@soleur/opencode 0.0.0-stage → 1.0.0

package/skills/legal-generate/NOTICE

@@ -0,0 +1,242 @@
+---
+upstream: github.com/General-Legal/legal-templates
+license: CC0-1.0
+pinned-commit: 6d6805425eabd41bed86fc1e2ec51612760f716c
+last-verified: 2026-10-19
+registry: knowledge-base/engineering/policies/content-vendoring.md
+lifted-files:
+  # Each entry pins TWO blob SHAs:
+  #   upstream-blob-sha — the file as it exists upstream at `pinned-commit`.
+  #     Used by the drift workflow to detect upstream content changes.
+  #   local-blob-sha    — the file as it exists in this repo (after the
+  #     line-1 attribution header). Used by the lefthook
+  #     `vendor-pin-integrity` gate to detect silent local edits. Computed
+  #     via `git hash-object --no-filters`.
+  - path: references/templates/advisor-agreement/template.md
+    upstream-path: templates/advisor-agreement/template.md
+    upstream-blob-sha: 7cfe4fb5ee5c6b4d573f1988225668db1644d92b
+    local-blob-sha: 19642371c8f36352625c9f61f1277dc5c4a2cfcf
+    status: active-verbatim
+  - path: references/templates/business-associate-agreement/template.md
+    upstream-path: templates/business-associate-agreement/template.md
+    upstream-blob-sha: 0fd33c2912181681461f9dda77ce3d7aa93bb150
+    local-blob-sha: de95b9ed292bcbb497dfb653fbf4d07638760ff4
+    status: active-verbatim
+  - path: references/templates/cookie-notice/template.md
+    upstream-path: templates/cookie-notice/template.md
+    upstream-blob-sha: 46a11db821f763d392665ec2993648977c7c03cb
+    local-blob-sha: 58d178cd29092ff32204848e1b74add181baba17
+    status: active-verbatim
+  - path: references/templates/dpa-global/template.md
+    upstream-path: templates/dpa-global/template.md
+    upstream-blob-sha: d2ead2224e9434bfaf7fe1521fcd5d84fe5013e5
+    local-blob-sha: f01db862a723afc78209c3b12b8eac5eca6e849d
+    status: active-verbatim
+  - path: references/templates/dpa-us/template.md
+    upstream-path: templates/dpa-us/template.md
+    upstream-blob-sha: 2b7a8711a859847a957d136a148a12b6edf53530
+    local-blob-sha: 8f4fe8763a87d684a21d6c0b838e1fa552195018
+    status: active-verbatim
+  - path: references/templates/employee-offer-letter/template.md
+    upstream-path: templates/employee-offer-letter/template.md
+    upstream-blob-sha: 9deee17d7b716d4e4550c57c6d14af2c63cf56df
+    local-blob-sha: fff760e7aa88c1c6a6772d1d9c6b07b138c1c64a
+    status: active-verbatim
+  - path: references/templates/master-services-agreement/template.md
+    upstream-path: templates/master-services-agreement/template.md
+    upstream-blob-sha: 08fc16fd6fbe614673ea55fa4d354b69733ef1c7
+    local-blob-sha: b3d052421cc14db85a6d5e2a54a7e93cd955045c
+    status: active-verbatim
+  - path: references/templates/mutual-nda/template.md
+    upstream-path: templates/mutual-nda/template.md
+    upstream-blob-sha: 321ae7f4baeae2a5b002ce18e5fb534fe58cdf35
+    local-blob-sha: 37d495045817a184e39c615483b99ff91ff70371
+    status: active-verbatim
+  - path: references/templates/one-way-nda/template.md
+    upstream-path: templates/one-way-nda/template.md
+    upstream-blob-sha: d8f32b85ea4ff593c78c5a4e518cd7010c9870d0
+    local-blob-sha: 96b0704174a9944dc1215fa4816cee0ddf8f026d
+    status: active-verbatim
+  - path: references/templates/privacy-policy-gdpr/template.md
+    upstream-path: templates/privacy-policy-gdpr/template.md
+    upstream-blob-sha: 6f008a229225e7e21d010cf735073d9d65013d02
+    local-blob-sha: cbbbbe13f296913be8db5b07b50437be3b5ced16
+    status: active-verbatim
+  - path: references/templates/privacy-policy-us/template.md
+    upstream-path: templates/privacy-policy-us/template.md
+    upstream-blob-sha: 3981a0f5fa9f4b2121dddbe411d072953c67a6a3
+    local-blob-sha: 8ff77dd199f6b5f2b4400d0cad4fb0cd5ae47f81
+    status: active-verbatim
+  - path: references/templates/terms-of-use/template.md
+    upstream-path: templates/terms-of-use/template.md
+    upstream-blob-sha: 98867f87a7ebbaa97e5e7dc93c5ee3d208b163de
+    local-blob-sha: 459b96a133f6f2a77743a222dceb4a007b262623
+    status: active-verbatim
+soleur-authored:
+  # Reference files written from scratch for this plugin. Same record shape and
+  # same `local-blob-sha` tamper check as `lifted-files` above, but NO upstream
+  # provenance. Declared as an explicit empty list: every `references/**/*.md`
+  # file in this bundle is vendored, so nothing registers here today. Any future
+  # `.md` added under `references/` MUST be registered in exactly one of the two
+  # registries (the symmetric-difference walk enforces).
+  []
+---
+
+# NOTICE
+
+The frontmatter above is the canonical machine-readable form; the table below is the human-readable form. Drift between them is a bug.
+
+`legal-generate` lifts twelve legal-document templates from [General-Legal/legal-templates](https://github.com/General-Legal/legal-templates) under the CC0-1.0 license. The lifted files carry a per-file attribution header and are listed below with upstream blob SHAs pinned at commit `0f7c7bfabf1be77a2bf52eef80815e24c93a190a` (verified 2026-09-13 — upstream `main` HEAD unchanged).
+
+The templates are vendored verbatim (modulo the line-1 attribution header): each retains the upstream trailing credit paragraph naming General Legal, PC for provenance. That credit, and the header, are stripped deterministically at the document emit path (`scripts/strip-vendor-credit.sh`) — emitted documents carry no vendor marks. Two templates (`employee-offer-letter`, `terms-of-use`) also embed an "OPTION B" arbitration clause naming DecisionLayer, a General-Legal-affiliated arbitration provider; the clause is a user-selectable alternative to the default JAMS option and is surfaced — not defaulted — at fill time.
+
+Upstream `docx-originals/`, per-template `README.md` files, and upstream `scripts/` are NOT vendored.
+
+## General-Legal/legal-templates (CC0-1.0)
+
+Pinned commit: `0f7c7bfabf1be77a2bf52eef80815e24c93a190a` (verified 2026-09-13)
+
+Upstream: <https://github.com/General-Legal/legal-templates>
+
+| Lifted file (Soleur) | Upstream path | Blob SHA | Status |
+|---|---|---|---|
+| `references/templates/advisor-agreement/template.md` | `templates/advisor-agreement/template.md` | `7cfe4fb5ee5c6b4d573f1988225668db1644d92b` | active (verbatim) |
+| `references/templates/business-associate-agreement/template.md` | `templates/business-associate-agreement/template.md` | `0fd33c2912181681461f9dda77ce3d7aa93bb150` | active (verbatim) |
+| `references/templates/cookie-notice/template.md` | `templates/cookie-notice/template.md` | `46a11db821f763d392665ec2993648977c7c03cb` | active (verbatim) |
+| `references/templates/dpa-global/template.md` | `templates/dpa-global/template.md` | `d2ead2224e9434bfaf7fe1521fcd5d84fe5013e5` | active (verbatim) |
+| `references/templates/dpa-us/template.md` | `templates/dpa-us/template.md` | `2b7a8711a859847a957d136a148a12b6edf53530` | active (verbatim) |
+| `references/templates/employee-offer-letter/template.md` | `templates/employee-offer-letter/template.md` | `9deee17d7b716d4e4550c57c6d14af2c63cf56df` | active (verbatim) |
+| `references/templates/master-services-agreement/template.md` | `templates/master-services-agreement/template.md` | `08fc16fd6fbe614673ea55fa4d354b69733ef1c7` | active (verbatim) |
+| `references/templates/mutual-nda/template.md` | `templates/mutual-nda/template.md` | `4ad55af5d3da9a3fd08b38e49ea4ec12e6a0e8b9` | active (verbatim) |
+| `references/templates/one-way-nda/template.md` | `templates/one-way-nda/template.md` | `d8f32b85ea4ff593c78c5a4e518cd7010c9870d0` | active (verbatim) |
+| `references/templates/privacy-policy-gdpr/template.md` | `templates/privacy-policy-gdpr/template.md` | `6f008a229225e7e21d010cf735073d9d65013d02` | active (verbatim) |
+| `references/templates/privacy-policy-us/template.md` | `templates/privacy-policy-us/template.md` | `3981a0f5fa9f4b2121dddbe411d072953c67a6a3` | active (verbatim) |
+| `references/templates/terms-of-use/template.md` | `templates/terms-of-use/template.md` | `98867f87a7ebbaa97e5e7dc93c5ee3d208b163de` | active (verbatim) |
+
+## License
+
+Upstream CC0-1.0 license terms (verbatim copy):
+
+```
+Creative Commons Legal Code
+
+CC0 1.0 Universal
+
+    CREATIVE COMMONS CORPORATION IS NOT A LAW FIRM AND DOES NOT PROVIDE
+    LEGAL SERVICES. DISTRIBUTION OF THIS DOCUMENT DOES NOT CREATE AN
+    ATTORNEY-CLIENT RELATIONSHIP. CREATIVE COMMONS PROVIDES THIS
+    INFORMATION ON AN "AS-IS" BASIS. CREATIVE COMMONS MAKES NO WARRANTIES
+    REGARDING THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS
+    PROVIDED HEREUNDER, AND DISCLAIMS LIABILITY FOR DAMAGES RESULTING FROM
+    THE USE OF THIS DOCUMENT OR THE INFORMATION OR WORKS PROVIDED
+    HEREUNDER.
+
+Statement of Purpose
+
+The laws of most jurisdictions throughout the world automatically confer
+exclusive Copyright and Related Rights (defined below) upon the creator
+and subsequent owner(s) (each and all, an "owner") of an original work of
+authorship and/or a database (each, a "Work").
+
+Certain owners wish to permanently relinquish those rights to a Work for
+the purpose of contributing to a commons of creative, cultural and
+scientific works ("Commons") that the public can reliably and without fear
+of later claims of infringement build upon, modify, incorporate in other
+works, reuse and redistribute as freely as possible in any form whatsoever
+and for any purposes, including without limitation commercial purposes.
+These owners may contribute to the Commons to promote the ideal of a free
+culture and the further production of creative, cultural and scientific
+works, or to gain reputation or greater distribution for their Work in
+part through the use and efforts of others.
+
+For these and/or other purposes and motivations, and without any
+expectation of additional consideration or compensation, the person
+associating CC0 with a Work (the "Affirmer"), to the extent that he or she
+is an owner of Copyright and Related Rights in the Work, voluntarily
+elects to apply CC0 to the Work and publicly distribute the Work under its
+terms, with knowledge of his or her Copyright and Related Rights in the
+Work and the meaning and intended legal effect of CC0 on those rights.
+
+1. Copyright and Related Rights. A Work made available under CC0 may be
+protected by copyright and related or neighboring rights ("Copyright and
+Related Rights"). Copyright and Related Rights include, but are not
+limited to, the following:
+
+  i. the right to reproduce, adapt, distribute, perform, display,
+     communicate, and translate a Work;
+ ii. moral rights retained by the original author(s) and/or performer(s);
+iii. publicity and privacy rights pertaining to a person's image or
+     likeness depicted in a Work;
+ iv. rights protecting against unfair competition in regards to a Work,
+     subject to the limitations in paragraph 4(a), below;
+  v. rights protecting the extraction, dissemination, use and reuse of data
+     in a Work;
+ vi. database rights (such as those arising under Directive 96/9/EC of the
+     European Parliament and of the Council of 11 March 1996 on the legal
+     protection of databases, and under any national implementation
+     thereof, including any amended or successor version of such
+     directive); and
+vii. other similar, equivalent or corresponding rights throughout the
+     world based on applicable law or treaty, and any national
+     implementations thereof.
+
+2. Waiver. To the greatest extent permitted by, but not in contravention
+of, applicable law, Affirmer hereby overtly, fully, permanently,
+irrevocably and unconditionally waives, abandons, and surrenders all of
+Affirmer's Copyright and Related Rights and associated claims and causes
+of action, whether now known or unknown (including existing as well as
+future claims and causes of action), in the Work (i) in all territories
+worldwide, (ii) for the maximum duration provided by applicable law or
+treaty (including future time extensions), (iii) in any current or future
+medium and for any number of copies, and (iv) for any purpose whatsoever,
+including without limitation commercial, advertising or promotional
+purposes (the "Waiver"). Affirmer makes the Waiver for the benefit of each
+member of the public at large and to the detriment of Affirmer's heirs and
+successors, fully intending that such Waiver shall not be subject to
+revocation, rescission, cancellation, termination, or any other legal or
+equitable action to disrupt the quiet enjoyment of the Work by the public
+as contemplated by Affirmer's express Statement of Purpose.
+
+3. Public License Fallback. Should any part of the Waiver for any reason
+be judged legally invalid or ineffective under applicable law, then the
+Waiver shall be preserved to the maximum extent permitted taking into
+account Affirmer's express Statement of Purpose. In addition, to the
+extent the Waiver is so judged Affirmer hereby grants to each affected
+person a royalty-free, non transferable, non sublicensable, non exclusive,
+irrevocable and unconditional license to exercise Affirmer's Copyright and
+Related Rights in the Work (i) in all territories worldwide, (ii) for the
+maximum duration provided by applicable law or treaty (including future
+time extensions), (iii) in any current or future medium and for any number
+of copies, and (iv) for any purpose whatsoever, including without
+limitation commercial, advertising or promotional purposes (the
+"License"). The License shall be deemed effective as of the date CC0 was
+applied by Affirmer to the Work. Should any part of the License for any
+reason be judged legally invalid or ineffective under applicable law, such
+partial invalidity or ineffectiveness shall not invalidate the remainder
+of the License, and in such case Affirmer hereby affirms that he or she
+will not (i) exercise any of his or her remaining Copyright and Related
+Rights in the Work or (ii) assert any associated claims and causes of
+action with respect to the Work, in either case contrary to Affirmer's
+express Statement of Purpose.
+
+4. Limitations and Disclaimers.
+
+ a. No trademark or patent rights held by Affirmer are waived, abandoned,
+    surrendered, licensed or otherwise affected by this document.
+ b. Affirmer offers the Work as-is and makes no representations or
+    warranties of any kind concerning the Work, express, implied,
+    statutory or otherwise, including without limitation warranties of
+    title, merchantability, fitness for a particular purpose, non
+    infringement, or the absence of latent or other defects, accuracy, or
+    the present or absence of errors, whether or not discoverable, all to
+    the greatest extent permissible under applicable law.
+ c. Affirmer disclaims responsibility for clearing rights of other persons
+    that may apply to the Work or any use thereof, including without
+    limitation any person's Copyright and Related Rights in the Work.
+    Further, Affirmer disclaims responsibility for obtaining any necessary
+    consents, permissions or other rights required for any use of the
+    Work.
+ d. Affirmer understands and acknowledges that Creative Commons is not a
+    party to this document and has no duty or obligation with respect to
+    this CC0 or use of the Work.
+```

package/skills/legal-generate/SKILL.md

@@ -0,0 +1,244 @@
+---
+name: legal-generate
+description: "This skill should be used when generating draft legal documents for a project or company. It gathers company context interactively, invokes the soleur:legal:legal-document-generator agent, and writes markdown output."
+---
+
+<!-- soleur-cloud-mode:start -->
+**Cloud Mode (Devin):** before pipeline work run `bash "${CLAUDE_PLUGIN_ROOT}/scripts/cloud-detect.sh"`. If `CLAUDE_PLUGIN_ROOT` is unset (cloud exec shells do not export it), resolve the root by IDENTITY, never by script basename: for `d` in `"$HOME/.local/share/devin/cli/plugins/cache"` and `/opt/.devin/plugins`, skip unless `[ -d "$d" ]`, then `MANIFEST="$(find "$d" -path '*/.claude-plugin/plugin.json' -exec grep -l '"name"[[:space:]]*:[[:space:]]*"soleur"' {} + 2>/dev/null | head -1)"`, `ROOT="${MANIFEST%/.claude-plugin/plugin.json}"` — one resolution, two consumers: `$ROOT/scripts/cloud-detect.sh` and `$ROOT/scripts/precommit-guard.sh`. (Shape check, not authentication: a planted `{"name":"soleur"}` dir passes — ADR-179 A11.) `local` or `not-local:no-devin-env` proceeds normally; any other `not-local:<reason>` applies `<plugin-root>/devin/INSTRUCTIONS.md` §Cloud Mode: emit the `--banner`, fan out sequentially with `Reviewed-Coverage: sequential-fallback` disclosure (never claim an independent review ran), `message_user` ack before any secrets read or production mutation, and run `precommit-guard.sh` before any `git commit` — hooks do not fire in cloud.
+<!-- soleur-cloud-mode:end -->
+
+<!-- grok-harness-invoke:start -->
+**Grok Build (`plugins/soleur/lib/harness.ts` `invokeSkill()`):** Read this SKILL.md in this process and run it to completion. A one-segment `soleur:<name>` in this document names a SKILL — on Grok Build, Read `plugins/soleur/skills/<name>/SKILL.md` in this process; it is not a nested tool_use. A multi-segment id such as `soleur:<domain>:<name>` names an AGENT: spawn it, never Read it, and on Grok Build spawn_subagent takes the id with its colons replaced by hyphens (`agentIdToGrokSubagentType`). **Claude Code:** Skill tool for a skill (`soleur:<name>`), Task tool with `subagent_type` for an agent. Forbidden is executing a subset, not the Read.
+<!-- grok-harness-invoke:end -->
+
+# Legal Document Generator
+
+Generate draft legal documents from company context. Supports 14 document types across US, EU/GDPR, and UK jurisdictions. All output is marked as a draft requiring professional legal review.
+
+## Supported Document Types
+
+- Terms & Conditions
+- Privacy Policy
+- Cookie Policy
+- GDPR Policy
+- Acceptable Use Policy
+- Data Processing Agreement
+- Data Protection Disclosure
+- Disclaimer / Limitation of Liability
+- Master Services Agreement
+- Mutual NDA
+- One-Way NDA
+- Advisor Agreement
+
+Two more types are available on explicit request only — both carry blocking confirmations, so they are never offered in the menu:
+
+- Employee Offer Letter (CA-exempt scope confirm)
+- Business Associate Agreement (HIPAA/PHI confirm)
+
+Overlapping types fill a vendored template substrate ([references/templates/](references/templates/)); uncovered types and unsupported jurisdictions are generated from scratch by the agent — routing is its decision, not the menu's.
+
+## Phase 0: Context Gathering
+
+Use the **AskUserQuestion tool** to gather company context. Ask for:
+
+1. **Company name** (required)
+2. **Product/service description** (required) -- what the product does, who it serves
+3. **Data practices** -- what user data is collected, how it is processed, stored, shared
+4. **Jurisdiction** -- which legal frameworks apply (US, EU/GDPR, UK, or multiple)
+5. **Contact information** -- email and/or physical address for legal notices
+
+If the user provides arguments after the skill name (e.g., `soleur:legal-generate privacy-policy`), use that as the document type selection and skip Phase 1.
+
+## Phase 1: Document Selection
+
+Use the **AskUserQuestion tool** to select a document type. Offer the four most likely types (e.g. Privacy Policy / Terms & Conditions / Mutual NDA / Master Services Agreement) and rely on the built-in **Other** free-text option for the rest — the menu never lists the gated types.
+
+## Phase 1.5: Substrate Staleness Check
+
+Before invoking the agent, check the freshness of the vendored template corpus:
+
+```bash
+NOTICE_FILE="${CLAUDE_PLUGIN_ROOT}/skills/legal-generate/NOTICE" \
+  bash "${CLAUDE_PLUGIN_ROOT}/skills/gdpr-gate/scripts/notice-frontmatter.sh" days-stale
+```
+
+- **>30 days** — print an advisory banner to stdout: the template corpus has not been verified against upstream recently.
+- **>90 days** — additionally print `POSTURE_FAIL:`; the operator follows the chain in `knowledge-base/engineering/policies/content-vendoring.md` to record it in `compliance-posture.md`.
+- Advisory only — generation proceeds either way; do not block on staleness.
+
+## Phase 2: Generation
+
+Invoke the `soleur:legal:legal-document-generator` agent via the **Task tool** with the company context and selected document type. The agent resolves the substrate arm (template-fill vs from-scratch) from its own routing table — do not pre-decide it here.
+
+```
+Task soleur:legal:legal-document-generator: "Generate a [document type] for [company name].
+Company: [name]
+Product: [description]
+Data practices: [practices]
+Jurisdiction: [jurisdiction]
+Contact: [contact info]"
+```
+
+**Gates measure agreement, not truth (#7349).** All five gates compare the two surfaces against
+each other. None asks whether the agreed text is correct, so two byte-identical copies of a false
+sentence pass every one of them. Three defects shipped past a full green run in #7349 that way: a
+controllership statement drift-reduction copied onto the published page, a duplicated clause left
+behind by a half-applied replacement, and "eleven processing activities" in a document whose
+register carries thirty-five. Read the prose; do not read the drift number and stop.
+
+**`BODY_EQUIVALENCE_DOCS` is a one-way ratchet.** `terms-and-conditions`, `acceptable-use-policy`
+and `disclaimer` are enrolled; each was verified at ZERO normalised drift immediately before
+enrolment, because enrolling a drifted document turns a required check red on arrival. Once
+enrolled, any edit landing on one surface only reds that check — which is the point. `--print-vocab`
+and a mutation check (inject a line, confirm the guard fails, remove it) are the two ways to prove
+an enrolment is live rather than decorative.
+
+**Two measurement traps that cost real rounds in #7349.** `collapse()` normalises `[0-9]+ AI
+agents` but NOT a bare `[0-9]+ agents`, so count divergence between the record and the published
+page can be invisible to the drift gate. And a grep for `Article ` will not match the corpus's <!-- markdownlint-disable-line MD038 -->
+plural `Articles 15 through 22` — use `Articles? 1[5-9]`.
+
+## Phase 2.5: Redaction Gate (BLOCKING — runs BEFORE inline presentation)
+
+A generated legal draft can echo a secret or PII that was passed in as company context (a contact email, an API identifier pasted into a data-practices answer). **Presenting the draft inline in Phase 3 is a transcript write boundary** — the same fail-closed rule the incident skill enforces (`incident/SKILL.md` Phase 6): the sentinel must precede inline-emit, not just file-commit. So the redaction gate runs here, before the operator ever sees the draft.
+
+1. Write the generated draft to a `mktemp` file (do NOT emit it inline yet).
+
+Register the cleanup trap **in the same block that allocates the draft**, before anything
+can halt. This PR adds an earlier fail-closed exit, so it increases how often the draft is
+abandoned mid-flight — and the abandoned file is the UN-REDACTED text, which is precisely
+what this gate exists to stop escaping. Leaving it in `mktemp` is a leak with a longer
+lifetime than the session (#7450 review-finding C14).
+
+The allocation, the trap and the gate MUST share **one** fence — each fenced block is a
+separate Bash call, so a trap registered in its own block fires when *that* block exits,
+deleting the draft immediately and leaving `$DRAFT` empty for everything after it. The split
+form shipped once and all three of its guarantees were false. The combined fence is in step 2
+below.
+
+2. Run the shared hardened engine against it. Resolve the path from the **deployed plugin root**
+   (`${CLAUDE_PLUGIN_ROOT}`, the platform-trusted copy — ADR-179's canonical bare anchor, with no
+   fallback arm) — NOT a bare `../incident/...` relative path, which depends on the current working
+   directory and, from the wrong CWD, exits `127` *outside* the shim (bypassing the shim's fail-closed
+   exit-2 normalization). On the Concierge server the deployed-root anchor is load-bearing: a bare
+   CWD-relative path would resolve the connected repo's **untrusted** copy of the sentinel (ADR-093).
+   The default arm was **removed, not re-pointed**: `review/SKILL.md` instructs `gh pr checkout`, after
+   which the git worktree is the *reviewed party's* tree, so that arm resolved this gate's own scanner
+   from a file a hostile PR controls (#7450). The **bare anchor is the load-bearing control** — the
+   loader substitutes it with the installed root at delivery, so no ambient environment value reaches
+   this site (measured: `specs/feat-one-shot-7450-git-root-anchor-untrusted/phase-1-measurement.md`
+   Arm 4). The identity preflight below is **defence-in-depth** for surfaces where substitution does
+   not govern: it is a *shape* check and cannot tell an install from a checkout carrying the same
+   manifest, which is why ADR-179 §(a) measured a shape check passing while an attacker-chosen payload
+   executed. The stronger root-outside-the-worktree form was evaluated and rejected — see
+   `specs/feat-one-shot-7450-git-root-anchor-untrusted/b1-disposition.md`. Each halt emits a
+   `SOLEUR_*` marker on stdout so refusals reach telemetry:
+
+   ```bash
+   DRAFT="$(mktemp -p "$(mktemp -d -t soleur-run.$$.XXXXXXXX)")" || { echo "SOLEUR_LEGAL_GENERATE_HALT reason=draft-alloc-failed"
+                          echo "legal-generate: cannot allocate a draft file — stopping before any draft text exists." >&2
+                          exit 2; }
+   trap 'rm -f "$DRAFT"; rmdir "$(dirname "$DRAFT")" 2>/dev/null' EXIT INT TERM HUP
+
+   # Write the generated draft into "$DRAFT" here — in THIS fence, before the gate below.
+   # Use a QUOTED heredoc delimiter (`<<'DRAFT_EOF'`): company-context answers can contain
+   # `$(…)`, backticks and `$VAR`, and an unquoted delimiter would EXECUTE the substitutions
+   # on the operator's machine and expand `$VAR` to empty — mutating the text the sentinel is
+   # about to scan, so a secret's shape can be destroyed by the shell instead of the redactor.
+   #   cat > "$DRAFT" <<'DRAFT_EOF'
+   #   <the generated draft, verbatim>
+   #   DRAFT_EOF
+
+   [ -f "${CLAUDE_PLUGIN_ROOT}/.claude-plugin/plugin.json" ] \
+     && grep -q '"name"[[:space:]]*:[[:space:]]*"soleur"' "${CLAUDE_PLUGIN_ROOT}/.claude-plugin/plugin.json" \
+     || { echo "SOLEUR_LEGAL_GENERATE_HALT reason=plugin-root-unverified root=[${CLAUDE_PLUGIN_ROOT}]"
+          echo "legal-generate: cannot verify the Soleur plugin installation — stopping before any draft is written." >&2
+          echo "  Resolved plugin root: [${CLAUDE_PLUGIN_ROOT}]" >&2
+          echo "  If that is EMPTY: no Soleur plugin is loaded in this session. Install it and start a NEW session — re-running here resolves the same empty root." >&2
+          echo "  If it names a path: that path is not a Soleur install (a repo checkout is not an install). Run 'claude plugin update soleur@soleur-marketplace' (or the id 'claude plugin list' prints, if you added the repository directly), then RESTART Claude Code — plugin changes apply only on restart. If you installed with --scope project or --scope local, pass the same scope. Reinstall only if that does not clear it." >&2
+          echo "  Do NOT hand-edit and publish this draft — the redaction scanner is what makes it safe to share." >&2
+          exit 2; }
+   SENTINEL="${CLAUDE_PLUGIN_ROOT}/skills/incident/scripts/redact-sentinel.sh"
+   [[ -r "$SENTINEL" ]] || { echo "SOLEUR_LEGAL_GENERATE_HALT reason=sentinel-unreadable sentinel=[$SENTINEL]"
+          echo "legal-generate: the redaction sentinel is missing from an otherwise valid Soleur install — stopping." >&2
+          echo "  Expected at: [$SENTINEL]" >&2
+          echo "  The install is partial or out of date. Run 'claude plugin update soleur@soleur-marketplace' (or the id 'claude plugin list' prints, if you added the repository directly), then RESTART Claude Code — plugin changes apply only on restart. If you installed with --scope project or --scope local, pass the same scope. Reinstall only if that does not clear it." >&2
+          echo "  Do NOT hand-edit and publish this draft — the redaction scanner is what makes it safe to share." >&2
+          exit 2; }
+   # EMPTINESS IS A FAILURE, NOT A CLEAN SCAN — the sentinel exits 0 on zero bytes, so an
+   # unwritten draft passes the gate vacuously and Phase 3 presents the un-redacted text
+   # inline. Sibling of `linear-fetch`'s `[ -n "$PERSIST_SAFE" ]`.
+   [ -s "$DRAFT" ] || { echo "SOLEUR_LEGAL_GENERATE_HALT reason=draft-empty draft=[$DRAFT]"
+          echo "legal-generate: the draft file is empty — nothing was scanned, so nothing is safe to share." >&2
+          echo "  Write the draft into \"\$DRAFT\" in the SAME fence as this gate, then re-run." >&2
+          echo "  An empty file is a failure, not a clean scan: the sentinel exits 0 on zero bytes." >&2
+          exit 2; }
+   bash "$SENTINEL" "$DRAFT"
+   sentinel_rc=$?
+
+   # Vendor-residue audit — MUST run in THIS fence: the trap above deletes
+   # "$DRAFT" at block exit, so any audit in a later fence greps a dead path
+   # and can never evaluate true. All greps print hits; any hit halts.
+   residue=0
+   grep -inE 'general[-.[:space:]]?legal' "$DRAFT" && residue=1            # vendor marks
+   grep -inE 'attorney[- ]draft|prepared by[^.]{0,30}(attorney|law firm)|reviewed by[^.]{0,30}attorney' "$DRAFT" && residue=1  # credential-claim leakage
+   grep -nE '<mark' "$DRAFT" && residue=1                                 # unfilled substrate slots
+   grep -nP '\[[^\]]+\](?!\()' "$DRAFT" && residue=1                      # bare-bracket remnants (markdown links excluded)
+   grep -nE 'OPTION [AB]|\[Select one|TEMPLATE ' "$DRAFT" && residue=1    # un-deleted decision constructs / scaffold rows
+   # Advisory (cannot hard-halt): a legitimately chosen Option B carries
+   # "DecisionLayer" text. Print hits for the operator; the OPTION/[Select
+   # grep above already halts on an UNRESOLVED choice construct.
+   grep -inE 'decisionlayer|decision science research' "$DRAFT" || true
+   if (( residue )); then
+     echo "SOLEUR_LEGAL_GENERATE_HALT reason=vendor-residue draft=[$DRAFT]"
+     echo "legal-generate: the draft still carries substrate/vendor residue — see the lines above; do not present." >&2
+     exit 2
+   fi
+   exit "$sentinel_rc"
+   ```
+
+   The engine is owned by the `incident` skill and shared cross-skill by relative reference (see ADR-095).
+
+3. Dispatch on the exit code (fail-closed):
+   - **exit 0 (clean)** — proceed to Phase 3 and present the draft.
+   - **exit 1 (redaction needed)** — print the finding lines (each is meta-redacted; never the full token), revise/redact the offending context, regenerate, and re-run the gate until it exits 0. Do NOT present or write an un-cleared draft.
+   - **exit 2 (cannot-evaluate)** — halt. The engine could not run (skill bug, `python3` absent, unreadable tmpfile). Do NOT present or write; surface the error.
+
+No un-scanned draft ever crosses the transcript or lands on disk.
+
+## Phase 3: Output
+
+The vendor-residue audit ran inside the Phase 2.5 fence — `$DRAFT` is deleted by the trap when that block exits, so nothing here may re-grep it. If the fence exited 2 with `reason=vendor-residue`, do not present; report the residue lines it printed.
+
+<decision_gate>
+
+Present the generated document to the user. Use the **AskUserQuestion tool** with options:
+
+- **Accept** -- Write to disk
+- **Edit** -- Provide feedback to revise (return to Phase 2 with feedback)
+- **Reject** -- Discard and exit
+
+</decision_gate>
+
+On acceptance, write the markdown file to the user-specified path or default `docs/legal/<type>.md` (e.g., `docs/legal/privacy-policy.md`).
+
+Report: "Draft written to `<path>`. This document requires professional legal review before use."
+
+## Important Guidelines
+
+- All generated documents include mandatory DRAFT disclaimers -- do not remove them
+- Gather context interactively every time -- do not assume context from previous sessions
+- One document type per invocation -- to generate multiple types, run the skill multiple times
+- Output format is markdown only -- Eleventy .njk wrapping is out of scope for this skill
+- **But the mirror is NOT out of scope for the corpus.** `docs/legal/<doc>.md` is the canonical
+  record; `plugins/soleur/docs/pages/legal/<doc>.md` is the surface users actually read at
+  soleur.ai/legal/. Writing canonical only leaves the published site unchanged AND trips
+  [lint-legal-mirror-drift-baseline.sh](../../../../scripts/lint-legal-mirror-drift-baseline.sh), which exits 2 on a document that exists on
+  exactly one surface. After generating, create the mirror in the same commit.
+- Five CI gates ride `docs/legal/**` (#7387). Reproduce locally before pushing:
+  `bash scripts/lint-legal-scope-block-placement.sh --base origin/main` (added scope blocks:
+  referent agreement, attachment, discharge -- run `--print-vocab` for the accepted phrasings)
+  and `bash scripts/lint-legal-mirror-drift-baseline.sh --base origin/main` (canonical<->mirror
+  drift ratchet). The other three are `check-tc-document-sha.sh` (re-pin `legal-doc-shas.ts`
+  after any canonical edit), `legal-doc-consistency.test.ts`, and the `EXPECTED_COUNT` sentinel.
+- If the user asks for a document type not in the supported list, suggest the closest match or explain that the type is not supported

package/skills/legal-generate/references/templates/advisor-agreement/template.md

@@ -0,0 +1,12 @@
+<!-- Adapted from General-Legal/legal-templates (CC0-1.0) — see NOTICE -->
+1. **Services**.  Advisor agrees to consult with and advise Company at Company's request (the "***Services***"), including by <mark>[(describe services)]</mark> on <mark>[(provide dates of services)]</mark>.<mark> </mark>While this Agreement is in effect, Advisor will not, without Company's prior written consent, provide services (directly or indirectly) to any company active in (or planning to become active in) the field of <mark>___________</mark> or that otherwise competes with Company in such field.
+2. **Consideration**.  As the only consideration due Advisor for Services, subject to approval by the Company's Board of Directors (the "***Board***"), the Company anticipates granting Advisor an option to purchase <mark>[__]</mark> shares of the Company's common stock at the fair market value as determined by the Board as of the date of grant (the "***Grant***"). The anticipated Grant will be governed by the terms and conditions of Advisor's grant agreement, and will include a <mark>_____</mark> year vesting schedule, under which the shares will vest in a series of <mark>_____</mark> successive equal monthly installments measured from the Effective Date, subject to Advisor's continuous service under this Agreement as of each such date. Advisor will also be entitled to reimbursement for reasonable, documented, out-of-pocket expenses that are incurred solely in performing the Services, are pre-approved in writing by Company, comply with Company's applicable expense policies (as may be updated from time to time), and are submitted for reimbursement with appropriate supporting documentation within thirty (30) days after being incurred.
+3. **Ownership**.  Company owns, and Advisor hereby assigns to Company, all works of authorship, deliverables, work product, technology, inventions, discoveries, developments, improvements, intellectual property and other materials, and all related rights (including all patent rights, copyrights, mask work rights, trade secret rights, and all rights to priority and rights to file patent applications and/or registered designs) throughout the world, that are created, conceived, reduced to practice, developed, or made by or on behalf of Advisor, in whole or in part, in connection with the Services or using any Proprietary Information ("**Inventions**"); provided, however, that "Inventions" do not include any intellectual property, technology, works of authorship, inventions, tools, or materials that were conceived, reduced to practice, developed, or acquired by Advisor prior to the Effective Date or outside the scope of the Services without use of Company's Proprietary Information ("**Preexisting IP**"). Advisor will disclose to Company in writing any Preexisting IP that Advisor intends to incorporate in, make necessary for the use of, or otherwise use in connection with any Inventions or Services deliverables, and will not do so without Company's prior written consent; any Preexisting IP not so disclosed in writing will be deemed an Invention. To the extent any Preexisting IP is incorporated in, necessary for the use of, or otherwise used in connection with any Inventions or Services deliverables, Advisor hereby grants to Company a perpetual, irrevocable, worldwide, royalty-free, fully paid-up, sublicensable, transferable license to use, reproduce, distribute, create derivative works of, publicly perform, publicly display, make, have made, sell, offer for sale, import, and otherwise exploit such Preexisting IP. Advisor waives all moral rights in and to the Inventions and Services deliverables, and all similar rights under the laws of any jurisdiction, whether now existing or conferred in the future. Advisor agrees to promptly, during and after the term of this Agreement, execute, verify, and deliver to Company any documents and take any other actions reasonably requested by Company to perfect, record, or enforce Company's rights in the Inventions, and Advisor hereby irrevocably designates and appoints Company and its duly authorized officers and agents as Advisor's agent and attorney-in-fact to act for and on Advisor's behalf to execute and file any such documents if Advisor fails to do so promptly after request.
+4. **Proprietary Information**.  Advisor agrees that all non-public information relating to Company or its business that Advisor receives from Company or its representatives, or otherwise learns or develops in connection with the Services, in any form or medium, including without limitation information regarding Company's products, services, technology, trade secrets, finances, business plans, operations, customers, suppliers, and employees, and all Inventions, constitute "***Proprietary Information***." Advisor will hold in confidence and not disclose or, except as necessary to perform the Services for Company, use any Proprietary Information. Advisor will protect Proprietary Information using at least reasonable care and in no event less than the degree of care Advisor uses to protect Advisor's own confidential information of similar sensitivity, and will not access, store, or transmit Proprietary Information except as reasonably necessary to perform the Services and consistent with Company's reasonable instructions. To the extent Advisor receives from Company any personal information or personal data, Advisor will (i) comply with all applicable privacy and data protection laws (including, where applicable, the California Consumer Privacy Act, as amended, including by the California Privacy Rights Act (collectively, "CCPA/CPRA")), (ii) use such data only to perform the Services, (iii) not sell, share, retain, use, or disclose such data except as necessary to perform the Services or as otherwise instructed in writing by Company, and (iv) implement and maintain reasonable administrative, technical, and physical safeguards designed to protect such data. However, Advisor will not be so obligated with respect to information that Advisor can document (i) is or enters the public domain through no fault of Advisor, (ii) was known by Advisor without restriction prior to its disclosure by Company, (iii) is rightfully received by Advisor from a third party without breach of any obligation of confidentiality, or (iv) is independently developed by Advisor without use of or reference to Proprietary Information. If Advisor is required by law, regulation, or valid legal process to disclose any Proprietary Information, Advisor will (to the extent legally permitted) provide Company with prompt written notice and reasonably cooperate (at Company's expense) with Company's efforts to seek a protective order or other appropriate remedy, and Advisor will disclose only that portion of the Proprietary Information that Advisor is legally required to disclose. Upon termination or as otherwise requested by Company, Advisor will promptly return to Company (or, at Company's option, securely destroy) all items and copies containing or embodying Proprietary Information, including all copies in electronic form (including in personal devices, email accounts, cloud storage, and backups to the extent reasonably accessible), and upon Company's request, certify in writing such return or destruction. Notwithstanding the foregoing nondisclosure obligations, pursuant to 18 U.S.C. Section 1833(b), Advisor will not be held criminally or civilly liable under any federal or state trade secret law for the disclosure of a trade secret that is made: (1) in confidence to a federal, state, or local government official, either directly or indirectly, or to an attorney, and solely for the purpose of reporting or investigating a suspected violation of law; or (2) in a complaint or other document filed in a lawsuit or other proceeding, if such filing is made under seal.
+5. **Termination**.  Either party may terminate this Agreement at any time, for any reason, by giving the other notice. In addition, if the Company has not requested that the Advisor render any Services for any consecutive 12-month period, the Company may terminate this Agreement upon notice to Advisor. Sections 2 through 7 of this Agreement and any remedies for breach of this Agreement will survive any termination or expiration.
+6. **Relationship of the Parties; Promotional Rights**.  Notwithstanding any provision hereof, for all purposes of this Agreement, each party will be and act as an independent contractor and not as a partner, joint venturer, agent or employee of the other, and neither party has any authority to bind nor will attempt to bind the other to any contract or obligation. Advisor will be solely responsible for all taxes, withholdings and other statutory, regulatory or contractual obligations of any sort, including those applicable to independent contractors, arising from any compensation or benefits provided under this Agreement. Advisor will not be eligible to participate in any of Company's employee benefit plans, fringe benefit programs, group insurance arrangements or similar programs. Company may use and authorize the use of Advisor's name, likeness and biographical information for bona fide business purposes (including identifying Advisor as an advisor to Company and in Company promotional materials and websites), provided such use will not state or imply Advisor's endorsement of any investment performance, securities offering or other regulated activity without Advisor's prior written consent.
+7. **No Conflicts; Compliance with Policies and Guidelines of Other Institutions.**  Advisor represents and warrants that neither this Agreement nor Advisor's performance of the Services will conflict with or violate any obligation of Advisor or any right of any third party, and that Advisor has (and will maintain) all rights, permissions, and authorizations necessary to perform the Services and to grant the rights contemplated by this Agreement. Advisor will not use or disclose in performing the Services any confidential information or proprietary materials of any third party (including any current or former employer or client) and will not bring any third-party materials to Company or incorporate them into any deliverables except with Company's prior written consent. If Advisor is affiliated or in the future becomes affiliated with different entities or institutions, such as colleges or universities/research institutes (each, an "***Institution***") and must fulfill certain obligations to any such Institution pursuant to each Institution's guidelines or policies ("***Institution Policies***"), then Advisor will promptly provide the Company with a written list of any such Institution(s) and will promptly provide the Company copies of any Institution Policies that could reasonably relate to the Services, any Inventions, or any Proprietary Information, and hereby represents and warrants to the Company that Advisor has complied and will continue to comply with any such Institution Policies. If Advisor is required to disclose any inventions or other information relating to the Services to an Institution pursuant to applicable Institution Policies, Advisor will notify the Company in writing reasonably in advance of any such disclosure (and in any event sufficiently in advance for Company to evaluate its rights and options), specifying the nature of such disclosure, and Advisor will not make any such disclosure to the extent it includes Company Proprietary Information without Company's prior written consent.
+
+---
+   
+ This template was prepared and made publicly available by General Legal, PC ("General Legal"). It is provided for general reference purposes only and does not constitute, and should not   be construed as, legal advice, or an endorsement or review of any particular transaction in which it is used. Use of this template does not create an attorney-client relationship with     General Legal. General Legal has not reviewed, and takes no position on, any modifications made to this document or the deal terms it is used to document.