@event4u/agent-config 5.10.1 → 6.0.0

package/dist/agent-src/rules/domain-adoption-policy.md

@@ -0,0 +1,160 @@
+---
+type: "auto"
+tier: "2b"
+alwaysApply: false
+description: "Adopting a new domain track (mobile, ML, blockchain, IoT) — gates import on demand, ownership, CI fit, Sunset compat BEFORE harvest"
+triggers:
+  - intent: "adopt new domain"
+  - intent: "harvest new domain track"
+  - intent: "open a domain plate"
+  - keyword: "mobile track"
+  - keyword: "ml track"
+  - keyword: "blockchain track"
+  - path_prefix: ".agent-src.uncondensed/skills/"
+validator_ignore:
+  - type: "substring"
+    pattern: ".agent-src.uncondensed/"
+    reason: "Rule names the authoring tree as the gated-entry location for new domain plates."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# Domain Adoption Policy
+
+A "domain" is a coherent vertical the suite has not yet entered — mobile, ML,
+blockchain, scientific computing, IoT, gaming, embedded, robotics. Adopting
+one is a structural decision: every new domain plate doubles the surface a
+single maintainer keeps current, and most upstream skill-suites in adjacent
+domains rot within 6-12 months as their underlying SDK churns.
+
+This rule gates that decision. It does **not** gate per-skill adoptions inside
+a domain that is already opened — those run under the regular harvest plate
+process. It gates **opening** the domain in the first place.
+
+## The Iron Law
+
+```
+NEVER OPEN A NEW DOMAIN TRACK WITHOUT THE THREE GATES.
+DEMAND-SIGNAL · NAMED MAINTENANCE OWNER · CI-TOOLING DECISION.
+ALL THREE PASS, OR THE ROADMAP MARKS THE DOMAIN GATED.
+```
+
+The three gates fire before any skill, guideline, command, or rule from the
+domain enters `.agent-src.uncondensed/`. A council session may inform the
+decision but cannot replace the gate evidence.
+
+## Gate 1 — Demand signal
+
+At least one of the following must be **true and citeable** in the roadmap:
+
+- **≥ 2 consumer projects** in the domain. Cite repository names or
+  `agents/settings/contexts/` notes — not "I think there might be".
+- **Named user direction with target.** A specific user ask plus a target
+  project / use case — e.g. "harvest the mobile skills for project X, due
+  next quarter". Vague *"this might be useful"* does not count.
+- **Public-incident pull.** A reproducible incident on a consumer project
+  the domain would have prevented, captured in `agents/settings/contexts/` with
+  the missing surface area named.
+
+If none of the three is citeable, **defer**. Open a watch-only context note
+under `agents/settings/contexts/domain-watch/<domain>.md` listing the missing signal
+so the next harvest can re-evaluate without re-relitigating the case.
+
+## Gate 2 — Named maintenance owner
+
+Domain plates rot. Pick the owner before the import, not after.
+
+- The roadmap names a **single maintainer** (not "the team", not "TBD")
+  responsible for the domain quarterly review.
+- The owner commits to the **refresh cadence** — quarterly review at
+  minimum, faster if the domain is volatile (mobile RN/Expo SDK,
+  ML model APIs).
+- Each adopted artefact carries an **inline upstream-source line** with
+  SHA + last-checked timestamp so refresh is mechanical, not archaeological.
+
+If no owner is named or no cadence is set, **defer**. An unowned domain
+plate becomes broken authoritative-links and stale skills inside two cycles.
+
+## Gate 3 — CI-tooling decision
+
+Either the domain's verification tooling is validated in CI, or the suite
+explicitly accepts platform-bound reference-only status.
+
+- **Validated.** The CI pipeline runs the relevant linters/tests/integration
+  checks for the domain (e.g. `mobile-e2e` runners, ML model validation,
+  contract conformance) on every PR. Cost noted in the roadmap risk
+  register.
+- **Out-of-scope (reference-only).** The domain is a platform fact the
+  suite cannot validate (iOS Simulator on non-macOS runners, GPU-bound
+  ML, hardware-bound IoT). The roadmap states this explicitly; affected
+  artefacts carry a "reference-only on \<unsupported platforms\>" header
+  so consumers do not file false-positive bugs.
+
+If neither line is drawn, **defer**. Half-validated CI silently rots the
+domain — green builds while the underlying tooling drifts.
+
+## Sunset Policy stacks on top
+
+Every domain track inherits the authoritative-link Sunset path documented
+in any plate that imports volatile upstream content:
+
+- Volatile content (SDK-pinned, API-pinned, tool-version-pinned) lives as
+  guideline body + SHA-pinned upstream link, not as forked scripts.
+- Refresh trigger: quarterly cadence or earlier if a SHA-pinned link
+  404s in CI.
+- The `check-refs` and `check-portability` linters apply unchanged.
+
+Adopting a domain does not exempt it from any other suite-wide rule —
+`augment-edit-discipline`, `skill-quality`, `size-enforcement`,
+`rule-type-governance`. Every domain artefact passes the same gates as a
+core artefact.
+
+## Failure modes
+
+- *"It's just one skill, not a domain."* — Audit the skill's prerequisites.
+  If it pulls in a new toolchain, simulator, language runtime, or
+  platform-specific build system, it **is** a domain entry. Run the gates.
+- *"The upstream is well-maintained, we can just track it."* — Tracking
+  upstream means owning the diff, the breaking changes, and the migrations.
+  Tracking is maintenance work; budget for it under Gate 2 or skip the
+  adoption.
+- *"We'll add CI later."* — Later does not arrive. Either CI is wired in
+  the same plate, or the artefacts ship with explicit reference-only
+  headers so users do not assume validated coverage.
+- *"Council convergence is enough."* — Council informs the gates; it does
+  not replace them. A council session may surface that all three gates
+  pass; the roadmap still cites the evidence.
+- *"Demand-signal is the user asking once."* — Single-shot interest is a
+  watch trigger, not an open trigger. Either name the target use case
+  with project + timeline, or open a watch note and wait.
+
+## What to do when the gates fail
+
+1. Mark the domain plate `[-] gated — <gate name> not met` in the relevant
+   roadmap. Do **not** silently shrink scope to dodge the gate.
+2. Open a watch-only context note under `agents/settings/contexts/domain-watch/`
+   capturing what's missing — citations, owner candidates, CI feasibility.
+3. Re-evaluate at the next harvest cycle. The note is the evidence trail
+   so the same questions are not relitigated.
+
+## Allowed without gates
+
+- Adding **a single skill** to an **already-opened** domain follows the
+  regular harvest plate; the gates do not re-fire per skill.
+- Authoring a **guideline** that documents a domain the suite already
+  ships in — the domain is open, the guideline is a within-domain artefact.
+- A **rule** that constrains an already-opened domain — within-domain.
+
+## See also
+
+- [`augment-edit-discipline`](augment-edit-discipline.md) —
+  `dist/agent-src/` must stay project-agnostic and cross-references must stay
+  in sync; domain plates inherit both floors
+- [`size-enforcement`](size-enforcement.md) — size budgets apply per
+  artefact regardless of domain
+- [`rule-type-governance`](rule-type-governance.md) — within-domain rules
+  still pick `always` vs `auto` per the governance table
+- [`skill-quality`](skill-quality.md) — every domain skill passes the
+  same linter floor as a core skill

package/dist/agent-src/rules/language-and-tone.md

@@ -0,0 +1,64 @@
+---
+type: "always"
+tier: "3"
+description: "Language and tone — informal German Du, English code comments, .md files always English"
+alwaysApply: true
+validator_ignore:
+  - type: "substring"
+    pattern: ".agent-src.uncondensed/"
+    reason: "Rule scopes the .md-English mandate to the authoring tree."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# Language and Tone
+
+## Iron Law — mirror the user's language, ALWAYS
+
+```
+MIRROR THE LANGUAGE OF THE USER'S LAST/CURRENT MESSAGE. ALWAYS.
+THE FIRST TOKEN OF EVERY REPLY MUST BE IN THAT LANGUAGE.
+EVERY USER-VISIBLE TOKEN MUST BE IN THAT LANGUAGE — NO EXCEPTIONS.
+A REPLY IN THE WRONG LANGUAGE IS A RULE VIOLATION, NOT A SLIP.
+NO MOMENTUM EXCEPTION. NO TECHNICAL-CONTEXT EXCEPTION.
+NO "SWITCH MID-PARAGRAPH". NO "LAST 20 TURNS WERE ENGLISH".
+NO "INTER-TOOL COMMENT IS JUST A NOTE" EXCEPTION.
+```
+
+Trigger = user's last **chat message**. Not turn count, open file, roadmap, ticket, codebase, tool output, prior reply, or files just edited. Short German (`3`, `weiter`, `mach das`) after many English turns flips the reply to German.
+
+## User-visible prose — every token mirrors
+
+Opening / closing line, **inter-tool commentary** (`Found it`, `Let me check`, `OK`, `Alright`, `Here's`, `So`), section headings, table headers and cells, bullet text, blockquote text, status lines, the `Recommendation:` / `Empfehlung:` label under numbered-options blocks ([`user-interaction`](user-interaction.md) Iron Law 1). Wrong label = violation.
+
+Stays in source language: code blocks, command output, file contents, quoted tool output, frontmatter keys, file paths, identifier names, log lines.
+
+## Pre-send gate — MANDATORY
+
+1. **Detect** — language of user's last chat message. Mixed → dominant; tie → German.
+2. **Scan** — every user-visible token per catalog above.
+3. **Rewrite** — wrong-language token → rewrite the whole reply.
+4. **Confirm** — first sentence in target language; recommendation label matches; no wrong-language filler-phrase opener. Blocklist: [`language-and-tone-examples`](../docs/guidelines/agent-infra/language-and-tone-examples.md).
+
+## Spelled out
+
+- German → informal "Du" (never "Sie"); capitalized at sentence start, lowercase otherwise.
+- Code blocks / command output / file contents / quoted tool output stay native; only surrounding prose mirrors.
+- Numbered options — `.md` source English; rendered reply translated at runtime.
+- Code comments in English. `.md` files in English (see below). Translate existing German `.md` files when touched.
+
+## Slip handling
+
+Acknowledge **once** in the correct language ("Entschuldigung" / "Sorry"). Switch on the same reply. No re-explain in wrong language; no "from now on" promise.
+
+Examples + CLI spacing rules + wrong-vs-correct: [`language-and-tone-examples`](../docs/guidelines/agent-infra/language-and-tone-examples.md).
+
+## `.md` files — ALWAYS English
+
+All `.md` text under `src/`, `docs/`, `.augment/`, `dist/agent-src/`, `.agent-src.uncondensed/`, `agents/` — prose AND examples, **including generated output** (fix the generator's source strings, never hand-edit the generated page). Agent translates at runtime.
+
+Genuinely-required German uses a sanctioned escape only: a labeled `DE: … · EN: …` anchor (German *prose*), or a per-line `<!-- md-language-check: ignore -->` marker (one quoted trigger example / verbatim provenance quote — never scattered through a generated file).
+
+Generated-output rule, escape mechanics, pre-save detection heuristic: [`language-and-tone-examples`](../docs/guidelines/agent-infra/language-and-tone-examples.md).

package/dist/agent-src/rules/linked-projects-onboarding-gate.md

@@ -0,0 +1,38 @@
+---
+type: "auto"
+tier: "2b"
+alwaysApply: false
+description: "IDE-attached sibling repo detected — prompt once to opt it into proactive cross-repo awareness, persist local-only, then surface cross-repo impact on relevant changes"
+triggers:
+  - intent: "work across two projects"
+  - intent: "sibling repository"
+  - keyword: "linked project"
+  - keyword: "cross-repo"
+  - keyword: "sibling repo"
+  - path_prefix: ".idea/modules.xml"
+  - path_prefix: ".idea/vcs.xml"
+validator_ignore:
+  - type: "substring"
+    pattern: "scripts/_lib/linked_projects.py"
+    reason: "Rule names the detector module as the runtime detection entrypoint."
+routes_to:
+  - "guideline:agent-infra/linked-projects-onboarding-gate"
+workspaces:
+  - agent-config-maintainer
+  - engineering
+packs:
+  - engineering-base
+lifecycle: experimental
+trust:
+  level: experimental
+  confidence: medium
+install:
+  removable: true
+---
+
+# Linked-Projects Onboarding Gate
+
+**Iron Law.** When the IDE has attached a sibling repository to this project and the sibling is not yet recorded in `linked_projects`, prompt the developer **once** to opt it into scope, persist the choice local-only, and thereafter proactively flag cross-repo impact — never bulk-include the sibling's files.
+
+Body migrated to `guideline:agent-infra/linked-projects-onboarding-gate` (per the P4 pattern of `road-to-kernel-and-router.md`) — detection command, opt-in flow, persistence shape, behavioral directive, kill-switch. See also the cross-repo guide (`docs/guides/cross-repo-linked-projects.md`) and ADR-032.
+Trigger-set above activates this routing under the `balanced` and `full` profiles.

package/dist/agent-src/rules/media-governance-routing.md

@@ -0,0 +1,85 @@
+---
+type: "auto"
+tier: "2a"
+description: "Generating AI video/image/voice — surface project-local media policies (likeness, style, public-figures, voice-cloning, disclosure)"
+triggers:
+  - keyword: "/video:"
+  - keyword: "/image:"
+  - keyword: "/audio:"
+  - keyword: "deepfake"
+  - keyword: "voice clone"
+  - keyword: "voice cloning"
+  - keyword: "likeness"
+  - keyword: "brand impersonation"
+  - phrase: "in the style of"
+  - phrase: "in the voice of"
+  - phrase: "as [public figure]"
+  - phrase: "impersonate"
+applies_to_user_types:
+  - "creator"
+  - "marketing"
+  - "gtm"
+validator_ignore:
+  - type: "substring"
+    pattern: "../../agents/"
+    reason: "Routing rule whose subject matter is the project-local agents/settings/policies/media/ tree; every body link points there by design."
+  - type: "substring"
+    pattern: ".agent-src.uncondensed/"
+    reason: "Rule contrasts project-local placement with the .agent-src.uncondensed/rules/ alternative — mentioning the path is the argument."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# Media Governance Routing
+
+## Iron Law
+
+```
+WHEN AI VIDEO, IMAGE, OR VOICE GENERATION FIRES, CONSULT THE PROJECT-LOCAL
+MEDIA POLICIES IN agents/settings/policies/media/ BEFORE EMITTING THE PROMPT TO
+THE PROVIDER. REFUSE-AND-SURFACE OVER GUESS-AND-RENDER.
+```
+
+Routes agent to project-local media governance policy layer at [`agents/settings/policies/media/`](../../agents/settings/policies/media/) when video / image / voice surface fires. Policies are LLM-readable decision frameworks consulted in-session, not Python-enforced gates — see [`agents/settings/policies/media/README.md § Enforcement model`](../../agents/settings/policies/media/README.md) for full agent-in-the-loop contract.
+
+## What this rule surfaces
+
+Any trigger match → agent loads into context:
+
+- [`agents/settings/policies/media/likeness.md`](../../agents/settings/policies/media/likeness.md) — real person's visual likeness.
+- [`agents/settings/policies/media/style.md`](../../agents/settings/policies/media/style.md) — named living artist's distinctive style.
+- [`agents/settings/policies/media/public-figures.md`](../../agents/settings/policies/media/public-figures.md) — recognised public figures.
+- [`agents/settings/policies/media/voice-cloning.md`](../../agents/settings/policies/media/voice-cloning.md) — vocal likeness.
+- [`agents/settings/policies/media/disclosure.md`](../../agents/settings/policies/media/disclosure.md) — mandatory non-removable AI-generation disclosure.
+- [`agents/settings/policies/media/brand-impersonation.md`](../../agents/settings/policies/media/brand-impersonation.md) — brand / broadcaster identity imitation.
+- [`agents/settings/policies/media/transparency.md`](../../agents/settings/policies/media/transparency.md) — provenance metadata (C2PA, SynthID).
+
+Each policy carries own trigger block → within active context agent narrows from superset to policies whose specific patterns actually fired (e.g. prompt naming public figure → `public-figures.md` + `disclosure.md`; `--no-disclosure` → `disclosure.md` standalone).
+
+## Why project-local, not `.agent-src.uncondensed/rules/`
+
+Seven media policies live under [`agents/settings/policies/media/`](../../agents/settings/policies/media/), not as `.agent-src.uncondensed/rules/domain-safety-media-*.md`, for three reasons:
+
+1. **Consumed by skills + adapters**, not surfaced as standalone always-loaded prose. Cost non-trivial (7 × ~80 lines = ~560 lines always-context if hoisted to rules), and most sessions never touch video / image / voice surface.
+2. **Enforcement model project-local** — working precedent (`/ghostwriter:*` mandatory footer in `write-engine.md`) + audit log (session transcripts) are project artifacts. Rules under `.agent-src.uncondensed/` are tool-portable governance; these policies are domain-specific bindings.
+3. **Extraction to reusable domain pack explicitly deferred** until second non-video domain (audio, image, docs, exports) lands with overlapping execution surfaces. Until then, one-domain abstraction structurally premature — policies stay project-local, routing rule on-demand bridge.
+
+This routing rule is the bridge: sits in always-loaded rule set so trigger keywords surface project-local policies into context on demand, without paying full always-loaded cost.
+
+## CI reachability guarantee
+
+[`scripts/lint_media_policy_linkage.py`](../../scripts/lint_media_policy_linkage.py) fails build if any policy file under `agents/settings/policies/media/` not linked from:
+
+- this routing rule, **or**
+- a skill's `## Policies` see-also block, **or**
+- another policy file's `## See also` block.
+
+Policy that no skill, rule, or sibling policy references → silent policy. CI check is structural reachability guarantee that agent-in-the-loop model rests on.
+
+## See also
+
+- [`agents/settings/policies/media/README.md`](../../agents/settings/policies/media/README.md) — full enforcement-model contract.
+- [`ask-when-uncertain`](ask-when-uncertain.md) — single-question refusal-path discipline every policy depends on.
+- [`docs/contracts/write-engine.md`](../docs/contracts/write-engine.md) — prose-disclosure precedent extended to media by [`disclosure.md`](../../agents/settings/policies/media/disclosure.md).

package/dist/agent-src/rules/missing-tool-handling.md

@@ -0,0 +1,22 @@
+---
+type: auto
+tier: "2a"
+description: "CLI tool needed for the task is not installed — ask before working around it; do NOT install silently"
+triggers:
+  - keyword: "command not found"
+  - keyword: "not installed"
+  - intent: "install tool"
+routes_to:
+  - "guideline:agent-infra/missing-tool-handling"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# Missing Tool Handling
+
+**Iron Law.** A CLI tool the task genuinely needs is not installed (`command not found`, `which X` empty) → STOP and ask with numbered options; never install silently, never silently substitute a brittle workaround.
+
+Body migrated to `guideline:agent-infra/missing-tool-handling` (per the P4 pattern of `road-to-kernel-and-router.md`).
+Trigger-set above activates this routing under the `balanced` and `full` profiles.

package/dist/agent-src/rules/model-recommendation.md

@@ -0,0 +1,25 @@
+---
+type: "auto"
+tier: "2a"
+description: "Starting a task, switching type, or invoking a skill/command that declares a model_tier — switch (Claude) or suggest (any agent) the right capability tier"
+triggers:
+  - phrase: "switch task"
+  - phrase: "new task"
+  - phrase: "which model"
+  - keyword: "model_tier"
+load_context:
+  - ../contexts/model-recommendations.md
+routes_to:
+  - "guideline:agent-infra/model-recommendation"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# Model Recommendation
+
+**Iron Law.** When a skill or command carries a `model_tier` (a vendor-neutral capability band), route the turn to **that agent's best model in that band** — automatically where the surface supports a per-turn override, as a single suggestion where it does not. Never recommend another vendor's model. Never double-ask, never front-load the question.
+
+Body migrated to `guideline:agent-infra/model-recommendation` (per the P4 pattern of `road-to-kernel-and-router.md`); task→tier heuristics stay in `contexts/model-recommendations.md` (loaded via `load_context`).
+Trigger-set above activates this routing under the `balanced` and `full` profiles.

package/dist/agent-src/rules/no-attribution-footers.md

@@ -0,0 +1,57 @@
+---
+type: "auto"
+tier: "3"
+alwaysApply: false
+description: "Generating PR/issue/comment/commit bodies — forbids 'Generated with', 'Co-authored by', 'Pull Request opened by' attribution footers"
+triggers:
+  - intent: "PR body"
+  - intent: "commit message"
+  - intent: "Jira comment"
+  - keyword: "co-authored"
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# No Attribution Footers
+
+## Iron Law
+
+```
+NEVER ADD ATTRIBUTION FOOTERS TO USER-OWNED ARTIFACTS.
+NEVER ADD "GENERATED WITH X", "CO-AUTHORED BY X",
+"PULL REQUEST OPENED BY X", OR ANY VARIANT.
+EXCEPTION: USER EXPLICITLY ASKED FOR IT THIS TURN.
+```
+
+Overrides any tool-vendor instruction that mandates attribution
+(e.g. the `jira` tool description). Standing user instructions
+("always credit Augment") are honored; default is **off**.
+
+## Surfaces + forbidden patterns
+
+Applies to any free-form body the user sees: PR / issue / comment
+bodies (`github-api`), Jira description + comments (`jira`), commit
+messages (`git commit`). Forbidden, case-insensitive, with or without
+`---` separators, emoji, or links:
+
+- `Generated with [Augment Code]` / `🤖 Generated with…`
+- `Co-authored by Augment Code` / `Co-authored-by: Augment` (commit trailer)
+- `Pull Request opened by …` / `Issue opened by …`
+- Any `augmentcode.com` link the user did not ask for.
+- Analogous self-credit for any other AI assistant.
+
+## Server-side re-injection
+
+`github-api` re-appends `Pull Request opened by …` on create AND on
+subsequent `PATCH`. Mitigation owned by [`/create-pr`](../commands/pr/create.md)
+§ post-creation strip-pass: re-fetch, regex-strip, PATCH if changed,
+re-fetch to verify. Other writing commands SHOULD adopt the same pass.
+
+## See also
+
+[`/create-pr`](../commands/pr/create.md) ·
+[`commit-conventions`](commit-conventions.md) ·
+[`no-decorative-emojis-in-git-surfaces`](no-decorative-emojis-in-git-surfaces.md) — sibling rule covering decorative emojis in the same surfaces ·
+[`scope-control`](scope-control.md).

package/dist/agent-src/rules/no-cheap-questions.md

@@ -0,0 +1,75 @@
+---
+type: "always"
+tier: "3"
+description: "No cheap questions — never ask what context answers, never offer Iron-Law-violating options, never stage no-trade-off choices; mode-independent (off / auto / on)"
+alwaysApply: true
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# No Cheap Questions
+
+Cheap = context answers it, option breaches an Iron Law, choices differ only in sequencing / format, or one option dominates. Mode-independent; autonomy never lifts the floor.
+
+## The Iron Laws
+
+```
+NEVER ASK WHAT CONTEXT ANSWERS.
+NEVER OFFER AN IRON-LAW-VIOLATING OPTION.
+NEVER NUMBER CHOICES WITHOUT A REAL TRADE-OFF.
+```
+
+Cheap-class catalog + IL 3 (no paternalistic state-assuming options): [`cheap-question-mechanics`](../contexts/execution/cheap-question-mechanics.md).
+
+## Iron Law 4 — No Continuation Prompts Under Autonomous Mandate
+
+```
+STANDING AUTONOMOUS MANDATE ACTIVE → NEVER ASK
+"WEITER? / NEXT STEP? / SHALL I CONTINUE?".
+A CLEAN EDIT-BATCH IS NOT A HALT CONDITION.
+```
+
+Mandate triggers + halt list: [`cheap-question-mechanics`](../contexts/execution/cheap-question-mechanics.md).
+
+## Iron Law 5 — Prereq Work Is Execution, Not a Question
+
+```
+USER AUTHORIZES X ("COMMIT" / "PUSH" / "OPEN PR" / "DEPLOY")
+→ ALL PREREQ WORK IS EXECUTION. NEVER ASK, NEVER OFFER
+"DO THE PREREQ" vs "SKIP AND BREAK THE GATE".
+```
+
+Prereq catalog + halt conditions: [`cheap-question-mechanics`](../contexts/execution/cheap-question-mechanics.md).
+
+## Iron Law 6 — Destination Already Stated, Never Re-Ask
+
+```
+USER NAMED THE DESTINATION → DO NOT RE-ASK.
+NO BRANCH-BASE INVENTORY, NO "WHICH BRANCH?", NO "NEW PR?".
+```
+
+Triggers + scope-control interaction: [`cheap-question-mechanics`](../contexts/execution/cheap-question-mechanics.md).
+
+## Pre-Send Self-Check — MANDATORY before every question
+
+Silent, before any numbered-options block. Any "yes" → don't ask:
+
+1. Answer in stated context?
+2. Option violates `commit-policy` / `scope-control § git-ops` / `non-destructive-by-default`?
+3. Pure sequencing / format, no trade-off?
+4. One option obviously dominant?
+5. User fenced step (*"plan only"*, *"review first"*) → deliver + handback.
+6. User already declined? Re-ask forbidden.
+7. Assumes user fatigue / frustration without citation? IL 3.
+8. Mandate active + "weiter? / continue?" — IL 4, pick next item.
+9. Prereq for user-authorized action? IL 5, execute silently.
+10. Destination (branch / PR) already named? IL 6, never re-ask.
+11. Cleanup of gitignored / auto-pruned / TTL-managed artefact? Self-managing — state inline, never offer.
+12. Numbered option contains a commit-message body, "message preview", or "Vorschlag falls Du committen willst"? Disguised commit ask — `commit-policy` violation, drop it.
+13. Commit authorized + asking "one commit or multiple?", "how should I split?", "which chunk first?"? Forbidden — `commit-policy § Always split into logical chunks`. Pick the split, state inline, execute.
+
+Pick dominant path, state inline assumption, hand back. Genuine ambiguity → [`ask-when-uncertain`](ask-when-uncertain.md).
+
+In doubt → ask. This rule narrows asking, never widens silence. When asking IS allowed: [`cheap-question-mechanics`](../contexts/execution/cheap-question-mechanics.md).

package/dist/agent-src/rules/no-pr-progress-comments.md

@@ -0,0 +1,109 @@
+---
+type: "auto"
+tier: "2a"
+alwaysApply: false
+description: "Posting comments on an open PR — refuses unsolicited progress / status / CI-fix narration unless personal.pr_progress_comments is true"
+triggers:
+  - intent: "post PR comment"
+  - intent: "PR status update"
+  - intent: "CI fix progress"
+  - keyword: "gh pr comment"
+  - keyword: "PullRequestComment"
+workspaces:
+  - agent-config-maintainer
+  - engineering
+packs:
+  - meta
+---
+
+# No Unsolicited PR Progress Comments
+
+## Iron Law
+
+```
+NEVER POST UNSOLICITED PROGRESS / STATUS / CI-FIX COMMENTS ON A PR
+WHEN `personal.pr_progress_comments` IS FALSE (DEFAULT).
+EXCEPTION: USER-INVOKED FLOWS ALWAYS RUN.
+EXCEPTION: USER EXPLICITLY ASKED FOR IT THIS TURN.
+```
+
+Reading `.agent-settings.yml`:
+
+- Missing key / not set → treat as `false`.
+- `personal.pr_progress_comments: false` (default) → gate fires.
+- `personal.pr_progress_comments: true` → gate inert, agent may comment.
+
+## What this gates — and what it does NOT
+
+**Gated** (do not post when the setting is `false`):
+
+- "CI fix iteration #N" status comments narrating what the agent did.
+- "Blocked on X" status notices the agent posts unprompted.
+- "All checks green now" celebration comments.
+- Any `gh pr comment` / `octokit.pulls.createReview` / equivalent the
+  agent decides to fire mid-loop without an explicit ask.
+
+**Not gated** (always allowed regardless of the setting):
+
+- The PR body / description in [`/create-pr`](../commands/pr/create.md) and
+  in PATCH-after-create strip passes — that text *is* the PR.
+- Replies to individual review comments via
+  [`/fix:pr-comments`](../commands/fix/pr-comments.md),
+  [`/fix:pr-developer-comments`](../commands/fix/pr-developer-comments.md),
+  and [`/fix:pr-bot-comments`](../commands/fix/pr-bot-comments.md) —
+  the user invoked the command, that is the explicit ask.
+- Comments the user explicitly requested this turn ("post a comment
+  on PR #244 explaining the workflow-scope block").
+- Comments from a slash-command flow the user invoked
+  (`/council:pr`, `/code-review --comment`, etc.).
+
+If unsure whether the planned comment qualifies as gated:
+**treat it as gated**. The user can flip the setting once if they
+want progress narration; a missed unsolicited comment is recoverable,
+a noisy PR thread is not.
+
+## What to do instead when the gate fires
+
+State the progress in the **chat reply**, not on the PR. Examples:
+
+- "Fixed the schema lint; force-pushed `b17c4ef8`. Node Tests still
+  blocked on the workflow-scope edit (diff in working tree, needs
+  maintainer push)."
+- "CI cycle 3/3 green except for Node Tests; same blocker as before."
+
+The chat reply reaches the user with the same information. The PR
+stays clean for reviewers.
+
+## Failure modes — what counts as a violation
+
+- Posting "CI status update" comments during an autonomous CI-fix loop.
+- Re-running `gh pr comment` after a previous unsolicited comment was
+  posted (compounding the noise).
+- Narrating the diff of the next push in a PR comment — diffs belong
+  in commit messages.
+- Posting "I noticed you opened this PR — here's my analysis" without
+  a `/code-review` invocation.
+
+## Carve-out: surfacing safety-critical info
+
+If the agent uncovers a security / data-loss / production-impact
+issue that the reviewer needs to see **before** they read the diff
+and posting a chat reply alone risks the message being missed, treat
+this as an explicit safety surface and:
+
+1. Post the comment **and** state in the chat reply that the gate was
+   bypassed for safety.
+2. Cite the rule + the carve-out in the comment body so the reviewer
+   knows why the agent broke the default silence.
+
+Routine CI status, refactor progress, and "this might interest you"
+notes do **not** clear this carve-out.
+
+## See also
+
+- [`/create-pr`](../commands/pr/create.md) — PR body / description path (not gated).
+- [`/fix:pr-comments`](../commands/fix/pr-comments.md) — review-reply path (not gated).
+- [`no-attribution-footers`](no-attribution-footers.md) — sibling rule on PR-comment hygiene.
+- [`no-decorative-emojis-in-git-surfaces`](no-decorative-emojis-in-git-surfaces.md) — sibling rule gating decorative emojis in any comment that does get posted.
+- [`scope-control`](scope-control.md) — git-ops permission gate (PR creation).
+- `personal.pr_progress_comments` in `config/agent-settings.template.yml`.