@starci/eslint-grammar-offset-pop 0.12.13 → 0.13.0

package/runtime/modules/kernel/removed-vocabulary.yaml

@@ -0,0 +1,458 @@
+# Every spelling the runtime refuses by name, each with what replaced it. engine/removed-vocabulary.mjs reads this file:
+# the config and routing-bias refusals take their names and replacements from it, and the `removed-vocabulary` self-check
+# refuses any of these spellings in text an agent or the owner reads, outside this file, CHANGELOG.md and a block marked
+# `[removed-list]` (CONTRIBUTING.md, "Removing or renaming a spelling").
+# Fields: id; kind (config-key | bias-field | verb | flag | code | vocabulary | file; a file is named by its base name); name (the removed spelling); use (the
+# replacement, worded to finish the sentence "<name> is removed (<use>)"); since (the release that removed it);
+# match (optional regular expression the scan uses instead of the literal name); scan (false when the name is too common
+# a word to scan for).
+kinds: [config-key, bias-field, verb, flag, code, vocabulary, file]
+removed:
+  - id: fe-landmark-branch-inventory
+    kind: vocabulary
+    name: LANDMARK_BRANCHES
+    use: 'the selected Grammar lint package owns its component vocabulary; the universal FE canon exposes no component inventory'
+    since: 1.0.0-alpha.31
+  - id: fe-grammar-rule-namespace
+    kind: vocabulary
+    name: starci-fe Grammar component rules
+    match: 'starci-fe/(?:app-shell-frame|no-shell-bottom-tabs|navbar-control-size|navbar-cluster|no-navbar-create|no-raw-structural-element|no-heading-tag-outside-heading-component|status-text-uses-soft-foreground|vendor-primitive-has-named-owner|no-vendor-icon-outside-icon-leaf|heroicons-is-the-glyph-vendor|no-off-scale-glyph-size|no-icon-size-class|destructive-menu-entry-needs-danger-tone|no-decorative-icon-in-metric-cell|no-inline-svg-outside-brand-mark-leaf|no-fractional-step|no-hand-rolled-heading|no-unresolved-token-class|slot-status-through-slotview)\b'
+    use: 'the same rule id under starci-grammar/ from the selected Grammar lint package; FE-RULE-OWNERSHIP governs placement'
+    since: 1.0.0-alpha.31
+  - id: offset-pop-toaster-content-guidance
+    kind: vocabulary
+    name: toaster-clear-of-the-dock
+    use: 'toaster-clear-of-content in the Offset Pop playbook'
+    since: 1.0.0-alpha.31
+  - id: cut-seam-command
+    kind: flag
+    name: cut-seam --command
+    match: 'cut-seam[^\n]*--command\b'
+    use: 'cut-seam --reconcile reads the commands and selection from --checks-file'
+    since: 1.0.0-alpha.31
+  - id: cut-set-closing-check
+    kind: vocabulary
+    name: closingCheck
+    use: 'modules/kernel/check-policy.yaml#regression owns integration checks after job merges; closingOrdinal identifies only the final open ordinal'
+    since: 1.0.0-alpha.31
+  - id: verb-guard-input
+    kind: verb
+    name: starci guard input
+    use: 'the reference-transaction hook reads prepared ref updates directly in its shell loop'
+    since: 1.0.0-alpha.31
+  - id: hook-input-timeout-ms
+    kind: config-key
+    name: hook-input.timeoutMs
+    use: 'modules/kernel/hook-input.yaml declares the input window as minInputWindowMs'
+    since: 1.0.0-alpha.31
+  - id: bias-require
+    kind: bias-field
+    name: require
+    use: 'a requirement is now `only`, which keeps just the named members of the tier chain: write each as "<agent>", "<agent>/<model>" or a {pool, provider, model} selector, e.g. {"only":["claude"]}'
+    since: 1.0.0-alpha.6
+    match: '\brequire\s*:\s*[\[{]|"require"\s*:|\brequire bias\b|\bbias[^\n.]{0,30}`require`'
+  - id: config-models-pools
+    kind: config-key
+    name: models.pools
+    use: 'tiers are ordered member chains in modules/models/tiers.yaml; override one with models.tiers'
+    since: 1.0.0-alpha.6
+  - id: config-models-nonoperation
+    kind: config-key
+    name: models.nonOperation
+    use: 'planner, validator and kernelManager take the frontier tier (modules/models/tiers.yaml seats); remap with models.seats'
+    since: 1.0.0-alpha.6
+  - id: config-models-selection
+    kind: config-key
+    name: models.selection
+    use: 'selection is always quota-aware; there is no key'
+    since: 1.0.0-alpha.6
+  - id: config-allocation-shares
+    kind: config-key
+    name: allocation.shares
+    use: 'the picker balances by models.balance (maxStreak, maxSharePercent); there are no per-provider weights'
+    since: 1.0.0-alpha.6
+    match: 'allocation[. ]shares'
+  - id: config-allocation-windowhours
+    kind: config-key
+    name: allocation.windowHours
+    use: 'balance reads the recent picks of one tier (models.balance); there is no window'
+    since: 1.0.0-alpha.6
+  - id: config-allocation-preferredprovider
+    kind: config-key
+    name: allocation.preferredProvider
+    use: 'an owner preference is a goal routing bias (prefer <agent>)'
+    since: 1.0.0-alpha.6
+    match: 'preferredProvider'
+  - id: config-allocation-policy
+    kind: config-key
+    name: allocation.policy
+    use: 'the picker is the one policy; there is no key'
+    since: 1.0.0-alpha.6
+  - id: config-allocation-mode
+    kind: config-key
+    name: allocation.mode
+    use: 'allocation holds grants only'
+    since: 1.0.0-alpha.6
+  - id: config-kernel-group
+    kind: config-key
+    name: kernel.group
+    use: 'the Kernel takes the high tier; pin with kernel.agent / kernel.model (an `only` bias)'
+    since: 1.0.0-alpha.6
+  - id: config-supervisor-kernel-group
+    kind: config-key
+    name: supervisor.kernel.group
+    use: 'the Supervisor takes the frontier tier; pin with supervisor.kernel.agent / .model (an `only` bias)'
+    since: 1.0.0-alpha.6
+  - id: config-coredebug
+    kind: config-key
+    name: coreDebug
+    use: 'the debug watcher is a /loop of the calling chat, not a seat; the cadence and the worktree alert limit are debugLoop.interval and debugLoop.worktreeLimit'
+    since: 1.0.0-alpha.6
+  - id: config-debug
+    kind: config-key
+    name: debug
+    use: 'the debug watcher is started by the /starci skill in the calling chat; there is no switch (debugLoop.interval sets its cadence)'
+    since: 1.0.0-alpha.6
+    scan: false
+  - id: vocabulary-sol-opus
+    kind: vocabulary
+    name: sol-opus
+    use: 'a pool of two providers is a tier chain of members (modules/models/tiers.yaml)'
+    since: 1.0.0-alpha.6
+  - id: seat-core-debug
+    kind: vocabulary
+    name: core-debug seat
+    use: 'the debug watcher is a /loop of the calling chat running `starci debug digest`'
+    since: 1.0.0-alpha.6
+    match: '\bcore-debug\s+(?:seat|watcher|worker|pass)\b'
+  - id: verb-debug-pass
+    kind: verb
+    name: debug pass
+    use: '`starci debug digest` (read-only) and `starci debug run <probe>`'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])debug pass\b'
+  - id: flag-land-no-push
+    kind: flag
+    name: --no-push
+    use: 'a land never pushes, so there is nothing to leave unpushed'
+    since: 1.0.0-alpha.7
+  - id: code-landed-push-owed
+    kind: code
+    name: landed-push-owed
+    use: 'a land has no push step; the outcome is landed'
+    since: 1.0.0-alpha.7
+  - id: flag-caller-agent
+    kind: flag
+    name: --caller-agent
+    use: 'the debug digest runs in the calling chat; it takes no caller flag'
+    since: 1.0.0-alpha.6
+  - id: flag-caller-model
+    kind: flag
+    name: --caller-model
+    use: 'the debug digest runs in the calling chat; it takes no caller flag'
+    since: 1.0.0-alpha.6
+  - id: flag-caller-effort
+    kind: flag
+    name: --caller-effort
+    use: 'the debug digest runs in the calling chat; it takes no caller flag'
+    since: 1.0.0-alpha.6
+  - id: code-workflow-debug-not-ready
+    kind: code
+    name: workflow-debug-not-ready
+    use: 'there is no debug seat to be ready; the digest reads the ledger directly'
+    since: 1.0.0-alpha.6
+  - id: file-core-debug
+    kind: file
+    name: core-debug.mjs
+    use: 'the debug watcher is a /loop of the calling chat running `starci debug digest`; the core-watch probe is scripts/reconciler/core-watch.mjs'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])core-debug\.mjs\b'
+  - id: file-debug-pass
+    kind: file
+    name: debug-pass.mjs
+    use: '`starci debug digest` (read-only)'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])debug-pass\.mjs\b'
+  - id: file-caller-context
+    kind: file
+    name: caller-context.mjs
+    use: 'there is no declared caller context; the debug digest runs in the calling chat'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])caller-context\b'
+  - id: file-host-maintenance
+    kind: file
+    name: host-maintenance.md
+    use: 'skills/starci/references/host-startup.md'
+    since: 1.0.0-alpha.6
+    match: '(?<![\w-])host-maintenance\b'
+  - id: config-drawloop-critic
+    kind: config-key
+    name: allocation.drawLoop.critic
+    use: 'the Critic is picked from its tier (modules/models/tiers.yaml seats.critic, modules/kernel/critic.yaml) with provider independence as a hard filter; its wall bound is allocation.drawLoop.criticTimeoutMs'
+    since: 1.0.0-alpha.9
+    match: 'allocation\.drawLoop\.critic(?![A-Za-z])'
+  - id: config-drawloop-criticwhendrawer
+    kind: config-key
+    name: allocation.drawLoop.criticWhenDrawer
+    use: 'the Critic tier holds a member of every provider and the picker removes the provider of the maker; there is no per-drawer table'
+    since: 1.0.0-alpha.9
+    match: 'criticWhenDrawer'
+  - id: registry-critic-coverage-define-architecture
+    kind: vocabulary
+    name: critic-coverage-define-architecture
+    use: 'the edge-case registry entry is critic-coverage-decision-legs'
+    since: 1.0.0-alpha.9
+  - id: supervisor-grammar-release
+    kind: vocabulary
+    name: grammarRelease
+    use: 'the owner publishes @starci/grammar through starci release publish; the Supervisor changes no runtime code'
+    since: 1.0.0-alpha.9
+  - id: supervise-yaml-worker-land-blocks
+    kind: vocabulary
+    name: supervise.yaml workers
+    use: 'the Supervisor spawns no fix workers and lands nothing: it answers its menu (starci supervisor status) and records runtime defects for Debug'
+    since: 1.0.0-alpha.9
+    match: 'supervise\.yaml\s+(?:workers|landGate)\b|supervise\.yaml\s+kernelSeat/workers'
+  - id: supervisor-fixes-through-lanes
+    kind: vocabulary
+    name: the Supervisor fixes through lanes
+    use: 'the Supervisor records a runtime defect (starci supervisor actions record --item runtime-defect:<cause>) and Debug changes .claude'
+    since: 1.0.0-alpha.9
+    match: 'Supervisor[^\n.]{0,60}\bfix(?:es)?\s+through\s+(?:its\s+own\s+)?(?:staged\s+)?lanes?\b'
+  - id: kernel-ranked-actions
+    kind: vocabulary
+    name: ranked actions
+    use: "the Kernel's menu: the Decide section of starci kernel status, answered with starci kernel decide"
+    since: 1.0.0-alpha.9
+    match: '[Ww]ork the ranked actions|[Ff]irst rca\.actions entry'
+  - id: kernel-run-next-actions
+    kind: vocabulary
+    name: run nextActions
+    use: "the Kernel answers the items of its menu; the runtime performs the mechanical next actions"
+    since: 1.0.0-alpha.9
+    match: 'run nextActions|run each\s+in order and never choose'
+  - id: event-op-reported
+    kind: vocabulary
+    name: op-reported
+    use: 'the event a filed report records is report-filed; no event named op-reported was ever emitted'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])op-reported(?![\w-])'
+  - id: file-sonar-secrets-keys
+    kind: file
+    name: KEYS.md
+    use: 'secret.env.example lists the names of the host secrets; ext/sonar/README.md describes the stack'
+    since: 1.0.0-alpha.7
+    match: '(?<![\w/.-])secrets/KEYS\.md'
+  - id: vocab-example-sonar-token-member
+    kind: vocabulary
+    name: per-example Sonar token custody
+    use: 'the examples are analysed on SonarCloud with the SONAR_TOKEN of the runtime secret.env (runtimeSecrets in their services.sonar declaration)'
+    since: 1.0.0-alpha.7
+    match: 'sonarqube-(?:lite-app|shape-slot|starci-ecommerce-app)-token'
+  - id: vocab-menu-kinds-moved-to-controllers
+    kind: vocabulary
+    name: the menu kinds of the origins the controllers now move
+    use: 'the Job controller enqueues a red node, a stale proof or attempt, the asset leg and the credential ask itself (scripts/kernel/next-moves.mjs); the Kernel menu keeps leg-ready, draw-redraw, seam-duty and move-unbuilt'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:node-rework|stale-redispatch|enqueue-asset-leg|enqueue-credential-ask|rework-node)(?![\w-])'
+  - id: vocab-sonar-stack-sealed-members
+    kind: vocabulary
+    name: ext/sonar secrets custody
+    use: 'the stack secrets are the secret.env variables SONARQUBE_DB_PASSWORD, SONARQUBE_ADMIN_PASSWORD, SONARQUBE_ADMIN_TOKEN and CLOUDFLARE_TUNNEL_TOKEN, passed by starci gate sonar up; ext/sonar tracks no sealed member'
+    since: 1.0.0-alpha.9
+    match: 'ext/sonar/secrets/(?:sonarqube-(?:db|admin|analysis)-(?:password|token)|cloudflare-starci-local-services-tunnel-token)'
+  - id: vocab-ecommerce-sealed-demo-secrets
+    kind: vocabulary
+    name: ecommerce sealed demo secrets
+    use: 'the ecommerce example carries demo-only defaults in its compose files and declares no sealed secret (secrets: [])'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:keycloak|minio)-env(?:\.enc)?(?![\w-])'
+  - id: vocab-handover-step-mechanical-pending
+    kind: vocabulary
+    name: the handover-step menu mode mechanical-pending and its choice rerun-handover-review
+    use: 'the Job controller enqueues handover.review itself when the handover is due or its ask was answered approve or question (next action handover-review, scripts/kernel/handover-move.mjs); the handover-step item holds only the typed routing of a reported defect'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:mechanical-pending|rerun-handover-review)(?![\w-])'
+  - id: vocab-card-delivery-bound
+    kind: vocabulary
+    name: the agent card delivery keys maxInlineChars, fileName and fileDirectory
+    use: 'one bound, one directory and one cleanup serve every card: allocation.promptFile in modules/models/runtimes.yaml (scripts/agent/prompt-file.mjs); a card keeps delivery.mode and delivery.prompt'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:maxInlineChars|fileDirectory)(?![\w-])'
+  - id: vocab-backoff-factor-keys
+    kind: vocabulary
+    name: the growth factor of allocation.dispatchRefusal and of the backoff of modules/reconciler/host.yaml
+    use: 'every backoff is the one retry budget (scripts/lib/retry-budget.mjs), which doubles its interval up to a cap: declare baseMs/capMs or minMs/maxMs only'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:dispatchRefusal|backoff):\s*\{[^}\n]*\bfactor\b'
+  - id: vocab-wake-terminal-bound
+    kind: vocabulary
+    name: the independent wake character bound
+    use: 'allocation.promptFile.maxChars is the terminal bound owned by scripts/agent/prompt-file.mjs'
+    since: 1.0.0-alpha.9
+    match: '(?<![\w-])(?:allocation\.)?wake\.maxChars|\bwake:\s*\{\s*maxChars\b'
+  - id: vocab-draft-probe-mutations
+    kind: vocabulary
+    name: draft probe mutation fields
+    use: 'probeDraft reads only and returns verdict, draft and sends; a foreign draft receives no keys'
+    since: 1.0.0-alpha.9
+    match: '\b(?:draftProbe|probeDraft)\.(?:restore|restored|removed|after)\b'
+  - id: code-fe-db-result-typed
+    kind: code
+    name: FE_DB_RESULT_TYPED
+    use: 'the front end reads no data through Supabase (R217, auth only in fe.modules.auth); reads are GraphQL queries of modules/api wrapped by hooks/swr, typed by graphql-codegen (R52 FE_WIRE_GENERATED)'
+    since: 1.0.0-alpha.13
+  - id: code-fe-db-error-handled
+    kind: code
+    name: FE_DB_ERROR_HANDLED
+    use: 'a failure arrives as the GraphQLResponse envelope of modules/api/graphql/types.ts and is never collapsed into empty data (R51 FE_HTTP_STATUS_COLLAPSE)'
+    since: 1.0.0-alpha.13
+  - id: code-fe-auth-session-trust
+    kind: code
+    name: FE_AUTH_SESSION_TRUST
+    use: 'the front end runs no server code that trusts a session (R243 FE_SERVER_ACTION_FORBIDDEN); the back end verifies the access token against the JWKS (R219 BE_SUPABASE_JWT_VERIFIED)'
+    since: 1.0.0-alpha.13
+  - id: code-fe-db-write-shape
+    kind: code
+    name: FE_DB_WRITE_SHAPE
+    use: 'a write is a GraphQL mutation of modules/api wrapped by a useMutate<X>Swr hook and reported by modules/toast; Server Actions are refused (R243 FE_SERVER_ACTION_FORBIDDEN)'
+    since: 1.0.0-alpha.13
+  - id: slot-fe-modules-db
+    kind: vocabulary
+    name: fe.modules.db
+    use: 'the front end reads and writes through the back end GraphQL API in fe.modules.api, wrapped by hooks/swr; Supabase on the front end is fe.modules.auth only (owner ruling 2026-10-13)'
+    since: 1.0.0-alpha.13
+    match: '\bfe\.modules\.db\b'
+  - id: slot-fe-package-db
+    kind: vocabulary
+    name: fe.package.db
+    use: 'a shared front-end data client is fe.package.api (Apollo clients and the GraphQLResponse union); Supabase on the front end is fe.modules.auth only'
+    since: 1.0.0-alpha.13
+    match: '\bfe\.package\.db\b'
+  - id: slot-be-feature-realtime-supabase
+    kind: vocabulary
+    name: be.feature.realtime.supabase
+    use: 'both editions push through the socket.io gateway be.feature.realtime.websocket; lite runs it in the api process'
+    since: 1.0.0-alpha.13
+    match: '\bbe\.feature\.realtime\.supabase\b'
+  - id: slot-key-anonymous-actions
+    kind: vocabulary
+    name: anonymousActions
+    use: 'the front end holds no Server Action (R243 FE_SERVER_ACTION_FORBIDDEN), so no slot lists anonymous ones'
+    since: 1.0.0-alpha.13
+  - id: verb-test-affected
+    kind: verb
+    name: starci test affected
+    use: 'the runtime has no specs of its own (owner ruling no-runtime-specs): `starci runtime verify` runs the check, `starci release clean-test --base <ref>` and `starci release scaffold-e2e`'
+    since: 1.0.0-alpha.19
+    match: '\bstarci test affected\b'
+  - id: verb-test-run
+    kind: verb
+    name: starci test run
+    use: 'the L1 to L4 spec ladder is gone with the runtime specs; `starci runtime verify` proves a change, CI runs the release rows'
+    since: 1.0.0-alpha.19
+    match: '\bstarci test run\b'
+  - id: verb-gate-runtime-coverage
+    kind: verb
+    name: starci gate runtime-coverage
+    use: 'the runtime measures no coverage of its own; the example apps keep their Codecov flags'
+    since: 1.0.0-alpha.19
+    match: '\bgate runtime-coverage\b'
+  - id: verb-release-env-test
+    kind: verb
+    name: starci release env-test
+    use: 'the release rows are the package clean-test (`starci release clean-test`), the scaffold e2e (`starci release scaffold-e2e`) and the runtime check'
+    since: 1.0.0-alpha.19
+    match: '\brelease env-test\b'
+  - id: config-specs-harness
+    kind: config-key
+    name: specs.harness
+    use: 'the runtime has no specs of its own (owner ruling no-runtime-specs); specs.unit and specs.e2e switch the product workflow tests'
+    since: 1.0.0-alpha.19
+    match: '\bspecs\.harness\b'
+  - id: file-supabase-queues-topic
+    kind: file
+    name: supabase-queues.yaml
+    use: 'the queue is BullMQ on Redis in both editions (ruling:R212/case-10): knowledge/patterns/be/queues.yaml owns the adapter, and each pattern topic''s liteAdapter says what lite uses with and without its declared backing service'
+    since: 1.0.0-alpha.31
+    match: '(?<![\w-])supabase-queues(?:\.yaml)?\b'
+  - id: code-rt-gate-loosening
+    kind: code
+    name: RT_GATE_LOOSENING
+    use: 'the tree is judged as it stands, never by its history: RT_LOOSENING_STATE (the loosening-state self-check) with the design-truths manifest knowledge/hfs/design-truths.yaml'
+    since: 1.0.0-alpha.31
+  - id: vocabulary-gate-loosening
+    kind: vocabulary
+    name: gate-loosening
+    use: 'the diff-based detector and its table are gone: the loosening-state self-check (scripts/checks/check-loosening-state.mjs) reads the tree as it stands against knowledge/hfs/design-truths.yaml'
+    since: 1.0.0-alpha.31
+    match: 'gate-loosening|gateLoosening|loosensReleased|looseningsOf|check-code-loosening'
+  - id: verb-runtime-benchmark-snapshot
+    kind: verb
+    name: starci runtime benchmark-snapshot
+    use: 'routing evidence is read live from the ledgers: `starci machine op-metrics --by op` and the ledger view v_model_scorecard (modules/models/registry.yaml costPolicy)'
+    since: 1.0.0-alpha.31
+    match: '(?<![\w-])benchmark-snapshot(?![\w-])'
+  - id: vocab-benchmark-scorecard
+    kind: vocabulary
+    name: the benchmark/ model-pool scorecard
+    use: 'routing evidence is read live from the ledgers: `starci machine op-metrics --by op` and the ledger view v_model_scorecard (modules/models/registry.yaml costPolicy)'
+    since: 1.0.0-alpha.31
+    match: '(?<![\w./-])benchmark/(?:README\.md|expectations\.yaml|snapshots\b|findings\b)|benchmark-expectations@1'
+  - id: slot-runtime-benchmark
+    kind: vocabulary
+    name: runtime.benchmark
+    use: 'the runtime tree has no benchmark slot; routing evidence is read live from the ledgers (modules/models/registry.yaml costPolicy)'
+    since: 1.0.0-alpha.31
+    match: '\bruntime\.benchmark\b'
+  - id: config-release-tagmatchesversion
+    kind: config-key
+    name: release.tagMatchesVersion
+    use: 'the release tag is always <release.tagPrefix><package.json version>; delete the key'
+    since: 1.0.0-alpha.31
+    match: '\btagMatchesVersion\b'
+
+  - id: grammar-surfacecard-manual-layer
+    kind: vocabulary
+    name: SurfaceCard manual depth and unpainted frame
+    use: 'SurfaceCard derives its depth from the painted parent surface; use an unpainted layout container for grouping and a bounded SurfaceCard for a painted face'
+    since: 1.0.0-alpha.31
+    match: 'SurfaceCard[^\r\n>]*\s(?:depth=|frame="frameless")'
+  - id: grammar-dropdown-negative-tone
+    kind: vocabulary
+    name: DropdownMenuItem negative tone
+    use: 'DropdownMenuItem.tone uses neutral or danger; destructive commands use danger'
+    since: 1.0.0-alpha.31
+    match: 'DropdownMenuItem(?:Tone|\.tone)[^\r\n]*["'']negative["'']'
+
+  - id: code-release-receipt-missing
+    kind: code
+    name: RELEASE_RECEIPT_MISSING
+    use: 'the push of main asks for a fast-forward and a clean secret scan; a release tag asks for no receipt'
+    since: 1.0.0-alpha.31.1
+  - id: code-release-receipt-incomplete
+    kind: code
+    name: RELEASE_RECEIPT_INCOMPLETE
+    use: 'the push of main asks for a fast-forward and a clean secret scan; CI judges the full suite'
+    since: 1.0.0-alpha.31.1
+  - id: code-release-suite-mode
+    kind: code
+    name: RELEASE_SUITE_MODE
+    use: 'release.suite chooses whether the cut also runs the L4 rows; no record or gate reads the mode'
+    since: 1.0.0-alpha.31.1
+  - id: code-release-version-unchanged
+    kind: code
+    name: RELEASE_VERSION_UNCHANGED
+    use: 'main is pushed without a version move; RELEASE_VERSION_NOT_NEXT judges the version of a tag against the v* tags'
+    since: 1.0.0-alpha.31.1
+  - id: code-release-remote-head-unknown
+    kind: code
+    name: RELEASE_REMOTE_HEAD_UNKNOWN
+    use: 'a release tag is judged against the v* tags, not against the remote main head'
+    since: 1.0.0-alpha.31.1
+  - id: config-release-candidate-blocking
+    kind: config-key
+    name: candidate.blocking
+    use: 'the runtime cut has no candidate step; the ci, examples and sonar workflows judge each push to main (suite.ci.workflows)'
+    since: 1.0.0-alpha.31.1
+    match: 'candidate\.blocking\b'