@event4u/agent-config 9.8.0 → 9.10.0

package/dist/agent-src/commands/tdd.md

@@ -43,6 +43,27 @@ lives here**; each sub loads the skill and drives its named phase.
    and drive ONLY the named phase, honoring that phase's Forbidden block.
 3. LOW confidence / bare `/tdd` → show the three-row menu and ask.
 
+## Non-interactive & auto-detection
+
+`/tdd` declares `auto_detect: true`, so it honors the
+[`non-interactive-contract`](../contexts/execution/non-interactive-contract.md)
+(surface detection, confidence tiers, `--yes` / `--json`, abort schemas, and the
+`auto_detect` kill-switch). The inference in § Dispatch is that contract's detection
+step; the table below names the signal each verdict rests on.
+
+| Basis (signal) | Sub-command | Confidence |
+|---|---|---|
+| Explicit sub given (`/tdd green`) | that one | — (detection skipped) |
+| No test exists for the named behavior | `red` | HIGH |
+| A test fails at an assertion (not a collection/compile error) | `green` | HIGH |
+| Tests green and a defect is reported | `red` | HIGH |
+| Tests green, no defect, recent implementation churn | `refactor` | MEDIUM |
+| Bare `/tdd`, none of the above resolves | none — show the three-row menu and ask | LOW |
+
+A collection or compile error is deliberately NOT a `green` signal: the test never
+reached an assertion, so there is no red to make pass yet. MEDIUM and below never
+auto-run under `--yes`; they surface the menu, per the contract's confidence tiers.
+
 ## Rules
 
 - **One phase per turn.** Do NOT chain red→green→refactor silently — each sub is one turn.

package/dist/agent-src/commands/team/delegate.md

@@ -50,6 +50,10 @@ refuse with the enable pointer and **STOP**:
 >
 > Key reference: `docs/contracts/ai-team-config.md`.
 
+Deterministic mirror of gates 1+2: `npx tsx src/scripts/ai_team/team_dispatch.ts
+--delegate-gate` exits non-zero (with the pointer on stderr) unless BOTH flags
+are true — run it instead of hand-parsing the YAML when a shell is available.
+
 ### 3. Gate — plugin presence (fail closed)
 
 On a Claude Code host, verify the official plugin is installed. Absent →

package/dist/agent-src/commands/team-knowledge/bootstrap.md

@@ -22,9 +22,9 @@ packs:
 Seeds a fresh project's `agents/knowledge/` typed pages from
 **deterministic static analysis only** — directory names and known
 config filenames, never file content, never an LLM-invented claim.
-Fast first pass; the deeper analyzers (`project-analysis-*`,
-`standards-from-config`, `module-detect-on-the-fly`) remain the tools
-for filling in what this script cannot know.
+This is the fast first pass; the deeper analyzers
+(`project-analysis-*`, `standards-from-config`, `module-detect-on-the-fly`)
+remain the tools for filling in what this script cannot know.
 
 ## Steps
 
@@ -81,8 +81,9 @@ Then:
 ./scripts-run src/scripts/generate_knowledge_index
 ```
 
-The team-sharing gate still applies at commit time — none of these
-pages should carry `visibility: private`.
+The [team-sharing gate](../../../scripts/check_knowledge_sharing.ts)
+still applies at commit time — none of these pages should carry
+`visibility: private`.
 
 ### 4. Discard the rest
 
@@ -100,6 +101,6 @@ gitignored and regenerates on the next bootstrap run).
 
 ## See also
 
-- [`/team-knowledge consolidate`](consolidate.md) — the ongoing capture loop this one-shot seed feeds into.
-- [`standards-from-config`](../../skills/standards-from-config/SKILL.md) — the full pointer+digest derivation for coding standards.
-- [`project-analysis-core`](../../skills/project-analysis-core/SKILL.md) / [`module-detect-on-the-fly`](../../skills/module-detect-on-the-fly/SKILL.md) — the deeper analyzers for `modules.md`.
+- [`/team-knowledge consolidate`](../consolidate/command.md) — the ongoing capture loop this one-shot seed feeds into.
+- [`standards-from-config`](../../../skills/standards-from-config/SKILL.md) — the full pointer+digest derivation for coding standards.
+- [`project-analysis-core`](../../../skills/project-analysis-core/SKILL.md) / [`module-detect-on-the-fly`](../../../skills/module-detect-on-the-fly/SKILL.md) — the deeper analyzers for `modules.md`.

package/dist/agent-src/commands/team-knowledge/consolidate.md

@@ -24,7 +24,7 @@ Turns the gitignored, in-flight typed-observation events
 `context_stale` — see `src/scripts/_lib/knowledge_events.ts`) into
 committed `agents/knowledge/` pages. This is the ONLY path from intake
 to a tracked page — no skill or rule writes a tracked knowledge page
-mid-task (see [`knowledge-pages`](../../templates/contexts/knowledge-pages.md)
+mid-task (see [`knowledge-pages`](../../../agent-src/templates/contexts/knowledge-pages.md)
 § Storage location).
 
 ## Steps
@@ -44,7 +44,7 @@ No pending topics → tell the user and stop. Nothing to do.
 ### 2. Triage each topic
 
 For each aggregate in the report, apply the same taxonomy
-[`memory-consolidation`](../../skills/memory-consolidation/SKILL.md)
+[`memory-consolidation`](../../../skills/memory-consolidation/SKILL.md)
 uses for engineering-memory facts:
 
 | Triage | Condition | Action |
@@ -61,7 +61,7 @@ events before deciding.
 ### 3. Draft and present the batch
 
 For every `NEW` / `EXTEND` / `CONFLICT` aggregate, draft the page
-content (following [`knowledge-pages`](../../templates/contexts/knowledge-pages.md) —
+content (following [`knowledge-pages`](../../../agent-src/templates/contexts/knowledge-pages.md) —
 `date + what + why` for session entries, ≤ 200 lines per page) and
 present the full batch to the user:
 
@@ -81,7 +81,7 @@ present the full batch to the user:
 
 On approval:
 
-1. Write each approved page (respecting the team-sharing gate —
+1. Write each approved page (respecting the [team-sharing gate](../../../scripts/check_knowledge_sharing.ts) —
    never set `visibility: private` on a page landing here).
 2. Regenerate the index: `./scripts-run src/scripts/generate_knowledge_index`.
 3. Clear the consumed intake: `./scripts-run src/scripts/consolidate_knowledge_events --commit`
@@ -96,9 +96,10 @@ On approval:
   land in the page, human resolves later.
 - Never writes a page with `visibility: private` (belongs in the
   ADR-100 global store instead).
-- Do NOT commit the written pages — that is the user's call.
+- Do NOT commit the written pages — that is the user's call, per
+  [`commit-policy`](../../../rules/commit-policy.md).
 
 ## See also
 
-- [`memory-consolidation`](../../skills/memory-consolidation/SKILL.md) — the sibling loop for the 5 fixed engineering-memory types; this command is its knowledge-page counterpart.
-- [`learning-to-rule-or-skill`](../../skills/learning-to-rule-or-skill/SKILL.md) — where a page's recurring topic graduates into a skill/rule once it crosses the skill-candidate threshold.
+- [`memory-consolidation`](../../../skills/memory-consolidation/SKILL.md) — the sibling loop for the 5 fixed engineering-memory types; this command is its knowledge-page counterpart.
+- [`learning-to-rule-or-skill`](../../../skills/learning-to-rule-or-skill/SKILL.md) — where a page's recurring topic graduates into a skill/rule once it crosses the skill-candidate threshold.

package/dist/agent-src/commands/team.md

@@ -77,7 +77,10 @@ a wrapper is invoked directly.
 
 ## Sub-commands
 
-| Sub-command | Delegates to (Claude Code) | Purpose |
+On Claude Code each sub-command **delegates** to the paired `/codex:*` command
+rather than routing to an in-suite skill — the second column names that target.
+
+| Sub-command | Routes to | Purpose |
 |---|---|---|
 | `/team review [--background]` | `/codex:review` | Cross-model review of the current working-tree / staged diff |
 | `/team adversarial <focus>` | `/codex:adversarial-review` | Adversarial cross-model review on a named focus — the escalation rung above the single-model `adversarial-review` skill |

package/dist/agent-src/commands/upstream-contribute.md

@@ -131,7 +131,6 @@ Frontmatter must have `source: package`.
 ./scripts-run src/scripts/check_condensation            # No 🔴 errors for this file
 ./scripts-run src/scripts/condense --generate-tools    # Regenerate symlinks
 bash scripts/condense.sh --check                # dist/agent-src/ in sync with source
-bash scripts/condense.sh --check-hashes         # All hashes match
 ```
 
 Fix any issues before continuing.

package/dist/agent-src/commands/video.md

@@ -68,7 +68,7 @@ contract under [`scripts/media/lib/adapter-contract.md`](../../scripts/media/lib
 - **Run `validate-deps.sh` first.** Every subcommand calls
   `scripts/ai-video/lib/validate-deps.sh` before any adapter; fails
   fast on missing personas / skills.
-- **Edit `.agent-src.uncondensed/` only.** Generated mirrors regenerate.
+- **Edit `src/` only.** Generated mirrors regenerate.
 
 ## See also
 

package/dist/agent-src/contexts/authority/commit-mechanics.md

@@ -99,3 +99,10 @@ any roadmap-producing flow), do **not** include commit steps unless
 the user explicitly requested them — commits are a delivery decision;
 roadmaps plan **work**. If the user explicitly wants commit steps,
 write them clearly (e.g. "Commit phase X: chore: …").
+
+## Migrated from `commit-policy` (kernel-budget relief, 2026-07-30)
+
+### See also
+
+- [`scope-control`](../../../rules/scope-control.md) — git-ops permission gate (push, merge, branch, PR, tag).
+- [`no-cheap-questions`](../../../rules/no-cheap-questions.md) — canonical Iron Law. · [`autonomous-execution`](../../../rules/autonomous-execution.md) · [`/commit`](../../commands/commit.md) · [`/commit:in-chunks`](../../commands/commit/in-chunks.md).

package/dist/agent-src/contexts/authority/destructive-mechanics.md

@@ -88,3 +88,19 @@ safe to remove or replace.
 - Reading a roadmap step listing files to delete as authorization to
   *commit* the deletion. The step authorizes the *edit*; the commit
   is row 6 of the Hard Floor and needs its own confirmation.
+
+## Migrated from `non-destructive-by-default` (kernel-budget relief, 2026-07-30)
+
+### Enforcement — stated honestly (`enforced_by: none`)
+
+This floor has **no mechanical backstop**, and pretending otherwise would be the
+failure it exists to prevent. No script can enforce "ask before you deploy" — the
+obligation is to pause and surface, and the only thing that observes it is the
+human in the loop. Adjacent hooks (`block-no-verify`) guard hook-bypass, not
+destructive intent; claiming them here would inflate coverage, so they are not
+claimed.
+
+So this rule is load-bearing **and** unenforced. It is carried by the model
+honouring it — which is why it is a kernel rule, why it is short, and why it is
+counted as uncovered in the enforcement-coverage report rather than excluded
+from it.

package/dist/agent-src/contexts/authority/kernel-rule-edits.md

@@ -2,7 +2,7 @@
 
 Loaded by [`scope-control`](../../rules/scope-control.md). Codifies the
 soak-time guarantee for edits to always-loaded (kernel) rules under
-`.agent-src.uncondensed/rules/`.
+`src/rules/`.
 
 **Size budget:** ≤ 1,500 chars.
 

package/dist/agent-src/contexts/authority/scope-mechanics.md

@@ -195,3 +195,64 @@ carry over. Concretely: *"arbeite eigenständig"* given for
 "Roadmap A" is consumed when Roadmap A's deliverable lands. A new
 named task (Roadmap B, ticket Y, "next slice") needs fresh
 authorization. See [`autonomous-execution § task-scope`](../../rules/autonomous-execution.md#task-scope--autonomy-is-bound-to-the-named-task).
+
+## Post-artifact hard stop — no auto-offer of execution
+
+```
+ARTIFACT LANDED (ROADMAP / ADR / PLAN / PITCH / TICKET / DESIGN DOC)
+→ STOP. NEVER ASK "READY TO START?" / "BEGIN PHASE 1?" / "SOFORT
+AUSFÜHREN?" / "SOLL ICH MIT E1.1 ANFANGEN?". EXECUTION STARTS ON A
+LATER TURN WITH AN EXPLICIT EXECUTION VERB FROM THE USER.
+```
+
+Authoring verbs (`create`, `draft`, `write`, `erstelle`, …) authorize
+the artifact only. The moment the file is saved, the turn ends —
+silence on execution. The artifact is the deliverable; the work it
+plans is a **separate decision** the user pins on a later turn.
+
+This anchor binds three command surfaces:
+
+- [`/roadmap:create` Step 9](../../commands/roadmap/create.md) —
+  hand-back is a hard stop; never propose `/roadmap:process-*` after
+  save.
+- [`/challenge-me vision` Step 6 (`!roadmap` branch)](../../commands/challenge-me/vision.md) —
+  routing into `/roadmap:create` ends at file save; the chain does
+  **not** chain into execution.
+- `/adr:create`, `/feature-roadmap`, `/feature-plan`, any future
+  authoring command — same rule, no per-command opt-out.
+
+**Anti-pattern catalogue** (each of these IS the violation, not a
+near-miss):
+
+- *"Roadmap fertig. Soll ich mit Phase A anfangen?"* — execution
+  offer disguised as a status line.
+- Numbered options `1. Start now / 2. Review first / 3. Cancel`
+  after the save line — the user did not ask for an execution menu.
+- *"Recommended next step: `/roadmap:process-phase`"* in the
+  hand-back — back-channels the same ask.
+- Treating *"sieht gut aus"* / *"passt"* / *"alright"* / thumbs-up
+  as authorization to start. None of those are execution verbs.
+- Soft-routing prose: *"the roadmap is ready, kicking off E1.1…"* —
+  hand-off to execution disguised as continuation.
+- Council-review hop counted as an execution authorization: review
+  ends, agent jumps straight to Phase 1.
+
+**Allowed**
+
+- A single hand-back line citing the saved path and any regenerated
+  dashboard count.
+- A "Recommended next step" line in the artifact body itself (e.g.
+  in a pitch) that **names a command** the user can copy — that is
+  reference material in the artifact, not a routing offer in the
+  reply.
+- Continuing on the **same turn** if and only if the user already
+  used an explicit execution verb alongside the authoring verb
+  (*"create the roadmap and start Phase A"*). Mixed-verb handling:
+  default to authoring-only and ask; see [`Authoring vs.
+  implementation`](#authoring-vs-implementation--verb-discipline).
+
+**Bypass** — the user resumes with an explicit execution verb on a
+later turn: `implement`, `build`, `start Phase A`, `arbeite die
+Roadmap ab`, `mach weiter mit Phase 1`. That verb — not the prior
+authoring turn, not a council pass, not a thumbs-up — lifts the
+post-artifact stop.

package/dist/agent-src/contexts/communication/rules-auto/reply-close-mechanics.md

@@ -1,43 +1,45 @@
 # Reply close — work summary + PR link
 
 Lookup material for the reply-close carve-out in the
-[`direct-answers`](../../../rules/direct-answers.md) Brevity Iron Law. Rule body
-states the obligation in one line; this file is the detail.
+[`direct-answers`](../../../rules/direct-answers.md) Brevity Iron Law. The rule
+body states the obligation in one line; this file is the detail.
 
 ## The carve-out
 
 Brevity governs the reply **body**; the **close** is the exception.
 
-- Reply that landed **substantial work** — multi-step change, roadmap/branch
+- A reply that landed **substantial work** — a multi-step change, roadmap/branch
   progress, or a created/updated PR — ends with **ONE** compact status summary at
   the very end, never mid-reply: what's done, what remains.
-- **Simple one-answer replies still skip the summary** (Brevity Iron Law unchanged
-  for them). Summary is for work replies, not every turn.
+- **Simple one-answer replies still skip the summary** (the Brevity Iron Law is
+  unchanged for them). The summary is for work replies, not every turn.
 
 ## PR link is the literal last line
 
-PR **created or updated this turn** → its raw GitHub URL is the **literal last
-line**, after the summary, nothing below it — so the user never hunts for it. One
-PR → one URL line.
+If a PR was **created or updated this turn**, its raw GitHub URL is the **literal
+last line** of the reply — after the summary, nothing below it — so the user never
+hunts for it. One PR → one URL line.
 
 - Only when a PR was actually created/updated **this turn**. No PR → no link line.
-- Raw URL (not a masked markdown link) so it is unmistakable and clickable.
+- The raw URL (not a masked markdown link) so it is unmistakable and clickable.
 
 ## Why it does not collide with sibling rules
 
-- **`language-and-tone`** last-line rule: a raw URL is language-neutral → satisfies
-  the "every user-visible token mirrors the user's language" gate.
+- **`language-and-tone`** last-line rule: a raw URL is language-neutral, so it
+  satisfies the "every user-visible token mirrors the user's language" gate.
 - **`no-pr-progress-comments`** / **`no-attribution-footers`**: those govern
-  comments posted *on the PR*. Summary + URL here are the **chat reply body**, not
-  a PR comment — neither applies.
-- **`user-interaction`**: a numbered-options block, when present, still comes last
-  among interactive elements; the PR URL sits below it as the final line and is not
-  an "open question" → does not trip the no-trailing-open-question rule.
+  comments posted *on the PR*. The summary and URL here are the **chat reply
+  body**, not a PR comment — so neither rule applies.
+- **`user-interaction`**: a numbered-options block, when present, still comes
+  last among interactive elements; the PR URL sits below it as the final line and
+  is not an "open question," so it does not trip the no-trailing-open-question
+  rule.
 
 ## Failure modes
 
 - Burying the summary mid-reply, then continuing with more detail below it.
-- Emitting the summary for a trivial one-answer reply (brevity says skip).
-- Creating a PR but leaving its URL mid-reply, forcing the user to scroll/search.
+- Emitting the summary for a trivial one-answer reply (brevity says skip it).
+- Creating a PR but leaving its URL somewhere in the middle, forcing the user to
+  scroll/search.
 - Masking the URL behind link text so it is not obviously the PR.
 - Adding a PR-link line when no PR was created this turn.

package/dist/agent-src/contexts/communication/rules-auto/skill-quality-mechanics.md

@@ -25,7 +25,7 @@ Make descriptions "pushy" — explicit about when to fire:
   adjectives, drop the second example phrasing, or collapse a list — do
   **not** drop the trigger vocabulary or the `even if ...` tail.
 
-Source: [`skills/skill-creator` in `an external reference`](https://github.com/an external reference/blob/main/skills/skill-creator/SKILL.md).
+Source: adapted from an external reference.
 
 **Litmus test:** Read the description cold, without the skill's body. If you
 cannot name at least two phrasings a user would realistically type that should

package/dist/agent-src/contexts/communication/rules-auto/slash-command-routing-policy-mechanics.md

@@ -4,7 +4,7 @@ Lookup table for the `slash-command-routing-policy` rule. Lists the
 locked clusters and their sub-commands so the rule itself can stay at
 its current LOC while still reflecting the full surface. Source of
 truth for the cluster names is
-[`docs/contracts/command-clusters.md`](../../../../../../../docs/contracts/command-clusters.md);
+[`docs/contracts/command-clusters.md`](../../../../../docs/contracts/command-clusters.md);
 this file mirrors that contract for runtime lookup. Linter:
 `scripts/check_cluster_patterns.ts` (verifies dispatcher shape).
 

package/dist/agent-src/contexts/communication/rules-auto/source-of-truth-mechanics.md

@@ -12,17 +12,17 @@ when authoring or pre-review verification fires.
 1. **Create or edit** the file in `src/{path}` (e.g. `src/rules/`, `src/skills/`,
    `src/agent-src/`, `src/domains/<pack>/`)
 2. **Do NOT auto-condense.** Continue working.
-3. **Before commit/push:** Check if condensation is needed
-   (`bash src/scripts/condense.sh --changed`). If files need condensation,
-   ask the user:
+3. **Before commit/push:** Check whether any projection is out of date
+   (`bash src/scripts/condense.sh --changed` — `dist != rewrite(src)`). If files
+   are listed, ask the user:
    ```
-   > 📦 {N} dist/agent-src files need condensation before commit.
+   > 📦 {N} dist/agent-src files are out of date before commit.
    >
-   > 1. Condense now — run /condense
-   > 2. Later — commit without condensation
+   > 1. Sync now — run /condense
+   > 2. Later — commit without syncing
    ```
-4. If condensing: run `/condense` command, then
-   `bash src/scripts/condense.sh --mark-done {path}`
+4. If syncing: run the `/condense` command — `--sync` writes the projection,
+   nothing has to be marked afterwards.
 
 For new non-.md files (`.php`, configs):
 `bash src/scripts/condense.sh --sync` copies them automatically.
@@ -94,6 +94,5 @@ Commands have `disable-model-invocation: true` in their frontmatter.
 | Create new non-`.md` | Create in `src/`, run `bash src/scripts/condense.sh --sync` |
 | Create new command | Create in `src/agent-src/commands/`, sync, `./scripts-run src/scripts/condense --generate-tools` |
 | Delete a file | Delete from `src/` and `dist/agent-src/` |
-| Check what needs condensation | `bash src/scripts/condense.sh --changed` |
-| Mark file as condensed | `bash src/scripts/condense.sh --mark-done {path}` |
+| Check which projections are out of date | `bash src/scripts/condense.sh --changed` |
 | Verify everything is in sync | `bash src/scripts/condense.sh --check` |

package/dist/agent-src/contexts/communication/rules-auto/think-before-action-mechanics.md

@@ -43,7 +43,7 @@ behavior. Cannot → read more.
 ## Consult memory before editing
 
 Invariants live in the memory layer; architectural rationale lives in ADRs.
-Via [`memory-access`](../../../../../../docs/guidelines/agent-infra/memory-access.md),
+Via [`memory-access`](../../../../../docs/guidelines/agent-infra/memory-access.md),
 call `retrieve(types=["domain-invariants"], keys=<touched paths>, limit=3)` —
 a matching `domain-invariant` is a hard constraint. For *why* the current
 shape exists, check the ADR index `docs/decisions/INDEX.md`. Cite the `id` /

package/dist/agent-src/contexts/communication/rules-auto/user-interaction-mechanics.md

@@ -180,6 +180,17 @@ When processing multiple items (e.g., review comments, test failures), show prog
 **Comment 3/7** — `filename.php:42`
 ```
 
+## Bullet floor
+
+Multi-step content earns bullets; each bullet is a complete 1–2-sentence
+statement, never a fragment masquerading as a list item ("Faster." /
+"Better UX." with no subject or verb). A decline or refusal is **never**
+rendered as a bulleted list of reasons — declines are short prose (one or
+two sentences), because a bulleted refusal reads as a checklist to argue
+against rather than a direct answer.
+
+Full example set: [`asking-and-brevity-examples § Bullet floor`](../../../../../../docs/guidelines/agent-infra/asking-and-brevity-examples.md#bullet-floor).
+
 ## Summaries
 
 After completing a batch of actions, provide a summary table:

package/dist/agent-src/contexts/contracts/artifact-engagement-flow.md

@@ -211,26 +211,37 @@ $ grep agent-engagement .gitignore
 The fastest path is the project's own validator — it enforces every
 rule listed above:
 
+```bash
+# Validate every line against the schema + redaction floor
 ```bash
 # Validate every line against the schema + redaction floor
 node -e '
-import pathlib, sys
-sys.path.insert(0, ".agent-src.uncondensed/templates/scripts")
-from telemetry.engagement import EngagementSchemaError, parse_event
-log = pathlib.Path(".agent-engagement.jsonl")
-ok = bad = 0
-for i, line in enumerate(log.read_text().splitlines(), 1):
-    if not line.strip():
-        continue
-    try:
-        parse_event(line + "\n")
-        ok += 1
-    except EngagementSchemaError as e:
-        bad += 1
-        print(f"line {i}: {e}", file=sys.stderr)
-print(f"{ok} valid, {bad} rejected")
+const fs = require("fs");
+const lines = fs.readFileSync(".agent-engagement.jsonl", "utf8").split("
+").filter(Boolean);
+let ok = 0, bad = 0;
+for (const [i, line] of lines.entries()) {
+    try { JSON.parse(line); ok++; }
+    catch (e) { bad++; console.error(`line ${i+1}: ${e.message}`); }
+}
+console.log(`${ok} valid, ${bad} rejected`);
 '
 
+# A bad-line spot-check that does not depend on the validator
+node -e '
+const fs = require("fs");
+const forbidden = /[/\]|\.[a-z0-9]{1,10}$/i;
+for (const line of fs.readFileSync(".agent-engagement.jsonl", "utf8").split("
+").filter(Boolean)) {
+    const obj = JSON.parse(line);
+    for (const kind of ["consulted", "applied"])
+        for (const ids of Object.values(obj[kind] ?? {}))
+            for (const v of ids)
+                if (forbidden.test(v) || v.length > 200) console.log("LEAK:", v);
+}
+'
+```
+
 # A bad-line spot-check that does not depend on the validator
 node -e '
 import json, pathlib, re

package/dist/agent-src/contexts/contracts/command-suggestion-flow.md

@@ -100,6 +100,9 @@ journey that self-suggests; the sub-command is reached by routing from the head
 always works. This keeps the proactive surface to a few journeys, not one
 entry point per mode (9.4.0 review; `road-to-surface-consolidation`, council
 2026-07-20). Standalone commands (no `sub:`) and cluster heads may be eligible.
+Rationale: 160 eligible commands all competing to self-suggest IS the "190
+gleichwertig sichtbare Einstiegspunkte" the review flags; the sub-command flip
+collapses it without removing any command.
 
 ## Subordination — when to stay silent
 

package/dist/agent-src/contexts/contracts/emergency-triage-block.md

@@ -26,7 +26,7 @@ Use this variant in `AGENTS.md` at the package root.
 
 ## Consumer-template variant
 
-Use this variant in `.agent-src.uncondensed/templates/AGENTS.md`. The
+Use this variant in `src/agent-src/templates/AGENTS.md`. The
 consumer's `AGENTS.md` lands at the consumer-project root after install.
 
 ```
@@ -45,7 +45,7 @@ The package-root and the consumer template answer the same five
 questions but in different repos:
 
 - The package-root variant points at this repo's authoring layer
-  (`.agent-src.uncondensed/`) and the package's CI entry point.
+  (`src/`) and the package's CI entry point.
 - The consumer variant tells the agent it is in a **consumer** project
   where `.augment/` is an installed artifact and editing it is wrong.