@event4u/agent-config 9.14.0 → 9.15.0

package/dist/agent-src/commands/tests.md

@@ -8,6 +8,7 @@ tier: 2
 visibility: internal
 description: Tests orchestrator — routes to create, execute, e2e-plan, e2e-heal
 cluster: tests
+routes_to: [tests-create, tests-execute, tests-e2e-plan, tests-e2e-heal]
 type: orchestrator
 auto_detect: true
 suggestion:

package/dist/agent-src/commands/upstream-contribute.md

@@ -71,11 +71,11 @@ If project-specific content is found, ask:
 
 ### 3. Determine contribution type and target path
 
-| Type | Uncondensed target | Condensed target |
+| Type | Source target | Condensed target |
 |---|---|---|
-| **Skill** | `.agent-src.uncondensed/skills/{name}/SKILL.md` | `dist/agent-src/skills/{name}/SKILL.md` |
-| **Rule** | `.agent-src.uncondensed/rules/{name}.md` | `dist/agent-src/rules/{name}.md` |
-| **Command** | `.agent-src.uncondensed/commands/{name}.md` | `dist/agent-src/commands/{name}.md` |
+| **Skill** | `src/skills/{name}/SKILL.md` | `dist/agent-src/skills/{name}/SKILL.md` |
+| **Rule** | `src/rules/{name}.md` | `dist/agent-src/rules/{name}.md` |
+| **Command** | `src/domains/{domain}/{name}/command.md` | `dist/agent-src/commands/{name}.md` |
 | **Guideline** | `docs/guidelines/{cat}/{name}.md` | _(not condensed; reference-only)_ |
 
 ### 4. Get access to the package repo
@@ -142,7 +142,7 @@ Fix any issues before continuing.
 ```
 > ✅ Files created in {package-repo}:
 >
-> - `.agent-src.uncondensed/{type}/{name}` (uncondensed)
+> - `src/{type}/{name}` (source)
 > - `dist/agent-src/{type}/{name}` (condensed)
 >
 > Quality gates: {pass/fail summary}

package/dist/agent-src/commands/video/from-script.md

@@ -48,7 +48,7 @@ with a precise diff — no silent best-guess.
 ### 1. Validate dependencies
 
 ```bash
-scripts/ai-video/lib/validate-deps.sh .agent-src.uncondensed/commands/video/from-script.md
+scripts/ai-video/lib/validate-deps.sh dist/agent-src/commands/video/from-script.md
 ```
 
 Fails fast with the missing-id list if any declared persona / skill is

package/dist/agent-src/commands/video/from-song.md

@@ -73,7 +73,7 @@ silent best-guess.
 ### 1. Validate dependencies
 
 ```bash
-scripts/ai-video/lib/validate-deps.sh .agent-src.uncondensed/commands/video/from-song.md
+scripts/ai-video/lib/validate-deps.sh dist/agent-src/commands/video/from-song.md
 ```
 
 Fails fast with the missing-id list if any declared persona / skill is

package/dist/agent-src/commands/video/scene.md

@@ -48,7 +48,7 @@ the run with a precise diff.
 ### 1. Validate dependencies
 
 ```bash
-scripts/ai-video/lib/validate-deps.sh .agent-src.uncondensed/commands/video/scene.md
+scripts/ai-video/lib/validate-deps.sh dist/agent-src/commands/video/scene.md
 ```
 
 ### 2. Load config + resolve providers

package/dist/agent-src/commands/video/stitch.md

@@ -37,7 +37,7 @@ with a precise diff — the operator must say `--skip-scene <id>` or
 ### 1. Validate dependencies
 
 ```bash
-scripts/ai-video/lib/validate-deps.sh .agent-src.uncondensed/commands/video/stitch.md
+scripts/ai-video/lib/validate-deps.sh dist/agent-src/commands/video/stitch.md
 ```
 
 (Lightweight here — only the `ai-video-technical-director` persona is

package/dist/agent-src/commands/video/storyboard.md

@@ -37,7 +37,7 @@ diff.
 ### 1. Validate dependencies
 
 ```bash
-scripts/ai-video/lib/validate-deps.sh .agent-src.uncondensed/commands/video/storyboard.md
+scripts/ai-video/lib/validate-deps.sh dist/agent-src/commands/video/storyboard.md
 ```
 
 ### 2. Load config + resolve image provider

package/dist/agent-src/commands/worktree/create.md

@@ -27,7 +27,8 @@ Thin orchestration — mechanics live in the skills; do not restate them.
 
 Run [`using-git-worktrees`](../../../skills/using-git-worktrees/SKILL.md)
 in full: `worktrees.mode` pre-flight, existing-worktree inspection,
-directory convention, ignore-safety check, worktree creation,
+directory convention, ignore-safety check, worktree creation, the
+[§ 4b seeding allow/deny list](../../../skills/using-git-worktrees/SKILL.md#4b-seed-the-worktree--allow--deny-list),
 dependency install + clean baseline. Its Iron Law (no worktree without
 verified ignore + clean baseline) is the creation gate.
 

package/dist/agent-src/contexts/augment-infrastructure.md

@@ -57,7 +57,7 @@ Define hard constraints: coding standards, Docker usage, language preferences, s
 |---|---|
 | `quality-workflow.md` | PHP (PHPStan → Rector → PHPStan) and JS/TS pipelines |
 | `downstream-changes.md` | After every edit, find and update ALL callers, tests, imports |
-| `augment-edit-discipline.md` | Edits inside `.augment/` / `.agent-src.uncondensed/` stay project-agnostic AND sync counts + cross-references in the same edit |
+| `augment-edit-discipline.md` | Edits inside `.augment/` / `src/` stay project-agnostic AND sync counts + cross-references in the same edit |
 | `context-hygiene.md` | 3-failure rule, state dumps |
 | `architecture.md` | Architecture principles, file placement |
 | `docker-commands.md` | All PHP commands run inside Docker containers |

package/dist/agent-src/contexts/contracts/artifact-engagement-flow.md

@@ -14,7 +14,7 @@ stability: beta
 
 This document is the stable reference for **what gets recorded, when, and
 under which constraints**. The roadmap tracks phased delivery; the rule
-([`artifact-engagement-recording`](../../.agent-src.uncondensed/rules/artifact-engagement-recording.md))
+([`artifact-engagement-recording`](../../rules/artifact-engagement-recording.md))
 tells the agent when to fire; this doc explains the contract every
 recording must honour.
 
@@ -55,8 +55,8 @@ refine → memory → analyze → plan → implement → test → verify → rep
 
 The setting lives at `telemetry.artifact_engagement.granularity` in
 `.agent-settings.yml`. Default `task`. Both flows
-([`/implement-ticket`](../../.agent-src.uncondensed/commands/implement-ticket.md)
-and [`/work`](../../.agent-src.uncondensed/commands/work.md)) use the
+([`/implement-ticket`](../../commands/implement-ticket.md)
+and [`/work`](../../commands/work.md)) use the
 same eight-step contract from
 [`implement-ticket-flow.md`](implement-ticket-flow.md).
 
@@ -264,7 +264,7 @@ layers reject.
 
 ## See also
 
-- [`artifact-engagement-recording`](../../.agent-src.uncondensed/rules/artifact-engagement-recording.md) — agent-side trigger
+- [`artifact-engagement-recording`](../../rules/artifact-engagement-recording.md) — agent-side trigger
 - [`implement-ticket-flow`](implement-ticket-flow.md) — the eight-step contract this rule observes
-- [`scripts/telemetry/`](../../.agent-src.uncondensed/templates/scripts/telemetry/) — schema, boundary session, settings reader
+- [`scripts/telemetry/`](../../templates/scripts/telemetry/) — schema, boundary session, settings reader
 - [`tests/telemetry/`](../../tests/telemetry/) — contract enforcement (schema, settings, aggregator, renderer, CLI, cost-floor, redaction)

package/dist/agent-src/contexts/contracts/command-suggestion-flow.md

@@ -5,7 +5,7 @@ stability: beta
 # Command Suggestion — Flow & Scoring Contract
 
 > Cross-cutting reference for the suggestion layer.
-> The runtime rule is [`command-suggestion`](../../.agent-src.uncondensed/rules/command-suggestion-policy.md);
+> The runtime rule is [`command-suggestion`](../../rules/command-suggestion-policy.md);
 > the architectural decision lives in [`adr-command-suggestion.md`](adr-command-suggestion.md).
 >
 > - **Created:** 2026-04-30
@@ -154,7 +154,7 @@ Cursor, Cline, Windsurf) get the engine via `scripts/`.
 
 ## See also
 
-- [`command-suggestion`](../../.agent-src.uncondensed/rules/command-suggestion-policy.md) — runtime rule
+- [`command-suggestion`](../../rules/command-suggestion-policy.md) — runtime rule
 - [`adr-command-suggestion.md`](adr-command-suggestion.md) — architectural decision
 - [`command-suggestion-eligibility.md`](command-suggestion-eligibility.md) — locked eligibility table
-- [`agent-settings`](../../.agent-src.uncondensed/templates/agent-settings.md) — `commands.suggestion.*` reference
+- [`agent-settings`](../../templates/agent-settings.md) — `commands.suggestion.*` reference

package/dist/agent-src/contexts/contracts/emergency-triage-block.md

@@ -2,7 +2,7 @@
 
 > Canonical content of the **Emergency Triage** block referenced by the
 > `agents-md-thin-root` skill. Both the package-root `AGENTS.md` and
-> `.agent-src.uncondensed/templates/AGENTS.md` (consumer template)
+> `src/agent-src/templates/AGENTS.md` (consumer template)
 > embed this block verbatim. Drift is caught by the `lint-agents-md`
 > task in the package's CI pipeline.
 
@@ -19,7 +19,7 @@ Use this variant in `AGENTS.md` at the package root.
 
 1. **What is this repo?** — `event4u/agent-config`, a governed skill / rule / command suite for AI coding tools (no application runtime).
 2. **What language?** — All `.md` content is English; agents mirror the user's language at runtime.
-3. **Where do I edit?** — `.agent-src.uncondensed/` only. Never `dist/agent-src/`, `.augment/`, `.claude/`, `.cursor/`, `.clinerules/`, `.windsurfrules`.
+3. **Where do I edit?** — `src/` only. Never `dist/agent-src/`, `.augment/`, `.claude/`, `.cursor/`, `.clinerules/`, `.windsurfrules`.
 4. **Lint / test / sync entry point?** — `task ci` (full pipeline). Subsets: `task sync`, `task generate-tools`, `task lint-skills`, `task test`.
 5. **Where do the always-active rules live?** — `dist/agent-src/rules/` (kernel = 9 Iron-Law rules; tier-1 / tier-2 routed via `dist/agent-src/router.json`).
 ```

package/dist/agent-src/contexts/execution/roadmap-process-loop.md

@@ -157,8 +157,8 @@ subprocess between steps:
 
 | Value | `./agent-config roadmap:progress` runs |
 |---|---|
-| `per_step` (default) | After every checkbox flip |
-| `every_5_steps` | Every 5th closed step + at phase boundary + at reply end |
+| `per_step` | After every checkbox flip |
+| `every_5_steps` (default) | Every 5th closed step + at phase boundary + at reply end |
 | `phase_boundary` | Only at phase boundaries + run end |
 
 `process-step` ignores this — single-step runs always regen at step
@@ -264,7 +264,8 @@ For each open step in the working set (scope-bound — see wrapper):
 
 6. **Dashboard regen — cadence-gated.** Run
    `./agent-config roadmap:progress` when due per
-   `roadmap.dashboard_regen_cadence` (resolved in § 4):
+   `roadmap.dashboard_regen_cadence` (resolved in § 4; default
+   `every_5_steps`):
    - `per_step` → always after the flip.
    - `every_5_steps` → after the 5th, 10th, … closed step **of this
      run**, or when the reply ends with closed steps pending regen.

package/dist/agent-src/contexts/execution/subagent-routing.md

@@ -36,6 +36,21 @@ THE SAME MINUS THE QUOTA WIN.
    the tier/model choice is unchanged. This is the only place the
    "Sonnet-has-its-own-allowance" idea lives, and it lives as a runtime-detected
    flag, never as portable prose.
+4. **Budget routing** (`subagents.budget_routing != off`,
+   [`budget-routing` contract](../../../../docs/contracts/budget-routing.md)) →
+   AFTER the tier resolves per 1–3, apply the budget relation via
+   `pickTier` (`src/scripts/_lib/tier_budget_routing.ts`): cheapest
+   classifier-adequate tier WITH available budget; that tier exhausted or
+   cooling → next tier up with budget; all unavailable → session model +
+   surfaced one-line notice. Work is never blocked to save money. Before
+   the dispatch is created, acquire the atomic reserve
+   (`acquireBudgetPermit`; check state via `node src/scripts/cost/budget.mjs
+   tier <t>`); a 429/quota error trips `tripCooldown` for that tier and
+   falls back per the relation — never a retry loop. Under
+   `budget_routing: ask`, the FIRST budget-motivated downshift of a session
+   is confirmed once; `auto` proceeds silently. Every budget-routed
+   dispatch emits one `orchestration_record` line (tier + provenance-tagged
+   token delta) so realized savings are measured, not asserted.
 
 **Cache trade-off (road-to-cache-economy Phase 4).** A tier downshift changes
 the sub-task's model, and the prompt cache is keyed by `(model, prefix)` — so
@@ -60,6 +75,10 @@ rule, or context asserts "model X is free".
 [`src/scripts/_lib/subagent_routing.ts`](../../../../src/scripts/_lib/subagent_routing.ts)
 (`resolveSubagentRouting`), covered by
 [`tests/scripts/_lib_subagent_routing.test.ts`](../../../../tests/scripts/_lib_subagent_routing.test.ts).
+Budget layer: [`src/scripts/_lib/tier_budget_routing.ts`](../../../../src/scripts/_lib/tier_budget_routing.ts)
+(`pickTier`, `acquireBudgetPermit`, cool-downs), covered by
+[`tests/scripts/tier_budget_routing.test.ts`](../../../../tests/scripts/tier_budget_routing.test.ts);
+live state: `agent-config routing:doctor` (orchestration section).
 
 ## Related
 

package/dist/agent-src/contexts/override-system.md

@@ -202,7 +202,7 @@ When a project using this package wants to **optimize** a shared rule or skill:
 
 2. **Create PR against upstream** — submit the improvement to the shared `agent-config` package repository.
    The PR must contain:
-   - **Uncondensed version** in `.agent-src.uncondensed/{type}/{name}`
+   - **Source version** in `src/{type}/{name}`
    - **Condensed version** in `.augment/{type}/{name}`
    - Both files must be the complete, updated file (not a diff or partial)
 

package/dist/agent-src/ghostwriter/fictional-fixture-v1.md

@@ -84,7 +84,7 @@ contract validators have a complete, stable, non-defamatory example
 to load.
 
 Do not use this fixture as a template for adding a real person to
-`.agent-src.uncondensed/ghostwriter/`. Real-person profiles never
+`src/agent-src/ghostwriter/`. Real-person profiles never
 ship with the package — they belong in `agents/reference/ghostwriter/` on the
 consumer side, where they are gitignored by default.
 

package/dist/agent-src/rules/augment-edit-discipline.md

@@ -21,7 +21,7 @@ packs: [meta]
 
 # Augment Edit Discipline
 
-**Iron Law (portability).** Files inside `.augment/` and `.agent-src.uncondensed/` MUST stay project-agnostic — no project names, domains, stacks.
+**Iron Law (portability).** Files inside `.augment/` and `src/` MUST stay project-agnostic — no project names, domains, stacks.
 
 **Iron Law (sync).** On any add / rename / delete of skill / rule / command / guideline, update counts and cross-references in the same edit.
 

package/dist/agent-src/rules/autonomous-execution.md

@@ -10,6 +10,7 @@ load_context:
 triggers:
   - keyword: "personal.autonomy"
   - phrase: "autonomy mode"
+self_contained: true
 workspaces: [agent-config-maintainer, construction, engineering, finance, founder, gtm, legal-review-prep, ops, product, small-business]
 packs: [meta]
 ---
@@ -64,7 +65,7 @@ ALLOWLIST > 20 ENTRIES IN ONE SESSION = THE LINTER IS WRONG.
 STOP. PROPOSE LINTER REDESIGN OR REMOVAL. DO NOT EXPAND THE ALLOWLIST FURTHER.
 ```
 
-Crossing 20 entries counts as the 3rd validation-target failure — fix the tool shape, not the list. Verify with the narrowest tool that proves the target green (a single `curl` / Playwright spec for HTTP/UI, the test runner with a `--filter`, an `xdebug` step-through) — never a meta-pipeline as per-iteration probe. Failed-attempt detail, suppression-sweep equivalents, probe-efficiency detail, and adaptive effort & stop (RDP): [`autonomy-mechanics § Validation-loop budget`](../contexts/execution/autonomy-mechanics.md).
+Crossing 20 entries counts as the 3rd validation-target failure — fix the tool shape, not the list. Enforced at tool-call time by the `block-config-weakening` PreToolUse guard (`src/scripts/hooks/block_config_weakening.ts`): it counts allowlist entries added per session, warns from 5, and blocks past 20. Baselines and budget thresholds warn only — a rising count there may be a legitimate ratchet reset, which the edit alone cannot distinguish. Verify with the narrowest tool that proves the target green (a single `curl` / Playwright spec for HTTP/UI, the test runner with a `--filter`, an `xdebug` step-through) — never a meta-pipeline as per-iteration probe. Failed-attempt detail, suppression-sweep equivalents, probe-efficiency detail, and adaptive effort & stop (RDP): [`autonomy-mechanics § Validation-loop budget`](../contexts/execution/autonomy-mechanics.md).
 
 Body migrated to `contexts/execution/autonomy-mechanics.md` (per P4 of `road-to-kernel-and-router.md`) — opt-in detection summary, task-scope shapes table, N=3 mechanics, allowlist-antipattern detail, probe efficiency, adaptive effort (RDP).
 Trigger-set above activates this routing on demand, independent of the discipline profile (ADR-110).

package/dist/agent-src/rules/brand-consistency.md

@@ -14,6 +14,7 @@ applies_to_user_types:
   - "creator"
   - "developer"
   - "maintainer"
+self_contained: true
 workspaces: [engineering]
 packs: [brand]
 ---

package/dist/agent-src/rules/brand-source-of-truth.md

@@ -12,6 +12,7 @@ applies_to_user_types:
   - "creator"
   - "developer"
   - "maintainer"
+self_contained: true
 workspaces: [engineering]
 packs: [brand]
 ---

package/dist/agent-src/rules/code-comment-discipline.md

@@ -13,6 +13,8 @@ triggers:
   - keyword: "class"
   - keyword: "method"
   - keyword: "refactor"
+routes_to:
+  - "guideline:code-clarity"
 workspaces: [engineering]
 packs: [engineering-base]
 ---

package/dist/agent-src/rules/communication-through-line.md

@@ -3,6 +3,7 @@ type: "auto"
 tier: "2b"
 alwaysApply: false
 description: "Multi-step or continuation replies carry a red thread — goal once, each turn tied to it, name what changed, close with one end-summary"
+self_contained: true
 workspaces: [agent-config-maintainer, construction, engineering, finance, founder, gtm, legal-review-prep, ops, product, small-business]
 packs: [meta]
 triggers:

package/dist/agent-src/rules/content-quoting-floor.md

@@ -6,6 +6,7 @@ triggers:
   - keyword: "quote"
   - keyword: "excerpt"
   - keyword: "verbatim"
+self_contained: true
 workspaces: [agent-config-maintainer, construction, engineering, finance, founder, gtm, legal-review-prep, ops, product, small-business]
 packs: [meta]
 ---

package/dist/agent-src/rules/cross-source-consistency.md

@@ -6,7 +6,6 @@ triggers:
   - keyword: "ticket"
   - keyword: "refine"
   - keyword: "acceptance criteria"
-  - keyword: "AC"
   - keyword: "mockup"
   - keyword: "screenshot"
   - keyword: "attachment"

package/dist/agent-src/rules/downstream-changes.md

@@ -8,6 +8,7 @@ triggers:
   - keyword: "imports"
   - keyword: "downstream"
   - phrase: "api changed"
+self_contained: true
 workspaces: [engineering]
 packs: [engineering-base]
 ---

package/dist/agent-src/rules/external-code-graph-interop.md

@@ -14,6 +14,7 @@ triggers:
 applies_to_user_types:
   - "developer"
   - "maintainer"
+self_contained: true
 workspaces: [engineering]
 packs: [meta]
 ---

package/dist/agent-src/rules/external-reference-deep-dive.md

@@ -7,6 +7,7 @@ triggers:
   - keyword: "github.com/"
   - keyword: "source of truth"
   - phrase: "reference repo"
+self_contained: true
 workspaces: [agent-config-maintainer, engineering]
 packs: [meta]
 ---

package/dist/agent-src/rules/fast-path-marker-visibility.md

@@ -11,6 +11,7 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncondensed/"
     reason: "Condenseor injects a back-pointer to the uncondensed source for full failure-modes detail."
+self_contained: true
 workspaces: [agent-config-maintainer, engineering]
 packs: [meta]
 ---

package/dist/agent-src/rules/finance-safety-floor.md

@@ -10,7 +10,6 @@ triggers:
   - keyword: "IRR"
   - keyword: "MOIC"
   - keyword: "LTV"
-  - keyword: "CAC"
   - keyword: "payback"
   - keyword: "sensitivity"
   - keyword: "fundraise"

package/dist/agent-src/rules/icon-consistency.md

@@ -13,6 +13,7 @@ applies_to_user_types:
   - "creator"
   - "developer"
   - "maintainer"
+self_contained: true
 workspaces: [engineering]
 packs: [frontend-design]
 ---

package/dist/agent-src/rules/image-likeness-and-rights.md

@@ -15,6 +15,7 @@ applies_to_user_types:
   - "creator"
   - "developer"
   - "maintainer"
+self_contained: true
 workspaces: [agent-config-maintainer, engineering, gtm]
 packs: [ai-image]
 ---

package/dist/agent-src/rules/improve-before-implement.md

@@ -69,5 +69,5 @@ When the request is to create or significantly rewrite a skill, rule, command,
 or guideline, the "fit the existing architecture" check is handled by
 [`artifact-drafting-protocol`](artifact-drafting-protocol.md)'s Phase B
 (Research). Follow that protocol instead of improvising a one-shot check — it
-scans `.agent-src.uncondensed/` for overlap and reports candidates to extend
+scans `src/` for overlap and reports candidates to extend
 before creating a new file.

package/dist/agent-src/rules/invite-challenge.md

@@ -9,6 +9,7 @@ triggers:
   - keyword: "design"
   - keyword: "architecture"
   - keyword: "approach"
+self_contained: true
 workspaces: [agent-config-maintainer, engineering]
 packs: [meta]
 ---

package/dist/agent-src/rules/lethal-trifecta-guard.md

@@ -12,6 +12,7 @@ triggers:
   - keyword: "data exfil"
   - phrase: "fetch and send"
   - phrase: "read the file and post"
+self_contained: true
 workspaces: [engineering]
 packs: [engineering-base]
 enforced_by:

package/dist/agent-src/rules/low-impact-corpus-privacy-floor.md

@@ -7,6 +7,7 @@ triggers:
   - keyword: "low-impact-decisions"
   - keyword: "low-impact corpus"
   - keyword: "learn-low-impact"
+self_contained: true
 workspaces: [agent-config-maintainer]
 packs: [meta]
 ---

package/dist/agent-src/rules/markdown-safe-codeblocks.md

@@ -6,6 +6,7 @@ alwaysApply: false
 triggers:
   - keyword: "triple backticks"
   - file_pattern: "*.md"
+self_contained: true
 workspaces: [agent-config-maintainer, construction, engineering, finance, founder, gtm, legal-review-prep, ops, product, small-business]
 packs: [meta]
 ---

package/dist/agent-src/rules/media-governance-routing.md

@@ -26,6 +26,7 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncondensed/"
     reason: "Rule contrasts project-local placement with the .agent-src.uncondensed/rules/ alternative — mentioning the path is the argument."
+self_contained: true
 workspaces: [agent-config-maintainer, engineering, gtm]
 packs: [ai-image, ai-video]
 enforced_by:
@@ -58,12 +59,12 @@ When any trigger above matches in the user prompt or in a tool invocation, the a
 
 Each policy carries its own trigger block, so within the active context the agent narrows from this superset to the policies whose specific patterns actually fired (e.g., a prompt naming a public figure activates `public-figures.md` and `disclosure.md`; a prompt requesting `--no-disclosure` activates `disclosure.md` standalone).
 
-## Why project-local, not `.agent-src.uncondensed/rules/`
+## Why project-local, not `src/rules/`
 
-The seven media policies live under [`agents/settings/policies/media/`](../../agents/settings/policies/media/), not as `.agent-src.uncondensed/rules/domain-safety-media-*.md`, for three reasons:
+The seven media policies live under [`agents/settings/policies/media/`](../../agents/settings/policies/media/), not as `src/rules/domain-safety-media-*.md`, for three reasons:
 
 1. **They are consumed by skills and adapters**, not surfaced as standalone always-loaded prose. The cost is non-trivial (7 × ~80 lines = ~560 lines into the always-context if hoisted to rules), and most sessions never touch a video / image / voice surface.
-2. **The enforcement model is project-local** — the working precedent (`/ghostwriter:*` mandatory footer in `write-engine.md`) and the audit log (session transcripts) are project artifacts. Rules under `.agent-src.uncondensed/` are tool-portable governance; these policies are domain-specific bindings.
+2. **The enforcement model is project-local** — the working precedent (`/ghostwriter:*` mandatory footer in `write-engine.md`) and the audit log (session transcripts) are project artifacts. Rules under `src/rules/` are tool-portable governance; these policies are domain-specific bindings.
 3. **Extraction to a reusable domain pack is explicitly deferred** until a second non-video domain (audio, image, docs, exports) lands with overlapping execution surfaces. Until then, a one-domain abstraction is structurally premature — the policies stay project-local and the routing rule is the on-demand bridge.
 
 This routing rule is the bridge: it sits in the always-loaded rule set so the trigger keywords surface the project-local policies into context on demand, without paying the full always-loaded cost.

package/dist/agent-src/rules/media-sync-ground-truth.md

@@ -14,6 +14,7 @@ triggers:
   - phrase: "sing the"
   - phrase: "mit den lippen"
   - phrase: "lippen passend"
+self_contained: true
 workspaces: [agent-config-maintainer, engineering, gtm]
 packs: [ai-video]
 ---

package/dist/agent-src/rules/no-attribution-footers.md

@@ -5,6 +5,7 @@ alwaysApply: false
 description: "PR/issue/comment/commit bodies — no 'Generated with' / 'Co-authored by' / 'opened by' attribution footers"
 triggers:
   - keyword: "co-authored"
+self_contained: true
 workspaces: [agent-config-maintainer, construction, engineering, finance, founder, gtm, legal-review-prep, ops, product, small-business]
 packs: [meta]
 ---

package/dist/agent-src/rules/no-decorative-emojis-in-git-surfaces.md

@@ -14,6 +14,7 @@ triggers:
   - keyword: "💡"
   - keyword: "👍"
   - keyword: "❤️"
+self_contained: true
 workspaces: [agent-config-maintainer, engineering]
 packs: [meta]
 ---

package/dist/agent-src/rules/no-pr-progress-comments.md

@@ -7,6 +7,7 @@ triggers:
   - keyword: "gh pr comment"
   - keyword: "PullRequestComment"
   - phrase: "status comment"
+self_contained: true
 workspaces: [agent-config-maintainer, engineering]
 packs: [meta]
 ---

package/dist/agent-src/rules/onboarding-gate.md

@@ -6,6 +6,7 @@ triggers:
   - phrase: "first turn"
   - keyword: "onboarding"
   - path_prefix: ".agent-settings.yml"
+self_contained: true
 workspaces: [agent-config-maintainer, construction, engineering, finance, founder, gtm, legal-review-prep, ops, product, small-business]
 packs: [meta]
 enforced_by:

package/dist/agent-src/rules/output-discipline.md

@@ -7,6 +7,7 @@ triggers:
   - keyword: "for brevity"
   - keyword: "rest follows the same pattern"
   - phrase: "similar pattern"
+self_contained: true
 workspaces: [engineering]
 packs: [engineering-base]
 enforced_by:

package/dist/agent-src/rules/prefer-enums-over-literals.md

@@ -9,6 +9,7 @@ triggers:
   - keyword: "kind"
   - keyword: "category"
   - keyword: "migration"
+self_contained: true
 workspaces: [engineering]
 packs: [engineering-base]
 ---

package/dist/agent-src/rules/preservation-guard.md

@@ -9,6 +9,7 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-src.uncondensed/"
     reason: "Rule references the authoring tree as the operand of condensation/preservation."
+self_contained: true
 workspaces: [agent-config-maintainer]
 packs: [meta]
 enforced_by:

package/dist/agent-src/rules/question-not-instruction.md

@@ -21,6 +21,7 @@ applies_to_user_types:
   - "maintainer"
   - "operator"
   - "researcher"
+self_contained: true
 workspaces: [engineering]
 packs: [meta]
 ---

package/dist/agent-src/rules/roadmap-ci-steps-policy.md

@@ -24,6 +24,7 @@ validator_ignore:
   - type: "substring"
     pattern: ".agent-settings.yml"
     reason: "Rule reads quality.local_auto_run from .agent-settings.yml; naming the file is the contract."
+self_contained: true
 workspaces: [agent-config-maintainer, engineering]
 packs: [meta]
 roles: [planner]

package/dist/agent-src/rules/role-mode-adherence.md

@@ -6,6 +6,7 @@ alwaysApply: false
 triggers:
   - keyword: "active_role"
   - keyword: "role-mode"
+self_contained: true
 workspaces: [agent-config-maintainer, construction, engineering, finance, founder, gtm, legal-review-prep, ops, product, small-business]
 packs: [meta]
 ---

package/dist/agent-src/rules/runtime-safety.md

@@ -7,6 +7,7 @@ triggers:
   - keyword: "automated"
   - keyword: "assisted"
   - keyword: "handler"
+self_contained: true
 workspaces: [agent-config-maintainer, engineering]
 packs: [meta]
 ---

package/dist/agent-src/rules/security-sensitive-stop.md

@@ -14,6 +14,7 @@ validator_ignore:
   - type: "substring"
     pattern: "../../docs/"
     reason: "See-also routes to docs/threat-model.md — the canonical attack-surface doc lives there by design."
+self_contained: true
 workspaces: [engineering]
 packs: [engineering-base]
 enforced_by:

package/dist/agent-src/rules/session-canary.md

@@ -7,6 +7,7 @@ triggers:
   - keyword: "canary"
   - keyword: "canary_name"
   - phrase: "session canary"
+self_contained: true
 workspaces: [agent-config-maintainer, construction, engineering, finance, founder, gtm, legal-review-prep, ops, product, small-business]
 packs: [meta]
 enforced_by:
@@ -21,7 +22,12 @@ two small, always-expected reply markers whose **silent disappearance** tells
 the user the conversation is degrading and it is time for a fresh session —
 long before the agent visibly starts making mistakes.
 
-Read `personal.canary_name` from `.agent-settings.yml`. Empty or missing →
+The canary is a **personal, user-global** concern — the name resolves through
+three layers, first non-empty wins: project `.agent-settings.yml` →
+`personal.canary_name` (override only) · user-global
+`settings/.agent-settings.yml` → `personal.canary_name` · user-global
+`settings/.agent-user.yml` → `identity.name` (the name the setup wizard
+already collects — never duplicate it per project). No name on any layer →
 rule is inert.
 
 ## The Iron Law
@@ -55,7 +61,8 @@ name it and suggest a fresh session or `/agent-handoff`, per
 
 ## When NOT to fire
 
-- `personal.canary_name` empty or missing — fully inert, no greeting.
+- No name on any layer (`personal.canary_name` project + user-global, global
+  `identity.name`) — fully inert, no greeting.
 - Intermediate replies inside an ongoing task (greeting only at task start).
 - The greeting never substitutes for substance — it prefixes the answer, it is
   not the answer.