALREADY ANSWERS.
-NEVER PRESENT AN OPTION THAT VIOLATES AN IRON LAW.
-NEVER OFFER NUMBERED CHOICES WITHOUT A REAL TRADE-OFF.
+NEVER ASK WHAT CONTEXT ANSWERS.
+NEVER OFFER AN IRON-LAW-VIOLATING OPTION.
+NEVER NUMBER CHOICES WITHOUT A REAL TRADE-OFF.
 ```
 
-## Cheap classes
-
-Sequencing · format-only · commit asks · CI / test asks · fenced re-ask · Iron-Law option · context-derived · dominant option · re-ask after decline · paternalistic (Iron Law 3) · continuation under mandate (Iron Law 4). Catalog: [`asking-and-brevity-examples`](../docs/guidelines/agent-infra/asking-and-brevity-examples.md#cheap-question-class-catalog--extended-examples).
+Cheap-class catalog + IL 3 (no paternalistic state-assuming options): [`cheap-question-mechanics § cheap classes`](../contexts/execution/cheap-question-mechanics.md#cheap-classes--full-catalog).
 
 ## Iron Law 4 — No Continuation Prompts Under Autonomous Mandate
 
 ```
-WHEN A STANDING AUTONOMOUS MANDATE IS ACTIVE — /roadmap:process-full,
-/roadmap:process-phase, EXPLICIT "ENTSCHEIDE SELBST / DECIDE AND DON'T
-ASK" — NEVER ASK "WEITER? / NEXT STEP? / SHALL I CONTINUE?".
-A CLEAN EDIT-BATCH IS NOT A HALT CONDITION. THE ONLY HALTS ARE THE
-FIVE NAMED IN THE INVOKING COMMAND (HARD-FLOOR, COUNCIL-OFF +
-AMBIGUITY, SECURITY-SENSITIVE, SCOPE-OUT-OF-ROADMAP, TEST/QUALITY RED).
+STANDING AUTONOMOUS MANDATE ACTIVE → NEVER ASK
+"WEITER? / NEXT STEP? / SHALL I CONTINUE?".
+A CLEAN EDIT-BATCH IS NOT A HALT CONDITION.
+```
+
+Mandate triggers + halt list: [`cheap-question-mechanics § Iron Law 4`](../contexts/execution/cheap-question-mechanics.md#iron-law-4--halt-conditions-under-autonomous-mandate).
+
+## Iron Law 5 — Prereq Work Is Execution, Not a Question
+
+```
+USER AUTHORIZES X ("COMMIT" / "PUSH" / "OPEN PR" / "DEPLOY")
+→ ALL PREREQ WORK IS EXECUTION. NEVER ASK, NEVER OFFER
+"DO THE PREREQ" vs "SKIP AND BREAK THE GATE".
 ```
 
-## Iron Law 3 — No Paternalistic State-Assuming Options
+Prereq catalog + halt conditions: [`cheap-question-mechanics § Iron Law 5`](../contexts/execution/cheap-question-mechanics.md#iron-law-5--prereq-examples-silent-execution-never-a-question).
+
+## Iron Law 6 — Destination Already Stated, Never Re-Ask
 
 ```
-NEVER FABRICATE USER STATE TO JUSTIFY AN OPTION.
-"TAKE A BREAK", "SLEEP ON IT", "COME BACK FRESH" — FORBIDDEN.
-THE USER DECIDES WHEN TO STOP. THE AGENT DECIDES WHAT TO BUILD NEXT.
+USER NAMED THE DESTINATION → DO NOT RE-ASK.
+NO BRANCH-BASE INVENTORY, NO "WHICH BRANCH?", NO "NEW PR?".
 ```
 
+Triggers + scope-control interaction: [`cheap-question-mechanics § Iron Law 6`](../contexts/execution/cheap-question-mechanics.md#iron-law-6--destination-triggers-never-re-ask).
+
 ## Pre-Send Self-Check — MANDATORY before every question
 
-Silent, before any numbered-options block:
+Silent, before any numbered-options block. Any "yes" → don't ask:
 
-1. Answer already in stated context?
-2. Option violates `commit-policy`, `scope-control § git-ops`, or `non-destructive-by-default`?
+1. Answer in stated context?
+2. Option violates `commit-policy` / `scope-control § git-ops` / `non-destructive-by-default`?
 3. Pure sequencing / format, no trade-off?
 4. One option obviously dominant?
 5. User fenced step (*"plan only"*, *"review first"*) → deliver + handback.
 6. User already declined? Re-ask forbidden.
-7. Option assumes user fatigue / frustration without in-message citation? Iron Law 3 — drop.
-8. Standing autonomous mandate + "weiter? / continue?" — Iron Law 4, drop; pick next item.
-
-Any "yes" → don't ask. Pick dominant path, state inline assumption, hand back. Genuine ambiguity → [`ask-when-uncertain`](ask-when-uncertain.md).
-
-## When asking IS allowed
+7. Assumes user fatigue / frustration without citation? IL 3.
+8. Mandate active + "weiter? / continue?" — IL 4, pick next item.
+9. Prereq for user-authorized action? IL 5, execute silently.
+10. Destination (branch / PR) already named? IL 6, never re-ask.
 
-- Real architectural / scope decision with non-obvious trade-offs.
-- Vague-request trigger ([`ask-when-uncertain`](ask-when-uncertain.md)).
-- Security-sensitive ([`security-sensitive-stop`](security-sensitive-stop.md)).
-- Hard Floor ([`non-destructive-by-default`](non-destructive-by-default.md)).
-- Two genuinely-equivalent paths; user preference is the tiebreaker.
+Pick dominant path, state inline assumption, hand back. Genuine ambiguity → [`ask-when-uncertain`](ask-when-uncertain.md).
 
-In doubt → ask. This rule narrows asking, never widens silence.
+In doubt → ask. This rule narrows asking, never widens silence. When asking IS allowed: [`cheap-question-mechanics § when-asking-is-allowed`](../contexts/execution/cheap-question-mechanics.md#when-asking-is-allowed).

package/.agent-src/rules/no-roadmap-references.md

@@ -1,14 +1,14 @@
 ---
 type: "auto"
 tier: "mechanical-already"
-description: "Linking transient files (agents/roadmaps/, agents/council-*/) from a stable artifact — both layers expire; promote findings"
+description: "Linking transient files (agents/roadmaps/, agents/runtime/council/*/) from a stable artifact — both layers expire; promote findings"
 alwaysApply: false
 source: package
 triggers:
   - path_prefix: "agents/roadmaps/"
-  - path_prefix: "agents/council-questions/"
-  - path_prefix: "agents/council-responses/"
-  - path_prefix: "agents/council-sessions/"
+  - path_prefix: "agents/runtime/council/questions/"
+  - path_prefix: "agents/runtime/council/responses/"
+  - path_prefix: "agents/runtime/council/sessions/"
   - intent: "link from stable artifact"
   - intent: "link to council artefact"
 routes_to:
@@ -17,13 +17,25 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncompressed/"
     reason: "Rule contrasts the authoring tree with transient layers."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # No Transient References from Stable Artifacts
 
 Two transient layers under `agents/` outlive nothing: roadmaps in
 `agents/roadmaps/` are archived, skipped, or deleted as work
-completes; council artefacts in `agents/council-{questions,responses,
+completes; council artefacts in `agents/runtime/council/{questions,responses,
 sessions}/` are **gitignored, local-only, and auto-pruned** after
 `ai_council.session_retention_days` (default 7). Stable artifacts
 (rules, skills, commands, contexts, guidelines, AGENTS.md, README,
@@ -40,9 +52,9 @@ the consumer.
 
 ```
 NEVER LINK TO A SPECIFIC FILE IN agents/roadmaps/
-OR IN agents/council-{questions,responses,sessions}/
+OR IN agents/runtime/council/{questions,responses,sessions}/
 FROM A STABLE ARTIFACT.
-PROMOTE DURABLE CONCLUSIONS TO agents/contexts/ AND CITE THAT INSTEAD.
+PROMOTE DURABLE CONCLUSIONS TO agents/settings/contexts/ AND CITE THAT INSTEAD.
 INLINE COUNCIL CONVERGENCE WITH DATE + MEMBERS, NEVER THE PATH.
 ```
 
@@ -55,12 +67,12 @@ These paths must not appear inside a stable artifact:
 
 - `agents/roadmaps/<file>.md`, `agents/roadmaps/archive/<file>.md`,
   `agents/roadmaps/skipped/<file>.md`
-- `agents/council-questions/<file>.md`,
-  `agents/council-responses/<file>.json`,
-  `agents/council-sessions/<file>.json` or `<timestamp>/...`
+- `agents/runtime/council/questions/<file>.md`,
+  `agents/runtime/council/responses/<file>.json`,
+  `agents/runtime/council/sessions/<file>.json` or `<timestamp>/...`
 
 Stable artifact = any file under `.agent-src.uncompressed/{rules,
-skills,commands,contexts,templates,personas}/`, `agents/contexts/`,
+skills,commands,contexts,templates,personas}/`, `agents/settings/contexts/`,
 `docs/guidelines/`, `docs/contracts/`, `docs/architecture.md`,
 `docs/customization.md`, `docs/getting-started.md`, `docs/catalog.md`,
 `AGENTS.md`, `README.md`, `copilot-instructions.md`.
@@ -71,7 +83,7 @@ fail the build on any new violation.
 
 ## Allowed patterns
 
-- `agents/roadmaps/` and `agents/council-*/` as **directory** mentions
+- `agents/roadmaps/` and `agents/runtime/council/*/` as **directory** mentions
   (talking about the layer, not a specific file)
 - Roadmap → roadmap references (siblings within the transient layer)
 - The `ai-council` skill and `/council:*` commands documenting the
@@ -79,7 +91,7 @@ fail the build on any new violation.
 - Inline council convergence summary — e.g. *"Council
   (claude-sonnet-4-5 + gpt-4o, 2026-05-06) converged on …"* with
   date + members, no filepath
-- Council sessions, `agents/.agent-chat-history`, commit messages, PR
+- Council sessions, `agents/runtime/.agent-chat-history`, commit messages, PR
   descriptions — transient by construction, not part of the package
   surface
 
@@ -94,8 +106,8 @@ pragma.
 
 | Source                                         | Target                                           | Why                                                                                  |
 | ---------------------------------------------- | ------------------------------------------------ | ------------------------------------------------------------------------------------ |
-| `agents/contexts/evaluation-*.md`              | `agents/council-questions/*.md`                  | Question file is a frozen function-parameter / spend-gate input, not documentation. |
-| `docs/contracts/*.md`                          | `agents/council-sessions/*/synthesis.md`         | Synthesis is the audit-trail receipt; contract inlines the decision body itself.    |
+| `agents/settings/contexts/evaluation-*.md`              | `agents/runtime/council/questions/*.md`                  | Question file is a frozen function-parameter / spend-gate input, not documentation. |
+| `docs/contracts/*.md`                          | `agents/runtime/council/sessions/*/synthesis.md`         | Synthesis is the audit-trail receipt; contract inlines the decision body itself.    |
 
 Driven by the 2026-05-14 P3.4 council round (claude-sonnet-4-5 +
 gpt-4o, converged on rule refactor over escape-hatch overuse). Any
@@ -108,7 +120,7 @@ When a stable artifact needs to cite a transient finding:
 
 1. Identify the durable conclusion — decision, contract, lesson,
    mechanic.
-2. Promote it to a context file under `agents/contexts/` (ADR,
+2. Promote it to a context file under `agents/settings/contexts/` (ADR,
    mechanics doc, locked decision). The roadmap or council session
    can then point at the context, not the other way around.
 3. Reference the context from the stable artifact.

package/.agent-src/rules/non-destructive-by-default.md

@@ -6,6 +6,18 @@ alwaysApply: true
 source: package
 load_context:
   - ../contexts/authority/destructive-mechanics.md
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Non-Destructive by Default

package/.agent-src/rules/onboarding-gate.md

@@ -1,19 +1,32 @@
 ---
 type: "auto"
 tier: "1"
-description: "First turn of a conversation on a project — check onboarding.onboarded in .agent-settings.yml; when false, prompt to run /onboard before any request"
+description: "First turn — if onboarding.onboarded is false in .agent-settings.yml, instruct dev to run `agent-config setup` before any request"
 source: package
 triggers:
   - phrase: "first turn"
   - keyword: "onboarding"
   - path_prefix: ".agent-settings.yml"
-routes_to:
-  - "command:onboard"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Onboarding Gate
 
-**Iron Law.** First turn of a project: if `onboarding.onboarded` is false, prompt `/onboard` before executing any other request.
+**Iron Law.** First turn of project: if `onboarding.onboarded` is false in `.agent-settings.yml`, instruct dev to run `agent-config setup` in terminal before any other request. Wizard writes `onboarding.onboarded: true` on `Finish` → rule silenced after.
 
-Body migrated to `command:onboard` (per P4 of `road-to-kernel-and-router.md`).
-Trigger-set above activates this routing under the `balanced` and `full` profiles.
+`agent-config setup` boots local TypeScript server (Fastify on `127.0.0.1`), opens browser wizard at `/#/wizard`. No chat-side skill — legacy `/onboard` and its `onboard:finish` bridge have been retired; browser wizard is sole onboarding surface.
+
+Cloud surfaces without settings file stay inert: rule does not fire when `.agent-settings.yml` absent → headless / read-only contexts (Cloudflare MCP, doc preview, CI) never see prompt.
+
+Trigger-set above activates routing under `balanced` and `full` profiles.

package/.agent-src/rules/package-ci-checks.md

@@ -9,6 +9,18 @@ triggers:
   - phrase: "before pr"
 routes_to:
   - "skill:lint-skills"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Package Ci Checks

package/.agent-src/rules/persona-governance.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When creating, editing, or proposing personas — enforce per-domain cap (≤ 2 specialists), ≥ 1 skill citation, and the deprecation path"
+description: "Creating/editing/proposing personas — enforce per-domain cap (≤ 2 specialists), ≥ 1 skill citation, deprecation path"
 source: package
 triggers:
   - path_prefix: ".agent-src.uncompressed/personas/"
@@ -24,6 +24,18 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncompressed/"
     reason: "Rule documents the persona authoring tree (.agent-src.uncompressed/personas/) as the deprecation-path operand."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Persona Governance

package/.agent-src/rules/php-coding.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "3"
-description: "Writing or reviewing PHP code — strict types, naming, comparisons, early returns, Eloquent conventions"
+description: "Writing/reviewing PHP — strict types, naming, comparisons, early returns, Eloquent conventions"
 source: package
 triggers:
   - file_pattern: "*.php"
@@ -9,6 +9,18 @@ triggers:
   - keyword: "ecs"
 routes_to:
   - "guideline:php/php-coding-patterns"
+workspaces:
+  - engineering
+packs:
+  - php
+lifecycle: active
+trust:
+  level: professional
+  confidence: high
+  human_review_required: false
+install:
+  default: false
+  removable: true
 ---
 
 # Php Coding

package/.agent-src/rules/preservation-guard.md

@@ -2,7 +2,7 @@
 type: "auto"
 tier: "2b"
 alwaysApply: false
-description: "When merging, refactoring, compressing, or restructuring skills, rules, commands, or guidelines — prevent quality loss"
+description: "Merging/refactoring/compressing skills, rules, commands, or guidelines — prevent quality loss"
 source: package
 triggers:
   - intent: "merge skill"
@@ -13,6 +13,18 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncompressed/"
     reason: "Rule references the authoring tree as the operand of compression/preservation."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Preservation Guard

package/.agent-src/rules/provider-lifecycle-discipline.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When editing an AI video/image/audio adapter — declare lifecycle tier (experimental | stable | deprecated | community); never default to non-stable"
+description: "Editing an AI video/image/audio adapter — declare lifecycle tier (experimental | stable | deprecated | community); never default to non-stable"
 source: package
 triggers:
   - keyword: "/video:"
@@ -22,6 +22,18 @@ applies_to_user_types:
   - "creator"
   - "developer"
   - "maintainer"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Provider Lifecycle Discipline
@@ -33,12 +45,12 @@ NEVER DEFAULT TO A NON-STABLE PROVIDER SILENTLY.
 SURFACE THE LIFECYCLE TIER. ASK BEFORE RUNNING.
 ```
 
-This rule routes the agent to [`docs/contracts/provider-lifecycle.md`](../docs/contracts/provider-lifecycle.md) whenever a `/video:* / /image:* / /audio:*` surface fires, an adapter under `scripts/ai-video/adapters/` is read or edited, or `agents/.ai-video.xml.example` (or the operator's `agents/.ai-video.xml`) is in play. The contract defines four tiers — `experimental | stable | deprecated | community` — and the agent's obligations per tier.
+This rule routes the agent to [`docs/contracts/provider-lifecycle.md`](../docs/contracts/provider-lifecycle.md) whenever a `/video:* / /image:* / /audio:*` surface fires, an adapter under `scripts/ai-video/adapters/` is read or edited, or `agents/templates/.ai-video.xml.example` (or the operator's `agents/.ai-video.xml`) is in play. The contract defines four tiers — `experimental | stable | deprecated | community` — and the agent's obligations per tier.
 
 ## What this rule enforces
 
 1. **Read the tier before picking.** When the agent resolves a provider (from `--provider <id>`, from `<default-video-provider>` / `<default-image-provider>`, or from a skill's default), it MUST read both:
-   - the `<lifecycle>` element under `<provider id="…">` in `agents/.ai-video.xml.example` (or the operator's `.ai-video.xml`), and
+   - the `<lifecycle>` element under `<provider id="…">` in `agents/templates/.ai-video.xml.example` (or the operator's `.ai-video.xml`), and
    - the `Lifecycle:` header comment in `scripts/ai-video/adapters/<id>.sh`.
    Mismatch between the two is a contract violation and MUST be surfaced before running.
 
@@ -54,8 +66,8 @@ This rule routes the agent to [`docs/contracts/provider-lifecycle.md`](../docs/c
 
 - Running `/video:scene` against the `<default-video-provider>` without reading the lifecycle tag first → violation.
 - Picking a `community` provider because it was named in the prompt, without surfacing the tier → violation.
-- Editing an adapter and leaving its header `Lifecycle:` comment out of sync with `agents/.ai-video.xml.example` → violation (CI does not catch this; the agent must).
-- Auto-promoting an adapter from `experimental` to `stable` because "dry-run worked" → violation. Promotion requires a maintainer-captured real-API smoke trace under `agents/ai-video/smoke-traces/`.
+- Editing an adapter and leaving its header `Lifecycle:` comment out of sync with `agents/templates/.ai-video.xml.example` → violation (CI does not catch this; the agent must).
+- Auto-promoting an adapter from `experimental` to `stable` because "dry-run worked" → violation. Promotion requires a maintainer-captured real-API smoke trace under `agents/reference/ai-video/smoke-traces/`.
 
 ## Day-one state
 
@@ -65,7 +77,7 @@ All five shipped adapters (`openai-images`, `gemini-veo`, `kling`, `higgsfield`,
 
 A Python pre-run gate enumerating tier-by-command rules would either be too coarse (`experimental → block`, breaking day-to-day dev iteration) or too detailed (per-command tier matrix, drifting from reality on every new provider). The agent reading the tag at run time, surfacing the tier, and asking is the correct enforcement surface: the model that picked the provider is the model that surfaces the obligation, and the human is the policy decision point.
 
-The CI guarantee is structural reachability — the linter would fail if a provider was declared in `agents/.ai-video.xml.example` without a lifecycle tag (extension planned). It does not enforce the runtime obligation; the agent does.
+The CI guarantee is structural reachability — the linter would fail if a provider was declared in `agents/templates/.ai-video.xml.example` without a lifecycle tag (extension planned). It does not enforce the runtime obligation; the agent does.
 
 ## See also
 

package/.agent-src/rules/reviewer-awareness.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When suggesting reviewers or flagging risk hotspots — anchor in paths/risk + ownership-map + bug-patterns; medium/high needs primary + secondary"
+description: "Suggesting reviewers or flagging risk hotspots — anchor in paths/risk + ownership-map + bug-patterns; medium/high needs primary + secondary"
 source: package
 triggers:
   - keyword: "reviewer"
@@ -10,6 +10,18 @@ triggers:
   - phrase: "ownership map"
 routes_to:
   - "skill:review-routing"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Reviewer Awareness

package/.agent-src/rules/roadmap-ci-steps-policy.md

@@ -1,7 +1,7 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When authoring or executing roadmaps — forbid task ci / make test / npm run check steps when quality.local_auto_run is false; skip inline at execution"
+description: "Authoring or executing roadmaps — forbid task ci / make test / npm run check steps when quality.local_auto_run is false; skip inline"
 source: package
 triggers:
   - path_prefix: "agents/roadmaps/"
@@ -25,6 +25,18 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-settings.yml"
     reason: "Rule reads quality.local_auto_run from .agent-settings.yml; naming the file is the contract."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Roadmap CI-Steps Policy

package/.agent-src/rules/roadmap-progress-sync.md

@@ -1,12 +1,27 @@
 ---
 type: "auto"
 tier: "1"
-description: "Any roadmap touch (file move, checkbox flip, phase change) regens dashboard same response; archive at 0 open. Autonomous runs flip checkboxes inline"
+description: "Any roadmap touch (file move, checkbox flip, phase change) regens dashboard same response; archive at 0 open"
 source: package
 triggers:
   - path_prefix: "agents/roadmaps/"
+  - command: "/roadmap:process-step"
+  - command: "/roadmap:process-phase"
+  - command: "/roadmap:process-full"
 routes_to:
   - "guideline:agent-infra/roadmap-progress-mechanics"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Roadmap Progress Sync
@@ -31,6 +46,8 @@ IS A RULE VIOLATION, NOT AN OVERSIGHT.
 
 `/roadmap:process-step`, `/roadmap:process-phase`, `/roadmap:process-full`, and any other multi-step autonomous run flip the box for step N **before** moving on to step N+1. The checkbox itself is the real-time monitor — the markdown file is the source of truth, the dashboard is a derived view.
 
+`command:` triggers in this rule's frontmatter load it the moment any `/roadmap:process-*` command fires and keep it loaded for the whole run — independent of whether the agent is editing files under `agents/roadmaps/`. The loop carries its own deterministic flip-guard at [`roadmap-process-loop § 5b`](../contexts/execution/roadmap-process-loop.md#5b-flip-guard--deterministic) — defense-in-depth, not a substitute for the inline flip.
+
 **Step counts as done** when its code/doc change is written and saved AND the verification cited in the step has passed (fresh output in this reply or an earlier one).
 
 **In-progress marker.** When a step takes more than one reply, mark it `[~]` the moment work starts — the user sees one row move `[ ] → [~] → [x]` instead of silent rows. `[~]` stays open for `count_open` but advances the phase percentage.

package/.agent-src/rules/role-mode-adherence.md

@@ -1,13 +1,25 @@
 ---
 type: "auto"
 tier: "2a"
-description: "When roles.active_role is set in .agent-settings.yml — closing outputs must match the mode's contract and emit the structured mode marker"
+description: "When roles.active_role is set — closing outputs must match mode contract and emit structured mode marker"
 alwaysApply: false
 source: package
 triggers:
   - keyword: "active_role"
   - keyword: "role-mode"
   - intent: "mode marker"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Role Mode Adherence

package/.agent-src/rules/rule-type-governance.md

@@ -1,12 +1,24 @@
 ---
 type: "auto"
 tier: "2a"
-description: "Creating or editing rules, or auditing rule types — decides when a rule should be always vs auto"
+description: "Creating/editing rules, or auditing rule types — decides when a rule should be always vs auto"
 source: package
 triggers:
   - path_prefix: ".agent-src.uncompressed/rules/"
 routes_to:
   - "guideline:agent-infra/rule-type-governance"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Rule Type Governance

package/.agent-src/rules/runtime-safety.md

@@ -2,12 +2,24 @@
 type: auto
 tier: "2b"
 source: package
-description: "When a skill declares execution metadata — enforce safety constraints for assisted and automated execution types"
+description: "Skill declares execution metadata — enforce safety constraints for assisted/automated execution types"
 triggers:
   - keyword: "execution"
   - keyword: "automated"
   - keyword: "assisted"
   - keyword: "handler"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Runtime Safety

package/.agent-src/rules/scope-control.md

@@ -7,6 +7,18 @@ source: package
 load_context:
   - ../contexts/authority/scope-mechanics.md
   - ../contexts/authority/kernel-rule-edits.md
+workspaces:
+  - engineering
+packs:
+  - engineering-base
+lifecycle: active
+trust:
+  level: core
+  confidence: high
+  human_review_required: false
+install:
+  default: true
+  removable: false
 ---
 
 # Scope Control