@mrciphersmith/keryx 0.3.5 → 0.3.7

package/dist/core.js

@@ -8599,15 +8599,15 @@ var CEILINGS_BY_KEY, SKILL_LENGTH_CEILINGS;
 var init_skill_length_ceilings = __esm(() => {
   CEILINGS_BY_KEY = {
     "core/reviewer-skill-creator": 280,
-    "orchestration/code-verifier": 346,
+    "orchestration/code-verifier": 339,
     "orchestration/context-collector": 671,
     "orchestration/feature-analyzer": 447,
     "orchestration/feature-dev": 177,
     "orchestration/flow-orchestrator": 696,
     "orchestration/issue-analyzer": 373,
     "orchestration/job-documenter": 414,
-    "orchestration/job-orchestrator": 2246,
-    "orchestration/task-implementer": 670,
+    "orchestration/job-orchestrator": 2243,
+    "orchestration/task-implementer": 668,
     "planning/autodoc-analyst": 180,
     "planning/autodoc-architect": 179,
     "planning/autodoc-assembler": 145,
@@ -11183,6 +11183,11 @@ var init_rules_export = __esm(() => {
   init_registry();
 });
 
+// src/integrations/jev-edit-guard-surface.ts
+var init_jev_edit_guard_surface = __esm(() => {
+  init_settings_json();
+});
+
 // src/integrations/service.ts
 var init_service = __esm(() => {
   init_registry();
@@ -11191,6 +11196,7 @@ var init_service = __esm(() => {
   init_codecs();
   init_surfaces();
   init_rules_export();
+  init_jev_edit_guard_surface();
   init_surfaces_w5b();
   init_surfaces_learning();
   init_markdown_block();
@@ -23371,6 +23377,7 @@ var exports_service3 = {};
 __export(exports_service3, {
   AC_CHECK_TOKEN_BUDGET: () => AC_CHECK_TOKEN_BUDGET,
   CONFIRMATION_CAVEAT: () => CONFIRMATION_CAVEAT,
+  REVIEW_GATE_CONFIG_PATH: () => REVIEW_GATE_CONFIG_PATH,
   acCheckCacheKey: () => acCheckCacheKey,
   acCheckCachePath: () => acCheckCachePath,
   acCriterionKnown: () => acCriterionKnown,
@@ -37245,6 +37252,18 @@ var HELP_GROUPS = [
     group: "Managed work",
     summary: "Opt-in routing classifier: each request runs on its routing category's model \u2014 /route [on|off]."
   },
+  {
+    kind: "slash",
+    name: "/editguard",
+    group: "Managed work",
+    summary: "Jev EDIT GUARD status, threshold and recent flags for the Claude Code PostToolUse hook, with a toggle."
+  },
+  {
+    kind: "slash",
+    name: "/jevprofile",
+    group: "Managed work",
+    summary: "Every review.jev.* setting next to its measured verdict; toggle one or apply the recommended profile."
+  },
   { kind: "slash", name: "/plan", group: "Managed work", summary: "Toggle read-only mode \u2014 /plan [on|off]." },
   {
     kind: "slash",

package/docs/README.md

@@ -14,6 +14,8 @@ intent, implementation plans, and release evidence do not get mixed together.
   Gherkin scenarios for complete setup, validation, repair, and handoff.
 - [Documentation index](docs/index.md) — compact navigation for the generated
   current-behavior reference.
+- [OpenAI API and ChatGPT subscriptions](docs/cli-reference.md#openai-api-and-chatgpt-subscriptions)
+  — separate providers, browser-completed device login, and connection checks.
 
 ## Product intent
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.3.5",
+  "version": "0.3.7",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {

package/src/gdskills/bundled/install-manifest.json

@@ -116,6 +116,52 @@
       ],
       "stackDetectionAware": true
     },
+    "django": {
+      "description": "Common rules plus the Django-aware component set (extends `python`), installed when `keryx stack detect` finds a matching tag (fail open when detection is unavailable or uncertain).",
+      "modules": [
+        "core-common-rules",
+        "skill-lifecycle"
+      ],
+      "components": [
+        "framework:django",
+        "lang:python"
+      ],
+      "stackDetectionAware": true
+    },
+    "fastapi": {
+      "description": "Common rules plus the FastAPI-aware component set (extends `python`), installed when `keryx stack detect` finds a matching tag (fail open when detection is unavailable or uncertain).",
+      "modules": [
+        "core-common-rules",
+        "skill-lifecycle"
+      ],
+      "components": [
+        "framework:fastapi",
+        "lang:python"
+      ],
+      "stackDetectionAware": true
+    },
+    "rust": {
+      "description": "Common rules plus the Rust stack pack component (`rust-rules` + `rust-skills`, from src/gdskills/bundled/stacks/rust/), installed when `keryx stack detect` finds a matching tag.",
+      "modules": [
+        "core-common-rules",
+        "skill-lifecycle"
+      ],
+      "components": [
+        "lang:rust"
+      ],
+      "stackDetectionAware": true
+    },
+    "java-kotlin-spring": {
+      "description": "Common rules plus the Java/Kotlin + Spring Boot stack pack component (`java-kotlin-spring-rules` + `java-kotlin-spring-skills`, from src/gdskills/bundled/stacks/java-kotlin-spring/), installed when `keryx stack detect` finds a matching tag.",
+      "modules": [
+        "core-common-rules",
+        "skill-lifecycle"
+      ],
+      "components": [
+        "framework:java-kotlin-spring"
+      ],
+      "stackDetectionAware": true
+    },
     "docker-k8s-terraform": {
       "description": "Common rules plus the Docker/Kubernetes/Terraform tool pack component, installed when `keryx stack detect` finds a matching tag (docker, docker-compose, or terraform). Experimental: has not cleared the honest behavioral eval gate yet.",
       "modules": [
@@ -138,80 +184,6 @@
       ],
       "stackDetectionAware": true
     },
-    "full": {
-      "description": "Every registered module and component, unconditionally.",
-      "modules": [
-        "core-common-rules",
-        "skill-lifecycle",
-        "orchestration-skills",
-        "quality-skills",
-        "review-core-skills",
-        "react-review-skills",
-        "mobx-review-skill",
-        "mobx-store-template-rule",
-        "mobx-rules",
-        "mobx-skills",
-        "nestjs-review-skill",
-        "nestjs-dto-rule",
-        "nestjs-rules",
-        "nestjs-skills",
-        "python-rules",
-        "python-skills",
-        "ts-js-node-rules",
-        "ts-js-node-skills",
-        "react-rules",
-        "react-skills",
-        "go-rules",
-        "go-skills",
-        "vue-rules",
-        "vue-skills",
-        "angular-rules",
-        "angular-skills",
-        "nextjs-nuxt-rules",
-        "nextjs-nuxt-skills",
-        "docker-k8s-terraform-rules",
-        "docker-k8s-terraform-skills",
-        "ci-github-gitlab-rules",
-        "ci-github-gitlab-skills",
-        "php-laravel-rules",
-        "php-laravel-skills",
-        "ruby-rails-rules",
-        "ruby-rails-skills",
-        "c-cpp-rules",
-        "c-cpp-skills",
-        "sql-db-rules",
-        "sql-db-skills",
-        "csharp-dotnet-rules",
-        "csharp-dotnet-skills",
-        "swift-ios-rules",
-        "swift-ios-skills",
-        "kotlin-android-rules",
-        "kotlin-android-skills",
-        "flutter-dart-rules",
-        "flutter-dart-skills"
-      ],
-      "components": [
-        "lang:ts-js-node",
-        "framework:react",
-        "capability:mobx",
-        "framework:nestjs",
-        "lang:python",
-        "lang:go",
-        "framework:vue",
-        "framework:angular",
-        "framework:nextjs-nuxt",
-        "tool:docker-k8s-terraform",
-        "tool:ci-github-gitlab",
-        "framework:php-laravel",
-        "framework:ruby-rails",
-        "lang:c-cpp",
-        "capability:sql-db",
-        "lang:csharp-dotnet",
-        "framework:swift-ios",
-        "framework:kotlin-android",
-        "framework:flutter-dart"
-      ]
-    },
     "php-laravel": {
       "description": "Common rules plus the PHP/Laravel stack pack component (`php-laravel-rules` + `php-laravel-skills`, from src/gdskills/bundled/stacks/php-laravel/), installed when `keryx stack detect` finds a matching tag.",
       "modules": [
@@ -299,6 +271,92 @@
         "framework:flutter-dart"
       ],
       "stackDetectionAware": true
+    },
+    "full": {
+      "description": "Every registered module and component, unconditionally.",
+      "modules": [
+        "core-common-rules",
+        "skill-lifecycle",
+        "orchestration-skills",
+        "quality-skills",
+        "review-core-skills",
+        "react-review-skills",
+        "mobx-review-skill",
+        "mobx-store-template-rule",
+        "mobx-rules",
+        "mobx-skills",
+        "nestjs-review-skill",
+        "nestjs-dto-rule",
+        "nestjs-rules",
+        "nestjs-skills",
+        "python-rules",
+        "python-skills",
+        "ts-js-node-rules",
+        "ts-js-node-skills",
+        "react-rules",
+        "react-skills",
+        "go-rules",
+        "go-skills",
+        "vue-rules",
+        "vue-skills",
+        "angular-rules",
+        "angular-skills",
+        "nextjs-nuxt-rules",
+        "nextjs-nuxt-skills",
+        "django-rules",
+        "django-skills",
+        "fastapi-rules",
+        "fastapi-skills",
+        "rust-rules",
+        "rust-skills",
+        "java-kotlin-spring-rules",
+        "java-kotlin-spring-skills",
+        "docker-k8s-terraform-rules",
+        "docker-k8s-terraform-skills",
+        "ci-github-gitlab-rules",
+        "ci-github-gitlab-skills",
+        "php-laravel-rules",
+        "php-laravel-skills",
+        "ruby-rails-rules",
+        "ruby-rails-skills",
+        "c-cpp-rules",
+        "c-cpp-skills",
+        "sql-db-rules",
+        "sql-db-skills",
+        "csharp-dotnet-rules",
+        "csharp-dotnet-skills",
+        "swift-ios-rules",
+        "swift-ios-skills",
+        "kotlin-android-rules",
+        "kotlin-android-skills",
+        "flutter-dart-rules",
+        "flutter-dart-skills"
+      ],
+      "components": [
+        "lang:ts-js-node",
+        "framework:react",
+        "capability:mobx",
+        "framework:nestjs",
+        "lang:python",
+        "lang:go",
+        "framework:vue",
+        "framework:angular",
+        "framework:nextjs-nuxt",
+        "framework:django",
+        "framework:fastapi",
+        "lang:rust",
+        "framework:java-kotlin-spring",
+        "tool:docker-k8s-terraform",
+        "tool:ci-github-gitlab",
+        "framework:php-laravel",
+        "framework:ruby-rails",
+        "lang:c-cpp",
+        "capability:sql-db",
+        "lang:csharp-dotnet",
+        "framework:swift-ios",
+        "framework:kotlin-android",
+        "framework:flutter-dart"
+      ]
     }
   },
   "modules": {
@@ -522,7 +580,7 @@
       "dependencies": [],
       "defaultInstall": true,
       "cost": "light",
-      "stability": "stable"
+      "stability": "experimental"
     },
     "python-skills": {
       "kind": "skill",
@@ -537,7 +595,7 @@
       "dependencies": [],
       "defaultInstall": true,
       "cost": "medium",
-      "stability": "stable"
+      "stability": "experimental"
     },
     "ts-js-node-rules": {
       "kind": "rule",
@@ -667,6 +725,40 @@
       "cost": "medium",
       "stability": "experimental"
     },
+    "django-rules": {
+      "kind": "rule",
+      "description": "Django stack pack rules (coding-style, patterns, security, testing; scoped to *.py/*.pyi, extends python) from src/gdskills/bundled/stacks/django/rules/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/django/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "python-rules"
+      ],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
+    "django-skills": {
+      "kind": "skill",
+      "description": "Django stack pack skills (implementation, testing, code review, build-fix, migrate) from src/gdskills/bundled/stacks/django/skills/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/django/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "python-skills"
+      ],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
+    },
     "vue-rules": {
       "kind": "rule",
       "description": "Vue stack pack rules (coding-style, patterns, security, testing; scoped to *.vue) from src/gdskills/bundled/stacks/vue/rules/.",
@@ -684,6 +776,23 @@
       "cost": "light",
       "stability": "experimental"
     },
+    "fastapi-rules": {
+      "kind": "rule",
+      "description": "FastAPI stack pack rules (coding-style, patterns, security, testing; scoped to *.py/*.pyi, extends python) from src/gdskills/bundled/stacks/fastapi/rules/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/fastapi/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "python-rules"
+      ],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
     "vue-skills": {
       "kind": "skill",
       "description": "Vue stack pack skills (implementation, testing, code review, build-fix, Vue 2 to Vue 3 migration) from src/gdskills/bundled/stacks/vue/skills/.",
@@ -701,6 +810,23 @@
       "cost": "medium",
       "stability": "experimental"
     },
+    "fastapi-skills": {
+      "kind": "skill",
+      "description": "FastAPI stack pack skills (implementation, testing, code review, build-fix) from src/gdskills/bundled/stacks/fastapi/skills/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/fastapi/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [
+        "python-skills"
+      ],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
+    },
     "angular-rules": {
       "kind": "rule",
       "description": "Angular stack pack rules (coding-style, patterns, security, testing; scoped to *.ts/*.html) from src/gdskills/bundled/stacks/angular/rules/.",
@@ -718,6 +844,21 @@
       "cost": "light",
       "stability": "experimental"
     },
+    "rust-rules": {
+      "kind": "rule",
+      "description": "Rust stack pack rules (coding-style, patterns, security, testing; scoped to *.rs) from src/gdskills/bundled/stacks/rust/rules/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/rust/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
     "angular-skills": {
       "kind": "skill",
       "description": "Angular stack pack skills (implementation, testing, code review, build-fix) from src/gdskills/bundled/stacks/angular/skills/.",
@@ -735,6 +876,21 @@
       "cost": "medium",
       "stability": "experimental"
     },
+    "rust-skills": {
+      "kind": "skill",
+      "description": "Rust stack pack skills (implementation, testing, code review, build-fix) from src/gdskills/bundled/stacks/rust/skills/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/rust/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
+    },
     "nextjs-nuxt-rules": {
       "kind": "rule",
       "description": "Next.js/Nuxt meta-framework stack pack rules (coding-style, patterns, security, testing; scoped to *.tsx/*.jsx/*.vue) from src/gdskills/bundled/stacks/nextjs-nuxt/rules/.",
@@ -753,6 +909,21 @@
       "cost": "light",
       "stability": "experimental"
     },
+    "java-kotlin-spring-rules": {
+      "kind": "rule",
+      "description": "Java/Kotlin + Spring Boot stack pack rules (coding-style, patterns, security, testing; scoped to *.java/*.kt/*.kts) from src/gdskills/bundled/stacks/java-kotlin-spring/rules/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/java-kotlin-spring/rules/*.mdc"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [],
+      "defaultInstall": true,
+      "cost": "light",
+      "stability": "experimental"
+    },
     "nextjs-nuxt-skills": {
       "kind": "skill",
       "description": "Next.js/Nuxt meta-framework stack pack skills (implementation, testing, code review, build-fix, upgrade migration) from src/gdskills/bundled/stacks/nextjs-nuxt/skills/.",
@@ -771,6 +942,21 @@
       "cost": "medium",
       "stability": "experimental"
     },
+    "java-kotlin-spring-skills": {
+      "kind": "skill",
+      "description": "Java/Kotlin + Spring Boot stack pack skills (implementation, testing, code review, build-fix, migrate) from src/gdskills/bundled/stacks/java-kotlin-spring/skills/.",
+      "paths": [
+        "src/gdskills/bundled/stacks/java-kotlin-spring/skills/**"
+      ],
+      "targets": [
+        "claude",
+        "keryx-shell"
+      ],
+      "dependencies": [],
+      "defaultInstall": true,
+      "cost": "medium",
+      "stability": "experimental"
+    },
     "mobx-rules": {
       "kind": "rule",
       "description": "MobX stack pack rules (coding-style, patterns, security, testing; scoped to *.ts/*.tsx) from src/gdskills/bundled/stacks/mobx/rules/. Complements, does not replace, the existing mobx-store-template-rule.",
@@ -1233,6 +1419,63 @@
         "origin": "authored"
       }
     },
+    "framework:django": {
+      "family": "framework",
+      "modules": [
+        "django-rules",
+        "django-skills"
+      ],
+      "detectionMarkers": [
+        "django"
+      ],
+      "provenance": {
+        "origin": "authored",
+        "sourceRef": "flow 335, Wave 4 batch 3"
+      }
+    },
+    "framework:fastapi": {
+      "family": "framework",
+      "modules": [
+        "fastapi-rules",
+        "fastapi-skills"
+      ],
+      "detectionMarkers": [
+        "fastapi"
+      ],
+      "provenance": {
+        "origin": "authored",
+        "sourceRef": "flow 335, Wave 4 batch 3"
+      }
+    },
+    "lang:rust": {
+      "family": "language",
+      "modules": [
+        "rust-rules",
+        "rust-skills"
+      ],
+      "detectionMarkers": [
+        "rust"
+      ],
+      "provenance": {
+        "origin": "authored",
+        "sourceRef": "flow 335, Wave 4 batch 3"
+      }
+    },
+    "framework:java-kotlin-spring": {
+      "family": "framework",
+      "modules": [
+        "java-kotlin-spring-rules",
+        "java-kotlin-spring-skills"
+      ],
+      "detectionMarkers": [
+        "spring-boot",
+        "spring"
+      ],
+      "provenance": {
+        "origin": "authored",
+        "sourceRef": "flow 335, Wave 4 batch 3"
+      }
+    },
     "tool:docker-k8s-terraform": {
       "family": "tool",
       "modules": [

package/src/gdskills/bundled/skills/orchestration/code-verifier/SKILL.md

@@ -151,6 +151,17 @@ Capture:
 - Exit code
 - List of circular chains (if any)
 
+**2.4 GitHub CI results (only when the dispatch names a PR or run id):**
+```bash
+gh pr checks <pr> --json name,state,link   # or use the run id already given
+```
+For each failed check, when `review.jev.ci_triage` is on, run `keryx review
+ci-triage --run <id> --json` before filing it as a finding — `real-regression`
+files CRITICAL as usual; `flaky`/`deterministic` files INFO, "likely flaky —
+rerun before treating as a defect"; `infra` files INFO, "infra failure, not a
+code defect." Every red check still appears; only severity and note change.
+Setting off → file CRITICAL as before, no Jev call.
+
 ---
 
 ### Phase 3: ANALYZE
@@ -259,26 +270,13 @@ STATUS: BLOCKED       — could not run checks (missing tooling, wrong directory
 
 ## Integration with job-orchestrator
 
-The orchestrator dispatches `code-verifier` at two points:
-
-**After task-implementer wave (pre-review gate):**
-```
-code-verifier:
-  codebase_path: <worktree_path>
-  scope: changed
-  base_branch: <base_branch from JOB_STATE>
-→ If gate: FAIL → dispatch fix tasks → re-run code-verifier
-→ If gate: PASS → proceed to review
-```
+The orchestrator dispatches `code-verifier` at two points, always with
+`codebase_path: <worktree_path>` and `scope: changed`:
 
-**After fix iterations (post-fix gate):**
-```
-code-verifier:
-  codebase_path: <worktree_path>
-  scope: changed
-→ If gate still FAIL after 3 iterations → report as BLOCKED, skip to report
-→ If gate: PASS → proceed to report
-```
+| Dispatch point | Extra input | On FAIL | On PASS |
+|---|---|---|---|
+| After task-implementer wave (pre-review gate) | `base_branch` from JOB_STATE | dispatch fix tasks, re-run | proceed to review |
+| After fix iterations (post-fix gate) | — | after 3 iterations: report BLOCKED, skip to report | proceed to report |
 
 **The orchestrator's internal "checks" step (2.8) is replaced by `code-verifier` dispatch.**
 
@@ -287,14 +285,9 @@ code-verifier:
 ## Standalone Usage
 
 ```bash
-# Run on current directory, changed files only
-/code-verifier
-
-# Run on specific project
+/code-verifier                        # current directory, changed files only
 /code-verifier --path /path/to/project
-
-# Full project scan (not just changed files)
-/code-verifier --scope full
+/code-verifier --scope full            # full project scan
 ```
 
 ---

package/src/gdskills/bundled/skills/orchestration/flow-orchestrator/SKILL.md

@@ -26,13 +26,9 @@ license: "MIT"
 Flow Orchestrator is the Task Manager-aware implementation orchestrator. Plan bridge: publish the tasks with `plan_set` under the ids `T1`…`Tn`, mirror each `keryx flow task done` with `plan_update`, and publish Phase 4's completion choice as `proposed` — see the `session-plan-bridge` rule.
 It wraps the existing gdskills pipeline with `keryx flow` state.
 
-Use this skill instead of `job-orchestrator` when the user wants a managed
-story/issue lifecycle with frozen acceptance criteria, task state, an explicit
-completion choice, Code Health, and a durable flow package in
-`.metaproject/flows/`.
+Use this skill instead of `job-orchestrator` when the user wants a managed story/issue lifecycle with frozen acceptance criteria, task state, an explicit completion choice, Code Health, and a durable flow package in `.metaproject/flows/`.
 
-Do not modify `job-orchestrator` or `task-implementer` behavior. They remain
-usable without Task Manager. This skill coordinates them through flow state.
+Do not modify `job-orchestrator` or `task-implementer` behavior. They remain usable without Task Manager. This skill coordinates them through flow state.
 
 ## Hard Preconditions
 
@@ -311,6 +307,8 @@ Recommended worker routing:
 | `review` | `review-orchestrator` |
 | `docs` | `job-documenter`, `prd-creator`, or documentation-specific project skill |
 
+**Before the first `task-implementer` dispatch of the run:** when `review.jev.edit_guard` is on (`.metaproject/tasks.config.json`), confirm the guard is active — `keryx review jev-edit-guard status`, else `keryx review jev-edit-guard install` — and say why in one line.
+
 ### Worker communication is schema-governed
 
 Workers do not inherit session state; every dispatch is constructed explicitly
@@ -546,6 +544,8 @@ the bound plus an escalation — never an unbounded loop.
 2. If findings or required check failures remain, create or update a flow fix
    task, dispatch `task-implementer`, push the fix, and run review again.
 
+   **A required check failure is not automatically a fix task.** When `review.jev.ci_triage` is on, run `keryx review ci-triage --run <id> --json` on each failed run first: `top: flaky` (or a `deterministic` override) → rerun once (`gh run rerun --failed <id>`), record it in `journal.md`, and treat a second failure as `real-regression` regardless; `top: real-regression` → investigate and fix as usual; `top: infra` → report it in the completion notes and leave the code alone. The verdict is advisory only — never the sole reason to skip a fix task.
+
    **The threshold is `minor`.** The loop exits when the round reports zero
    findings at `blocker`, `major` or `minor`; `info` does not hold it. State the
    remaining `info` findings in the completion report rather than fixing them