@opengsd/gsd-path 1.0.0

package/skills/path/templates/intent.md

@@ -0,0 +1,98 @@
+# Intent — <project name>
+
+<!-- Written by $gsd-path-define. Every downstream agent reads this first.
+     Constraints and vetoes here override everything downstream. -->
+
+Lane: standard   <!-- standard | quick | milestone — quick: at most two
+                      deliverable-sized tasks in one wave, no RESEARCH or
+                      NEEDS-USER items, no cross-wave risk; set by define at
+                      approval. Quick skips research and decide. Milestone:
+                      derived from an approved ROADMAP.md entry in a program;
+                      research/decide run only when the entry has open
+                      questions. -->
+
+Review panel: off   <!-- off | detected | claude,gpt,grok,composer,gemini,deepseek,kimi,qwen — this
+                      milestone's panel setting. In program flow, copy
+                      CHARTER.md's durable default and override only when
+                      the user says so. off is the default. detected uses
+                      advertised host families except the parent, at most 3.
+                      Named families are an assertion, at most 3. Quick
+                      lane stays off. -->
+
+Finding skeptics: off   <!-- off | on — build spawns one read-only skeptic
+                      per blocking deep-review finding before fix tasks
+                      are opened; a refuted finding spawns no fix task unless
+                      the user explicitly overrides all cycle refutations.
+                      off is the default. Quick lane stays off. -->
+
+Surfaces: none   <!-- none | comma-separated list of the human-facing
+                      surfaces this milestone delivers: a web app, a CLI, an
+                      HTTP API. Anything a person opens, sees, or types into
+                      is a surface. Use none only when nobody touches this
+                      work directly — a library, a migration, internals.
+                      Every named surface needs a success criterion
+                      observable there and a PLAN.md Surface contract. -->
+
+## Summary
+
+<3–5 sentences: the problem, who has it, what the first release does. This is the
+paragraph the user signed off on — do not edit without a new sign-off.>
+
+## Problem
+
+<What hurts today, for whom, how badly. Evidence if the user gave any.>
+
+## Users
+
+<Who, how many, how technical, what they use today.>
+
+## Success criteria
+
+<!-- Observable statements, numbered from 1. PLAN.md maps each to a task
+     AC and Verify as SC1, SC2, …. Wave review checks the SCs a wave owns.
+     Final review checks every SC.
+     Every surface named above needs at least one criterion a person can
+     observe at that surface — a screen reached, an output seen — never a
+     passing test standing in for the experience. -->
+1. <criterion — a thing you can run/measure/see>
+2. ...
+
+## Scope: in
+
+<The smallest version that hits the success criteria. Bullet list.>
+
+## Scope: out (vetoes)
+
+<!-- Hard constraints. Nothing in research, plans, or tasks may include these. -->
+- <vetoed item> — <user's stated reason, verbatim where possible>
+
+## Constraints
+
+<Stack preferences, deadline, budget, existing code, integrations, compliance.>
+
+## Current state (brownfield only)
+
+<!-- Filled from evidence-codebase.md during brownfield define. Omit the
+     section entirely for greenfield projects. -->
+- **What exists**: <stack, architecture, maturity in 2–3 sentences>
+- **Must not break**: <existing behavior the user ruled protected — these are vetoes>
+- **Doc-vs-code rulings**: <each DOCS-AUDIT conflict → user's ruling: fix-doc | fix-code | accept-drift>
+- **Ground truth**: `<track>/research/evidence-codebase.md`, `<track>/research/DOCS-AUDIT.md`
+
+## Risks
+
+<!-- What the user is most unsure about. Research prioritizes these. -->
+- <risk>
+
+## Open questions
+
+<!-- Unresolved at define end. Tags: RESEARCH (research phase answers it),
+     NEEDS-USER (a human decision, surface at next checkpoint). -->
+- [RESEARCH] <question>
+- [NEEDS-USER] <question>
+
+## Corrections
+
+<!-- Verbatim user corrections from playback and later phases. Append-only.
+     These are the highest-signal intent data in the file. -->
+- <date>: "<what the user said>"

package/skills/path/templates/loop.md

@@ -0,0 +1,59 @@
+# LOOP — <loop name>
+
+<!-- Written by whoever designs the loop. Executed one bounded pass at a time
+     by $gsd-path-loop. The key: value lines below are the machine fields read
+     by scripts/loop_run.py — keep them exact: one field per line, no nesting,
+     no duplicate fields except verify. A single trailing HTML comment on a
+     field line is stripped by the parser. The prose sections are read by the
+     model, never by the parser. Mandatory fields:
+     loop, status, trigger, verify, max_iterations, wall_clock, log.
+     Optional fields: cooldown, skip_when, period, period_budget. -->
+
+loop: <kebab-case name>
+status: active              <!-- active | paused | done -->
+trigger: manual             <!-- who invokes one pass: manual | event | schedule -->
+cooldown: 15m               <!-- optional: minimum gap between recorded passes -->
+skip_when: <shell command>  <!-- optional: exit 0 = skip this pass -->
+verify: <shell command>     <!-- repeat the line per verifier command, in order;
+                                 include a secret-scan or dependency-audit
+                                 verifier when the loop touches code or
+                                 dependencies -->
+max_iterations: 3           <!-- fix → verify cycles allowed in one pass -->
+wall_clock: 30m             <!-- per-pass wall-clock budget -->
+period: 24h                 <!-- optional: rolling window for period_budget -->
+period_budget: 4h           <!-- optional: total wall-clock usable per period;
+                                 requires period -->
+log: .project/loop/<name>.LOG.jsonl
+
+## Goal
+
+<What "green" means — the one outcome the verify commands must prove. If the
+loop cannot state this in a sentence, it is not ready to run.>
+
+## Worker scope
+
+<What one fix worker must do, and what it must never do: no commits, pushes,
+or tags; no editing tests to match broken code; paths that are read-only to
+the worker.>
+
+## Feedback route
+
+<On a failed verify, what the worker gets back: the exact failing command and
+its output tail, aimed at the smallest failed unit — not a retry of the whole
+goal.>
+
+## Human gates
+
+<Never-auto actions. When a fix requires one of these, the pass stops with
+BLOCKED: <reason> and the named action goes to the user.>
+
+## Stops
+
+<Conditions that end a pass honestly: verify green (pass), max_iterations or
+wall_clock spent (fail), a human-gate action required (blocked). Never keep
+iterating past these.>
+
+## Output
+
+<What one pass reports to the user and where: the record appended to the log
+path above, plus the Outcome / Review / Next report.>

package/skills/path/templates/patch-findings.md

@@ -0,0 +1,16 @@
+# Patch Findings
+
+<!-- Written by final review when it blocks and consumed by patch planning. -->
+
+Reviewed HEAD: <full SHA>
+State: ship/blocked
+
+## Findings
+
+<!-- Copy only evidenced, selected findings. Keep IDs contiguous and ordered. -->
+### P001 — <short finding title>
+
+- **Source**: `.project/review/FINAL.md`
+- **Locator**: `<SC number or gap risk row>`
+- **Evidence**: <observed result copied from the source review>
+- **Fix direction**: <concrete direction for the patch task>

package/skills/path/templates/plan-panel.md

@@ -0,0 +1,25 @@
+# Plan panel — <family>
+
+<!-- Written by one review-panel child. The orchestrator validates this file
+     with scripts/review_panel.py merge and never treats it as a plan gate.
+     Kind criterion requires a named PLAN/task criterion; preference is
+     taste or an alternate design and must not flip approval. -->
+
+- Family: <claude | gpt | grok | composer | gemini | deepseek | kimi | qwen>
+- Model: <exact advertised slug>
+
+## Findings
+
+<!-- One ### F# block per finding, or a single `- none` line. -->
+
+### F1
+- Severity: high
+- Kind: criterion
+- Criterion: Wave 1 / T001 / acceptance 1
+- Evidence: .project/tasks/T001-slug.md:12
+- Found: <what is missing or wrong>
+- Fix direction: <concrete plan/task edit>
+
+## Summary
+
+<one paragraph; do not edit PLAN.md or tasks>

package/skills/path/templates/plan.md

@@ -0,0 +1,89 @@
+# Plan — <project name>
+
+<!-- Written by the planner role. Executed wave-by-wave by $gsd-path-build. -->
+
+Project verify: `<command that installs dependencies, builds + tests the whole project>`
+<!-- Run once at ship, in a fresh sidecar worktree checked out at the
+     reviewed commit: no node_modules, virtualenv, build output, or untracked
+     env files exist there. The command must provision what it needs first,
+     e.g. `pnpm install --frozen-lockfile && pnpm test`. A task Verify must
+     not copy this command unless an owned INTENT success criterion names it.
+     Otherwise the task Verify names a path from that task's files. -->
+
+## Config
+
+- max_review_cycles: 3   <!-- review→fix→re-review loops per wave before escalating -->
+- wave_budget: none      <!-- none | optional per-wave resource cap: wall-clock,
+                             tokens, or cost (e.g. 2h, 500k tokens). Reaching the
+                             cap blocks the wave like an exhausted cycle cap and
+                             escalates to the user. none is default. -->
+- review_panel: off      <!-- off | detected | claude,gpt,grok — optional
+                             cross-model panel. off is default. detected uses
+                             advertised host families except the parent, cap 3.
+                             Named families are an assertion. Quick lane stays
+                             off. The planner copies INTENT.md; it does not
+                             invent a non-off value. -->
+- finding_skeptics: off  <!-- off | on — deep waves only. on spawns one
+                             read-only skeptic per blocking finding before
+                             fix tasks are batched; a refuted finding spawns
+                             no fix task unless the user explicitly overrides
+                             all cycle refutations. off is default. The planner
+                             copies INTENT.md; it does not invent on. -->
+
+## Wave 1 — risk burn-down
+
+Goal: <what this wave proves; if it fails, what changes>
+Review depth: full   <!-- full | deep | verify-only. Wave 1 and auth/payments/
+                          data migration/concurrency waves must be full or
+                          deep. Assign deep sparingly: irreversible or
+                          security-critical merges. -->
+
+<!-- No task table. Task id, title, deps, and files live only in each
+     `tasks/T###-slug.md` frontmatter; `wave: N` there assigns it here. -->
+
+## Wave 2 — walking skeleton
+
+Goal: <the end-to-end slice that runs>
+Review depth: <full | deep | verify-only>
+
+<!-- More waves: features by dependency, then polish. Rules:
+     - deps only in earlier waves, or same wave with no file overlap
+     - no two same-wave tasks share files
+     - nothing from INTENT.md scope-out appears anywhere -->
+
+## Surface contract
+
+<!-- Required when INTENT.md `Surfaces:` is not `none`; omit the section
+     entirely when it is. One block per declared surface, named exactly as
+     INTENT.md names it, owned by the task that delivers it. That task must
+     name in Criteria the success criteria this surface is proven by — the
+     owning task must own every listed criterion in its Intent coverage. A
+     criterion may appear in only one surface block. This is what the final
+     reviewer walks before the milestone is called done, and FINAL.md records
+     the surface it was walked on. Replace every whole-value angle-bracket
+     placeholder; angle brackets may appear inside concrete routes, commands,
+     states, and walkthrough steps. -->
+
+### <surface name as INTENT.md writes it> — T001
+
+Criteria: SC1
+Entry: <the route, screen, or command a person opens>
+States: <what empty, loading, error, and success each show>
+Walkthrough:
+1. <step a reviewer performs to see this surface working>
+
+## Intent coverage
+
+<!-- Every INTENT.md success criterion, as SCn, maps to at least one task
+     acceptance item. The named task's Verify command is what must fail if
+     that criterion is skipped. `scripts/check_handoffs.py plan` gates this
+     table against INTENT.md and each task's Intent coverage section. -->
+
+| Criterion | Task | Acceptance |
+|-----------|------|------------|
+| SC1 | T001 | AC1 |
+
+## Dependency notes
+
+<Per non-obvious edge: the exact data or landed effect that makes X precede Y,
+and how a reviewer sees it. Narrative order is not a dependency.>

package/skills/path/templates/repository.md

@@ -0,0 +1,16 @@
+# Repository Binding
+
+<!-- Written once by the journaled new-GitHub repository transaction. This
+     fixed-format artifact is the recovery and build handoff; do not infer its
+     values from STATE.md prose. The pipeline never enters the default
+     checkout, so its local default branch ref may lag origin; run
+     `git pull --ff-only` there before working in it. -->
+
+Kind: <kind>
+Remote: <remote>
+Visibility: <visibility>
+Remote default: <remote-default>
+Remote default SHA: <remote-default-sha>
+Default checkout: <default-checkout>
+GSD Path branch: <branch>
+Primary worktree: <primary-worktree>

package/skills/path/templates/research-handoff.md

@@ -0,0 +1,25 @@
+# Research Handoff
+
+<!-- Written by the research orchestrator and consumed by decide. -->
+
+Phase: research
+Status: complete
+Intent: `.project/intent/INTENT.md`
+<!-- Program flow (no milestone INTENT exists): write the Intent line as
+     `.project/CHARTER.md` instead — the validator accepts exactly one of the
+     two paths, matching the file that actually exists. -->
+
+## Dispatch
+
+<!-- Include every standard dimension exactly once. A custom dimension may
+     supplement these rows, never replace a standard row. -->
+- `domain` — dispatched → `.project/research/evidence-domain.md` — <why this dimension ran>
+- `stack` — skipped → none — <why this dimension was skipped>
+- `pitfalls` — skipped → none — <why this dimension was skipped>
+- `similar` — skipped → none — <why this dimension was skipped>
+
+## Question assignments
+
+<!-- Copy every [RESEARCH] question from INTENT.md exactly once. Use `- none`
+     only when INTENT.md has no [RESEARCH] questions. -->
+- `[RESEARCH] <question copied from INTENT.md>` → `domain`

package/skills/path/templates/roadmap.md

@@ -0,0 +1,38 @@
+# Roadmap — <program name>
+
+<!-- Written and owned by $gsd-path-roadmap. Rolling-wave: milestone-granularity
+     scope for EVERY milestone; waves and tasks are planned only for the active
+     milestone. Never edit a shipped entry except its Status, Archive, and
+     Integrated fields; never edit an abandoned entry at all. Lives at
+     .project/ top
+     level and persists across milestones; it never archives. -->
+
+## Milestones
+
+### M001 — <slug>
+
+Goal: <one sentence — the independently shippable outcome>
+Depends on: []        # milestone ids; acyclic; earlier ids only
+Surfaces: none        # none | the human-facing surfaces this milestone
+                      # delivers (web app, CLI, HTTP API). Each one needs a
+                      # success criterion observable there.
+Status: pending       # pending | active | shipped | abandoned
+Archive: null         # .project/archive/<NNN>-<slug>/ recorded at ship
+Integrated: null      # optional; merge SHA of the integrate commit onto
+                      # the remote default, filled after integration
+
+Scope: in
+- <deliverable sized capability>
+
+Scope: out
+- <explicit exclusion deferred to a later milestone or vetoed>
+
+Success criteria
+1. <observable criterion the milestone's final review can check>
+
+Risks
+- <risk that could invalidate this milestone or its dependents>
+
+Open questions
+- None                # any real question here inserts milestone-scoped
+                      # research + decide before that milestone's planning

package/skills/path/templates/skeptic.md

@@ -0,0 +1,36 @@
+# Skeptic — wave <N>, cycle <C>
+
+<!-- Written by one finding-skeptic child. Advisory to fix-task batching
+     only: the inherit reviewer owns Wave verdict. -->
+
+- Criterion: <the failed criterion, verbatim from the lens file>
+- Criterion locator: <t001_ac2 | t001_files | sc3>
+- Lenses: <contract | adversarial | both>
+
+## Observations
+
+<!-- Repeat for every distinct lens observation. Collapse only true
+     duplicates. Give each observation a unique number and exactly one
+     verdict with that number below; unknown or duplicate verdict numbers
+     are invalid. The criterion locator, not these local numbers, is the
+     finding identity across cycles. -->
+
+### Observation <n> — <contract | adversarial>
+
+<the observation verbatim: criterion, observed result, file:line>
+
+## Observation verdicts
+
+### Observation <n>: <refuted | stands>
+
+<checked evidence for this observation>
+
+## Verdict
+
+<refuted | stands>
+
+## Evidence
+
+<checked evidence: the command re-run in the sidecar or the artifact
+re-read, with its result. A refuted verdict requires every observation above
+to be individually refuted; anything short of that is stands.>

package/skills/path/templates/state.md

@@ -0,0 +1,27 @@
+---
+pipeline: gsd-path/v2
+project: <slug>
+milestone: null     # set by define; names the archive directory at ship
+phase: define       # v2 tokens: inspect | define | research | decide | roadmap | plan | build | ship | shipped
+                    # inspect only for brownfield; greenfield starts at define
+                    # roadmap only in program flow (CHARTER.md exists)
+status: active      # active | done | blocked; shipped is only phase: shipped + status: done
+branch: null        # bound per milestone as gsd-path/M00N; after integration
+                    # the router rebinds before any next-milestone file change
+                    # the bound branch is never main; ship integrates it there
+archive: null       # persisted archive transaction path; never recomputed
+integration_default: direct # direct | pull-request; project setting
+integration: direct # current milestone; may override the default before build
+integration_source: default # default | milestone; preserves override provenance
+---
+
+# Project State
+
+One file, always current. The router reads this first; every phase updates
+it on completion. If this file and the artifacts disagree, the artifacts win
+— fix this file.
+
+## Log
+
+<!-- append one line per transition: date, phase, event -->
+- YYYY-MM-DD — <phase> — project initialized

package/skills/path/templates/synthesis.md

@@ -0,0 +1,36 @@
+# Synthesis
+
+<!-- Written by the decider role. The planner treats Decisions as settled. -->
+
+## Settled
+
+<!-- Choices closed by an intent constraint or the existing codebase.
+     One line each, citing the settling source. No invented runner-ups. -->
+- <area> — <what stands> (<settling source>)
+
+## Decisions
+
+<!-- One block per genuinely open choice the evidence resolved. -->
+### <decision area, e.g. Stack>
+
+- **Decision**: <what we're doing>
+- **Runner-up**: <what lost, and why>
+- **Evidence**: <evidence-file.md § finding heading, ...>
+- **Confidence**: <high | medium | low — low ⇒ verify in wave 1>
+
+## For the planner
+
+<!-- The shape of the build. -->
+- **Wave-1 blockers**: <riskiest assumptions to burn down first>
+- **Walking skeleton**: <the thinnest end-to-end slice>
+- **Pitfalls → tasks**: <known trap → which future task must dodge it>
+
+## User rulings
+
+<!-- NEEDS-USER items answered at the synthesis checkpoint. Verbatim-ish. -->
+- <question> → <ruling>
+
+## Still unknown
+
+<!-- Carried-forward gaps. Never let a question vanish between phases. -->
+- <gap> — <plan: wave-1 spike | accept risk | NEEDS-USER>

package/skills/path/templates/task.md

@@ -0,0 +1,74 @@
+---
+id: T001
+title: <imperative, specific>
+wave: 1
+deps: []            # task ids whose output or landed effect this task needs
+status: pending     # orchestrator-owned: pending | in-progress | done | failed | blocked
+agent: null         # orchestrator-owned: set at dispatch
+base: null          # orchestrator-owned: clean layer SHA for isolated Verify
+worktree: null      # orchestrator-owned: isolated task worktree while active
+task_branch: null   # orchestrator-owned: gsd-path-task/<id> while parallel; null when serial
+files:              # every file this task may touch — dispatch checks overlap
+  - <path>
+---
+
+# T001 — <title>
+
+## Context
+
+<!-- 3–5 sentences. Everything the coder needs from SYNTHESIS, inlined.
+     The coder reads this file, INTENT.md, and the codebase. -->
+
+## Approach
+
+<!-- Constraints, applicable pitfalls from research, and pointers to real
+     paths, symbols, and schemas. Not an edit script — the coder owns the
+     how within these constraints and the acceptance criteria. -->
+- <constraint or pointer>
+
+## Interface contract
+
+<!-- Planner-owned. The exact shared symbols, signatures, types, paths,
+     schemas, or formats this task exchanges with other tasks. Required when
+     another task consumes this task's output or this task consumes a
+     sibling's; write the identical contract in every involved task. Otherwise
+     write `None`. Only shapes this task's `files` define or consume — never
+     the whole plan's contracts. Binding like the acceptance criteria: needing to deviate
+     is a plan defect — block, never negotiate or improvise. -->
+- None
+
+## Intent coverage
+
+<!-- SCn ids this task owns, matching PLAN.md Intent coverage. Write
+     `- None` when this task owns no INTENT success criterion. -->
+- SC1
+
+## Acceptance criteria
+
+<!-- Observable. The reviewer checks the diff against exactly these. -->
+1. <behavior/command/output that must be true>
+
+## Verify
+
+```bash
+<one command that fails if this task wasn't done; names a path from files>
+```
+<!-- Runs in a fresh sidecar worktree at the landed commit with nothing
+     installed. Provision dependencies inside the command when the project
+     needs them, e.g. `pnpm install --frozen-lockfile && pnpm vitest run
+     src/x.test.ts`. -->
+
+Heavy: no   <!-- yes when this command must not run beside another heavy Verify -->
+
+<!-- Fix tasks only: add ## Review findings before Log, with one
+     ### <canonical locator> block per group in the helper's batch.
+     Each block contains Criterion: <verbatim criterion> and all supplied
+     observations verbatim. Set deps to include the source tasks and files
+     to the batch's files. Ordinary tasks omit this section. -->
+
+## Log
+
+<!-- Append-only: coder summary, blocks (`NEEDS-ORCHESTRATOR: <question> —
+     readings: <candidates>` for contract ambiguity), orchestrator answers,
+     review verdicts, fixes. -->
+- <date> — created by planner

package/skills/path/templates/wave-panel.md

@@ -0,0 +1,25 @@
+# Panel — wave <N>, cycle <C>
+
+<!-- Written by one review-panel child. Advisory only: the inherit reviewer
+     owns Wave verdict. Kind criterion may be presented to the user when
+     Severity is high; preference stays a warning. -->
+
+- Family: <claude | gpt | grok | composer | gemini | deepseek | kimi | qwen>
+- Model: <exact advertised slug>
+- Depth: <full | adversarial>
+
+## Findings
+
+<!-- One ### F# block per finding, or a single `- none` line. -->
+
+### F1
+- Severity: high
+- Kind: criterion
+- Criterion: T001 acceptance 1
+- Evidence: src/app.py:12
+- Found: <what exists instead>
+- Fix direction: <concrete coder direction>
+
+## Summary
+
+<one paragraph; do not edit code, tasks, or the canonical wave review>

package/skills/path/templates/wave-review.md

@@ -0,0 +1,64 @@
+# Review — wave <N>, cycle <C>
+
+<!-- Written by the reviewer role in wave mode. File: wave-N.cycleC.md —
+     deep reviews use wave-N.cycleC.contract.md and
+     wave-N.cycleC.adversarial.md instead. Keep validated fields on their
+     own lines: Cycle holds only the number
+     (C > 1 means re-review after fixes; see previous cycle file). -->
+
+<!-- For quick single-full-wave final scope, include these two metadata lines
+     with actual values, otherwise omit them:
+Reviewed HEAD: <full review commit SHA>
+Review scope: final
+     In each surface SC block also include Surface, Check, and Observed fields
+     using the final-review format. Record the actual walkthrough evidence once. -->
+
+Wave verdict: <pass | blocked — blocked if any task fails>
+Cycle: <C>
+Depth: <full | deep | verify-only — verify-only is orchestrator-written from
+        its isolated Verify evidence; no independent reviewer ran>
+Lens: <contract | adversarial — deep reviews only; empty or omitted
+       otherwise>
+Tasks reviewed: <count>
+
+## T001 — <title>: <pass | fail>
+
+<!-- Per task criterion: copy the full acceptance/interface criterion verbatim
+     before the em dash; join wrapped lines with spaces. An AC id or summary
+     alone cannot be matched by review_findings.py. -->
+- ✅ <criterion> — <evidence: verify output / file:line checked>
+- ❌ <criterion> — found: <what exists instead, file:line>
+  fix: <concrete direction a coder can execute without re-investigating>
+
+Warnings (non-blocking):
+- <weakened test / unfailable verify / none>
+
+Contract violations (blocking):
+- ❌ <task changed path outside its files list> — <evidence and fix direction>
+
+<!-- Repeat per task. -->
+
+## Intent coverage
+
+<!-- One heading per INTENT.md success criterion owned by a task in this
+     wave, ending `: pass` or `: fail`. `scripts/check_handoffs.py wave
+     --review <this file>` gates the SC id set and verdicts. Omit this
+     section when no task in the wave owns an SC. -->
+
+### SC1 — <criterion>: <pass | fail>
+- ✅ <evidence: verify output / file:line checked>
+- ❌ <criterion> — found: <what exists instead, file:line>
+  fix: <concrete direction a coder can execute without re-investigating>
+
+## Fixed since last cycle
+
+<!-- C > 1 only: previously failed criteria now confirmed fixed (re-checked,
+     not assumed), and any regressions the fixes introduced. -->
+- <criterion> — confirmed fixed / regressed: <evidence>
+
+## Summary for orchestrator
+
+- blocked findings: <failed criteria grouped by disjoint file scope; the
+  orchestrator applies the configured skeptic or fix-task path>
+- repeat offenders: <criteria failing across cycles — possible plan defect>
+- warnings worth a human eye: <...or none>