@event4u/agent-config 9.19.0 → 9.20.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.19.0",
+    "version": "9.20.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -294,6 +294,44 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 9.19.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [9.20.0](https://github.com/event4u-app/agent-config/compare/9.19.0...9.20.0) (2026-08-04)
+
+### Release highlights
+
+<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
+- **Behaviour changes:** _none_
+- **Default changes + migration:** _auto-derived, rewrite before merge:_ commits naming a default, migration or migrate in 14dc053, bb362a0.
+- **Security and correctness:** _none_
+- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in ba77e6a.
+- **Known limitations:** _none_
+
+### Features
+
+* **gates:** read the archived round records nothing was reading ([89eea71](https://github.com/event4u-app/agent-config/commit/89eea712b89048a032dfccf8a3bdd41f565adacc))
+
+### Bug Fixes
+
+* **gates:** stop the remediation text pointing at the closed hole ([2dc9e0d](https://github.com/event4u-app/agent-config/commit/2dc9e0d91262864237e50268d8ea54dcce761a62))
+* **gates:** rows are live wherever they appear — close the fence fail-open ([ba77e6a](https://github.com/event4u-app/agent-config/commit/ba77e6a6f4cc5c31b9de4741ee30ccc41e126df7))
+
+### Documentation
+
+* **evidence:** close the blind-pass dispositions and correct a claim I made ([0398238](https://github.com/event4u-app/agent-config/commit/0398238d99f7451712e710204c86ab41f964de50))
+* **contracts:** 2.7 is enforced now, and says what it still does not check ([d0b3650](https://github.com/event4u-app/agent-config/commit/d0b365035dc314183dcb0e353a09e3e2c5420284))
+* **roadmap:** pin-then-migrate ordering; drop the index for a round-record check ([bb362a0](https://github.com/event4u-app/agent-config/commit/bb362a0b64a5e16a156d238c1acadded44f229aa))
+* **roadmap:** record the council verdict on the fence grammar ([3e0deff](https://github.com/event4u-app/agent-config/commit/3e0deff6256050aa23fe952707ab88bf7bc9647e))
+* **review:** give the blind-pass findings terminal statuses and a carrier ([667b81e](https://github.com/event4u-app/agent-config/commit/667b81e9fa44d892095a7b057a6407196aa429bf))
+
+### Tests
+
+* **gates:** pin every fence arrangement before the grammar migration ([14dc053](https://github.com/event4u-app/agent-config/commit/14dc053d51ac1e932ce4deeb50ffb2e07737bd84))
+
+### CI
+
+* **gates:** wire check_review_dispositions with a trippable floor ([9b03190](https://github.com/event4u-app/agent-config/commit/9b0319032494345fdcaad40ae79dbe3ea95f6fc8))
+
+Tests: 10995 (+23 since 9.19.0)
+
 ## [9.19.0](https://github.com/event4u-app/agent-config/compare/9.18.1...9.19.0) (2026-08-04)
 
 ### Release highlights

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "9.19.0"
+agent_config_version: "9.20.0"
 
 # --- Project identity ---
 project:

package/dist/discovery/deprecation-report.md

@@ -1,6 +1,6 @@
 # Discovery — Deprecation Report
 
-- Generated: `2026-08-04T16:08:00Z`
+- Generated: `2026-08-04T21:41:44Z`
 - Deprecated artefacts: **0**
 
 _None. Tree is clean._

package/dist/discovery/discovery-manifest.json

@@ -14402,7 +14402,7 @@
       "reason": "scaffold template for ticket-bundle tickets (ADR-101); carries no runtime frontmatter — emit-tickets fills it in per ticket"
     }
   ],
-  "generated_at": "2026-08-04T16:08:00Z",
+  "generated_at": "2026-08-04T21:41:44Z",
   "packs": [
     {
       "artefact_count": 117,

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-771e350a2329d84c1a47378ed09ebeed75e5ada993d722cfc079b3f5befec595  discovery-manifest.json
+759c2227292efbd65092bc4a57aa783cb714db0e6d93a1a53f6f35ba940d32aa  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,6 +1,6 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-08-04T16:08:00Z`
+- Generated: `2026-08-04T21:41:44Z`
 - Scanner: `c24312e116f8`
 - Artefacts: **594**
 - Unassigned: **0**

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-08-04T16:08:00Z`
+- Generated: `2026-08-04T21:41:44Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
   "checksum": "sha256:d766f7f17140ce6b648e68821c9403c0bf478609a1ea925e85501c5994002a05",
-  "generated_at": "2026-08-04T16:08:00Z",
+  "generated_at": "2026-08-04T21:41:44Z",
   "packs": [
     {
       "always_on": false,

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-08-04T16:08:00Z`
+- Generated: `2026-08-04T21:41:44Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
   "checksum": "sha256:d766f7f17140ce6b648e68821c9403c0bf478609a1ea925e85501c5994002a05",
-  "generated_at": "2026-08-04T16:08:00Z",
+  "generated_at": "2026-08-04T21:41:44Z",
   "scanner_version": "c24312e116f8",
   "workspaces": [
     {

package/dist/mcp/registry-manifest.json

@@ -9,7 +9,7 @@
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.19.0"
+    "version": "9.20.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "9.19.0"
+      "version": "9.20.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "9.19.0"
+  "version": "9.20.0"
 }

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@event4u/agent-config",
     "mcpName": "io.github.event4u-app/agent-config",
-    "version": "9.19.0",
+    "version": "9.20.0",
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including \"zero runtime daemon\".",
     "license": "MIT",
     "private": false,

package/src/config/gate-coverage.yml

@@ -365,6 +365,22 @@ gates:
       stays registered so the guard reports this gate rather than skipping it
       silently.
 
+  - id: check_review_dispositions
+    argv: []
+    min_scanned: 7
+    corpus: "archived round records — `*-review.md` under agents/evidence/reviews/, excluding live `*.findings.md` (9 at baseline)"
+    status: enforced
+    note: >
+      Contract § 2.7. Unlike the R2 entry above, this floor is genuinely
+      trippable: the corpus is 9 frozen records and archived records are not
+      deleted, so a drop to 7 means the reviews root moved or the naming
+      convention drifted — not that the work went clean. That is precisely the
+      case rule 3 exists for. The gate reads the FROZEN records because R2
+      selects only artefacts in the CURRENT review scope, so a superseded round
+      renamed out of the `*.findings.md` glob is read by nothing at all — two
+      findings sat recorded as `open` in this repo's own corpus for a day
+      through exactly that gap.
+
   # ---------------------------------------------------------------------------
   # The five below close the gap this header named: they already called
   # `_lib/scan_scope.assertScanned` with a real count and only had to PRINT it.

package/src/scripts/check_completion_review.ts

@@ -495,10 +495,18 @@ export function parseArtifact(text: string): ParsedArtifact {
         // LABELLED closed fence is illustrative content. A stray fence (bare, or
         // an unclosed opener) skips nothing (see scanFences) — the lines around
         // it are parsed, and the artefact is reported.
-        if (FENCE_RE.test(raw) || fences.fenced.has(i)) {
+        const trimmed = raw.trim();
+        // §2.2 row-liveness rule: fences govern the marker / honest-null / skip
+        // lines, which a fenced illustration may legitimately quote — but NOT
+        // findings rows. Hiding a marker or an honest-null fails CLOSED (the
+        // artefact reads as absent and the gate blocks); hiding a row fails OPEN
+        // (the finding silently ceases to exist). So the one line type whose
+        // concealment is dangerous is the one fences may not conceal, and a row
+        // is live wherever it appears. Only its own Status cell can excuse it.
+        const isCandidateRow = trimmed.startsWith('|');
+        if (FENCE_RE.test(raw) || (fences.fenced.has(i) && !isCandidateRow)) {
             continue;
         }
-        const trimmed = raw.trim();
         // Marker candidates must LOOK like the §2.1 HTML comment: prose that
         // merely mentions the grammar (`the \`completion-review:\` marker …`,
         // or a reviewer note quoting it in backticks — real artefacts in this
@@ -544,6 +552,12 @@ export function parseArtifact(text: string): ParsedArtifact {
             if (first === '#' || second === 'severity') {
                 continue; // header row
             }
+            // §2.2: `example` is the ONE illustrative marker. It is read from the
+            // Status cell of a six-cell row only — a short row cannot excuse
+            // itself, or `malformed-row` would become opt-out.
+            if (cells.length === 6 && (cells[4] ?? '').trim().toLowerCase() === 'example') {
+                continue;
+            }
             // EXACTLY six, per contract §2.2 — not `>= 6`. An over-long row is
             // as malformed as a short one and the surplus is usually the tell:
             // an unescaped `|` inside a cell (the shape §2.2 requires escaping)
@@ -797,8 +811,9 @@ function evaluate(input: EvalInput): Violation[] {
                 detail:
                     `${at}: stray \`\`\` fence — a bare fence delimits no region, and a labelled fence must ` +
                     'be closed. An artefact whose ``` fences do not resolve is malformed (contract §2.2). ' +
-                    'Label the opener (```markdown) and close it, or inline-escape an illustrative ```; ' +
-                    'the lines around a stray fence are still parsed, so any finding row there is validated too.',
+                    'Close the fence, or inline-escape an illustrative ```. NOTE: fences never hide a ' +
+                    'findings row — a row is live wherever it appears, and the ONLY way to mark one ' +
+                    'illustrative is the status `example` in its own Status cell.',
             });
         }
     }

package/src/scripts/check_review_dispositions.ts

@@ -0,0 +1,188 @@
+#!/usr/bin/env tsx
+/**
+ * Archived-review disposition check (contract §2.7 + §2.2).
+ *
+ * Gate R2 selects only artefacts relevant to the CURRENT review scope (§2.6),
+ * and superseded rounds are renamed out of the `*.findings.md` glob on purpose.
+ * The consequence nobody noticed until it bit: **no validator reads archived
+ * round records at all**, so a finding left `open` after it was fixed is caught
+ * by nothing. That is exactly how two fixed findings sat recorded as `open` for
+ * a day in this repo's own corpus.
+ *
+ * This closes that gap with the smallest mechanism that covers the observed
+ * failure: archiving a round asserts the round is CLOSED, so every row in an
+ * archived record must carry a terminal status and a non-empty Reason/Ref.
+ *
+ * Deliberately NOT the disposition index with stable ids that was originally
+ * proposed. That design assumed dispositions live OUTSIDE the round records;
+ * measured across the corpus, they do not — records are terminal in place. An
+ * index would be a second artefact to keep in sync, and therefore a new drift
+ * source, guarding a failure mode that has not occurred. Trigger to revisit: a
+ * disposition that genuinely cannot be recorded in the round record itself.
+ *
+ * Scope: `*-review.md` under the reviews root, excluding `*.findings.md` (those
+ * are live artefacts and belong to `check_completion_review`).
+ *
+ * Reference SHAPE is deliberately NOT checked, and that was a measurement, not
+ * a preference. The first draft resolved a `fixed` ref via `rev-parse` and a
+ * `deferred` ref via a path probe. Run against the real corpus it produced 8
+ * blocks — every one of them a pre-existing archived record whose reference is
+ * prose describing the change, or a carrier named by bare slug. None of the 8
+ * was the failure this gate exists to catch. Archived records are frozen
+ * (§2.7), so a shape rule cannot be satisfied retroactively without editing
+ * them; a gate whose only output is unfixable blocks is the gate that gets
+ * switched off. Trigger to revisit: a review round where an unresolvable
+ * reference actually hid a disposition, on a record written AFTER this gate
+ * shipped and therefore fixable at source.
+ *
+ * Exit codes (contract §6): 0 = pass, 1 = policy violation (including a DEAD
+ * SCAN SCOPE — a gate that read nothing has not passed), 2 = internal error
+ * (the CALLER applies degraded advisory mode). `scanned:` is emitted on EVERY
+ * exit path, exit 2 included.
+ */
+
+import * as fs from 'node:fs';
+import * as path from 'node:path';
+import { fileURLToPath, pathToFileURL } from 'node:url';
+
+import { DeadScopeError, assertScanned } from './_lib/scan_scope.js';
+import { parseArtifact } from './check_completion_review.js';
+
+const REVIEWS_ROOT = 'agents/evidence/reviews';
+const TERMINAL = new Set(['fixed', 'accepted-risk', 'deferred']);
+
+export interface Violation {
+    kind: string;
+    file: string;
+    detail: string;
+}
+
+/** An archived record: a `*-review.md` that is not a live `*.findings.md`. */
+export function isArchivedRecord(rel: string): boolean {
+    const base = rel.replace(/\\/g, '/').split('/').pop() ?? '';
+    return base.endsWith('-review.md') && !base.endsWith('.findings.md');
+}
+
+export interface CheckOptions {
+    repo: string;
+}
+
+/** Contract §2.7: every row of an archived record is terminal, with its reference. */
+export function checkRecord(rel: string, text: string, _opts: CheckOptions): Violation[] {
+    const violations: Violation[] = [];
+    const parsed = parseArtifact(text);
+    for (const row of parsed.rows) {
+        const where = `row ${row.index} (line ${String(row.line)})`;
+        if (row.status === 'open') {
+            violations.push({
+                kind: 'open-in-archived-record',
+                file: rel,
+                detail:
+                    `${where}: status \`open\` in an ARCHIVED record. Renaming a round out of the ` +
+                    '`*.findings.md` glob asserts it is closed, so every row must already be terminal ' +
+                    '(`fixed` / `accepted-risk` / `deferred`) — contract §2.7.',
+            });
+            continue;
+        }
+        if (!TERMINAL.has(row.status)) {
+            violations.push({
+                kind: 'bad-status',
+                file: rel,
+                detail: `${where}: unknown status \`${row.status}\` — expected fixed / accepted-risk / deferred.`,
+            });
+            continue;
+        }
+        if (row.reasonRef.trim() === '') {
+            violations.push({
+                kind: 'missing-reference',
+                file: rel,
+                detail: `${where}: status \`${row.status}\` requires a Reason/Ref, which is empty.`,
+            });
+        }
+    }
+    return violations;
+}
+
+export function main(argv?: readonly string[]): number {
+    const args = argv ?? process.argv.slice(2);
+    let repo = process.cwd();
+    let root = REVIEWS_ROOT;
+    let quiet = false;
+    for (let i = 0; i < args.length; i++) {
+        const a = args[i] as string;
+        if (a === '--repo') repo = args[++i] as string;
+        else if (a === '--reviews-root') root = args[++i] as string;
+        else if (a === '--quiet') quiet = true;
+        else if (a === '-h' || a === '--help') {
+            process.stdout.write('usage: check_review_dispositions [--repo PATH] [--reviews-root PATH] [--quiet]\n');
+            process.stdout.write('scanned: 0\n');
+            return 0;
+        }
+    }
+
+    const abs = path.resolve(repo, root);
+    let files: string[] = [];
+    try {
+        files = fs
+            .readdirSync(abs, { withFileTypes: true })
+            .filter((e) => e.isFile() && isArchivedRecord(e.name))
+            .map((e) => path.join(root, e.name))
+            .sort();
+    } catch {
+        // Absent root: report it as a DEAD SCOPE below rather than a clean pass.
+        files = [];
+    }
+
+    try {
+        assertScanned({
+            gate: 'check_review_dispositions',
+            scanned: files.length,
+            units: 'archived review record(s)',
+            roots: [root],
+        });
+    } catch (exc) {
+        // A dead scan scope is a POLICY violation (exit 1), never an internal
+        // error: exit 2 is warn-and-allow at every call site, so a moved reviews
+        // root would silently degrade this gate to advisory.
+        process.stdout.write('scanned: 0\n');
+        process.stderr.write(`❌  ${exc instanceof DeadScopeError ? exc.message : String(exc)}\n`);
+        return 1;
+    }
+
+    const violations: Violation[] = [];
+    let scanned = 0;
+    try {
+        for (const rel of files) {
+            const text = fs.readFileSync(path.resolve(repo, rel), 'utf-8');
+            scanned += 1;
+            violations.push(...checkRecord(rel, text, { repo }));
+        }
+    } catch (exc) {
+        process.stdout.write(`scanned: ${String(scanned)}\n`);
+        process.stderr.write(
+            `❌  check_review_dispositions: internal error after ${String(scanned)} record(s): ` +
+                `${exc instanceof Error ? exc.message : String(exc)}\n`,
+        );
+        return 2;
+    }
+
+    if (violations.length > 0) {
+        process.stdout.write(`❌  ${String(violations.length)} disposition violation(s):\n\n`);
+        for (const v of violations) {
+            process.stdout.write(`  ${v.kind} — ${v.file}\n    │ ${v.detail}\n`);
+        }
+    } else if (!quiet) {
+        process.stdout.write(`✅  Archived review records all terminal (${String(scanned)} record(s) scanned).\n`);
+    }
+    process.stdout.write(`scanned: ${String(scanned)}\n`);
+    return violations.length > 0 ? 1 : 0;
+}
+
+const _HERE = fileURLToPath(import.meta.url);
+function _isCliEntry(): boolean {
+    if (process.argv[1] === undefined) return false;
+    return import.meta.url === pathToFileURL(path.resolve(process.argv[1])).href || process.argv[1] === _HERE;
+}
+if (_isCliEntry()) {
+    process.exit(main());
+}

package/src/scripts/dispatch_r2_reviewer.ts

@@ -535,6 +535,9 @@ function reviewerPrompt(args: {
         '- Severity ∈ {`critical`, `high`, `medium`, `low`}, rows sorted descending',
         '  by severity (ties keep authoring order).',
         '- Initial status of every finding: `open`.',
+        '- A row is LIVE wherever it appears — a code fence around it changes',
+        '  nothing. If you quote the template as an illustration, its Status cell',
+        '  must be exactly `example`, or the gate reads it as a real finding.',
         '- 0 findings → replace the table with exactly this honest-null line',
         '  (contract §2.3):',
         '',