@warnyin/sdlc 0.8.0 → 0.10.0

package/payload/playbook/review.md

@@ -1,31 +1,31 @@
-# /sdlc:review <id> — agent panel (signal-triggered)
-
-Run when: tier deep, OR the diff touches auth/payments/data handling, OR >10
-files changed, OR the change has a non-empty `lenses`. Otherwise skip silently — a
-ceremonial review is garbage.
-
-1. Fan out in parallel, all read-only, each with the diff + change.md only:
-   - `sdlc-architect` (deepest): design integrity, coupling, contract drift.
-   - `sdlc-security` (balanced): injection, authz, secrets, unsafe deps.
-   - `sdlc-quality` (cheap): contract coverage gaps, edge cases, dead code.
-   - `sdlc-ops` (cheap): config, migrations, rollback, observability impact.
-   - Plus one reviewer per recorded lens, only for lenses whose stages include review:
-     its review focus from `lenses.md`, per `lenses.md` § Using a recorded lens.
-     Run it as a read-only subagent when possible; the four core reviewers still run.
-2. Merge findings in the main loop. Classify: blocker | improvement | note.
-3. Blockers → append as fix tasks and route back to /sdlc:build (counts toward
-   the same 3-round budget as verify). Improvements: apply if ≤5 min each,
-   otherwise record one line in the change for the digest.
-4. `node sdlc/.hooks/journal.mjs note review blockers=<n> mode=<panel|solo>`.
-   `mode=panel` only when every reviewer that ran — the four and each lens — was an
-   independent agent; `mode=solo` when the
-   panel cannot run — subagents unavailable or disallowed — and the main loop
-   reviewed its own work through those four lenses instead. Run it that way
-   rather than skipping the review, and say so in the note: a self-review that
-   is recorded as a panel is worse than no review, because it reads as
-   independent evidence months later.
-
-Pass condition: zero open blockers. Next: /sdlc:ship.
-
-`--auto`: do this stage, then continue to ship under `auto.md`'s unattended
-mode — gather, confirm once, run. The stage still does its own work first.
+# /sdlc:review <id> — agent panel (signal-triggered)
+
+Run when: tier deep, OR the diff touches auth/payments/data handling, OR >10
+files changed, OR the change has a non-empty `lenses`. Otherwise skip silently — a
+ceremonial review is garbage.
+
+1. Fan out in parallel, all read-only, each with the diff + change.md only:
+   - `sdlc-architect` (deepest): design integrity, coupling, contract drift.
+   - `sdlc-security` (balanced): injection, authz, secrets, unsafe deps.
+   - `sdlc-quality` (cheap): contract coverage gaps, edge cases, dead code.
+   - `sdlc-ops` (cheap): config, migrations, rollback, observability impact.
+   - Plus one reviewer per recorded lens, only for lenses whose stages include review:
+     its review focus from `lenses.md`, per `lenses.md` § Using a recorded lens.
+     Run it as a read-only subagent when possible; the four core reviewers still run.
+2. Merge findings in the main loop. Classify: blocker | improvement | note.
+3. Blockers → append as fix tasks and route back to /sdlc:build (counts toward
+   the same 3-round budget as verify). Improvements: apply if ≤5 min each,
+   otherwise record one line in the change for the digest.
+4. `node sdlc/.hooks/journal.mjs note review blockers=<n> mode=<panel|solo>`.
+   `mode=panel` only when every reviewer that ran — the four and each lens — was an
+   independent agent; `mode=solo` when the
+   panel cannot run — subagents unavailable or disallowed — and the main loop
+   reviewed its own work through those four lenses instead. Run it that way
+   rather than skipping the review, and say so in the note: a self-review that
+   is recorded as a panel is worse than no review, because it reads as
+   independent evidence months later.
+
+Pass condition: zero open blockers. Next: /sdlc:ship.
+
+`--auto`: do this stage, then continue to ship under `auto.md`'s unattended
+mode — gather, confirm once, run. The stage still does its own work first.

package/payload/playbook/routing.md

@@ -1,19 +1,19 @@
-# Model routing
-
-Generic tiers only — the harness adapter maps them to real models
-(Claude Code agents: cheap→haiku, balanced→sonnet, deepest→opus).
-
-| Task kind | Tier | Why |
-|---|---|---|
-| requirements shaping, architecture, deep design | deepest | judgment-heavy, small volume |
-| standard implementation (sdlc-builder) | balanced | quality/cost sweet spot |
-| test generation (sdlc-contractor) | cheap | mechanical from the contract table |
-| eval judging (sdlc-evaluator) | cheap | rubric scoring, high volume |
-| review panel passes | cheap–balanced | parallel, bounded scope |
-| learning distillation (sdlc-learner) | cheap | summarization over journals |
-
-Rules:
-- Task lines in change.md may carry `[tier:cheap|balanced|deepest]`; default = balanced.
-- Never send a mechanical task to deepest "to be safe" — that is the waste the
-  routing table exists to prevent.
-- Escalate one tier only after a concrete failure at the current tier (journal it).
+# Model routing
+
+Generic tiers only — the harness adapter maps them to real models
+(Claude Code agents: cheap→haiku, balanced→sonnet, deepest→opus).
+
+| Task kind | Tier | Why |
+|---|---|---|
+| requirements shaping, architecture, deep design | deepest | judgment-heavy, small volume |
+| standard implementation (sdlc-builder) | balanced | quality/cost sweet spot |
+| test generation (sdlc-contractor) | cheap | mechanical from the contract table |
+| eval judging (sdlc-evaluator) | cheap | rubric scoring, high volume |
+| review panel passes | cheap–balanced | parallel, bounded scope |
+| learning distillation (sdlc-learner) | cheap | summarization over journals |
+
+Rules:
+- Task lines in change.md may carry `[tier:cheap|balanced|deepest]`; default = balanced.
+- Never send a mechanical task to deepest "to be safe" — that is the waste the
+  routing table exists to prevent.
+- Escalate one tier only after a concrete failure at the current tier (journal it).

package/payload/playbook/rules-card.md

@@ -1,16 +1,17 @@
-# sdlc rules card
-<!-- ≤40 lines · embedded verbatim in non-Claude tool adapters; Claude gets the same rules enforced by hooks. -->
-
-- Work flows through `sdlc/changes/<id>/change.md`: new → [design] → contract → build → verify → [review] → ship.
-- NEVER edit `sdlc/specs/**` or `sdlc/changes/archive/**` by hand. Living specs change only
-  via a change's `## Delta:` section, merged by `npx @warnyin/sdlc archive <id>` at ship.
-- NEVER hand-edit `journal.ndjson` or `sdlc/.state/**` — they are machine-owned.
-- Write tests + evals (`contract/`) BEFORE code. No implementation while status is `new`.
-- Ambiguity: make the safest assumption and record it under `## Assumptions`; use
-  `[NEEDS CLARIFICATION: q]` only for facts you cannot obtain — resolve all before contract.
-- Respect line caps written in each template comment; run `npx @warnyin/sdlc validate <id>`
-  before claiming any gate passed — a red validator means the gate did NOT pass.
-- Constitution edits go through /sdlc:steer only; always-loaded context ≤ 60 lines total.
-- Verify = real test run + eval rubric. Max 3 fix rounds, then escalate to the human.
-- Hard-floor (security, payments, data-loss, irreversible): tier = deep, human approves ship.
-- Before editing an area, read any steering file whose `pathMatch` covers it.
+# sdlc rules card
+<!-- ≤40 lines · embedded verbatim in non-Claude tool adapters; Claude gets the same rules enforced by hooks. -->
+
+- Work flows through `sdlc/changes/<id>/change.md`: new → [design] → contract → build → verify → [review] → ship.
+- NEVER edit `sdlc/specs/**` or `sdlc/changes/archive/**` by hand. Living specs change only
+  via a change's `## Delta:` section, merged by `npx @warnyin/sdlc archive <id>` at ship.
+- NEVER hand-edit `journal.ndjson` or `sdlc/.state/**` — they are machine-owned.
+- Write tests + evals (`contract/`) BEFORE code. No implementation while status is `new`.
+- Ambiguity: make the safest assumption and record it under `## Assumptions`; use
+  `[NEEDS CLARIFICATION: q]` only for facts you cannot obtain — ask those in rounds ordered
+  by dependency, each with a recommended answer; resolve all before contract.
+- Respect line caps written in each template comment; run `npx @warnyin/sdlc validate <id>`
+  before claiming any gate passed — a red validator means the gate did NOT pass.
+- Constitution edits go through /sdlc:steer only; always-loaded context ≤ 60 lines total.
+- Verify = real test run + eval rubric. Max 3 fix rounds, then escalate to the human.
+- Hard-floor (security, payments, data-loss, irreversible): tier = deep, human approves ship.
+- Before editing an area, read any steering file whose `pathMatch` covers it.

package/payload/playbook/ship.md

@@ -1,35 +1,35 @@
-# /sdlc:ship <id> — merge, archive, learn, digest
-
-Precondition: `status: verified` (+ review passed when it ran).
-
-1. **Policy check** (`sdlc/harness.md § Autonomy policy`): if this change is NOT
-   auto-shippable (deep/hard-floor), show the human a 5-line summary (why, delta
-   heads, verify result, cost so far) and wait for approval. Otherwise proceed.
-2. Open the gate and archive mechanically:
-   `node sdlc/.hooks/journal.mjs open-ship <id>`
-   `npx @warnyin/sdlc archive <id>`
-   (validates --strict, merges every Delta into `sdlc/specs/`, promotes evals,
-   stamps `status: shipped`, moves the folder to `changes/archive/<date>-<id>/`).
-   Any `⚠ MODIFIED Requirement …` line means the new body carried away a scenario
-   the spec still promised: confirm it was intended and name it in the digest.
-3. **Learn** — delegate to `sdlc-learner` (cheap) with the archived change.md +
-   its journal.ndjson. It proposes ≤3 items: add-rule (with evidence pointer) /
-   expire-or-demote (rule or steering that never fired) / harness tweak.
-   Apply reductions and demotions immediately (they always save tokens).
-   Additions to always-loaded context are NOT applied — list them in the digest.
-4. **Digest** — write `sdlc/changes/archive/<date>-<id>/digest.md` (≤15 lines):
-   what shipped, spec deltas merged, assumptions made, verify rounds, tokens/cost
-   (from journal `session` events), learner proposals awaiting the human.
-   When any verify or review note carries `mode=solo`, the digest SHALL say which
-   outcomes were self-produced. A reader months from now cannot otherwise tell a
-   panel's verdict from the author's own.
-   When any `escalation` event carries `preauth=yes`, the digest SHALL list those
-   pre-authorized escalations by condition — the points where a human would normally
-   have stood and, this run, did not.
-5. Close the gate: `node sdlc/.hooks/journal.mjs close`. Tell the user in one
-   line: shipped + where the digest is.
-
-The digest is the async human touchpoint — reviewable and revertible later.
-
-`--auto`: do this stage, then continue to ship under `auto.md`'s unattended
-mode — gather, confirm once, run. The stage still does its own work first.
+# /sdlc:ship <id> — merge, archive, learn, digest
+
+Precondition: `status: verified` (+ review passed when it ran).
+
+1. **Policy check** (`sdlc/harness.md § Autonomy policy`): if this change is NOT
+   auto-shippable (deep/hard-floor), show the human a 5-line summary (why, delta
+   heads, verify result, cost so far) and wait for approval. Otherwise proceed.
+2. Open the gate and archive mechanically:
+   `node sdlc/.hooks/journal.mjs open-ship <id>`
+   `npx @warnyin/sdlc archive <id>`
+   (validates --strict, merges every Delta into `sdlc/specs/`, promotes evals,
+   stamps `status: shipped`, moves the folder to `changes/archive/<date>-<id>/`).
+   Any `⚠ MODIFIED Requirement …` line means the new body carried away a scenario
+   the spec still promised: confirm it was intended and name it in the digest.
+3. **Learn** — delegate to `sdlc-learner` (cheap) with the archived change.md +
+   its journal.ndjson. It proposes ≤3 items: add-rule (with evidence pointer) /
+   expire-or-demote (rule or steering that never fired) / harness tweak.
+   Apply reductions and demotions immediately (they always save tokens).
+   Additions to always-loaded context are NOT applied — list them in the digest.
+4. **Digest** — write `sdlc/changes/archive/<date>-<id>/digest.md` (≤15 lines):
+   what shipped, spec deltas merged, assumptions made, verify rounds, tokens/cost
+   (from journal `session` events), learner proposals awaiting the human.
+   When any verify or review note carries `mode=solo`, the digest SHALL say which
+   outcomes were self-produced. A reader months from now cannot otherwise tell a
+   panel's verdict from the author's own.
+   When any `escalation` event carries `preauth=yes`, the digest SHALL list those
+   pre-authorized escalations by condition — the points where a human would normally
+   have stood and, this run, did not.
+5. Close the gate: `node sdlc/.hooks/journal.mjs close`. Tell the user in one
+   line: shipped + where the digest is.
+
+The digest is the async human touchpoint — reviewable and revertible later.
+
+`--auto`: do this stage, then continue to ship under `auto.md`'s unattended
+mode — gather, confirm once, run. The stage still does its own work first.

package/payload/playbook/steer.md

@@ -1,21 +1,21 @@
-# /sdlc:steer — manage the static/dynamic boundary
-
-The ONLY sanctioned way to edit always-loaded context.
-
-1. `node sdlc/.hooks/journal.mjs open-steer`
-2. Apply the requested edits:
-   - New knowledge → a steering file with the LEAST resident inclusion mode that
-     works: `agent` > `manual` > `paths` > `always` (always needs justification).
-   - Constitution edits: SHALL/SHALL NOT lines only. If the always-budget
-     (60 lines) would overflow, something must be demoted or deleted first —
-     name the displaced line explicitly.
-3. Hygiene pass (do it every time, it is 30 seconds):
-   - `/sdlc:observe` data — steering never pointer-hit across the last N changes
-     → propose demote (`paths`→`manual`) or delete.
-   - Rules with no guard/journal evidence of ever mattering → propose expiry.
-   - Apply what the user agrees to (reductions may be applied without asking).
-4. `npx @warnyin/sdlc validate` — the always-budget check must be green.
-5. `node sdlc/.hooks/journal.mjs close`
-
-Learning direction is one-way by design: content flows from always → paths →
-manual → deleted as evidence accumulates. Getting leaner is the success metric.
+# /sdlc:steer — manage the static/dynamic boundary
+
+The ONLY sanctioned way to edit always-loaded context.
+
+1. `node sdlc/.hooks/journal.mjs open-steer`
+2. Apply the requested edits:
+   - New knowledge → a steering file with the LEAST resident inclusion mode that
+     works: `agent` > `manual` > `paths` > `always` (always needs justification).
+   - Constitution edits: SHALL/SHALL NOT lines only. If the always-budget
+     (60 lines) would overflow, something must be demoted or deleted first —
+     name the displaced line explicitly.
+3. Hygiene pass (do it every time, it is 30 seconds):
+   - `/sdlc:observe` data — steering never pointer-hit across the last N changes
+     → propose demote (`paths`→`manual`) or delete.
+   - Rules with no guard/journal evidence of ever mattering → propose expiry.
+   - Apply what the user agrees to (reductions may be applied without asking).
+4. `npx @warnyin/sdlc validate` — the always-budget check must be green.
+5. `node sdlc/.hooks/journal.mjs close`
+
+Learning direction is one-way by design: content flows from always → paths →
+manual → deleted as evidence accumulates. Getting leaner is the success metric.

package/payload/playbook/verify.md

@@ -1,42 +1,42 @@
-# /sdlc:verify <id> — the feedback loop
-
-Two halves, both must pass. Verification is against the CONTRACT, not vibes.
-
-1. **Tests (deterministic)**: run the full test command from `sdlc/harness.md`.
-   Every row of `contract/tests.md` must be covered by a passing test.
-2. **Evals (non-deterministic)** — when `contract/evals.md` exists: delegate to
-   the `sdlc-evaluator` agent (cheap) with the rubric + the diff + the task log;
-   it returns a score per rubric line. Pass bar is written in the file.
-   If the evaluator cannot run — subagents unavailable or disallowed in this
-   session — score in the main loop instead and record that. A panel that could
-   not run is a fact to write down, never a reason to stop the pipeline; but a
-   run that judged its own work is weaker evidence and must not read as if a
-   panel had agreed.
-
-3. **Lens bars** — a non-empty `lenses`, whether or not `evals.md` exists: every lens bar
-   must appear as a `tests.md` row or an `evals.md` line; a lens with its bars in neither
-   is a contract gap and fails verify.
-
-On failure:
-- Cluster failures by root cause (one line each) and append the cluster note to
-  the change's `## Tasks` area as unchecked fix tasks.
-- `node sdlc/.hooks/journal.mjs note verify result=fail round=<n> mode=<panel|solo>`
-- Route back to /sdlc:build. Maximum 3 rounds total; on the 4th failure STOP and
-  escalate to the human with the cluster history (Autonomy policy condition).
-- Never lower the bar: do not edit tests/evals to pass unless the contract
-  itself was wrong — changing the contract reopens the adversarial check.
-
-On pass: set `status: verified`,
-`node sdlc/.hooks/journal.mjs note verify result=pass round=<n> mode=<panel|solo>`.
-
-`mode=panel` only when independent agents produced the judgment; `mode=solo` when
-the main loop judged its own work. Every verify note carries it, pass or fail —
-`/sdlc:observe` reports a change as self-judged from this field, and omitting it
-leaves the record silently indistinguishable from an independent one.
-
-Next: review signals present (deep tier, security-touching diff, >10 files,
-a non-empty `lenses`)
-→ /sdlc:review; otherwise → /sdlc:ship.
-
-`--auto`: do this stage, then continue to ship under `auto.md`'s unattended
-mode — gather, confirm once, run. The stage still does its own work first.
+# /sdlc:verify <id> — the feedback loop
+
+Two halves, both must pass. Verification is against the CONTRACT, not vibes.
+
+1. **Tests (deterministic)**: run the full test command from `sdlc/harness.md`.
+   Every row of `contract/tests.md` must be covered by a passing test.
+2. **Evals (non-deterministic)** — when `contract/evals.md` exists: delegate to
+   the `sdlc-evaluator` agent (cheap) with the rubric + the diff + the task log;
+   it returns a score per rubric line. Pass bar is written in the file.
+   If the evaluator cannot run — subagents unavailable or disallowed in this
+   session — score in the main loop instead and record that. A panel that could
+   not run is a fact to write down, never a reason to stop the pipeline; but a
+   run that judged its own work is weaker evidence and must not read as if a
+   panel had agreed.
+
+3. **Lens bars** — a non-empty `lenses`, whether or not `evals.md` exists: every lens bar
+   must appear as a `tests.md` row or an `evals.md` line; a lens with its bars in neither
+   is a contract gap and fails verify.
+
+On failure:
+- Cluster failures by root cause (one line each) and append the cluster note to
+  the change's `## Tasks` area as unchecked fix tasks.
+- `node sdlc/.hooks/journal.mjs note verify result=fail round=<n> mode=<panel|solo>`
+- Route back to /sdlc:build. Maximum 3 rounds total; on the 4th failure STOP and
+  escalate to the human with the cluster history (Autonomy policy condition).
+- Never lower the bar: do not edit tests/evals to pass unless the contract
+  itself was wrong — changing the contract reopens the adversarial check.
+
+On pass: set `status: verified`,
+`node sdlc/.hooks/journal.mjs note verify result=pass round=<n> mode=<panel|solo>`.
+
+`mode=panel` only when independent agents produced the judgment; `mode=solo` when
+the main loop judged its own work. Every verify note carries it, pass or fail —
+`/sdlc:observe` reports a change as self-judged from this field, and omitting it
+leaves the record silently indistinguishable from an independent one.
+
+Next: review signals present (deep tier, security-touching diff, >10 files,
+a non-empty `lenses`)
+→ /sdlc:review; otherwise → /sdlc:ship.
+
+`--auto`: do this stage, then continue to ship under `auto.md`'s unattended
+mode — gather, confirm once, run. The stage still does its own work first.

package/payload/templates/change-deep.md

@@ -1,29 +1,29 @@
----
-id: <kebab-id>
-tier: deep
-status: new
----
-# Change: <title>
-<!-- cap:150 · deep tier: hard-floor surface (security/payments/data-loss/irreversible) or new/multi-capability delta. Human gates apply per Autonomy policy. -->
-
-## Why (≤5 lines)
-<problem + outcome. No solutioning.>
-
-## Assumptions
-- <assumption made instead of asking, with the reason it is safe>
-
-## Delta: <capability>
-
-### ADDED Requirement: <name>
-The system SHALL <behavior>.
-
-#### Scenario: <name>
-- WHEN <condition>
-- THEN <observable outcome>
-
-## Design
-<!-- decisions & trade-offs only — never restate the delta. Escalate irreversible decisions per Autonomy policy. -->
-- decision: <what> · alternatives: <a/b> · because: <why>
-
-## Tasks
-- [ ] T1 <task> [P] [tier:balanced]
+---
+id: <kebab-id>
+tier: deep
+status: new
+---
+# Change: <title>
+<!-- cap:150 · deep tier: hard-floor surface (security/payments/data-loss/irreversible) or new/multi-capability delta. Human gates apply per Autonomy policy. -->
+
+## Why (≤5 lines)
+<problem + outcome. No solutioning.>
+
+## Assumptions
+- <assumption made instead of asking, with the reason it is safe>
+
+## Delta: <capability>
+
+### ADDED Requirement: <name>
+The system SHALL <behavior>.
+
+#### Scenario: <name>
+- WHEN <condition>
+- THEN <observable outcome>
+
+## Design
+<!-- decisions & trade-offs only — never restate the delta. Escalate irreversible decisions per Autonomy policy. -->
+- decision: <what> · alternatives: <a/b> · because: <why>
+
+## Tasks
+- [ ] T1 <task> [P] [tier:balanced]

package/payload/templates/change-standard.md

@@ -1,28 +1,28 @@
----
-id: <kebab-id>
-tier: standard
-status: new
----
-# Change: <title>
-<!-- cap:100 · standard tier. Delta sections ARE the spec change — merged mechanically at ship, never re-narrated. -->
-
-## Why (≤5 lines)
-<problem + outcome. No solutioning.>
-
-## Assumptions
-- <assumption made instead of asking, with the reason it is safe — delete section if none>
-<!-- unresolved ambiguity the agent cannot assume → [NEEDS CLARIFICATION: question] inline where it bites -->
-
-## Delta: <capability>
-
-### ADDED Requirement: <name>
-The system SHALL <behavior>.
-
-#### Scenario: <name>
-- WHEN <condition>
-- THEN <observable outcome>
-
-## Tasks
-<!-- [P] = parallelizable wave · [tier:cheap|balanced|deepest] per the routing table in harness.md -->
-- [ ] T1 <task> [P] [tier:balanced]
-- [ ] T2 <task> [tier:cheap]
+---
+id: <kebab-id>
+tier: standard
+status: new
+---
+# Change: <title>
+<!-- cap:100 · standard tier. Delta sections ARE the spec change — merged mechanically at ship, never re-narrated. -->
+
+## Why (≤5 lines)
+<problem + outcome. No solutioning.>
+
+## Assumptions
+- <assumption made instead of asking, with the reason it is safe — delete section if none>
+<!-- unresolved ambiguity the agent cannot assume → [NEEDS CLARIFICATION: question] inline where it bites -->
+
+## Delta: <capability>
+
+### ADDED Requirement: <name>
+The system SHALL <behavior>.
+
+#### Scenario: <name>
+- WHEN <condition>
+- THEN <observable outcome>
+
+## Tasks
+<!-- [P] = parallelizable wave · [tier:cheap|balanced|deepest] per the routing table in harness.md -->
+- [ ] T1 <task> [P] [tier:balanced]
+- [ ] T2 <task> [tier:cheap]

package/payload/templates/change-vibe.md

@@ -1,19 +1,19 @@
----
-id: <kebab-id>
-tier: vibe
-status: new
----
-# Change: <title>
-<!-- cap:40 · vibe tier = one file, no contract. Reversible, no behavior-contract change, ≤2 files. -->
-
-## Why (≤3 lines)
-<problem + outcome>
-
-## Assumptions
-- <assumption the agent made instead of asking — delete section if none>
-
-## Tasks
-- [ ] T1 <task>
-
-## Receipt (filled at ship)
-- files touched: · test result: · cost:
+---
+id: <kebab-id>
+tier: vibe
+status: new
+---
+# Change: <title>
+<!-- cap:40 · vibe tier = one file, no contract. Reversible, no behavior-contract change, ≤2 files. -->
+
+## Why (≤3 lines)
+<problem + outcome>
+
+## Assumptions
+- <assumption the agent made instead of asking — delete section if none>
+
+## Tasks
+- [ ] T1 <task>
+
+## Receipt (filled at ship)
+- files touched: · test result: · cost:

package/payload/templates/config.yaml

@@ -1,8 +1,12 @@
-# @warnyin/sdlc project config — machine-read; keep minimal.
-language: en
-tools: []            # filled by `warnyin-sdlc init`
-# Optional price table for cost reporting (USD per 1M tokens).
-# prices:
-#   claude-sonnet-5: { input: 3, output: 15, cacheRead: 0.3 }
-# Optional per-artifact cap overrides (see lib/caps.mjs for defaults).
-# caps: {}
+# @warnyin/sdlc project config — machine-read; keep minimal.
+language: en
+tools: []            # filled by `warnyin-sdlc init`
+# Optional price table for cost reporting (USD per 1M tokens).
+# prices:
+#   claude-sonnet-5: { input: 3, output: 15, cacheRead: 0.3 }
+# Once a day a SessionStart hook asks the npm registry whether a newer @warnyin/sdlc exists
+# and, if so, tells the agent to mention `npx @warnyin/sdlc update`. It never updates by
+# itself. Uncomment to switch it off (CI or NO_UPDATE_NOTIFIER in the env also do).
+# updateCheck: false
+# Optional per-artifact cap overrides (see lib/caps.mjs for defaults).
+# caps: {}

package/payload/templates/constitution.md

@@ -1,14 +1,14 @@
-# Constitution — <project>
-<!-- cap:30 · ALWAYS LOADED: every line here costs tokens in EVERY turn. Prove residency or move it to steering. -->
-
-## Stack (facts only, max 3 lines)
-- <runtime / framework / db — one line each>
-
-## Hard rules (SHALL / SHALL NOT only — no advice)
-- The agent SHALL NOT edit `sdlc/specs/**` or `sdlc/changes/archive/**` outside `/sdlc:ship`.
-- The agent SHALL record every assumption in the change's `## Assumptions` before acting on it.
-- <add a rule each time the agent misbehaves; each new rule must displace an old one once the always-budget (60 lines) is full>
-
-## Workflow
-- Changes flow: new → [design] → contract → build → verify → [review] → ship.
-- Tier by stakes: vibe | standard | deep — triage table lives in `sdlc/harness.md`.
+# Constitution — <project>
+<!-- cap:30 · ALWAYS LOADED: every line here costs tokens in EVERY turn. Prove residency or move it to steering. -->
+
+## Stack (facts only, max 3 lines)
+- <runtime / framework / db — one line each>
+
+## Hard rules (SHALL / SHALL NOT only — no advice)
+- The agent SHALL NOT edit `sdlc/specs/**` or `sdlc/changes/archive/**` outside `/sdlc:ship`.
+- The agent SHALL record every assumption in the change's `## Assumptions` before acting on it.
+- <add a rule each time the agent misbehaves; each new rule must displace an old one once the always-budget (60 lines) is full>
+
+## Workflow
+- Changes flow: new → [design] → contract → build → verify → [review] → ship.
+- Tier by stakes: vibe | standard | deep — triage table lives in `sdlc/harness.md`.

package/payload/templates/contract-evals.md

@@ -1,9 +1,9 @@
-# Eval contract — <change-id>
-<!-- cap:40 · verifies the non-deterministic half: trajectory + quality. Scored by sdlc-evaluator (cheap tier). -->
-
-## Rubric (score 1–5 each)
-- Trajectory: did the agent read the contract before writing code? run tests before claiming done?
-- Quality: <change-specific bars>
-
-## Pass bar
-- all scores ≥ 4 · failures route back to `/sdlc:build` with a cluster note
+# Eval contract — <change-id>
+<!-- cap:40 · verifies the non-deterministic half: trajectory + quality. Scored by sdlc-evaluator (cheap tier). -->
+
+## Rubric (score 1–5 each)
+- Trajectory: did the agent read the contract before writing code? run tests before claiming done?
+- Quality: <change-specific bars>
+
+## Pass bar
+- all scores ≥ 4 · failures route back to `/sdlc:build` with a cluster note

package/payload/templates/contract-tests.md

@@ -1,9 +1,9 @@
-# Test contract — <change-id>
-<!-- cap:60 · written BEFORE code. This is the deterministic half of the contract with the AI; failing tests are generated from this table. -->
-
-| # | Given / When / Then | Kind (unit/int/e2e) | Maps to requirement |
-|---|---|---|---|
-| 1 | <g/w/t> | unit | <requirement name> |
-
-## Out of scope (explicitly untested + why)
-- <item — reason>
+# Test contract — <change-id>
+<!-- cap:60 · written BEFORE code. This is the deterministic half of the contract with the AI; failing tests are generated from this table. -->
+
+| # | Given / When / Then | Kind (unit/int/e2e) | Maps to requirement |
+|---|---|---|---|
+| 1 | <g/w/t> | unit | <requirement name> |
+
+## Out of scope (explicitly untested + why)
+- <item — reason>