@manhquy/flow-skill 0.4.1 → 0.5.0

package/skills/flow/references/auto-run.md

@@ -1,8 +1,13 @@
 # /flow auto — autonomous build run
 
 `/flow auto` drives the card-building phase autonomously. Preflight via
-`flow.sh auto` (planning complete + cards exist), then YOU (Claude) orchestrate per the
-principles below. Operator chose: **Tier-A auto-merge green cards; halt at security-class.**
+`flow.sh auto` requires planning complete, classified card **risk** (no `unknown`),
+valid security-class DEBT acknowledgement when needed, a reliable live supervisor, and a
+current Stage 05 `semantic_gate` receipt — then writes shared `.flow/auto-state`. Full
+contract: `references/attestations.md`. Then YOU (Claude) orchestrate per the principles
+below. Operator chose: **Tier-A auto-merge green cards; halt at security-class.**
+While auto is active, mechanical transitions require current card semantic/live receipts;
+there is no hidden bypass — use `flow auto stop` for deliberate manual continuation.
 
 ## Tiers (decide per card before acting)
 

package/skills/flow/references/command-dispatch.md

@@ -34,7 +34,9 @@ install dir; run from the project root so `flow/` and `cards/` resolve.
 | `/flow mode work` | `bash <skill>/runner/flow.sh mode work` | Interview once, draft 00-05, pause for scope sign-off, deliver card set; still pass every gate. |
 | `/flow ready` | `bash <skill>/runner/flow.sh ready` | Relay buildable cards; confirm allowed-files truly don't overlap before suggesting parallel. Operator dispatches. |
 | `/flow workspace <verb>` | `bash <skill>/runner/flow.sh workspace add\|list\|enter\|remove\|check\|doctor [...]` | Multi-agent worktree isolation (human-driven, cross-vendor). Relay the runner output faithfully: on `add`, hand the operator the printed cd/env block (one worktree per agent — Claude `--worktree`/`-w`, Codex CLI manual + `CODEX_HOME`, Antigravity = open the dir as a workspace); on `check`/`doctor` exit 1, surface the collision/drift, don't auto-`--force` a `remove`. git is the source of truth; the `.flow/workspaces.jsonl` side-file only adds vendor/card/port/task. Advisory — not a `next` gate. |
-| `/flow auto` | `bash <skill>/runner/flow.sh auto` | On preflight PASS, drive the autonomous run per SKILL.md AUTO principles (subagent/card, planner review, worktree, Tier-C halt on security debt). |
+| `/flow auto` | `bash <skill>/runner/flow.sh auto` | On preflight PASS (risk + Stage 05 receipt), shared auto-state is active — drive the autonomous run per SKILL.md AUTO principles + `attestations.md`. |
+| `/flow auto stop` | `bash <skill>/runner/flow.sh auto stop` | Clear auto policy; return to warning-only manual path. |
+| `/flow attest …` | `bash <skill>/runner/flow.sh attest semantic\|live-verify\|status\|recover …` | Mint/inspect receipts. Must-ask before mint/recover; `attest status` is read-only. |
 | `/flow recall` | `bash <skill>/runner/flow.sh recall` | Read back prior knowledge (open debt, recent retro, previous-card scope, harness friction/backlog, playbooks). Run at the START of a stage/card; apply it, don't re-learn known pain. |
 | `/flow unlock` | `bash <skill>/runner/flow.sh unlock` | Clear this project's concurrency lock after a crashed/abandoned session. Confirm the other session is really gone first. |
 | `/flow retro` | `bash <skill>/runner/flow.sh retro` | Ask the 3 questions; the operator writes the RETRO.md line — never you. |

package/skills/flow/references/concierge.md

@@ -63,6 +63,7 @@ operator-authority-only):
 - promote
 - mode
 - auto
+- attest
 - workspace
 - unlock
 - retro

package/skills/flow/references/debt-and-halts.md

@@ -39,3 +39,5 @@ A run HALTS and reports — never silently continues — on any of:
 
 On halt: state what stopped it, what's done so far, the open debt/blocker, and the 2-4
 concrete options for the operator. Let them decide — don't patch around a regression.
+
+See also: `references/attestations.md` for security-class **risk-ack** auto contract (v0.28).

package/skills/flow/references/ground-truth-gates.md

@@ -16,6 +16,9 @@ and used only to add color, never to pass a gate.
 | Card DONE | deploy ran + **live URL verified as a user** (world-state evidence pasted) | "merged" / "deploy succeeded" / "tests pass" |
 | Card DONE (mechanical floor) | `flow.sh check` / `card done`: `## Evidence` multi-signal score ≥2 (URL + curl/command/test-log/path/DB/skill categories; denylist example.com etc.) | process-only prose (PR approvals, CI green, release notes alone); empty/placeholder |
 | Dep ready / parallel | `ready` + graph deps-met: dep `status=done` **and** same Evidence multi-signal floor | hand-edit `status: done` with hollow Evidence |
+| Auto activation | risk set valid + current Stage 05 `semantic_gate` receipt (`attestations.md`) | prose “planning looks done” |
+| Auto `check` / `card done` | current fingerprint-bound `semantic_gate` (+ `live_verify` when done) | self-assessed review / Evidence text alone |
+| Merged worktree remove (auto) | both card receipts current for mapped card | `--force` without receipts |
 | Contract not drifted | contract-test card asserts every endpoint exists in live `/openapi.json` with matching shape | "backend and UI agree" (they don't, silently) |
 
 ## Rules