@event4u/agent-config 6.1.0 → 7.0.0

package/docs/catalog.md

@@ -1,13 +1,13 @@
 # agent-config — Public Catalog
 
-Consumer-facing catalog of all **540 public artefacts** shipped by
+Consumer-facing catalog of all **581 public artefacts** shipped by
 this package. Internal package-maintenance rules and deprecation shims
 are excluded.
 
 > **Regenerate:** `python3 scripts/generate_index.py`
 > Auto-generated — do not edit manually.
 
-## Skills (230)
+## Skills (251)
 
 | kind | name | extra | description |
 |---|---|---|---|
@@ -30,7 +30,14 @@ are excluded.
 | skill | [`authz-review`](../dist/agent-src/skills/authz-review/SKILL.md) |  | Use when reviewing authorization end-to-end — route → gate → policy → query scope → response filter — before changes to permissions, tenants, ownership, or admin flows. |
 | skill | [`aws-infrastructure`](../dist/agent-src/skills/aws-infrastructure/SKILL.md) |  | Use when working with AWS resources — ECS Fargate, ECR, EFS, Secrets Manager, gomplate templates, multi-env deployments — even when the user says 'deploy to staging' without naming AWS. |
 | skill | [`blade-ui`](../dist/agent-src/skills/blade-ui/SKILL.md) |  | Use when the project's frontend stack is Blade — dispatched by `directives/ui/{apply,review,polish}.py`. Covers views, components, partials, layouts, and view logic. |
+| skill | [`blameless-post-mortem`](../dist/agent-src/skills/blameless-post-mortem/SKILL.md) |  | Use after an incident or outage is resolved — blame-free facilitation, root cause, corrective actions, memory write-back — even for a near-miss. Consumes the incident-commander skeleton. |
 | skill | [`blast-radius-analyzer`](../dist/agent-src/skills/blast-radius-analyzer/SKILL.md) |  | Use BEFORE editing shared code — enumerates every call site, event consumer, queue worker, API client, migration, and test that a planned change will touch, with a file:line citation per dependency. |
+| skill | [`brand`](../dist/agent-src/skills/brand/SKILL.md) |  | Grounded brand decisions from a curated corpus — archetype, voice, naming, colour psychology, logo-style fit, messaging frameworks, archetype→type mapping. Use to ground brand strategy and identity. |
+| skill | [`brand-asset-generation`](../dist/agent-src/skills/brand-asset-generation/SKILL.md) |  | Generate brand assets — banners, social cards, CIP elements — with brand-token injection + provider routing. Use when generating a banner / social image / branded asset. |
+| skill | [`brand-audit`](../dist/agent-src/skills/brand-audit/SKILL.md) |  | Audit how a brand is currently expressed across touchpoints and flag drift from its defined tokens, voice, and strategy. Use to inventory and critique an existing brand before changing it. |
+| skill | [`brand-identity`](../dist/agent-src/skills/brand-identity/SKILL.md) |  | Define a brand identity constraint set from a confirmed strategy — colour story, type story, logo direction, imagery direction. Defines the tokens that token emission and asset generation consume. |
+| skill | [`brand-strategy`](../dist/agent-src/skills/brand-strategy/SKILL.md) |  | Ground a brand strategy from the corpus — archetype, opposable positioning, voice and tone, messaging framework. Use to decide who a brand is for, what it stands for, and how it sounds. |
+| skill | [`brand-to-tokens`](../dist/agent-src/skills/brand-to-tokens/SKILL.md) |  | Derive a DTCG .tokens.json source of truth from confirmed brand decisions, emit CSS vars + Tailwind via design-tokens, and export locked brand deck templates. Use to turn a brand identity into tokens. |
 | skill | [`bug-analyzer`](../dist/agent-src/skills/bug-analyzer/SKILL.md) |  | Use when the user shares a Sentry error, Jira bug ticket, or error description and wants root cause analysis. Also for proactive bug hunting and code audits for hidden bugs. |
 | skill | [`build-buy-partner`](../dist/agent-src/skills/build-buy-partner/SKILL.md) |  | Use when deciding insource vs outsource vs acquire — integration-cost analysis, dependency-risk, optionality preservation. Triggers on 'should we build', 'buy vs partner'. |
 | skill | [`canvas-design`](../dist/agent-src/skills/canvas-design/SKILL.md) |  | Use when creating static visual art — posters, marketing visuals, brand assets, PDF/PNG design pieces — even if the user just says 'design a poster' or 'mach uns ein Visual'. |
@@ -62,7 +69,8 @@ are excluded.
 | skill | [`database`](../dist/agent-src/skills/database/SKILL.md) |  | Use when working with database architecture, MariaDB/MySQL tuning, indexing strategies, slow queries, or multi-connection patterns — even when the user just says 'this query is slow'. |
 | skill | [`dcf-modeling`](../dist/agent-src/skills/dcf-modeling/SKILL.md) |  | Wing-4 valuation cognition for a CFO / finance-partner. Use when a deal, internal investment, or board ask names DCF, intrinsic value, WACC, terminal value, or 'what's it worth on a 5-year hold'. |
 | skill | [`deal-qualification-meddic`](../dist/agent-src/skills/deal-qualification-meddic/SKILL.md) |  | Use when qualifying or disqualifying a single deal — MEDDIC slots with evidence, inversion test, disqualification heuristic. Triggers on 'is this deal real', 'should we walk away'. |
-| skill | [`decision-record`](../dist/agent-src/skills/decision-record/SKILL.md) |  | Use when locking a trade-off, structuring an ADR draft, or wiring supersession chains — frames options · trade-offs · consequences before the file is written by `adr-create`. |
+| skill | [`decision-record`](../dist/agent-src/skills/decision-record/SKILL.md) |  | Use when choosing between alternatives with trade-offs — X-or-Y decisions (pattern vs pattern, strategy vs strategy) — frames options · trade-offs · consequences; ADR draft via `adr-create`. |
+| skill | [`decision-review`](../dist/agent-src/skills/decision-review/SKILL.md) |  | Use to audit a past architectural decision — did the chosen option hold up, what assumptions drifted, should the ADR be superseded? Backward review only; does not lock new choices. |
 | skill | [`deep-reading-analyst`](../dist/agent-src/skills/deep-reading-analyst/SKILL.md) |  | Deep analysis of articles/long-form via thinking frameworks (SCQA, mental models, inversion) — 'analyze article', 'deep dive', 'extract insights', URL/text wanting depth not summary. |
 | skill | [`defense-in-depth`](../dist/agent-src/skills/defense-in-depth/SKILL.md) |  | Use when validation needs entry, business-logic, environment, and instrumentation guards so a bad value cannot reach the failure point — turns a local bug fix into a structural one. |
 | skill | [`dependency-upgrade`](../dist/agent-src/skills/dependency-upgrade/SKILL.md) |  | Use when upgrading dependencies — 'update framework X', 'bump runtime version', or 'upgrade packages'. Covers changelog review, breaking-change detection, and verification. Stack-agnostic. |
@@ -77,6 +85,7 @@ are excluded.
 | skill | [`docker`](../dist/agent-src/skills/docker/SKILL.md) |  | Use when working with Docker — Dockerfile edits, docker-compose services, containers, or the dual-container (fast + Xdebug) setup — even when the user just says 'my container won't start'. |
 | skill | [`editorial-calendar`](../dist/agent-src/skills/editorial-calendar/SKILL.md) |  | Use when shaping cadence — evergreen / campaign / reactive split, beat-mapping across channel stages, content-debt management. Triggers on 'plan our content cadence', 'what should we publish'. |
 | skill | [`eloquent`](../dist/agent-src/skills/eloquent/SKILL.md) |  | Use when writing Eloquent models, relationships, scopes, or queries via Model:: — 'fetch users with their orders'. NOT for PHPStan output, non-Eloquent services, or raw SQL questions. |
+| skill | [`emit-tickets`](../dist/agent-src/skills/emit-tickets/SKILL.md) |  | Use when materialising a roadmap into a ticket bundle — 'turn this roadmap into tickets', 'materialise tickets', 'mach Tickets aus der Roadmap', 'emit tickets for this plan'. |
 | skill | [`error-handling-patterns`](../dist/agent-src/skills/error-handling-patterns/SKILL.md) |  | Use when picking a failure-reporting strategy — exceptions vs Result types, recoverable vs not, retry / circuit-breaker / graceful degradation — decision framework only, catalogues externalized. |
 | skill | [`estimate-ticket`](../dist/agent-src/skills/estimate-ticket/SKILL.md) |  | Estimate a Jira/Linear ticket — 'estimate PROJ-123', 'wie groß ist das?', 'should we split this?' — size + risk + split + uncertainty, sibling of /refine-ticket, close-prompt. |
 | skill | [`existing-ui-audit`](../dist/agent-src/skills/existing-ui-audit/SKILL.md) |  | Use BEFORE writing or editing any non-trivial UI — inventories components, design tokens, shadcn primitives, and reusable patterns into state.ui_audit. Hard gate for the ui directive set. |
@@ -97,8 +106,12 @@ are excluded.
 | skill | [`gtm-launch`](../dist/agent-src/skills/gtm-launch/SKILL.md) |  | Use when sequencing a launch — alpha / beta / GA waves, audience-by-wave logic, narrative beats per wave, engineering-readiness gates. Triggers on 'plan the launch', 'sequence GA'. |
 | skill | [`guideline-writing`](../dist/agent-src/skills/guideline-writing/SKILL.md) |  | Use when creating or editing a guideline in docs/guidelines/ — reference material cited by skills, no auto-triggers — even when the user just says 'write up our naming conventions'. |
 | skill | [`hiring-loop-design`](../dist/agent-src/skills/hiring-loop-design/SKILL.md) |  | Use when shaping an engineering hiring loop — stages, take-home vs live, calibration, bar-raiser, signal-vs-noise audit. Triggers on 'design our interview loop', 'audit our hiring bar'. |
+| skill | [`iconography`](../dist/agent-src/skills/iconography/SKILL.md) |  | Resolve an icon request to a concrete Iconify name and emit the embedding for the project's stack. Use when adding icons, picking an icon set, or wiring Lucide/Heroicons/Phosphor/Tabler. |
 | skill | [`image-analyser`](../dist/agent-src/skills/image-analyser/SKILL.md) |  | Use to analyse a character image down to the smallest mole and diff against a canon — per-feature spec, OCR-reads tattoo text, flags drift. Triggers 'analyse this image', 'match the canon'. |
 | skill | [`image-creator`](../dist/agent-src/skills/image-creator/SKILL.md) |  | Use to generate a character image to spec — max-fidelity reproducible prompt from a Canon Spec, anchors-first, provider/governance-gated. Triggers 'generate this character', 'render to spec'. |
+| skill | [`image-editing`](../dist/agent-src/skills/image-editing/SKILL.md) |  | Edit an existing image — inpaint, background swap, variation — via providers that support it. Use when editing/modifying/inpainting an image or making variations. |
+| skill | [`image-generation`](../dist/agent-src/skills/image-generation/SKILL.md) |  | Generate an image from a brief — provider-agnostic blueprint then provider-specific translation, with ref-image/seed reuse for consistency. Use when generating/creating an image. |
+| skill | [`image-provider-routing`](../dist/agent-src/skills/image-provider-routing/SKILL.md) |  | Select the right image-generation provider from job shape — text-in-image to Ideogram, photoreal to Flux, vector/logo to Recraft, general to Gemini/GPT. |
 | skill | [`incident-commander`](../dist/agent-src/skills/incident-commander/SKILL.md) |  | Use during or right after an incident — frames severity, sets comms cadence, drafts the post-mortem skeleton — even when the user just says 'production is down' or 'wir haben einen Vorfall'. |
 | skill | [`jira-integration`](../dist/agent-src/skills/jira-integration/SKILL.md) |  | Use when the user says \"check Jira\", \"create ticket\", \"update issue\", or needs JQL queries, ticket transitions, or branch-to-ticket linking. |
 | skill | [`jobs-events`](../dist/agent-src/skills/jobs-events/SKILL.md) |  | Use when creating Laravel jobs, queued workflows, events, or listeners. Covers clear responsibilities, safe serialization, and retry/failure handling. |
@@ -126,6 +139,7 @@ are excluded.
 | skill | [`livewire`](../dist/agent-src/skills/livewire/SKILL.md) |  | Use when the project's frontend stack is Livewire — dispatched by `directives/ui/{apply,review,polish}.py`. Covers reactive state, events, lifecycle hooks, and component/view separation. |
 | skill | [`livewire-architect`](../dist/agent-src/skills/livewire-architect/SKILL.md) |  | Use when shaping a Livewire component before code — full-page vs partial, parent/child split, event flow, state-vs-props boundary, hydration cost — even on 'add this Livewire component'. |
 | skill | [`logging-monitoring`](../dist/agent-src/skills/logging-monitoring/SKILL.md) |  | Use when working with logging or monitoring — Sentry error tracking, Grafana/Loki log aggregation, structured logging channels, or monitoring helpers. |
+| skill | [`logo-generation`](../dist/agent-src/skills/logo-generation/SKILL.md) |  | Generate a logo or brand mark — structured prompt + provider routing, with a true-vector path via a vector-native provider or LLM-authored SVG for simple marks. Use for logo or brand mark generation. |
 | skill | [`market-entry-analysis`](../dist/agent-src/skills/market-entry-analysis/SKILL.md) |  | Use when sequencing market entry — geo / segment / vertical, beachhead selection, regulatory-delta. Triggers on 'should we enter market X', 'which segment first'. |
 | skill | [`markitdown`](../dist/agent-src/skills/markitdown/SKILL.md) |  | Use when converting PDF, DOCX, XLSX, PPTX, EPUB, images, or audio to Markdown for LLM ingestion via the upstream markitdown-mcp server — 'extract this PDF', 'OCR this image', 'transcribe this audio'. |
 | skill | [`mcp`](../dist/agent-src/skills/mcp/SKILL.md) |  | Use when working with MCP (Model Context Protocol) servers — their tools, capabilities, and best practices for effective agent workflows. |
@@ -163,6 +177,7 @@ are excluded.
 | skill | [`po-discovery`](../dist/agent-src/skills/po-discovery/SKILL.md) |  | Use when shaping a fuzzy product ask into a refined backlog item — problem framing, user-story rewrite, AC tightening — even if the user just says 'help me write this ticket'. |
 | skill | [`positioning-strategy`](../dist/agent-src/skills/positioning-strategy/SKILL.md) |  | Use when locking the market frame — category, segment, alternative, point-of-view — before messaging, launch, or pricing rides on it. Triggers on 'who are we for', 'opposable audit'. |
 | skill | [`prediction-pool-optimizer`](../dist/agent-src/skills/prediction-pool-optimizer/SKILL.md) |  | Optimize prediction-pool tips (kicktipp etc.): rules + multi-book consensus odds → expected-points-max answer for every question, scores AND bonus. Triggers 'optimize my pool tips', 'predict'. |
+| skill | [`premortem`](../dist/agent-src/skills/premortem/SKILL.md) |  | Use before committing to a heavy or irreversible plan — imagine it's 6 months later and this failed; enumerate why, score each mode, derive early-warning signals and preventive guardrails. |
 | skill | [`privacy-review`](../dist/agent-src/skills/privacy-review/SKILL.md) |  | Use when reviewing data flows, support macros, refund templates for GDPR/CCPA/HIPAA fit — regime, consent, PII redaction (email, order-id), breach triage. Triggers 'is this GDPR-safe', 'PII redact'. |
 | skill | [`project-analysis-core`](../dist/agent-src/skills/project-analysis-core/SKILL.md) |  | Raw discovery primitives — project discovery, version resolution, docs loading, architecture mapping, execution flow. Called by `universal-project-analysis`. Single-pass scan → `project-analyzer`. |
 | skill | [`project-analysis-hypothesis-driven`](../dist/agent-src/skills/project-analysis-hypothesis-driven/SKILL.md) |  | Use when a bug has multiple plausible causes across layers — competing hypotheses, validation loops, evidence-based conclusions — even when the user just says 'why is this happening?'. |
@@ -174,6 +189,7 @@ are excluded.
 | skill | [`project-analysis-zend-laminas`](../dist/agent-src/skills/project-analysis-zend-laminas/SKILL.md) |  | Use for deep Zend Framework or Laminas project analysis: bootstrap, config merge order, service manager, MVC flow, data layer, and migration-specific risks. |
 | skill | [`project-analyzer`](../dist/agent-src/skills/project-analyzer/SKILL.md) |  | ONLY when user asks for single-pass tech-stack detection or `agents/evidence/analysis/` write-up. Deep multi-pass audit → `universal-project-analysis`. Raw primitives → `project-analysis-core`. |
 | skill | [`project-docs`](../dist/agent-src/skills/project-docs/SKILL.md) |  | Use when looking for project-specific documentation. Knows which docs exist in agents/reference/docs/ and agents/settings/contexts/ and maps work areas to relevant docs. |
+| skill | [`prompt-engineering-image`](../dist/agent-src/skills/prompt-engineering-image/SKILL.md) |  | Translate an image brief into provider-specific prompt grammar per model. Use when writing or refining an image-generation prompt for Ideogram, Flux, Gemini, GPT Image 2, or Recraft. |
 | skill | [`prompt-engineering-patterns`](../dist/agent-src/skills/prompt-engineering-patterns/SKILL.md) |  | Use when designing production-LLM prompts — few-shot, chain-of-thought, system prompts, templates, self-verification — distinct from prompt-optimizer and refine-prompt. |
 | skill | [`prompt-optimizer`](../dist/agent-src/skills/prompt-optimizer/SKILL.md) |  | Use when the user wants a prompt optimized for ChatGPT, Claude, Gemini, or another AI — 'make this prompt better', 'optimize for ChatGPT', 'rewrite my prompt' — even without saying 'optimize'. |
 | skill | [`prompt-validator`](../dist/agent-src/skills/prompt-validator/SKILL.md) |  | Pre-spend contradiction gate for AI-video runs: checks every prompt in the batch, blocks on style / character / physics mismatch. Triggers 'validate the prompts', 'check the storyboard'. |
@@ -183,7 +199,7 @@ are excluded.
 | skill | [`readme-reviewer`](../dist/agent-src/skills/readme-reviewer/SKILL.md) |  | Use when reviewing a README for accuracy, usability, and alignment with the actual repository. Detects invented content, broken setup steps, and structural issues. |
 | skill | [`readme-writing`](../dist/agent-src/skills/readme-writing/SKILL.md) |  | Use when creating, rewriting, or significantly improving a README based on the actual repository structure, commands, and intended audience. |
 | skill | [`readme-writing-package`](../dist/agent-src/skills/readme-writing-package/SKILL.md) |  | Use when creating or rewriting a README for a reusable package or library. Focus on installability, minimal usage example, compatibility, and developer onboarding. |
-| skill | [`reasoning-orchestrator`](../dist/agent-src/skills/reasoning-orchestrator/SKILL.md) |  | Use for complex / ambiguous / long-horizon work — coordinate the reasoning chain ground→intent→notes→gather→audit→verify; composes existing skills, never duplicates them. |
+| skill | [`reasoning-orchestrator`](../dist/agent-src/skills/reasoning-orchestrator/SKILL.md) |  | Use for multi-step / ambiguous / end-to-end work — refactor a whole module, drive a vague ticket to a verified result, plan+build+verify a migration; coordinates the reasoning chain across skills. |
 | skill | [`receiving-code-review`](../dist/agent-src/skills/receiving-code-review/SKILL.md) |  | Use when processing code review feedback (bot or human) before changing anything — triages, verifies, and pushes back with technical reasoning — even when the user just says 'fix the comments'. |
 | skill | [`refine-prompt`](../dist/agent-src/skills/refine-prompt/SKILL.md) |  | Reconstruct a free-form prompt into actionable AC + assumptions + confidence band before the engine plans — '/work \"…\"', 'baue X', 'ist der Prompt klar genug für die Engine?'. |
 | skill | [`refine-ticket`](../dist/agent-src/skills/refine-ticket/SKILL.md) |  | Refine a Jira/Linear ticket before planning — 'refine ticket', 'tighten AC on PROJ-123', 'ist das Ticket klar?' — rewritten ticket, Top-5 risks, persona voices, sub-skills orchestrated, close-prompt. |
@@ -196,6 +212,7 @@ are excluded.
 | skill | [`risk-officer`](../dist/agent-src/skills/risk-officer/SKILL.md) |  | Use when surfacing and prioritising risk before commit — blast-radius framing, mitigations, residual-risk verdict — even if the user just says 'what could go wrong here?'. |
 | skill | [`roadmap-management`](../dist/agent-src/skills/roadmap-management/SKILL.md) |  | Use when the user says \"create roadmap\", \"show roadmap\", or \"execute roadmap\". Creates, reads, and manages roadmap files with phase tracking. |
 | skill | [`roadmap-writing`](../dist/agent-src/skills/roadmap-writing/SKILL.md) |  | Use when authoring or rewriting a roadmap in agents/roadmaps/ — phase prose, goal sentence, acceptance criteria, council notes — even when the user just says 'write a plan for X' or 'draft a roadmap'. |
+| skill | [`root-cause-frameworks`](../dist/agent-src/skills/root-cause-frameworks/SKILL.md) |  | Use when tracing the root cause of a resolved incident or recurring bug — 5-whys chain, fishbone categorisation, contributing-factors split — even if the user says 'why does this keep breaking?'. |
 | skill | [`rtk-output-filtering`](../dist/agent-src/skills/rtk-output-filtering/SKILL.md) |  | Use when running verbose CLI commands — wraps them with rtk (Rust Token Killer) for 60-90% token savings. Covers installation, configuration, and usage patterns. |
 | skill | [`rule-refactor`](../dist/agent-src/skills/rule-refactor/SKILL.md) |  | Use when the rule set is over the Augment budget, when a new rule would breach it, or when asked to audit / merge / prune rules — runs the audit pipeline and proposes a verdict per rule. |
 | skill | [`rule-writing`](../dist/agent-src/skills/rule-writing/SKILL.md) |  | Use when creating or editing a rule in src/rules/ — trigger wording, always vs auto classification, size budget — even when the user just says 'add a rule for X'. |
@@ -213,8 +230,10 @@ are excluded.
 | skill | [`skill-reviewer`](../dist/agent-src/skills/skill-reviewer/SKILL.md) |  | Use when reviewing, auditing, or optimizing skills — validates against the 7 Skill Killers checklist and produces fix recommendations. |
 | skill | [`skill-writing`](../dist/agent-src/skills/skill-writing/SKILL.md) |  | Use when deciding 'should this be a skill or a rule?', creating/improving/reviewing agent skills, SKILL.md frontmatter, or procedure sections — even without saying 'skill-writing'. |
 | skill | [`song-to-script`](../dist/agent-src/skills/song-to-script/SKILL.md) |  | Turn an audio track into a timed `## Scene N` script: song sections → per-scene durations, auto mode adds mood + lip-sync lines. Triggers 'music video', 'from the song', 'cut to the beat'. |
+| skill | [`source-discovery`](../dist/agent-src/skills/source-discovery/SKILL.md) |  | Use BEFORE planning/coding against a DB schema, API/GraphQL shape, DTO/Model/Entity, or vendor package — read the real source, emit an Evidence Report, stop inventing fields. |
 | skill | [`sql-writing`](../dist/agent-src/skills/sql-writing/SKILL.md) |  | Use when writing raw SQL — MariaDB/MySQL syntax, parameterization, raw migrations, seeders with `DB::statement` — even when the user just pastes a query and asks 'why is this slow' without naming SQL. |
 | skill | [`stakeholder-tradeoff`](../dist/agent-src/skills/stakeholder-tradeoff/SKILL.md) |  | Use when stakeholders pull a decision in different directions — frames each lens, builds a trade-off matrix, surfaces the cost of every choice — even if the user just says 'PO and ops disagree'. |
+| skill | [`standards-from-config`](../dist/agent-src/skills/standards-from-config/SKILL.md) |  | Use when you need this project's coding standards (line length, quotes, import order, naming, commit format) — derive them from the REAL tooling config as a pointer + digest, never a guessed claim. |
 | skill | [`subagent-orchestration`](../dist/agent-src/skills/subagent-orchestration/SKILL.md) |  | Use when orchestrating implementer/judge subagents — seven modes (do-and-judge ±two-stage, do-in-steps/parallel/worktrees, do-competitively, judge-with-debate) — models from .agent-settings.yml. |
 | skill | [`symfony-workflow`](../dist/agent-src/skills/symfony-workflow/SKILL.md) |  | Writes Symfony PHP — DI container, bundles, Doctrine, Messenger, Security voters, console commands. For Laravel / Eloquent / Artisan use `laravel`. For framework-free PHP use `php-coder`. |
 | skill | [`systematic-debugging`](../dist/agent-src/skills/systematic-debugging/SKILL.md) |  | Use when hitting a bug, test failure, crash, or unexpected behavior — enforces reproduce → isolate → hypothesize → verify before any fix — even when the user just says 'this is broken' or 'quick fix'. |
@@ -230,6 +249,7 @@ are excluded.
 | skill | [`throughput-vs-morale-tradeoff`](../dist/agent-src/skills/throughput-vs-morale-tradeoff/SKILL.md) |  | Use when balancing eng-team velocity vs quality vs burnout — on-call load, focus fragmentation, reorg shock. Triggers on 'team is burning out', 'why is velocity dropping'. |
 | skill | [`token-optimizer`](../dist/agent-src/skills/token-optimizer/SKILL.md) |  | Use BEFORE any verbose CLI run, large file read, doc conversion, or near-context handoff — single decision tree keyed by intent that cites the canonical token-saving asset. Consult before the action. |
 | skill | [`traefik`](../dist/agent-src/skills/traefik/SKILL.md) |  | Use when setting up Traefik as a local reverse proxy — real domains on 127.0.0.1, trusted HTTPS via mkcert, automatic service discovery, and multi-project routing. |
+| skill | [`typography-system`](../dist/agent-src/skills/typography-system/SKILL.md) |  | Derive a type system from a style constraint — query curated font pairings, set scale/line-height/weights, emit DTCG tokens via design-tokens. Use when choosing fonts or building a typographic scale. |
 | skill | [`ui-component-architect`](../dist/agent-src/skills/ui-component-architect/SKILL.md) |  | Use when shaping a UI component tree — composition vs inheritance, slot patterns, prop API design, controlled vs uncontrolled, polymorphic — even on 'split this component'. |
 | skill | [`unit-economics-modeling`](../dist/agent-src/skills/unit-economics-modeling/SKILL.md) |  | Use when modeling CAC, LTV, payback, contribution margin, or burn-multiple per customer — SaaS, marketplace, or transactional. Triggers on 'are we unit-economic', 'what is our LTV/CAC'. |
 | skill | [`universal-project-analysis`](../dist/agent-src/skills/universal-project-analysis/SKILL.md) |  | ONLY when user asks for deep multi-pass codebase audit — orchestrator routing to `project-analysis-core` + framework-specific `project-analysis-*`. Single-pass scan → `project-analyzer`. |
@@ -237,12 +257,13 @@ are excluded.
 | skill | [`using-git-worktrees`](../dist/agent-src/skills/using-git-worktrees/SKILL.md) |  | Use when starting parallel work in isolation from the current branch — spawn a git worktree with ignore-safety checks and a clean test baseline — even when the user says 'try this on the side'. |
 | skill | [`validate-feature-fit`](../dist/agent-src/skills/validate-feature-fit/SKILL.md) |  | Validate whether a feature request fits the existing codebase — check for duplicates, contradictions, scope creep, and architectural misfit |
 | skill | [`verify-completion-evidence`](../dist/agent-src/skills/verify-completion-evidence/SKILL.md) |  | Use when claiming 'done', suggesting a commit, push, or PR — runs the evidence gate so completion claims come from fresh output in this message, not memory or earlier runs. |
+| skill | [`verify-repair-loop`](../dist/agent-src/skills/verify-repair-loop/SKILL.md) |  | Use to iterate a change until tests/quality checks pass — bounded run→revise→re-run gated by a numeric threshold, then a judge confirms. Triggers 'iterate to green', 'keep fixing until tests pass'. |
 | skill | [`video-director`](../dist/agent-src/skills/video-director/SKILL.md) |  | Use when turning a scene idea into the 11-block cinematic prompt for live-action AI video — lens, lighting, blocking, motion, negatives. Triggers 'cinematic prompt', 'film-grade scene'. |
 | skill | [`vision-articulation`](../dist/agent-src/skills/vision-articulation/SKILL.md) |  | Use when articulating internal vision — where we're going / why now / why us, founder-mode anchor, distinct from fundraising pitch. Triggers on 'what's our vision', 'why are we doing this'. |
 | skill | [`voc-extract`](../dist/agent-src/skills/voc-extract/SKILL.md) |  | Use when extracting Voice-of-Customer themes from existing artefacts — GH issues, PR threads, Sentry patterns. Triggers on 'what are users saying', 'recurring complaints', 'top themes'. |
 | skill | [`voice-and-tone-design`](../dist/agent-src/skills/voice-and-tone-design/SKILL.md) |  | Use when shaping brand voice — voice attributes, tone-by-context matrix, consistency review. Triggers on 'define our voice', 'why does our copy sound different on every surface'. |
 
-## Rules (82)
+## Rules (87)
 
 | kind | name | type | description |
 |---|---|---|---|
@@ -254,6 +275,8 @@ are excluded.
 | rule | [`ask-when-uncertain`](../dist/agent-src/rules/ask-when-uncertain.md) | always | Ask when uncertain — don't guess, assume, or improvise |
 | rule | [`augment-edit-discipline`](../dist/agent-src/rules/augment-edit-discipline.md) | auto | Editing .augment/ or src/ — keep files project-agnostic; sync counts and cross-refs on add/rename/delete |
 | rule | [`autonomous-execution`](../dist/agent-src/rules/autonomous-execution.md) | auto | Whether to ask or act on a workflow step — trivial-vs-blocking, autonomy opt-in, commit default; Hard Floor non-destructive-by-default |
+| rule | [`brand-consistency`](../dist/agent-src/rules/brand-consistency.md) | auto | Generated UI, copy, and assets are checked against the active brand tokens and voice profile — a value not traceable to a brand token or voice rule is flagged off-brand. |
+| rule | [`brand-source-of-truth`](../dist/agent-src/rules/brand-source-of-truth.md) | auto | The consumer's brand tokens and voice profile are the run's source of truth — the curated brand corpus only fills gaps, never overrides a registered brand value. |
 | rule | [`cli-output-handling`](../dist/agent-src/rules/cli-output-handling.md) | auto | Running verbose CLI output — git, tests, linters, docker, build tools, artisan, npm, composer. Wrap with rtk; tail/grep fallback |
 | rule | [`command-suggestion-policy`](../dist/agent-src/rules/command-suggestion-policy.md) | auto | Prompt without /command matching an eligible slash command — surface matches as numbered options with as-is escape; never auto-executes |
 | rule | [`commit-conventions`](../dist/agent-src/rules/commit-conventions.md) | auto | Git commit format, branch naming, conventional commits, committing, pushing, creating PRs |
@@ -273,8 +296,10 @@ are excluded.
 | rule | [`fast-path-marker-visibility`](../dist/agent-src/rules/fast-path-marker-visibility.md) | auto | Low-impact council fast-path dispatch — host MUST surface transparency marker verbatim in reply opening; never paraphrase |
 | rule | [`finance-safety-floor`](../dist/agent-src/rules/finance-safety-floor.md) | auto | Finance-pack output (runway, valuation, DCF, scenario, unit economics, forecasting) — never issue final invest/raise call; mandatory disclosure footer; sensitivity + counter-case required |
 | rule | [`framework-neutrality-in-generic-skills`](../dist/agent-src/rules/framework-neutrality-in-generic-skills.md) | auto | Editing a generic skill/rule/command — block single-stack mandates; use language-agnostic procedures with carve-out pointers |
-| rule | [`git-history-discipline`](../dist/agent-src/rules/git-history-discipline.md) | auto | Git history ops — never rebase/squash/amend without explicit request; once pushed, rewrites must pair with immediate re-push same turn |
+| rule | [`git-history-discipline`](../dist/agent-src/rules/git-history-discipline.md) | auto | Git history ops — never rebase/squash/amend without request; never drop/exclude/force-over commits you didn't author (parallel / shared-PR work); once pushed, re-push same turn |
 | rule | [`guidelines`](../dist/agent-src/rules/guidelines.md) | manual | Writing or reviewing code — check relevant guideline before writing or reviewing code |
+| rule | [`icon-consistency`](../dist/agent-src/rules/icon-consistency.md) | auto | One icon system per project unless the brand defines otherwise — flag mixed icon sets in a UI (the 'every AI UI is default Lucide' anti-pattern). |
+| rule | [`image-likeness-and-rights`](../dist/agent-src/rules/image-likeness-and-rights.md) | auto | Rights gate for AI image generation — real-person likenesses, trademarked brand marks, and named living artists' styles require explicit rights/consent check before generation. |
 | rule | [`improve-before-implement`](../dist/agent-src/rules/improve-before-implement.md) | auto | Before implementing features or architectural changes — validate request against existing code, challenge weak requirements, suggest improvements |
 | rule | [`invite-challenge`](../dist/agent-src/rules/invite-challenge.md) | auto | Before executing a complex plan or non-trivial design — ask 'am I solving the right problem?' and pause for user confirmation |
 | rule | [`language-and-tone`](../dist/agent-src/rules/language-and-tone.md) | always | Language and tone — informal German Du, English code comments, .md files always English |
@@ -315,6 +340,7 @@ are excluded.
 | rule | [`skill-quality`](../dist/agent-src/rules/skill-quality.md) | auto | Creating/editing/reviewing skills — minimum quality standard; every skill executable, validated, self-contained |
 | rule | [`slash-command-routing-policy`](../dist/agent-src/rules/slash-command-routing-policy.md) | auto | User types a slash command like /create-pr, /commit, or pastes command file content |
 | rule | [`source-confidentiality`](../dist/agent-src/rules/source-confidentiality.md) | auto | Naming an external repo as something this package copied, harvested, compared against, or was inspired by — keep the tracked tree source-anonymous |
+| rule | [`source-discovery-gate`](../dist/agent-src/rules/source-discovery-gate.md) | auto | Before coding/DB/API/vendor-package work — prove each structural fact against a real source (file:line · SDL · migration · probe) before planning |
 | rule | [`strategy-safety-floor`](../dist/agent-src/rules/strategy-safety-floor.md) | auto | Founder-strategy output (vision, positioning, competitive moats, market entry, OKR trees, build-vs-buy) — never issue final strategic call; surface trade-offs; human owns the decision |
 | rule | [`symfony-routing`](../dist/agent-src/rules/symfony-routing.md) | auto | Writing/reviewing Symfony — DI, bundles, Doctrine, Messenger, Security voters, console commands — route to symfony-workflow |
 | rule | [`telegraph-speak`](../dist/agent-src/rules/telegraph-speak.md) | auto | When telegraph.speak_scope != off — condense prose to telegraph grammar with carve-outs for numbered options, Iron-Law, code, paths, error markers |
@@ -329,7 +355,7 @@ are excluded.
 | rule | [`user-interrupt-priority`](../dist/agent-src/rules/user-interrupt-priority.md) | always | User interrupts override the current task — STOP, complete new task in full, then ASK before resuming; never silently return to prior work |
 | rule | [`verify-before-complete`](../dist/agent-src/rules/verify-before-complete.md) | always | Verify before completion — run tests and quality tools before claiming done |
 
-## Commands (147)
+## Commands (161)
 
 | kind | name | cluster | description |
 |---|---|---|---|
@@ -349,6 +375,18 @@ are excluded.
 | command | [`analytics-prune`](../dist/agent-src/commands/analytics/prune.md) | cluster: analytics | Drop events older than the 90-day retention window from the local analytics log. Atomic and idempotent. |
 | command | [`analytics-show`](../dist/agent-src/commands/analytics/show.md) | cluster: analytics | Render top prompts, launcher → completion rate per role, average session length, and knowledge-source usage from the local analytics log. |
 | command | [`analyze-reference-repo`](../dist/agent-src/commands/analyze-reference-repo.md) |  | Analyze an external reference repository (competitor, inspiration, peer) and produce a structured comparison + adoption plan for this project. |
+| command | [`analyze`](../dist/agent-src/commands/analyze.md) | cluster: analyze | Analysis orchestrator — confidence-weighted suggester that routes to postmortem, premortem, decision-review, near-miss, or incident frameworks. |
+| command | [`analyze-decision`](../dist/agent-src/commands/analyze/decision.md) | cluster: analyze | Audit a past architectural decision — restate what was chosen and why, compare original assumptions against reality now, produce a verdict (still valid / needs amendment / superseded). |
+| command | [`analyze-incident`](../dist/agent-src/commands/analyze/incident.md) | cluster: analyze | Full incident flow — incident-commander coordination, then RCA via root-cause-frameworks, then a blame-free write-up via blameless-post-mortem, ending with an incident-learnings candidate. |
+| command | [`analyze-near-miss`](../dist/agent-src/commands/analyze/near-miss.md) | cluster: analyze | Blame-free near-miss analysis — same post-mortem flow as analyze:postmortem but framed around a close call that did not result in a production incident. |
+| command | [`analyze-postmortem`](../dist/agent-src/commands/analyze/postmortem.md) | cluster: analyze | Blame-free post-mortem after a resolved incident — consume the incident-commander skeleton, derive root cause, write corrective actions, draft an incident-learnings memory candidate. |
+| command | [`analyze-premortem`](../dist/agent-src/commands/analyze/premortem.md) | cluster: analyze | Forward-looking imagined-failure analysis before committing to a heavy or irreversible plan — enumerate failure stories, score each mode, derive early-warning signals and guardrails. |
+| command | [`brand`](../dist/agent-src/commands/brand.md) | cluster: brand | Brand-as-UX orchestrator — strategy, identity, tokens, review, voice. Routes to the brand-grounding skills that constrain the design layer. |
+| command | [`brand-identity`](../dist/agent-src/commands/brand/identity.md) | cluster: brand | Define the brand identity — logo direction, colour story, type story, imagery direction — and the token constraints downstream generation consumes. |
+| command | [`brand-review`](../dist/agent-src/commands/brand/review.md) | cluster: brand | Audit emitted UI, copy, and assets against the active brand tokens and voice profile — flag any value not traceable to a brand token or voice rule. |
+| command | [`brand-strategy`](../dist/agent-src/commands/brand/strategy.md) | cluster: brand | Define brand positioning, archetype, voice, tone, and messaging over the brand-grounding corpus — the strategy that bounds identity and UI. |
+| command | [`brand-tokens`](../dist/agent-src/commands/brand/tokens.md) | cluster: brand | Derive a DTCG .tokens.json source of truth from brand decisions, then emit CSS vars + Tailwind via the no-Node token generator. |
+| command | [`brand-voice`](../dist/agent-src/commands/brand/voice.md) | cluster: brand | Define the brand voice-and-tone profile — register, do/don't lexicon, and tone shifts by context — the profile the brand-consistency gate checks copy against. |
 | command | [`bug-fix`](../dist/agent-src/commands/bug-fix.md) |  | Plan and implement a bug fix — based on investigation, with quality checks and test verification |
 | command | [`bug-investigate`](../dist/agent-src/commands/bug-investigate.md) |  | Investigate a bug — auto-detect ticket from branch, gather Jira/Sentry/description context, trace root cause |
 | command | [`challenge-me`](../dist/agent-src/commands/challenge-me.md) | cluster: challenge-me | Challenge-me orchestrator — routes to vision, with-docs |
@@ -412,9 +450,10 @@ are excluded.
 | command | [`memory-add`](../dist/agent-src/commands/memory/add.md) | cluster: memory | Interactively add a validated entry to an engineering-memory file (domain-invariants, incident-learnings, product-rules, ownership, historical-patterns) |
 | command | [`memory-learn-low-impact`](../dist/agent-src/commands/memory/learn-low-impact.md) | cluster: memory | Preview validated low-impact entries that would be upstreamed to the package seed (default `--preview`); `--apply` opens a draft PR via `upstream-contribute` after re-redaction. |
 | command | [`memory-load`](../dist/agent-src/commands/memory/load.md) | cluster: memory | Load ALL curated entries of a given memory type into the current context — opt-in full load for deep analysis, never auto-triggered |
-| command | [`memory-mine-session`](../dist/agent-src/commands/memory/mine-session.md) | cluster: memory | The single session-mining command — mine the cross-host chat-history log (or a host transcript) for memory signals AND/OR rule/skill proposal seeds via --mode=[signals\|proposals\|both]. Preview-by-d… |
+| command | [`memory-mine-session`](../dist/agent-src/commands/memory/mine-session.md) | cluster: memory | Mine a session (cross-host chat-history log) for memory signals and/or rule/skill proposal seeds via --mode=[signals\|proposals\|both]. Preview-default, opt-in. Folds in /chat-history learn. |
 | command | [`memory-promote`](../dist/agent-src/commands/memory/promote.md) | cluster: memory | Promote an intake signal (or provisional proposal) into a curated memory entry — opens a PR and runs the admission gate. |
 | command | [`memory-propose`](../dist/agent-src/commands/memory/propose.md) | cluster: memory | Append a provisional memory signal to the intake stream — the universal fallback for any producer (human or agent) to record a finding without committing to a curated entry. |
+| command | [`mission-upgrade`](../dist/agent-src/commands/mission/upgrade.md) |  | Gated Laravel major-version upgrade mission — provisional branch, breaking-change catalog, size-tier surfaced, git-as-rollback. Never auto-commits or auto-PRs. |
 | command | [`mode`](../dist/agent-src/commands/mode.md) |  | Set the active role mode — prints the contract, lists default skills, and refuses work outside the contract (see role-contracts) |
 | command | [`module`](../dist/agent-src/commands/module.md) | cluster: module | Module orchestrator — routes to create, explore |
 | command | [`module-create`](../dist/agent-src/commands/module/create.md) | cluster: module | Create a new module from .module-template with interactive setup |
@@ -454,6 +493,7 @@ are excluded.
 | command | [`roadmap`](../dist/agent-src/commands/roadmap.md) | cluster: roadmap | Roadmap orchestrator — routes to create (authoring) and process-step / process-phase / process-full (autonomous execution). |
 | command | [`roadmap-ai-council`](../dist/agent-src/commands/roadmap/ai-council.md) | cluster: roadmap | Challenge a roadmap with the AI council (deep tier) and refactor from convergence findings. Wraps `/council default` pinned to `--input-mode roadmap --depth deep`; patches surface as numbered options. |
 | command | [`roadmap-create`](../dist/agent-src/commands/roadmap/create.md) | cluster: roadmap | Interactively create a new roadmap file in agents/roadmaps/ |
+| command | [`roadmap-materialize`](../dist/agent-src/commands/roadmap/materialize.md) | cluster: roadmap | Materialise a roadmap into a self-contained, importable ticket bundle under agents/tickets/ |
 | command | [`roadmap-process-full`](../dist/agent-src/commands/roadmap/process-full.md) | cluster: roadmap | Autonomously process every open step across every phase of a roadmap until the file is fully closed. Largest execution scope of the /roadmap cluster — runs continuously across phase boundaries. |
 | command | [`roadmap-process-phase`](../dist/agent-src/commands/roadmap/process-phase.md) | cluster: roadmap | Autonomously process every open step in the next or current phase of a roadmap, then stop. Default execution scope of the /roadmap cluster. |
 | command | [`roadmap-process-step`](../dist/agent-src/commands/roadmap/process-step.md) | cluster: roadmap | Autonomously process the single next open step of a roadmap and stop. Smallest execution scope of the /roadmap cluster — one step in, one step out. |
@@ -481,7 +521,7 @@ are excluded.
 | command | [`video-storyboard`](../dist/agent-src/commands/video/storyboard.md) | cluster: video | Image-only storyboard — script → scenes → blueprint → image render → contact-sheet PNG via ffmpeg montage. No video calls. |
 | command | [`work`](../dist/agent-src/commands/work.md) |  | Drive a free-form prompt end-to-end through refine → score → plan → implement → test → verify → report — Option-A loop over the `work_engine` Python engine, confidence-band gated, no auto-git. |
 
-## Guidelines (81)
+## Guidelines (82)
 
 | kind | name | category | description |
 |---|---|---|---|
@@ -497,6 +537,7 @@ are excluded.
 | guideline | [`developer-judgment`](../docs/guidelines/agent-infra/developer-judgment.md) | agent-infra |  |
 | guideline | [`direct-answers-demos`](../docs/guidelines/agent-infra/direct-answers-demos.md) | agent-infra |  |
 | guideline | [`engineering-memory-data-format`](../docs/guidelines/agent-infra/engineering-memory-data-format.md) | agent-infra |  |
+| guideline | [`failure-signatures`](../docs/guidelines/agent-infra/failure-signatures.md) | agent-infra |  |
 | guideline | [`first-principles`](../docs/guidelines/agent-infra/first-principles.md) | agent-infra |  |
 | guideline | [`frontier-reasoning-operating-profile`](../docs/guidelines/agent-infra/frontier-reasoning-operating-profile.md) | agent-infra |  |
 | guideline | [`installed-tools-manifest`](../docs/guidelines/agent-infra/installed-tools-manifest.md) | agent-infra |  |

package/docs/command-naming-audit.md

@@ -0,0 +1,60 @@
+# Command-naming audit (road-to-contract-integrity F5)
+
+External review flagged inconsistent command naming across the docs
+(`/pr:create` vs `/create-pr`, `/feature/plan` vs `/feature:plan`). Two
+names for one command is two sources of truth — a discoverability failure,
+not cosmetic polish. This audit fixes the user-facing inconsistencies and
+records the canonical rule + the alias registry that already exists.
+
+## The canonical form
+
+Per [ADR-003](decisions/ADR-003-flat-cluster-subs-and-colon-syntax.md) and
+[`command-clusters.md`](contracts/command-clusters.md) §"Colon-canonical
+invocation": **`/<cluster>:<sub>` is the canonical invocation form
+everywhere** — catalog, docs, cookbook. The frontmatter `name:` field is
+always the hyphen slug (`feature-plan`); the slash form (`/feature/plan`)
+is never an invocation syntax.
+
+## The alias registry already exists — do not add a parallel field
+
+The roadmap step proposed adding an `aliases:` field to the command
+schema. That would **duplicate** the mechanism that already ships:
+
+- **`replaces:`** (on the new/canonical command) — the prior name(s) or
+  alias(es) it absorbs. Colon forms are allowed here on purpose (historical
+  aliases like `commit:in-chunks`). Enforced by `lint_command_routing.py`.
+- **`superseded_by:`** (on the old shim) — points forward to the successor.
+
+Adding a second `aliases:` field would re-create the exact two-sources-of-
+truth problem this audit fixes. **Decision: `replaces:` is the canonical
+alias registry; no new field is introduced.** (This deviates from the
+literal Phase-1 roadmap text by intent — see the roadmap step note.)
+
+## Clashes resolved in this change
+
+Everything resolves **toward** the colon-canonical form. The PR command
+only ships as `dist/agent-src/commands/pr/create.md` (invoked `/pr:create`);
+there is no `commands/create-pr.md` projection, so `/create-pr` is a legacy
+*alias name* recorded in `replaces:`, not a directly-invocable command.
+
+| Surface | Was | Now | Basis |
+|---|---|---|---|
+| `README.md` Delivery flow + 2 prose refs | `/pr:create` (1) + `/create-pr` (2) | `/pr:create` (all) | Colon-canonical (ADR-003); `/pr:create` is the only projected command. |
+| `docs/featured-commands.md` | `/create-pr` (→ stale `commands/create-pr.md` link) | `/pr:create` (→ `commands/pr/create.md`) | The legacy link target no longer exists; point at the real projection. |
+| `docs/cookbook.md` (generated) | `/feature/explore`, `/feature/plan`, … (slash) | `/feature:explore`, `/feature:plan`, … (colon) | Fixed at the **generator** (`_invocation()` renders `cluster/sub` → `/cluster:sub`); all clustered refs now colon. The file is generated — the slash form was a generator bug, not a hand-edit. |
+
+## Known debt — deferred (own change)
+
+The PR command's frontmatter still carries `cluster: git-pr-create` and its
+body prose still self-documents the `/create-pr` family (and
+`/create-pr:description-only`). The user-facing invocation and all docs are
+now `/pr:create`; retiring the `/create-pr` alias name entirely — frontmatter
+`cluster`, the body prose, and the `:description-only` sub-family wording —
+is a command-body refactor out of scope for this audit and is tracked as
+command-surface debt.
+
+## See also
+
+- [`contracts/command-clusters.md`](contracts/command-clusters.md) — cluster + colon-syntax rules.
+- [`decisions/ADR-003-flat-cluster-subs-and-colon-syntax.md`](decisions/ADR-003-flat-cluster-subs-and-colon-syntax.md).
+- [`contracts/STABILITY.md`](contracts/STABILITY.md) — command stability policy.

package/docs/contracts/STABILITY.md

@@ -150,6 +150,38 @@ for the contract and the transitional allowlist.
   shipped `dist/agent-src/` (condensed) directory; the uncondensed
   source size is informational only.
 
+## Schema versioning and structural breaking changes
+
+The breaking-change gate is **two-layered** so it does not depend on
+author discipline alone:
+
+1. **Commit-annotation layer (`release.py`).** `infer_bump` reads the
+   Conventional-Commits annotation (`<type>!:` bang or a
+   `BREAKING CHANGE` line) and returns a major bump when present.
+2. **Structural layer (`check_structural_breaking.py`, run in
+   `task ci-fast`).** Independently of the commit message, the detector
+   inspects the diff against the trunk and FAILS when a structural break
+   is present *without* an annotation — forcing the annotation to exist.
+
+A change is **structurally breaking** when either:
+
+- a tracked artifact *source* file is **deleted or renamed** — a skill
+  `SKILL.md`, a rule, a command `command.md`, a pack manifest, or a
+  contract schema; or
+- a contract schema under `src/scripts/schemas/` is **modified without
+  bumping its `x-schemaVersion`**. The four contract schemas (`pack`,
+  `skill`, `rule`, `command`) carry an `x-schemaVersion`. Bump it when an
+  enum value is added or removed, a field type changes, or a validation
+  rule tightens — these are breaking-for-consumers yet invisible to a
+  name-status diff. Purely *additive* schema changes (a new optional
+  field) do not require a bump.
+
+Escape for an intentional break (e.g. a deprecation cycle completing):
+add `ci-override: structural-breaking-ok` to a commit body. The detector
+accepts ~20% false-negatives on purely *semantic* breaks (behaviour
+change with no artifact/schema delta); the structural + schema + commit
+cross-check reaches ~95% coverage (2026-06-16 council).
+
 ## See also
 
 - [`docs/architecture.md`](../architecture.md) — package architecture overview

package/docs/contracts/agents-md-tech-stack.md

@@ -30,7 +30,7 @@ package). The skill ships the four-layer security defense:
 Calibrated token claim: 3-5× comprehension on text-heavy formats
 (PDF, DOCX), 10-50× on image-heavy formats (scanned PDF, PPTX with
 diagrams). Measure locally with
-`python3 scripts/measure_markitdown_lift.py` against
+`./scripts-run src/scripts/measure_markitdown_lift` against
 `tests/fixtures/markitdown-corpus/`.
 
 ## Cognition-only floor for Wings 2–4

package/docs/contracts/ai-council-config.md

@@ -262,7 +262,7 @@ is invoked.
   tier. The two-tier split reconciles "Council always active when
   enabled" with "skip trivial agent-side requests": user-typed
   `/council` calls proceed by default, agent-initiated dispatches keep
-  `educate` behaviour. Override via `.agent-settings.yml`.
+  `educate` behaviour. Override via the resolved `.ai-council.yml`.
 - `lens_overrides.necessity_classifier_mode.<lens>` — per-lens override.
   Wins over the global `mode` for the matching invocation tier (agent
   vs user_explicit follow the same lens map). Typical use: leave the
@@ -433,26 +433,26 @@ Worked example — opt the Anthropic and OpenAI members in, leave the
 others off, and switch the `low_impact` class to `council`:
 
 ```yaml
-ai_council:
-  members:
-    anthropic:
-      enabled: true
-      model: claude-sonnet-4-5
-      api_key_ref: file:anthropic.key
-      participate_low_impact: true   # eligible for fast-path
-    openai:
-      enabled: true
-      model: gpt-4o
-      api_key_ref: file:openai.key
-      participate_low_impact: true   # eligible for fast-path
-    gemini:
-      enabled: false                  # disabled — opt-in ignored even if set
-
-  fast_path:
-    max_members: 2          # 1 or 2 only
-    max_rounds: 1           # LOCKED
-    max_tokens: 2500
-    max_cost_usd: 0.05
+# In the resolved .ai-council.yml — keys are top-level (no `ai_council:` wrapper).
+members:
+  anthropic:
+    enabled: true
+    model: claude-sonnet-4-5
+    api_key_ref: file:anthropic.key
+    participate_low_impact: true   # eligible for fast-path
+  openai:
+    enabled: true
+    model: gpt-4o
+    api_key_ref: file:openai.key
+    participate_low_impact: true   # eligible for fast-path
+  gemini:
+    enabled: false                  # disabled — opt-in ignored even if set
+
+fast_path:
+  max_members: 2          # 1 or 2 only
+  max_rounds: 1           # LOCKED
+  max_tokens: 2500
+  max_cost_usd: 0.05
 
 decision_resolution:
   classes:
@@ -641,7 +641,7 @@ as comments and the loader enforces them.
   whose projected spend would breach a cap and asks the user to continue.
   Each `0` value disables that single cap; other caps still apply.
   Prices come from [`agents/runtime/.agent-prices.md`](../../agents/runtime/.agent-prices.md)
-  (gitignored, refreshed weekly by `python3 scripts/update_prices.py`;
+  (gitignored, refreshed weekly by `./scripts-run src/scripts/update_prices`;
   bootstrapped from `scripts/ai_council/_default_prices.py` on first run).
 
 ## Validation rules

package/docs/contracts/analysis-memory-loop.md

@@ -0,0 +1,149 @@
+---
+stability: draft
+keep-draft-until: first-skill-ships
+owner: road-to-analysis-workbench
+---
+
+# Analysis Memory Loop — produce → propose → promote → retrieve
+
+> **Status:** draft · **Owner:** road-to-analysis-workbench
+> · **Governed by:** `src/rules/non-destructive-by-default.md`,
+> `src/rules/domain-safety-disclaimer.md`
+
+Contract for the closed learning loop in the `analysis-workbench` pack.
+Binds all analysis skills: `blameless-post-mortem`, `root-cause-frameworks`,
+`premortem`, `decision-review`.
+
+---
+
+## § 1 — Produce: what analysis flows draft
+
+Post-mortem, RCA, decision-review, and near-miss flows MUST draft
+`incident-learnings` and `historical-patterns` **candidates** into the
+`/memory propose` provisional JSONL intake stream.
+
+Candidates are produced; they are **never auto-promoted** to curated memory.
+The human drives promotion. An analysis skill that skips the draft step or
+claims self-promotion violates this contract.
+
+### Candidate schema (minimum)
+
+```jsonc
+{
+  "type":               "incident-learnings" | "historical-patterns",
+  "summary":            "one-line human-readable pattern",
+  "evidence_paths":     ["path/to/file", "path/to/other"],
+  "decision_surface":   ["area1", "area2"],
+  "last_validated":     "YYYY-MM-DD",
+  "review_after_days":  90,
+  "applicable_scope":   "project" | "domain" | "global"
+}
+```
+
+`last_validated` defaults to today. `review_after_days` defaults to 90.
+`applicable_scope` defaults to `"project"`.
+
+---
+
+## § 2 — Propose: intake and dedup pre-check
+
+Before drafting a **new** candidate, each skill calls `retrieve()` over the
+same key-space (incident type, affected paths, decision area).
+
+- **Match found** — propose a `frequency`/`supersedes` **update** to the
+  existing entry, not a new entry. The proposal notes which existing entry is
+  being reinforced or superseded.
+- **No match** — draft a new candidate as described in § 1.
+
+This dedup check is not optional. A skill that skips it and produces a
+duplicate candidate fails the loop contract.
+
+---
+
+## § 3 — Promote: the admission gate
+
+`/memory promote` runs `scripts/check_memory_proposal.py`.
+
+**Admission criteria** (unchanged from the existing gate):
+
+- `≥ 2 distinct file paths` referenced in `evidence_paths`, OR
+- `≥ 3 future decisions` the pattern would change (listed in
+  `decision_surface`).
+
+Failing either criterion → proposal stays provisional; skill surfaces the
+gap to the user and suggests either deferring or strengthening evidence.
+
+The agent NEVER overrides or bypasses this gate. Redaction is enforced by
+`check_memory.py` (no customer names, secrets, internal IPs, project-rooted
+paths) before any entry is promoted.
+
+---
+
+## § 4 — Retrieve: staleness is explicit
+
+`retrieve()` returns:
+
+```jsonc
+{
+  "results": [...],
+  "skipped": [
+    {
+      "id":      "...",
+      "reason":  "stale",
+      "details": "last_validated=YYYY-MM-DD, review_after_days=90"
+    }
+  ]
+}
+```
+
+Stale entries (age > `review_after_days`) appear in `skipped`, NOT in
+`results`. A skill that silently uses stale entries (ignores `skipped`)
+violates this contract. Stale matches MUST be surfaced to the user.
+
+---
+
+## § 5 — Handoff: incident-commander → blameless-post-mortem
+
+`incident-commander` produces a handoff skeleton. That skeleton **may carry
+an empty or TBD root cause** — incomplete evidence at incident close is
+normal.
+
+`blameless-post-mortem`:
+
+1. **Accepts** any incoming skeleton, complete or not.
+2. Invokes `root-cause-frameworks` to fill gaps; `root-cause-frameworks`
+   returns ranked candidates with confidence levels, not a forced verdict.
+3. Marks the post-mortem `status: draft` if root cause remains unresolved
+   after the analysis pass.
+4. NEVER rejects or stalls on an incomplete skeleton.
+
+A post-mortem marked `draft` can still produce `incident-learnings`
+candidates (`summary` must note the open question).
+
+---
+
+## § 6 — Framework-neutrality scope
+
+The `framework-neutrality-in-generic-skills` rule governs **tech-stack names**
+(Laravel, React, Django). It does **not** govern analysis method names.
+
+5-whys, fishbone, fault-tree, STAMP/STPA, and similar are method names used
+generically across analysis skills. Using them in a skill named
+`root-cause-frameworks` is not a framework-neutrality violation.
+
+---
+
+## § 7 — What this contract does NOT cover
+
+- The schema of curated memory entries (governed by `low-impact-corpus-format.md`).
+- The internal mechanics of `check_memory_proposal.py` (lives in `src/scripts/`).
+- AI-specific RCA (deferred; gated on `road-to-security-hardening`).
+
+---
+
+## See also
+
+- [`low-impact-corpus-format.md`](low-impact-corpus-format.md) — curated memory schema.
+- [`ADR-096`](../decisions/ADR-096-analysis-workbench.md) — council decisions behind this contract.
+- `src/skills/blameless-post-mortem/SKILL.md` — primary consumer (Phase 2).
+- `src/skills/root-cause-frameworks/SKILL.md` — RCA engine (Phase 2).