@event4u/agent-config 3.3.0 → 4.2.0

package/docs/contracts/rule-interactions.yml

@@ -8,7 +8,7 @@
 # Schema:
 #   version: integer
 #   rules: list of rule slugs that participate in any interaction (each
-#     must exist as `.agent-src.uncompressed/rules/<slug>.md`)
+#     must exist as `.agent-src.uncondensed/rules/<slug>.md`)
 #   pairs: list of pairwise interactions
 #     - id:        kebab-case stable identifier
 #       rules:     [senior, junior] — `senior` wins on conflict
@@ -49,8 +49,8 @@ pairs:
       numbered-options block, wait for explicit user confirmation on
       this turn before proceeding.
     evidence:
-      - .agent-src.uncompressed/rules/non-destructive-by-default.md#the-iron-law
-      - .agent-src.uncompressed/rules/autonomous-execution.md#hard-floor--see-non-destructive-by-default
+      - .agent-src.uncondensed/rules/non-destructive-by-default.md#the-iron-law
+      - .agent-src.uncondensed/rules/autonomous-execution.md#hard-floor--see-non-destructive-by-default
 
   - id: ndd-x-scope-control
     rules: [non-destructive-by-default, scope-control]
@@ -64,9 +64,9 @@ pairs:
       cannot be weakened by future scope-control edits. On any conflict,
       the floor wins.
     evidence:
-      - .agent-src.uncompressed/rules/non-destructive-by-default.md#the-iron-law
-      - .agent-src.uncompressed/rules/scope-control.md#git-operations--permission-gated
-      - .agent-src.uncompressed/rules/scope-control.md#production-infrastructure-bulk-destructive--hard-floor
+      - .agent-src.uncondensed/rules/non-destructive-by-default.md#the-iron-law
+      - .agent-src.uncondensed/rules/scope-control.md#git-operations--permission-gated
+      - .agent-src.uncondensed/rules/scope-control.md#production-infrastructure-bulk-destructive--hard-floor
 
   - id: ndd-x-commit-policy
     rules: [non-destructive-by-default, commit-policy]
@@ -82,8 +82,8 @@ pairs:
       then commit. The four exceptions cover *whether* commits happen;
       the floor covers *which diffs* still need a separate confirmation.
     evidence:
-      - .agent-src.uncompressed/rules/non-destructive-by-default.md#the-iron-law
-      - .agent-src.uncompressed/rules/commit-policy.md#hard-floor-still-applies--bulk-deletions-and-infra-changes
+      - .agent-src.uncondensed/rules/non-destructive-by-default.md#the-iron-law
+      - .agent-src.uncondensed/rules/commit-policy.md#hard-floor-still-applies--bulk-deletions-and-infra-changes
 
   - id: ndd-x-ask-when-uncertain
     rules: [non-destructive-by-default, ask-when-uncertain]
@@ -97,8 +97,8 @@ pairs:
       provides the question shape (one numbered-options block, blocking).
       No conflict; both fire harmoniously.
     evidence:
-      - .agent-src.uncompressed/rules/non-destructive-by-default.md#failure-modes
-      - .agent-src.uncompressed/rules/ask-when-uncertain.md#vague-request-triggers--must-ask
+      - .agent-src.uncondensed/rules/non-destructive-by-default.md#failure-modes
+      - .agent-src.uncondensed/rules/ask-when-uncertain.md#vague-request-triggers--must-ask
 
   - id: ndd-x-verify-before-complete
     rules: [non-destructive-by-default, verify-before-complete]
@@ -112,8 +112,8 @@ pairs:
       verification evidence in the same message. Skipping either is a
       rule violation.
     evidence:
-      - .agent-src.uncompressed/rules/non-destructive-by-default.md#the-iron-law
-      - .agent-src.uncompressed/rules/verify-before-complete.md#the-iron-law
+      - .agent-src.uncondensed/rules/non-destructive-by-default.md#the-iron-law
+      - .agent-src.uncondensed/rules/verify-before-complete.md#the-iron-law
 
   - id: autonomy-x-scope-control
     rules: [scope-control, autonomous-execution]
@@ -127,8 +127,8 @@ pairs:
       suppresses *trivial* questions only; git-shape decisions are
       blocking. Stop and ask.
     evidence:
-      - .agent-src.uncompressed/rules/scope-control.md#git-operations--permission-gated
-      - .agent-src.uncompressed/rules/autonomous-execution.md#blocking--still-ask-regardless-of-personalautonomy
+      - .agent-src.uncondensed/rules/scope-control.md#git-operations--permission-gated
+      - .agent-src.uncondensed/rules/autonomous-execution.md#blocking--still-ask-regardless-of-personalautonomy
 
   - id: autonomy-x-commit-policy
     rules: [commit-policy, autonomous-execution]
@@ -141,8 +141,8 @@ pairs:
       committing unless one of the four exceptions applies. Autonomy
       does not add a fifth exception.
     evidence:
-      - .agent-src.uncompressed/rules/commit-policy.md#the-iron-law
-      - .agent-src.uncompressed/rules/autonomous-execution.md#commit-policy--see-commit-policy
+      - .agent-src.uncondensed/rules/commit-policy.md#the-iron-law
+      - .agent-src.uncondensed/rules/autonomous-execution.md#commit-policy--see-commit-policy
 
   - id: authority-x-ndd
     rules: [agent-authority, non-destructive-by-default]
@@ -155,8 +155,8 @@ pairs:
       Floor's Iron Law lives verbatim in `non-destructive-by-default`
       and wins every conflict. The index points; it never restates.
     evidence:
-      - .agent-src.uncompressed/rules/agent-authority.md#index-rules
-      - .agent-src.uncompressed/rules/non-destructive-by-default.md#the-iron-law
+      - .agent-src.uncondensed/rules/agent-authority.md#index-rules
+      - .agent-src.uncondensed/rules/non-destructive-by-default.md#the-iron-law
 
   - id: authority-x-scope-control
     rules: [agent-authority, scope-control]
@@ -169,8 +169,8 @@ pairs:
       scope-expansion decisions. Index never narrows or weakens the
       gate; canonical rule wins on any wording divergence.
     evidence:
-      - .agent-src.uncompressed/rules/agent-authority.md#index-rules
-      - .agent-src.uncompressed/rules/scope-control.md#git-operations--permission-gated
+      - .agent-src.uncondensed/rules/agent-authority.md#index-rules
+      - .agent-src.uncondensed/rules/scope-control.md#git-operations--permission-gated
 
   - id: authority-x-commit-policy
     rules: [agent-authority, commit-policy]
@@ -184,8 +184,8 @@ pairs:
       edits to commit-policy do not require Index updates unless the
       band ordering changes.
     evidence:
-      - .agent-src.uncompressed/rules/agent-authority.md#index-rules
-      - .agent-src.uncompressed/rules/commit-policy.md#exceptions--when-committing-is-allowed
+      - .agent-src.uncondensed/rules/agent-authority.md#index-rules
+      - .agent-src.uncondensed/rules/commit-policy.md#exceptions--when-committing-is-allowed
 
   - id: scope-x-commit-policy
     rules: [scope-control, commit-policy]
@@ -201,8 +201,8 @@ pairs:
       tag operations. On commit specifics, defer to `commit-policy`;
       on other git ops, defer to `scope-control`.
     evidence:
-      - .agent-src.uncompressed/rules/scope-control.md#git-operations--permission-gated
-      - .agent-src.uncompressed/rules/commit-policy.md#the-iron-law
+      - .agent-src.uncondensed/rules/scope-control.md#git-operations--permission-gated
+      - .agent-src.uncondensed/rules/commit-policy.md#the-iron-law
 
   - id: ask-x-direct-answers
     rules: [ask-when-uncertain, direct-answers]
@@ -218,8 +218,8 @@ pairs:
       `direct-answers` shapes *how* the question reads — no flattery,
       no padding, shortest form that fully states the choice.
     evidence:
-      - .agent-src.uncompressed/rules/ask-when-uncertain.md#iron-law--one-question-per-turn-always
-      - .agent-src.uncompressed/rules/direct-answers.md#iron-law-3--brevity-by-default
+      - .agent-src.uncondensed/rules/ask-when-uncertain.md#iron-law--one-question-per-turn-always
+      - .agent-src.uncondensed/rules/direct-answers.md#iron-law-3--brevity-by-default
 
   - id: scope-x-verify-before-complete
     rules: [verify-before-complete, scope-control]
@@ -240,8 +240,8 @@ pairs:
       Skipping either is a rule violation; satisfying one does not
       satisfy the other.
     evidence:
-      - .agent-src.uncompressed/rules/verify-before-complete.md#the-iron-law
-      - .agent-src.uncompressed/rules/scope-control.md#git-operations--permission-gated
+      - .agent-src.uncondensed/rules/verify-before-complete.md#the-iron-law
+      - .agent-src.uncondensed/rules/scope-control.md#git-operations--permission-gated
 
   - id: language-x-direct-answers
     rules: [language-and-tone, direct-answers]
@@ -256,5 +256,5 @@ pairs:
       flattery-free reply in the user's language. Neither weakens the
       other.
     evidence:
-      - .agent-src.uncompressed/rules/language-and-tone.md#iron-law--mirror-the-users-language-always
-      - .agent-src.uncompressed/rules/direct-answers.md#iron-law-1--no-flattery
+      - .agent-src.uncondensed/rules/language-and-tone.md#iron-law--mirror-the-users-language-always
+      - .agent-src.uncondensed/rules/direct-answers.md#iron-law-1--no-flattery

package/docs/contracts/rule-priority-hierarchy.md

@@ -5,7 +5,7 @@ keep-beta-until: 2026-08-12
 
 # Rule Priority Hierarchy
 
-> **Audience:** anyone reading or editing `.agent-src.uncompressed/rules/*.md`,
+> **Audience:** anyone reading or editing `.agent-src.uncondensed/rules/*.md`,
 > or trying to predict which rule wins when several fire on the same turn.
 > **Machine-readable counterpart:** [`rule-interactions.yml`](rule-interactions.yml)
 > (linted by `scripts/lint_rule_interactions.py`).
@@ -32,15 +32,15 @@ fires — that band's canonical rule decides the turn.
 
 | Band | Rule | What it gates | Lifts under |
 |---|---|---|---|
-| 1 | [`non-destructive-by-default`](../../.agent-src.uncompressed/rules/non-destructive-by-default.md) | Prod-trunk merge · deploy · push · prod data/infra · whimsical bulk deletion · bulk-deletion or infra commit | **Never.** Explicit user confirmation *this turn* only. |
-| 2 | [`security-sensitive-stop`](../../.agent-src.uncompressed/rules/security-sensitive-stop.md) | Auth · billing · tenant boundaries · secrets · file uploads · webhooks · public endpoints | Threat-model pass completed and recorded *before* the edit. |
-| 3 | [`scope-control`](../../.agent-src.uncompressed/rules/scope-control.md) | Git ops (branch · PR · tag · push · merge · rebase) · architectural changes · new libraries · scope expansion | Explicit user permission *this turn* or unrevoked standing instruction. |
-| 4 | [`ask-when-uncertain`](../../.agent-src.uncompressed/rules/ask-when-uncertain.md) | Ambiguous requirements · vague-request triggers · fenced steps | Concrete evidence resolves the ambiguity, **or** user answers the single question. |
-| 5 | [`commit-policy`](../../.agent-src.uncompressed/rules/commit-policy.md) | Any `git commit` | Four exceptions only — explicit "commit now", standing instruction, `/commit*` invocation, roadmap authorization. |
-| 6 | [`verify-before-complete`](../../.agent-src.uncompressed/rules/verify-before-complete.md) | "Done" / "complete" claims · suggestions to commit, push, or PR | Fresh verification evidence in *this* message. |
-| 7 | [`autonomous-execution`](../../.agent-src.uncompressed/rules/autonomous-execution.md) | Trivial-vs-blocking classification · autonomy opt-in detection | Per-step decision; never above bands 1–6. |
-| 8 | [`command-suggestion-policy`](../../.agent-src.uncompressed/rules/command-suggestion-policy.md) | Surfacing slash-command matches as numbered options | User always picks; nothing auto-executes. |
-| 9 | [`language-and-tone`](../../.agent-src.uncompressed/rules/language-and-tone.md) | First-token language of every reply · `.md` always English | Mirror the user's last chat message — no momentum exception. |
+| 1 | [`non-destructive-by-default`](../../.agent-src.uncondensed/rules/non-destructive-by-default.md) | Prod-trunk merge · deploy · push · prod data/infra · whimsical bulk deletion · bulk-deletion or infra commit | **Never.** Explicit user confirmation *this turn* only. |
+| 2 | [`security-sensitive-stop`](../../.agent-src.uncondensed/rules/security-sensitive-stop.md) | Auth · billing · tenant boundaries · secrets · file uploads · webhooks · public endpoints | Threat-model pass completed and recorded *before* the edit. |
+| 3 | [`scope-control`](../../.agent-src.uncondensed/rules/scope-control.md) | Git ops (branch · PR · tag · push · merge · rebase) · architectural changes · new libraries · scope expansion | Explicit user permission *this turn* or unrevoked standing instruction. |
+| 4 | [`ask-when-uncertain`](../../.agent-src.uncondensed/rules/ask-when-uncertain.md) | Ambiguous requirements · vague-request triggers · fenced steps | Concrete evidence resolves the ambiguity, **or** user answers the single question. |
+| 5 | [`commit-policy`](../../.agent-src.uncondensed/rules/commit-policy.md) | Any `git commit` | Four exceptions only — explicit "commit now", standing instruction, `/commit*` invocation, roadmap authorization. |
+| 6 | [`verify-before-complete`](../../.agent-src.uncondensed/rules/verify-before-complete.md) | "Done" / "complete" claims · suggestions to commit, push, or PR | Fresh verification evidence in *this* message. |
+| 7 | [`autonomous-execution`](../../.agent-src.uncondensed/rules/autonomous-execution.md) | Trivial-vs-blocking classification · autonomy opt-in detection | Per-step decision; never above bands 1–6. |
+| 8 | [`command-suggestion-policy`](../../.agent-src.uncondensed/rules/command-suggestion-policy.md) | Surfacing slash-command matches as numbered options | User always picks; nothing auto-executes. |
+| 9 | [`language-and-tone`](../../.agent-src.uncondensed/rules/language-and-tone.md) | First-token language of every reply · `.md` always English | Mirror the user's last chat message — no momentum exception. |
 
 **Read direction:** top-to-bottom is *priority on conflict*, not chronology.
 A turn typically touches several bands at once; the hierarchy decides
@@ -55,9 +55,9 @@ which one's Iron Law gets the final say.
   canonical rule files. This hierarchy points; it does not paraphrase.
 - **Bands 1–2 are *Hard Floors*.** No autonomy setting, no roadmap step,
   no standing instruction lifts them. See
-  [`agent-authority`](../../.agent-src.uncompressed/rules/agent-authority.md)
+  [`agent-authority`](../../.agent-src.uncondensed/rules/agent-authority.md)
   § Index rules for the matching authority statement.
-- **Unsure → ask.** [`ask-when-uncertain`](../../.agent-src.uncompressed/rules/ask-when-uncertain.md)
+- **Unsure → ask.** [`ask-when-uncertain`](../../.agent-src.uncondensed/rules/ask-when-uncertain.md)
   is the universal escape hatch when the band is unclear.
 
 ## Worked examples
@@ -73,7 +73,7 @@ which one's Iron Law gets the final say.
 
 ## Cross-references
 
-- [`agent-authority`](../../.agent-src.uncompressed/rules/agent-authority.md) — the four-band authority router (bands 1–3 + 7 of this hierarchy).
+- [`agent-authority`](../../.agent-src.uncondensed/rules/agent-authority.md) — the four-band authority router (bands 1–3 + 7 of this hierarchy).
 - [`rule-interactions.md`](rule-interactions.md) — pairwise interaction narrative + Mermaid diagram.
 - [`rule-interactions.yml`](rule-interactions.yml) — machine-readable, CI-linted matrix.
 - [`STABILITY.md`](STABILITY.md) — what the `stability: beta` tag means for breaking changes.

package/docs/contracts/rule-router.md

@@ -71,9 +71,9 @@ resolves to the target file under:
 
 | kind | path |
 |---|---|
-| `skill` | `.agent-src.uncompressed/skills/<id>/SKILL.md` |
+| `skill` | `.agent-src.uncondensed/skills/<id>/SKILL.md` |
 | `guideline` | `docs/guidelines/<id>.md` |
-| `command` | `.agent-src.uncompressed/commands/<id>.md` |
+| `command` | `.agent-src.uncondensed/commands/<id>.md` |
 | `contract` | `docs/contracts/<id>.md` |
 
 Linter checks each target exists. `command` is for procedural rules

package/docs/contracts/safety-model.md

@@ -34,7 +34,7 @@ listed there cannot be set to `allow` here.
 ## Schema
 
 ```yaml
-# .agent-src.uncompressed/profiles/<id>.yml — new top-level key
+# .agent-src.uncondensed/profiles/<id>.yml — new top-level key
 profile:
   id: <profile.id>
   # ... existing fields ...

package/docs/contracts/skill-distribution-channels.md

@@ -0,0 +1,61 @@
+# Skill Distribution Channels — canonical per AI tool
+
+**Status:** Active (locked 2026-05-25 via Phase A of `road-to-clean-skill-distribution-channels.md`)
+**Owner:** maintainer-team
+**Inputs:** [`agents/evidence/audits/2026-05-distribution-channels/`](../../agents/evidence/audits/2026-05-distribution-channels/) (audits 01 + 02), AI Council convergence `agents/runtime/council/responses/2026-05-25-canonical-channel.json` (claude-sonnet-4-5 + gpt-4o, 2026-05-25)
+
+## Rule
+
+For every AI tool the package supports, **exactly one channel** is the canonical registration surface used by the consumer installer. The other channel (where one exists at the upstream tool level) is either:
+
+- not projected into the consumer install at all (default), or
+- projected behind the `--legacy-both` opt-in flag for users on older harnesses.
+
+## Per-tool matrix
+
+| Tool | Channels supported by host | Canonical (consumer install) | Other channel behaviour | Rationale |
+|---|---|---|---|---|
+| **Claude Code** | Plugin manifest (`.claude-plugin/marketplace.json`) + filesystem (`.claude/skills/`) | **filesystem** | Manifest not projected by default; use `--legacy-both` to opt in | Cross-tool consistency. Filesystem is the only channel all six tools share. The package's own `.claude-plugin/marketplace.json` stays at the source repo for users who run `claude plugin install <name>` directly. |
+| **Augment** | Manifest with `source: "."` (`.augment-plugin/marketplace.json`) + filesystem (`.augment/`) | **filesystem** | Manifest stays — it is metadata-only, not a second registry. No `--legacy-both` needed. | The manifest points at the same directory the harness scans; one source of truth on disk. |
+| **Cursor** | Filesystem only (`.cursor/rules/*.mdc`) | **filesystem** | n/a — no second channel exists | No host-level alternative. |
+| **Cline** | Filesystem only (`.clinerules/`) | **filesystem** | n/a | No host-level alternative. |
+| **Windsurf** | Filesystem only (`.windsurf/rules/`, `.windsurf/workflows/`) | **filesystem** | n/a | No host-level alternative. |
+| **Copilot** | Single file (`.github/copilot-instructions.md` or root `copilot-instructions.md`) | **filesystem** | n/a | Single file, not a registry. |
+
+## Decision drivers
+
+1. **Cross-tool consistency.** Four of six tools have only a filesystem channel. Picking filesystem for the other two makes one rule cover everything.
+2. **Same-install dual-registration is closed by default.** If `scripts/install.sh` does not project the Claude plugin manifest into the consumer install, the harness has only the filesystem to scan, so the manifest+filesystem double-register risk is eliminated regardless of how the host harness deduplicates.
+3. **Cross-scope drift is orthogonal.** The canonical-channel decision does NOT solve the actual 2026-05-25 bug (cross-scope user-global + project-local with different frontmatter). Phase B installer guard + Phase C runtime probe close that path. They are companions to this contract, not substitutes for it.
+4. **Publication surface preserved.** The source repo continues to ship `.claude-plugin/marketplace.json` for users who want to install via `claude plugin install <event4u/agent-config>`. Removing the manifest from the **consumer install** does not affect that path.
+5. **`--legacy-both` is opt-in only.** Users on harness versions that genuinely require both channels can request the legacy projection. Default is single-channel.
+
+## Council convergence (2026-05-25)
+
+Two-round debate on whether filesystem or plugin should be canonical for Claude. The transparently-merged verdict:
+
+- **Anthropic (R2):** "MIXED leaning DISAGREE on the proposal **as written**" — pointed out that the proposal does not address cross-scope drift by itself, and that the canonical-channel decision only matters if the Claude harness double-registers on same-install. Test scenarios surfaced as critical path before locking. Conclusion: if Claude does ambient filesystem discovery (it does, in practice), **filesystem becomes canonical not by choice but because manifest adds a second registration mechanism with no isolation benefit**.
+- **OpenAI (R2):** Endorsed filesystem-canonical with a fail-loud Phase C probe. Suggested user research on `--legacy-both` adoption.
+
+Both members agreed the decision is structurally correct **conditional on** the cross-scope drift fix landing in Phase B and the probe being fail-loud in Phase C. This contract is published with those follow-up commitments.
+
+## Acceptance criteria for follow-up phases
+
+Phase B and Phase C of `road-to-clean-skill-distribution-channels.md` MUST:
+
+- (Phase B) Add a pre-install guard that detects existing installs at the other scope and either refuses, warns, or upgrades — surfaced via numbered options.
+- (Phase C) Run a probe at `agent-config setup` time AND from `scripts/install.sh --strict` that fails the install on cross-scope drift findings (per the council convergence — fail-loud, not informational).
+- (Phase A Step 4) Update `scripts/install.sh` and `task generate-tools` so the canonical channel above is what lands in the consumer install. Document `--legacy-both` for opt-in.
+
+## Out of scope
+
+- Manifest format changes upstream (Claude Code's marketplace shape) — host-controlled.
+- Alternative install paths (vendored copies, git submodules, npm `--prefix`) — package's npm install is the supported path.
+- Re-litigating the channel pick after this lock — reopened only on a new audit that surfaces a structurally different shape (e.g. a host change that removes ambient filesystem discovery).
+
+## See also
+
+- [`docs/contracts/install-scopes.md`](install-scopes.md) — companion contract for cross-scope behaviour (authored in Phase B).
+- [`docs/contracts/harness-expectations.md`](harness-expectations.md) — Phase D companion documenting host-side behaviours that look like package bugs but are not.
+- [`agents/evidence/audits/2026-05-distribution-channels/`](../../agents/evidence/audits/2026-05-distribution-channels/) — the underlying audits (01 Claude, 02 Augment, 03 installer flow).
+- [`README.md § Installation`](../../README.md) — consumer-facing install path.

package/docs/contracts/skill-domains.md

@@ -10,7 +10,7 @@ keep-beta-until: 2026-08-12
 > · **Schema:** `scripts/schemas/skill.schema.json` § `domain`
 
 Locks the canonical 6-domain taxonomy that classifies every skill in
-`.agent-src.uncompressed/skills/`. Each skill MUST declare exactly one
+`.agent-src.uncondensed/skills/`. Each skill MUST declare exactly one
 `domain:` value from the allow-list below in its `SKILL.md` frontmatter.
 
 ## § 1 — Allow-list
@@ -139,6 +139,6 @@ release notes.
 
 ## See also
 
-- [`skill-quality`](../../.agent-src.uncompressed/rules/skill-quality.md) — frontmatter contract for skills
+- [`skill-quality`](../../.agent-src.uncondensed/rules/skill-quality.md) — frontmatter contract for skills
 - [`rule-classification`](rule-classification.md) — sister taxonomy for rules (kernel vs auto)
 - `road-to-better-skills-and-profiles.md` — Block B (taxonomy lock + back-fill + folder reorg)

package/docs/contracts/smoke-contracts.md

@@ -34,10 +34,10 @@ the paths touched in the PR:
 
 | Tier | Globs that trigger | Script |
 |---|---|---|
-| kernel | `.agent-src.uncompressed/rules/**`, `.agent-src/rules/**`, `dist/router.json`, `scripts/measure_rule_budget.py` | `scripts/smoke/kernel.sh` |
-| router | `dist/router.json`, `.agent-src.uncompressed/rules/**`, `.agent-src.uncompressed/skills/**`, `docs/contracts/**`, `docs/guidelines/**` | `scripts/smoke/router.sh` |
-| schema | `.agent-src.uncompressed/skills/**`, `.agent-src.uncompressed/rules/**`, `scripts/schemas/**`, `scripts/skill_linter.py`, `scripts/validate_frontmatter.py` | `scripts/smoke/schema.sh` |
-| skills | `.agent-src.uncompressed/skills/**` | `scripts/smoke/skills.sh` |
+| kernel | `.agent-src.uncondensed/rules/**`, `.agent-src/rules/**`, `dist/router.json`, `scripts/measure_rule_budget.py` | `scripts/smoke/kernel.sh` |
+| router | `dist/router.json`, `.agent-src.uncondensed/rules/**`, `.agent-src.uncondensed/skills/**`, `docs/contracts/**`, `docs/guidelines/**` | `scripts/smoke/router.sh` |
+| schema | `.agent-src.uncondensed/skills/**`, `.agent-src.uncondensed/rules/**`, `scripts/schemas/**`, `scripts/skill_linter.py`, `scripts/validate_frontmatter.py` | `scripts/smoke/schema.sh` |
+| skills | `.agent-src.uncondensed/skills/**` | `scripts/smoke/skills.sh` |
 
 `task smoke` runs all four locally regardless of paths.
 
@@ -107,7 +107,7 @@ constant in the script body and the row below.
 ```
 
 - **5 random skills** picked deterministically (seed = epoch day) from
-  `.agent-src.uncompressed/skills/*/SKILL.md` and re-validated via
+  `.agent-src.uncondensed/skills/*/SKILL.md` and re-validated via
   `scripts/validate_frontmatter.py`. `agent-config explain skill` is
   **not** invoked — `explain` only supports `{config,rule,route}` today
   ([`scripts/agent-config/cmd_explain.py`](../../scripts/agent-config/cmd_explain.py));

package/docs/contracts/telegraph-telemetry.md

@@ -0,0 +1,83 @@
+---
+stability: beta
+keep-beta-until: 2026-08-15
+---
+
+# telegraph telemetry — multiplier contract
+
+> **Status:** suspended (kill-criterion not met in `telegraph-v1`).
+> Telemetry surface records `telegraph_delta_tokens = 0` until a v2 bench
+> proves a positive multiplier on the load-bearing `vs_terse` arm.
+
+## Constant
+
+| Key | Value | Provenance |
+|---|---|---|
+| `telegraph_multiplier_version` | `v1` | Tied to `internal/bench/reports/telegraph-v1.{json,md}` |
+| `telegraph_multiplier_value` | `0.9155` | `median(terse_control_tokens / condensed_tokens)` over the 10-prompt v1 corpus |
+| `telegraph_multiplier_p10` | `0.4506` | 10th percentile (worst-case carve-out-tax prompts) |
+| `telegraph_multiplier_p90` | `2.3664` | 90th percentile (pure-prose prompts where telegraph wins) |
+| `telegraph_multiplier_active` | `false` | **Suspended** — kill-criterion not met (`vs_terse` median −9.27 %) |
+
+The **active** flag gates whether the multiplier is applied to runtime
+telemetry. While `false`, `scripts/telegraph_stats.py` reports
+`telegraph_delta_tokens = 0` regardless of `speak_scope` setting.
+
+## How the multiplier is interpreted
+
+`telegraph_estimated_uncondensed_tokens = telegraph_condensed_tokens × M`,
+where `M = telegraph_multiplier_value`.
+
+`telegraph_delta_tokens = telegraph_estimated_uncondensed_tokens − telegraph_condensed_tokens`.
+
+- `M > 1.0` → telegraph condenses; `delta` is **positive** (saving).
+- `M = 1.0` → break-even; no delta surfaced.
+- `M < 1.0` → telegraph costs more than the terse baseline; `delta` is
+  **negative**. Surfacing a negative saving is misleading for the
+  user (looks like a bug), so the contract is to **suspend the
+  multiplier** and record `delta = 0` until a v2 bench lifts `M`
+  above `1.0` on the load-bearing arm.
+
+## Why suspended after v1
+
+The `telegraph-v1` bench (`internal/bench/reports/telegraph-v1.md`, 30 calls,
+2026-05-16) found:
+
+- Median savings vs raw uncondensed: **+23.51 %** (inflated by the
+  carve-out-tax-free pure-prose prompts).
+- Median savings vs terse-control: **−9.27 %** (load-bearing).
+- Carve-out-heavy prompts (path-list −108 %, mode-marker −123 %)
+  drag the median negative.
+
+The terse-control arm is the kill-criterion baseline per
+[`condensation-default-kill-criterion.md`](condensation-default-kill-criterion.md).
+Until a v2 bench (broader corpus or a re-tuned dialect) lifts the
+`vs_terse` median to ≥ 0 %, the multiplier stays suspended.
+
+## How to lift the suspension
+
+1. Run an extended bench against a broader corpus (Phase 3+ work).
+2. If `median(savings_vs_terse) ≥ 0` (and ideally ≥ 30 % to flip the
+   rule default), recompute `telegraph_multiplier_value`.
+3. Update this contract: bump `telegraph_multiplier_version` to `v2`,
+   set `telegraph_multiplier_active = true`, cite the new bench file.
+4. The change is reversible — drop back to `v1` if a regression
+   appears.
+
+## Consumers
+
+- [`scripts/telegraph_stats.py`](../../scripts/telegraph_stats.py) — reads
+  this constant, computes per-session / per-conversation / lifetime
+  deltas from `agents/cost-tracking/sessions.jsonl`.
+- [`scripts/cost_summary.py`](../../scripts/cost_summary.py) — emits
+  the stable JSON contract for inter-tool consumption per
+  [`cost-summary-schema.md`](cost-summary-schema.md).
+- `agent-status` skill — surfaces the per-session delta in the
+  status report under the `[telegraph: …]` widget.
+
+## See also
+
+- [`condensation-default-kill-criterion.md`](condensation-default-kill-criterion.md) — the rule-default-flip gate; this multiplier is gated on the same `vs_terse` arm.
+- [`internal/bench/reports/telegraph-v1.md`](../../bench/reports/telegraph-v1.md) — provenance for the `v1` value.
+- [`internal/bench/reports/telegraph-v2.md`](../../bench/reports/telegraph-v2.md) — input-side (orthogonal); does NOT feed this multiplier (this multiplier is output-side).
+- [`telegraph-speak`](../../.agent-src.uncondensed/rules/telegraph-speak.md) — runtime rule the multiplier measures.

package/docs/contracts/trust-and-safety.md

@@ -11,7 +11,7 @@ keep-beta-until: 2026-08-21
 Phase 1 stamped every artefact with `trust.level`,
 `trust.confidence`, and `trust.human_review_required`. Phase 5
 **enforces** those fields: the installer surfaces them at selection
-time, the compressor injects banners into compiled output, the
+time, the condenseor injects banners into compiled output, the
 runtime gates `human_review_required: true` artefacts before final
 output, and a lint catches drift. This contract is what those four
 consumers depend on.
@@ -37,7 +37,7 @@ demand review on its specific surface.
 
 ## § 2 — HRR banner
 
-The compressor (`scripts/compress.py`) prepends every artefact whose
+The condenseor (`scripts/condense.py`) prepends every artefact whose
 frontmatter declares `trust.human_review_required: true` with:
 
 ```text
@@ -48,9 +48,9 @@ frontmatter declares `trust.human_review_required: true` with:
 ```
 
 - The HTML comment is the parser-stable marker
-  (`_HRR_BANNER_MARKER` in `scripts/compress.py`). Runtime detection
+  (`_HRR_BANNER_MARKER` in `scripts/condense.py`). Runtime detection
   greps for this string, never the prose line.
-- Idempotent: re-compressing a file that already carries the marker
+- Idempotent: re-condensing a file that already carries the marker
   leaves it unchanged.
 - `<domain>` is the first pack id that ships the artefact (e.g.
   `finance-basic`, `founder-strategy`); falls back to `core` for
@@ -135,7 +135,7 @@ Exits 0 clean, 1 on any violation. Tests in
 ## § 7 — References
 
 - ADR: [`ADR-018 — Trust & Safety Layer`](../decisions/ADR-018-trust-and-safety-layer.md)
-- Compressor implementation: [`scripts/compress.py`](../../scripts/compress.py)
+- Condenseor implementation: [`scripts/condense.py`](../../scripts/condense.py)
   (`_inject_hrr_banner`, `_HRR_BANNER_MARKER`)
 - Installer implementation: [`packages/core/installer/src/trust-escalation.ts`](../../packages/core/installer/src/trust-escalation.ts)
 - Lint implementation: [`scripts/lint_trust_coherence.py`](../../scripts/lint_trust_coherence.py)

package/docs/contracts/ui-stack-extension.md

@@ -24,10 +24,10 @@ change.
 
 | Artefact | File | Change |
 |---|---|---|
-| Stack label | [`scripts/work_engine/stack/detect.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/stack/detect.py) | New entry in `KNOWN_STACKS` + a heuristic in `detect_stack` |
-| Apply skill | `.agent-src.uncompressed/skills/ui-apply-<stack>/SKILL.md` | New skill bundle |
-| Review skill | `.agent-src.uncompressed/skills/ui-design-review-<stack>/SKILL.md` | New skill bundle |
-| Polish skill | `.agent-src.uncompressed/skills/ui-polish-<stack>/SKILL.md` | New skill bundle |
+| Stack label | [`scripts/work_engine/stack/detect.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/stack/detect.py) | New entry in `KNOWN_STACKS` + a heuristic in `detect_stack` |
+| Apply skill | `.agent-src.uncondensed/skills/ui-apply-<stack>/SKILL.md` | New skill bundle |
+| Review skill | `.agent-src.uncondensed/skills/ui-design-review-<stack>/SKILL.md` | New skill bundle |
+| Polish skill | `.agent-src.uncondensed/skills/ui-polish-<stack>/SKILL.md` | New skill bundle |
 | Dispatch tables | `directives/ui/{apply,review,polish}.py` | New row in each `STACK_DIRECTIVES` map |
 | Golden fixture | `tests/golden/sandbox/recipes/gt_u<NN>_<stack>_*.py` | One happy-path baseline at minimum |
 
@@ -131,9 +131,9 @@ the skill does **not** check the ceiling itself but must respect
 ## Step 4 — wire dispatch tables
 
 Three identical edits in
-[`directives/ui/apply.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/ui/apply.py),
-[`directives/ui/review.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/ui/review.py),
-and [`directives/ui/polish.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/ui/polish.py):
+[`directives/ui/apply.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/ui/apply.py),
+[`directives/ui/review.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/ui/review.py),
+and [`directives/ui/polish.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/ui/polish.py):
 
 ```python
 STACK_DIRECTIVES: dict[str, str] = {

package/docs/contracts/ui-track-flow.md

@@ -13,7 +13,7 @@ keep-beta-until: 2026-08-12
 > - **Created:** 2026-05-01
 > - **Status:** Phase 1–6 shipped — audit / design / apply / review /
 >   polish handlers live under
->   [`.agent-src.uncompressed/templates/scripts/work_engine/directives/ui/`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/ui/).
+>   [`.agent-src.uncondensed/templates/scripts/work_engine/directives/ui/`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/ui/).
 >   Mixed under `directives/mixed/`. `ui-trivial` under
 >   `directives/ui_trivial/`. R4 (Visual Review Loop) added the
 >   a11y gate, the preview envelope, and a polish-termination rewrite
@@ -56,9 +56,9 @@ exists so the dispatcher's completeness check is satisfied; no logic
 runs and no state is touched.
 
 Source of truth for slot wiring:
-[`directives/ui/__init__.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/ui/__init__.py),
-[`directives/mixed/__init__.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/mixed/__init__.py),
-[`directives/ui_trivial/__init__.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/ui_trivial/__init__.py).
+[`directives/ui/__init__.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/ui/__init__.py),
+[`directives/mixed/__init__.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/mixed/__init__.py),
+[`directives/ui_trivial/__init__.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/ui_trivial/__init__.py).
 
 ## The `ui` set — slot-by-slot
 
@@ -75,7 +75,7 @@ Mandatory pre-step. Routes on `state.ui_audit` shape:
 | Anything else populated | `BLOCKED` numbered options | User picks candidate to extend (or "build new"); records `audit_path = "ambiguous"` + `candidate_pick` |
 
 Constants live in
-[`directives/ui/audit.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/ui/audit.py):
+[`directives/ui/audit.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/ui/audit.py):
 `STRONG_SIMILARITY = 0.7`, `TIE_GAP = 0.05`,
 `TESTED_AGAINST_SHADCN_MAJOR = 2`. Idempotent re-entry: once
 `audit_path` is set the step round-trips through `SUCCESS` without
@@ -199,7 +199,7 @@ Stack-directive table mirrors apply / review with prefix
 ### `report` → backend renderer
 
 Re-export of
-[`directives.backend.report.run`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/backend/report.py).
+[`directives.backend.report.run`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/backend/report.py).
 The renderer is pure and state-driven; the same Markdown contract
 serves both tracks.
 
@@ -234,7 +234,7 @@ adjustment). Phase-1 intent classifier writes
 `directive_set = "ui-trivial"`.
 
 Hard preconditions in
-[`directives/ui_trivial/apply.py`](../../.agent-src.uncompressed/templates/scripts/work_engine/directives/ui_trivial/apply.py):
+[`directives/ui_trivial/apply.py`](../../.agent-src.uncondensed/templates/scripts/work_engine/directives/ui_trivial/apply.py):
 
 - `MAX_FILES = 1` — exactly one file touched.
 - `MAX_LINES_CHANGED = 5` — diff stays under five changed lines.
@@ -323,7 +323,7 @@ suite asserts every `BLOCKED` path has a matching declaration.
 - [`adr-product-ui-track.md`](adr-product-ui-track.md) — locked
   decisions for the UI track (R3) and the visual-review-loop
   amendment (R4: a11y gate, preview envelope, polish-termination).
-- [`existing-ui-audit` SKILL](../../.agent-src.uncompressed/skills/existing-ui-audit/SKILL.md)
+- [`existing-ui-audit` SKILL](../../.agent-src.uncondensed/skills/existing-ui-audit/SKILL.md)
   — producer of `state.ui_audit`.
-- [`ui-audit-gate` rule](../../.agent-src.uncompressed/rules/ui-audit-gate.md)
+- [`ui-audit-gate` rule](../../.agent-src.uncondensed/rules/ui-audit-gate.md)
   — the always-on rule that mirrors the audit gate at the agent layer.

package/docs/contracts/user-type-schema.md

@@ -7,7 +7,7 @@ keep-beta-until: 2026-08-14
 
 > **Status:** active · **Stability:** beta · **Owner:** step-6-user-types-axis
 > · **Linter:** `scripts/skill_linter.py § lint_usertype`
-> · **Source-of-truth dir:** `.agent-src.uncompressed/user-types/`
+> · **Source-of-truth dir:** `.agent-src.uncondensed/user-types/`
 > · **Sibling axis (distinct):** install-time `user-types/` (package root) — see [`adr-install-user-type-axis`](adr-install-user-type-axis.md)
 > · **ADR:** [`adr-user-types-axis`](adr-user-types-axis.md)
 
@@ -127,7 +127,7 @@ The linter (`scripts/skill_linter.py § lint_usertype`) enforces:
 - description ≤ 160 chars
 
 Authors must use the template at
-`.agent-src.uncompressed/user-types/_template/user-type.md`.
+`.agent-src.uncondensed/user-types/_template/user-type.md`.
 
 ## § 7 — Versioning
 
@@ -142,5 +142,5 @@ version bump and a separate ADR.
 - [`persona-schema`](persona-schema.md) — sister axis (methodology vs end-user)
 - [`adr-user-types-axis`](adr-user-types-axis.md) — why the axis split exists
 - [`adr-install-user-type-axis`](adr-install-user-type-axis.md) — the install-time `user_type` axis (distinct layer, same vocabulary)
-- `.agent-src.uncompressed/user-types/README.md` — authoring entry point
-- `.agent-src.uncompressed/user-types/_template/user-type.md` — template starter
+- `.agent-src.uncondensed/user-types/README.md` — authoring entry point
+- `.agent-src.uncondensed/user-types/_template/user-type.md` — template starter

package/docs/contracts/workflow-packs.md

@@ -21,7 +21,7 @@ gates.
 ## Schema
 
 ```yaml
-# .agent-src.uncompressed/packs/<pack-id>.yml
+# .agent-src.uncondensed/packs/<pack-id>.yml
 pack:
   id: <pack-id>                      # kebab-case, file name without .yml
   audience:
@@ -52,7 +52,7 @@ pack:
 | `composition.preset_id` | string | yes | Override applied to the chain documented in [`config-presets`](config-presets.md). Same opt-in semantics. |
 | `surface.commands_allowed` | list[string] | yes | Cap = **12**. Items must appear in [`command-clusters`](command-clusters.md). The pack does **not** disable other commands — the cap is for the wizard's first-screen rendering, not enforcement. |
 | `surface.skills_allowed` | list[string] | yes | Cap = **15**. Items must appear in `docs/skills-catalog.md`. Same render-only semantics. |
-| `surface.personas` | list[string] | yes | Cap = **4**. Items must appear in `.agent-src.uncompressed/personas/`. |
+| `surface.personas` | list[string] | yes | Cap = **4**. Items must appear in `.agent-src.uncondensed/personas/`. |
 | `rationale.*` | string | yes | Forces every pack to justify its composition in plain prose; reviewed at PR time, not at runtime. |
 
 ## Resolution chain
@@ -95,7 +95,7 @@ this schema.
 - **Do not** declare new commands. Use [`command-clusters`](command-clusters.md).
 - **Do not** modify rules. Use the kernel-rule edit process.
 - **Do not** override safety floors. Domain-safety rules
-  (`.agent-src.uncompressed/rules/domain-safety-*.md`) apply
+  (`.agent-src.uncondensed/rules/domain-safety-*.md`) apply
   unconditionally — packs cannot widen the deny-list.
 - **Do not** ship telemetry or usage hints. Packs are pure composition.
 
@@ -109,7 +109,7 @@ Three packs ship at Phase 2 Item 7 close:
 | `content-engine` | `content_creator` | `balanced` | Editorial calendar, brand voice, and ghostwriter on one loop. |
 | `agency-delivery` | `agency` | `strict` | Multi-client refine → estimate → deliver with audit-grade trace. |
 
-Each pack lives at `.agent-src.uncompressed/packs/<id>.yml` and is
+Each pack lives at `.agent-src.uncondensed/packs/<id>.yml` and is
 covered by the validation rules above.
 
 ## See also

package/docs/contracts/workspace-documents.md

@@ -1,3 +1,7 @@
+---
+stability: experimental
+---
+
 # Workspace Documents Contract
 
 > **Status** · v0 / design · 2026-05-24. Phase 5 of the