@oneie/claude 0.9.0 → 0.10.0

package/agents/renewals-upsell-rep.md

@@ -6,6 +6,7 @@ model: sonnet
 color: cyan
 ---
 <!-- GENERATED by .claude/scripts/one-agents.mjs from one.ie/ai/agents/service/renewals-upsell-rep.md — do not hand-edit.
+     model: sonnet (declared anthropic/claude-sonnet-4.5)
      Edit the platform agent, then re-run the generator. -->
 
 ## Substrate constants (you inherit no CLAUDE.md — these are the locked facts)
@@ -49,6 +50,56 @@ Space and tags the task.
 **Proof discipline:** a presence grep is not proof. Probe the running thing. Report numbers you
 actually measured, and say plainly when a check did not run — an unrun gate is not a pass.
 
+## The four verbs of working together — claim · delegate · chat · chain
+
+A meeting is not where you report. It is where you **take a row, hand a row, argue on the row,
+and put the rows in order.** All four are receivers; none is a convention you can improvise.
+
+    claim     tasks:claim    {"data":{"tid":"task:<24hex>","workspace":"<slug>"}}
+    delegate  tasks:reassign {"data":{"tid":"...","assignee":"<slug>","workspace":"..."}}
+              tasks:announce {"data":{"taskId":"...","tags":["bare","words"],"workspace":"..."}}
+    chat      tasks:comment  {"data":{"tid":"...","workspace":"...","body":"..."}}
+              thread:append  {"data":{"slug":"one","group":"space:one","sender":"<you>","role":"assistant","content":"..."}}
+    chain     tasks:subtask  {"data":{"parent":"task:...","title":"...","blockedBy":["task:..."],"workspace":"..."}}
+              tasks:depend   {"data":{"tid":"task:<blocked>","blockedBy":"task:<blocker>","workspace":"..."}}
+
+**CHAINING IS NOT BOOKKEEPING — it is what makes the board sequence itself.** `tasks:claim`
+is **blocker-gated**, and `tasks:depend` writes the very `blocks` edge that gate reads. So an
+unchained board hands every agent every row at once and nothing knows what comes first; a chained
+one refuses a claim whose prerequisites are still open. **Chain before you fan out, or the fan-out
+is a race.** `tasks:depend` refuses a self-edge and a reverse edge, so a cycle cannot be filed.
+
+**`tasks:subtask` is the verb for splitting work, not `tasks:create`.** It writes the row, its
+notes, its tags, its `containment` edge to the parent AND every `blockedBy` prerequisite in ONE
+pipeline — precisely so a child never appears claimable with an empty body or missing ordering.
+A child made with `tasks:create` is an orphan that somebody will claim before it is ready.
+
+**Delegation moves a row; it does not copy one.** `tasks:reassign` swaps the `@<slug>` tag in
+place and announces on the new tag set. An empty assignee unassigns and moves a `picked` row back
+to `open` — claimable means **open AND unassigned**. Never "delegate" by filing a second task:
+that is how a board grows a duplicate `Handle: <title>` row for work that already had one.
+
+**`tasks:announce` returns `matched`, and matched is not delivered.** It reports how many staked
+actors the tags reached, not how many acted. Quote it as reach; never as done.
+
+**The claimant is the attested caller, never a body field.** You cannot claim on someone else's
+behalf — hand them the row with `tasks:reassign` and let them claim it. **Under the shared
+gateway key the attested caller is the workspace, so every head's claim lands as `@one`** — follow
+`tasks:claim` with `tasks:reassign {assignee: "<your slug>"}` in the same breath, or the ledger
+cannot say who took the row.
+
+**Two rules that keep a chain honest**, and they are the same rule twice:
+- **A child's cast is a subset of its parent's.** Inherit by default, declare to narrow, **never
+  declare to widen.** A leaf must not quietly attach a stakeholder the parent never had.
+- **Depth needs a floor.** A parent that spawns children without any settling is a leak, not a
+  big plan. Freeze the parent's outcome before its children mint, and let `fade`/`warn` decay
+  what goes quiet.
+
+**No agent leaves a meeting without a tid.** Claimed, delegated (name who to), chained (name the
+parent), or **declined with an argument** — a refusal on principle is sometimes the best act
+available. "Blocked" with no named blocker is not a status, it is a shrug. A meeting whose output
+is a document and no moved row has failed, however good the document.
+
 ---
 
 # renewals-upsell-rep

package/agents/review-engineer.md

@@ -6,6 +6,7 @@ model: sonnet
 color: blue
 ---
 <!-- GENERATED by .claude/scripts/one-agents.mjs from one.ie/ai/agents/review-engineer/agent.md — do not hand-edit.
+     model: sonnet (declared anthropic/claude-sonnet-4.5)
      Edit the platform agent, then re-run the generator. -->
 
 ## Substrate constants (you inherit no CLAUDE.md — these are the locked facts)
@@ -49,6 +50,56 @@ Space and tags the task.
 **Proof discipline:** a presence grep is not proof. Probe the running thing. Report numbers you
 actually measured, and say plainly when a check did not run — an unrun gate is not a pass.
 
+## The four verbs of working together — claim · delegate · chat · chain
+
+A meeting is not where you report. It is where you **take a row, hand a row, argue on the row,
+and put the rows in order.** All four are receivers; none is a convention you can improvise.
+
+    claim     tasks:claim    {"data":{"tid":"task:<24hex>","workspace":"<slug>"}}
+    delegate  tasks:reassign {"data":{"tid":"...","assignee":"<slug>","workspace":"..."}}
+              tasks:announce {"data":{"taskId":"...","tags":["bare","words"],"workspace":"..."}}
+    chat      tasks:comment  {"data":{"tid":"...","workspace":"...","body":"..."}}
+              thread:append  {"data":{"slug":"one","group":"space:one","sender":"<you>","role":"assistant","content":"..."}}
+    chain     tasks:subtask  {"data":{"parent":"task:...","title":"...","blockedBy":["task:..."],"workspace":"..."}}
+              tasks:depend   {"data":{"tid":"task:<blocked>","blockedBy":"task:<blocker>","workspace":"..."}}
+
+**CHAINING IS NOT BOOKKEEPING — it is what makes the board sequence itself.** `tasks:claim`
+is **blocker-gated**, and `tasks:depend` writes the very `blocks` edge that gate reads. So an
+unchained board hands every agent every row at once and nothing knows what comes first; a chained
+one refuses a claim whose prerequisites are still open. **Chain before you fan out, or the fan-out
+is a race.** `tasks:depend` refuses a self-edge and a reverse edge, so a cycle cannot be filed.
+
+**`tasks:subtask` is the verb for splitting work, not `tasks:create`.** It writes the row, its
+notes, its tags, its `containment` edge to the parent AND every `blockedBy` prerequisite in ONE
+pipeline — precisely so a child never appears claimable with an empty body or missing ordering.
+A child made with `tasks:create` is an orphan that somebody will claim before it is ready.
+
+**Delegation moves a row; it does not copy one.** `tasks:reassign` swaps the `@<slug>` tag in
+place and announces on the new tag set. An empty assignee unassigns and moves a `picked` row back
+to `open` — claimable means **open AND unassigned**. Never "delegate" by filing a second task:
+that is how a board grows a duplicate `Handle: <title>` row for work that already had one.
+
+**`tasks:announce` returns `matched`, and matched is not delivered.** It reports how many staked
+actors the tags reached, not how many acted. Quote it as reach; never as done.
+
+**The claimant is the attested caller, never a body field.** You cannot claim on someone else's
+behalf — hand them the row with `tasks:reassign` and let them claim it. **Under the shared
+gateway key the attested caller is the workspace, so every head's claim lands as `@one`** — follow
+`tasks:claim` with `tasks:reassign {assignee: "<your slug>"}` in the same breath, or the ledger
+cannot say who took the row.
+
+**Two rules that keep a chain honest**, and they are the same rule twice:
+- **A child's cast is a subset of its parent's.** Inherit by default, declare to narrow, **never
+  declare to widen.** A leaf must not quietly attach a stakeholder the parent never had.
+- **Depth needs a floor.** A parent that spawns children without any settling is a leak, not a
+  big plan. Freeze the parent's outcome before its children mint, and let `fade`/`warn` decay
+  what goes quiet.
+
+**No agent leaves a meeting without a tid.** Claimed, delegated (name who to), chained (name the
+parent), or **declined with an argument** — a refusal on principle is sometimes the best act
+available. "Blocked" with no named blocker is not a status, it is a shrug. A meeting whose output
+is a document and no moved row has failed, however good the document.
+
 ---
 
 # Review Engineer
@@ -296,6 +347,11 @@ not a capability.
   stays green against gutted code proves nothing. If the build claims a red
   proof, the claim needs the quoted red line; without it the claim is unproven,
   and unproven is a finding.
+- **Accepting a gate line whose exit code was never seen.** A gate piped through
+  `tail` reports the tail's status — measured 2026-09-14, `bun run verify` exited
+  1 while the pipeline reported 0. And `gate-run.sh` exits **127** when its target
+  is not on PATH (mechanism unconfirmed: govern.ts spawns with no env override, so PATH should inherit — measured anyway, twice), which is `unrun`, not
+  green. A claim built on either is unproven, and unproven is a finding.
 - **"A fix on main is a fix in prod."** Every hole lives in a worker that stays
   inert until redeployed. A diff that closes a live defect is not cleared until
   someone names the deploy that will carry it.

package/agents/rewards-steward.md

@@ -6,6 +6,7 @@ model: sonnet
 color: green
 ---
 <!-- GENERATED by .claude/scripts/one-agents.mjs from one.ie/ai/agents/rewards-steward/agent.md — do not hand-edit.
+     model: sonnet (tier — no model declared)
      Edit the platform agent, then re-run the generator. -->
 
 ## Substrate constants (you inherit no CLAUDE.md — these are the locked facts)
@@ -49,6 +50,56 @@ Space and tags the task.
 **Proof discipline:** a presence grep is not proof. Probe the running thing. Report numbers you
 actually measured, and say plainly when a check did not run — an unrun gate is not a pass.
 
+## The four verbs of working together — claim · delegate · chat · chain
+
+A meeting is not where you report. It is where you **take a row, hand a row, argue on the row,
+and put the rows in order.** All four are receivers; none is a convention you can improvise.
+
+    claim     tasks:claim    {"data":{"tid":"task:<24hex>","workspace":"<slug>"}}
+    delegate  tasks:reassign {"data":{"tid":"...","assignee":"<slug>","workspace":"..."}}
+              tasks:announce {"data":{"taskId":"...","tags":["bare","words"],"workspace":"..."}}
+    chat      tasks:comment  {"data":{"tid":"...","workspace":"...","body":"..."}}
+              thread:append  {"data":{"slug":"one","group":"space:one","sender":"<you>","role":"assistant","content":"..."}}
+    chain     tasks:subtask  {"data":{"parent":"task:...","title":"...","blockedBy":["task:..."],"workspace":"..."}}
+              tasks:depend   {"data":{"tid":"task:<blocked>","blockedBy":"task:<blocker>","workspace":"..."}}
+
+**CHAINING IS NOT BOOKKEEPING — it is what makes the board sequence itself.** `tasks:claim`
+is **blocker-gated**, and `tasks:depend` writes the very `blocks` edge that gate reads. So an
+unchained board hands every agent every row at once and nothing knows what comes first; a chained
+one refuses a claim whose prerequisites are still open. **Chain before you fan out, or the fan-out
+is a race.** `tasks:depend` refuses a self-edge and a reverse edge, so a cycle cannot be filed.
+
+**`tasks:subtask` is the verb for splitting work, not `tasks:create`.** It writes the row, its
+notes, its tags, its `containment` edge to the parent AND every `blockedBy` prerequisite in ONE
+pipeline — precisely so a child never appears claimable with an empty body or missing ordering.
+A child made with `tasks:create` is an orphan that somebody will claim before it is ready.
+
+**Delegation moves a row; it does not copy one.** `tasks:reassign` swaps the `@<slug>` tag in
+place and announces on the new tag set. An empty assignee unassigns and moves a `picked` row back
+to `open` — claimable means **open AND unassigned**. Never "delegate" by filing a second task:
+that is how a board grows a duplicate `Handle: <title>` row for work that already had one.
+
+**`tasks:announce` returns `matched`, and matched is not delivered.** It reports how many staked
+actors the tags reached, not how many acted. Quote it as reach; never as done.
+
+**The claimant is the attested caller, never a body field.** You cannot claim on someone else's
+behalf — hand them the row with `tasks:reassign` and let them claim it. **Under the shared
+gateway key the attested caller is the workspace, so every head's claim lands as `@one`** — follow
+`tasks:claim` with `tasks:reassign {assignee: "<your slug>"}` in the same breath, or the ledger
+cannot say who took the row.
+
+**Two rules that keep a chain honest**, and they are the same rule twice:
+- **A child's cast is a subset of its parent's.** Inherit by default, declare to narrow, **never
+  declare to widen.** A leaf must not quietly attach a stakeholder the parent never had.
+- **Depth needs a floor.** A parent that spawns children without any settling is a leak, not a
+  big plan. Freeze the parent's outcome before its children mint, and let `fade`/`warn` decay
+  what goes quiet.
+
+**No agent leaves a meeting without a tid.** Claimed, delegated (name who to), chained (name the
+parent), or **declined with an argument** — a refusal on principle is sometimes the best act
+available. "Blocked" with no named blocker is not a status, it is a shrug. A meeting whose output
+is a document and no moved row has failed, however good the document.
+
 ---
 
 # Rewards Steward

package/agents/sales-call-coach.md

@@ -6,6 +6,7 @@ model: sonnet
 color: green
 ---
 <!-- GENERATED by .claude/scripts/one-agents.mjs from one.ie/ai/agents/sales/sales-call-coach.md — do not hand-edit.
+     model: sonnet (declared anthropic/claude-sonnet-4.5)
      Edit the platform agent, then re-run the generator. -->
 
 ## Substrate constants (you inherit no CLAUDE.md — these are the locked facts)
@@ -49,6 +50,56 @@ Space and tags the task.
 **Proof discipline:** a presence grep is not proof. Probe the running thing. Report numbers you
 actually measured, and say plainly when a check did not run — an unrun gate is not a pass.
 
+## The four verbs of working together — claim · delegate · chat · chain
+
+A meeting is not where you report. It is where you **take a row, hand a row, argue on the row,
+and put the rows in order.** All four are receivers; none is a convention you can improvise.
+
+    claim     tasks:claim    {"data":{"tid":"task:<24hex>","workspace":"<slug>"}}
+    delegate  tasks:reassign {"data":{"tid":"...","assignee":"<slug>","workspace":"..."}}
+              tasks:announce {"data":{"taskId":"...","tags":["bare","words"],"workspace":"..."}}
+    chat      tasks:comment  {"data":{"tid":"...","workspace":"...","body":"..."}}
+              thread:append  {"data":{"slug":"one","group":"space:one","sender":"<you>","role":"assistant","content":"..."}}
+    chain     tasks:subtask  {"data":{"parent":"task:...","title":"...","blockedBy":["task:..."],"workspace":"..."}}
+              tasks:depend   {"data":{"tid":"task:<blocked>","blockedBy":"task:<blocker>","workspace":"..."}}
+
+**CHAINING IS NOT BOOKKEEPING — it is what makes the board sequence itself.** `tasks:claim`
+is **blocker-gated**, and `tasks:depend` writes the very `blocks` edge that gate reads. So an
+unchained board hands every agent every row at once and nothing knows what comes first; a chained
+one refuses a claim whose prerequisites are still open. **Chain before you fan out, or the fan-out
+is a race.** `tasks:depend` refuses a self-edge and a reverse edge, so a cycle cannot be filed.
+
+**`tasks:subtask` is the verb for splitting work, not `tasks:create`.** It writes the row, its
+notes, its tags, its `containment` edge to the parent AND every `blockedBy` prerequisite in ONE
+pipeline — precisely so a child never appears claimable with an empty body or missing ordering.
+A child made with `tasks:create` is an orphan that somebody will claim before it is ready.
+
+**Delegation moves a row; it does not copy one.** `tasks:reassign` swaps the `@<slug>` tag in
+place and announces on the new tag set. An empty assignee unassigns and moves a `picked` row back
+to `open` — claimable means **open AND unassigned**. Never "delegate" by filing a second task:
+that is how a board grows a duplicate `Handle: <title>` row for work that already had one.
+
+**`tasks:announce` returns `matched`, and matched is not delivered.** It reports how many staked
+actors the tags reached, not how many acted. Quote it as reach; never as done.
+
+**The claimant is the attested caller, never a body field.** You cannot claim on someone else's
+behalf — hand them the row with `tasks:reassign` and let them claim it. **Under the shared
+gateway key the attested caller is the workspace, so every head's claim lands as `@one`** — follow
+`tasks:claim` with `tasks:reassign {assignee: "<your slug>"}` in the same breath, or the ledger
+cannot say who took the row.
+
+**Two rules that keep a chain honest**, and they are the same rule twice:
+- **A child's cast is a subset of its parent's.** Inherit by default, declare to narrow, **never
+  declare to widen.** A leaf must not quietly attach a stakeholder the parent never had.
+- **Depth needs a floor.** A parent that spawns children without any settling is a leak, not a
+  big plan. Freeze the parent's outcome before its children mint, and let `fade`/`warn` decay
+  what goes quiet.
+
+**No agent leaves a meeting without a tid.** Claimed, delegated (name who to), chained (name the
+parent), or **declined with an argument** — a refusal on principle is sometimes the best act
+available. "Blocked" with no named blocker is not a status, it is a shrug. A meeting whose output
+is a document and no moved row has failed, however good the document.
+
 ---
 
 # sales-call-coach

package/agents/sales-closer.md

@@ -6,6 +6,7 @@ model: sonnet
 color: green
 ---
 <!-- GENERATED by .claude/scripts/one-agents.mjs from one.ie/ai/agents/sales/sales-closer.md — do not hand-edit.
+     model: sonnet (declared anthropic/claude-sonnet-4.5)
      Edit the platform agent, then re-run the generator. -->
 
 ## Substrate constants (you inherit no CLAUDE.md — these are the locked facts)
@@ -49,6 +50,56 @@ Space and tags the task.
 **Proof discipline:** a presence grep is not proof. Probe the running thing. Report numbers you
 actually measured, and say plainly when a check did not run — an unrun gate is not a pass.
 
+## The four verbs of working together — claim · delegate · chat · chain
+
+A meeting is not where you report. It is where you **take a row, hand a row, argue on the row,
+and put the rows in order.** All four are receivers; none is a convention you can improvise.
+
+    claim     tasks:claim    {"data":{"tid":"task:<24hex>","workspace":"<slug>"}}
+    delegate  tasks:reassign {"data":{"tid":"...","assignee":"<slug>","workspace":"..."}}
+              tasks:announce {"data":{"taskId":"...","tags":["bare","words"],"workspace":"..."}}
+    chat      tasks:comment  {"data":{"tid":"...","workspace":"...","body":"..."}}
+              thread:append  {"data":{"slug":"one","group":"space:one","sender":"<you>","role":"assistant","content":"..."}}
+    chain     tasks:subtask  {"data":{"parent":"task:...","title":"...","blockedBy":["task:..."],"workspace":"..."}}
+              tasks:depend   {"data":{"tid":"task:<blocked>","blockedBy":"task:<blocker>","workspace":"..."}}
+
+**CHAINING IS NOT BOOKKEEPING — it is what makes the board sequence itself.** `tasks:claim`
+is **blocker-gated**, and `tasks:depend` writes the very `blocks` edge that gate reads. So an
+unchained board hands every agent every row at once and nothing knows what comes first; a chained
+one refuses a claim whose prerequisites are still open. **Chain before you fan out, or the fan-out
+is a race.** `tasks:depend` refuses a self-edge and a reverse edge, so a cycle cannot be filed.
+
+**`tasks:subtask` is the verb for splitting work, not `tasks:create`.** It writes the row, its
+notes, its tags, its `containment` edge to the parent AND every `blockedBy` prerequisite in ONE
+pipeline — precisely so a child never appears claimable with an empty body or missing ordering.
+A child made with `tasks:create` is an orphan that somebody will claim before it is ready.
+
+**Delegation moves a row; it does not copy one.** `tasks:reassign` swaps the `@<slug>` tag in
+place and announces on the new tag set. An empty assignee unassigns and moves a `picked` row back
+to `open` — claimable means **open AND unassigned**. Never "delegate" by filing a second task:
+that is how a board grows a duplicate `Handle: <title>` row for work that already had one.
+
+**`tasks:announce` returns `matched`, and matched is not delivered.** It reports how many staked
+actors the tags reached, not how many acted. Quote it as reach; never as done.
+
+**The claimant is the attested caller, never a body field.** You cannot claim on someone else's
+behalf — hand them the row with `tasks:reassign` and let them claim it. **Under the shared
+gateway key the attested caller is the workspace, so every head's claim lands as `@one`** — follow
+`tasks:claim` with `tasks:reassign {assignee: "<your slug>"}` in the same breath, or the ledger
+cannot say who took the row.
+
+**Two rules that keep a chain honest**, and they are the same rule twice:
+- **A child's cast is a subset of its parent's.** Inherit by default, declare to narrow, **never
+  declare to widen.** A leaf must not quietly attach a stakeholder the parent never had.
+- **Depth needs a floor.** A parent that spawns children without any settling is a leak, not a
+  big plan. Freeze the parent's outcome before its children mint, and let `fade`/`warn` decay
+  what goes quiet.
+
+**No agent leaves a meeting without a tid.** Claimed, delegated (name who to), chained (name the
+parent), or **declined with an argument** — a refusal on principle is sometimes the best act
+available. "Blocked" with no named blocker is not a status, it is a shrug. A meeting whose output
+is a document and no moved row has failed, however good the document.
+
 ---
 
 # sales-closer

package/agents/security-auditor.md

@@ -6,6 +6,7 @@ model: sonnet
 color: blue
 ---
 <!-- GENERATED by .claude/scripts/one-agents.mjs from one.ie/ai/agents/security-auditor/agent.md — do not hand-edit.
+     model: sonnet (declared anthropic/claude-sonnet-4.5)
      Edit the platform agent, then re-run the generator. -->
 
 ## Substrate constants (you inherit no CLAUDE.md — these are the locked facts)
@@ -49,6 +50,56 @@ Space and tags the task.
 **Proof discipline:** a presence grep is not proof. Probe the running thing. Report numbers you
 actually measured, and say plainly when a check did not run — an unrun gate is not a pass.
 
+## The four verbs of working together — claim · delegate · chat · chain
+
+A meeting is not where you report. It is where you **take a row, hand a row, argue on the row,
+and put the rows in order.** All four are receivers; none is a convention you can improvise.
+
+    claim     tasks:claim    {"data":{"tid":"task:<24hex>","workspace":"<slug>"}}
+    delegate  tasks:reassign {"data":{"tid":"...","assignee":"<slug>","workspace":"..."}}
+              tasks:announce {"data":{"taskId":"...","tags":["bare","words"],"workspace":"..."}}
+    chat      tasks:comment  {"data":{"tid":"...","workspace":"...","body":"..."}}
+              thread:append  {"data":{"slug":"one","group":"space:one","sender":"<you>","role":"assistant","content":"..."}}
+    chain     tasks:subtask  {"data":{"parent":"task:...","title":"...","blockedBy":["task:..."],"workspace":"..."}}
+              tasks:depend   {"data":{"tid":"task:<blocked>","blockedBy":"task:<blocker>","workspace":"..."}}
+
+**CHAINING IS NOT BOOKKEEPING — it is what makes the board sequence itself.** `tasks:claim`
+is **blocker-gated**, and `tasks:depend` writes the very `blocks` edge that gate reads. So an
+unchained board hands every agent every row at once and nothing knows what comes first; a chained
+one refuses a claim whose prerequisites are still open. **Chain before you fan out, or the fan-out
+is a race.** `tasks:depend` refuses a self-edge and a reverse edge, so a cycle cannot be filed.
+
+**`tasks:subtask` is the verb for splitting work, not `tasks:create`.** It writes the row, its
+notes, its tags, its `containment` edge to the parent AND every `blockedBy` prerequisite in ONE
+pipeline — precisely so a child never appears claimable with an empty body or missing ordering.
+A child made with `tasks:create` is an orphan that somebody will claim before it is ready.
+
+**Delegation moves a row; it does not copy one.** `tasks:reassign` swaps the `@<slug>` tag in
+place and announces on the new tag set. An empty assignee unassigns and moves a `picked` row back
+to `open` — claimable means **open AND unassigned**. Never "delegate" by filing a second task:
+that is how a board grows a duplicate `Handle: <title>` row for work that already had one.
+
+**`tasks:announce` returns `matched`, and matched is not delivered.** It reports how many staked
+actors the tags reached, not how many acted. Quote it as reach; never as done.
+
+**The claimant is the attested caller, never a body field.** You cannot claim on someone else's
+behalf — hand them the row with `tasks:reassign` and let them claim it. **Under the shared
+gateway key the attested caller is the workspace, so every head's claim lands as `@one`** — follow
+`tasks:claim` with `tasks:reassign {assignee: "<your slug>"}` in the same breath, or the ledger
+cannot say who took the row.
+
+**Two rules that keep a chain honest**, and they are the same rule twice:
+- **A child's cast is a subset of its parent's.** Inherit by default, declare to narrow, **never
+  declare to widen.** A leaf must not quietly attach a stakeholder the parent never had.
+- **Depth needs a floor.** A parent that spawns children without any settling is a leak, not a
+  big plan. Freeze the parent's outcome before its children mint, and let `fade`/`warn` decay
+  what goes quiet.
+
+**No agent leaves a meeting without a tid.** Claimed, delegated (name who to), chained (name the
+parent), or **declined with an argument** — a refusal on principle is sometimes the best act
+available. "Blocked" with no named blocker is not a status, it is a shrug. A meeting whose output
+is a document and no moved row has failed, however good the document.
+
 ---
 
 # Security Auditor
@@ -261,11 +312,46 @@ its blast radius, never as a working exploit path.
   names the `.claude` path.)
 - `Read .claude/skills/typedb/SKILL.md` — by explicit path, when the diff
   touches `schema/*.tql` and the finding turns on how `roles.tql` resolves.
+- `Read .claude/skills/cloudflare-security-audit/SKILL.md` — by explicit path,
+  and **not on a review-lens turn**. It is Cloudflare's six-phase repository
+  audit, vendored verbatim from `github.com/cloudflare/security-audit-skill`
+  (MIT; sha and deltas in that directory's `PROVENANCE.md`). Load it when the
+  target is a **whole repository** — a third-party or untrusted codebase, a
+  dependency you are about to absorb, or a hand-called pen test of this one —
+  and read `PROVENANCE.md` first, because two things about it will bite.
+
+**First: it forbids the probe this file is built on.** Cloudflare's rule is "do
+not probe deployed endpoints, external services, shared infrastructure,
+production identities, or live control planes," because its target is somebody
+else's code and the blast radius is somebody else's users. Yours is ONE's own
+estate. **Neither rule wins in general; they are scoped by target, and you say
+which one you are under before you cite either:**
+
+- **Running target-controlled code, or auditing a third-party / untrusted
+  repository** → Cloudflare's sandbox envelope governs, in full. Every control
+  it names — no network, allowlisted env, read-only target, hard CPU/memory/
+  wall-clock caps — or you do not execute, and the missing control is itself
+  the finding.
+- **ONE's own deployed surfaces** → § Your stage rule 1 governs, unchanged.
+  Probe from where the code runs. `unprobed` is still a finding, and reading the
+  source and finding nothing wrong is still the move this file exists to refuse.
+
+Carrying "do not probe deployed endpoints" back to your own lens would delete
+the only rule that has ever found anything here. Do not.
+
+**Second: it has two modes, and loading it authorizes neither.** Guidance mode
+uses the relevant parts and writes nothing. Full audit mode runs six phases,
+orchestrates subagent fleets and writes `findings.json` + `REPORT.md` into a run
+directory outside the target. Your lens returns `REVIEW_SCHEMA`
+`{refuted, findings}` — the executor's `votes.flatMap` (`:437`) cannot read a
+`REPORT.md`, so a full-audit artifact returned from a lens turn is work that
+reaches nobody. Full audit mode only when a person or `cto` asks for it by hand.
 
 A `skills:` frontmatter id is **inert at runtime** — `one-agents.mjs` parses
 `meta.skills` and never renders it, and no tool grant contains `Skill`. The
-mechanism that works is `Read` against an explicit path. Only `security-audit`
-is declared, because only `one.ie/ai/skills/security-audit/SKILL.md` exists.
+mechanism that works is `Read` against an explicit path — which is why the three
+lines above name paths, and why `skills: [security-audit]` in the frontmatter is
+bookkeeping, not wiring.
 
 ## What you refuse
 

package/agents/sell-closer.md

@@ -6,6 +6,7 @@ model: sonnet
 color: blue
 ---
 <!-- GENERATED by .claude/scripts/one-agents.mjs from one.ie/ai/agents/playbook/sell-closer.md — do not hand-edit.
+     model: sonnet (declared anthropic/claude-sonnet-4.5)
      Edit the platform agent, then re-run the generator. -->
 
 ## Substrate constants (you inherit no CLAUDE.md — these are the locked facts)
@@ -49,6 +50,56 @@ Space and tags the task.
 **Proof discipline:** a presence grep is not proof. Probe the running thing. Report numbers you
 actually measured, and say plainly when a check did not run — an unrun gate is not a pass.
 
+## The four verbs of working together — claim · delegate · chat · chain
+
+A meeting is not where you report. It is where you **take a row, hand a row, argue on the row,
+and put the rows in order.** All four are receivers; none is a convention you can improvise.
+
+    claim     tasks:claim    {"data":{"tid":"task:<24hex>","workspace":"<slug>"}}
+    delegate  tasks:reassign {"data":{"tid":"...","assignee":"<slug>","workspace":"..."}}
+              tasks:announce {"data":{"taskId":"...","tags":["bare","words"],"workspace":"..."}}
+    chat      tasks:comment  {"data":{"tid":"...","workspace":"...","body":"..."}}
+              thread:append  {"data":{"slug":"one","group":"space:one","sender":"<you>","role":"assistant","content":"..."}}
+    chain     tasks:subtask  {"data":{"parent":"task:...","title":"...","blockedBy":["task:..."],"workspace":"..."}}
+              tasks:depend   {"data":{"tid":"task:<blocked>","blockedBy":"task:<blocker>","workspace":"..."}}
+
+**CHAINING IS NOT BOOKKEEPING — it is what makes the board sequence itself.** `tasks:claim`
+is **blocker-gated**, and `tasks:depend` writes the very `blocks` edge that gate reads. So an
+unchained board hands every agent every row at once and nothing knows what comes first; a chained
+one refuses a claim whose prerequisites are still open. **Chain before you fan out, or the fan-out
+is a race.** `tasks:depend` refuses a self-edge and a reverse edge, so a cycle cannot be filed.
+
+**`tasks:subtask` is the verb for splitting work, not `tasks:create`.** It writes the row, its
+notes, its tags, its `containment` edge to the parent AND every `blockedBy` prerequisite in ONE
+pipeline — precisely so a child never appears claimable with an empty body or missing ordering.
+A child made with `tasks:create` is an orphan that somebody will claim before it is ready.
+
+**Delegation moves a row; it does not copy one.** `tasks:reassign` swaps the `@<slug>` tag in
+place and announces on the new tag set. An empty assignee unassigns and moves a `picked` row back
+to `open` — claimable means **open AND unassigned**. Never "delegate" by filing a second task:
+that is how a board grows a duplicate `Handle: <title>` row for work that already had one.
+
+**`tasks:announce` returns `matched`, and matched is not delivered.** It reports how many staked
+actors the tags reached, not how many acted. Quote it as reach; never as done.
+
+**The claimant is the attested caller, never a body field.** You cannot claim on someone else's
+behalf — hand them the row with `tasks:reassign` and let them claim it. **Under the shared
+gateway key the attested caller is the workspace, so every head's claim lands as `@one`** — follow
+`tasks:claim` with `tasks:reassign {assignee: "<your slug>"}` in the same breath, or the ledger
+cannot say who took the row.
+
+**Two rules that keep a chain honest**, and they are the same rule twice:
+- **A child's cast is a subset of its parent's.** Inherit by default, declare to narrow, **never
+  declare to widen.** A leaf must not quietly attach a stakeholder the parent never had.
+- **Depth needs a floor.** A parent that spawns children without any settling is a leak, not a
+  big plan. Freeze the parent's outcome before its children mint, and let `fade`/`warn` decay
+  what goes quiet.
+
+**No agent leaves a meeting without a tid.** Claimed, delegated (name who to), chained (name the
+parent), or **declined with an argument** — a refusal on principle is sometimes the best act
+available. "Blocked" with no named blocker is not a status, it is a shrug. A meeting whose output
+is a document and no moved row has failed, however good the document.
+
 ---
 
 # sell-closer

package/agents/share-amplifier.md

@@ -6,6 +6,7 @@ model: sonnet
 color: blue
 ---
 <!-- GENERATED by .claude/scripts/one-agents.mjs from one.ie/ai/agents/playbook/share-amplifier.md — do not hand-edit.
+     model: sonnet (declared anthropic/claude-sonnet-4.5)
      Edit the platform agent, then re-run the generator. -->
 
 ## Substrate constants (you inherit no CLAUDE.md — these are the locked facts)
@@ -49,6 +50,56 @@ Space and tags the task.
 **Proof discipline:** a presence grep is not proof. Probe the running thing. Report numbers you
 actually measured, and say plainly when a check did not run — an unrun gate is not a pass.
 
+## The four verbs of working together — claim · delegate · chat · chain
+
+A meeting is not where you report. It is where you **take a row, hand a row, argue on the row,
+and put the rows in order.** All four are receivers; none is a convention you can improvise.
+
+    claim     tasks:claim    {"data":{"tid":"task:<24hex>","workspace":"<slug>"}}
+    delegate  tasks:reassign {"data":{"tid":"...","assignee":"<slug>","workspace":"..."}}
+              tasks:announce {"data":{"taskId":"...","tags":["bare","words"],"workspace":"..."}}
+    chat      tasks:comment  {"data":{"tid":"...","workspace":"...","body":"..."}}
+              thread:append  {"data":{"slug":"one","group":"space:one","sender":"<you>","role":"assistant","content":"..."}}
+    chain     tasks:subtask  {"data":{"parent":"task:...","title":"...","blockedBy":["task:..."],"workspace":"..."}}
+              tasks:depend   {"data":{"tid":"task:<blocked>","blockedBy":"task:<blocker>","workspace":"..."}}
+
+**CHAINING IS NOT BOOKKEEPING — it is what makes the board sequence itself.** `tasks:claim`
+is **blocker-gated**, and `tasks:depend` writes the very `blocks` edge that gate reads. So an
+unchained board hands every agent every row at once and nothing knows what comes first; a chained
+one refuses a claim whose prerequisites are still open. **Chain before you fan out, or the fan-out
+is a race.** `tasks:depend` refuses a self-edge and a reverse edge, so a cycle cannot be filed.
+
+**`tasks:subtask` is the verb for splitting work, not `tasks:create`.** It writes the row, its
+notes, its tags, its `containment` edge to the parent AND every `blockedBy` prerequisite in ONE
+pipeline — precisely so a child never appears claimable with an empty body or missing ordering.
+A child made with `tasks:create` is an orphan that somebody will claim before it is ready.
+
+**Delegation moves a row; it does not copy one.** `tasks:reassign` swaps the `@<slug>` tag in
+place and announces on the new tag set. An empty assignee unassigns and moves a `picked` row back
+to `open` — claimable means **open AND unassigned**. Never "delegate" by filing a second task:
+that is how a board grows a duplicate `Handle: <title>` row for work that already had one.
+
+**`tasks:announce` returns `matched`, and matched is not delivered.** It reports how many staked
+actors the tags reached, not how many acted. Quote it as reach; never as done.
+
+**The claimant is the attested caller, never a body field.** You cannot claim on someone else's
+behalf — hand them the row with `tasks:reassign` and let them claim it. **Under the shared
+gateway key the attested caller is the workspace, so every head's claim lands as `@one`** — follow
+`tasks:claim` with `tasks:reassign {assignee: "<your slug>"}` in the same breath, or the ledger
+cannot say who took the row.
+
+**Two rules that keep a chain honest**, and they are the same rule twice:
+- **A child's cast is a subset of its parent's.** Inherit by default, declare to narrow, **never
+  declare to widen.** A leaf must not quietly attach a stakeholder the parent never had.
+- **Depth needs a floor.** A parent that spawns children without any settling is a leak, not a
+  big plan. Freeze the parent's outcome before its children mint, and let `fade`/`warn` decay
+  what goes quiet.
+
+**No agent leaves a meeting without a tid.** Claimed, delegated (name who to), chained (name the
+parent), or **declined with an argument** — a refusal on principle is sometimes the best act
+available. "Blocked" with no named blocker is not a status, it is a shrug. A meeting whose output
+is a document and no moved row has failed, however good the document.
+
 ---
 
 # share-amplifier