@event4u/agent-config 5.10.1 → 6.1.0

package/docs/decisions/ADR-013-discovery-frontmatter-contract.md

@@ -123,9 +123,11 @@ Amendments to the workspace list require an ADR-013 amendment.
 | `ai-video` | AI video pipeline (per ADR-011, the only heavyweight domain). |
 | `fun` | Non-essential social/fun workflows (prediction-pool tips, etc.). Optional under the `small-business` workspace; `experimental` trust. |
 | `meta` | Artefacts that maintain *this* package (`agent-config` itself). |
+| `git` | Git workflow — commit, pull requests, branch sync. Carries `slug_prefix: git` (ADR-044 §A3); `requires: engineering-base`. Added 2026-06-04 for 6.0.0-D Step 12 Class B1 (`commit`→`git-commit`, `create-pr`→`git-pr-create`). |
+| `frontend-design` | Grounded design intelligence — design-knowledge corpus + BM25 grounding engine, design tokens, stack best-practice and chart/typography knowledge. `requires: engineering-base`; `suggests: react, nextjs`. Added 2026-06-07 (ADR-061). |
 
 Amendments to the pack list require an ADR-013 amendment and the
-matching `config/discovery/packs.yml` row in the same PR.
+matching `src/config/discovery/packs.yml` row in the same PR.
 
 ### Non-overlap rule (ADR-010 alignment)
 
@@ -144,7 +146,7 @@ matching `config/discovery/packs.yml` row in the same PR.
   does not fail.
 - **Phase 4**: every artefact under
   `.agent-src.uncondensed/{skills,rules,commands,templates}` either
-  declares the new keys, or sits in `config/discovery/unassigned-artefacts.yml`
+  declares the new keys, or sits in `src/config/discovery/unassigned-artefacts.yml`
   with a one-line reason.
 - **Phase 4+**: CI flips strict; missing annotation is a fail.
 
@@ -203,7 +205,7 @@ discovery-driven action.
 The five required keys (`workspaces`, `packs`, `lifecycle`, `trust`,
 `install`) are now **strictly enforced** across every artefact under
 `.agent-src.uncondensed/{skills,rules,commands,templates}` by
-[`scripts/lint_artefact_frontmatter.py`](../../scripts/lint_artefact_frontmatter.py),
+[`scripts/lint_artefact_frontmatter.py`](../../src/scripts/lint_artefact_frontmatter.py),
 wired into `task lint-artefact-frontmatter`, `task ci`, and the opt-in
 combined pre-commit hook (`./agent-config hooks:install`). The migration
 rule's "Phase 4+" strict flip described above is therefore in effect.
@@ -222,21 +224,21 @@ Driven by [`agents/roadmaps/monorepo-phase-1-frontmatter-metadata.md`](../../age
 
 ### 2026-05-27 — Additive advisory `cluster:` key on packs
 
-Pack entries in [`config/discovery/packs.yml`](../../config/discovery/packs.yml)
+Pack entries in [`src/config/discovery/packs.yml`](../../config/discovery/packs.yml)
 may carry an optional `cluster: <language-id>` field. It groups a framework
 pack under a programming-language tile in the setup wizard's capability-packs
 step (e.g. `laravel: cluster: php`, `react: cluster: typescript`). Like
 `requires_hint`, it is **advisory only** — the installer does not act on it; it
 drives the wizard UI's collapsible language→framework grouping. The value must
 be a known pack id (and not self-referential), enforced by
-[`scripts/lint_discovery_vocabulary.py`](../../scripts/lint_discovery_vocabulary.py)
+[`scripts/lint_discovery_vocabulary.py`](../../src/scripts/lint_discovery_vocabulary.py)
 and emitted into the discovery manifest. Additive, no vocabulary rename.
 
 Driven by [`agents/roadmaps/road-to-wizard-ux-improvements.md`](../../agents/roadmaps/road-to-wizard-ux-improvements.md) § Phase 4 (AI-council-resolved: reuse `packs.yml` as the single source of truth rather than a second mapping file).
 
 ### 2026-05-27 — Additive advisory `example_roles:` key on workspaces
 
-Workspace entries in [`config/discovery/workspaces.yml`](../../config/discovery/workspaces.yml)
+Workspace entries in [`src/config/discovery/workspaces.yml`](../../config/discovery/workspaces.yml)
 may carry an optional `example_roles: [<title>, …]` list of illustrative job
 titles (e.g. `engineering: [Developer, CTO]`, `finance: [CFO]`). The wizard's
 roles step shows the workspace as the *area* and these titles as examples under
@@ -251,15 +253,32 @@ Additive, no vocabulary rename. (Same change cleaned the `finance` label from
 
 Added pack id `fun` to the closed vocabulary (Non-essential social/fun
 workflows — prediction-pool tip optimization, etc.). Mirrored in
-[`config/discovery/packs.yml`](../../config/discovery/packs.yml) and the
+[`src/config/discovery/packs.yml`](../../config/discovery/packs.yml) and the
 `ADR_PACKS` frozenset in
-[`scripts/lint_discovery_vocabulary.py`](../../scripts/lint_discovery_vocabulary.py).
+[`scripts/lint_discovery_vocabulary.py`](../../src/scripts/lint_discovery_vocabulary.py).
 Optional under the `small-business` workspace (alongside `ai-video`);
 `trust_level_default: experimental`, `install.default: false`. First
 artefacts: the `/prediction-pool` command + `prediction-pool-optimizer` skill in
 `packages/pack-fun/`. Additive, no rename; non-overlap with cost-profile
 and `profile.id` reservations holds.
 
+### 2026-06-07 — New `frontend-design` pack
+
+Added pack id `frontend-design` to the closed vocabulary (grounded design
+intelligence — design-knowledge corpus + BM25 grounding engine, design tokens,
+stack best-practice and chart/typography knowledge, adopted from the MIT
+an external reference corpus per ADR-061). Mirrored in
+[`src/config/discovery/packs.yml`](../../src/config/discovery/packs.yml) and the
+`ADR_PACKS` frozenset in
+[`scripts/lint_discovery_vocabulary.py`](../../src/scripts/lint_discovery_vocabulary.py).
+`workspaces: [engineering]`, `requires: [engineering-base]`,
+`suggests: [react, nextjs]` (the corpus is stack-agnostic data — React is
+suggested, never required), `trust_level_default: professional`,
+`size_class: medium`. Council-resolved 2026-06-07 (anthropic/claude-sonnet-4-5 +
+openai/gpt-4o, converged A2: opt-in pack over inflating `engineering-base`
+with ~1 MB of design data). Additive, no rename; non-overlap with
+cost-profile and `profile.id` reservations holds.
+
 ## Cross-references
 
 - [ADR-007 — Agent Discovery Scopes](ADR-007-agent-discovery-scopes.md):

package/docs/decisions/ADR-015-discovery-manifest-contract.md

@@ -27,10 +27,10 @@ TypeScript installer (Phase 3), the browser wizard (Phase 6), the docs
 site, and any third-party consumer read instead of walking the source
 tree. The invariant from the founder intake:
 
-> Beim Erstellen eines Releases müssen alle Skills, etc. nach Workspace
-> und Pack untersucht werden, so dass das für den Installer gespeichert
-> wird und zur Verfügung steht. Es soll keine manuelle Package &
-> Workspace Liste gepflegt werden.
+> Beim Erstellen eines Releases müssen alle Skills, etc. nach Workspace  <!-- md-language-check: ignore -->
+> und Pack untersucht werden, so dass das für den Installer gespeichert  <!-- md-language-check: ignore -->
+> wird und zur Verfügung steht. Es soll keine manuelle Package &  <!-- md-language-check: ignore -->
+> Workspace Liste gepflegt werden.  <!-- md-language-check: ignore -->
 
 **No manual list. Ever.** The pack and workspace shape grows by stamping
 frontmatter, not by editing a list.
@@ -68,7 +68,7 @@ install-axis without a current consumer. Re-evaluate in Phase 5.
 
 The generator walks `.agent-src.uncondensed/`, **not** `.agent-src/`.
 The Phase-2 roadmap text §Phase 2 says "the condensed canonical tree"
-— that is a documentation slip. `augment-source-of-truth` rule states
+— that is a documentation slip. `source-of-truth` rule states
 that uncondensed is canonical; the condensed tree is a build output
 and may be regenerated. Manifest pipelines that read build outputs are
 fragile to bootstrap order.

package/docs/decisions/ADR-017-monorepo-physical-layout.md

@@ -25,8 +25,8 @@ Companion artefacts:
 - [`agents/roadmaps/monorepo-phase-4-physical-package-layout.md`](../../agents/roadmaps/monorepo-phase-4-physical-package-layout.md)
 - [`dist/migration/move-plan.json`](../../dist/migration/move-plan.json) (94 moves, 432 core, 0 conflicts)
 - [`dist/migration/pre-move-snapshot.json`](../../dist/migration/pre-move-snapshot.json) (744 files hashed)
-- [`scripts/plan_physical_move.py`](../../scripts/plan_physical_move.py) (plan + apply)
-- [`scripts/verify_physical_move.py`](../../scripts/verify_physical_move.py) (post-move diff vs. snapshot)
+- [`scripts/plan_physical_move.py`](../../src/scripts/plan_physical_move.py) (plan + apply)
+- [`scripts/verify_physical_move.py`](../../src/scripts/verify_physical_move.py) (post-move diff vs. snapshot)
 
 ## Context
 
@@ -77,7 +77,7 @@ and ships. The TS installer needs zero behavioural changes — only the
 
 ### 2. Mapping rules (deterministic, lockfile-stable)
 
-Implemented in [`scripts/plan_physical_move.py`](../../scripts/plan_physical_move.py):
+Implemented in [`scripts/plan_physical_move.py`](../../src/scripts/plan_physical_move.py):
 
 1. **Kernel rules** → `packages/core/` (allowlist, sanity-checked against
    [`docs/contracts/kernel-membership.md`](../contracts/kernel-membership.md) §4).
@@ -96,7 +96,7 @@ Implemented in [`scripts/plan_physical_move.py`](../../scripts/plan_physical_mov
 5. **Pack-routable artefacts** → `packages/pack-<id>/`, where `<id>` is
    the first entry in `packs[]`. Tie-breaking by alphabetic pack id.
 6. **Quarantined scaffolds** (the 26 entries in
-   [`config/discovery/unassigned-artefacts.yml`](../../config/discovery/unassigned-artefacts.yml))
+   [`src/config/discovery/unassigned-artefacts.yml`](../../config/discovery/unassigned-artefacts.yml))
    → `packages/core/` with `unassigned scaffold:` reason recorded in the
    move plan. The top-level `.agent-src.uncondensed/README.md` was added
    here during dry-run.
@@ -116,7 +116,7 @@ point; it refuses if any conflict remains. No human-edited paths.
 `task sync` + `task build-discovery` after the move must produce
 `.agent-src/`, `.augment/`, and `dist/discovery/discovery-manifest.json`
 byte-identical to the pre-move snapshot **except** for
-`artefacts[].path` values. [`scripts/verify_physical_move.py`](../../scripts/verify_physical_move.py)
+`artefacts[].path` values. [`scripts/verify_physical_move.py`](../../src/scripts/verify_physical_move.py)
 captures a post-move snapshot and diffs against
 `dist/migration/pre-move-snapshot.json`; the only allowed delta is the
 `path` field per artefact.

package/docs/decisions/ADR-018-trust-and-safety-layer.md

@@ -24,8 +24,8 @@ Session: [`agents/runtime/council/responses/phase-5-trust-safety.json`](../../ag
 Companion artefacts:
 - Contract: [`docs/contracts/trust-and-safety.md`](../contracts/trust-and-safety.md)
 - Roadmap: [`agents/roadmaps/monorepo-phase-5-trust-safety-layer.md`](../../agents/roadmaps/monorepo-phase-5-trust-safety-layer.md)
-- Lint: [`scripts/lint_trust_coherence.py`](../../scripts/lint_trust_coherence.py) + [`tests/test_lint_trust_coherence.py`](../../tests/test_lint_trust_coherence.py)
-- Condenseor: [`scripts/condense.py`](../../scripts/condense.py) (`_inject_hrr_banner`)
+- Lint: [`scripts/lint_trust_coherence.py`](../../src/scripts/lint_trust_coherence.py) + [`tests/test_lint_trust_coherence.py`](../../tests/test_lint_trust_coherence.py)
+- Condenseor: [`scripts/condense.py`](../../src/scripts/condense.py) (`_inject_hrr_banner`)
 - Installer: [`packages/core/installer/src/trust-escalation.ts`](../../packages/core/installer/src/trust-escalation.ts)
 
 ## Context

package/docs/decisions/ADR-019-router-json-dist-location.md

@@ -20,7 +20,7 @@ ADR-015.
 
 Companion artefacts:
 - Contract: [`docs/contracts/rule-router.md`](../contracts/rule-router.md)
-- Compiler: [`scripts/compile_router.py`](../../scripts/compile_router.py)
+- Compiler: [`scripts/compile_router.py`](../../src/scripts/compile_router.py)
 - ADR-rule-kernel-and-router: [`ADR-rule-kernel-and-router.md`](ADR-rule-kernel-and-router.md)
 - Tier ADR: [`docs/adrs/router/0001-three-tier-routing.md`](../adrs/router/0001-three-tier-routing.md)
 
@@ -119,6 +119,6 @@ external uptake**.
 - [`docs/contracts/rule-router.md`](../contracts/rule-router.md) — frontmatter + read-path contract.
 - [`docs/contracts/kernel-membership.md`](../contracts/kernel-membership.md) — kernel cap.
 - [`dist/router.json`](../../dist/router.json) — compiled output.
-- [`scripts/compile_router.py`](../../scripts/compile_router.py) — compiler.
+- [`scripts/compile_router.py`](../../src/scripts/compile_router.py) — compiler.
 - [`ADR-015-discovery-manifest-contract.md`](ADR-015-discovery-manifest-contract.md) — precedent for `dist/` allowlist.
 - [`ADR-rule-kernel-and-router.md`](ADR-rule-kernel-and-router.md) — original kernel-and-router decision.

package/docs/decisions/ADR-020-global-only-consumer-scope.md

@@ -24,7 +24,7 @@ Companion artefacts:
 - Bridge contract: [`docs/contracts/consumer-bridge.md`](../contracts/consumer-bridge.md)
 - Wizard contract: [`docs/contracts/gui-wizard.md`](../contracts/gui-wizard.md)
 - Predecessor ADR: [`ADR-007`](ADR-007-agent-discovery-scopes.md) — scope precedence, global-default amendment
-- Perms entry-gate: [`scripts/lint_global_paths.py`](../../scripts/lint_global_paths.py)
+- Perms entry-gate: [`scripts/lint_global_paths.py`](../../src/scripts/lint_global_paths.py)
 - Payload schema: [`internal/schemas/wizard-apply-payload.schema.json`](../../internal/schemas/wizard-apply-payload.schema.json)
 
 ## Context
@@ -97,6 +97,28 @@ the user-content / metadata surface without violating global-only.
 Forbidden, unchanged: writing any distributed content into the
 consumer repo outside `AGENT_CONFIG_DEV_MODE=1`.
 
+## Amendment — 2026-06-03 · settings-scope correction (ADR-049)
+
+The original Consequences bullet "one source of truth for `personal.*`,
+`agent_council.*`, and `personas:`" overstated the global surface and used a
+key name that never existed in code. [`ADR-049`](ADR-049-configuration-trust-boundary.md)
+(AI-council-converged, anthropic/claude-sonnet-4-5 + openai/gpt-4o, 2026-06-03)
+corrects this:
+
+- The global surface is **secrets** (provider keys, already global) plus the
+  curated identity **whitelist** (`MERGEABLE_KEYS`) — not all of `personal.*`,
+  not council config, not personas.
+- **Council configuration and personas stay project-local** (version-controlled).
+  The `MERGEABLE_KEYS` whitelist is a **security trust boundary**: an untrusted
+  project repo must not be able to escalate `ai_council` / arbitrary `personal.*`
+  into user scope. Widening the whitelist now requires a threat model.
+- The key name is **`ai_council`** (canonical, in `agents/settings/.ai-council.yml`),
+  never `agent_council`.
+
+This amendment narrows ADR-020's wording; the global-only **consumer install**
+decision (distributed content writes only to `~/.event4u/agent-config/`) is
+unchanged.
+
 ## Alternatives considered
 
 - **Status quo (project default + global opt-in).** Keeps the drift
@@ -113,7 +135,10 @@ consumer repo outside `AGENT_CONFIG_DEV_MODE=1`.
 ## Consequences
 
 **Positive.**
-- One source of truth for `personal.*`, `agent_council.*`, and `personas:`.
+- One source of truth for the curated cross-project identity keys
+  (`MERGEABLE_KEYS`) and provider secrets. _(Amended 2026-06-03 — the original
+  wording named `personal.*`, `agent_council.*`, and `personas:` as global; see
+  the settings-scope correction below and [`ADR-049`](ADR-049-configuration-trust-boundary.md): council config + personas stay project-local; the key is `ai_council`.)_
 - New skills / rules / commands reach every consumer the moment they
   install or run `task dev:install-global` — no per-repo bump.
 - The onboarding wizard becomes the only authoring surface for

package/docs/decisions/ADR-022-daily-workspace-decomposition.md

@@ -14,7 +14,7 @@ type: forward-looking
 ## Status
 
 **Accepted** · 2026-05-24. Phase 4 Step 1 of
-[`road-to-employee-product-and-external-proof.md`](../../agents/roadmaps/road-to-employee-product-and-external-proof.md).
+[`road-to-employee-product-and-external-proof.md`](../../agents/roadmaps/archive/road-to-employee-product-and-external-proof.md).
 Records the council's verdict on the original "workspace shape"
 question — that the question was malformed — and replaces a single
 chrome decision with three sequenced sub-decisions.
@@ -29,7 +29,7 @@ number under the new strategy.
 
 Companion artefacts:
 
-- Roadmap: [`agents/roadmaps/road-to-employee-product-and-external-proof.md`](../../agents/roadmaps/road-to-employee-product-and-external-proof.md)
+- Roadmap: [`agents/roadmaps/archive/road-to-employee-product-and-external-proof.md`](../../agents/roadmaps/archive/road-to-employee-product-and-external-proof.md)
 - Council question: [`agents/decisions/open-questions/daily-workspace-shape.md`](../../agents/decisions/open-questions/daily-workspace-shape.md)
 - Council verdict: `agents/runtime/council/responses/daily-workspace-shape.json` (gitignored) <!-- council-ref-allowed: ADR decision trace -->
 - Predecessor ADRs: [`ADR-014`](ADR-014-gui-framework-choice.md) (installer chrome), [`ADR-016`](ADR-016-installer-architecture.md) (installer architecture), [`ADR-020`](ADR-020-global-only-consumer-scope.md) (consumer scope).

package/docs/decisions/ADR-024-workspace-v0-feature-floor.md

@@ -123,4 +123,4 @@ be dropped or expanded without rewriting the others.
 - Predecessor ADRs: [`ADR-022`](ADR-022-daily-workspace-decomposition.md), [`ADR-023`](ADR-023-host-agent-protocol.md).
 - Knowledge ingestion contract: [`docs/contracts/local-knowledge-ingestion.md`](../contracts/local-knowledge-ingestion.md).
 - Role experience contract: [`docs/contracts/role-experience.md`](../contracts/role-experience.md).
-- Roadmap: [`agents/roadmaps/road-to-employee-product-and-external-proof.md`](../../agents/roadmaps/road-to-employee-product-and-external-proof.md) Phase 4.
+- Roadmap: [`agents/roadmaps/archive/road-to-employee-product-and-external-proof.md`](../../agents/roadmaps/archive/road-to-employee-product-and-external-proof.md) Phase 4.

package/docs/decisions/ADR-026-explain-mode-translation.md

@@ -112,6 +112,6 @@ glossary YAMLs translate forward.
 ## Cross-references
 
 - Contract: [`docs/contracts/explain-modes.md`](../contracts/explain-modes.md).
-- Envelope: [`docs/contracts/agent-memory-contract.md`](../contracts/agent-memory-contract.md).
+- Envelope: [`internal/schemas/retrieval-v1.schema.json`](../../internal/schemas/retrieval-v1.schema.json).
 - Workspace: [`ADR-025`](ADR-025-workspace-chrome.md), [`docs/contracts/daily-workspace.md`](../contracts/daily-workspace.md).
 - Roles: [`docs/contracts/role-experience.md`](../contracts/role-experience.md).

package/docs/decisions/ADR-028-root-layout.md

@@ -4,7 +4,7 @@ status: accepted
 date: 2026-05-25
 decision: root-layout
 supersedes: —
-superseded_by: —
+superseded_by: ADR-045
 phase: v3.x · root-layout-cleanup Phase 1
 type: structural
 review_date: 2027-05-25

package/docs/decisions/ADR-030-claude-code-command-projection.md

@@ -75,7 +75,7 @@ Rejected alternatives:
 Session 2026-05-28, design mode, 2 rounds, $0.06 actual.
 Members: `claude-sonnet-4-5` + `gpt-4o`. Both converged on Option B,
 CONDITIONAL on the three verifications below. Responses captured at
-`agents/runtime/council/responses/claude-code-distribution.json`.
+`agents/runtime/council/responses/claude-code-distribution.json`. <!-- council-ref-allowed: ADR decision trace -->
 
 ### Three conditions (all verified 2026-05-28)
 
@@ -136,7 +136,7 @@ See § Decision above — Option A (dual projection) and Option C
 - Roadmap:
   `agents/roadmaps/road-to-claude-code-global-distribution.md` Phase 3.
 - Council session responses:
-  `agents/runtime/council/responses/claude-code-distribution.json`.
+  `agents/runtime/council/responses/claude-code-distribution.json`. <!-- council-ref-allowed: ADR decision trace -->
 - Empirical verification: `~/.claude/commands/probe/sub.md` route
   test, 2026-05-28 (Condition 1 + Condition 2).
 - Mirror implementation: `scripts/install.py::_CLAUDE_SKILL_BUNDLE`

package/docs/decisions/ADR-038-canonical-settings-path.md

@@ -51,6 +51,26 @@ co-located with the rest of the settings layer. The repo-root
 - The `.gitignore` basename match already covers the canonical path — no new
   ignore entry required.
 
+## Amendment — 2026-06-03 · dev-mode resolution semantics
+
+Recorded alongside [`ADR-049`](ADR-049-configuration-trust-boundary.md) so a
+future contributor does not read `AGENT_CONFIG_DEV_MODE=1` as a settings-scope
+escape hatch.
+
+When `AGENT_CONFIG_DEV_MODE=1` (`scripts/install.py` treats the package repo as
+both source and project surface, per [`ADR-020`](ADR-020-global-only-consumer-scope.md)):
+
+- The package repo's `agents/settings/` **is** the project surface — its
+  `.agent-settings.yml` / `.ai-council.yml` are the maintainer's test fixtures
+  for exercising the loader against real files, not a workaround.
+- The user-global layer (`~/.event4u/agent-config/`) still provides the
+  whitelisted identity keys and provider secrets exactly as in a consumer install.
+- **No special merge logic.** The normal cascade composes (user-global whitelist
+  → project-canonical → local override). Dev-mode changes *which directory* is the
+  project surface, never *which keys* may cascade — the `MERGEABLE_KEYS` trust
+  boundary from [`ADR-049`](ADR-049-configuration-trust-boundary.md) holds
+  unchanged.
+
 ## Alternatives considered
 
 - **Keep root canonical (status quo).** Rejected: leaves the override/main-file

package/docs/decisions/ADR-041-controlled-command-verbs.md

@@ -0,0 +1,133 @@
+---
+adr: 041
+status: accepted
+date: 2026-06-03
+decision: controlled-command-verbs
+supersedes: —
+superseded_by: —
+phase: v6.0.0 · governance, evals, evidence-based pruning
+type: forward-looking
+---
+
+# ADR-041 — Controlled verb vocabulary for visible commands
+
+## Status
+
+**Accepted** · 2026-06-03. Authored as Phase 2 / Step 4 of
+[`road-to-6.0.0-c-governance-and-evals`](../../agents/roadmaps/road-to-6.0.0-c-governance-and-evals.md),
+the governance front of the experience-first rebuild. Sits alongside the
+per-pack command budget ([`capability-packs.md` § Budget exemption
+process](../contracts/capability-packs.md)) and the routing-metadata
+requirement (Step 4b). Builds on
+[`ADR-003`](ADR-003-command-invocation-syntax.md) (cluster / colon syntax) and
+the locked-cluster contract
+([`command-clusters.md`](../contracts/command-clusters.md)).
+
+## Context
+
+6.0.0-B made the capability **pack** the surfacing unit; 6.0.0-C installs the
+governance that keeps the surface from re-bloating. A per-pack command budget
+caps *how many* visible commands a pack carries. This ADR governs *how they are
+named*: a visible command's leading token must be a controlled verb, so the
+surface reads as a small, predictable verb vocabulary (`work`, `implement`,
+`review`, `fix`, …) rather than an open-ended noun soup.
+
+Without a controlled vocabulary, every new visible command invents its own
+naming shape and the "fewer, navigable commands" promise of the pack rebuild
+erodes one well-meaning addition at a time. The `create-*` shape is singled out
+for an outright ban: which files to create is an in-flow decision the agent
+makes, not a command surface to enumerate.
+
+> **Council convergence (anthropic/claude-sonnet-4-5 + openai/gpt-4o,
+> 3-round design debate, 2026-06-03):** both members converged on
+> forward-only enforcement (grandfather the existing surface, gate new
+> additions), a **version-controlled YAML allowlist** reviewed via PR with an
+> ADR for any new verb, **grandfathering `create-pr`** through an explicit
+> documented exception rather than a broad exemption, and a **single modular
+> lint** (one pass, configurable severity) over two/three separate lints — the
+> "vocabulary gate + structure advisor" split was rejected because a
+> CI-passes / review-fails wedge trains contributors to ignore warnings.
+
+## Decision
+
+1. **Controlled verb allowlist.** Visible commands (tier 0/1) must have a
+   leading token (the substring before the first `-`, or the cluster sub-name
+   for `cluster:sub` commands) drawn from the allowlist in
+   [`src/config/discovery/command-verbs.yml`](../../config/discovery/command-verbs.yml).
+   The allowlist seeds the curated verbs (`work`, `audit`, `plan`, `implement`,
+   `review`, `fix`, `test`, `ship`, `sync`, `explain`, `estimate`, `refine`,
+   `publish`) plus the established cluster-head / standalone tokens already in
+   use on the visible surface (so the existing 20 visible commands all pass).
+
+2. **No `create-*` commands.** `create` is a banned leading token for *new*
+   visible commands. The agent decides which files to create in-flow; the
+   command surface does not enumerate creation targets.
+
+3. **`create-pr` is grandfathered** via an explicit `grandfathered:` entry in
+   the YAML — a documented single-command exception, not a broad waiver.
+
+4. **Forward-only enforcement.** The lint
+   ([`scripts/lint_command_verbs.py`](../../src/scripts/lint_command_verbs.py))
+   checks only command files **added or promoted to visible since the `main`
+   baseline**, mirroring `lint_no_new_atomic_commands.py`. The existing surface
+   is grandfathered; no rename wave.
+
+5. **A new verb requires an ADR.** Adding a token to `approved_verbs` is a
+   governance change: it lands in its own PR with a short ADR (or an addendum
+   referencing this one) justifying the new verb. The YAML is the machine list;
+   the ADR is the human rationale.
+
+6. **Single modular lint.** One lint pass implements both the approved-verb rule
+   and the banned-prefix rule. No separate "advisory" lint that warns without
+   gating — every rule the lint carries blocks CI (configurable per-rule, but
+   default error), so there is no CI-green / review-red wedge.
+
+## Consequences
+
+- **Positive.** The visible surface stays a small, scannable verb vocabulary.
+  New commands are nudged toward reuse of an existing verb (and therefore an
+  existing cluster) before inventing a new one. The `create-*` ban removes a
+  whole class of "expose a creation target as a command" growth.
+- **Positive.** Forward-only + grandfathering means zero disruption to the
+  current surface; the gate only ever fires on a *new* visible command.
+- **Negative / accepted.** The seeded allowlist includes established cluster-head
+  nouns (`feature`, `judge`, `council`, `memory`, `roadmap`, `agents`), so the
+  vocabulary is not purely verbs on day one. This is the cost of forward-only
+  grandfathering; the teeth come from "a new token needs an ADR", not from
+  retroactively purging the established heads.
+- **Negative / accepted.** Leading-token tokenization is a heuristic
+  (`review-changes` → `review`). Compound or underscore-shaped names are out of
+  scope until a real case appears.
+
+## Alternatives considered
+
+- **Retroactive enforcement** (every existing visible command must conform now).
+  Rejected: forces a rename wave across a heavily-referenced surface for no
+  user-facing gain. Both council members rejected it.
+- **Two/three separate lints** (cluster-head structure advisor + sub-verb gate +
+  banned-pattern gate) with mixed soft/hard severity. Rejected per the council:
+  advisory-only warnings that never graduate to errors become noise and create a
+  CI-passes / review-fails wedge.
+- **Rename `create-pr`.** Rejected: breaking change across docs, READMEs, and
+  other commands for no benefit; an explicit grandfather entry is cheaper and
+  honest.
+
+## Amendment — 2026-06-04 · `git` verb (6.0.0-D Step 12, Class B1)
+
+> **Accepted** · 2026-06-04. ADR-044 §3 makes `commit` / `create-pr` move into a
+> dedicated `git` pack with `slug_prefix: git` (Class B1), so their canonical
+> invocations become `git-commit` / `git-pr-create`. The leading token `git` is
+> therefore added to `approved_verbs`. This both honours the new naming scheme
+> and lets the long-standing `create-pr` grandfather entry retire naturally: the
+> canonical name is now `git-pr-create` (verb `git`, banned `create-` prefix no
+> longer in the leading position), with `replaces: [create-pr]` keeping the old
+> invocation routable via `migrate`. The grandfather row stays until the alias
+> window closes (6.1).
+
+## References
+
+- [`src/config/discovery/command-verbs.yml`](../../config/discovery/command-verbs.yml) — the allowlist + banned prefixes + grandfathered exceptions.
+- [`scripts/lint_command_verbs.py`](../../src/scripts/lint_command_verbs.py) — the forward-only single lint.
+- [`command-clusters.md`](../contracts/command-clusters.md) — locked clusters + sub-command naming.
+- [`capability-packs.md`](../contracts/capability-packs.md) — sibling per-pack budget governance (Phase 1).
+- [`ADR-003`](ADR-003-command-invocation-syntax.md) — invocation / colon syntax.

package/docs/decisions/ADR-042-runtime-resolver-decision-gate.md

@@ -0,0 +1,113 @@
+---
+adr: 042
+status: accepted
+date: 2026-06-03
+decision: runtime-resolver-decision-gate
+supersedes: —
+superseded_by: —
+phase: v6.0.0 · governance, evals, evidence-based pruning
+type: decision
+---
+
+# ADR-042 — Runtime pack resolver: STOP (projection-time filtering is sufficient)
+
+## Status
+
+**Accepted** · 2026-06-03. Records the Phase 5 decision gate of
+[`road-to-6.0.0-c-governance-and-evals`](../../agents/roadmaps/road-to-6.0.0-c-governance-and-evals.md)
+(Step 9). Builds directly on
+[`ADR-040`](ADR-040-execution-model-projection-time-filtering.md)
+(projection-time filtering, not a runtime resolver).
+
+## Context
+
+6.0.0-B shipped **projection-time** (build/install-time) pack-scoped filtering.
+The final phase of 6.0.0-C is a STOP/GO gate: do we ALSO build a **runtime
+resolver** that re-resolves the active pack set mid-session, live, as the user
+switches context?
+
+The gate criterion (from the roadmap): *"Only if the answer is 'switching
+demanded' does a runtime resolver earn its place. If not, STOP — projection-time
+filtering was sufficient and a runtime resolver is over-engineering."*
+
+The evidence at decision time:
+
+- **ADR-040 already chose projection-time** as the mechanism and did not
+  foreclose runtime resolution forever — it scoped 6.0.0 to projection-time.
+  Overturning that precedent requires extraordinary, proven demand.
+- **No telemetry exists.** The measurement events (`rule.tier2_loaded`,
+  `persona.cited`, `skill.activated`) were only just added in this roadmap's
+  Phase 3; the evidence-based-pruning contract requires ≥ 30 days before any
+  usage claim is trustworthy. There is zero accumulated data showing
+  mid-session switching demand.
+- **A lightweight mid-session affordance already exists.** `/profile:activate`
+  writes an ephemeral `runtime.active_packs` overlay that *biases* the surfaced
+  set (recommendation-bias MVP, no persistence, no execution-gating). Users can
+  already bias mid-session without a resolver.
+
+## Decision
+
+**STOP. Do not build a runtime pack resolver now.** Projection-time filtering
+(ADR-040) plus the `/profile:activate` recommendation-bias overlay is sufficient
+for the surfacing problem 6.0.0 set out to solve. A runtime resolver would cross
+a new config→execution trust boundary, introduce state-sync complexity (what
+happens when projection-time config changes while runtime state is active?), and
+add a context-window tax (every pack switch = a new system prompt) — all with
+**no evidence** the problem it solves exists.
+
+> **Council convergence (anthropic/claude-sonnet-4-5 + openai/gpt-4o, 3-round
+> design debate, 2026-06-03):** both members converged on **STOP**. The burden
+> of proof rests on PROCEED and is not met without telemetry; `/profile:activate`
+> already covers mid-session biasing; building the resolver now is "speculative
+> engineering". Both flagged a sharper refinement: high `/profile:activate`
+> usage alone would justify making the overlay *persistent*, NOT a full
+> resolver — only an **execution-gating** need (skills *unavailable*, not just
+> de-prioritised) that the overlay cannot serve would justify the resolver.
+
+## Re-trigger condition (falsifiable)
+
+This decision reopens only when **all** of the following hold, measured over a
+**≥ 30-day** telemetry window:
+
+1. **Switching frequency** — `/profile:activate` invoked ≥ 2×/session in ≥ 40%
+   of sessions.
+2. **Pack diversity** — users switch between ≥ 3 distinct pack combinations
+   (not just toggling one pack on/off).
+3. **Execution-gating need** — explicit user feedback requesting *execution-level*
+   gating (skills made unavailable in a mode, not merely de-prioritised) that
+   projection-time + `/profile:activate` cannot serve.
+
+If only (1) and (2) hold without (3), the correct response is to make
+`/profile:activate` **persistent across sessions** (a config-write), NOT to
+build a resolver. The resolver earns its place only when the need is
+execution-gating, not recommendation-bias.
+
+## Consequences
+
+- **Positive.** No new trust boundary, no state-sync complexity, no
+  context-window tax. The 6.0.0 rebuild ships with the simplest mechanism that
+  solves the stated problem. ADR-040's precedent is reaffirmed, not eroded.
+- **Positive.** The re-trigger condition is concrete and data-bearing — a future
+  decision is made on telemetry, not on a guess, consistent with the
+  evidence-based-pruning posture of this whole roadmap.
+- **Negative / accepted.** If a real execution-gating need emerges, it waits for
+  the next ≥ 30-day telemetry window before it can be acted on. Accepted: the
+  cost of waiting is low (the overlay covers biasing today), and the cost of
+  building speculatively is high.
+
+## Alternatives considered
+
+- **PROCEED — build the runtime resolver now.** Rejected: no evidence of demand,
+  overturns ADR-040 without cause, adds a new trust boundary and context-window
+  cost. The council's hardest pushback throughout the 6.0.0 rebuild.
+- **Build a smaller "persistent `/profile:activate`" instead.** Deferred, not
+  rejected: it is the *correct* response IF re-trigger conditions (1)+(2) fire
+  without (3). Not warranted now (no telemetry), but it is the cheaper next step
+  if data later shows persistence demand.
+
+## References
+
+- [`ADR-040`](ADR-040-execution-model-projection-time-filtering.md) — the projection-time decision this gate reaffirms.
+- [`evidence-based-pruning.md`](../contracts/evidence-based-pruning.md) — the ≥ 30-day telemetry posture the re-trigger condition follows.
+- [`local-analytics.md`](../contracts/local-analytics.md) — the `/profile:activate` switching signal the re-trigger reads.
+- [`command-clusters.md`](../contracts/command-clusters.md) § `profile` cluster — the `/profile:activate` overlay.