@windyroad/retrospective 0.24.1 → 0.25.0

package/.claude-plugin/plugin.json

@@ -78,5 +78,5 @@
     }
   },
   "name": "wr-retrospective",
-  "version": "0.24.1"
+  "version": "0.25.0"
 }

package/bin/wr-retrospective-check-autocreate-rfc-scope

@@ -0,0 +1,51 @@
+#!/usr/bin/env bash
+# Generated by scripts/sync-shim-wrappers.sh from
+# packages/shared/lib/shim-wrapper-template.sh. DO NOT EDIT individual
+# shim files in packages/*/bin/wr-* directly; edit the template + run
+# `npm run sync:shim-wrappers` to regenerate.
+#
+# Resolution (ADR-080):
+#   1. If the wrapper's parent dir is semver-shaped, treat as installed-
+#      cache execution and resolve to the highest-version sibling's
+#      scripts/ entry below.
+#   2. Otherwise (parent dir is e.g. `architect`), treat as source-
+#      monorepo execution and dispatch to own scripts/. The source-repo-
+#      guard `exec` is the anchor parsed by
+#      packages/retrospective/scripts/check-tarball-shipped-shims.sh.
+#   3. If the cache parent contains zero semver-shaped siblings, exit
+#      127 with a stderr message naming the cache parent (per SQ-080-2).
+#
+# @adr ADR-080 (highest-version-wins shim wrapper plugin scaffold)
+# @adr ADR-049 (plugin-bundled scripts resolve via bin/ on $PATH — amended)
+# @problem P343 (mid-session staleness window)
+
+set -euo pipefail
+
+SHIM_DIR="$(cd "$(dirname "$0")" && pwd)"
+OWN_VERSION_DIR="$(dirname "$SHIM_DIR")"
+OWN_VERSION_NAME="$(basename "$OWN_VERSION_DIR")"
+CACHE_PARENT="$(dirname "$OWN_VERSION_DIR")"
+
+SEMVER_RE='^[0-9]+\.[0-9]+\.[0-9]+([-+][0-9A-Za-z.-]+)?$'
+
+# Source-repo guard: own parent dir is NOT semver → dispatch to own scripts/.
+if ! [[ "$OWN_VERSION_NAME" =~ $SEMVER_RE ]]; then
+  exec "$SHIM_DIR/../scripts/check-autocreate-rfc-scope.sh" "$@"
+fi
+
+# Cache execution: pick the highest-semver sibling under CACHE_PARENT.
+HIGHEST=""
+while IFS= read -r dir; do
+  name="$(basename "$dir")"
+  [[ "$name" =~ $SEMVER_RE ]] || continue
+  if [[ -z "$HIGHEST" ]] || [[ "$(printf '%s\n%s\n' "$HIGHEST" "$name" | sort -V | tail -1)" == "$name" ]]; then
+    HIGHEST="$name"
+  fi
+done < <(find "$CACHE_PARENT" -mindepth 1 -maxdepth 1 -type d 2>/dev/null)
+
+if [[ -z "$HIGHEST" ]]; then
+  printf 'wr-shim: no cached versions in %s\n' "$CACHE_PARENT" >&2
+  exit 127
+fi
+
+exec "$CACHE_PARENT/$HIGHEST/scripts/check-autocreate-rfc-scope.sh" "$@"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/retrospective",
-  "version": "0.24.1",
+  "version": "0.25.0",
   "description": "Session retrospectives that update briefings and create problem tickets",
   "bin": {
     "windyroad-retrospective": "./bin/install.mjs"

package/scripts/check-autocreate-rfc-scope.sh

@@ -0,0 +1,170 @@
+#!/usr/bin/env bash
+# packages/retrospective/scripts/check-autocreate-rfc-scope.sh
+#
+# Diagnose-only advisory script for ADR-073 (Fix-time gate auto-creates a
+# missing RFC). ADR-073's Reassessment Criteria say to revisit the
+# auto-create decision "if auto-created RFCs are systematically under-scoped
+# (a recurring 'the auto-RFC didn't capture the real fix' signal)". The I13
+# fix-time gate auto-creates problem-traced *skeleton* RFCs via
+# /wr-itil:capture-rfc whenever a Known Error has no RFC trace; the
+# auto-create event is otherwise only logged ephemerally to the work-problems
+# iter-summary `notes`. This detector makes the reassessment signal durable
+# and observable: it reads the auto-created RFCs left on disk and surfaces the
+# ones whose traced problem's fix has already shipped while the RFC scope was
+# never fleshed out — exactly the under-scoped population. RFC-005 B9 wires it
+# into /wr-retrospective:run-retro Step 2b as an advisory sub-block (mirroring
+# the README inventory-currency advisory, ADR-069/P294).
+#
+# An RFC is a SKELETON when its `## Scope` section still carries the
+# capture-rfc placeholder `(deferred — populate at /wr-itil:manage-rfc
+# accepted transition)` (capture-rfc/SKILL.md skeleton contract).
+#
+# A skeleton RFC is UNDER-SCOPED (a reassessment candidate) when its
+# `problems:` frontmatter traces at least one FIX-SHIPPED problem, where
+# fix-shipped means any of (broadened so the gate-on-next-touch population —
+# fixes shipped before the gate existed, recorded as `## Fix Strategy` in a
+# `known-error/` ticket — is caught; the canonical P361/RFC-026 dogfood case):
+#   - the problem file lives under <problems-dir>/verifying/ or .../closed/, OR
+#   - the problem body has a `## Fix Released` heading, OR
+#   - the problem body has a POPULATED `## Fix Strategy` section (heading with
+#     non-blank body content — a bare stub heading does not count). Fix-
+#     *proposed* is sufficient for the under-scoped signal: the RFC should have
+#     been fleshed out the moment a fix was scoped (ADR-073 Consequences — the
+#     RFC body is fleshed out as fix work proceeds).
+#
+# Output (one line per under-scoped candidate, then a trailing summary):
+#   AUTOCREATE-RFC under-scoped rfc=<RFC-NNN> problems=<csv> shipped=<pid:basis>
+#   TOTAL proposed_skeletons=<N> under_scoped=<K>
+# where <basis> is one of: verifying | closed | fix-released | fix-strategy.
+#
+# Exit codes:
+#   0 = always (advisory only — count is signal, not failure; ADR-013 Rule 6)
+#   2 = parse error (rfcs-dir missing or unreadable)
+#
+# Usage:
+#   check-autocreate-rfc-scope.sh [<rfcs-dir>] [<problems-dir>]
+# Defaults:
+#   <rfcs-dir> = docs/rfcs     <problems-dir> = docs/problems
+#
+# @problem P314 (rework the fix-time RFC-trace gate — RFC-005 B9)
+# @adr ADR-073 (fix-time gate auto-creates a missing RFC — this script's
+#               normative source; its Reassessment Criteria are what B9 wires)
+# @adr ADR-060 (Problem-RFC-Story framework; I13 fix-time trace invariant)
+# @adr ADR-013 Rule 6 (non-interactive fail-safe — advisory script never blocks)
+# @adr ADR-040 (declarative-first / advisory-then-escalate precedent)
+# @adr ADR-049 (bin/-on-PATH script resolution — paired
+#               wr-retrospective-check-autocreate-rfc-scope shim)
+# @adr ADR-052 / P081 (behavioural tests via bats; no structural-grep on source)
+
+set -uo pipefail
+
+RFCS_DIR="${1:-docs/rfcs}"
+PROBLEMS_DIR="${2:-docs/problems}"
+
+# The capture-rfc skeleton placeholder (em-dash is U+2014, matching the
+# capture-rfc skeleton contract and the live RFC-026 skeleton).
+PLACEHOLDER='deferred — populate at /wr-itil:manage-rfc accepted transition'
+
+# ── Pre-checks ──────────────────────────────────────────────────────────────
+
+if [ ! -d "$RFCS_DIR" ]; then
+  echo "check-autocreate-rfc-scope: rfcs dir not found: $RFCS_DIR" >&2
+  exit 2
+fi
+
+# ── Helpers ─────────────────────────────────────────────────────────────────
+
+# Extract a markdown section body: lines after the `## <heading>` line up to
+# (but excluding) the next `## ` heading. Heading matched whole-line.
+section_body() {
+  local file="$1" heading="$2"
+  awk -v h="$heading" '
+    $0 ~ "^## " h "([[:space:]]*$)" { f=1; next }
+    /^## / && f { f=0 }
+    f { print }
+  ' "$file"
+}
+
+# True when a section has non-blank body content beyond the skeleton
+# placeholder — i.e. it is genuinely populated, not a bare stub heading.
+section_populated() {
+  local file="$1" heading="$2"
+  section_body "$file" "$heading" \
+    | grep -qv -e '^[[:space:]]*$' -e "$PLACEHOLDER"
+}
+
+# Echo a fix-shipped basis (verifying|closed|fix-released|fix-strategy) for a
+# problem id, or empty when the problem is not fix-shipped / not found.
+problem_fix_shipped() {
+  local pid="$1" num pfile
+  num="${pid#P}"
+  pfile="$(find "$PROBLEMS_DIR" -type f -name "${num}-*.md" 2>/dev/null | head -1)"
+  [ -n "$pfile" ] || { echo ""; return; }
+  case "$pfile" in
+    */verifying/*) echo "verifying"; return ;;
+    */closed/*)    echo "closed";    return ;;
+  esac
+  if grep -qE '^## Fix Released([[:space:]]*$)' "$pfile"; then
+    echo "fix-released"; return
+  fi
+  if grep -qE '^## Fix Strategy([[:space:]]*$)' "$pfile" \
+      && section_populated "$pfile" "Fix Strategy"; then
+    echo "fix-strategy"; return
+  fi
+  echo ""
+}
+
+# Echo space-separated problem ids from an RFC's `problems:` frontmatter.
+rfc_problems() {
+  grep -m1 '^problems:' "$1" 2>/dev/null | grep -oE 'P[0-9]+'
+}
+
+# ── Scan proposed RFCs ──────────────────────────────────────────────────────
+
+total_skeletons=0
+under_scoped=0
+
+shopt -s nullglob
+rfcs=("$RFCS_DIR"/*.proposed.md)
+shopt -u nullglob
+
+# Stable alphabetical order for deterministic output.
+IFS=$'\n' rfcs=($(printf '%s\n' "${rfcs[@]}" | sort))
+unset IFS
+
+for rfc in "${rfcs[@]}"; do
+  [ -f "$rfc" ] || continue
+
+  # Skeleton = `## Scope` section still carries the placeholder.
+  if ! section_body "$rfc" "Scope" | grep -qF "$PLACEHOLDER"; then
+    continue
+  fi
+  total_skeletons=$(( total_skeletons + 1 ))
+
+  rfc_id="$(basename "$rfc" | grep -oE '^RFC-[0-9]+')"
+
+  pids="$(rfc_problems "$rfc")"
+  [ -n "$pids" ] || continue
+
+  csv=""
+  shipped_pid=""
+  shipped_basis=""
+  for pid in $pids; do
+    csv="${csv:+$csv,}$pid"
+    if [ -z "$shipped_pid" ]; then
+      basis="$(problem_fix_shipped "$pid")"
+      if [ -n "$basis" ]; then
+        shipped_pid="$pid"
+        shipped_basis="$basis"
+      fi
+    fi
+  done
+
+  if [ -n "$shipped_pid" ]; then
+    under_scoped=$(( under_scoped + 1 ))
+    echo "AUTOCREATE-RFC under-scoped rfc=$rfc_id problems=$csv shipped=$shipped_pid:$shipped_basis"
+  fi
+done
+
+echo "TOTAL proposed_skeletons=$total_skeletons under_scoped=$under_scoped"
+exit 0

package/scripts/test/check-autocreate-rfc-scope.bats

@@ -0,0 +1,250 @@
+#!/usr/bin/env bats
+#
+# packages/retrospective/scripts/test/check-autocreate-rfc-scope.bats
+#
+# Behavioural tests for `check-autocreate-rfc-scope.sh` — the ADR-073
+# auto-create-RFC reassessment advisory (RFC-005 B9). The detector scans
+# docs/rfcs/*.proposed.md for skeleton (capture-rfc placeholder-scope) RFCs
+# whose `problems:` trace a fix-shipped problem — the "auto-created RFC
+# under-scoped" signal ADR-073's Reassessment Criteria names. run-retro
+# Step 2b surfaces the candidates so a human can assess whether auto-created
+# RFCs are systematically under-scoped.
+#
+# Tests are behavioural per ADR-005 / ADR-052 / P081 — they exercise the
+# script end-to-end against fixture docs/rfcs + docs/problems trees and
+# assert on stdout / exit-code shape. No structural greps of the script
+# source. Mirrors the sibling `check-readme-jtbd-currency.bats`.
+#
+# @problem P314 (rework the fix-time RFC-trace gate — RFC-005 B9 wires the
+#               ADR-073 reassessment criterion into run-retro Step 2b)
+# @problem P081 (Structural-content tests are wasteful — behavioural preferred)
+# @adr ADR-073 (fix-time gate auto-creates a missing RFC; Reassessment
+#               Criteria: revisit if auto-created RFCs systematically under-scoped)
+# @adr ADR-013 Rule 6 (non-interactive fail-safe — advisory script never blocks)
+# @adr ADR-040 (declarative-first / advisory-then-escalate precedent)
+# @adr ADR-005 / ADR-052 (behavioural tests via bats)
+
+SCRIPT="${BATS_TEST_DIRNAME}/../check-autocreate-rfc-scope.sh"
+
+# The capture-rfc skeleton placeholder string (em-dash is U+2014, matching
+# capture-rfc/SKILL.md and the live RFC-026 skeleton).
+PLACEHOLDER='(deferred — populate at /wr-itil:manage-rfc accepted transition)'
+
+setup() {
+  TEST_DIR="$(mktemp -d)"
+  RFCS_DIR="$TEST_DIR/rfcs"
+  PROBLEMS_DIR="$TEST_DIR/problems"
+  mkdir -p "$RFCS_DIR" "$PROBLEMS_DIR"
+}
+
+teardown() {
+  rm -rf "$TEST_DIR"
+}
+
+# Write a proposed RFC. $1 = filename, $2 = problems-csv (e.g. "P361"),
+# $3 = scope-body (use $PLACEHOLDER for a skeleton).
+make_rfc() {
+  local fname="$1" probs="$2" scope="$3"
+  cat > "$RFCS_DIR/$fname" <<EOF
+---
+status: proposed
+human-oversight: unconfirmed
+problems: [$probs]
+---
+
+# $fname
+
+## Scope
+
+$scope
+
+## Tasks
+
+- [ ] $PLACEHOLDER
+EOF
+}
+
+# Write a problem ticket under a lifecycle subdir. $1 = subdir, $2 = num,
+# $3 = body.
+make_problem() {
+  local sub="$1" num="$2" body="$3"
+  mkdir -p "$PROBLEMS_DIR/$sub"
+  cat > "$PROBLEMS_DIR/$sub/$num-stub.md" <<EOF
+# P$num stub ticket
+
+$body
+EOF
+}
+
+# ── Pre-checks ──────────────────────────────────────────────────────────────
+
+@test "script file exists and is executable" {
+  [ -f "$SCRIPT" ]
+  [ -x "$SCRIPT" ]
+}
+
+@test "missing rfcs dir exits 2 with error message on stderr" {
+  run bash "$SCRIPT" "$TEST_DIR/does-not-exist" "$PROBLEMS_DIR"
+  [ "$status" -eq 2 ]
+  [[ "$output" == *"rfcs dir not found"* ]]
+}
+
+@test "empty rfcs dir exits 0 with a zeroed TOTAL summary" {
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"TOTAL proposed_skeletons=0 under_scoped=0"* ]]
+}
+
+# ── Regression anchor: the P361/RFC-026 gate-on-next-touch shape ─────────────
+# A known-error-located problem whose fix is recorded as a populated
+# `## Fix Strategy` (NO `## Fix Released` heading), traced by a
+# placeholder-scope RFC. The original (pre-review) predicate missed this.
+
+@test "known-error problem with populated Fix Strategy (no Fix Released) is under-scoped" {
+  make_problem "known-error" "361" "## Fix Strategy
+
+Implemented in \`packages/itil/scripts/derive-release-vehicle.sh\`. Full 15-test suite green; de-facto-released exit-0 branch added."
+  make_rfc "RFC-026-stub.proposed.md" "P361" "$PLACEHOLDER"
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"AUTOCREATE-RFC under-scoped rfc=RFC-026"* ]]
+  [[ "$output" == *"problems=P361"* ]]
+  [[ "$output" == *"shipped=P361:fix-strategy"* ]]
+  [[ "$output" == *"TOTAL proposed_skeletons=1 under_scoped=1"* ]]
+}
+
+# ── verifying/ lifecycle-directory basis (the P215/RFC-021 shape) ───────────
+
+@test "skeleton RFC tracing a verifying/ problem is under-scoped (directory basis)" {
+  make_problem "verifying" "215" "## Fix Strategy
+
+Recovery directive added to the architect gate."
+  make_rfc "RFC-021-stub.proposed.md" "P215" "$PLACEHOLDER"
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"AUTOCREATE-RFC under-scoped rfc=RFC-021"* ]]
+  [[ "$output" == *"shipped=P215:verifying"* ]]
+  [[ "$output" == *"TOTAL proposed_skeletons=1 under_scoped=1"* ]]
+}
+
+# ── Fix Released heading basis ──────────────────────────────────────────────
+
+@test "skeleton RFC tracing a problem with a Fix Released heading is under-scoped" {
+  make_problem "known-error" "500" "## Fix Released
+
+Shipped in @windyroad/itil@1.2.3."
+  make_rfc "RFC-050-stub.proposed.md" "P500" "$PLACEHOLDER"
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"AUTOCREATE-RFC under-scoped rfc=RFC-050"* ]]
+  [[ "$output" == *"shipped=P500:fix-released"* ]]
+}
+
+# ── Non-candidate: skeleton RFC tracing an open, no-fix problem ──────────────
+# A legitimately-still-skeleton RFC — the fix has not been scoped yet, so the
+# RFC SHOULD still be a skeleton. Counted in proposed_skeletons, NOT under_scoped.
+
+@test "skeleton RFC tracing an open problem with no fix is NOT under-scoped" {
+  make_problem "open" "304" "## Symptoms
+
+Duplicate-and-sync is fragile. No fix proposed yet."
+  make_rfc "RFC-023-stub.proposed.md" "P304" "$PLACEHOLDER"
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" != *"rfc=RFC-023"* ]]
+  [[ "$output" == *"TOTAL proposed_skeletons=1 under_scoped=0"* ]]
+}
+
+# ── Robustness: a bare/empty Fix Strategy heading is NOT populated ──────────
+# (architect note — distinguish a populated section from a stub heading.)
+
+@test "skeleton RFC tracing a problem with an EMPTY Fix Strategy heading is NOT under-scoped" {
+  make_problem "known-error" "600" "## Fix Strategy
+
+## Root Cause Analysis
+
+Some analysis."
+  make_rfc "RFC-060-stub.proposed.md" "P600" "$PLACEHOLDER"
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" != *"rfc=RFC-060"* ]]
+  [[ "$output" == *"TOTAL proposed_skeletons=1 under_scoped=0"* ]]
+}
+
+# ── Non-candidate: a fleshed-out (non-skeleton) RFC is never counted ─────────
+
+@test "non-skeleton RFC (Scope fleshed out) tracing a shipped problem is NOT counted" {
+  make_problem "closed" "700" "## Fix Strategy
+
+Done and shipped."
+  make_rfc "RFC-070-stub.proposed.md" "P700" "This RFC has a real scope paragraph describing the change."
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" != *"rfc=RFC-070"* ]]
+  [[ "$output" == *"TOTAL proposed_skeletons=0 under_scoped=0"* ]]
+}
+
+# ── closed/ lifecycle-directory basis ───────────────────────────────────────
+
+@test "skeleton RFC tracing a closed/ problem is under-scoped (directory basis)" {
+  make_problem "closed" "800" "## Fix Strategy
+
+Resolved and verified."
+  make_rfc "RFC-080-stub.proposed.md" "P800" "$PLACEHOLDER"
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"AUTOCREATE-RFC under-scoped rfc=RFC-080"* ]]
+  [[ "$output" == *"shipped=P800:closed"* ]]
+}
+
+# ── Multi-RFC aggregation + TOTAL summary ───────────────────────────────────
+
+@test "multi-RFC aggregation: one candidate line per under-scoped skeleton + TOTAL" {
+  # under-scoped (known-error + Fix Strategy)
+  make_problem "known-error" "361" "## Fix Strategy
+
+Shipped."
+  make_rfc "RFC-026-stub.proposed.md" "P361" "$PLACEHOLDER"
+  # under-scoped (verifying)
+  make_problem "verifying" "215" "## Fix Strategy
+
+Shipped."
+  make_rfc "RFC-021-stub.proposed.md" "P215" "$PLACEHOLDER"
+  # legitimately-skeleton (open, no fix)
+  make_problem "open" "304" "## Symptoms
+
+No fix yet."
+  make_rfc "RFC-023-stub.proposed.md" "P304" "$PLACEHOLDER"
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"rfc=RFC-026"* ]]
+  [[ "$output" == *"rfc=RFC-021"* ]]
+  [[ "$output" != *"rfc=RFC-023"* ]]
+  [[ "$output" == *"TOTAL proposed_skeletons=3 under_scoped=2"* ]]
+}
+
+# ── Multi-problem trace: any one shipped problem makes the RFC under-scoped ──
+
+@test "skeleton RFC tracing multiple problems is under-scoped if ANY is fix-shipped" {
+  make_problem "open" "900" "## Symptoms
+
+No fix."
+  make_problem "verifying" "901" "## Fix Strategy
+
+Shipped."
+  make_rfc "RFC-090-stub.proposed.md" "P900, P901" "$PLACEHOLDER"
+
+  run bash "$SCRIPT" "$RFCS_DIR" "$PROBLEMS_DIR"
+  [ "$status" -eq 0 ]
+  [[ "$output" == *"AUTOCREATE-RFC under-scoped rfc=RFC-090"* ]]
+  [[ "$output" == *"problems=P900,P901"* ]]
+  [[ "$output" == *"shipped=P901:verifying"* ]]
+}

package/skills/run-retro/SKILL.md

@@ -193,6 +193,21 @@ Drift-hint vocabulary: `skill-inventory-drift` (inventory-only per ADR-069). Alw
 
 **Already load-bearing (ADR-069)**: the commit-hook `retrospective-readme-jtbd-currency.sh` denies `git commit` when `drift_instances ≥ 1` (skill-inventory-drift), per the carried-forward load-bearing-from-the-start-for-drift-class driver. This Step 2b advisory is the backup / cross-cutting surface — it catches drift in sessions that bypass the commit-hook (`BYPASS_JTBD_CURRENCY=1`) and summarises across packages; it is not the gate.
 
+**ADR-073 auto-create-RFC reassessment advisory (RFC-005 B9, P314).** Step 2b also feeds the ADR-073 reassessment loop. The I13 fix-time RFC-trace gate (ADR-072 placement / ADR-073 auto-create-not-block) auto-creates problem-traced **skeleton** RFCs via `/wr-itil:capture-rfc` whenever a fix is proposed on an RFC-less Known Error. ADR-073's Reassessment Criteria say to revisit the auto-create decision "if auto-created RFCs are systematically under-scoped (a recurring 'the auto-RFC didn't capture the real fix' signal)". The auto-create event is otherwise only logged ephemerally to the `/wr-itil:work-problems` iter-summary `notes`; this advisory makes the reassessment signal durable by reading the auto-created RFCs left on disk and surfacing the ones whose traced problem's fix has already shipped while the RFC scope was never fleshed out. The surfacing channel is the retro summary's Pipeline Instability section (same trust-boundary as the README advisory above — surface the evidence; defer the reassessment to the human).
+
+**Mechanism**: invoke `wr-retrospective-check-autocreate-rfc-scope` (resolves on `$PATH` to the plugin-bundled detector per ADR-049/ADR-080 — invoke by the `wr-retrospective-…` shim name, never a repo-relative `packages/…` path). The detector scans `docs/rfcs/*.proposed.md` for skeleton RFCs (whose `## Scope` still carries the capture-rfc placeholder `(deferred — populate at /wr-itil:manage-rfc accepted transition)`) whose `problems:` frontmatter traces at least one **fix-shipped** problem (located under `docs/problems/verifying/` or `…/closed/`, OR carrying a `## Fix Released` heading, OR carrying a populated `## Fix Strategy` section). It emits:
+
+- Per under-scoped candidate: `AUTOCREATE-RFC under-scoped rfc=<RFC-NNN> problems=<csv> shipped=<pid:basis>`
+- Trailing summary: `TOTAL proposed_skeletons=<N> under_scoped=<K>`
+
+Always exits 0 — advisory per ADR-013 Rule 6 / ADR-040 declarative-first; there is no load-bearing gate counterpart (unlike the README inventory advisory, the reassessment signal informs a future human decision, not a blocking commit-hook).
+
+**Interpretation**:
+
+1. **`under_scoped == 0`** — emit a one-line `ADR-073 auto-create-RFC scope: clean (<N> proposed skeletons, 0 under-scoped)` to the retro summary's Pipeline Instability section.
+2. **`under_scoped ≥ 1`** — emit each `AUTOCREATE-RFC under-scoped …` candidate line into the Pipeline Instability section. Each names a skeleton RFC whose fix has shipped but whose scope was never written — the ADR-073 under-scoped signal. Per ADR-013 Rule 6, the user reviews on return: a one-off is the expected living-RFC pattern (flesh the RFC out via `/wr-itil:manage-rfc accepted`); a **recurring** under-scoped population across retros is the ADR-073 reassessment trigger (revisit whether auto-create produces useful vehicles or noise). Same trust-boundary as the categorical detection above — surface the evidence; defer the decision.
+3. **Detector failure** — if the detector exits non-zero (missing `docs/rfcs/`, runtime exception), log the failure inline as `ADR-073 auto-create-RFC advisory failed: <stderr>` but do NOT halt the retro. Same fail-open contract as the README advisory and Step 3's `check-briefing-budgets.sh` defensive trip — the cheap layer degrades to a one-line pointer rather than blocking.
+
 **Interaction with other surfaces:**
 
 - **Step 4a (Verification-close housekeeping, P068)** — same evidence-scan shape applied to a different surface. Both share the glob / scan / categorise / specific-citation / interactive-or-AFK pattern. Step 4a scans for successful exercise of `.verifying.md` fixes; Step 2b scans for tool-level friction. They fire independently and produce independent retro-summary sections.