@event4u/agent-config 9.19.0 → 9.21.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.19.0",
+    "version": "9.21.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -294,6 +294,95 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 9.19.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [9.21.0](https://github.com/event4u-app/agent-config/compare/9.20.0...9.21.0) (2026-08-05)
+
+### Release highlights
+
+<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
+- **Behaviour changes:** _none_
+- **Default changes + migration:** _none_
+- **Security and correctness:** _none_
+- **Honest nulls:** _none_
+- **Known limitations:** _none_
+
+### Features
+
+* **gates:** take the unhardened-gate count to 0 and delete the ratchet entry ([e31690c](https://github.com/event4u-app/agent-config/commit/e31690c7330bb90ed813cc25ead2268da2971ea1))
+* **gates:** repoint lint_skill_tools at the .ts corpus and harden it ([694a729](https://github.com/event4u-app/agent-config/commit/694a729359e674953881a996af6079123e91a98d))
+* **gates:** fold bite-sized granularity into lint_roadmap_complexity ([08d9075](https://github.com/event4u-app/agent-config/commit/08d9075c978a6a76a250a74fe6377ad3b2c2d8a2))
+* **gates:** assert the scan scope of the last 57 gates — 61 → 4 ([5244b21](https://github.com/event4u-app/agent-config/commit/5244b21ea664db73a3a07c8ce717a2b43c4ba157))
+* **gates:** assert the scan scope of 54 more gates — 115 → 61 ([835fd54](https://github.com/event4u-app/agent-config/commit/835fd545649287574c9d74e3280302ca429b8d20))
+* **gates:** assert the scan scope of 48 tree-walking gates ([9cc51a2](https://github.com/event4u-app/agent-config/commit/9cc51a20c8d3d3c9f133d0bb8a94a322b90ee235))
+* **gates:** assert the scan scope of 28 more corpus gates ([f4e79e4](https://github.com/event4u-app/agent-config/commit/f4e79e4a8f7c90e27353693f42d27c1a70bbdac4))
+* **gates:** classify the corpusless gates by what they read ([c7a851b](https://github.com/event4u-app/agent-config/commit/c7a851becd7a77ff85c7c443c59ca45b91bc7ef3))
+* **gates:** assert the scan scope of five corpus gates ([7433f72](https://github.com/event4u-app/agent-config/commit/7433f72482c639bf88d01e58e093d7c57a608960))
+* **gates:** derive the conversion work-list instead of reading 189 gates ([b845e4d](https://github.com/event4u-app/agent-config/commit/b845e4df66e90b1d43a42f9fa55bb41457b4a1b5))
+* **scan-scope:** pair the scope assertion with the published count ([b8b2840](https://github.com/event4u-app/agent-config/commit/b8b2840d17466f0be5047fbaa98ed67751a93a70))
+
+### Bug Fixes
+
+* **gates:** read piped stdin whole — a gate that only broke on big diffs ([0e3e9cd](https://github.com/event4u-app/agent-config/commit/0e3e9cd4ca91c01c00d8c611a96db72b936952d8))
+* **gates:** clear the two preflight blockers the repairs introduced ([2683395](https://github.com/event4u-app/agent-config/commit/268339595ca2dd34b14a1a63abd6362fde7868fb))
+* **gates:** repair two dead scan roots the widened population revealed ([5b41c55](https://github.com/event4u-app/agent-config/commit/5b41c556bc245c4eb9da7506b4de449a3cde07b0))
+* **gates:** one definition of "a gate", and an honest denominator ([9f65efe](https://github.com/event4u-app/agent-config/commit/9f65efea7882d4c79f2e5f4c8fcefb0b521bcdde))
+* **gate-coverage:** an unenforced `scanned:` line hardens nothing ([2873c91](https://github.com/event4u-app/agent-config/commit/2873c919d0245ca76a18f2315c768b9a9cb1e1ca))
+
+### Documentation
+
+* **roadmap:** close and archive road-to-gate-hardening-adoption ([d1497c5](https://github.com/event4u-app/agent-config/commit/d1497c5fc12f5475b683f27b42953cf2f448def8))
+* **roadmap:** file the four-gate blocker where the dashboard reads it ([7e0c8e9](https://github.com/event4u-app/agent-config/commit/7e0c8e9e369c29a7574c99f1ec453835e1ae44e9))
+* **roadmap:** close Phase 1 — the mechanically-safe conversions ([877859a](https://github.com/event4u-app/agent-config/commit/877859ac99e70a79630b201a025a474df156fe55))
+* **roadmap:** record the assert-first conversion contract ([613d478](https://github.com/event4u-app/agent-config/commit/613d47878252edfe8c5d225d73c1bed3fe6fb753))
+
+### Refactoring
+
+* **gates:** re-home the ADR-095 workspace boundary to ESLint ([2bc2483](https://github.com/event4u-app/agent-config/commit/2bc24833149cff33573a84c9dfbc973b5b3b5fe3))
+* **hooks:** rename verify_before_complete_hook off the gate prefix ([f57d969](https://github.com/event4u-app/agent-config/commit/f57d969c6c54e591060054f217a12d816d121116))
+
+### Chores
+
+* **tests:** drop a dead helper the lint scope only now reaches ([9b49d24](https://github.com/event4u-app/agent-config/commit/9b49d240140c9b6af28969c752f4757bf5580d98))
+
+Tests: 11034 (+39 since 9.20.0)
+
+## [9.20.0](https://github.com/event4u-app/agent-config/compare/9.19.0...9.20.0) (2026-08-04)
+
+### Release highlights
+
+<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
+- **Behaviour changes:** _none_
+- **Default changes + migration:** _auto-derived, rewrite before merge:_ commits naming a default, migration or migrate in 14dc053, bb362a0.
+- **Security and correctness:** _none_
+- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in ba77e6a.
+- **Known limitations:** _none_
+
+### Features
+
+* **gates:** read the archived round records nothing was reading ([89eea71](https://github.com/event4u-app/agent-config/commit/89eea712b89048a032dfccf8a3bdd41f565adacc))
+
+### Bug Fixes
+
+* **gates:** stop the remediation text pointing at the closed hole ([2dc9e0d](https://github.com/event4u-app/agent-config/commit/2dc9e0d91262864237e50268d8ea54dcce761a62))
+* **gates:** rows are live wherever they appear — close the fence fail-open ([ba77e6a](https://github.com/event4u-app/agent-config/commit/ba77e6a6f4cc5c31b9de4741ee30ccc41e126df7))
+
+### Documentation
+
+* **evidence:** close the blind-pass dispositions and correct a claim I made ([0398238](https://github.com/event4u-app/agent-config/commit/0398238d99f7451712e710204c86ab41f964de50))
+* **contracts:** 2.7 is enforced now, and says what it still does not check ([d0b3650](https://github.com/event4u-app/agent-config/commit/d0b365035dc314183dcb0e353a09e3e2c5420284))
+* **roadmap:** pin-then-migrate ordering; drop the index for a round-record check ([bb362a0](https://github.com/event4u-app/agent-config/commit/bb362a0b64a5e16a156d238c1acadded44f229aa))
+* **roadmap:** record the council verdict on the fence grammar ([3e0deff](https://github.com/event4u-app/agent-config/commit/3e0deff6256050aa23fe952707ab88bf7bc9647e))
+* **review:** give the blind-pass findings terminal statuses and a carrier ([667b81e](https://github.com/event4u-app/agent-config/commit/667b81e9fa44d892095a7b057a6407196aa429bf))
+
+### Tests
+
+* **gates:** pin every fence arrangement before the grammar migration ([14dc053](https://github.com/event4u-app/agent-config/commit/14dc053d51ac1e932ce4deeb50ffb2e07737bd84))
+
+### CI
+
+* **gates:** wire check_review_dispositions with a trippable floor ([9b03190](https://github.com/event4u-app/agent-config/commit/9b0319032494345fdcaad40ae79dbe3ea95f6fc8))
+
+Tests: 10995 (+23 since 9.19.0)
+
 ## [9.19.0](https://github.com/event4u-app/agent-config/compare/9.18.1...9.19.0) (2026-08-04)
 
 ### Release highlights

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "9.19.0"
+agent_config_version: "9.21.0"
 
 # --- Project identity ---
 project:

package/dist/cli-delegate/{chunk-XGA2NTU4.js → chunk-3EWYC3YK.js}

@@ -457,6 +457,29 @@ function _pyJsonScalarAscii(value) {
   return _pyJsonScalar(value);
 }
 
+// src/scripts/_lib/scan_scope.ts
+var DeadScopeError = class extends Error {
+  gate;
+  constructor(gate, message) {
+    super(message);
+    this.name = "DeadScopeError";
+    this.gate = gate;
+  }
+};
+function assertScanned(opts) {
+  if (opts.scanned > 0) {
+    return;
+  }
+  if (opts.allowEmpty !== void 0 && opts.allowEmpty.trim() !== "") {
+    return;
+  }
+  const roots = opts.roots.length > 0 ? opts.roots.join(", ") : "(no root declared)";
+  throw new DeadScopeError(
+    opts.gate,
+    `${opts.gate}: scanned 0 ${opts.units} under ${roots} \u2014 the scan scope is dead or the root moved. A gate that read nothing has not passed. Repoint the root (prefer the shared resolver in _lib/agent_src.ts), or declare a justified \`allowEmpty\` reason if an empty corpus is genuinely expected.`
+  );
+}
+
 // src/scripts/lint_hidden_unicode.ts
 var CHECK = "hidden-unicode";
 var _BIDI = /* @__PURE__ */ new Set([
@@ -872,7 +895,9 @@ function main(argv = null) {
   const args = parse_args(argv ?? process.argv.slice(2));
   const findings = [];
   const flagged = /* @__PURE__ */ new Set();
+  let corpusFiles = 0;
   for (const sf of iter_corpus()) {
+    corpusFiles += 1;
     const hits = _scan(sf);
     for (const h of hits) {
       findings.push(h);
@@ -881,6 +906,21 @@ function main(argv = null) {
       flagged.add(sf.path);
     }
   }
+  try {
+    assertScanned({
+      gate: "lint_hidden_unicode",
+      scanned: corpusFiles,
+      units: "corpus file(s)",
+      roots: DEFAULT_SCAN_ROOTS
+    });
+  } catch (exc) {
+    if (exc instanceof DeadScopeError) {
+      process.stderr.write(`\u274C  ${exc.message}
+`);
+      return 1;
+    }
+    throw exc;
+  }
   const sourceFiles = _eligibleSourceFiles();
   for (const h of _scanSourceControlBytes(sourceFiles)) {
     findings.push(h);

package/dist/cli-delegate/cmd_handoff.js

@@ -6,7 +6,7 @@ import {
   readHookStdin,
   read_entries
 } from "./chunk-AIIUU73N.js";
-import "./chunk-XGA2NTU4.js";
+import "./chunk-3EWYC3YK.js";
 import {
   _RAW_KEY_PREFIXES,
   hardenedSpawnEnv

package/dist/cli-delegate/cmd_memory_get.js

@@ -2,7 +2,7 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
   memory_get_v1
-} from "./chunk-XGA2NTU4.js";
+} from "./chunk-3EWYC3YK.js";
 import "./chunk-OY53J6II.js";
 import "./chunk-J55WI3RR.js";
 

package/dist/cli-delegate/cmd_route_audit.js

@@ -6,7 +6,7 @@ import {
 import {
   read_entries
 } from "./chunk-AIIUU73N.js";
-import "./chunk-XGA2NTU4.js";
+import "./chunk-3EWYC3YK.js";
 import {
   load_agent_settings
 } from "./chunk-HJ6DAJHR.js";

package/dist/discovery/deprecation-report.md

@@ -1,6 +1,6 @@
 # Discovery — Deprecation Report
 
-- Generated: `2026-08-04T16:08:00Z`
+- Generated: `2026-08-05T03:10:28Z`
 - Deprecated artefacts: **0**
 
 _None. Tree is clean._

package/dist/discovery/discovery-manifest.json

@@ -14402,7 +14402,7 @@
       "reason": "scaffold template for ticket-bundle tickets (ADR-101); carries no runtime frontmatter — emit-tickets fills it in per ticket"
     }
   ],
-  "generated_at": "2026-08-04T16:08:00Z",
+  "generated_at": "2026-08-05T03:10:28Z",
   "packs": [
     {
       "artefact_count": 117,

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-771e350a2329d84c1a47378ed09ebeed75e5ada993d722cfc079b3f5befec595  discovery-manifest.json
+4b795a51a6574b400b90053e476daf9aac787dd71aa03ca8be86ad3f2913ea3e  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,6 +1,6 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-08-04T16:08:00Z`
+- Generated: `2026-08-05T03:10:28Z`
 - Scanner: `c24312e116f8`
 - Artefacts: **594**
 - Unassigned: **0**

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-08-04T16:08:00Z`
+- Generated: `2026-08-05T03:10:28Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
   "checksum": "sha256:d766f7f17140ce6b648e68821c9403c0bf478609a1ea925e85501c5994002a05",
-  "generated_at": "2026-08-04T16:08:00Z",
+  "generated_at": "2026-08-05T03:10:28Z",
   "packs": [
     {
       "always_on": false,

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-08-04T16:08:00Z`
+- Generated: `2026-08-05T03:10:28Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
   "checksum": "sha256:d766f7f17140ce6b648e68821c9403c0bf478609a1ea925e85501c5994002a05",
-  "generated_at": "2026-08-04T16:08:00Z",
+  "generated_at": "2026-08-05T03:10:28Z",
   "scanner_version": "c24312e116f8",
   "workspaces": [
     {

package/dist/hooks/dispatch.js

@@ -8170,6 +8170,29 @@ function _pyJsonScalarAscii(value) {
   return _pyJsonScalar(value);
 }
 
+// src/scripts/_lib/scan_scope.ts
+var DeadScopeError = class extends Error {
+  gate;
+  constructor(gate, message) {
+    super(message);
+    this.name = "DeadScopeError";
+    this.gate = gate;
+  }
+};
+function assertScanned(opts) {
+  if (opts.scanned > 0) {
+    return;
+  }
+  if (opts.allowEmpty !== void 0 && opts.allowEmpty.trim() !== "") {
+    return;
+  }
+  const roots = opts.roots.length > 0 ? opts.roots.join(", ") : "(no root declared)";
+  throw new DeadScopeError(
+    opts.gate,
+    `${opts.gate}: scanned 0 ${opts.units} under ${roots} \u2014 the scan scope is dead or the root moved. A gate that read nothing has not passed. Repoint the root (prefer the shared resolver in _lib/agent_src.ts), or declare a justified \`allowEmpty\` reason if an empty corpus is genuinely expected.`
+  );
+}
+
 // src/scripts/lint_hidden_unicode.ts
 var CHECK = "hidden-unicode";
 var _BIDI = /* @__PURE__ */ new Set([
@@ -8585,7 +8608,9 @@ function main(argv = null) {
   const args = parse_args(argv ?? process.argv.slice(2));
   const findings = [];
   const flagged = /* @__PURE__ */ new Set();
+  let corpusFiles = 0;
   for (const sf of iter_corpus()) {
+    corpusFiles += 1;
     const hits = _scan(sf);
     for (const h of hits) {
       findings.push(h);
@@ -8594,6 +8619,21 @@ function main(argv = null) {
       flagged.add(sf.path);
     }
   }
+  try {
+    assertScanned({
+      gate: "lint_hidden_unicode",
+      scanned: corpusFiles,
+      units: "corpus file(s)",
+      roots: DEFAULT_SCAN_ROOTS
+    });
+  } catch (exc) {
+    if (exc instanceof DeadScopeError) {
+      process.stderr.write(`\u274C  ${exc.message}
+`);
+      return 1;
+    }
+    throw exc;
+  }
   const sourceFiles = _eligibleSourceFiles();
   for (const h of _scanSourceControlBytes(sourceFiles)) {
     findings.push(h);
@@ -14983,7 +15023,7 @@ if (isCliEntry3) {
   process.exit(main11(process.argv.slice(2)));
 }
 
-// src/scripts/verify_before_complete_hook.ts
+// src/scripts/before_complete_hook.ts
 import fs19 from "node:fs";
 import path18 from "node:path";
 import { fileURLToPath as fileURLToPath13, pathToFileURL as pathToFileURL9 } from "node:url";
@@ -19005,6 +19045,22 @@ function main27() {
   for (const f of walkDir(scanDir, /\.(html|htm|css|scss|sass|less|vue|svelte|astro|jsx|tsx|md|mdx)$/i)) {
     if (!ignoreGlobs.some((g) => f.includes(g.replace("**", "")))) files.push(f);
   }
+  try {
+    assertScanned({
+      gate: "lint_design_slop",
+      scanned: files.length,
+      units: "design source file(s)",
+      // Absolute: --dir may point outside the cwd (or outside any repo).
+      roots: [scanDir]
+    });
+  } catch (exc) {
+    if (exc instanceof DeadScopeError) {
+      process.stderr.write(`\u274C  ${exc.message}
+`);
+      process.exit(1);
+    }
+    throw exc;
+  }
   const findings = [];
   for (const fp of files) {
     const rel = path37.relative(process.cwd(), fp);
@@ -19461,7 +19517,7 @@ var CONCERN_REGISTRY = {
   "src/scripts/roadmap_progress_hook.ts": main9,
   "src/scripts/onboarding_gate_hook.ts": main10,
   "src/scripts/context_hygiene_hook.ts": main11,
-  "src/scripts/verify_before_complete_hook.ts": main12,
+  "src/scripts/before_complete_hook.ts": main12,
   "src/scripts/minimal_safe_diff_hook.ts": main13,
   "src/scripts/injection_scan_hook.ts": main14,
   "src/scripts/memory_learn_hook.ts": main15,

package/dist/mcp/registry-manifest.json

@@ -3,13 +3,13 @@
     "artefact_count": 594,
     "scanner_version": "c24312e116f8"
   },
-  "generated_at": "2026-08-04",
+  "generated_at": "2026-08-05",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.19.0"
+    "version": "9.21.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "9.19.0"
+      "version": "9.21.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "9.19.0"
+  "version": "9.21.0"
 }

package/dist/mcp/server.mjs

@@ -9362,6 +9362,35 @@ var init_security_lint = __esm({
   }
 });
 
+// src/scripts/_lib/scan_scope.ts
+function assertScanned(opts) {
+  if (opts.scanned > 0) {
+    return;
+  }
+  if (opts.allowEmpty !== void 0 && opts.allowEmpty.trim() !== "") {
+    return;
+  }
+  const roots = opts.roots.length > 0 ? opts.roots.join(", ") : "(no root declared)";
+  throw new DeadScopeError(
+    opts.gate,
+    `${opts.gate}: scanned 0 ${opts.units} under ${roots} \u2014 the scan scope is dead or the root moved. A gate that read nothing has not passed. Repoint the root (prefer the shared resolver in _lib/agent_src.ts), or declare a justified \`allowEmpty\` reason if an empty corpus is genuinely expected.`
+  );
+}
+var DeadScopeError;
+var init_scan_scope = __esm({
+  "src/scripts/_lib/scan_scope.ts"() {
+    "use strict";
+    DeadScopeError = class extends Error {
+      gate;
+      constructor(gate, message) {
+        super(message);
+        this.name = "DeadScopeError";
+        this.gate = gate;
+      }
+    };
+  }
+});
+
 // src/scripts/lint_hidden_unicode.ts
 import * as fs7 from "node:fs";
 import * as path7 from "node:path";
@@ -9549,7 +9578,9 @@ function main(argv = null) {
   const args = parse_args(argv ?? process.argv.slice(2));
   const findings = [];
   const flagged = /* @__PURE__ */ new Set();
+  let corpusFiles = 0;
   for (const sf of iter_corpus()) {
+    corpusFiles += 1;
     const hits = _scan(sf);
     for (const h of hits) {
       findings.push(h);
@@ -9558,6 +9589,21 @@ function main(argv = null) {
       flagged.add(sf.path);
     }
   }
+  try {
+    assertScanned({
+      gate: "lint_hidden_unicode",
+      scanned: corpusFiles,
+      units: "corpus file(s)",
+      roots: DEFAULT_SCAN_ROOTS
+    });
+  } catch (exc) {
+    if (exc instanceof DeadScopeError) {
+      process.stderr.write(`\u274C  ${exc.message}
+`);
+      return 1;
+    }
+    throw exc;
+  }
   const sourceFiles = _eligibleSourceFiles();
   for (const h of _scanSourceControlBytes(sourceFiles)) {
     findings.push(h);
@@ -9608,6 +9654,7 @@ var init_lint_hidden_unicode = __esm({
   "src/scripts/lint_hidden_unicode.ts"() {
     "use strict";
     init_security_lint();
+    init_scan_scope();
     CHECK = "hidden-unicode";
     _BIDI = /* @__PURE__ */ new Set([
       8234,
@@ -14000,35 +14047,6 @@ var init_release_scope = __esm({
   }
 });
 
-// src/scripts/_lib/scan_scope.ts
-function assertScanned(opts) {
-  if (opts.scanned > 0) {
-    return;
-  }
-  if (opts.allowEmpty !== void 0 && opts.allowEmpty.trim() !== "") {
-    return;
-  }
-  const roots = opts.roots.length > 0 ? opts.roots.join(", ") : "(no root declared)";
-  throw new DeadScopeError(
-    opts.gate,
-    `${opts.gate}: scanned 0 ${opts.units} under ${roots} \u2014 the scan scope is dead or the root moved. A gate that read nothing has not passed. Repoint the root (prefer the shared resolver in _lib/agent_src.ts), or declare a justified \`allowEmpty\` reason if an empty corpus is genuinely expected.`
-  );
-}
-var DeadScopeError;
-var init_scan_scope = __esm({
-  "src/scripts/_lib/scan_scope.ts"() {
-    "use strict";
-    DeadScopeError = class extends Error {
-      gate;
-      constructor(gate, message) {
-        super(message);
-        this.name = "DeadScopeError";
-        this.gate = gate;
-      }
-    };
-  }
-});
-
 // src/scripts/skill_linter.ts
 var skill_linter_exports = {};
 __export(skill_linter_exports, {

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@event4u/agent-config",
     "mcpName": "io.github.event4u-app/agent-config",
-    "version": "9.19.0",
+    "version": "9.21.0",
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including \"zero runtime daemon\".",
     "license": "MIT",
     "private": false,

package/src/config/gate-coverage.yml

@@ -72,10 +72,15 @@
 #
 # What remains is NOT one line per gate. For the ~201 the count would have to be
 # INVENTED (what is this gate's unit?) rather than published, and that judgement
-# is per-gate. It is tracked as a vulnerability ratchet — `gate-hardening:
-# unhardened-scan-scope` in src/config/gate-violation-baselines.json, which fails
-# on a RISE and targets 0 — and charter-owned by
-# `agents/roadmaps/road-to-gate-hardening-adoption.md`.
+# is per-gate. It was tracked as a vulnerability ratchet — `gate-hardening:
+# unhardened-scan-scope` in src/config/gate-violation-baselines.json, which
+# failed on a RISE and targeted 0 — under the road-to-gate-hardening-adoption
+# charter. That charter closed 2026-08-05: the count reached 0 and the baseline
+# entry was DELETED rather than zeroed, so `checkRatchet` now returns
+# `unbaselined` with `ok = (actual === 0)`. Zero is mandatory, not a floor — any
+# new gate written without a scope assertion reds immediately, and
+# `tests/scripts/check_gate_coverage.test.ts` pins both the empty population and
+# the entry's continued absence.
 #
 # `tests/scripts/check_gate_coverage.test.ts` fails the build the moment a gate
 # starts emitting the line without being registered here, so the list cannot
@@ -365,6 +370,22 @@ gates:
       stays registered so the guard reports this gate rather than skipping it
       silently.
 
+  - id: check_review_dispositions
+    argv: []
+    min_scanned: 7
+    corpus: "archived round records — `*-review.md` under agents/evidence/reviews/, excluding live `*.findings.md` (9 at baseline)"
+    status: enforced
+    note: >
+      Contract § 2.7. Unlike the R2 entry above, this floor is genuinely
+      trippable: the corpus is 9 frozen records and archived records are not
+      deleted, so a drop to 7 means the reviews root moved or the naming
+      convention drifted — not that the work went clean. That is precisely the
+      case rule 3 exists for. The gate reads the FROZEN records because R2
+      selects only artefacts in the CURRENT review scope, so a superseded round
+      renamed out of the `*.findings.md` glob is read by nothing at all — two
+      findings sat recorded as `open` in this repo's own corpus for a day
+      through exactly that gap.
+
   # ---------------------------------------------------------------------------
   # The five below close the gap this header named: they already called
   # `_lib/scan_scope.assertScanned` with a real count and only had to PRINT it.
@@ -425,3 +446,16 @@ gates:
     note: >
       Emits on stderr, not stdout: `--format json` owns this gate's stdout and a
       count written there would corrupt the payload. The guard reads both streams.
+
+  - id: check_cli_registry_budget_sync
+    argv: []
+    min_scanned: 3
+    corpus: "the three named inputs it cross-checks — src/cli/registry.ts, src/config/evaluator-budgets.json, internal/bench/reports/evaluator-measurements.json"
+    status: enforced
+    note: >
+      Registered because its count became REAL, not to pad the manifest. The
+      gate always printed a hardcoded `scanned: 3`; hardening derived it from
+      the watch list that actually resolved, which is what makes a floor of 3
+      meaningful — it now falls when one of the three inputs is renamed away.
+      `argv: []` is the CI-identical invocation: both `taskfiles/ci-fast.yml`
+      and `.github/workflows/tests.yml` call it bare.

package/src/config/gate-violation-baselines.json

@@ -1,15 +1,10 @@
 {
   "$comment": "Violation ratchet for gates whose dead scan root was repaired. A repair REVEALS pre-existing debt; it does not create it. Each entry records the count revealed at repair time — the gate fails only when its count RISES. Lowering a count is a normal commit; raising one is a defect. Entries expire: a baseline that has not dropped within 56 days of `landed` (or of `reaffirmed.date`) fails its gate, because a number that never moves is suppression with extra steps. Mechanism + rationale: src/scripts/_lib/gate_baseline.ts. Decision: AI council 2026-08-02, roadmap road-to-gates-that-can-fail blocker `dead-gate-finding-triage`.",
   "gates": {
-    "gate-hardening:unhardened-scan-scope": {
-      "count": 189,
-      "landed": "2026-08-04",
-      "note": "Gate scripts under src/scripts (population 223, the lint_/check_/audit_ prefix set) that neither route through _lib/scan_scope nor emit the machine-readable 'scanned:' line — the gates that can still report success over a moved or empty root without saying so. This is a VULNERABILITY count, not a coverage percentage: it measures how much of the original defect class is still reachable, it RISES whenever a new gate is written without a scope assertion, and its target is 0. That direction is the whole point — an adoption-reach metric ('hardened gates must increase') can never regress and would be threshold-lowering wearing a ratchet's clothes (AI council 2026-08-04, anthropic/claude-sonnet-4-5 + openai/gpt-4o, convergent on scope decomposition plus this discriminator). Clearing it is the charter of road-to-gate-hardening-adoption; the 56-day non-stagnation clause applies unchanged, so a number that never drops fails this gate rather than hardening into configuration. NEW ENTRY, not a raised threshold: this records newly-measured pre-existing exposure at first measurement — nothing was loosened."
-    },
     "check_no_new_legacy_path:hardcoded-scan-roots": {
-      "count": 51,
-      "landed": "2026-08-02",
-      "note": "Lines under src/scripts/**/*.{ts,mts,mjs} that pass the retired `.agent-src.uncondensed` directory into `path.join(...)` — a filesystem path CONSTRUCTED against the tree ADR-051 abandoned, which is the exact shape of all 14 dead gates. Deliberately narrow so the number is signal, not noise: 236 raw mentions under src/scripts → 147 string-literal lines → 67 path-constructing lines when the pass was written, after exempting src/scripts/_lib/agent_src.ts (the shared resolver, whose job IS owning the constant — gates that route through it survived the move). Detectors holding the literal as data to match, strip, or print are not counted, and no prose, docs, tests or fixtures are read: that full-tree shape was measured at 44 files / 213 hits and rejected as the wrong lint (see the note in check_no_new_legacy_path.ts::find_offenders). Recorded at 58 rather than 67 because Phase 1's scan-root repairs were landing on this branch while the pass was being written and had already removed 9 — a baseline above the truth silently permits new violations. This count goes to ZERO as the remaining repairs land; every repair is a lowering commit. Lowered 56→51 by the road-to-renewal-foundation Phase 1 dead-root sweep (check_always_budget, check_portability, check_references, lint_framework_leakage, lint_agents_md)."
+      "count": 49,
+      "landed": "2026-08-04",
+      "note": "Lines under src/scripts/**/*.{ts,mts,mjs} that pass the retired `.agent-src.uncondensed` directory into `path.join(...)` — a filesystem path CONSTRUCTED against the tree ADR-051 abandoned, which is the exact shape of all 14 dead gates. Deliberately narrow so the number is signal, not noise: 236 raw mentions under src/scripts → 147 string-literal lines → 67 path-constructing lines when the pass was written, after exempting src/scripts/_lib/agent_src.ts (the shared resolver, whose job IS owning the constant — gates that route through it survived the move). Detectors holding the literal as data to match, strip, or print are not counted, and no prose, docs, tests or fixtures are read: that full-tree shape was measured at 44 files / 213 hits and rejected as the wrong lint (see the note in check_no_new_legacy_path.ts::find_offenders). Recorded at 58 rather than 67 because Phase 1's scan-root repairs were landing on this branch while the pass was being written and had already removed 9 — a baseline above the truth silently permits new violations. This count goes to ZERO as the remaining repairs land; every repair is a lowering commit. Lowered 56→51 by the road-to-renewal-foundation Phase 1 dead-root sweep (check_always_budget, check_portability, check_references, lint_framework_leakage, lint_agents_md). Lowered 51→49 by the gate-hardening adoption PR: skill_collision_clusters and skill_overlap were repointed at the live skills tree via the shared resolver — two gates that had been reading the retired container and scoring 0 of 288 skills."
     },
     "audit_user_type_axis": {
       "count": 1,