@event4u/agent-config 9.27.0 → 9.29.0

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
   },
   "metadata": {
     "description": "Bootstrap shim for the event4u agent-config suite. This plugin ships ONLY the dispatcher hooks plus one install-pointer skill — ALL content (skills, rules, commands) is installed via `npx -y @event4u/agent-config init`, which writes the file projection AND registers the same hooks in ~/.claude/settings.json. DEPRECATED as a content channel; kept so the marketplace listing stays discoverable and existing installs keep working hooks.",
-    "version": "9.27.0",
+    "version": "9.29.0",
     "keywords": [
       "agent-config",
       "skills",

package/AGENTS.md

@@ -1,33 +1,34 @@
 # event4u/agent-config
 
-> Shared skill / rule / command suite for AI coding tools. No app runtime. AGENTS.md of the **package itself**.
+> Shared skill / rule / command suite for AI coding tools. No app runtime.
 
 ## Source of truth
 
-Edit `src/` only (`src/skills`, `src/rules`, `src/agent-src/`). Generated trees regenerate from `task sync` + `task generate-tools`; never hand-edit.
+Edit `src/` only (`skills`, `rules`, `agent-src`). `task sync` + `task generate-tools` regenerate the rest; never hand-edit.
 
 ## Working on this repo
 
 ```bash
-task sync              # regenerate dist/agent-src/, .augment/
-task generate-tools    # regenerate .claude/, .cursor/, .clinerules/, .windsurfrules
-task ci                # full pipeline — green before PR
-# maintainer: AGENT_CONFIG_DEV_MODE=1 opens --scope=project (docs/maintainers/dev-mode.md)
+task sync # dist/agent-src/, .augment/
+task generate-tools # .claude/, .cursor/, .clinerules/, .windsurfrules
+task ci # full pipeline, green before PR
+# dev: AGENT_CONFIG_DEV_MODE=1 -> --scope=project (docs/maintainers/dev-mode.md)
 ```
 
 ## Pointers
 
 - **Self-orientation**: [`package-self-orientation`](docs/contracts/package-self-orientation.md).
-- **System map (maintainers)**: [`system-map`](docs/maintainers/system-map.md) — the one-page how-it-fits-together.
-- **Kernel + Router** — 9 Iron-Law rules, tier-1/2 routing: [`kernel-membership`](docs/contracts/kernel-membership.md) + [`rule-router`](docs/contracts/rule-router.md).
-- **Trust & Safety** — enum, HRR banner, floors: [`trust-and-safety`](docs/contracts/trust-and-safety.md) + [`ADR-018`](docs/decisions/ADR-018-trust-and-safety-layer.md).
+- **System map (maintainers)**: [`system-map`](docs/maintainers/system-map.md) — one-page overview.
+- **Kernel + Router** — 9 Iron-Law rules + routing: [`kernel-membership`](docs/contracts/kernel-membership.md) + [`rule-router`](docs/contracts/rule-router.md).
+- **Trust & Safety** — enum + floors: [`trust-and-safety`](docs/contracts/trust-and-safety.md) + [`ADR-018`](docs/decisions/ADR-018-trust-and-safety-layer.md).
 - **Content pipelines** (A→D): [`docs/architecture.md`](docs/architecture.md).
 - **Editing this repo**: [`source-of-truth`](src/rules/source-of-truth.md) + [`agents-md-thin-root`](src/skills/agents-md-thin-root/SKILL.md).
 - **Consumer story** — `npx` + `scripts/install.sh`: [`README.md`](README.md).
-- **Personas** — 34 lenses (5 core + 24 specialists + 5 advisors): [`docs/personas.md`](docs/personas.md).
-- **Discovery** — workspaces/packs: [`ADR-013`](docs/decisions/ADR-013-discovery-frontmatter-contract.md) + [`customization`](docs/customization.md#workspaces--packs-discovery).
-- **Root & `agents/` layout** — `src/` = source ([`ADR-050`](docs/decisions/ADR-050-workspace-vs-package-root-boundary.md)); `agents/` contract: [`agents-layout`](docs/contracts/agents-layout.md).
+- **Personas** — 34 lenses (core + specialists + advisors): [`docs/personas.md`](docs/personas.md).
+- **Discovery** — workspaces/packs: [`ADR-013`](docs/decisions/ADR-013-discovery-frontmatter-contract.md) + [`customization`](docs/customization.md).
+- **Root & `agents/` layout** — `src/` = source ([`ADR-050`](docs/decisions/ADR-050-workspace-vs-package-root-boundary.md)); contract: [`agents-layout`](docs/contracts/agents-layout.md).
 - **Security** — [`SECURITY.md`](SECURITY.md); [`docs/threat-model.md`](docs/threat-model.md).
+- **Delegate & review**: subagents take independent-slice work, not serial; in a team (host-flag gated) the lead coordinates, teammates implement; no mutating session ends without neutral review — [`delegation-policy`](dist/agent-src/rules/delegation-policy.md).
 
 ## Emergency triage — when nothing else is reachable
 

package/CHANGELOG.md

@@ -312,6 +312,171 @@ Entry-shape contract: [`docs/contracts/CHANGELOG-conventions.md`](docs/contracts
 > that forces a new era split (`# Era: 9.28.x`, etc.) — see
 > [`docs/contracts/CHANGELOG-conventions.md § Era splits`](docs/contracts/CHANGELOG-conventions.md).
 
+## [9.29.0](https://github.com/event4u-app/agent-config/compare/9.28.0...9.29.0) (2026-08-09)
+
+### Release highlights
+
+<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
+- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 1a2dd51, 0304406, 1008212.
+- **Default changes + migration:** _auto-derived, rewrite before merge:_ commits naming a default, migration or migrate in 51088bd, 2590391, b7b4cb0.
+- **Security and correctness:** _none_
+- **Honest nulls:** _none_
+- **Known limitations:** _none_
+
+### Features
+
+* **team:** availability replaces the master switch; teams readiness ([a94a91a](https://github.com/event4u-app/agent-config/commit/a94a91a30b916909c391939320ae4fb2b04e0b31))
+* **council:** CLI-first shipped default, quorum, absent members, handoff ([51088bd](https://github.com/event4u-app/agent-config/commit/51088bdaaf3633c4918ea05182c5becf65593cf2))
+* **dispatch:** judgment ladder replaces the activation gate ([1a2dd51](https://github.com/event4u-app/agent-config/commit/1a2dd5177b02b9ca752588a022d8a72c6afe51f5))
+* **settings:** activation gates die, one audited incident switch survives ([0304406](https://github.com/event4u-app/agent-config/commit/0304406a536e29d66f44ce19f5f0187383b8af4e))
+* **ci:** lint_never_silent - no shipped guidance may direct a silent re-run ([c7b3d83](https://github.com/event4u-app/agent-config/commit/c7b3d8382ac34a992727c1a042cc65298e56adaa))
+* **self-repair:** fork-aware egress ladder, issue form, detector corpus gate ([5b50807](https://github.com/event4u-app/agent-config/commit/5b5080710e9800bbb4e1eec5773d9c5ff79de866))
+* **self-repair:** fork-aware egress, detector corpus gate, never-silent lint ([4e046aa](https://github.com/event4u-app/agent-config/commit/4e046aa5d992cbefa31717430bd05a9e37798f4f))
+* **rules:** emit Claude Code rules with the host-native paths key ([872c267](https://github.com/event4u-app/agent-config/commit/872c267589995668bfbfffdc2c0128b9d89532dd))
+* **forensics:** read-only forensic analyzers as a default-off pack (Phase 3) ([b7b4cb0](https://github.com/event4u-app/agent-config/commit/b7b4cb05e2247737786e96ff52cf4d739dff68c4))
+* **bench:** critic-protocol A/B result — no promotion, published both directions (Phase 2) ([bc0054b](https://github.com/event4u-app/agent-config/commit/bc0054b8406dc6fe280fcca7b10104547e2380b1))
+* **council:** critic_protocol config + pre-registered load_bearing A/B harness (Phase 2, pre-run) ([e75ae51](https://github.com/event4u-app/agent-config/commit/e75ae514b765205a2f86c5ffaae40a5c81523d87))
+* **hosts:** add worker_respawn to the host-capability manifest ([a30102d](https://github.com/event4u-app/agent-config/commit/a30102d0f30d197ced06248c5712722006032447))
+* **subagents:** emit the capsule at a budget watermark, in shadow ([572d280](https://github.com/event4u-app/agent-config/commit/572d28066be1871f43242056af175ddbd023002c))
+* **subagents:** add the CHECKPOINT capsule as the worker handoff shape ([8340f5e](https://github.com/event4u-app/agent-config/commit/8340f5e11219c296030084432e9f403818552df9))
+* **premortem:** four-part failure register + optional roadmap Pre-mortem section (Phase 1) ([da95e9e](https://github.com/event4u-app/agent-config/commit/da95e9e4880394ab06ea0aaf818e893c695d4657))
+
+### Bug Fixes
+
+* **build:** rebuild the committed install bundle for the settings teardown ([6d9e667](https://github.com/event4u-app/agent-config/commit/6d9e6672bee69178d0ce8d86bd574e248abca54b))
+* **spike:** escape the shape-key separator instead of a raw NUL byte ([1dd9a28](https://github.com/event4u-app/agent-config/commit/1dd9a281d5fc38ce228a04035a43a35b295114e5))
+* **self-repair:** resolve the four R2 completion-review findings ([3474bf7](https://github.com/event4u-app/agent-config/commit/3474bf797321a99e5a7dd5a484a70a8a8748add6))
+* **roadmap:** risk-register marker, allowed risk types, resolvable anchors ([f06f6ed](https://github.com/event4u-app/agent-config/commit/f06f6edb1f9f3b08c4763c542e789272f4dbd091))
+* **scorer:** repoint skill-selection scoring at the live skills tree ([589b2c3](https://github.com/event4u-app/agent-config/commit/589b2c3e11eaf64a32e7bc7269807b3a9af648a2))
+* **ci:** unlink the ADR-217 body link that can never resolve in the dist projection ([1008212](https://github.com/event4u-app/agent-config/commit/100821272c9254d4aae70876c9bfa65af67d1d4d))
+* **forensics:** review findings — schema-valid finding ids, fail-before-write, hermetic smoke test, honest config scope ([0509647](https://github.com/event4u-app/agent-config/commit/050964793ec76e0100199a59fefd5b8cc4ad59e4))
+* **release:** tolerate the concurrent tag-push race in step 8 ([049e8b2](https://github.com/event4u-app/agent-config/commit/049e8b24296a97f946c4597418cfd79457018e3c))
+* **hooks:** self-heal a stale hook bundle in preflight instead of blocking the push ([9256633](https://github.com/event4u-app/agent-config/commit/9256633996be6d86e09df8c288837a8970d456e7))
+
+### Documentation
+
+* **council:** describe the runtime responses artefact without the pruned path literal ([04e8a0f](https://github.com/event4u-app/agent-config/commit/04e8a0feecb2fc19326f9abf894cf49f38424c6b))
+* **roadmap:** always-on orchestration - verified claims, council cut, honest blockers ([d202556](https://github.com/event4u-app/agent-config/commit/d202556efa32376c4fc5fedba7fb95414cb4f4b4))
+* always-on doctrine reaches the always-loaded surfaces ([9eead89](https://github.com/event4u-app/agent-config/commit/9eead8923e604f584541afbdac6d1feac3b02e5c))
+* **review:** re-derive the context-manifest scope_hash for the re-bound round (contract 5 header-manifest agreement) ([2ebdb87](https://github.com/event4u-app/agent-config/commit/2ebdb87f0286a167d24cc26b3a658306274748c6))
+* **review:** add fix-commit refs to the four resolved R2 findings ([9adbf83](https://github.com/event4u-app/agent-config/commit/9adbf83bcb530db4d702d4ff9425f685124b8a2f))
+* **review:** re-bind R2 findings to the post-fix review scope (contract 2.1 in-place re-bind) ([752c29c](https://github.com/event4u-app/agent-config/commit/752c29cf11a66ded030bff60aeac45763c36c2ed))
+* **review:** R2 completion-review findings for feat/road-to-rule-delivery-integrity (1 medium, 3 low, all open) ([0267568](https://github.com/event4u-app/agent-config/commit/02675686ef102552a80ce35861e1c5c094fb3f31))
+* **roadmap:** close rule-delivery-integrity, migrate the measurement out ([2590391](https://github.com/event4u-app/agent-config/commit/25903915772394a776b069991e3d939bcf3f0e70))
+* **adr:** ADR-220 skill invocation attestation — specified, check deferred (Phase 4) ([c8f3dbb](https://github.com/event4u-app/agent-config/commit/c8f3dbb31762a7df7ef3abf7ef70f1e17741afa4))
+* **roadmap:** land phases 0 and 1 of worker-generation recycling ([06c7347](https://github.com/event4u-app/agent-config/commit/06c7347b49809a81b7ee169f42e3c742e5211812))
+* **claims:** pre-register the capsule trigger-arm comparison ([2acfc56](https://github.com/event4u-app/agent-config/commit/2acfc56982d257331243094d2a580ca4f5926c6c))
+
+### Chores
+
+* **roadmap:** close Phase 4 of road-to-rule-delivery-integrity ([5db59bc](https://github.com/event4u-app/agent-config/commit/5db59bc4410488eb22717c8d0606b8eca10bcfa4))
+* **roadmap:** park round-6 and worker-generation-recycling in later/ ([e5ebedc](https://github.com/event4u-app/agent-config/commit/e5ebedcd9ba0b3ddaba10938af74fcab9d79f03a))
+* **generated:** regenerate proof.md + CAPABILITIES.yaml for the 289th skill post-merge ([d0f348d](https://github.com/event4u-app/agent-config/commit/d0f348d0b75b507d10199941185969a633563f63))
+* **roadmap:** close Phase 5 + acceptance criteria — roadmap fully closed ([c993660](https://github.com/event4u-app/agent-config/commit/c9936607fe77e06f1b510a3ee3ccf8390f49a8d6))
+* **generated:** rebuild the install bundle for the settings-schema change ([5b1260d](https://github.com/event4u-app/agent-config/commit/5b1260de7b889a16e94a5e5d5bc6f22f23dc558e))
+* **generated:** regenerate proof.md for the new ledger entry ([76ab0a9](https://github.com/event4u-app/agent-config/commit/76ab0a9e1ccdb09e436f562c1cf8416989d921ef))
+
+Tests: 12438 (+297 since 9.28.0)
+
+## [9.28.0](https://github.com/event4u-app/agent-config/compare/9.27.0...9.28.0) (2026-08-09)
+
+### Release highlights
+
+<!-- Curated head: fill before merge, keep it under 10 lines, and leave `_none_` where it is genuinely the answer. The generated log below is unchanged. -->
+- **Behaviour changes:** _auto-derived, rewrite before merge:_ rule/schema diffs, breaking commits or removed public surface in 63825ba, 9cd21cb, ae6f30e, 3d684ef, 909235c, 103a22b +2 more.
+- **Default changes + migration:** _none_
+- **Security and correctness:** _none_
+- **Honest nulls:** _auto-derived, rewrite before merge:_ commits carrying an honest-null marker in 2837fb7.
+- **Known limitations:** _none_
+
+### Features
+
+* **hooks:** register the three orchestrator-discipline concerns ([b170fbc](https://github.com/event4u-app/agent-config/commit/b170fbc9c8a90bdb69ba97929a8c13b08c90ccb3))
+* **hooks:** advisory end-review-nudge concern on stop ([3d2c1a0](https://github.com/event4u-app/agent-config/commit/3d2c1a0bc1087960d634e1d489867da78069ed8c))
+* **hooks:** conditional delegation-nudge concern on user_prompt_submit ([761b793](https://github.com/event4u-app/agent-config/commit/761b793ad2e9a9371ade2272848e2d7aa856faae))
+* **hooks:** deterministic orchestration-record concern on post_tool_use ([36e24c9](https://github.com/event4u-app/agent-config/commit/36e24c936e8e05281220574fbe9e924bd787c152))
+* **host-capability:** committed registry for known hosts ([04e31f7](https://github.com/event4u-app/agent-config/commit/04e31f7c6274815db376fd545869f4bb80a3d225))
+* **cli:** four capability probes for the gaps that had none ([909235c](https://github.com/event4u-app/agent-config/commit/909235ce713beaafec0dc0560ae21d47fca3df2e))
+* **scripts:** measure the rule tokens a session actually receives ([406f986](https://github.com/event4u-app/agent-config/commit/406f98647fe3fca8a25cfa8f7a2e447f787bd5a6))
+* **install:** refuse to create a silently doubled rule corpus ([9f2608f](https://github.com/event4u-app/agent-config/commit/9f2608f8da62ccf4ba2873845e4117b61cb91280))
+* **rules:** detect when the rule corpus is delivered twice ([d9b6618](https://github.com/event4u-app/agent-config/commit/d9b6618c96f1cc0a328ac5e677ef16eb340b0c84))
+* **scripts:** SK-2 loaded-but-violated, and the 3-of-110 coverage that is the finding ([2837fb7](https://github.com/event4u-app/agent-config/commit/2837fb7c1f44b303f97a6eb61c497679f36020ae))
+* **conformance:** delivered rule payload by carrier, and the forward rate series ([78c19fd](https://github.com/event4u-app/agent-config/commit/78c19fdb1af6c02e81802da33f2e593e2599b9e1))
+* **scripts:** name the rules the two carriers deliver differently ([cc6c8fb](https://github.com/event4u-app/agent-config/commit/cc6c8fbd307e4dc65ee4716208cd50084b32cf36))
+* **wiring:** bind the self-repair concern and register its two CLI verbs ([a619cfc](https://github.com/event4u-app/agent-config/commit/a619cfc982965fb77a5c02f8480108be80661c92))
+* **rules:** the self-repair loop as an always-loaded obligation ([cb8d560](https://github.com/event4u-app/agent-config/commit/cb8d56076ac09b351a565216b98a68789acd5e60))
+* **self-repair:** detect agent defects and queue them as fixable records ([76b95ec](https://github.com/event4u-app/agent-config/commit/76b95ec7a524d482f333b701015f0a490cc4907d))
+* **gate:** fail when no always-loaded rule carries the council user-global fact ([a56f28b](https://github.com/event4u-app/agent-config/commit/a56f28bf436c24b8f803711fa546ba713412c5c3))
+* **rules:** carry the council user-global fact on the always-loaded surface ([36a0e4c](https://github.com/event4u-app/agent-config/commit/36a0e4cc6af6e83a47d120718a0fed7b5abb13cb))
+* **gates:** refuse a push from a branch behind its base, asked of the remote ([bbdac53](https://github.com/event4u-app/agent-config/commit/bbdac539f5f3f2c8e86113f2a6a3a184a253a239))
+* **report:** skill-activation census — the unmeasurable half, measured ([5719fd0](https://github.com/event4u-app/agent-config/commit/5719fd09e723bc7988fc0e90719c46d8a5f222f1))
+
+### Bug Fixes
+
+* **routing-doctor:** report whether the platform was observed or assumed ([2c176b2](https://github.com/event4u-app/agent-config/commit/2c176b212021bc05421233cb724677d4a1e44697))
+* **routing-doctor:** resolve host capabilities through the committed registry ([9875177](https://github.com/event4u-app/agent-config/commit/9875177b73b65810eaae9e2c1a8f2c66c8648da3))
+* **hooks:** harden transcript read, full session key, mutation-measure flag ([c908bbf](https://github.com/event4u-app/agent-config/commit/c908bbf41c944a9564dfd0efc9198472693a7f36))
+* **ci:** ADR frontmatter and three consumer paths the reference gate read as repo paths ([9cd21cb](https://github.com/event4u-app/agent-config/commit/9cd21cb4182c205205b49f352c0a1745e11ff33e))
+* **build:** rebuild the install bundle for the settings-cascade change ([dbcb658](https://github.com/event4u-app/agent-config/commit/dbcb658c51a31b7af028f0d745db4d23b3b5bf35))
+* **settings:** four adjacent path defects that made the intuitive file wrong ([ae6f30e](https://github.com/event4u-app/agent-config/commit/ae6f30ee29c3e79bff20501adbfd394489de53df))
+* **build:** rebuild the committed install bundle for the install.ts change ([0d362ce](https://github.com/event4u-app/agent-config/commit/0d362ce2242debe7fffc798e457fcad02a0e6426))
+* **roadmap:** conform the Risk Register to the R1 gate grammar ([8a4f388](https://github.com/event4u-app/agent-config/commit/8a4f388c67d5351bbea7c76faf631dbd40a5aa29))
+* **roadmap:** inline the council provenance instead of linking a path that rots ([5268154](https://github.com/event4u-app/agent-config/commit/5268154d686717d7ff64deb059c78779607c27b6))
+* **skills:** lead nine descriptions with what they do, not with the guard ([bee0a72](https://github.com/event4u-app/agent-config/commit/bee0a72f90c97c67b57a949ac3c0d85756ad4db8))
+* **scripts:** repair the round-2 review findings, incl. a second inverted polarity ([6ab06f7](https://github.com/event4u-app/agent-config/commit/6ab06f759c02774f02f37dd5b85aaf6009da44d4))
+* **scripts:** repair all 14 R2 completion-review findings ([0ee1275](https://github.com/event4u-app/agent-config/commit/0ee1275af82ae1dfbe1f0e6eaa48337e71905aa1))
+* **rules:** condense both new rules and re-anchor the token baseline ([103a22b](https://github.com/event4u-app/agent-config/commit/103a22b10c8830e87bf28ab0dddebf02d6354f85))
+* **tests:** name the retired container by role, not by its dead literal path ([d7147ce](https://github.com/event4u-app/agent-config/commit/d7147ce2f4940c7095c94c91e731243a6c0ee495))
+* **cli:** list council:status in usage(), the trunk was red without it ([1ca2ad0](https://github.com/event4u-app/agent-config/commit/1ca2ad00648533595d1d48794fd551c6e4e437d6))
+* **tests:** two suites left directories in the tracked tree, and a third gate read them ([df70f14](https://github.com/event4u-app/agent-config/commit/df70f1436a325d0da2167f86ea464ee4ea074556))
+* **council:** the refusal messages named the wrong config file ([62c6872](https://github.com/event4u-app/agent-config/commit/62c6872fe4647bc057835466414268cbf6da6971))
+* **council:** stop the agent inferring council availability from a project file ([45f46b5](https://github.com/event4u-app/agent-config/commit/45f46b521ec4cb16a6d3d22c8a0db3009a68ea84))
+* **conformance:** one trigger definition, and the count it was hiding ([8e131b4](https://github.com/event4u-app/agent-config/commit/8e131b41371a25255193702a23fd5820490db415))
+* **hooks:** block what bash runs, not what the splitter finds readable ([bbc9b11](https://github.com/event4u-app/agent-config/commit/bbc9b11a949e2b6aad074fa11723d75609423b23))
+
+### Documentation
+
+* **review:** re-bind the R2 findings scope after the main merge ([8c85ea0](https://github.com/event4u-app/agent-config/commit/8c85ea05c707c0a379d3f8caf7c8c53d09df05fe))
+* **review:** re-bind the R2 findings after the fix pass ([6728b67](https://github.com/event4u-app/agent-config/commit/6728b679853a9c4aea691d8348d060a4c892469d))
+* **contexts:** carry the three open orchestrator-carrier decisions forward ([3c17c11](https://github.com/event4u-app/agent-config/commit/3c17c11f7246b0f2eb95e3e5904e9b43c0270b07))
+* **review:** R2 completion-review findings for the closeout branch ([8217034](https://github.com/event4u-app/agent-config/commit/82170344f6fef8457c22ce125aa5adf51801a9fb))
+* **roadmap:** close orchestrator-discipline-carriers on measured evidence ([e01b6f2](https://github.com/event4u-app/agent-config/commit/e01b6f284affa9bab5ec323e1c9c415962366fb7))
+* **roadmap:** post-merge council pass, fd47df62 disposition, calibration biases ([ed8710d](https://github.com/event4u-app/agent-config/commit/ed8710d47bab07b4e428eac8f18b5560315d204e))
+* **hooks:** correct stale cowork binding claim in delegation-nudge header ([d2f6e99](https://github.com/event4u-app/agent-config/commit/d2f6e99bf1a0ac11d0365f7854cab9177ff6692f))
+* **roadmap:** orchestrator-discipline-carriers - measured defect, council pass, honest exits ([9a1798c](https://github.com/event4u-app/agent-config/commit/9a1798c6692f4c99c8cfcd418dbd2a9b1178b9cc))
+* state the delegation and end-review obligations where sessions read ([63825ba](https://github.com/event4u-app/agent-config/commit/63825ba757524bbded04cf58e787585b4e3699e9))
+* **rules:** make the capability answers reachable without knowing they exist ([3d684ef](https://github.com/event4u-app/agent-config/commit/3d684ef1403541fb707ec2a47026320dc734ae82))
+* **roadmap:** the delivery-integrity roadmap, its council pass, and where it halts ([cd33314](https://github.com/event4u-app/agent-config/commit/cd333144c3a6636dd4209aa3c24e22b12484de77))
+* **evidence:** three measurements behind the delivery findings ([cdf5b3f](https://github.com/event4u-app/agent-config/commit/cdf5b3f45165d374148ff87a3ba3240216c0d167))
+* **contracts:** the router is compile-time, and no host reads it at runtime ([b1fdc72](https://github.com/event4u-app/agent-config/commit/b1fdc72a152d9d8250e713d8b5b8b482e3bd1acf))
+* **roadmaps:** record what the two review rounds cost and the contract step I got wrong ([1e51900](https://github.com/event4u-app/agent-config/commit/1e51900fb143eb939bd8917d982ce76ff9fe6252))
+* **reviews:** commit the binding completion-review artefact, re-bound to the shipping scope ([82e5909](https://github.com/event4u-app/agent-config/commit/82e5909e6ea5289b5f856f6343d38408e653b84b))
+* **roadmaps:** close round 6 phases 3-4, and record the premises that came out false ([dc9b6b0](https://github.com/event4u-app/agent-config/commit/dc9b6b0a68ae3df99b1eee37d65bfc54edfd2d18))
+* **gates:** the unregistered-emitter backstop covers one of the two emit shapes ([a032f0c](https://github.com/event4u-app/agent-config/commit/a032f0ccc2aceabf15ea92e1fcc86aa439d76e5f))
+* **memory:** say which repo the intake sharing-boundary line describes ([466bdfc](https://github.com/event4u-app/agent-config/commit/466bdfcd050e58c47bef38a29fe7f24be59ffb51))
+* **roadmap:** twelve places the agent must guess whether a capability exists ([9453c16](https://github.com/event4u-app/agent-config/commit/9453c162fd78f31f257eaea4dd5db68ff4513056))
+* **roadmap:** the census, round 5 accounting, and a criterion that contradicted its own cancelled step ([3bac223](https://github.com/event4u-app/agent-config/commit/3bac22325f16287511c0f8dc3345a798cb0d47f6))
+* **archive:** file superseded substrate-adoption roadmap ([f435453](https://github.com/event4u-app/agent-config/commit/f435453d3faa882a657b21475f467b13b332831e))
+* **roadmap:** record the third #1208 defect, found by PR #1211 not by the review ([25d2d12](https://github.com/event4u-app/agent-config/commit/25d2d12e6f1c7ea56e7e99ba3fffd294638c3be5))
+* **roadmap:** fold the challenge pass and four council verdicts into round 6 ([01f3286](https://github.com/event4u-app/agent-config/commit/01f3286d91ee34d155a175ce687679181602f838))
+
+### Refactoring
+
+* **scripts:** one definition of the cross-carrier rule comparison ([0a22a90](https://github.com/event4u-app/agent-config/commit/0a22a901fc95ed13e28afc44ce9f84fba9c7c5e2))
+
+### Chores
+
+* **tests:** drop dead subprocess scaffolding the changed-files lint surfaced ([2f786b9](https://github.com/event4u-app/agent-config/commit/2f786b91c31724561761a9489d118c3ccb50c7a6))
+* **index:** regenerate index and catalog for the nine rewritten descriptions ([593330f](https://github.com/event4u-app/agent-config/commit/593330ff34e60711b40562b38e8eb880b45cc6c8))
+* **tasks:** register the two new advisory reports as named tasks ([033732c](https://github.com/event4u-app/agent-config/commit/033732c56499f081ae614eed37a3fe43657bc01f))
+* **generated:** reproject the council-availability rule after the probe rewrite ([9bac533](https://github.com/event4u-app/agent-config/commit/9bac533be54adad9f1d5bbe4b3965cbcf3c010eb))
+* **generated:** counts, index, catalog, router, proof for the self-repair rule ([83e81ae](https://github.com/event4u-app/agent-config/commit/83e81ae48dc463d17f82edd89edd821f8b7fdb35))
+* **generated:** router_rules count 108 -> 109 for the new routed rule ([bf00135](https://github.com/event4u-app/agent-config/commit/bf00135202a3ac84814a0324947dbecc57172bfd))
+* **generated:** regenerate index, catalog, and router for the new rule ([188c434](https://github.com/event4u-app/agent-config/commit/188c4346428c7754b434bc86c4c3dfa8c8b203ee))
+* **budgets:** record the 88 to 89 CLI verb move for council:status ([fa7404b](https://github.com/event4u-app/agent-config/commit/fa7404bf9483d241cd5d245cbc872cfd5406d851))
+
+Tests: 12141 (+391 since 9.27.0)
+
 ## [9.27.0](https://github.com/event4u-app/agent-config/compare/9.26.0...9.27.0) (2026-08-07)
 
 ### Release highlights

package/README.md

@@ -4,7 +4,7 @@
 
 [![Smoke](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke.yml) [![Public install smoke (3 OS × 2 Node)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml/badge.svg)](https://github.com/event4u-app/agent-config/actions/workflows/smoke-public-install.yml) [![npm](https://img.shields.io/npm/v/@event4u/agent-config?style=flat-square&label=npm&color=orange)](https://www.npmjs.com/package/@event4u/agent-config) [![agent-config MCP server](https://glama.ai/mcp/servers/event4u-app/agent-config/badges/score.svg)](https://glama.ai/mcp/servers/event4u-app/agent-config) [![MCP Toplist](https://mcptoplist.com/badge/glama%2Fevent4u-app%2Fagent-config.svg)](https://mcptoplist.com/server/glama%2Fevent4u-app%2Fagent-config)
 
-[![Skills](https://img.shields.io/badge/Skills-288-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-114-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-196-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-104-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
+[![Skills](https://img.shields.io/badge/Skills-289-orange?style=flat-square)](dist/agent-src/skills/) [![Rules](https://img.shields.io/badge/Rules-116-orange?style=flat-square)](dist/agent-src/rules/) [![Commands](https://img.shields.io/badge/Commands-196-orange?style=flat-square)](dist/agent-src/commands/) [![Guidelines](https://img.shields.io/badge/Guidelines-104-orange?style=flat-square)](docs/guidelines/) [![Personas](https://img.shields.io/badge/Personas-29-orange?style=flat-square)](dist/agent-src/personas/) [![Advisors](https://img.shields.io/badge/Advisors-5-orange?style=flat-square)](dist/agent-src/personas/advisors/)
 
 **Try it in 30 seconds** — drop one read-only subagent into any repo and watch it gate "done": `@production-validator check this branch is actually done`. No wizard, no lock-in, nothing else installed — the [30-second wedge ↓](#quickstart) is the whole first step. Start at the proof, not the catalog: **[event4u-app.github.io/agent-config/proof/](https://event4u-app.github.io/agent-config/proof/)**.
 

package/agents/templates/.ai-council.yml.example

@@ -65,21 +65,30 @@ defaults:
   #            reason. `manual` is NEVER part of the auto chain (it would
   #            always "succeed" and silently turn every call into a
   #            copy-paste request) — it stays an explicit opt-in.
-  #            OPT-IN: `auto` is not the shipped default. Switching to it
-  #            moves spend from per-token dollars onto your subscription
-  #            quota, so it is a decision you take, not one you inherit.
-  #            Set `cli_call_budget` below before you flip it.
+  #            THE SHIPPED DEFAULT (road-to-always-on-orchestration
+  #            Phase 3.1 — CLI-first is the owner-set transport doctrine):
+  #            ride the vendor CLI under your subscription first, fall to
+  #            the metered API only where no CLI resolves. Pin `manual` /
+  #            `api` / `cli` here (or per-member below) to override it.
+  #            `cli_call_budget` below ships populated with a generous
+  #            per-provider guard so this default never runs your
+  #            subscription quota uncapped.
   #
   # Precedence: invocation flag > per-member mode > defaults.mode >
   # built-in. Two DIFFERENT defaults sit at the bottom, and they are not
   # the same thing:
-  #   · omit `defaults.mode` entirely and the loader fills "api" — that is
-  #     what every real config file observes.
+  #   · omit `defaults.mode` entirely and the loader fills "auto" (was
+  #     "api" before the Phase 3.1 flip) — that is what every real config
+  #     file observes.
   #   · the resolver's built-in fallback, reached only when no layer at all
   #     supplies a mode (a settings dict handed straight to the resolver,
   #     no config file involved), is "manual" — free, no key. A caller who
-  #     named no transport has not asked to spend money.
-  mode: api
+  #     named no transport has not asked to spend money. This did NOT flip
+  #     alongside the loader default: `auto` still resolves to a paying
+  #     rung when no CLI is usable, so flipping this too would let a
+  #     caller that bypassed the config file spend money on a preference
+  #     it never stated.
+  mode: auto
 
   # Default number of debate rounds per /council invocation.
   #
@@ -179,26 +188,34 @@ debate:
     threshold_usd: 1.00
     show_per_member: true
 
-# Per-day call-count guard for `mode: cli` members. The standard
-# `cost_budget` block skips CLI calls because they are billable=False —
-# but provider subscriptions still carry their own quotas (Claude Pro
-# 5h windows, ChatGPT Plus message caps, Gemini free-tier per-day
-# limits). Opt into a per-provider cap; default unset = unlimited from
-# this loader's perspective.
+# Per-day call-count guard for `mode: cli` / `mode: auto` members. The
+# standard `cost_budget` block skips CLI calls because they are
+# billable=False — but provider subscriptions still carry their own quotas
+# (Claude Pro 5h windows, ChatGPT Plus message caps, Gemini free-tier
+# per-day limits). The loader SHIPS EVERY known provider populated at
+# 50/day by default (road-to-always-on-orchestration Phase 3.4) — a config
+# that omits this block entirely, or omits one provider from the map
+# below, still gets that floor for the missing entries. It is a GUARD
+# against an always-on `auto` default silently exhausting a subscription's
+# plan quota, not a brake — override a provider explicitly to tighten it
+# (worked example below) or loosen it further.
 #
 # Counter state persists at ~/.event4u/agent-config/cli-calls.json
 # with daily UTC reset. Wired by Phase 1 of the CLI-transport roadmap.
 #
-# SHIPPED POPULATED, deliberately: `mode: auto` prefers the cli rung, so
-# shipping that path with no quota guard would miss the point. The caps
-# below are sized from the worst case one invocation can cost — a deep
-# debate is at most `debate_max_rounds` (4) calls per member — so 24
-# permits roughly six full deep debates per provider per day before the
-# guard fires. That is well inside a Pro-tier window while still bounding
-# a runaway loop, and failures count too (a wedged CLI cannot burn the
-# whole budget retrying). Gemini's free tier is the tightest, hence the
-# lower cap. Raise them if you consult heavily; `council:quota` reports
-# usage and `council:quota --reset` clears the day.
+# The three entries below TIGHTEN the 50/day floor, deliberately: `mode:
+# auto` prefers the cli rung, so a config that consults heavily wants a
+# number sized to its own worst case, not the generic guard. Sized from
+# the worst case one invocation can cost — a deep debate is at most
+# `debate_max_rounds` (4) calls per member — so 24 permits roughly six
+# full deep debates per provider per day before the guard fires. That is
+# well inside a Pro-tier window while still bounding a runaway loop, and
+# failures count too (a wedged CLI cannot burn the whole budget retrying).
+# Gemini's free tier is the tightest, hence the lower cap. xai and
+# perplexity are left unlisted here and so keep the loader's 50/day floor —
+# raise or lower any of the five if you consult heavily or want a tighter
+# rein; `council:quota` reports usage and `council:quota --reset` clears
+# the day.
 cli_call_budget:
   max_calls_per_day:
     anthropic: 24
@@ -207,6 +224,20 @@ cli_call_budget:
   # Warn once usage crosses this fraction of a cap (0..1).
   warn_at: 0.8
 
+# Quorum for a council pass to CONCLUDE (road-to-always-on-orchestration
+# Phase 3.3). Default "majority" resolves to ceil(n / 2) enabled members —
+# a SIMPLE majority, deliberately not "more than half": at n=2 that is
+# 1-of-2, because requiring 2-of-2 turns any single absent member into a
+# deadlocked release gate. Below quorum the pass is `inconclusive` and, at
+# a release gate, HOLDS for a human — never silently downgraded to
+# advisory. Set an explicit integer to require a fixed count instead:
+#
+#   quorum: 2
+#
+# See docs/contracts/ai-council-config.md § Quorum for the full resolver
+# contract and the manifest.json / rendered-report fields it feeds.
+quorum: majority
+
 # Per-member configuration — you decide what may spend; detection tells
 # you what is already here.
 #

package/dist/agent-src/commands/analyze/conformance.md

@@ -82,6 +82,30 @@ is exactly why it is trustworthy and exactly why it is not sufficient.
 
 `--scan-only` stops here.
 
+The report also carries the **delivered rule payload** split by carrier (project
+projection vs machine-global install, chars/4) and the store's **language-pin
+rate** against the 9.1-39.2 % band M5 observed — round-6 Phase 4.3/4.5. Two
+readings of that block, both deliberate:
+
+- The payload is measured from the carriers **as they stand at scan time**, never
+  per session. A transcript records no system or tools field and the carriers
+  change under the sessions, so a per-session figure would be a fabrication.
+- The band verdict is withheld below 1 978 assistant turns — the smallest corpus
+  the band was derived from — so it reports on behaviour rather than on corpus
+  size.
+
+```bash
+agent-config conformance:behavior --record            # append to the default series
+agent-config conformance:behavior --record <path>     # or a path you choose
+```
+
+`--record` is the forward capture: one line per run into the gitignored
+`agents/runtime/state/conformance-rates.jsonl`, keyed by a **digest** of the
+store path rather than the path itself (the real slug carries a real name and
+often a customer identifier). The record has no field able to hold a path, a
+prompt, or a session id. Without it the project-identity variable cannot be
+recovered later, which is why cancelling the volume test required adding it.
+
 ### 2 — Read the transcripts (subagent fan-out)
 
 The scan cannot see a rule that has no gate: an ask handed over as a trailing

package/dist/agent-src/commands/cost/report.md

@@ -159,8 +159,8 @@ If no orchestration lines exist yet (telemetry capture not yet running or
 no delegated dispatches this month), surface:
 
 > No orchestration telemetry yet — subagent dispatches begin writing to
-> `agents/runtime/state/audit/YYYY-MM.jsonl` once `subagents.enabled: true`
-> and a dispatch runs.
+> `agents/runtime/state/audit/YYYY-MM.jsonl` once a dispatch runs (always-on
+> orchestration: the layer has no per-run on/off setting any more).
 
 Skip this step entirely if the user did not ask about orchestration telemetry
 and there is no `agents/runtime/state/audit/` directory.

package/dist/agent-src/commands/team/adversarial.md

@@ -29,11 +29,11 @@ attacker — a second strong model with repo access instead of the host model
 critiquing itself. Use it as the **escalation rung**: single-model
 self-review found nothing, or the stakes are high.
 
-### 1. Gate — `ai_team.enabled`
+### 1. Gate — `/team` availability
 
-Read `ai_team.enabled` from `.agent-settings.yml`. Missing or `false` →
-print the enable pointer from `/team` (master) § "Default-off gate" and
-**STOP**.
+Run the availability check from `/team` (master) § "Availability gate":
+codex CLI + auth, and `emergency.orchestration_halt`. Either check fails →
+print the matching block and **STOP**.
 
 ### 2. Gate — plugin presence (fail closed)
 
@@ -73,12 +73,13 @@ on quota exhaustion surface the transport's refusal, do not retry.
 ## Output format
 
 - The plugin's adversarial findings, verbatim.
-- Gate failures print exactly one block (enable pointer or fail-closed
-  block) and stop.
+- Gate failures print exactly one block (availability/halt block or
+  fail-closed block) and stop.
 
 ## Do NOT
 
-- Do NOT run when `ai_team.enabled` is false — enable pointer, stop.
+- Do NOT run when `/team` is unavailable (codex CLI/auth missing) or
+  halted — matching block, stop.
 - Do NOT reimplement the adversarial pass inline when the plugin is absent —
   fail closed with the doctor pointer.
 - Do NOT skip the free first rung reflexively — the single-model

package/dist/agent-src/commands/team/delegate.md

@@ -27,16 +27,16 @@ repo. On Claude Code hosts it delegates to the official plugin's
 `/codex:rescue`. This is the **only wrapper that delegates write access**,
 so it carries a second opt-in on top of the family gate.
 
-### 1. Gate — `ai_team.enabled`
+### 1. Gate — `/team` availability
 
-Read `ai_team.enabled` from `.agent-settings.yml`. Missing or `false` →
-print the enable pointer from `/team` (master) § "Default-off gate" and
-**STOP**.
+Run the availability check from `/team` (master) § "Availability gate":
+codex CLI + auth, and `emergency.orchestration_halt`. Either check fails →
+print the matching block and **STOP**.
 
 ### 2. Gate — `ai_team.allow_delegate` (second opt-in)
 
 Read `ai_team.allow_delegate`. Missing or `false` (the shipped default) →
-refuse with the enable pointer and **STOP**:
+refuse with the opt-in pointer and **STOP**:
 
 > `/team delegate` is disabled (`ai_team.allow_delegate: false`, the
 > default). It is the only team-mode wrapper that hands **write access** to
@@ -44,15 +44,15 @@ refuse with the enable pointer and **STOP**:
 >
 > ```yaml
 > ai_team:
->   enabled: true
 >   allow_delegate: true
 > ```
 >
 > Key reference: `docs/contracts/ai-team-config.md`.
 
 Deterministic mirror of gates 1+2: `npx tsx src/scripts/ai_team/team_dispatch.ts
---delegate-gate` exits non-zero (with the pointer on stderr) unless BOTH flags
-are true — run it instead of hand-parsing the YAML when a shell is available.
+--delegate-gate` exits non-zero (with the pointer on stderr) unless `/team`
+is available AND `allow_delegate` is true — run it instead of hand-parsing
+the YAML when a shell is available.
 
 ### 3. Gate — plugin presence (fail closed)
 
@@ -91,14 +91,15 @@ opens a PR on top of them.
 ## Output format
 
 - The plugin's rescue/delegation result, verbatim.
-- Gate failures print exactly one block (enable pointer, allow_delegate
-  refusal, or fail-closed block) and stop.
+- Gate failures print exactly one block (availability/halt block,
+  allow_delegate refusal, or fail-closed block) and stop.
 
 ## Do NOT
 
-- Do NOT run when `ai_team.enabled` is false — enable pointer, stop.
+- Do NOT run when `/team` is unavailable (codex CLI/auth missing) or
+  halted — matching block, stop.
 - Do NOT run when `ai_team.allow_delegate` is false — refusal block, stop.
-  Never treat `enabled: true` alone as delegate authorization.
+  Never treat availability alone as delegate authorization.
 - Do NOT reimplement the worker inline when the plugin is absent — fail
   closed with the doctor pointer.
 - Do NOT commit, push, or open a PR over the worker's edits — review is the

package/dist/agent-src/commands/team/review.md

@@ -6,7 +6,7 @@ argument-hint: "[--background]"
 pack: meta
 tier: 2
 visibility: internal
-description: Thin wrapper — cross-model review of the current diff via the official plugin (/codex:review). Gated on ai_team.enabled; fails closed when the plugin is absent.
+description: Thin wrapper — cross-model review of the current diff via the official plugin (/codex:review). Gated on /team availability (codex CLI + auth); fails closed when the plugin is absent.
 cluster: team
 sub: review
 suggestion:
@@ -26,11 +26,11 @@ Thin wrapper: cross-model review of the current change. On Claude Code hosts
 it delegates verbatim to the official plugin's `/codex:review` — this wrapper
 owns only the governance gates around it.
 
-### 1. Gate — `ai_team.enabled`
+### 1. Gate — `/team` availability
 
-Read `ai_team.enabled` from `.agent-settings.yml`. Missing or `false` →
-print the enable pointer from `/team` (master) § "Default-off gate" and
-**STOP**. No plugin probe, no partial run.
+Run the availability check from `/team` (master) § "Availability gate":
+codex CLI + auth, and `emergency.orchestration_halt`. Either check fails →
+print the matching block and **STOP**. No plugin probe, no partial run.
 
 ### 2. Gate — plugin presence (fail closed)
 
@@ -65,12 +65,13 @@ refusal, do not retry.
 ## Output format
 
 - The plugin's review, verbatim.
-- Nothing else on success; gate failures print exactly one block (enable
-  pointer or fail-closed block) and stop.
+- Nothing else on success; gate failures print exactly one block
+  (availability/halt block or fail-closed block) and stop.
 
 ## Do NOT
 
-- Do NOT run when `ai_team.enabled` is false — enable pointer, stop.
+- Do NOT run when `/team` is unavailable (codex CLI/auth missing) or
+  halted — matching block, stop.
 - Do NOT reimplement the review inline when the plugin is absent — fail
   closed with the doctor pointer.
 - Do NOT edit files, commit, push, or open a PR — this wrapper is read-only.

package/dist/agent-src/commands/team/status.md

@@ -5,7 +5,7 @@ disable-model-invocation: true
 pack: meta
 tier: 2
 visibility: internal
-description: Thin wrapper — plugin job status via /codex:status plus a quota block (shared openai counter vs team + council ceilings). Gated on ai_team.enabled; fails closed without the plugin.
+description: Thin wrapper — plugin job status via /codex:status plus a quota block (shared openai counter vs team + council ceilings). Gated on codex CLI/auth availability; fails closed without the plugin.
 cluster: team
 sub: status
 suggestion:
@@ -25,11 +25,11 @@ Thin wrapper: team-mode status. On Claude Code hosts it delegates to the
 official plugin's `/codex:status` and appends **our** quota block —
 the one piece of state the plugin does not know about.
 
-### 1. Gate — `ai_team.enabled`
+### 1. Gate — `/team` availability
 
-Read `ai_team.enabled` from `.agent-settings.yml`. Missing or `false` →
-print the enable pointer from `/team` (master) § "Default-off gate" and
-**STOP**.
+Run the availability check from `/team` (master) § "Availability gate":
+codex CLI + auth, and `emergency.orchestration_halt`. Either check fails →
+print the matching block and **STOP**.
 
 ### 2. Gate — plugin presence (fail closed)
 
@@ -102,12 +102,13 @@ compatibility).
   ceilings + per-path OPEN/BLOCKED verdict).
 - Any `team.gate: BLOCK n/N` ledger lines, verbatim, after the quota
   block — only when present.
-- Gate failures print exactly one block (enable pointer or fail-closed
-  block) and stop.
+- Gate failures print exactly one block (availability/halt block or
+  fail-closed block) and stop.
 
 ## Do NOT
 
-- Do NOT run when `ai_team.enabled` is false — enable pointer, stop.
+- Do NOT run when `/team` is unavailable (codex CLI/auth missing) or
+  halted — matching block, stop.
 - Do NOT fabricate a count when the counter file is unreadable — print
   `Quota: unavailable (<reason>)` instead of a guessed number.
 - Do NOT write to `cli-calls.json` — the transport owns the counter; this