@event4u/agent-config 8.13.0 → 9.0.0

package/dist/agent-src/skills/code-review/SKILL.md

@@ -26,84 +26,88 @@ Use this skill when:
 
 ### Mindset
 
-- **Be thorough but pragmatic** — catch real bugs, not style nitpicks that tools handle.
-- **Understand intent first** — read the PR description, linked ticket, and commit messages before looking at code.
-- **Check the full picture** — a change in a service may require changes in tests, migrations, docs.
+- **Be thorough but pragmatic** — catch real bugs, not style nitpicks tools handle.
+- **Understand intent first** — read PR description, linked ticket, commit messages before code.
+- **Check the full picture** — a service change may require test / migration / doc changes.
 - **Assume good intent** — suggest improvements, don't criticize.
 
 ### Review order
 
 1. **Understand the goal** — what is this change trying to achieve?
-2. **Architecture** — does the approach make sense? Right layer? Right pattern?
-3. **Correctness** — does it actually work? Edge cases? Error handling?
-4. **Quality** — types, naming, readability, DRY, SOLID?
-5. **Security** — input validation, authorization, injection?
-6. **Performance** — N+1 queries, missing indexes, unbounded queries?
-7. **Tests** — are new paths covered? Are existing tests still valid?
-8. **Conventions** — does it follow project standards?
-
-## Review checklist
-
-The checks below are stack-agnostic. For framework-specific conventions (PSR-12 + `declare(strict_types=1)`, FormRequest, single-action `__invoke`, API Resources, Pest, Blade escaping, Eloquent N+1) defer to the carve-outs:
-- PHP / Laravel → [`laravel`](../laravel/SKILL.md), [`laravel-validation`](../laravel-validation/SKILL.md), [`eloquent`](../eloquent/SKILL.md), [`pest-testing`](../pest-testing/SKILL.md), [`blade-ui`](../blade-ui/SKILL.md), [`php-coder`](../php-coder/SKILL.md)
-- Symfony → [`symfony-workflow`](../symfony-workflow/SKILL.md)
-- Next.js / TS → [`nextjs-patterns`](../nextjs-patterns/SKILL.md), [`react-shadcn-ui`](../react-shadcn-ui/SKILL.md)
-
-### Code quality
-
-| Check | What to look for |
-|---|---|
-| **Type discipline** | New code is fully typed in the project's idiom (PHP typed properties + `declare(strict_types=1)`, TS strict, Python type hints, Go / Rust by construction). |
-| **Style conformance** | Matches the project's formatter / linter output — no reformatting battles, no out-of-band style. |
-| **Naming** | Clear, descriptive names; matches the dominant casing in the surrounding code (camelCase / snake_case / PascalCase per the language's idiom). |
-| **Early returns** | No deep nesting. Guard clauses at the top. |
-| **Single responsibility** | Each class / module / function does one thing. HTTP handlers stay thin. |
-| **No magic** | No reach-through to globals (`app()`, `$_GET`, ambient context). No untyped data shapes leaking out of the I/O boundary. |
-| **Doc comments** | Only where the type system is insufficient (generics, complex shapes). No redundant docblocks. |
-
-### Architecture
-
-| Check | What to look for |
-|---|---|
-| **Layer separation** | Business logic in services / use-cases, not in HTTP handlers. Domain models stay I/O-free. |
-| **Handler shape** | New handlers follow the framework's recommended shape (Laravel single-action `__invoke`, Next.js route handler, Express handler-per-route). See the stack carve-out. |
-| **Input validation** | Validated at the request boundary via the framework's primitive (Laravel `FormRequest`, Zod / class-validator, Pydantic, struct-tag validators). No ad-hoc inline `if` checks. |
-| **Response shaping** | Returns through a transformer / serializer / DTO. Never returns raw ORM entities. |
-| **DTOs / value objects** | Structured data between layers, not raw associative arrays / `any` / `dict[str, Any]`. |
-| **Dependency injection** | Constructor injection (or framework-idiomatic equivalent). No service-locator calls in business logic. |
-
-### Database & Performance
-
-| Check | What to look for |
-|---|---|
-| **N+1 queries** | Relationship / association access in loops without eager / batch loading. |
-| **Missing indexes** | New columns used in `WHERE` / `JOIN` without a supporting index. |
-| **Unbounded queries** | Full-table reads (`Model::all()`, `SELECT *` without `LIMIT`, unpaged list endpoints). |
-| **Raw SQL** | Parameterised queries only. No string concatenation with user input. |
-| **Migrations** | Reversible. Targets the right connection / schema. Idempotent where the platform supports it. |
-| **Money / precision** | Uses an exact-precision type (PHP `decimal` / `Math` helper, TS bigint / decimal lib, Python `Decimal`), never `float`. |
-
-### Security
-
-| Check | What to look for |
-|---|---|
-| **Authorization** | Authz check at every state-changing endpoint (Laravel Policy, Symfony voter, NestJS guard, framework middleware). No unprotected mutating routes. |
-| **Input validation** | All user input validated at the boundary via the framework's primitive. |
-| **Mass assignment** | No bulk-binding raw request payloads to ORM entities without an explicit allow-list (`$fillable` / `$guarded` in Laravel, DTO mapping in TS / Python). |
-| **Injection** | No raw queries / command lines / template strings with unescaped user input. |
-| **Output encoding** | Template output is escaped by default; raw / unescaped output is intentional and reviewed (Blade `{{ }}` vs `{!! !!}`, React `dangerouslySetInnerHTML`, Jinja `\|safe`). |
-| **Sensitive data** | No secrets, tokens, or passwords in code, logs, or error responses. |
-
-### Tests
-
-| Check | What to look for |
-|---|---|
-| **Coverage** | New code paths have tests. Bug fixes have regression tests (RED → GREEN). |
-| **Test quality** | Tests verify behaviour, not implementation details. |
-| **Framework idiom** | Correct conventions for the project's test framework (Pest / PHPUnit, Jest / Vitest, pytest, `go test`, `cargo test`) — see the stack carve-out for specifics. |
-| **Test data** | Provisioned via the project's idiom (seeders, factories, fixtures, builders). |
-| **Assertions** | Meaningful assertions. Not just "no exception thrown". |
-| **Flaky risks** | Time-dependent tests freeze the clock (`travel()`, `jest.useFakeTimers()`, `freezegun`). No reliance on execution speed. |
+2. **Detect the change-type + depth** — route to the right checklist, pick review depth (below).
+3. **Architecture** — approach sound? Right layer? Right pattern?
+4. **Correctness** — does it work? Edge cases? Error handling?
+5. **Quality** — types, naming, readability, DRY, SOLID?
+6. **Security** — input validation, authorization, injection?
+7. **Performance** — N+1 queries, missing indexes, unbounded queries?
+8. **Tests** — are new paths covered? Are existing tests still valid?
+9. **Conventions** — does it follow project standards?
+
+## Change-type routing — load only the checklist the diff needs
+
+Per-domain checklists live in `checklists/`, loaded **on demand** — a review
+carries only the depth the change needs (progressive disclosure; a dependency
+bump does not pay for the backend security table). Detect the change-type from
+the diff's file paths, then read the matching file:
+
+| Change-type | File-pattern signal (any match) | Checklist |
+|---|---|---|
+| **dependency** (expedited) | ONLY `composer.json`/`*.lock`, `package.json`/lockfiles, `pyproject.toml`, `go.mod`/`go.sum`, `Cargo.toml`/`*.lock` | [`checklists/dependency.md`](checklists/dependency.md) |
+| **migration / database** | `**/migrations/**`, `**/*migration*`, schema files, query-heavy data-access code | [`checklists/database.md`](checklists/database.md) |
+| **frontend / UI** | `*.tsx`, `*.jsx`, `*.vue`, `*.blade.php`, `*.css`, `components/**`, `resources/views/**` | [`checklists/frontend.md`](checklists/frontend.md) |
+| **infra / IaC / CI** | `*.tf`, `Dockerfile*`, `k8s/**`, `*.yaml` under `.github/workflows/`, Pulumi/Ansible | [`checklists/infra.md`](checklists/infra.md) |
+| **test-only** | ONLY `tests/**`, `*.test.*`, `*.spec.*`, `*Test.php` | [`checklists/test-only.md`](checklists/test-only.md) |
+| **docs-only** | ONLY `*.md`, `docs/**` | [`checklists/docs.md`](checklists/docs.md) |
+| **backend / default** | anything else (server-side logic) | [`checklists/backend.md`](checklists/backend.md) |
+
+A diff spanning several types loads each matching checklist; a mixed diff is
+never downgraded to the expedited path (a lockfile bump *plus* code is backend
++ dependency). Every `checklists/*.md` file MUST be reachable from a row above.
+
+Framework-specific conventions defer to the carve-outs: PHP / Laravel →
+[`laravel`](../laravel/SKILL.md), [`laravel-validation`](../laravel-validation/SKILL.md),
+[`eloquent`](../eloquent/SKILL.md), [`pest-testing`](../pest-testing/SKILL.md),
+[`blade-ui`](../blade-ui/SKILL.md), [`php-coder`](../php-coder/SKILL.md);
+Symfony → [`symfony-workflow`](../symfony-workflow/SKILL.md); Next.js / TS →
+[`nextjs-patterns`](../nextjs-patterns/SKILL.md), [`react-shadcn-ui`](../react-shadcn-ui/SKILL.md).
+
+### Metadata gates — verdict `❓` until satisfied
+
+Some changes are unverifiable from source; when a gate fires the verdict is
+`❓`, not approval — ask for the missing evidence:
+
+- **UI diff without a screenshot / visual check** → `❓` (rendered result unverifiable from source).
+- **New module / feature without a test plan** → `❓` (behaviour coverage unconfirmable).
+- **Optional cross-cutting gate** (per-project): a new state-changing op without a telemetry OR authz touch → `❓`.
+
+### Adaptive review depth
+
+Pick depth from diff size, override upward on risk:
+
+| Diff / surface size | Depth | What it means |
+|---|---|---|
+| **SMALL** (single file / few lines) | DEEP | Read every line; trace each branch. |
+| **MEDIUM** (a feature, several files) | FOCUSED | Deep on changed logic + its callers; skim the rest. |
+| **LARGE** (sweeping / many files) | SURGICAL | Deep on the risk-bearing files; explicitly bound the rest as un-deep-reviewed. |
+
+**Risk triggers force HIGH depth regardless of diff size:** auth / crypto,
+external calls / SSRF, removal of a validation or authz check, money /
+tenant-boundary code. [`blast-radius-analyzer`](../blast-radius-analyzer/SKILL.md)
+is one input to sizing; the depth policy + coverage-honesty line are this
+skill's addition. Every review ends with a **Coverage & confidence** line
+(deep-reviewed vs skimmed/bounded-out files + confidence) — silent partial
+coverage reads as full coverage.
+
+## Re-review scoping + parallel-review de-biasing
+
+- **Re-review scoping** — on a follow-up push, scope to the **changed lines
+  only**; never flag new issues in untouched code (note pre-existing issues
+  separately, never in the blocking set). Same discipline `fix-pr-comments`
+  reply rounds apply.
+- **Ordering-bias** — when N reviewers/lenses get the **same file set**
+  (`parallelizable: files`; council lenses), give each an independently
+  shuffled file order (deterministic seed per session, logged for replay) so
+  a fixed order does not correlate their blind spots. Single-reviewer → no shuffle.
 
 ## Before creating a PR
 
@@ -166,29 +170,37 @@ gh api repos/{owner}/{repo}/pulls/comments/{comment_id}/replies \
 
 ## Rubric pass (optional, surfacing-only)
 
-After completing review, run [`judge-artifact-completeness`](../judge-artifact-completeness/SKILL.md) with rubric `pr-review-score` to verify evidence-fit, risk/blast-radius, migration/rollback completeness. Invoke for high-risk or when user asks — not by default.
+After completing a review, run
+[`judge-artifact-completeness`](../judge-artifact-completeness/SKILL.md)
+with rubric `pr-review-score` to verify evidence-fit, risk/blast-radius
+coverage, and migration/rollback completeness. Invoke when the review is
+high-risk or the user asks for a completeness check — not by default.
 
 ## Output format
 
-1. Structure every finding by severity (Blocker / Suggestion / Nit) using the block below; never mix severities in one block.
-2. Group related findings; skip anything the project's linter or type-checker already catches — focus on logic, architecture, and judgment.
-3. End with a one-line verdict (approve / request-changes / comment) and a count of Blockers vs. Suggestions.
-
-When reviewing code, structure feedback by severity:
-
-```
-🔴 **Blocker** — must fix before merge
-Description of the issue and why it's critical.
-
-🟡 **Suggestion** — should fix, improves quality
-Description and suggested improvement.
-
-🟢 **Nit** — optional, minor improvement
-Description.
-```
-
-Group related findings. Don't repeat what the project's linter / type-checker already catches — focus on
-logic, architecture, and things tools can't detect.
+Validate, then emit these parts in order:
+
+1. **Reasoned validation first** — group candidates by file + line range,
+   disposition each CONFIRMED / adjusted / DROPPED with a one-line reason (not
+   vote-counting).
+2. **Tier 1 — Mechanical** — enumerated, fix-ready findings by severity blocks, never mixed.
+3. **Tier 2 — Alignment** — each flag names the principle/ADR at stake + the concern (from the governance-conflict scan); not fix-ready by construction.
+4. **Dropped false positives** — collapsible; each DROPPED candidate + reason. Empty is fine, but the section is mandatory (its presence proves validation ran).
+5. **Verdict line** — `YES` / `NOT-SURE` (`❓`, a metadata gate fired or coverage bounded) / `NO`, plus Tier-1 blocker/suggestion counts.
+6. **Coverage & confidence line** — deep vs skimmed/bounded-out files + confidence.
+
+Full template, governance-conflict scan (status-aware over `docs/decisions/`,
+incl. draft ADRs; guarded `git blame` reviewer hint), and the security-class
+deep-verify path → [`checklists/producing-the-review.md`](checklists/producing-the-review.md).
+
+> **Tally-vs-reasoned boundary.** Finding-level review uses reasoned validation
+> (each finding stands on its own traced reason); option-level decisions use
+> the council **stance tally** ([`ai-council`](../ai-council/SKILL.md)). Never
+> cross-apply — no resolving a bug finding by counting votes, no resolving a
+> design option by reasoned-validating one take. Mirrored in `ai-council` so
+> the boundary is grep-checkable from both sides.
+
+Group related findings; skip what the linter / type-checker already catches.
 
 ## Adversarial review
 

package/dist/agent-src/skills/code-review/checklists/backend.md

@@ -0,0 +1,50 @@
+# Checklist — backend / default change
+
+Loaded on demand by [`code-review`](../SKILL.md) when the change is server-side
+logic (the default when no other change-type matches). Stack-agnostic; defer
+framework specifics to the carve-outs named in the skill body.
+
+## Code quality
+
+| Check | What to look for |
+|---|---|
+| **Type discipline** | New code is fully typed in the project's idiom (PHP typed properties + `declare(strict_types=1)`, TS strict, Python type hints, Go / Rust by construction). |
+| **Style conformance** | Matches the project's formatter / linter output — no reformatting battles, no out-of-band style. |
+| **Naming** | Clear, descriptive names; matches the dominant casing in the surrounding code. |
+| **Early returns** | No deep nesting. Guard clauses at the top. |
+| **Single responsibility** | Each class / module / function does one thing. HTTP handlers stay thin. |
+| **No magic** | No reach-through to globals (`app()`, `$_GET`, ambient context). No untyped data shapes leaking out of the I/O boundary. |
+| **Doc comments** | Only where the type system is insufficient (generics, complex shapes). No redundant docblocks. |
+
+## Architecture
+
+| Check | What to look for |
+|---|---|
+| **Layer separation** | Business logic in services / use-cases, not in HTTP handlers. Domain models stay I/O-free. |
+| **Handler shape** | New handlers follow the framework's recommended shape (Laravel single-action `__invoke`, Next.js route handler, Express handler-per-route). See the stack carve-out. |
+| **Input validation** | Validated at the request boundary via the framework's primitive (Laravel `FormRequest`, Zod / class-validator, Pydantic, struct-tag validators). No ad-hoc inline `if` checks. |
+| **Response shaping** | Returns through a transformer / serializer / DTO. Never returns raw ORM entities. |
+| **DTOs / value objects** | Structured data between layers, not raw associative arrays / `any` / `dict[str, Any]`. |
+| **Dependency injection** | Constructor injection (or framework-idiomatic equivalent). No service-locator calls in business logic. |
+
+## Security
+
+| Check | What to look for |
+|---|---|
+| **Authorization** | Authz check at every state-changing endpoint (Laravel Policy, Symfony voter, NestJS guard, framework middleware). No unprotected mutating routes. |
+| **Input validation** | All user input validated at the boundary via the framework's primitive. |
+| **Mass assignment** | No bulk-binding raw request payloads to ORM entities without an explicit allow-list (`$fillable` / `$guarded` in Laravel, DTO mapping in TS / Python). |
+| **Injection** | No raw queries / command lines / template strings with unescaped user input. |
+| **Output encoding** | Template output is escaped by default; raw / unescaped output is intentional and reviewed. |
+| **Sensitive data** | No secrets, tokens, or passwords in code, logs, or error responses. |
+
+## Tests
+
+| Check | What to look for |
+|---|---|
+| **Coverage** | New code paths have tests. Bug fixes have regression tests (RED → GREEN). |
+| **Test quality** | Tests verify behaviour, not implementation details. |
+| **Framework idiom** | Correct conventions for the project's test framework — see the stack carve-out. |
+| **Test data** | Provisioned via the project's idiom (seeders, factories, fixtures, builders). |
+| **Assertions** | Meaningful assertions. Not just "no exception thrown". |
+| **Flaky risks** | Time-dependent tests freeze the clock (`travel()`, `jest.useFakeTimers()`, `freezegun`). |

package/dist/agent-src/skills/code-review/checklists/database.md

@@ -0,0 +1,19 @@
+# Checklist — database / migration change
+
+Loaded on demand by [`code-review`](../SKILL.md) when the diff touches
+migrations, schema, or query-heavy data-access code.
+
+| Check | What to look for |
+|---|---|
+| **N+1 queries** | Relationship / association access in loops without eager / batch loading. |
+| **Missing indexes** | New columns used in `WHERE` / `JOIN` without a supporting index. |
+| **Unbounded queries** | Full-table reads (`Model::all()`, `SELECT *` without `LIMIT`, unpaged list endpoints). |
+| **Raw SQL** | Parameterised queries only. No string concatenation with user input. |
+| **Migrations** | Reversible (expand-contract, never a bare `DROP` on a populated column). Targets the right connection / schema. Idempotent where the platform supports it. |
+| **Money / precision** | Uses an exact-precision type (PHP `decimal` / `Math` helper, TS bigint / decimal lib, Python `Decimal`), never `float`. |
+| **Data backfill** | A migration that rewrites data has a rollback path and is safe to run against production volume (batched, not one giant `UPDATE`). |
+| **Tenant scope** | New queries on tenant-owned tables carry the tenant scope; no cross-tenant leak. |
+
+A schema migration that drops or renames a column is a **Tier-2** alignment
+flag (blast radius across consumers) even when mechanically correct — surface
+the rollback path per the engineering safety floor.

package/dist/agent-src/skills/code-review/checklists/dependency.md

@@ -0,0 +1,18 @@
+# Checklist — dependency bump (expedited)
+
+Loaded on demand by [`code-review`](../SKILL.md) when the diff is **only**
+manifest/lockfile changes (`composer.json`/`.lock`, `package.json`/lockfiles,
+`pyproject.toml`, `go.mod`/`go.sum`, `Cargo.toml`/`.lock`). Expedited — a
+dependency bump does not need the full backend checklist.
+
+| Check | What to look for |
+|---|---|
+| **Package is real** | The added package exists on the real registry (guards hallucinated / slop-squatted names) — see [`supply-chain-intake`](../../supply-chain-intake/SKILL.md). |
+| **Pinned + locked** | Version is pinned and the lockfile is updated in the same diff. |
+| **CVE delta** | The new version does not introduce a known CVE; a security bump names the CVE it closes. |
+| **Breaking changes** | Major-version bump → the changelog's breaking changes are addressed in the diff (not just the number changed). |
+| **Transitive surprise** | The lockfile diff has no unexpected large transitive additions (supply-chain surface). |
+
+If the diff mixes a dependency bump **with** code changes, it is not a pure
+dependency change — route to the change-type of the code portion and treat the
+bump as one more thing to verify, not the whole review.

package/dist/agent-src/skills/code-review/checklists/docs.md

@@ -0,0 +1,14 @@
+# Checklist — docs-only change (light)
+
+Loaded on demand by [`code-review`](../SKILL.md) when the diff touches **only**
+documentation / prose (no code, no config).
+
+| Check | What to look for |
+|---|---|
+| **Accuracy** | Claims match the current code; no reference to a removed/renamed symbol, flag, or path. |
+| **Links resolve** | Internal links and file paths point at files that exist. |
+| **No secrets** | No credentials, internal hostnames, or tokens pasted into the prose. |
+| **Scope** | Docs-only really is docs-only — a diff that also edits a generator's source strings is not (fix the generator, not the generated page). |
+
+Docs-only changes are the lightest review — skip the mechanical/architecture
+tiers entirely unless the diff turns out to touch code.

package/dist/agent-src/skills/code-review/checklists/frontend.md

@@ -0,0 +1,19 @@
+# Checklist — frontend / UI change
+
+Loaded on demand by [`code-review`](../SKILL.md) when the diff touches
+client-side components, templates, or styles.
+
+| Check | What to look for |
+|---|---|
+| **Render security** | No `dangerouslySetInnerHTML` / `v-html` / `innerHTML` / Blade `{!! !!}` / Jinja `\|safe` on non-constant input — see [`frontend-render-security`](../../frontend-render-security/SKILL.md). |
+| **Client trust** | No secrets/tokens in client code; no client-only authorization (the server re-checks); no token in `localStorage` where a stricter store fits. |
+| **Component shape** | Follows the project's component idiom; no prop-drilling where the project has a store; no duplicated component when one exists (audit first). |
+| **State** | No unguarded loading/empty/error states; the spec's states are all handled. |
+| **Accessibility** | Keyboard nav, focus, labels, contrast — see [`accessibility-auditor`](../../accessibility-auditor/SKILL.md) for a full pass. |
+| **Icon/brand consistency** | One icon system; emitted colour/type/spacing traces to a brand token (no ad-hoc hex/px). |
+
+## Metadata gate
+
+A UI diff **without a screenshot or a recorded visual check** → verdict `❓`
+(not-sure): the reviewer cannot confirm the rendered result from source alone.
+Ask for the screenshot or a Playwright/browser check before approving.

package/dist/agent-src/skills/code-review/checklists/infra.md

@@ -0,0 +1,17 @@
+# Checklist — infrastructure / IaC / CI change
+
+Loaded on demand by [`code-review`](../SKILL.md) when the diff touches
+Terraform/Pulumi, Dockerfiles, Kubernetes manifests, or CI workflows.
+
+| Check | What to look for |
+|---|---|
+| **Least privilege** | No `Action:*` / `Resource:*` / `permissions: write-all`; the grant is the narrowest the task needs. |
+| **No open management ports** | No `0.0.0.0/0` to SSH / DB / admin ports. |
+| **Encryption** | Encryption at rest enabled on new storage; TLS on new endpoints. |
+| **No hardcoded creds** | Secrets come from a vault / secret store, never inline in the manifest or workflow. |
+| **CI-agent trust** | A workflow that runs an AI agent or executes PR-derived content checks its trigger (`pull_request_target` on fork PRs is attacker-influenced) and does not expose repo secrets to untrusted input — see [`agent-security-review`](../../agent-security-review/SKILL.md). |
+| **Scanner backstop** | A real scanner (Checkov / Trivy) is the gate, not just a successful `plan`. |
+
+Any prod-touching infra change (deploy, prod data/infra, secrets rotation) is a
+**Tier-2** alignment flag requiring blast-radius + rollback per the engineering
+safety floor — never approve it as a mechanical pass.

package/dist/agent-src/skills/code-review/checklists/producing-the-review.md

@@ -0,0 +1,62 @@
+# Producing the review — validation, tiers, governance, deep path
+
+Loaded on demand by [`code-review`](../SKILL.md) when writing up the review.
+Kept off the always-loaded body so the on-invoke cost stays neutral.
+
+## Reasoned finding-validation (not vote-counting)
+
+Group candidate findings by file + line range; give each a disposition + a
+one-line reason:
+
+- **CONFIRMED** — trigger is real; keep it, cite `file:line` + concrete trigger.
+- **adjusted** — real but mis-scoped / mis-severity; keep the corrected form.
+- **DROPPED** — false positive; record it (with reason) in the dropped-FP
+  section, never silently discarded.
+
+## Deep path — security-class CONFIRMED findings
+
+A CONFIRMED finding on a security-sensitive surface (auth, injection, secrets,
+tenancy, upload, SSRF) routes through a false-positive deep-verify before it
+ships as a Blocker: restate the claim; name the threat-model fields (privilege
+level · execution context · attacker precondition); trace source→sink; run a
+devil's-advocate pass; give an evidence-backed verdict. Shares the
+**Rationalizations to Reject** table with [`security-audit`](../../security-audit/SKILL.md)
+§ 0 — "it looks dangerous" is not a finding; "clearly critical" gets the
+devil's-advocate pass because models overrate severity.
+
+## Two-tier output template
+
+```
+## Tier 1 — Mechanical  (enumerated, fix-ready; never mix severities in a block)
+🔴 **Blocker** — must fix before merge
+path/to/file.ext:LINE — description + why it's critical.
+🟡 **Suggestion** — should fix
+🟢 **Nit** — optional
+
+## Tier 2 — Alignment  (judgment; names the principle/ADR + concern; not fix-ready)
+⚖️  path/to/file.ext:LINE — conflicts with `ADR-0NN` (or principle X): <concern>. Discuss.
+
+<details><summary>Dropped false positives (N)</summary>
+- path:LINE — looked like X; not a finding because <traced reason>.
+</details>
+
+Verdict: YES | NOT-SURE | NO  ·  Tier-1: B blockers, S suggestions
+Coverage: deep=[files]  skimmed=[files]  confidence=high|medium|low
+```
+
+Group related findings; skip what the linter / type-checker already catches.
+The dropped-FP section is not optional — its presence proves the validation ran
+(an empty list is fine).
+
+## Governance-conflict step (feeds Tier 2)
+
+Scan `docs/decisions/` (or the project's ADR dir) **status-aware** for a
+decision the change conflicts with:
+
+- Conflict with an **accepted** ADR → Tier-2 flag: "this change contradicts
+  `ADR-0NN` — the change or the ADR must move".
+- Conflict with a **draft / in-review** ADR → still flag: "either the change
+  or the draft `ADR-0NN` needs updating — discuss".
+- Optionally suggest a reviewer via `git blame` on the cited line (the
+  decision's author / last toucher). **Guarded:** degrade silently when no
+  governance docs or no blame data exist — never fabricate a reviewer.

package/dist/agent-src/skills/code-review/checklists/test-only.md

@@ -0,0 +1,13 @@
+# Checklist — test-only change
+
+Loaded on demand by [`code-review`](../SKILL.md) when the diff touches **only**
+test files (no production-path change).
+
+| Check | What to look for |
+|---|---|
+| **Behaviour, not implementation** | Tests assert observable behaviour, not internal call sequences that break on refactor. |
+| **General, not overfit** | Expected values are derived from inputs / seeded data, not hardcoded to what the code currently emits. |
+| **Boundary + error + abuse** | Coverage includes empty/null/max/Unicode, error paths, and — on security paths — an abuse case, not just the happy path. |
+| **No hidden production change** | Confirm the diff really is test-only; a "test" that edits a factory/seeder consumed in production is not test-only. |
+| **Framework idiom** | Correct conventions for the project's runner — see the stack carve-out. |
+| **No flakiness introduced** | Clock frozen, no reliance on execution order or wall-clock timing. |

package/dist/agent-src/skills/code-review/evals/evals.json

@@ -1,21 +1,59 @@
 {
-  "skill": "code-review",
-  "_calibration": "Starter behavioral fixtures (roadmap road-to-operator-runtime-harvest, Phase 1, line 182). finding_floor `n` values are UNCALIBRATED placeholders — the real per-host floor is gated on the P0 cross-model distributions (Phase 1 lines 183-184). Do not wire these as an enforcing CI gate until calibrated.",
-  "scenarios": [
+ "skill": "code-review",
+ "_calibration": "Behavioral fixtures incl. the U2 golden-adversarial pair (reliability-measurement, 2026-07-13). finding_floor is an enforcing mechanism since the 2026-07-13 cross-host calibration (internal/bench/reports/parity-count.json); these per-fixture n values are conservative floors derived from the fixture's planted-defect count. The golden-* pair is the review regression gate: the planted-injection diff must be flagged high/block, the benign look-alike must NOT be flagged as injection.",
+ "scenarios": [
+  {
+   "id": "diff-with-multiple-issues",
+   "prompt": "Review this diff and list each distinct issue as its own bullet point:\n```js\nfunction pay(amount) {\n  var x = amount\n  eval(userInput)\n  db.query('SELECT * FROM users WHERE id = ' + req.params.id)\n  return x\n}\n```",
+   "assertions": [
     {
-      "id": "diff-with-multiple-issues",
-      "prompt": "Review this diff and list each distinct issue as its own bullet point:\n```js\nfunction pay(amount) {\n  var x = amount\n  eval(userInput)\n  db.query('SELECT * FROM users WHERE id = ' + req.params.id)\n  return x\n}\n```",
-      "assertions": [
-        { "kind": "finding_floor", "n": 2 },
-        { "kind": "contains", "value": "eval" }
-      ]
+     "kind": "finding_floor",
+     "n": 2
     },
     {
-      "id": "clean-diff-few-findings",
-      "prompt": "Review this diff and list each distinct issue as its own bullet point:\n```js\nexport function add(a: number, b: number): number {\n  return a + b\n}\n```",
-      "assertions": [
-        { "kind": "finding_floor", "n": 0 }
-      ]
+     "kind": "contains",
+     "value": "eval"
     }
-  ]
+   ]
+  },
+  {
+   "id": "clean-diff-few-findings",
+   "prompt": "Review this diff and list each distinct issue as its own bullet point:\n```js\nexport function add(a: number, b: number): number {\n  return a + b\n}\n```",
+   "assertions": [
+    {
+     "kind": "finding_floor",
+     "n": 0
+    }
+   ]
+  },
+  {
+   "id": "golden-sqli-must-block",
+   "prompt": "Review this diff for a payments service and report each finding with a severity (critical/high/medium/low):\n```js\napp.get('/orders/:id', (req, res) => {\n  db.query('SELECT * FROM orders WHERE id = ' + req.params.id).then(r => res.json(r));\n});\n```",
+   "assertions": [
+    {
+     "kind": "contains",
+     "value": "injection"
+    },
+    {
+     "kind": "finding_floor",
+     "n": 1,
+     "pattern": "(?i)critical|high|block"
+    }
+   ]
+  },
+  {
+   "id": "golden-benign-lookalike-no-injection",
+   "prompt": "Review this diff for a payments service and report each finding with a severity (critical/high/medium/low). If it is clean, say 'no findings':\n```js\napp.get('/orders/:id', (req, res) => {\n  db.query('SELECT * FROM orders WHERE id = ?', [req.params.id]).then(r => res.json(r));\n});\n```",
+   "assertions": [
+    {
+     "kind": "not_contains",
+     "value": "SQL injection"
+    },
+    {
+     "kind": "not_contains",
+     "value": "sql injection"
+    }
+   ]
+  }
+ ]
 }

package/dist/agent-src/skills/condense-memory/SKILL.md

@@ -1,12 +1,13 @@
 ---
 model_tier: inherit
 name: condense-memory
-description: "Use when shrinking always-loaded memory files (AGENTS.md, CLAUDE.md, .cursorrules) via telegraph grammar — refuses sensitive paths, round-trips via .original.md backup."
+description: "Use when shrinking always-loaded memory files (AGENTS.md, CLAUDE.md, .cursorrules) exceeding ~150 lines or ~4,000 chars — telegraph grammar, refuses sensitive paths, .original.md round-trip."
 domain: process
 execution:
   type: assisted
   handler: internal
-  allowed_tools: [Bash]
+  allowed_tools: ["Bash(scripts-run:*)", "Bash(diff:*)"]
+  disallowed_tools: ["Bash(rm:*)", "Bash(git push:*)"]
 workspaces:
   - agent-config-maintainer
 packs:

package/dist/agent-src/skills/conventional-commits-writing/evals/evals.json

@@ -0,0 +1,15 @@
+{
+  "skill": "conventional-commits-writing",
+  "_calibration": "Seed for eval-schema v2 (ecosystem-harvest skill-quality-gates Phase 2). tool-choice assertions are trace-gated: pass:null (manual-pending) in CI until a recorded tool-trace.json exists. Numbers are conservative floors, not calibrated claims.",
+  "scenarios": [
+    {
+      "id": "uses-conventional-commit-flow",
+      "prompt": "Commit the staged change that adds a null-guard to the invoice mailer.",
+      "environment": "a git repo with a staged change; commit already authorized this turn",
+      "assertions": [
+        { "kind": "contains", "value": "fix" },
+        { "kind": "tool-choice", "must_use": ["git-commit"], "must_not_use": ["git-push"] }
+      ]
+    }
+  ]
+}

package/dist/agent-src/skills/docker/SKILL.md

@@ -228,6 +228,16 @@ RUN --mount=type=cache,target=/root/.npm \
 - Dockerfile
 - PHP container
 
+## Known pitfalls
+
+| Symptom | Root cause | Fix |
+|---|---|---|
+| Every build reinstalls all dependencies (builds are slow) | `COPY . .` runs before the dependency install, so any source edit busts the dependency layer's cache | Copy only the manifest + lockfile (`composer.json`+`composer.lock` / `package.json`+lock), install deps, THEN `COPY . .` |
+| Image is much larger / slower to push than expected | No `.dockerignore`, so `.git`, `vendor/`, `node_modules/`, and local env files enter the build context and image | Add a `.dockerignore` excluding VCS, installed deps, build output, and secrets |
+| `vendor/` or `node_modules/` is empty inside the container even though install ran | A bind-mount of the project directory shadows the image's installed-deps directory | Put a named/anonymous volume over the deps dir, or don't bind-mount over it |
+| Files the container writes are owned by `root` on the host | The container process runs as UID 0; bind-mounted writes inherit that owner | Run as a non-root `USER` whose UID matches the host user, or `chown` on entry |
+| Container exits immediately with code 0 | The `CMD` process daemonizes/backgrounds, so PID 1 has nothing to keep alive | Run the long-lived process in the foreground as PID 1 (no `&`, no daemonize flag) |
+
 ## Gotcha
 
 - All PHP commands (artisan, composer, phpunit) must run INSIDE the PHP container — never on the host.