@event4u/agent-config 9.20.0 → 9.21.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.20.0",
+    "version": "9.21.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -294,6 +294,57 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 9.19.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [9.21.0](https://github.com/event4u-app/agent-config/compare/9.20.0...9.21.0) (2026-08-05)
+
+### Release highlights
+
+<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
+- **Behaviour changes:** _none_
+- **Default changes + migration:** _none_
+- **Security and correctness:** _none_
+- **Honest nulls:** _none_
+- **Known limitations:** _none_
+
+### Features
+
+* **gates:** take the unhardened-gate count to 0 and delete the ratchet entry ([e31690c](https://github.com/event4u-app/agent-config/commit/e31690c7330bb90ed813cc25ead2268da2971ea1))
+* **gates:** repoint lint_skill_tools at the .ts corpus and harden it ([694a729](https://github.com/event4u-app/agent-config/commit/694a729359e674953881a996af6079123e91a98d))
+* **gates:** fold bite-sized granularity into lint_roadmap_complexity ([08d9075](https://github.com/event4u-app/agent-config/commit/08d9075c978a6a76a250a74fe6377ad3b2c2d8a2))
+* **gates:** assert the scan scope of the last 57 gates — 61 → 4 ([5244b21](https://github.com/event4u-app/agent-config/commit/5244b21ea664db73a3a07c8ce717a2b43c4ba157))
+* **gates:** assert the scan scope of 54 more gates — 115 → 61 ([835fd54](https://github.com/event4u-app/agent-config/commit/835fd545649287574c9d74e3280302ca429b8d20))
+* **gates:** assert the scan scope of 48 tree-walking gates ([9cc51a2](https://github.com/event4u-app/agent-config/commit/9cc51a20c8d3d3c9f133d0bb8a94a322b90ee235))
+* **gates:** assert the scan scope of 28 more corpus gates ([f4e79e4](https://github.com/event4u-app/agent-config/commit/f4e79e4a8f7c90e27353693f42d27c1a70bbdac4))
+* **gates:** classify the corpusless gates by what they read ([c7a851b](https://github.com/event4u-app/agent-config/commit/c7a851becd7a77ff85c7c443c59ca45b91bc7ef3))
+* **gates:** assert the scan scope of five corpus gates ([7433f72](https://github.com/event4u-app/agent-config/commit/7433f72482c639bf88d01e58e093d7c57a608960))
+* **gates:** derive the conversion work-list instead of reading 189 gates ([b845e4d](https://github.com/event4u-app/agent-config/commit/b845e4df66e90b1d43a42f9fa55bb41457b4a1b5))
+* **scan-scope:** pair the scope assertion with the published count ([b8b2840](https://github.com/event4u-app/agent-config/commit/b8b2840d17466f0be5047fbaa98ed67751a93a70))
+
+### Bug Fixes
+
+* **gates:** read piped stdin whole — a gate that only broke on big diffs ([0e3e9cd](https://github.com/event4u-app/agent-config/commit/0e3e9cd4ca91c01c00d8c611a96db72b936952d8))
+* **gates:** clear the two preflight blockers the repairs introduced ([2683395](https://github.com/event4u-app/agent-config/commit/268339595ca2dd34b14a1a63abd6362fde7868fb))
+* **gates:** repair two dead scan roots the widened population revealed ([5b41c55](https://github.com/event4u-app/agent-config/commit/5b41c556bc245c4eb9da7506b4de449a3cde07b0))
+* **gates:** one definition of "a gate", and an honest denominator ([9f65efe](https://github.com/event4u-app/agent-config/commit/9f65efea7882d4c79f2e5f4c8fcefb0b521bcdde))
+* **gate-coverage:** an unenforced `scanned:` line hardens nothing ([2873c91](https://github.com/event4u-app/agent-config/commit/2873c919d0245ca76a18f2315c768b9a9cb1e1ca))
+
+### Documentation
+
+* **roadmap:** close and archive road-to-gate-hardening-adoption ([d1497c5](https://github.com/event4u-app/agent-config/commit/d1497c5fc12f5475b683f27b42953cf2f448def8))
+* **roadmap:** file the four-gate blocker where the dashboard reads it ([7e0c8e9](https://github.com/event4u-app/agent-config/commit/7e0c8e9e369c29a7574c99f1ec453835e1ae44e9))
+* **roadmap:** close Phase 1 — the mechanically-safe conversions ([877859a](https://github.com/event4u-app/agent-config/commit/877859ac99e70a79630b201a025a474df156fe55))
+* **roadmap:** record the assert-first conversion contract ([613d478](https://github.com/event4u-app/agent-config/commit/613d47878252edfe8c5d225d73c1bed3fe6fb753))
+
+### Refactoring
+
+* **gates:** re-home the ADR-095 workspace boundary to ESLint ([2bc2483](https://github.com/event4u-app/agent-config/commit/2bc24833149cff33573a84c9dfbc973b5b3b5fe3))
+* **hooks:** rename verify_before_complete_hook off the gate prefix ([f57d969](https://github.com/event4u-app/agent-config/commit/f57d969c6c54e591060054f217a12d816d121116))
+
+### Chores
+
+* **tests:** drop a dead helper the lint scope only now reaches ([9b49d24](https://github.com/event4u-app/agent-config/commit/9b49d240140c9b6af28969c752f4757bf5580d98))
+
+Tests: 11034 (+39 since 9.20.0)
+
 ## [9.20.0](https://github.com/event4u-app/agent-config/compare/9.19.0...9.20.0) (2026-08-04)
 
 ### Release highlights

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "9.20.0"
+agent_config_version: "9.21.0"
 
 # --- Project identity ---
 project:

package/dist/cli-delegate/{chunk-XGA2NTU4.js → chunk-3EWYC3YK.js}

@@ -457,6 +457,29 @@ function _pyJsonScalarAscii(value) {
   return _pyJsonScalar(value);
 }
 
+// src/scripts/_lib/scan_scope.ts
+var DeadScopeError = class extends Error {
+  gate;
+  constructor(gate, message) {
+    super(message);
+    this.name = "DeadScopeError";
+    this.gate = gate;
+  }
+};
+function assertScanned(opts) {
+  if (opts.scanned > 0) {
+    return;
+  }
+  if (opts.allowEmpty !== void 0 && opts.allowEmpty.trim() !== "") {
+    return;
+  }
+  const roots = opts.roots.length > 0 ? opts.roots.join(", ") : "(no root declared)";
+  throw new DeadScopeError(
+    opts.gate,
+    `${opts.gate}: scanned 0 ${opts.units} under ${roots} \u2014 the scan scope is dead or the root moved. A gate that read nothing has not passed. Repoint the root (prefer the shared resolver in _lib/agent_src.ts), or declare a justified \`allowEmpty\` reason if an empty corpus is genuinely expected.`
+  );
+}
+
 // src/scripts/lint_hidden_unicode.ts
 var CHECK = "hidden-unicode";
 var _BIDI = /* @__PURE__ */ new Set([
@@ -872,7 +895,9 @@ function main(argv = null) {
   const args = parse_args(argv ?? process.argv.slice(2));
   const findings = [];
   const flagged = /* @__PURE__ */ new Set();
+  let corpusFiles = 0;
   for (const sf of iter_corpus()) {
+    corpusFiles += 1;
     const hits = _scan(sf);
     for (const h of hits) {
       findings.push(h);
@@ -881,6 +906,21 @@ function main(argv = null) {
       flagged.add(sf.path);
     }
   }
+  try {
+    assertScanned({
+      gate: "lint_hidden_unicode",
+      scanned: corpusFiles,
+      units: "corpus file(s)",
+      roots: DEFAULT_SCAN_ROOTS
+    });
+  } catch (exc) {
+    if (exc instanceof DeadScopeError) {
+      process.stderr.write(`\u274C  ${exc.message}
+`);
+      return 1;
+    }
+    throw exc;
+  }
   const sourceFiles = _eligibleSourceFiles();
   for (const h of _scanSourceControlBytes(sourceFiles)) {
     findings.push(h);

package/dist/cli-delegate/cmd_handoff.js

@@ -6,7 +6,7 @@ import {
   readHookStdin,
   read_entries
 } from "./chunk-AIIUU73N.js";
-import "./chunk-XGA2NTU4.js";
+import "./chunk-3EWYC3YK.js";
 import {
   _RAW_KEY_PREFIXES,
   hardenedSpawnEnv

package/dist/cli-delegate/cmd_memory_get.js

@@ -2,7 +2,7 @@
 import { createRequire as __acCreateRequire } from 'node:module'; const require = globalThis.require ?? __acCreateRequire(import.meta.url);
 import {
   memory_get_v1
-} from "./chunk-XGA2NTU4.js";
+} from "./chunk-3EWYC3YK.js";
 import "./chunk-OY53J6II.js";
 import "./chunk-J55WI3RR.js";
 

package/dist/cli-delegate/cmd_route_audit.js

@@ -6,7 +6,7 @@ import {
 import {
   read_entries
 } from "./chunk-AIIUU73N.js";
-import "./chunk-XGA2NTU4.js";
+import "./chunk-3EWYC3YK.js";
 import {
   load_agent_settings
 } from "./chunk-HJ6DAJHR.js";

package/dist/discovery/deprecation-report.md

@@ -1,6 +1,6 @@
 # Discovery — Deprecation Report
 
-- Generated: `2026-08-04T21:41:44Z`
+- Generated: `2026-08-05T03:10:28Z`
 - Deprecated artefacts: **0**
 
 _None. Tree is clean._

package/dist/discovery/discovery-manifest.json

@@ -14402,7 +14402,7 @@
       "reason": "scaffold template for ticket-bundle tickets (ADR-101); carries no runtime frontmatter — emit-tickets fills it in per ticket"
     }
   ],
-  "generated_at": "2026-08-04T21:41:44Z",
+  "generated_at": "2026-08-05T03:10:28Z",
   "packs": [
     {
       "artefact_count": 117,

package/dist/discovery/discovery-manifest.json.sha256

@@ -1 +1 @@
-759c2227292efbd65092bc4a57aa783cb714db0e6d93a1a53f6f35ba940d32aa  discovery-manifest.json
+4b795a51a6574b400b90053e476daf9aac787dd71aa03ca8be86ad3f2913ea3e  discovery-manifest.json

package/dist/discovery/discovery-manifest.summary.md

@@ -1,6 +1,6 @@
 # Discovery Manifest — Summary
 
-- Generated: `2026-08-04T21:41:44Z`
+- Generated: `2026-08-05T03:10:28Z`
 - Scanner: `c24312e116f8`
 - Artefacts: **594**
 - Unassigned: **0**

package/dist/discovery/orphan-report.md

@@ -1,6 +1,6 @@
 # Discovery — Orphan Report
 
-- Generated: `2026-08-04T21:41:44Z`
+- Generated: `2026-08-05T03:10:28Z`
 - Orphan artefacts: **0**
 
 > An orphan is an artefact whose declared pack has no other members.

package/dist/discovery/packs.json

@@ -1,6 +1,6 @@
 {
   "checksum": "sha256:d766f7f17140ce6b648e68821c9403c0bf478609a1ea925e85501c5994002a05",
-  "generated_at": "2026-08-04T21:41:44Z",
+  "generated_at": "2026-08-05T03:10:28Z",
   "packs": [
     {
       "always_on": false,

package/dist/discovery/trust-report.md

@@ -1,6 +1,6 @@
 # Discovery — Trust Report
 
-- Generated: `2026-08-04T21:41:44Z`
+- Generated: `2026-08-05T03:10:28Z`
 - Workspaces tracked: **10**
 - Human-review-required artefacts: **3**
 

package/dist/discovery/workspaces.json

@@ -1,6 +1,6 @@
 {
   "checksum": "sha256:d766f7f17140ce6b648e68821c9403c0bf478609a1ea925e85501c5994002a05",
-  "generated_at": "2026-08-04T21:41:44Z",
+  "generated_at": "2026-08-05T03:10:28Z",
   "scanner_version": "c24312e116f8",
   "workspaces": [
     {

package/dist/hooks/dispatch.js

@@ -8170,6 +8170,29 @@ function _pyJsonScalarAscii(value) {
   return _pyJsonScalar(value);
 }
 
+// src/scripts/_lib/scan_scope.ts
+var DeadScopeError = class extends Error {
+  gate;
+  constructor(gate, message) {
+    super(message);
+    this.name = "DeadScopeError";
+    this.gate = gate;
+  }
+};
+function assertScanned(opts) {
+  if (opts.scanned > 0) {
+    return;
+  }
+  if (opts.allowEmpty !== void 0 && opts.allowEmpty.trim() !== "") {
+    return;
+  }
+  const roots = opts.roots.length > 0 ? opts.roots.join(", ") : "(no root declared)";
+  throw new DeadScopeError(
+    opts.gate,
+    `${opts.gate}: scanned 0 ${opts.units} under ${roots} \u2014 the scan scope is dead or the root moved. A gate that read nothing has not passed. Repoint the root (prefer the shared resolver in _lib/agent_src.ts), or declare a justified \`allowEmpty\` reason if an empty corpus is genuinely expected.`
+  );
+}
+
 // src/scripts/lint_hidden_unicode.ts
 var CHECK = "hidden-unicode";
 var _BIDI = /* @__PURE__ */ new Set([
@@ -8585,7 +8608,9 @@ function main(argv = null) {
   const args = parse_args(argv ?? process.argv.slice(2));
   const findings = [];
   const flagged = /* @__PURE__ */ new Set();
+  let corpusFiles = 0;
   for (const sf of iter_corpus()) {
+    corpusFiles += 1;
     const hits = _scan(sf);
     for (const h of hits) {
       findings.push(h);
@@ -8594,6 +8619,21 @@ function main(argv = null) {
       flagged.add(sf.path);
     }
   }
+  try {
+    assertScanned({
+      gate: "lint_hidden_unicode",
+      scanned: corpusFiles,
+      units: "corpus file(s)",
+      roots: DEFAULT_SCAN_ROOTS
+    });
+  } catch (exc) {
+    if (exc instanceof DeadScopeError) {
+      process.stderr.write(`\u274C  ${exc.message}
+`);
+      return 1;
+    }
+    throw exc;
+  }
   const sourceFiles = _eligibleSourceFiles();
   for (const h of _scanSourceControlBytes(sourceFiles)) {
     findings.push(h);
@@ -14983,7 +15023,7 @@ if (isCliEntry3) {
   process.exit(main11(process.argv.slice(2)));
 }
 
-// src/scripts/verify_before_complete_hook.ts
+// src/scripts/before_complete_hook.ts
 import fs19 from "node:fs";
 import path18 from "node:path";
 import { fileURLToPath as fileURLToPath13, pathToFileURL as pathToFileURL9 } from "node:url";
@@ -19005,6 +19045,22 @@ function main27() {
   for (const f of walkDir(scanDir, /\.(html|htm|css|scss|sass|less|vue|svelte|astro|jsx|tsx|md|mdx)$/i)) {
     if (!ignoreGlobs.some((g) => f.includes(g.replace("**", "")))) files.push(f);
   }
+  try {
+    assertScanned({
+      gate: "lint_design_slop",
+      scanned: files.length,
+      units: "design source file(s)",
+      // Absolute: --dir may point outside the cwd (or outside any repo).
+      roots: [scanDir]
+    });
+  } catch (exc) {
+    if (exc instanceof DeadScopeError) {
+      process.stderr.write(`\u274C  ${exc.message}
+`);
+      process.exit(1);
+    }
+    throw exc;
+  }
   const findings = [];
   for (const fp of files) {
     const rel = path37.relative(process.cwd(), fp);
@@ -19461,7 +19517,7 @@ var CONCERN_REGISTRY = {
   "src/scripts/roadmap_progress_hook.ts": main9,
   "src/scripts/onboarding_gate_hook.ts": main10,
   "src/scripts/context_hygiene_hook.ts": main11,
-  "src/scripts/verify_before_complete_hook.ts": main12,
+  "src/scripts/before_complete_hook.ts": main12,
   "src/scripts/minimal_safe_diff_hook.ts": main13,
   "src/scripts/injection_scan_hook.ts": main14,
   "src/scripts/memory_learn_hook.ts": main15,

package/dist/mcp/registry-manifest.json

@@ -3,13 +3,13 @@
     "artefact_count": 594,
     "scanner_version": "c24312e116f8"
   },
-  "generated_at": "2026-08-04",
+  "generated_at": "2026-08-05",
   "package": {
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) \u2014 every claim machine-checked, including \"zero runtime daemon\".",
     "homepage": "https://event4u-app.github.io/agent-config",
     "name": "@event4u/agent-config",
     "repository": "https://github.com/event4u-app/agent-config",
-    "version": "9.20.0"
+    "version": "9.21.0"
   },
   "registries": [
     {

package/dist/mcp/server.json

@@ -9,12 +9,12 @@
       "transport": {
         "type": "stdio"
       },
-      "version": "9.20.0"
+      "version": "9.21.0"
     }
   ],
   "repository": {
     "source": "github",
     "url": "https://github.com/event4u-app/agent-config"
   },
-  "version": "9.20.0"
+  "version": "9.21.0"
 }

package/dist/mcp/server.mjs

@@ -9362,6 +9362,35 @@ var init_security_lint = __esm({
   }
 });
 
+// src/scripts/_lib/scan_scope.ts
+function assertScanned(opts) {
+  if (opts.scanned > 0) {
+    return;
+  }
+  if (opts.allowEmpty !== void 0 && opts.allowEmpty.trim() !== "") {
+    return;
+  }
+  const roots = opts.roots.length > 0 ? opts.roots.join(", ") : "(no root declared)";
+  throw new DeadScopeError(
+    opts.gate,
+    `${opts.gate}: scanned 0 ${opts.units} under ${roots} \u2014 the scan scope is dead or the root moved. A gate that read nothing has not passed. Repoint the root (prefer the shared resolver in _lib/agent_src.ts), or declare a justified \`allowEmpty\` reason if an empty corpus is genuinely expected.`
+  );
+}
+var DeadScopeError;
+var init_scan_scope = __esm({
+  "src/scripts/_lib/scan_scope.ts"() {
+    "use strict";
+    DeadScopeError = class extends Error {
+      gate;
+      constructor(gate, message) {
+        super(message);
+        this.name = "DeadScopeError";
+        this.gate = gate;
+      }
+    };
+  }
+});
+
 // src/scripts/lint_hidden_unicode.ts
 import * as fs7 from "node:fs";
 import * as path7 from "node:path";
@@ -9549,7 +9578,9 @@ function main(argv = null) {
   const args = parse_args(argv ?? process.argv.slice(2));
   const findings = [];
   const flagged = /* @__PURE__ */ new Set();
+  let corpusFiles = 0;
   for (const sf of iter_corpus()) {
+    corpusFiles += 1;
     const hits = _scan(sf);
     for (const h of hits) {
       findings.push(h);
@@ -9558,6 +9589,21 @@ function main(argv = null) {
       flagged.add(sf.path);
     }
   }
+  try {
+    assertScanned({
+      gate: "lint_hidden_unicode",
+      scanned: corpusFiles,
+      units: "corpus file(s)",
+      roots: DEFAULT_SCAN_ROOTS
+    });
+  } catch (exc) {
+    if (exc instanceof DeadScopeError) {
+      process.stderr.write(`\u274C  ${exc.message}
+`);
+      return 1;
+    }
+    throw exc;
+  }
   const sourceFiles = _eligibleSourceFiles();
   for (const h of _scanSourceControlBytes(sourceFiles)) {
     findings.push(h);
@@ -9608,6 +9654,7 @@ var init_lint_hidden_unicode = __esm({
   "src/scripts/lint_hidden_unicode.ts"() {
     "use strict";
     init_security_lint();
+    init_scan_scope();
     CHECK = "hidden-unicode";
     _BIDI = /* @__PURE__ */ new Set([
       8234,
@@ -14000,35 +14047,6 @@ var init_release_scope = __esm({
   }
 });
 
-// src/scripts/_lib/scan_scope.ts
-function assertScanned(opts) {
-  if (opts.scanned > 0) {
-    return;
-  }
-  if (opts.allowEmpty !== void 0 && opts.allowEmpty.trim() !== "") {
-    return;
-  }
-  const roots = opts.roots.length > 0 ? opts.roots.join(", ") : "(no root declared)";
-  throw new DeadScopeError(
-    opts.gate,
-    `${opts.gate}: scanned 0 ${opts.units} under ${roots} \u2014 the scan scope is dead or the root moved. A gate that read nothing has not passed. Repoint the root (prefer the shared resolver in _lib/agent_src.ts), or declare a justified \`allowEmpty\` reason if an empty corpus is genuinely expected.`
-  );
-}
-var DeadScopeError;
-var init_scan_scope = __esm({
-  "src/scripts/_lib/scan_scope.ts"() {
-    "use strict";
-    DeadScopeError = class extends Error {
-      gate;
-      constructor(gate, message) {
-        super(message);
-        this.name = "DeadScopeError";
-        this.gate = gate;
-      }
-    };
-  }
-});
-
 // src/scripts/skill_linter.ts
 var skill_linter_exports = {};
 __export(skill_linter_exports, {

package/package.json

@@ -1,7 +1,7 @@
 {
     "name": "@event4u/agent-config",
     "mcpName": "io.github.event4u-app/agent-config",
-    "version": "9.20.0",
+    "version": "9.21.0",
     "description": "Governed skills, rules and commands for AI coding tools (Claude Code, Cursor, Windsurf, Copilot) — every claim machine-checked, including \"zero runtime daemon\".",
     "license": "MIT",
     "private": false,

package/src/config/gate-coverage.yml

@@ -72,10 +72,15 @@
 #
 # What remains is NOT one line per gate. For the ~201 the count would have to be
 # INVENTED (what is this gate's unit?) rather than published, and that judgement
-# is per-gate. It is tracked as a vulnerability ratchet — `gate-hardening:
-# unhardened-scan-scope` in src/config/gate-violation-baselines.json, which fails
-# on a RISE and targets 0 — and charter-owned by
-# `agents/roadmaps/road-to-gate-hardening-adoption.md`.
+# is per-gate. It was tracked as a vulnerability ratchet — `gate-hardening:
+# unhardened-scan-scope` in src/config/gate-violation-baselines.json, which
+# failed on a RISE and targeted 0 — under the road-to-gate-hardening-adoption
+# charter. That charter closed 2026-08-05: the count reached 0 and the baseline
+# entry was DELETED rather than zeroed, so `checkRatchet` now returns
+# `unbaselined` with `ok = (actual === 0)`. Zero is mandatory, not a floor — any
+# new gate written without a scope assertion reds immediately, and
+# `tests/scripts/check_gate_coverage.test.ts` pins both the empty population and
+# the entry's continued absence.
 #
 # `tests/scripts/check_gate_coverage.test.ts` fails the build the moment a gate
 # starts emitting the line without being registered here, so the list cannot
@@ -441,3 +446,16 @@ gates:
     note: >
       Emits on stderr, not stdout: `--format json` owns this gate's stdout and a
       count written there would corrupt the payload. The guard reads both streams.
+
+  - id: check_cli_registry_budget_sync
+    argv: []
+    min_scanned: 3
+    corpus: "the three named inputs it cross-checks — src/cli/registry.ts, src/config/evaluator-budgets.json, internal/bench/reports/evaluator-measurements.json"
+    status: enforced
+    note: >
+      Registered because its count became REAL, not to pad the manifest. The
+      gate always printed a hardcoded `scanned: 3`; hardening derived it from
+      the watch list that actually resolved, which is what makes a floor of 3
+      meaningful — it now falls when one of the three inputs is renamed away.
+      `argv: []` is the CI-identical invocation: both `taskfiles/ci-fast.yml`
+      and `.github/workflows/tests.yml` call it bare.

package/src/config/gate-violation-baselines.json

@@ -1,15 +1,10 @@
 {
   "$comment": "Violation ratchet for gates whose dead scan root was repaired. A repair REVEALS pre-existing debt; it does not create it. Each entry records the count revealed at repair time — the gate fails only when its count RISES. Lowering a count is a normal commit; raising one is a defect. Entries expire: a baseline that has not dropped within 56 days of `landed` (or of `reaffirmed.date`) fails its gate, because a number that never moves is suppression with extra steps. Mechanism + rationale: src/scripts/_lib/gate_baseline.ts. Decision: AI council 2026-08-02, roadmap road-to-gates-that-can-fail blocker `dead-gate-finding-triage`.",
   "gates": {
-    "gate-hardening:unhardened-scan-scope": {
-      "count": 189,
-      "landed": "2026-08-04",
-      "note": "Gate scripts under src/scripts (population 223, the lint_/check_/audit_ prefix set) that neither route through _lib/scan_scope nor emit the machine-readable 'scanned:' line — the gates that can still report success over a moved or empty root without saying so. This is a VULNERABILITY count, not a coverage percentage: it measures how much of the original defect class is still reachable, it RISES whenever a new gate is written without a scope assertion, and its target is 0. That direction is the whole point — an adoption-reach metric ('hardened gates must increase') can never regress and would be threshold-lowering wearing a ratchet's clothes (AI council 2026-08-04, anthropic/claude-sonnet-4-5 + openai/gpt-4o, convergent on scope decomposition plus this discriminator). Clearing it is the charter of road-to-gate-hardening-adoption; the 56-day non-stagnation clause applies unchanged, so a number that never drops fails this gate rather than hardening into configuration. NEW ENTRY, not a raised threshold: this records newly-measured pre-existing exposure at first measurement — nothing was loosened."
-    },
     "check_no_new_legacy_path:hardcoded-scan-roots": {
-      "count": 51,
-      "landed": "2026-08-02",
-      "note": "Lines under src/scripts/**/*.{ts,mts,mjs} that pass the retired `.agent-src.uncondensed` directory into `path.join(...)` — a filesystem path CONSTRUCTED against the tree ADR-051 abandoned, which is the exact shape of all 14 dead gates. Deliberately narrow so the number is signal, not noise: 236 raw mentions under src/scripts → 147 string-literal lines → 67 path-constructing lines when the pass was written, after exempting src/scripts/_lib/agent_src.ts (the shared resolver, whose job IS owning the constant — gates that route through it survived the move). Detectors holding the literal as data to match, strip, or print are not counted, and no prose, docs, tests or fixtures are read: that full-tree shape was measured at 44 files / 213 hits and rejected as the wrong lint (see the note in check_no_new_legacy_path.ts::find_offenders). Recorded at 58 rather than 67 because Phase 1's scan-root repairs were landing on this branch while the pass was being written and had already removed 9 — a baseline above the truth silently permits new violations. This count goes to ZERO as the remaining repairs land; every repair is a lowering commit. Lowered 56→51 by the road-to-renewal-foundation Phase 1 dead-root sweep (check_always_budget, check_portability, check_references, lint_framework_leakage, lint_agents_md)."
+      "count": 49,
+      "landed": "2026-08-04",
+      "note": "Lines under src/scripts/**/*.{ts,mts,mjs} that pass the retired `.agent-src.uncondensed` directory into `path.join(...)` — a filesystem path CONSTRUCTED against the tree ADR-051 abandoned, which is the exact shape of all 14 dead gates. Deliberately narrow so the number is signal, not noise: 236 raw mentions under src/scripts → 147 string-literal lines → 67 path-constructing lines when the pass was written, after exempting src/scripts/_lib/agent_src.ts (the shared resolver, whose job IS owning the constant — gates that route through it survived the move). Detectors holding the literal as data to match, strip, or print are not counted, and no prose, docs, tests or fixtures are read: that full-tree shape was measured at 44 files / 213 hits and rejected as the wrong lint (see the note in check_no_new_legacy_path.ts::find_offenders). Recorded at 58 rather than 67 because Phase 1's scan-root repairs were landing on this branch while the pass was being written and had already removed 9 — a baseline above the truth silently permits new violations. This count goes to ZERO as the remaining repairs land; every repair is a lowering commit. Lowered 56→51 by the road-to-renewal-foundation Phase 1 dead-root sweep (check_always_budget, check_portability, check_references, lint_framework_leakage, lint_agents_md). Lowered 51→49 by the gate-hardening adoption PR: skill_collision_clusters and skill_overlap were repointed at the live skills tree via the shared resolver — two gates that had been reading the retired container and scoring 0 of 288 skills."
     },
     "audit_user_type_axis": {
       "count": 1,

package/src/scripts/_lib/gate_population.ts

@@ -0,0 +1,70 @@
+/**
+ * "What is a gate?" — asserted once, read by everything that needs the answer.
+ *
+ * Three call sites each carried their own regex and each got a different number
+ * (measured 2026-08-04):
+ *
+ * | Site | Pattern | Population |
+ * |---|---|---:|
+ * | `check_gate_coverage` (the ratchet) | `(lint\|check\|audit)_` minus `.d.ts` | 223 |
+ * | `sweep_dead_scan_roots` | `(lint\|audit\|check\|verify)_` | 225 |
+ * | the manifest-registration test | `(lint\|check\|audit\|skill)_` | 232 |
+ *
+ * Harmless while the numbers were only reported. Load-bearing the moment the
+ * ratchet read one of them, which it now does — and it read the narrowest:
+ *
+ * - it counted `check_secret_leak.test.ts`, a **test file**, which can never be
+ *   hardened, so its target of 0 was unreachable by construction;
+ * - it missed 10 real gates the other two definitions caught — 8 × `skill_*`
+ *   (including `skill_linter`, which already carries an enforced floor of 380 in
+ *   the coverage manifest, so the manifest and the ratchet openly disagreed
+ *   about whether it is a gate) and 2 × `verify_*`.
+ *
+ * ## Why a prefix filter and not manifest membership
+ *
+ * AI council 2026-08-04 (anthropic/claude-sonnet-4-5 + openai/gpt-4o, 3 rounds):
+ * making manifest registration the classifier inverts a dependency that runs the
+ * other way in practice. A new gate script lands BEFORE anyone registers it —
+ * that is precisely how the registration test found the drift — so a
+ * manifest-driven population would ignore every gate during the window when it
+ * is least proven. Classification is structural (this filter); registration is
+ * operational and layered on top (`enforced_manifest_ids`).
+ *
+ * The prefix set is a proxy for "this script certifies something and can lie
+ * about it", and an imperfect one: `skill_usage_report` reports rather than
+ * validates. It is kept because it is mechanical and over-inclusive in the safe
+ * direction — a reporting script that asserts its scan scope loses nothing,
+ * while a validator missing from the population is invisible exposure.
+ */
+
+/** Prefixes that mark a script as gate-shaped. */
+const GATE_PREFIX = /^(lint|check|audit|skill|verify)_/;
+
+/**
+ * Is this filename a gate script?
+ *
+ * Structural only — takes a bare filename, never touches disk, so it answers
+ * for a file that does not exist yet (a diff, a plan, a test fixture).
+ */
+export function matchesGatePattern(filename: string): boolean {
+    if (!filename.endsWith('.ts')) return false;
+    // A type declaration has no runtime behaviour to harden; a test file cannot
+    // be hardened at all, and counting one made the ratchet's own target
+    // unreachable.
+    if (filename.endsWith('.d.ts') || filename.endsWith('.test.ts')) return false;
+    return GATE_PREFIX.test(filename);
+}
+
+/** The gate scripts in `dir`, as bare ids (no `.ts`), sorted. Missing dir → `[]`. */
+export function listGateScripts(dir: string, readdir: (d: string) => string[]): string[] {
+    let entries: string[];
+    try {
+        entries = readdir(dir);
+    } catch {
+        return [];
+    }
+    return entries
+        .filter(matchesGatePattern)
+        .map((f) => f.replace(/\.ts$/, ''))
+        .sort();
+}