@event4u/agent-config 9.25.0 → 9.27.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.25.0",
+    "version": "9.27.0",
     "keywords": [
       "agent-config",
       "skills",

package/CHANGELOG.md

@@ -296,176 +296,91 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > keeps the active era under the 250-line drift cap enforced by
 > `tests/test_changelog_eras.py`.
 
-# Era: 9.23.x — current
+# Era: pre-9.27.0 — archived
 
-> Started at `9.23.0`. Full entries live inline below.
-> The drift test caps this era at 250 lines of entry body; growth past
-> that forces a new era split (`# Era: 9.24.x`, etc.) — see
-> [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
-
-## [9.25.0](https://github.com/event4u-app/agent-config/compare/9.24.0...9.25.0) (2026-08-06)
-
-### Release highlights
-
-<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
-- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 5d653e2, 00018c4, 20bb411, cb0917d, 7641291.
-- **Default changes + migration:** _auto-derived, rewrite before merge:_ commits naming a default, migration or migrate in bd45f62, 11a699c.
-- **Security and correctness:** _none_
-- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in 5d653e2, 20bb411.
-- **Known limitations:** _none_
-
-### Features
-
-* **commands:** add /analyze:conformance, and clear the six red CI checks ([5d653e2](https://github.com/event4u-app/agent-config/commit/5d653e2ecfa1b697c7c44a94087d0248debea3d9))
-* **cli:** add conformance:behavior — replay transcripts through the shipped gates ([7c7a9dc](https://github.com/event4u-app/agent-config/commit/7c7a9dc10d83245b7507cbcef348e52901968c45))
-* **hooks:** gate the language pin, git authorization and evaluator independence ([582a9f3](https://github.com/event4u-app/agent-config/commit/582a9f37b97d3cb1f6474963fea576349f6b0b5d))
-* **authoring:** a decision-impact class, and four conventions Phase 2 owed ([7641291](https://github.com/event4u-app/agent-config/commit/7641291866dac3c24deaf4cea1827a6c24d63edb))
-* **ledger:** record what the rule-body migration kept, folded, and lost ([11a699c](https://github.com/event4u-app/agent-config/commit/11a699cda54c2eca55899af25435aee80a6b7f75))
-* **skill-writing:** two conventions that travel with the artifact ([9120d0f](https://github.com/event4u-app/agent-config/commit/9120d0ffd1d8ea7140f9cc393e34c595dba29085))
-* **interactions:** close the register over the set it claims to cover ([654837b](https://github.com/event4u-app/agent-config/commit/654837b1b8c3e33a43539d256bcd18592ade6621))
-* **descriptions:** reject a description that argues against its siblings ([9889529](https://github.com/event4u-app/agent-config/commit/9889529bcb34e604fd2bedde3ab2abf98e3f6a40))
-* **gates:** lint authored examples, and cap the on-demand depth layer ([c2c2d91](https://github.com/event4u-app/agent-config/commit/c2c2d917cede10eab64144ac9302857f6edd80b5))
-
-### Bug Fixes
-
-* **rules:** clear a lint regression and register the new rule in the router ([00018c4](https://github.com/event4u-app/agent-config/commit/00018c4315269467b856713ec056f2c61982ca33))
-* **roadmap:** drop the duplicate un-archived copy ([532200a](https://github.com/event4u-app/agent-config/commit/532200ac94966a83df0a97e0c48e02e240d72c3f))
-* **hooks:** stop counting vacuous verification as evidence ([7696e54](https://github.com/event4u-app/agent-config/commit/7696e5453b770d200e2925204cba4e08f323ca7b))
-* **ci:** bump the gate-script population and regenerate the artefact index ([21a16f1](https://github.com/event4u-app/agent-config/commit/21a16f15a04c1c6b515832ddf56a951fce6b16d1))
-* **schema:** insert decision_impact surgically instead of reserialising the file ([cb0917d](https://github.com/event4u-app/agent-config/commit/cb0917daca7080b2e5446473b6e420b854554d5e))
-
-### Documentation
-
-* **analyze-conformance:** adopt the checked-out-branch default from its sibling ([bd45f62](https://github.com/event4u-app/agent-config/commit/bd45f62e52edb86fd4e22cc8828a819a60788ae7))
-* **analyze-inbox:** run in the checked-out branch; worktree only on request ([aaf29b4](https://github.com/event4u-app/agent-config/commit/aaf29b466e4df37236e32fd588077c83f51f5483))
-* **roadmap:** record the conformance audit and close its roadmap ([1616c23](https://github.com/event4u-app/agent-config/commit/1616c236d4e47b0bc77af6521a2db23419760f75))
-* **rules:** add evaluator-independence, and downgrade two enforcement claims ([20bb411](https://github.com/event4u-app/agent-config/commit/20bb4116d7d0a2dec198d4e08ade4371ff802b8a))
-* **roadmap:** close and archive the authoring-discipline roadmap ([977ebd9](https://github.com/event4u-app/agent-config/commit/977ebd9a3771eaeb42b631cd9660bf4b16d0d1ae))
-* **roadmap:** record the second execution pass and its three measured departures ([ec1acfb](https://github.com/event4u-app/agent-config/commit/ec1acfbfc5718a2197bdc9ca5cdcc091ba3a410c))
-* **roadmap:** close Phase 4 steps 1-3 and 5, with what changed from the plan ([87d4bd2](https://github.com/event4u-app/agent-config/commit/87d4bd24e5f2b7f1e7429ba016e7d473aec00fa7))
-
-### Chores
+> All entries before `9.27.0` live in
+> [`docs/archive/CHANGELOG-pre-9.27.0.md`](docs/archive/CHANGELOG-pre-9.27.0.md).
+> The archive is read-only; git tags remain the canonical
+> source for what shipped. Splitting them out of the main file
+> keeps the active era under the 250-line drift cap enforced by
+> `tests/test_changelog_eras.py`.
 
-* **docs:** regenerate the artefact index for /analyze:conformance ([d1f8f25](https://github.com/event4u-app/agent-config/commit/d1f8f25105b8df849160b2b62e78a84f555d8222))
-* **docs:** regenerate the artefact index for the new rule ([910555a](https://github.com/event4u-app/agent-config/commit/910555a46f5345352e8dd6a950a370ac53019fa1))
-* **sync:** regenerate the projections for the two authoring skills ([44f037e](https://github.com/event4u-app/agent-config/commit/44f037efc1d92d07f6efed30ecb4cb612b2bb55a))
+# Era: 9.27.x — current
 
-Tests: 11443 (+134 since 9.24.0)
+> Started at `9.27.0`. Full entries live inline below.
+> The drift test caps this era at 250 lines of entry body; growth past
+> that forces a new era split (`# Era: 9.28.x`, etc.) — see
+> [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
-## [9.24.0](https://github.com/event4u-app/agent-config/compare/9.23.0...9.24.0) (2026-08-06)
+## [9.27.0](https://github.com/event4u-app/agent-config/compare/9.26.0...9.27.0) (2026-08-07)
 
 ### Release highlights
 
 <!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
-- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in cb126e8, f908f19.
-- **Default changes + migration:** _none_
+- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 6b06006, e82cc1f, b3b5ee7, dd89970.
+- **Default changes + migration:** _auto-derived, rewrite before merge:_ commits naming a default, migration or migrate in 6d1af3a.
 - **Security and correctness:** _none_
-- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in 7a1ca1b.
+- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in 8e6765b, 6208186, f60bd6a.
 - **Known limitations:** _none_
 
 ### Features
 
-* **commands:** add /analyze:inbox — verify a dropped artifact before planning on it ([fa7b278](https://github.com/event4u-app/agent-config/commit/fa7b278507d61606232ba47da0393915a178ea1f))
-* **scripts:** make the absoluta census reproducible, and correct its own number ([de96a36](https://github.com/event4u-app/agent-config/commit/de96a36d89e7b08c49744d01361ce05a269d4225))
+* **orchestration:** backfill telemetry from the host transcript corpus ([ed28a6d](https://github.com/event4u-app/agent-config/commit/ed28a6d8aa62b3c5fc30525e5bd356c6e3c83945))
+* **conformance:** record pin distance and compaction per language violation ([b103537](https://github.com/event4u-app/agent-config/commit/b103537c69020d1bb81698a389d1dc9d97e0a145))
+* **gates:** assert rule-projection completeness and freshness ([e42ea1d](https://github.com/event4u-app/agent-config/commit/e42ea1d7fdbbaf0d87ff37d4efd40ff3d96d97f8))
+* **roadmap-next:** close the claim window, and say who carries the check ([9617664](https://github.com/event4u-app/agent-config/commit/9617664291d51176dceafbdf0ac68608dcffd0d7))
+* **cli:** sessions:list and sessions:claim ([44d5eba](https://github.com/event4u-app/agent-config/commit/44d5eba9f88e2f52c534aa1f8f350ba1a89c4eeb))
+* **hooks:** bind the register, and keep stop out of deregistration ([736f4e1](https://github.com/event4u-app/agent-config/commit/736f4e1255641a8997b2bd8f9753ac4232ccbcda))
+* **sessions:** the shared per-session register, with its measured TTL ([6ab61fd](https://github.com/event4u-app/agent-config/commit/6ab61fda9d7e7faa22fc4d33325c02c05363b6ef))
+* **rules:** declare how often each obligation comes due, and join it ([dd89970](https://github.com/event4u-app/agent-config/commit/dd89970afb7cc82846caf9c6e0029ddc73176874))
+* **coverage:** the lattice that says whether a carrier fires often enough ([53d501e](https://github.com/event4u-app/agent-config/commit/53d501e9860b0f72d3d78df8f6a7cfc0eff16245))
+* **settings:** a fresh install writes 35 lines, not 1,360 ([8504ca8](https://github.com/event4u-app/agent-config/commit/8504ca880d8c5bc5c921add50f7a7fc0b39ee03d))
+* **settings:** audit absent-vs-default, and carve out the nine keys that diverge ([6d1af3a](https://github.com/event4u-app/agent-config/commit/6d1af3aba30d5378510fc2659532f9ad16be7b37))
 
 ### Bug Fixes
 
-* **index:** regenerate the artefact index and catalog after the description edit ([c1f306b](https://github.com/event4u-app/agent-config/commit/c1f306b01cdbaabe9a349a3fbdcea127254bd0ae))
-* **preflight:** run the skill linter CI runs, so its failures never reach CI ([755e050](https://github.com/event4u-app/agent-config/commit/755e0508ad21dafad3c61b5ce507a572c2f5088e))
-* **command:** bring the analyze-inbox description under the 200-char cap ([f72573b](https://github.com/event4u-app/agent-config/commit/f72573b7f8ce2fa83eea2671bc6142253f020182))
-* **docs:** repair the broken install-profile example; keep dead ends in handoffs ([7a1ca1b](https://github.com/event4u-app/agent-config/commit/7a1ca1b5f4c88e1288235b272416fe55d521d8ac))
-* **adr:** give ADR-218 the required frontmatter and a review_trigger ([854d3ef](https://github.com/event4u-app/agent-config/commit/854d3efdd83ab678189c7d6ccf3fd7850efdcaad))
+* **orchestration:** drop the pairing key from the emitted line ([d10004a](https://github.com/event4u-app/agent-config/commit/d10004a9e7d2efd1dab9597c1cd364f4d176d38c))
+* **orchestration:** drop free-text fields from backfilled lines ([bdf976f](https://github.com/event4u-app/agent-config/commit/bdf976f1223a2e601a3eb613d9c94f933a56837e))
+* **hooks:** the language pin no longer treats a synthetic turn as a prompt ([439c20e](https://github.com/event4u-app/agent-config/commit/439c20e00721ed9a238f69478fbd807a58d5fe23))
+* **hooks:** two git guards stop refusing read-only commands ([17c5fa5](https://github.com/event4u-app/agent-config/commit/17c5fa57441a095276bfe8e8b46a57152f1a1353))
+* **cli:** list the sessions verbs in usage() too ([d4f4429](https://github.com/event4u-app/agent-config/commit/d4f44290f2c8f18b27cfbfac35a5002b88a9e8e2))
+* **release:** stop treating "no checks reported" as a pass when checks ARE required ([1af0f03](https://github.com/event4u-app/agent-config/commit/1af0f0316f39191603d5031145153e209e1778ad))
+* **rules:** pay for the citation with a line number, not a quoted sentence ([e82cc1f](https://github.com/event4u-app/agent-config/commit/e82cc1f4d032578b1e5749ceb6756d6a82beeaf7))
+* **canary:** bind the carrier to a slot that reaches a task boundary ([b3b5ee7](https://github.com/event4u-app/agent-config/commit/b3b5ee75e95ac7be3908529f3d52c5d47432d6bb))
+* **settings-surface:** treat a free-form map as a leaf, not an empty group ([7a68cb7](https://github.com/event4u-app/agent-config/commit/7a68cb785ccff4bf190c01b5c52927f1fd94fbeb))
+* **gates:** a zero-tool checkout is an absent surface, not a dead scan scope ([2828561](https://github.com/event4u-app/agent-config/commit/28285610d22c340460b02be675047efdbe24c8ac))
 
 ### Documentation
 
-* **create-pr:** resolve the duplicate 4d heading and its ambiguous refs ([315d6fe](https://github.com/event4u-app/agent-config/commit/315d6fe64eea7e39cd2b14a9ac57a2d2ac585654))
-* **roadmap:** harvest 16 inbox artifacts — mostly into cancellations ([de84205](https://github.com/event4u-app/agent-config/commit/de842055f439b9f3ea0d2d979059e1d6a8dae18c))
-* **rules:** act on council round 3 — falsifiable trigger, honest bound, ADR-218 ([cb126e8](https://github.com/event4u-app/agent-config/commit/cb126e88c3dd4d58bed92fe168bd090ee83d6a99))
-* **rules:** mark the declared-protocol cap provisional, propagate the census correction ([f908f19](https://github.com/event4u-app/agent-config/commit/f908f19c3463a0d19607637cfffa4393899177f8))
-
-Tests: 11309 (+10 since 9.23.0)
-
-## [9.23.0](https://github.com/event4u-app/agent-config/compare/9.22.0...9.23.0) (2026-08-06)
-
-### Release highlights
-
-<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
-- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 3d1ed67, e5e4c48, a7ecd7b, ff146a0, 927ff8a, 420e833 +1 more.
-- **Default changes + migration:** _auto-derived, rewrite before merge:_ commits naming a default, migration or migrate in 9da7146, c1d9093.
-- **Security and correctness:** _none_
-- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in c4a4920, 9242d41, 927ff8a.
-- **Known limitations:** _none_
-
-### Features
+* **roadmap:** conformance round 6, starting with the regress round 5 shipped ([353cac1](https://github.com/event4u-app/agent-config/commit/353cac1d9e71d38eaa97a891fb037f47e7299e1a))
+* **proof:** regenerate the derived page after the CLAIMS entry ([6660a23](https://github.com/event4u-app/agent-config/commit/6660a231e08d41aea39e597a85843d0d0cda1e9d))
+* **roadmap:** archive road-to-orchestrator-first-execution, stopped at Phase 2 ([b24a991](https://github.com/event4u-app/agent-config/commit/b24a991d603fc9beea0e26a1252ef766059298c8))
+* **orchestration:** record the observed-dispatch measurement and its verdict ([8e6765b](https://github.com/event4u-app/agent-config/commit/8e6765bc7fb05f6602abc998d231b270721accdf))
+* **claims:** pre-register and resolve orchestration-observed-dispatch-cost ([6208186](https://github.com/event4u-app/agent-config/commit/6208186fe6393f5a98c6b9d90ae2138959724590))
+* **proof:** re-render after the two enforced_by declarations ([7e36dbb](https://github.com/event4u-app/agent-config/commit/7e36dbb009a06d51cbcbb0d92167954e9adb64d3))
+* **roadmap:** give conformance round 5 its Risk Register ([7e837bb](https://github.com/event4u-app/agent-config/commit/7e837bb8c85d78631effdf8e18f96762e779dab3))
+* **roadmap:** conformance round 5, the first post-fix measurement ([95d4db9](https://github.com/event4u-app/agent-config/commit/95d4db9d9c971778f583c7081c7277d1f4ba661e))
+* **rules:** replace two unmeasured enforcement claims with the measurement ([6b06006](https://github.com/event4u-app/agent-config/commit/6b0600608a33a56f35e7ec76ab6c5ba60711249f))
+* **roadmap:** archive parallel-session-coordination with its measurements ([f60bd6a](https://github.com/event4u-app/agent-config/commit/f60bd6a3fba74e669a6361724070ce9d6d037b7b))
+* **roadmap:** give the parallel-session plan its Risk Register ([f13ebba](https://github.com/event4u-app/agent-config/commit/f13ebba5a4f7856b5be0acdd19244e86adaca126))
+* **roadmap:** add the obligation-carrier audit and the parallel-session register ([20391f6](https://github.com/event4u-app/agent-config/commit/20391f62f2c6c3f294467481956b1b2d2b0f9255))
+* **roadmap:** close Phase 3, resolve the blocker, and say why 4.2 stays open ([2ba1e78](https://github.com/event4u-app/agent-config/commit/2ba1e7894ded9571f38dbe12de1680b4f1db57fd))
+* **settings:** generate the settings reference the shrinking file no longer carries ([9e34b23](https://github.com/event4u-app/agent-config/commit/9e34b238523187f4ae7c9826c8bef6e4b89efe8d))
 
-* **review:** severity is carried, confidence is its own field, density stays advisory ([9242d41](https://github.com/event4u-app/agent-config/commit/9242d416e77518f6d1b593184ae0123f3b0ecb34))
-* **rules:** land the conflict audit, close its findings, archive the roadmap ([a7ecd7b](https://github.com/event4u-app/agent-config/commit/a7ecd7b73b99166baaee3838c4e8a5f7668bf580))
-* **authoring:** require the primary bias, and lead rich artifacts with their obligation ([ff146a0](https://github.com/event4u-app/agent-config/commit/ff146a0f11f89c4f093d80aaf705915eb918c7bb))
-* **rules:** a removal disposition, and the classification that stops "another rule" ([484596e](https://github.com/event4u-app/agent-config/commit/484596e1dc41e003c70678ec301ef4f801939736))
-* **rules:** mandated lines at the decision point, and the two rules they need ([927ff8a](https://github.com/event4u-app/agent-config/commit/927ff8a83eb17a8d41f234dbfabe3d9caedcf066))
-* **budget:** measure the rich-class band, lower it to what the corpus uses, gate it ([420e833](https://github.com/event4u-app/agent-config/commit/420e83368298029b4e01a412897ec1f0cec4286e))
-* **settings:** add settings:set and fence the GUI write route ([3ffb705](https://github.com/event4u-app/agent-config/commit/3ffb7057d3ab4e963f3b09d49fbb8de57c6956ae))
-* **settings:** fence every settings key behind an A/B/C class ([b09e84e](https://github.com/event4u-app/agent-config/commit/b09e84e9ce540ac6e4215538bef731c87ad7c91b))
-* **gates:** self-test mode, estate-level result handling, and one equality-without-validity fix ([f7a022a](https://github.com/event4u-app/agent-config/commit/f7a022a7d039e03c5240eca94f7f9306ef5ed456))
-* **gates:** make shrink-only mechanical against the base ref ([3e7eb9d](https://github.com/event4u-app/agent-config/commit/3e7eb9d9d35fe79d0655c51ef86ffabbe1f0a1b8))
-* **gates:** ratchet ledger adoption, and stop rendering unmeasured categories ([678ba92](https://github.com/event4u-app/agent-config/commit/678ba92b862d6041c1e2af8d91a85252d53d687b))
-* **gates:** adopt the ledger in three gates whose scan roots have failed before ([c04b9a5](https://github.com/event4u-app/agent-config/commit/c04b9a5785d4d5a02da317b44cdebc02bc83e3b4))
-* **gates:** add a per-target completeness ledger ([fea6d7b](https://github.com/event4u-app/agent-config/commit/fea6d7b5181ba7815931cf83833946f1c405979f))
-* **gate:** enforce the roadmap concurrency cap mechanically ([8add433](https://github.com/event4u-app/agent-config/commit/8add433b93d68191ffd44dab5c8f4f68102f1c17))
+### Refactoring
 
-### Bug Fixes
-
-* **authoring:** revert the two kernel-rule routing edges, state the gap instead ([3d1ed67](https://github.com/event4u-app/agent-config/commit/3d1ed67c3fd6ac8277f32d4c4d6bac1b274427e8))
-* **authoring:** close all fourteen R2 findings ([e5e4c48](https://github.com/event4u-app/agent-config/commit/e5e4c48d6b993854fc41b681ea4c585e6b265f40))
-* **review:** six real pre-filter instances — the keyword grep had missed all of them ([c4a4920](https://github.com/event4u-app/agent-config/commit/c4a49204dfefae74e518f284ee11f04fff511e63))
-* **rules:** declare the 3 authority collisions, decline the gate ([943ad06](https://github.com/event4u-app/agent-config/commit/943ad067d68b3dfa31d15865d2c936cad2281767))
-* **rules:** declare the two kernel-vs-kernel conflicts and fix the halt list ([c4ab544](https://github.com/event4u-app/agent-config/commit/c4ab5449b0c50c691e47793d247b980feec1b21b))
-* **rules:** make ui-audit-gate satisfiable, invert the read cap, exempt file sets ([b47752d](https://github.com/event4u-app/agent-config/commit/b47752de370607ed1d691fdbc22ff10af3dd806d))
-* **projection:** stop injecting ADR-004 manual rules into per-tool trees ([5d40a6c](https://github.com/event4u-app/agent-config/commit/5d40a6c184883844dff2a23154959accfef1022e))
-* **cli:** route and document settings:set in the dispatcher ([0d2c6c5](https://github.com/event4u-app/agent-config/commit/0d2c6c58cbc9769e34e2c0c5d289c6de7c690501))
-* **pack:** ship yamlIO with the writer, re-baseline the packed-size budget ([87b6fc1](https://github.com/event4u-app/agent-config/commit/87b6fc1328d90d140ffbbf31afc9ebb5452e00e2))
-* **settings:** close all ten R2 findings ([84e4596](https://github.com/event4u-app/agent-config/commit/84e4596c7d42afbe3d26ee2e2b2e36836b754c97))
-* **settings:** satisfy exactOptionalPropertyTypes in the settings:set argv parser ([a03d21b](https://github.com/event4u-app/agent-config/commit/a03d21b5960c0e13b910c01d86cb5c4f99a4ad77))
-* **hooks:** forward the concern's own reason on a block; fix stale exit assertion ([b64cd4b](https://github.com/event4u-app/agent-config/commit/b64cd4bf2a4569c3fd3ea5fae85d9095bbf0d33f))
-* **hooks:** translate verdicts to per-host native semantics ([f39698c](https://github.com/event4u-app/agent-config/commit/f39698cd8e626756c8add6a045e4e66b9b00751d))
+* **git:** extract the common-dir resolution so it has one answer ([1f04331](https://github.com/event4u-app/agent-config/commit/1f04331dd2f81c64a5217f843ddbcf49f2d9be9b))
 
-### Documentation
+### Build
 
-* **roadmap:** record what landed and what the remaining phases actually cost ([15df545](https://github.com/event4u-app/agent-config/commit/15df545937dcf88e910240b7af45b2dfc6d464e9))
-* **roadmap:** close both blockers and Phase 1, record the migration inventory ([9da7146](https://github.com/event4u-app/agent-config/commit/9da7146dbaea153bb4e2eae31069066663378dcb))
-* **roadmap:** close P0.3-P1.6, record the two round-2 reversals ([cc67d73](https://github.com/event4u-app/agent-config/commit/cc67d73b287f0ce91f4c0690df824b670c4c604e))
-* **roadmap:** file the absent-is-not-default blocker, close Phase 2 ([c1d9093](https://github.com/event4u-app/agent-config/commit/c1d90934b05168cba6ac3667d92d7a20602735b2))
-* **roadmap:** record what the prerequisite re-read caught, close Phase 1 ([ba9b0f0](https://github.com/event4u-app/agent-config/commit/ba9b0f0f0e148857a8574faa2e512b64c099d2e4))
-* **roadmap:** record the remote-CI verdict on the gate-integrity roadmap ([4e52e53](https://github.com/event4u-app/agent-config/commit/4e52e530e1c5adeab421af6f351d4d0f86bbcc55))
-* regenerate the artefact index and catalog for the two new guidelines ([619d283](https://github.com/event4u-app/agent-config/commit/619d28377bc6180948336e98ad4eec58efd41659))
-* bump the guideline count for the two new gate guidelines ([e5b3331](https://github.com/event4u-app/agent-config/commit/e5b333174587acf3218811e7f049b401a2436e1d))
-* **roadmap:** close 33 of 35 gate-integrity steps, file the kernel blocker ([818b637](https://github.com/event4u-app/agent-config/commit/818b6379ab91a4f739cb1fe7a11d499582f3039b))
-* **gates:** the authoring path, the false-green catalogue, and the CI delta ([554b9a9](https://github.com/event4u-app/agent-config/commit/554b9a992fb77e532344aadd298234cd63804278))
-* **roadmap:** add Risk Register to road-to-rule-coherence ([4641101](https://github.com/event4u-app/agent-config/commit/4641101a9f234fd32beacecce01426b4f77a8d73))
-* **roadmap:** add road-to-rule-coherence with measured scope cuts ([55a3957](https://github.com/event4u-app/agent-config/commit/55a395783dbbcfdba6346be9312fd04dec285f5c))
-* **roadmap:** unblock everything the adoption gate was holding ([8878a88](https://github.com/event4u-app/agent-config/commit/8878a88b02422d5b93d820968a53c161a795ca64))
-* **adr:** strike external adoption as a gate, re-anchor restraint to capacity ([e98221e](https://github.com/event4u-app/agent-config/commit/e98221e7de7b7bddf0655823ebcc5994bb9c4da6))
-* **roadmap:** open two verification roadmaps, park the rest by arm ([d415dad](https://github.com/event4u-app/agent-config/commit/d415dada95c2ad7a89327831462870cc1fed8fd8))
-* **adr:** lift the harvest freeze for verification infrastructure only ([11df060](https://github.com/event4u-app/agent-config/commit/11df0606810508f4fcfec404dc67cd975a92ef91))
-* **sweep:** record the 40-source skill-ecosystem deep-dive ([45c55a2](https://github.com/event4u-app/agent-config/commit/45c55a222b61430ed39a572a4ff083cd383b81c7))
-
-### CI
-
-* register the three new gates, and close the CI-local parity delta ([2c709c3](https://github.com/event4u-app/agent-config/commit/2c709c3f1069a29c7a5f8a1cd1829b1377a40c34))
+* **install:** refresh the installer bundle for the surface-flattener fix ([cc4ae5e](https://github.com/event4u-app/agent-config/commit/cc4ae5e5e20b51d681686258b0cc6411d0218c05))
 
 ### Chores
 
-* **sync:** regenerate the projection and tool trees ([f0ebea5](https://github.com/event4u-app/agent-config/commit/f0ebea51b823bd50e979ccf6ba66660bec3eef83))
-* **roadmap:** regenerate dashboard after merging main ([4e3810a](https://github.com/event4u-app/agent-config/commit/4e3810a4ce364df32f22eead045a4526cf98be40))
-
-### Other
-
-* **authoring:** mark all fourteen findings fixed, drop the regenerable input ([f3d6e2a](https://github.com/event4u-app/agent-config/commit/f3d6e2a03eeca77adaac9b62f12d277d7d47b3a0))
-* **authoring:** R2 completion review — 14 findings, all open ([703b8eb](https://github.com/event4u-app/agent-config/commit/703b8ebc5a5c55facfdc6cf468642eb0f03b2a71))
-* **settings:** mark all ten findings fixed, drop the regenerable input ([0a96cca](https://github.com/event4u-app/agent-config/commit/0a96cca52a0116a4330ad51dbfe96b6269721d1b))
-* **settings:** R2 completion review — 10 findings, all open ([36139ac](https://github.com/event4u-app/agent-config/commit/36139ac2f4d83b296222fd8f89db4c75d73c4f20))
+* **budgets:** move cli_help_command_count 86 to 88 for the sessions verbs ([c8ba2c3](https://github.com/event4u-app/agent-config/commit/c8ba2c34edd5bcda97d2c5cab85a3dcf2055f8de))
+* **sync:** re-project session-canary after the frequency-override note ([d68c02f](https://github.com/event4u-app/agent-config/commit/d68c02f4e18233cf1c51146cc56dcc01f8d9cc53))
 
-Tests: 11299 (+208 since 9.22.0)
+Tests: 11750 (+107 since 9.26.0)
 
 # Era: pre-4.0.0 — archived
 

package/README.md

@@ -4,7 +4,7 @@
 
 [![Smoke](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml) [![Public install smoke (3 OS × 2 Node)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml) [![npm](https://img.shields.io/npm/v/@event4u/agent-config?style=flat-square&label=npm&color=orange)](https://www.npmjs.com/package/@event4u/agent-config) [![agent-config MCP server](https://glama.ai/mcp/servers/event4u-app/agent-config/badges/score.svg)](https://glama.ai/mcp/servers/event4u-app/agent-config) [![MCP Toplist](https://mcptoplist.com/badge/glama%2Fevent4u-app%2Fagent-config.svg)](https://mcptoplist.com/server/glama%2Fevent4u-app%2Fagent-config)
 
-[![Skills](https://img.shields.io/badge/Skills-288-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-112-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-195-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-104-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
+[![Skills](https://img.shields.io/badge/Skills-288-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-114-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-196-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-104-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
 
 **Try it in 30 seconds** — drop one read-only subagent into any repo and watch it gate "done": `@production-validator check this branch is actually done`. No wizard, no lock-in, nothing else installed — the [30-second wedge ↓](#quickstart) is the whole first step. Start at the proof, not the catalog: **[event4u-app.github.io/agent-config/proof/](https://event4u-app.github.io/agent-config/proof/)**.
 

package/dist/agent-src/commands/analyze/conformance.md

@@ -8,7 +8,7 @@ sub: conformance
 cluster: analyze
 skills: [roadmap-writing, decision-review, ai-council, subagent-orchestration]
 description: Audit recent local sessions for rule violations — deterministic scan plus subagent passes over the transcripts, root-cause each class, and emit a roadmap that mechanises what is mechanisable.
-argument-hint: "[--sessions N] [--scan-only] [--no-council] [--no-roadmap] [--worktree]"
+argument-hint: "[--limit N] [--scan-only] [--no-council] [--no-roadmap] [--worktree]"
 suggestion:
   eligible: false
   rationale: "Cluster sub-command — reached via its cluster head's routing or its explicit /analyze:conformance name; not independently suggested (surface-consolidation)."
@@ -122,6 +122,25 @@ Reach for a mechanism only where the failure mode was measured. A gate for a
 class nobody was harmed by is the mechanism-without-a-failure-mode this repo
 forbids.
 
+**What round 5 measured about the choice itself** — the first post-fix reading,
+2026-08-07, 27 sessions:
+
+| carrier class | bound at | before | after |
+|---|---|---:|---:|
+| BLOCKING (unauthorized irreversible git op) | `pre_tool_use` | 8 | **0** |
+| BLOCKING (evaluator prompt pre-loading its verdict) | `pre_tool_use` | 1 | **0** |
+| advisory state injection (language mirror) | `user_prompt_submit` | 555 | **19** |
+| advisory (verification claimed on empty output) | `post_tool_use` | 4 | **1** |
+
+Both blocking carriers reached zero. Neither advisory carrier did. This is a
+prior on the table above, not a law: the post-fix corpus is one session and
+roughly 600 assistant turns, and the two classes also differ in what they are
+asked to catch. But where a class has already failed with its fact **verifiably
+in context** — round 5 confirmed the language pin present on the turns that
+violated it — raising the injection frequency is the same mechanism, not a new
+one. Two council members called that theatre independently. Prefer the refusal,
+or take the honest downgrade.
+
 ### 4 — Council (unless `--no-council`)
 
 Route the class list and the proposed mechanisms to the AI council. Ask it
@@ -155,7 +174,7 @@ Before the roadmap is believed, run every new detector and gate against:
 
 | Flag | Effect |
 |---|---|
-| `--sessions N` | How many recent sessions to read (default 30). |
+| `--limit N` | How many recent sessions to read (default 30). |
 | `--scan-only` | Step 1 only — the deterministic report, no subagents, no spend. |
 | `--no-council` | Skip step 4. Record that it was skipped. |
 | `--no-roadmap` | Findings only; no artefact authored. |

package/dist/agent-src/commands/review/changes.md

@@ -136,11 +136,12 @@ Read `subagents.adversarial_council` from `.agent-settings.yml` (default
 
 - `off` (default): skip silently.
 - `ask`: when the diff is explicitly high-risk (security, tenant, migration,
-  public API), offer it (in the user's language):
-
-  > 1. Run the adversarial verification council on this high-risk diff? (distinct-model skeptics red-team for finding coverage)
-  > 2. Skip — the five internal judges are enough
-
+  public API), offer it — in the shape
+  [`settings-ask-protocol`](../../../../rules/settings-ask-protocol.md) fixes,
+  which supplies the four slots, the one-question budget, and the storage line
+  (not persisted: `subagents.adversarial_council` is class C). What only this
+  command knows is *why now*: the diff is high-risk, and the offer is a paid
+  distinct-model red-team for finding coverage against the five internal judges.
 - `on`: run it automatically on a high-risk diff.
 
 When run, dispatch the

package/dist/agent-src/commands/roadmap/next.md

@@ -0,0 +1,256 @@
+---
+model_tier: medium
+name: roadmap-next
+pack: product-basic
+tier: 2
+visibility: internal
+cluster: roadmap
+sub: next
+skills: [roadmap-management, agent-docs-writing, ai-council, subagent-orchestration, worktree-lifecycle, git-workflow]
+description: Pick the next executable roadmap and carry it to a reviewable PR — live remote screen, five-disqualifier feasibility pass, council on the pick, process-full, chunked commits, PR, CI fix.
+argument-hint: "[--worktree] [roadmap]"
+suggestion:
+  eligible: false
+  rationale: "Cluster sub-command — reached via its cluster head's routing or its explicit /cluster:sub name; not independently suggested (surface-consolidation)."
+workspaces:
+  - agent-config-maintainer
+packs:
+  - meta
+---
+
+# /roadmap:next
+
+Selection + delivery scope of the [`/roadmap`](../roadmap.md) cluster.
+The three `process-*` subs take a roadmap **as given** and vary the
+scope inside it. `/roadmap:next` varies the **selection**: it screens
+what is actually executable right now, picks one, pins the scope to
+`full`, and carries the run to a PR that is ready for review.
+
+One invocation = one roadmap = one branch = one PR.
+
+## Instructions
+
+### 1. Live remote screen — before any selection reasoning
+
+Selection reads live state, never memory, a dashboard count, or an
+earlier fetch (per [`direct-answers`](../../rules/direct-answers.md)
+Iron Law 2 and [`roadmap-process-loop § 1`](../../contexts/execution/roadmap-process-loop.md#1-resolve-roadmap)).
+Run as ONE block:
+
+```bash
+git fetch origin --prune
+git ls-tree --name-only origin/main agents/roadmaps/          # still active?
+git ls-tree --name-only origin/main agents/roadmaps/archive/   # already closed?
+gh pr list --state open --json number,title,headRefName        # in flight?
+agent-config sessions:list --json                              # claimed right now?
+```
+
+Excluded from the candidate set: `template.md`, `archive/`,
+`skipped/`, `later/`, anything with `status: draft` whose promotion
+trigger has not fired, and:
+
+| Exclusion | Source | What it means | Recovery |
+|---|---|---|---|
+| **taken by an open PR** | `gh pr list` — a roadmap slug matching an open PR's branch | The work is done or nearly done and is waiting on review | Review or merge that PR; the roadmap archives inside it |
+| **claimed by a live session** | `sessions:list` — a live record whose `roadmap_slug` matches | Another session is working on it *right now*, before any PR exists | Nothing to do — it releases on that session's end, or by TTL |
+
+Keep the two distinguishable in the reported screen. They are different
+states with different recovery, and collapsing them into "unavailable"
+loses the only information that tells the user whether to wait for a
+review or simply pick something else.
+
+A roadmap completes by an archive move **inside its merging PR**, so a
+local checkout can show a closed roadmap as open. That is why this step
+precedes the screen instead of following it.
+
+The session read closes a window the PR check cannot. Measured over the 14
+most recent merged feature PRs, the gap between a branch's first commit and
+its PR is a median of **18.5 minutes** and a maximum of **67** — and that is a
+*lower bound*, since the clock starts at roadmap selection, strictly earlier
+than the first commit. For that whole interval the PR check reports the
+roadmap as free. Measurement:
+`agents/evidence/analysis/parallel-session-register-phase1.md`.
+
+```
+THE REGISTER *WRITE* IS HOOK-CARRIED AND DETERMINISTIC.
+THIS *READ* IS NOT. THE TWO MUST NOT LOOK ALIKE.
+```
+
+This screen runs because the model read this instruction — there is no gate
+that fires it, and none that notices when it is skipped. It is a
+model-carried obligation in exactly the shape the `enforced_by: none` rules
+declare, and it is stated here rather than left as prose that reads like a
+guarantee. What IS deterministic: the heartbeat that writes the register, the
+TTL expiry, and `sessions:list` itself once invoked.
+
+### 2. Screen the survivors — five disqualifiers
+
+For each candidate read its frontmatter, its open-step count, and every
+`### blocker:` section. Disqualify on:
+
+1. **A blocker whose resolution is a human ACTION** — install a secret,
+   click a repo setting, recruit a participant, approve spend, let a
+   date pass. Apply the action-vs-judgement split: a blocker that is a
+   **judgement call** (which option, whether to reopen a recorded
+   decision, is the evidence sufficient) is **not** a disqualifier — it
+   is council-resolvable in step 3.
+2. **Spend** — paid bench or API runs, an npm publish, a public release.
+3. **A date that must pass.**
+4. **A kernel-rule edit** — [`scope-control`](../../rules/scope-control.md)
+   demands its own PR plus a ≥24 h soak, so it cannot close in this run
+   (kernel list: [`kernel-membership`](../../../docs/contracts/kernel-membership.md)).
+5. **Phases gated on a spike verdict** that may return FINDING.
+
+Also check the **family concurrency cap** (`lint_roadmap_family_cap`) —
+adding a third `road-to-<family>-*` roadmap without archiving one reds
+CI.
+
+Partial disqualification is normal and does **not** drop a candidate:
+record which phases the blocker actually blocks. A roadmap whose blocker
+touches one deferred step still has a full working set.
+
+Delegate the per-candidate reads to parallel subagents when more than
+three candidates survive step 1 (per
+[`delegation-policy`](../../rules/delegation-policy.md)); each returns
+`{slug, open_steps, blockers[], disqualifiers[], blocked_phases[]}` and
+nothing else.
+
+### 3. Rank, then let the council settle a genuine tie
+
+```
+RANK BY DEFECT SEVERITY, NEVER BY PERCENT-DONE OR STEP COUNT.
+A ROADMAP THAT REPAIRS A LIVE, USER-VISIBLE WRONGNESS OUTRANKS
+ONE THAT MOVES MORE CHECKBOXES. PICKING BY CHECKBOX COUNT IS THE
+GOODHART MOVE THIS PACKAGE'S OWN DISCIPLINE FORBIDS.
+```
+
+- **Exactly one survivor, or one that dominates** → take it, state the
+  one-line reason inline, proceed. Do not ask
+  ([`no-cheap-questions`](../../rules/no-cheap-questions.md)).
+- **Two or more with a real trade-off** → put the pick to the AI
+  council with the constraint set stated (survivors, open-step counts,
+  blocked phases, severity read) per
+  [`ai-council`](../../skills/ai-council/SKILL.md). Check the council's
+  decisive premise against the tree before adopting it — twice recorded,
+  the load-bearing claim was falsifiable in-repo.
+- **Zero survivors** → emit the screen table (candidate · open steps ·
+  disqualifier) and stop. Suggest
+  [`/roadmap:create`](create.md) or a blocker the user can clear. Do
+  not manufacture a pick.
+
+### 3b. Claim the pick, so the next session's screen sees it
+
+```bash
+agent-config sessions:claim <roadmap-slug>
+```
+
+Immediately after the pick, before any branch or commit. This writes the slug
+into `agents/runtime/state/roadmap-claim.json`; the next heartbeat lifts it into
+this session's register record, so another session's step 1 excludes it **within
+one turn** and long before a PR exists.
+
+Routing the claim through a state file rather than having this command write the
+register directly is deliberate: the roadmap is picked mid-session by the model,
+a hook is a script and cannot know what was picked, and this way the model never
+needs to know the register's path or format. The cost is that the claim lands at
+most one turn late.
+
+Same honesty boundary as the screen above: **this write is model-carried.** The
+verb is deterministic once invoked, and nothing forces the invocation. A skipped
+claim degrades to today's behaviour — the PR check still catches the roadmap once
+a PR exists — so the failure mode is a re-opened window, not a wrong result.
+
+`agent-config sessions:claim --release` drops the claim if the run is abandoned
+before the session ends; otherwise `session_end` clears the whole record.
+
+### 4. Workspace — branch by default, worktree on request
+
+Default: a feature branch in the current checkout, named
+`feat/<roadmap-slug>` per [`commit-conventions`](../../rules/commit-conventions.md).
+Propose the name once and proceed; no naming menu.
+
+`--worktree` — or the user saying "in a worktree" — routes through
+[`/worktree:create`](../../worktree/create.md) in full, including its
+[seeding allow/deny list](../../../skills/using-git-worktrees/SKILL.md#4b-seed-the-worktree--allow--deny-list).
+Two entries decide whether the run's gate results mean anything:
+dependencies are symlinked or installed **fully**, and
+`.agent-settings.yml` is **never** copied — absent IS the CI shape.
+
+### 5. Run it
+
+Hand off to [`/roadmap:process-full`](process-full.md) and follow it
+verbatim, including its Iron Law — full is full, and its five halt
+conditions are the only stops. The execution contract from
+[`roadmap-execution-contract`](../../contexts/execution/roadmap-execution-contract.md)
+is derived once; the user's single Accept covers branch, chunked
+commits, push to that branch, and the PR.
+
+### 6. Deliver
+
+Chunked commits (the agent picks the split — never ask how, per
+[`commit-policy`](../../rules/commit-policy.md)), then
+[`/create-pr`](../../git/pr/create.md): archival sweep, preflight,
+push, PR opened **ready for review** (not draft).
+
+### 7. CI — fix locally, honour the push gate
+
+Follow [`/create-pr` § 4d](../../git/pr/create.md): wait for the
+verdict in the background, never end the turn on "CI is running",
+diagnose and fix in the working tree on red, within the N=3 budget per
+[`autonomous-execution`](../../rules/autonomous-execution.md).
+
+```
+THE LOCAL FIX IS AUTONOMOUS. THE RE-PUSH IS NOT.
+git push IS A HARD-FLOOR TRIGGER AND THE FLOOR REFUSES A STANDING
+DIRECTIVE BY CONSTRUCTION. FIX, VERIFY, THEN SAY WHAT IS READY.
+NEVER INVENT A PER-PR "STANDING MANDATE" WORKAROUND.
+```
+
+The cheapest CI-fix loop is the one that never fires: run `task
+preflight` before the first push, which runs the same
+`skill_linter --changed` gate CI does.
+
+### 8. Report
+
+Roadmap picked + the screen result that picked it · steps closed /
+total · commits · PR URL as the literal last line (per
+[`direct-answers`](../../rules/direct-answers.md) reply-close) · CI
+verdict · anything left open with its reason.
+
+## Iron Law — screened, never guessed
+
+```
+NEVER PICK A ROADMAP FROM MEMORY, A DASHBOARD COUNT, OR AN EARLIER SESSION.
+THE THREE LIVE CHECKS RUN FIRST, EVERY INVOCATION.
+A ROADMAP CLAIMED "IN FLIGHT", "MERGED", OR "DONE" WITHOUT A LIVE CHECK
+AT THE MOMENT OF THE CLAIM IS AN UNVERIFIED CLAIM.
+```
+
+## Rules
+
+- **One roadmap per invocation.** Never chain a second pick after the
+  first closes — the user re-invokes.
+- **The screen is reported, not just used.** State which candidates were
+  disqualified and on what, so the pick is auditable — and keep
+  "taken by open PR" and "claimed by a live session" distinguishable.
+- **A live foreign claim is not a merge conflict to resolve.** It excludes the
+  roadmap from *this* pick and nothing more. Never override it, and never treat
+  the register as a lock: it is advisory, two sessions can claim in the same
+  millisecond, and an idle session disappears from it although its user returns
+  ([`parallel-sessions`](../../../../docs/guides/parallel-sessions.md)).
+- **A judgement-call blocker goes to the council, not to the user.**
+  A human-ACTION blocker goes to neither — it disqualifies.
+- **No merge, ever.** The PR is opened for review; merging is
+  conversational ([`non-destructive-by-default`](../../rules/non-destructive-by-default.md)).
+- All rules from [`/roadmap:process-full`](process-full.md#rules) apply
+  unchanged to the execution half.
+
+## See also
+
+- [`/roadmap`](../roadmap.md) — cluster orchestrator
+- [`/roadmap:process-full`](process-full.md) — the execution half this wraps
+- [`/roadmap:ai-council`](ai-council.md) — challenge a roadmap before running it
+- [`/worktree:create`](../../worktree/create.md) — the `--worktree` path
+- [`/create-pr`](../../git/pr/create.md) — delivery + the CI wait contract
+- [`roadmap-process-loop`](../../contexts/execution/roadmap-process-loop.md) — canonical mechanics
+- [`parallel-sessions`](../../../../docs/guides/parallel-sessions.md) — what the session register does, its TTLs, and the two limits it does not hide