@event4u/agent-config 9.8.0 → 9.10.0

package/dist/agent-src/skills/terraform/SKILL.md

@@ -111,8 +111,8 @@ Used for workers and schedulers:
 
 ### GitHub OIDC IAM role
 
-Each env has a GitHub IAM role with:
-- OIDC trust policy (scoped to repo + env)
+Each environment has a GitHub IAM role with:
+- OIDC trust policy (scoped to repo + environment)
 - Policies for ECR push/pull, ECS deployment, Secrets Manager read, CloudWatch logs
 
 ## Output format

package/dist/agent-src/skills/terragrunt/SKILL.md

@@ -17,7 +17,7 @@ Use this skill when working with Terragrunt configurations (`.hcl` files), manag
 
 ## Procedure: Write Terragrunt config
 
-1. Read the `root.hcl` in the target env (`environments/pro/root.hcl` or `environments/sta/root.hcl`).
+1. Read the `root.hcl` in the target environment (`environments/pro/root.hcl` or `environments/sta/root.hcl`).
 2. Check existing `terragrunt.hcl` files in sibling directories for patterns.
 3. Read the target module's `variables.tf` to understand required inputs.
 
@@ -41,7 +41,7 @@ environments/
 
 ## Root configuration (`root.hcl`)
 
-The root HCL defines shared settings for all modules in an env:
+The root HCL defines shared settings for all modules in an environment:
 
 ### Environment variables
 
@@ -55,9 +55,9 @@ locals {
 }
 ```
 
-- `.env.yaml` — committed, shared env config
+- `.env.yaml` — committed, shared environment config
 - `.env.local.yaml` — gitignored, local overrides (AWS profiles, etc.)
-- Real env variables take precedence over file values.
+- Real environment variables take precedence over file values.
 
 ### Remote state
 
@@ -106,7 +106,7 @@ Each module directory contains a `terragrunt.hcl` that:
 1. **Loads module-specific variables** from a YAML file
 2. **Includes the root config** for backend and providers
 3. **Points to the Terraform module source**
-4. **Declares deps** on other modules
+4. **Declares dependencies** on other modules
 5. **Passes inputs** by merging dependency outputs with local variables
 
 ### Example pattern
@@ -188,19 +188,19 @@ devbox run d           # terragrunt destroy
 
 ## Output format
 
-1. Terragrunt HCL files with DRY env configuration
+1. Terragrunt HCL files with DRY environment configuration
 2. Dependency graph and remote state references
 
 ## Auto-trigger keywords
 
 - Terragrunt
-- multi-env
+- multi-environment
 - DRY config
 - remote state
 
 ## Gotcha
 
-- Terragrunt `dependency` blocks create implicit ordering — circular deps cause cryptic errors.
+- Terragrunt `dependency` blocks create implicit ordering — circular dependencies cause cryptic errors.
 - Don't duplicate Terraform variables in terragrunt.hcl — use `inputs` to pass them through.
 - The model tends to hardcode values that should come from `include` blocks — use DRY patterns.
 

package/dist/agent-src/skills/testing-anti-patterns/process-anti-patterns.md

@@ -61,7 +61,7 @@ the rationalization, then reject it:
 
 ## Provenance
 
-- Adapted from an external reference `testing/anti-patterns.md`.
+- Adapted from an external reference (internal provenance, redacted).
 - Council convergence (anthropic/claude-sonnet-4-5 + openai/gpt-4o,
   2026-05-07): both members ADOPT — the catalogue surfaces specific
   rationalization patterns that would otherwise leak past code review.

package/dist/agent-src/skills/threat-modeling/SKILL.md

@@ -15,16 +15,17 @@ packs:
 # threat-modeling
 
 
-> **Grounded corpus (Tier-1 consultation):** ground surface → threats →
-> controls before enumerating from memory — `./scripts-run
-> <skills-root>/corpus-grounding/scripts/ground ground --manifest
-> <skills-root>/threat-modeling/data/manifest.json "<surface description>"`
-> returns surface class, ATT&CK/CWE-cited threats, required controls, and
-> negative tests, with confidence + evidence-gap. Propose grounded
-> findings; human confirms. Corpus: [`data/threats.csv`](data/threats.csv)
-> (MITRE ATT&CK v16 / OWASP ASVS-derived; owner + cadence in the manifest).
-
-> You are a reviewer specialized in **pre-impl threat analysis**.
+> **Grounded corpus (Tier-1 consultation):** before enumerating from
+> memory, ground surface → threats → controls in the adopted corpus —
+> `./scripts-run <skills-root>/corpus-grounding/scripts/ground ground
+> --manifest <skills-root>/threat-modeling/data/manifest.json
+> "<surface description>"` returns the surface class, ATT&CK/CWE-cited
+> threats, required controls, and negative tests, with confidence +
+> evidence-gap. Propose grounded findings; the human confirms. Corpus:
+> [`data/threats.csv`](data/threats.csv) (MITRE ATT&CK v16 / OWASP
+> ASVS-derived, owner + cadence in the manifest).
+
+> You are a reviewer specialized in **pre-implementation threat analysis**.
 > Your only job is to produce a compact threat model for a planned change —
 > actors, assets, trust boundaries, abuse cases, and the minimum controls
 > the implementer must add. You do **not** audit existing code end-to-end,
@@ -95,7 +96,9 @@ OWASP bullets unless you can anchor them in a concrete file or line.
 
 ### 3b. STRIDE coverage check
 
-Sweep the six STRIDE categories once against the change so no threat class is silently skipped. Each row names the question + control family the suite already teaches — anchor any hit in a concrete file per § 3.
+Sweep the six STRIDE categories once against the change so no threat class
+is silently skipped. Each row names the question to ask and the control
+family the suite already teaches — anchor any hit in a concrete file per § 3.
 
 | STRIDE category | Ask about this change | Control family (suite reference) |
 |---|---|---|
@@ -106,7 +109,8 @@ Sweep the six STRIDE categories once against the change so no threat class is si
 | **D**enial of service | Can this path be made expensive or unbounded by an attacker? | Rate limiting + bounded queries/uploads — [`security-audit`](../security-audit/SKILL.md) § rate limiting, [`performance`](../performance/SKILL.md) |
 | **E**levation of privilege | Can a lower-privilege actor reach a higher-privilege action or object? | Per-object authorization + tenant scope — [`authz-review`](../authz-review/SKILL.md), [`broken-access-control`](../../rules/broken-access-control.md) |
 
-Category with no plausible abuse case for this change → mark "n/a — no boundary crossed", never silently omit.
+A category with no plausible abuse case for this change is marked "n/a —
+no boundary crossed", not silently omitted.
 
 ### 4. Convert risks to engineering actions
 
@@ -219,5 +223,7 @@ run tests**.
 - [`authz-review`](../authz-review/SKILL.md),
   [`data-exposure-review`](../data-exposure-review/SKILL.md),
   [`security`](../security/SKILL.md),
-  [`security-audit`](../security-audit/SKILL.md) — sibling review / impl skills.
+  [`security-audit`](../security-audit/SKILL.md) — sibling review / implementation skills.
+- Prompt-injection / agent-config defense: [`untrusted-input-defense`](../../rules/untrusted-input-defense.md),
+  [`lethal-trifecta-guard`](../../rules/lethal-trifecta-guard.md) — always-on authoring rules; consult when modelling injection abuse cases.
 - Attack surface documentation: [`docs/threat-model.md`](../../docs/threat-model.md) — package trust boundaries, assets, and known risks.

package/dist/agent-src/skills/token-optimizer/SKILL.md

@@ -50,7 +50,7 @@ INTENT
 │     → cite [cli-output-handling](../../rules/cli-output-handling.md)
 │       (Iron Law: redirect / tail / grep / wrap)
 │     → cite [rtk-output-filtering](../rtk-output-filtering/SKILL.md)
-│       (rtk wrapper, 60-90% savings on tests/linters/git)
+│       (rtk wrapper — upstream reports 60-90% on tests/linters/git)
 │
 ├── Large document or paste (PDF, DOCX, HTML, transcript)
 │     → cite markitdown (upstream: https://github.com/microsoft/markitdown)
@@ -61,7 +61,7 @@ INTENT
 │       (batch, parallelize, prune; one tool call > many)
 │
 ├── Near context limit, work not finished
-│     → cite [agent-handoff](../../../.claude/skills/agent-handoff/SKILL.md)
+│     → cite [agent-handoff](../../domains/meta/agent-handoff/command.md)
 │       (structured handoff envelope; resume in fresh chat)
 │
 ├── Cost-aware decision (model pick, budget, stop-criterion)
@@ -82,10 +82,10 @@ INTENT
 | `cli-output-handling` | `.agent-src.uncondensed/rules/cli-output-handling.md` | `verbose`, `tail`, `grep`, `CLI` | Wrap-tail-grep contract for any verbose command |
 | `rtk-output-filtering` | `.agent-src.uncondensed/skills/rtk-output-filtering/SKILL.md` | `rtk`, `verbose`, `filter`, `wrap` | Project-local rtk filters; wrapper command |
 | `token-efficiency` | `.agent-src.uncondensed/rules/token-efficiency.md` | `redirect`, `verbose`, `concise`, `tool` | Batch + parallelize tool calls; brevity floor |
-| `agent-handoff` | `.claude/skills/agent-handoff/SKILL.md` | `handoff`, `fresh`, `chat`, `context` | Context envelope for fresh-chat continuation |
+| `agent-handoff` | `src/domains/meta/agent-handoff/command.md` | `handoff`, `fresh`, `chat`, `context` | Context envelope for fresh-chat continuation |
 | `direct-answers` | `.agent-src.uncondensed/rules/direct-answers.md` | `brevity`, `flattery`, `severity`, `tiered` | Iron-Law brevity floor (kernel) |
 | `markitdown` | upstream: github.com/microsoft/markitdown | `PDF`, `DOCX`, `HTML`, `convert` | Document → markdown converter (authoritative-link only) |
-| `/cost:report` | TBD — an internal roadmap (local-only) | `cost`, `model spend`, `budget` | Per-session cost telemetry (planned) |
+| `/cost:report` | TBD — an internal roadmap (local-only) § P1.2` | `cost`, `model spend`, `budget` | Per-session cost telemetry (planned) |
 | `api-cost-levers` | `docs/guidelines/agent-infra/api-cost-levers.md` | `cache`, `caching`, `batch`, `tiering`, `effort` | Anthropic billing levers: prompt caching, Batch API, model tiering, effort/output right-sizing |
 
 ## Output format

package/dist/agent-src/skills/universal-project-analysis/SKILL.md

@@ -77,7 +77,7 @@ Goal: understand structure, identify major components, detect investigation path
 ### Investigation mode
 
 Use when there is a concrete issue inside a large or unclear system.
-Goal: isolate the affected area, route into root-cause analysis, verify likely → with evidence.
+Goal: isolate the affected area, route into root-cause analysis, verify likely causes with evidence.
 
 ### Optimization mode
 

package/dist/agent-src/skills/upstream-contribute/SKILL.md

@@ -174,7 +174,6 @@ The files must:
 ./scripts-run src/scripts/check_condensation            # No errors for this file
 ./scripts-run src/scripts/condense --generate-tools    # Regenerate symlinks
 bash scripts/condense.sh --check                # dist/agent-src/ in sync with source
-bash scripts/condense.sh --check-hashes         # All hashes match
 ```
 
 If not in the package repo, note that these checks will run in CI after the PR is created.

package/dist/agent-src/skills/using-git-worktrees/SKILL.md

@@ -141,15 +141,15 @@ Run the project's fastest test target. If the baseline **fails**, stop
 and report — ask whether to fix main first or proceed. Never silently
 continue with a red baseline.
 
-**Optional `env-bootstrap` entry — stand-up beyond deps.** Some projects need
-more than package install to stand up (start services, seed fixtures, generate
-config). A project MAY declare a single bootstrap entry — an `env-bootstrap`
-target in its runner file (`Taskfile.yml` / `Makefile` / `package.json`
-`scripts`) or a documented equivalent. When one exists, **surface it as the
-suggested next action** after the baseline — suggest, never auto-execute (no new
-autonomous surface). Long-running work then reads one deterministic stand-up
-entry instead of re-deriving it each session. If none exists, deps + baseline is
-the whole stand-up.
+**Optional `env-bootstrap` entry — stand-up beyond deps.** Some projects
+need more than package install to stand up (start services, seed fixtures,
+generate config). A project MAY declare a single bootstrap entry — an
+`env-bootstrap` target in its runner file (`Taskfile.yml` / `Makefile` /
+`package.json` `scripts`) or a documented equivalent. When one exists,
+**surface it as the suggested next action** after the baseline — suggest,
+never auto-execute (no new autonomous surface). Long-running work then reads
+one deterministic stand-up entry instead of re-deriving it each session. If
+none exists, deps + baseline is the whole stand-up.
 
 ## Multi-tool parallel work
 

package/dist/agent-src/skills/validate-feature-fit/SKILL.md

@@ -98,7 +98,9 @@ Format as a clear, concise summary:
 
 ## Output format
 
-Always end with numbered options. The user should be able to reply with just a number.
+1. Always close with a numbered options block — the user must be able to reply with a single digit.
+2. Each option is one line: action verb + scope + reversibility hint (e.g., "1. Drop the duplicate — keep existing X (reversible)").
+3. Never present more than 5 options; if more exist, group them under "other" with a follow-up question.
 
 ## Gotchas
 

package/dist/agent-src/skills/verify-completion-evidence/SKILL.md

@@ -94,15 +94,13 @@ on the changed scope."* — not *"everything looks good"*.
 ## The end-of-work sequence
 
 **Gate zero:** when `quality.local_auto_run` is `false` or missing (the
-default), steps 2–3 below do NOT run — user runs quality tools
-manually, remote CI is the authoritative gate (see
+default), steps 2–3 below do NOT run — the user runs quality tools
+manually and remote CI is the authoritative gate (see
 [`quality-tools` § Execution policy](../quality-tools/SKILL.md)). Run
 only the narrowest probe the claim needs (step 1, a `curl`, a syntax
 check on the edited file) and close with *"quality gates delegated to
-remote CI"* — never a pass claim for tools that did not run. Full
-sequence applies when `local_auto_run: true`.
-
-When all code changes are done and you are ready to report completion:
+remote CI"* — never a pass claim for tools that did not run. The full
+sequence applies when `local_auto_run: true`:
 
 1. **Targeted tests** — the test(s) covering the changed code pass.
 2. **Full test suite** — only after targeted pass is green.

package/dist/agent-src/skills/verify-repair-loop/SKILL.md

@@ -11,32 +11,33 @@ packs:
 
 # verify-repair-loop
 
-> Bounded **generate → run → revise → re-run** cycle; pass signal = the
-> **executed verdict** (real test/quality output, scored vs a numeric
-> threshold), escalated to a **judge** for qualitative confirmation only
-> *after* the numeric gate passes (staged escalation). Loop is the
-> conversation, not a process: no daemon, no persistent cross-session state.
-> Use to drive a change to green when the verdict source is *runtime
-> execution*, not a judge reading a diff.
+> A bounded **generate → run → revise → re-run** cycle whose pass signal is the
+> **executed verdict** — the project's real test/quality output, scored against a
+> numeric threshold — escalated to a **judge** for qualitative confirmation only
+> *after* the numeric gate passes (staged escalation). The loop is the
+> conversation, not a process: no daemon, no persistent cross-session state. Use
+> it to drive a change to green when the verdict source is *runtime execution*,
+> not a judge reading a diff.
 
 ## When to use
 
-* Change must converge against the project's **test runner / quality tools**;
-  iterate until checks pass before review.
+* A change must converge against the project's **test runner / quality tools**
+  and you want the agent to iterate until checks pass before asking for review.
 * Test/quality coverage is the authoritative signal (high coverage, actionable
   failures) — not subjective craft.
-* Bounded auto-repair with a hard stop, not an open-ended fix loop.
+* You want bounded auto-repair with a hard stop, not an open-ended fix loop.
 
 Do NOT use when:
 
-* Verdict is **subjective craft** (naming, architecture, style) or coverage
-  incomplete → `do-and-judge` in
+* The verdict is **subjective craft** (naming, architecture, style) or coverage
+  is incomplete → use `do-and-judge` in
   [`subagent-orchestration`](../subagent-orchestration/SKILL.md) (judge reads the
-  diff, sovereign).
-* Only a **one-shot** multi-judge review of a finished diff →
+  diff and is sovereign).
+* You only need a **one-shot** multi-judge review of a finished diff → use
   [`/review-changes`](../../commands/review/changes.md).
-* Verdict must come from a **live app** (Playwright vs running services) →
-  **deferred** (see Scope); use test/quality verdicts until that trigger fires.
+* The verdict must come from a **live app** (Playwright against running services)
+  → **deferred** (see Scope below); use test/quality verdicts until that trigger
+  fires.
 
 ## The Iron Law
 
@@ -48,22 +49,22 @@ EVEN IF THE OVERALL SCORE ROSE.
 GENERATOR NEVER APPROVES ITS OWN CHANGE.
 ```
 
-A loop optimizing for `pass_count ≥ N` can game the metric — delete tests, skip
-assertions, weaken checks — and still hit the threshold. The numeric gate only
-decides **when to escalate**; a judge with veto confirms the change is real.
+A loop that optimizes for `pass_count ≥ N` can game the metric — delete tests,
+skip assertions, weaken checks — and still hit the threshold. The numeric gate
+only decides **when to escalate**; a judge with veto confirms the change is real.
 
 ## Procedure
 
 ### 1. Freeze the contract (spec fingerprint)
 
-Before the first run, snapshot what "done" means:
+Before the first run, capture what "done" means and snapshot it:
 
 * the task's acceptance criteria / requirement,
-* the check set defining the verdict (test files + quality commands),
-* a **spec fingerprint** = hash of (requirement text + check set).
+* the set of checks that define the verdict (test files + quality commands),
+* a **spec fingerprint** = a hash of (requirement text + the check set).
 
-Record the **baseline green set** — checks passing *before* any edit — so
-regressions are detectable. Pick verdict commands per the project's
+Record the **baseline green set** — which checks pass *before* any edit — so
+regressions are detectable. Pick the verdict commands per the project's
 [`toolchain-resolver`](../../contexts/execution/toolchain-resolver.md) (PHP / JS-TS
 / Python / Go / Rust), not a hardcoded runner.
 
@@ -81,37 +82,39 @@ regressions are detectable. Pick verdict commands per the project's
 
 Each iteration is agent turns, never executing control-flow code:
 
-1. **Generate / revise** — smallest change toward the contract.
-2. **Run** — execute verdict commands; parse the **structured** result
-   (green/total, which checks failed). One tool call, read in context.
-3. **Score + regression check** — compute the score; compare failures vs the
-   baseline green set.
+1. **Generate / revise** — make the smallest change toward the contract.
+2. **Run** — execute the verdict commands; parse the **structured** result
+   (counts green/total, which checks failed). This is one tool call, read in
+   context.
+3. **Score + regression check** — compute the numeric score; compare failures
+   against the baseline green set.
    * **Regression** (a baseline-green check now fails) → STOP, hand back with the
      regression named, even if the score rose. No whack-a-mole.
    * **Plateau** (last `plateau_window` scores within `tolerance`) → STOP; surface
      suspected flakiness or a stuck point. Do not thrash.
    * **`attempts == max_attempts`** → STOP, hand back the best envelope.
 4. **Numeric gate** — score `< threshold` and attempts remain → back to step 1
-   (attempts++). Score `≥ threshold`, no regression → **escalate** (step 4).
+   (attempts++). Score `≥ threshold`, no regression → **escalate** (step 4 of the
+   stage).
 
 ### 4. Judge escalation (only after the numeric gate passes)
 
 Dispatch the judge as a **subagent with fresh context** (the `judge-*` cluster via
-[`subagent-orchestration`](../subagent-orchestration/SKILL.md)) seeing **only the
-diff + executed results** — never the generator's reasoning. This is the real
+[`subagent-orchestration`](../subagent-orchestration/SKILL.md)) that sees **only the
+diff + the executed results** — never the generator's reasoning. This is the real
 generator ≠ judge separation; single-agent persona-switching is theater.
 
 * judge `apply` → DONE.
-* judge `revise` → back to step 3.1 (attempts++; bounded).
+* judge `revise` → back to step 3.1 (attempts++; still bounded).
 * judge `reject` → STOP, hand back; the approach must change.
 
 ### 5. Mid-loop invalidation (user-interrupt-priority)
 
-Re-check the spec fingerprint each iteration. If the user changes the requirement
-mid-loop (a new instruction in the conversation), the fingerprint changes →
-**abort and hand back** per
-[`user-interrupt-priority`](../../rules/user-interrupt-priority.md). Never iterate
-against a stale contract.
+Re-check the spec fingerprint each iteration. If the user changes the
+requirement mid-loop (a new instruction in the conversation), the fingerprint
+changes → **abort and hand back** per
+[`user-interrupt-priority`](../../rules/user-interrupt-priority.md). Never keep
+iterating against a stale contract.
 
 ## Scope — what runs, what is deferred
 
@@ -131,8 +134,8 @@ Before finalizing, confirm:
 
 1. The numeric gate **escalated to a judge** — it did not apply on its own.
 2. No baseline-green check regressed (or the loop stopped and said so).
-3. The loop stopped at `max_attempts`, a plateau, or a judge `apply` — never ran
-   unbounded.
+3. The loop stopped at `max_attempts`, a plateau, or a judge `apply` — never
+   ran unbounded.
 4. The judge saw only the diff + results, dispatched in fresh context.
 5. No daemon / persistent runtime introduced.
 
@@ -149,12 +152,12 @@ Evidence:   <green/total> · regressions: none | <named checks>
 
 Required fields (ordered):
 
-1. **Contract** — frozen requirement + threshold + `allow_regressions`.
-2. **Attempts** — `k/max`, score history, exact stop reason
+1. **Contract** — the frozen requirement + threshold + `allow_regressions`.
+2. **Attempts** — `k/max`, the score history, and the exact stop reason
    (`threshold` / `plateau` / `cap` / `regression` / `reject`).
 3. **Verdict** — `DONE`, `DONE_WITH_CONCERNS`, or `BLOCKED`.
-4. **Judge** — dispatched judge skill + its `apply` / `revise` / `reject` verdict
-   (omit only when the loop stopped before escalation).
+4. **Judge** — the dispatched judge skill and its `apply` / `revise` /
+   `reject` verdict (omit only when the loop stopped before escalation).
 5. **Evidence** — final `green/total` and any regressed checks by name.
 
 ## Examples
@@ -173,20 +176,23 @@ iter2 fixes A, breaks B, 92% → "PASS"      ✗ regression ignored
 
 ## Gotcha
 
-* **Metric gaming** — agent "passes" by deleting a failing test or weakening an
-  assertion. The numeric gate can't catch this; the fresh-context judge is the
-  safeguard. A diff that *removes* checks is a `reject`, not a `pass`.
-* **Flake mistaken for a plateau** — one non-deterministic test flips the score
-  and the window-comparison reads "no improvement". Re-run the suspected check
-  before declaring a plateau; surface flakiness instead of thrashing.
-* **Score rose, but a regression hid inside it** — fixing 6 checks while breaking
-  2 still raises the total. Without the regression guard the loop ships a
-  regression. Diff failures against the baseline green set, not just the aggregate.
-* **Persona-switch theater** — asking the same agent to "now judge what you wrote"
-  is not separation. Dispatch the judge as a fresh-context subagent that never saw
-  the generator's reasoning.
-* **Stale contract** — iterating against a requirement the user changed mid-loop.
-  Re-check the spec fingerprint each turn; a change aborts.
+* **Metric gaming** — the agent "passes" by deleting a failing test or
+  weakening an assertion. The numeric gate cannot catch this; the
+  fresh-context judge is the safeguard. If the diff *removes* checks,
+  that is a `reject`, not a `pass`.
+* **Flake mistaken for a plateau** — a single non-deterministic test flips
+  the score and the window-comparison reads it as "no improvement". Re-run
+  the suspected check before declaring a plateau; surface flakiness instead
+  of thrashing.
+* **Score rose, but a regression hid inside it** — fixing 6 checks while
+  breaking 2 still raises the total. Without the regression guard the loop
+  ships a regression. Always diff failures against the baseline green set,
+  not just the aggregate score.
+* **Persona-switch theater** — asking the same agent to "now judge what you
+  wrote" is not separation. Dispatch the judge as a fresh-context subagent
+  that never saw the generator's reasoning.
+* **Stale contract** — iterating against a requirement the user changed
+  mid-loop. Re-check the spec fingerprint each turn; a change aborts.
 
 ## Do NOT
 
@@ -208,6 +214,6 @@ iter2 fixes A, breaks B, 92% → "PASS"      ✗ regression ignored
 * [`no-runtime-boundary`](../../../docs/contracts/no-runtime-boundary.md) — the
   runtime-free constraint this loop honors.
 * Optional impact pre-step (when a code-graph is present, ADR-124): run
-  `code_graph affected --since <ref>` to scope which symbols a change touches
-  before choosing verdict sources — cited, not duplicated; the loop itself is
-  unchanged when no graph exists.
+  `agent-config code-graph affected --since <ref>` to scope which symbols a
+  change touches before choosing verdict sources — cited, not duplicated; the
+  loop itself is unchanged when no graph exists.

package/dist/agent-src/skills/video-director/SKILL.md

@@ -124,13 +124,13 @@ Any "no" → revise that block before handing off.
 
 ## Policies
 
-11-block cinematic prompt is live-action shape — real-person + brand-impersonation risks highest in cluster. Before emitting:
+The 11-block cinematic prompt is live-action shape — real-person and brand-impersonation risks are the highest in the cluster. Before emitting:
 
-- [`agents/settings/policies/media/likeness.md`](../../../agents/settings/policies/media/likeness.md) — prompt names / visually identifies real person on camera.
-- [`agents/settings/policies/media/public-figures.md`](../../../agents/settings/policies/media/public-figures.md) — subject is recognised public figure.
-- [`agents/settings/policies/media/brand-impersonation.md`](../../../agents/settings/policies/media/brand-impersonation.md) — prompt copies journalism / broadcaster / regulated-industry visual identity.
-- [`agents/settings/policies/media/style.md`](../../../agents/settings/policies/media/style.md) — LIGHT / LENS anchored to named living cinematographer's signature.
-- [`agents/settings/policies/media/disclosure.md`](../../../agents/settings/policies/media/disclosure.md) — every distributed live-action AI clip carries non-removable AI-generation disclosure.
+- [`agents/settings/policies/media/likeness.md`](../../../agents/settings/policies/media/likeness.md) — when the prompt names or visually identifies a real person on camera.
+- [`agents/settings/policies/media/public-figures.md`](../../../agents/settings/policies/media/public-figures.md) — when the subject is a recognised public figure.
+- [`agents/settings/policies/media/brand-impersonation.md`](../../../agents/settings/policies/media/brand-impersonation.md) — when the prompt copies a journalism / broadcaster / regulated-industry visual identity.
+- [`agents/settings/policies/media/style.md`](../../../agents/settings/policies/media/style.md) — when LIGHT / LENS choices are anchored to a named living cinematographer's signature.
+- [`agents/settings/policies/media/disclosure.md`](../../../agents/settings/policies/media/disclosure.md) — every distributed live-action AI clip carries the non-removable AI-generation disclosure.
 
-Refuse-and-surface at directorial layer; live-action realism amplifies every downstream policy gap.
+Refuse-and-surface at the directorial layer; live-action realism amplifies every policy gap downstream.
 

package/dist/agent-src/skills/worktree-lifecycle/SKILL.md

@@ -101,13 +101,12 @@ A worktree is **merge-ready** only when ALL hold:
 
 ### 4. Cleanup discipline
 
-Removal gated by the deterministic helper (edge-case-tested: detached
+Removal is gated by the deterministic helper (edge-case-tested: detached
 HEAD, branch without remote, tag-only reachability, deleted remote
-branch, untracked files, paths with spaces —
-`tests/scripts/worktree_cleanup_check.test.ts`):
+branch, untracked files, paths with spaces):
 
 ```bash
-./scripts-run src/scripts/worktree_cleanup_check check <worktree-path>
+npx tsx node_modules/@event4u/agent-config/src/scripts/worktree_cleanup_check.ts check <worktree-path>
 ```
 
 Exit `0` → removal allowed; exit `1` → refuse, gates in order:
@@ -126,8 +125,8 @@ Exit `0` → removal allowed; exit `1` → refuse, gates in order:
 Then: **remove, never delete** — `git worktree remove <path>`, then
 `git worktree prune`. Branch deletion is a separate, permission-gated
 step (`scope-control`); never force-delete (`-D`) as part of cleanup.
-Cross-worktree scope-lock overlaps: `worktree_cleanup_check scope-overlap`
-(surfaced by `/worktree status`).
+Cross-worktree scope-lock overlaps are scanned via
+`worktree_cleanup_check scope-overlap` (surfaced by `/worktree status`).
 
 ## Host-native mapping
 

package/dist/agent-src/templates/AGENTS.md

@@ -19,7 +19,7 @@
 ## Pointers
 
 - **Filling out this AGENTS.md** — section templates, capability bullets, multi-agent entry flow, monorepo per-package layout: [`.augment/contexts/contracts/consumer-agents-md-guide.md`](.augment/contexts/contracts/consumer-agents-md-guide.md).
-- **Behavior rules (always active)** — Iron Laws and routed rules that fire automatically while you work in this project: [`.augment/rules/`](.augment/rules/).
+- **Behavior rules (always active)** — [`.augment/rules/`](.augment/rules/). Kernel rules are **immutable** — never propose an edit; tighten-only via the override registry.
 - **Skills (on-demand expertise)** — domain skills surfaced by description; invoked when their trigger fires: [`.augment/skills/`](.augment/skills/).
 - **Commands (workflows)** — slash-commands the agent runs end-to-end (`/work`, `/implement-ticket`, `/commit`, `/create-pr`, …): [`.augment/commands/`](.augment/commands/).
 - **Project-specific docs** — your own architecture notes, roadmaps, sessions, contexts: [`agents/`](agents/).

package/dist/agent-src/templates/agents/.gitattributes.fragment

@@ -1,13 +1,32 @@
-# Agent memory — append-only JSONL, union-merged.
+# Agent memory — merge-safety attributes for parallel-branch memory writes.
 # Append this block to the consumer project's root .gitattributes.
-# See: agents/roadmaps/road-to-memory-merge-safety.md
+# See: agents/roadmaps/archive/road-to-reachable-code-memory.md (Phase 5)
 
-# Intake layer — agent-written, append-only. Union merge concats both
-# sides on conflict instead of failing. Reader deduplicates by id.
+# Intake layer — agent-written, append-only JSONL. Union merge concats both
+# sides on conflict instead of failing. Reader (_iter_intake_entries in
+# memory_lookup.ts) resolves supersede chains keyed by id, so a duplicate
+# line surviving a bad merge collapses harmlessly — same id, later line wins.
 agents/memory/intake/*.jsonl merge=union eol=lf
 
-# Curated memory — content-addressed drop-ins. One file per entry.
-# Normal merge is fine; filename collisions are content-identity.
+# Curated memory — flat layout: one YAML file per type holding an `entries:`
+# list (agents/memory/<type>.yml). Two branches each appending a genuinely
+# NEW entry — the common case — union-merges cleanly (concats both sides).
+# CAVEAT: union merge operates per LINE, not per YAML block. If both branches
+# touch overlapping lines (not pure appends), the result can interleave
+# partial multi-line list items into invalid YAML. The reader
+# (_iter_curated_entries in memory_lookup.ts) does NOT dedup entries by id for
+# this layout, so an exact duplicate block surviving a bad union merge would
+# surface twice. Treat this as a best-effort safety net for the append-only
+# case, not a guarantee — the directory layout below has no such caveat.
+agents/memory/ownership.yml              merge=union text eol=lf
+agents/memory/historical-patterns.yml    merge=union text eol=lf
+agents/memory/domain-invariants.yml      merge=union text eol=lf
+agents/memory/incident-learnings.yml     merge=union text eol=lf
+agents/memory/product-rules.yml          merge=union text eol=lf
+
+# Curated memory — directory layout: one file per entry, content-addressed
+# by hash. Filename collisions are content-identity, so normal (non-union)
+# merge is fine here; only line-ending normalization matters.
 agents/memory/ownership/*.yml              text eol=lf
 agents/memory/historical-patterns/*.yml    text eol=lf
 agents/memory/domain-invariants/*.yml      text eol=lf

package/dist/agent-src/templates/agents/agent-project-settings.example.yml

@@ -39,7 +39,7 @@ schema_version: 1
 # CI guard: a release bump of `package.json` must update this value
 # in lockstep — see scripts/check_template_pin_drift.ts (road-to-
 # portable-runtime-and-update-check P3.3).
-agent_config_version: "9.8.0"
+agent_config_version: "9.10.0"
 
 # --- Project identity ---
 project:

package/dist/agent-src/templates/command.md

@@ -1,10 +1,10 @@
 # Command Template
 
-> Template for creating new commands in `.agent-src.uncondensed/commands/{command-name}.md`.
+> Template for creating new commands in `src/agent-src/commands/{command-name}.md`.
 
 ## Instructions
 
-1. Create file: `.agent-src.uncondensed/commands/{command-name}.md`
+1. Create file: `src/agent-src/commands/{command-name}.md`
 2. Copy the template below
 3. Replace all `{placeholders}` with actual content
 4. Remove all `<!-- comments -->` when done
@@ -97,7 +97,7 @@ Before considering a command complete:
 
 - [ ] **Frontmatter**: has `name`, `description`, `disable-model-invocation: true`, `suggestion` block
 - [ ] **Steps**: numbered sub-headings (`### 1.`, `### 2.`, ...)
-- [ ] **Source of truth**: works on `.agent-src.uncondensed/`, not `dist/agent-src/` or `.augment/`
+- [ ] **Source of truth**: works on `src/`, not `dist/agent-src/` or `.augment/`
 - [ ] **No auto-apply**: presents findings, asks before destructive changes
 - [ ] **Linter passes**: `./scripts-run src/scripts/skill_linter` reports 0 FAIL
 - [ ] **English only**: all content in English