@noodleseed/agent-kit 0.38.0 → 0.40.0

package/skills/codex/SKILL.md

@@ -1,9 +1,9 @@
 ---
 name: noodle-seed
-description: Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI.
+description: "Use when building, validating, testing, deploying, or operating a local or hosted Noodle Seed MCP server or app authored in TypeScript with the noodle CLI."
 ---
 
-<!-- noodle-skill version:0.38.0 hash:75dd0f6f85b04858 -->
+<!-- noodle-skill version:0.40.0 hash:2ea7d6dcc8358b35 -->
 
 # Noodle Seed
 
@@ -17,23 +17,25 @@ If the request is unrelated to the Noodle MCP surface, stop here: follow the pro
 
 ## Route the request
 
-Choose exactly one primary route from the user outcome below. Read that primary reference in full, then begin the work. Read supporting references only when the primary workflow sends you there or the named evidence exposes that concern. Stop discovery once the route is selected.
+Choose exactly one primary route from the user outcome below, then load the selected sibling skill and hand off the request. Read that primary reference in full; read supporting references only when the sibling or observed evidence requires them. Do not reread the corpus or restart discovery after the handoff.
 
-Apply this precedence when wording overlaps: diagnosis of an existing failure takes the verification route; an MCP App/UI outcome takes the App route; external API integration from credentials, a URL, or an API specification takes precedence over generic server building; hosted inspection is the read-only route; hosted mutation requires the explicitly requested deployment route.
+Apply this precedence when wording overlaps: concrete failure evidence takes the debugging route; an MCP App/UI outcome takes the App route; external API integration from credentials, a URL, or an API specification takes precedence over generic server building; hosted inspection is debugging read-only; hosted mutation requires the explicitly requested deployment route.
 
 Negative routing examples: “Inspect hosted logs/status” → `inspect-hosted` (read-only). “Prepare for deployment” → the applicable build or verification route and stop with a handoff; preparation does not authorize `link`, hosted config, deployment, rollback, host writes, or submission. “Keep this local” → a build or verification route, never a hosted route.
 
-| User outcome | Primary reference | Supporting references only when needed | Done when |
+| User outcome | Load sibling skill | Canonical playbook | Done when |
 | :--- | :--- | :--- | :--- |
-| Create or extend a headless MCP server whose external API contract is already modeled | `references/build-an-mcp-server.md` | `references/authoring-workflow.md`, `references/sdk-surface.md` | The requested server behavior is locally validated and tested; connector reads have real-output evidence. |
-| Connect a real API when credentials or an API specification are available | `references/connect-an-api.md` | `references/authoring-workflow.md` | A representative live read returns populated, intentionally mapped fields without exposing credentials. |
-| Build or change an MCP App, widget, or host-visible UI | `references/build-an-mcp-app.md` | `references/experience-design.md`, `references/widgets-and-apps.md` | The UI has a stated user benefit, passes the requested checks, and degrades to useful text. |
-| Validate, test, diagnose, or recover a failing local or hosted project | `references/verify-and-recover.md` | `references/agent-contract.md`, `references/compile-errors.md` | The failing evidence layer is repaired and rerun, or the remaining blocker and exact next action are reported. |
-| Inspect or diagnose hosted status, logs, metrics, events, or deployment metadata read-only | `references/inspect-hosted.md` | None | The requested hosted evidence is reported without changing target, configuration, access, or deployment state. |
-| Deploy, configure, connect with writes, change access, or roll back a hosted MCP service when explicitly requested | `references/deploy-and-ops.md` | `references/cli-commands.md` | The requested hosted state is evidenced without claiming unperformed host or production checks. |
-| Embed a Noodle assistant in an existing SaaS or web application | `references/embedded-assistant.md` | `references/authoring-workflow.md` | The requested embed boundary works with verified identity and credential separation at the tested level. |
-| Prepare or submit an integration to a host directory | `references/publishing.md` | `references/app-directory-compliance.md` | The requested submission evidence is complete and any host-review uncertainty is explicit. |
-| Report a Noodle Seed bug, documentation gap, or product improvement | `references/feedback.md` | None | A sanitized command is shown to the user and is submitted only after explicit approval. |
+| Turn a vague MCP product idea into a bounded design before implementation | `designing-mcp-products` | `references/experience-design.md` (`references/authoring-workflow.md`) | The product contract identifies the user benefit, model boundary, evidence, and next implementation skill. |
+| Create or extend a headless MCP server whose external API contract is already modeled | `authoring-mcp-servers` | `references/build-an-mcp-server.md` (`references/authoring-workflow.md`, `references/sdk-surface.md`) | The requested server behavior is locally validated and tested; connector reads have real-output evidence. |
+| Connect a real API when credentials or an API specification are available | `connecting-apis-to-mcp` | `references/connect-an-api.md` (`references/authoring-workflow.md`) | A representative live read returns populated, intentionally mapped fields without exposing credentials. |
+| Build or change an MCP App, widget, or host-visible UI | `building-mcp-apps` | `references/build-an-mcp-app.md` (`references/experience-design.md`, `references/widgets-and-apps.md`) | The UI has a stated user benefit, passes the requested checks, and degrades to useful text. |
+| Validate, test, or prove a project at a named delivery evidence level | `verifying-mcp-delivery` | `references/verify-and-recover.md` (`references/test-in-hosts.md`) | The failing evidence layer is repaired and rerun, or the remaining blocker and exact next action are reported. |
+| Diagnose or recover an existing project with concrete local or hosted failure evidence | `debugging-mcp-delivery` | `references/verify-and-recover.md` (`references/troubleshooting.md`, `references/inspect-hosted.md`) | The failing layer is repaired and rerun, or the stable blocker and exact next action are reported. |
+| Inspect or diagnose hosted status, logs, metrics, events, or deployment metadata read-only | `debugging-mcp-delivery` | `references/verify-and-recover.md` (`references/troubleshooting.md`, `references/inspect-hosted.md`) | The requested hosted evidence is reported without changing target, configuration, access, or deployment state. |
+| Deploy, configure, connect with writes, change access, or roll back a hosted MCP service when explicitly requested | `deploying-mcp-services` | `references/deploy-and-ops.md` (`references/cli-commands.md`) | The requested hosted state is evidenced without claiming unperformed host or production checks. |
+| Embed a Noodle assistant in an existing SaaS or web application | `embedding-mcp-assistants` | `references/embedded-assistant.md` (`references/authoring-workflow.md`) | The requested embed boundary works with verified identity and credential separation at the tested level. |
+| Prepare or submit an integration to a host directory | `publishing-mcp-integrations` | `references/publishing.md` (`references/app-directory-compliance.md`) | The requested submission evidence is complete and any host-review uncertainty is explicit. |
+| Report a Noodle Seed bug, documentation gap, or product improvement | `reporting-noodle-feedback` | `references/feedback.md` (None) | A sanitized command is shown to the user and is submitted only after explicit approval. |
 
 ## Common machine loop
 

package/skills/codex/authoring-mcp-servers/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: authoring-mcp-servers
+description: "Use when creating or extending a headless Noodle Seed MCP server, tool, resource, prompt, or typed model-facing capability."
+---
+
+<!-- noodle-skill version:0.40.0 hash:0b2fd8c7e43fc69f -->
+
+# authoring-mcp-servers
+
+Deliver focused model-facing MCP behavior through the configured TypeScript entrypoint.
+
+## Use when
+
+- Build a headless MCP server.
+- Add a typed tool, resource, or prompt.
+
+## Do not use when
+
+- Do not use when the primary outcome is a widget.
+- Do not use only to diagnose or deploy existing behavior.
+
+## Required inputs
+
+- Requested user intent.
+- Expected typed result.
+- External operation contract when applicable.
+
+## Workflow
+
+Read and follow the canonical playbook `references/build-an-mcp-server.md` at `../noodle-seed/references/build-an-mcp-server.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/authoring-workflow.md` at `../noodle-seed/references/authoring-workflow.md` only when the playbook or observed evidence names that concern.
+Load `references/sdk-surface.md` at `../noodle-seed/references/sdk-surface.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+The TypeScript behavior validates and passes local smoke; connector reads also have real-output proof.
+
+## Recovery paths
+
+Resume at the first failing compile, smoke, credential, mapping, or live-read layer.
+
+## Stop conditions
+
+Stop at local delivery unless another requested outcome explicitly authorizes a handoff.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/building-mcp-apps/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: building-mcp-apps
+description: "Use when a Noodle Seed MCP App, widget, interactive card, visual interaction, or host-visible UI is the primary requested outcome."
+---
+
+<!-- noodle-skill version:0.40.0 hash:f7fa54992c8d7692 -->
+
+# building-mcp-apps
+
+Deliver an MCP App whose visual interaction earns its place and preserves useful model-visible fallback.
+
+## Use when
+
+- Build an MCP App or widget.
+- Add a host-visible interactive workflow.
+
+## Do not use when
+
+- Do not use when concise text fully serves the user.
+- Do not use for headless server work with no UI outcome.
+
+## Required inputs
+
+- Target user and explicit UI benefit.
+- Primary interaction and states.
+- Model-visible result and text fallback.
+
+## Workflow
+
+Read and follow the canonical playbook `references/build-an-mcp-app.md` at `../noodle-seed/references/build-an-mcp-app.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/experience-design.md` at `../noodle-seed/references/experience-design.md` only when the playbook or observed evidence names that concern.
+Load `references/widgets-and-apps.md` at `../noodle-seed/references/widgets-and-apps.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+The App passes validation, local smoke, app checks, and the requested preview or host evidence level.
+
+## Recovery paths
+
+Distinguish data-contract, widget-runtime, rendering, host, and deployment failures.
+
+## Stop conditions
+
+Stop before deployment or publication unless that distinct outcome was requested.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/connecting-apis-to-mcp/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: connecting-apis-to-mcp
+description: "Use when credentials, an API URL, an OpenAPI document, or an observed response must become real Noodle Seed MCP behavior."
+---
+
+<!-- noodle-skill version:0.40.0 hash:1e86b8704f407bd3 -->
+
+# connecting-apis-to-mcp
+
+Connect a real API using managed credentials and mappings proven against observed output.
+
+## Use when
+
+- Connect this OpenAPI URL to MCP.
+- Use these API credentials for a real connector.
+
+## Do not use when
+
+- Do not use for static local behavior.
+- Do not use when credentials or a representative safe read are unavailable.
+
+## Required inputs
+
+- API base URL and authentication scheme.
+- Representative safe read.
+- User intent and observed response shape.
+
+## Workflow
+
+Read and follow the canonical playbook `references/connect-an-api.md` at `../noodle-seed/references/connect-an-api.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/authoring-workflow.md` at `../noodle-seed/references/authoring-workflow.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+A safe live read returns populated intentionally mapped fields through the effective local target.
+
+## Recovery paths
+
+Separate authentication, transport, response-shape, mapping, and empty-result failures before editing.
+
+## Stop conditions
+
+Stop before live writes without explicit approval, known effect, and a safe target.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/debugging-mcp-delivery/SKILL.md

@@ -0,0 +1,48 @@
+---
+name: debugging-mcp-delivery
+description: "Use when an existing Noodle Seed MCP project has a concrete validation, runtime, connector, App, host, deployment, or production failure."
+---
+
+<!-- noodle-skill version:0.40.0 hash:aa715bae12041d7c -->
+
+# debugging-mcp-delivery
+
+Repair or isolate the first failing evidence layer while preserving everything already proven.
+
+## Use when
+
+- Diagnose this failing MCP project.
+- Inspect a hosted failure from logs or status.
+
+## Do not use when
+
+- Do not use for a greenfield build with no failure evidence.
+- Do not mutate hosted state during read-only inspection.
+
+## Required inputs
+
+- Exact failing command or symptom.
+- Current target and evidence level.
+- Most recent sanitized failure.
+
+## Workflow
+
+Read and follow the canonical playbook `references/verify-and-recover.md` at `../noodle-seed/references/verify-and-recover.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/troubleshooting.md` at `../noodle-seed/references/troubleshooting.md` only when the playbook or observed evidence names that concern.
+Load `references/inspect-hosted.md` at `../noodle-seed/references/inspect-hosted.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+The failed layer is rerun successfully, or the stable blocker and exact next action are reported.
+
+## Recovery paths
+
+After two attempts with the same signature, stop editing and preserve the repro and passing layers.
+
+## Stop conditions
+
+Stop before hosted mutation unless the user separately requests deploying-mcp-services.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/deploying-mcp-services/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: deploying-mcp-services
+description: "Use when the user explicitly requests a Noodle Seed hosted link, configuration write, deployment, access change, rollback, or connection write."
+---
+
+<!-- noodle-skill version:0.40.0 hash:93e735b7ffb45df1 -->
+
+# deploying-mcp-services
+
+Apply only the explicitly authorized hosted mutation to the explicit org, app, and environment.
+
+## Use when
+
+- Deploy this MCP service to an explicit environment.
+- Roll back or change hosted access.
+
+## Do not use when
+
+- Do not use for preparation, inspection, or local-only work.
+- Do not select or default a mutation target implicitly.
+
+## Required inputs
+
+- Explicit org, app, and environment.
+- Authorized mutation.
+- Pre-deploy verification evidence.
+
+## Workflow
+
+Read and follow the canonical playbook `references/deploy-and-ops.md` at `../noodle-seed/references/deploy-and-ops.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/cli-commands.md` at `../noodle-seed/references/cli-commands.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+The requested hosted state is confirmed without claiming unperformed host or production checks.
+
+## Recovery paths
+
+Preserve local evidence and isolate authentication, target, build, rollout, health, or rollback failures.
+
+## Stop conditions
+
+Stop and ask when target, authority, or effect is ambiguous.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/designing-mcp-products/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: designing-mcp-products
+description: "Use when a Noodle Seed MCP product idea needs conversational fit, user benefit, scope, interaction, or evidence design before implementation."
+---
+
+<!-- noodle-skill version:0.40.0 hash:76cce86729cffbee -->
+
+# designing-mcp-products
+
+Produce the smallest decision-ready MCP product design before code or hosted mutation.
+
+## Use when
+
+- Turn a vague product idea into an MCP product.
+- Decide whether this job needs an MCP App.
+
+## Do not use when
+
+- Do not use for an already specified implementation.
+- Do not use for generic product or UI design outside MCP.
+
+## Required inputs
+
+- Target user and job.
+- System data or action the model cannot supply.
+- Requested stopping point.
+
+## Workflow
+
+Read and follow the canonical playbook `references/experience-design.md` at `../noodle-seed/references/experience-design.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/authoring-workflow.md` at `../noodle-seed/references/authoring-workflow.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+A bounded product contract states user benefit, model boundary, interaction, fallback, risks, and next implementation skill.
+
+## Recovery paths
+
+If the idea is broad, reduce it to one conversational job and one representative success path.
+
+## Stop conditions
+
+Stop before implementation when the design inputs or product fit are unresolved.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/embedding-mcp-assistants/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: embedding-mcp-assistants
+description: "Use when embedding a Noodle assistant into an existing SaaS or web application with browser, identity, session, and credential boundaries."
+---
+
+<!-- noodle-skill version:0.40.0 hash:5d8f40f904d6ab4b -->
+
+# embedding-mcp-assistants
+
+Deliver the requested assistant embed with identity and credential separation proven at the tested level.
+
+## Use when
+
+- Embed the Noodle assistant in an existing web app.
+- Wire browser mounting and session exchange.
+
+## Do not use when
+
+- Do not use to build a standalone MCP App.
+- Do not use when the request is only server authoring or deployment.
+
+## Required inputs
+
+- Application origin and mounting point.
+- Identity/session boundary.
+- Requested local or hosted evidence level.
+
+## Workflow
+
+Read and follow the canonical playbook `references/embedded-assistant.md` at `../noodle-seed/references/embedded-assistant.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/authoring-workflow.md` at `../noodle-seed/references/authoring-workflow.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+The embed works at the requested boundary without forwarding inbound credentials to business backends.
+
+## Recovery paths
+
+Localize failures to origin, session exchange, browser mount, MCP surface, or hosted configuration.
+
+## Stop conditions
+
+Stop when unavailable identity, origin, or hosted authority blocks the next evidence layer.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/examples/hello/README.md

@@ -9,6 +9,9 @@ When an installed Noodle Developer plugin drives this example, its skill runs th
 `noodle` commands through the plugin-managed, version-pinned launcher and isolated host profile.
 Do not install or update a global CLI: the coding agent writes and tests this source while Noodle
 guides and operates the validate, preview, deploy, inspect, and debug workflow.
+If that agent discovers a Noodle Seed product gap while working, the installed skill prepares a
+sanitized `noodle feedback` proposal, discovers current fields from `noodle commands --json`, and
+submits it only after showing the exact command and receiving explicit user approval.
 
 ```sh
 noodle dev examples/hello/src/server.ts --app hello

package/skills/codex/publishing-mcp-integrations/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: publishing-mcp-integrations
+description: "Use when preparing, reviewing, or submitting a Noodle Seed MCP integration to a host or app directory."
+---
+
+<!-- noodle-skill version:0.40.0 hash:efffbf82007f935d -->
+
+# publishing-mcp-integrations
+
+Produce complete submission evidence with host-review uncertainty stated explicitly.
+
+## Use when
+
+- Prepare this MCP integration for a directory.
+- Review or submit the host listing.
+
+## Do not use when
+
+- Do not use for ordinary deployment.
+- Do not submit when the user requested preparation or review only.
+
+## Required inputs
+
+- Target directory.
+- Current deployment and verification evidence.
+- Requested review, preparation, or submission boundary.
+
+## Workflow
+
+Read and follow the canonical playbook `references/publishing.md` at `../noodle-seed/references/publishing.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/app-directory-compliance.md` at `../noodle-seed/references/app-directory-compliance.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+Required product, policy, deployment, media, and test evidence is present or explicitly missing.
+
+## Recovery paths
+
+Return missing implementation or evidence to its owning skill without restarting discovery.
+
+## Stop conditions
+
+Stop before external submission without explicit user authorization.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/references/feedback.md

@@ -39,7 +39,7 @@ noodle feedback "resources list --json omits the truncated flag the docs promise
   --type fix --severity P2 --area cli --json
 ```
 
-This is an example only; build the exact command for the finding and show it before execution. The message is required (1–4000 chars). Pass `--json` and parse the envelope: success is `{ok:true,data:{reference,labels}}`; a `429` means the per-user hourly budget (5) is spent — report that it was not sent and never retry-loop. The CLI attaches only the disclosed light diagnostics automatically: CLI version, OS/platform, Node version. Nothing else is collected.
+This is an example only; build the exact command for the finding and show it before execution. Read `noodle feedback --help` for human-readable constraints or inspect `noodle commands --json` for the same machine-readable usage, enum, and length metadata instead of guessing accepted values. The message is required (1–4000 chars). Pass `--json` and parse the envelope: success is `{ok:true,data:{reference,labels}}`; a `429` means the per-user hourly budget (5) is spent — report that it was not sent and never retry-loop. The CLI attaches only the disclosed light diagnostics automatically: CLI version, OS/platform, Node version. Nothing else is collected.
 
 ## Choose the structured fields
 

package/skills/codex/reporting-noodle-feedback/SKILL.md

@@ -0,0 +1,46 @@
+---
+name: reporting-noodle-feedback
+description: "Use when a Noodle Seed bug, misleading instruction, missing capability, or concrete product improvement should be proposed to the user."
+---
+
+<!-- noodle-skill version:0.40.0 hash:1e23938b39956ef8 -->
+
+# reporting-noodle-feedback
+
+Offer one sanitized feedback command and submit it only after informed explicit approval.
+
+## Use when
+
+- Report a Noodle Seed bug or documentation gap.
+- Propose a concrete Noodle product improvement.
+
+## Do not use when
+
+- Do not use for generic project bugs.
+- Do not send customer code, identifiers, logs, or secrets.
+
+## Required inputs
+
+- One distinct finding.
+- Sanitized observed and expected behavior.
+- User approval for the exact command.
+
+## Workflow
+
+Read and follow the canonical playbook `references/feedback.md` at `../noodle-seed/references/feedback.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+
+## Verification evidence
+
+The user saw the exact sanitized command; only a returned reference proves submission.
+
+## Recovery paths
+
+If login or rate limits block submission, report that nothing was sent and do not retry-loop.
+
+## Stop conditions
+
+Stop before running the command until the user explicitly approves it.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.

package/skills/codex/verifying-mcp-delivery/SKILL.md

@@ -0,0 +1,47 @@
+---
+name: verifying-mcp-delivery
+description: "Use when proving a Noodle Seed MCP project works at a named compile, local, connector, App, host, deployment, or production evidence level."
+---
+
+<!-- noodle-skill version:0.40.0 hash:6ef6ef551e26b78e -->
+
+# verifying-mcp-delivery
+
+Report the highest evidence level actually rerun without upgrading weaker proof.
+
+## Use when
+
+- Verify this MCP delivery before handoff.
+- Prove which delivery layers currently pass.
+
+## Do not use when
+
+- Do not use as a substitute for fixing a known failure.
+- Do not infer hosted health from local success.
+
+## Required inputs
+
+- Requested evidence level.
+- Current target.
+- Existing evidence and its freshness.
+
+## Workflow
+
+Read and follow the canonical playbook `references/verify-and-recover.md` at `../noodle-seed/references/verify-and-recover.md`. It owns the workflow; do not recreate it here or load the command catalog speculatively.
+Load `references/test-in-hosts.md` at `../noodle-seed/references/test-in-hosts.md` only when the playbook or observed evidence names that concern.
+
+## Verification evidence
+
+Every dependency below the requested level passes now, or the first unproven layer is explicit.
+
+## Recovery paths
+
+Hand a concrete failing layer to debugging-mcp-delivery with all passing evidence preserved.
+
+## Stop conditions
+
+Stop after the requested level passes or the first bounded failure is isolated.
+
+## Handoff contract
+
+Pass the selected outcome, explicit target, changed files, commands run, passing evidence, first unproven evidence layer, sanitized failure, remaining authority, and exact next action. The receiving skill continues from that layer; do not restart discovery or discard prior proof.