@windyroad/risk-scorer 0.17.4 → 0.18.0

package/agents/test/risk-scorer-commit-verdict.bats

@@ -1,66 +0,0 @@
-#!/usr/bin/env bats
-# Doc-lint guard: wip.md and assess-wip SKILL.md must define the
-# RISK_VERDICT: COMMIT extension per ADR-016.
-#
-# Structural assertion — Permitted Exception to the source-grep ban (ADR-005 / P011).
-# These tests assert that the agent and skill specification documents conform to
-# the COMMIT verdict contract introduced by P024 / ADR-016.
-#
-# Cross-reference:
-#   P024: docs/problems/024-risk-scorer-wip-flag-uncommitted-completed-work.open.md
-#   ADR-016: docs/decisions/016-wip-verdict-commit-for-completed-governance-work.proposed.md
-#   ADR-013: docs/decisions/013-structured-user-interaction-for-governance-decisions.proposed.md
-#   @jtbd JTBD-002 (ship with confidence)
-#   @jtbd JTBD-001 (enforce governance without slowing down)
-
-setup() {
-  AGENTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  WIP_FILE="${AGENTS_DIR}/wip.md"
-  SKILL_DIR="$(cd "${AGENTS_DIR}/../skills/assess-wip" && pwd)"
-  SKILL_FILE="${SKILL_DIR}/SKILL.md"
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# wip.md — COMMIT verdict definition
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "wip.md defines RISK_VERDICT: COMMIT as a third verdict type" {
-  # ADR-016 §Verdict Contract: COMMIT is distinct from CONTINUE and PAUSE.
-  # The agent prompt must name this verdict so the LLM knows to emit it.
-  run grep -n "RISK_VERDICT:.*COMMIT\|RISK_VERDICT: COMMIT" "$WIP_FILE"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md defines RISK_COMMIT_REASON: output field" {
-  # ADR-016 §Verdict Contract: COMMIT verdict must include a one-line reason
-  # so the calling skill can surface a meaningful message to the user.
-  run grep -n "RISK_COMMIT_REASON" "$WIP_FILE"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md defines governance-artefact detection heuristic for COMMIT verdict" {
-  # ADR-016 §Detection Heuristic: COMMIT fires only when all uncommitted changes
-  # are in governance artefact paths (docs/problems/, packages/*/skills/).
-  # This guards against false-positive COMMIT signals on mixed diffs.
-  run grep -in "governance.artefact\|governance artefact\|docs/problems\|packages/\*/skills" "$WIP_FILE"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md COMMIT verdict is only emitted when risk is within appetite" {
-  # ADR-016 §Detection Heuristic criterion 1: risk must be ≤ 4 for COMMIT to fire.
-  # Above-appetite changes must be PAUSE regardless of governance-artefact status.
-  # Look for the explicit appetite gate in the COMMIT detection section specifically.
-  run grep -in "PAUSE.*governance\|governance.*PAUSE\|appetite.*COMMIT\|COMMIT.*appetite\|COMMIT.*within\|within.*COMMIT" "$WIP_FILE"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# assess-wip SKILL.md — COMMIT verdict handling
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "assess-wip SKILL.md handles RISK_VERDICT: COMMIT distinctly from CONTINUE/PAUSE" {
-  # ADR-016 §Consequences: assess-wip Step 4 must surface RISK_VERDICT: COMMIT
-  # as a prominent suggestion to commit, not treat it the same as CONTINUE.
-  run grep -n "COMMIT\|commit.*now\|commit now" "$SKILL_FILE"
-  [ "$status" -eq 0 ]
-}

package/agents/test/risk-scorer-monitoring-not-a-control.bats

@@ -1,76 +0,0 @@
-#!/usr/bin/env bats
-# Doc-lint guard: risk-scorer agent prompts must explicitly state that
-# monitoring, alerting, and other post-release detection activities are
-# NOT controls and MUST NOT be credited against residual risk.
-#
-# Structural assertions — Permitted Exception to the source-grep ban (ADR-005 / P011).
-#
-# Background: P038 identified that scorer reports were crediting
-# "monitor for elevated errors", "be ready to rollback", and similar
-# post-release detection activities as controls that reduced residual
-# risk. These activities help detect failures after they occur — they
-# are incident response, not release-gate risk reduction. Crediting
-# them creates false confidence in risky releases.
-#
-# A genuine control exercises the failure scenario BEFORE the change
-# ships (tests, CI gates, feature flags, preview verification, architect
-# review). Monitoring shortens detection time; it does not prevent the
-# failure from reaching users.
-#
-# Cross-reference:
-#   P038:    docs/problems/038-risk-scorer-suggests-monitoring-as-control.open.md
-#   ADR-013: docs/decisions/013-structured-user-interaction-for-governance-decisions.proposed.md
-#   @jtbd JTBD-001 (enforce governance — control list must reflect actual prevention)
-#   @jtbd JTBD-002 (ship with confidence — no false-confidence releases)
-#   @jtbd JTBD-202 (pre-flight governance — scorer must distinguish prevention from detection)
-
-setup() {
-  AGENTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  PIPELINE="${AGENTS_DIR}/pipeline.md"
-  WIP="${AGENTS_DIR}/wip.md"
-  PLAN="${AGENTS_DIR}/plan.md"
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# pipeline.md
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md states monitoring is not a control" {
-  run grep -qE "[Mm]onitoring is (not|NOT) a control|[Mm]onitoring.*MUST NOT.*credit" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md forbids crediting post-release detection as risk reduction" {
-  # Post-release detection activities (monitoring, alerting, rollback readiness)
-  # must not reduce residual risk.
-  run grep -qE "post-release.*(not|NOT) (reduce|control|credit)|detection.*(not|NOT) (reduce|prevention)" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# wip.md
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "wip.md states monitoring is not a control" {
-  run grep -qE "[Mm]onitoring is (not|NOT) a control|[Mm]onitoring.*MUST NOT.*credit" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md forbids crediting post-release detection as risk reduction" {
-  run grep -qE "post-release.*(not|NOT) (reduce|control|credit)|detection.*(not|NOT) (reduce|prevention)" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# plan.md
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "plan.md states monitoring is not a control" {
-  run grep -qE "[Mm]onitoring is (not|NOT) a control|[Mm]onitoring.*MUST NOT.*credit" "$PLAN"
-  [ "$status" -eq 0 ]
-}
-
-@test "plan.md forbids crediting post-release detection as risk reduction" {
-  run grep -qE "post-release.*(not|NOT) (reduce|control|credit)|detection.*(not|NOT) (reduce|prevention)" "$PLAN"
-  [ "$status" -eq 0 ]
-}

package/agents/test/risk-scorer-reducing-bypass-criteria.bats

@@ -1,62 +0,0 @@
-#!/usr/bin/env bats
-# Doc-lint guard: risk-scorer agent prompts must scope the
-# `RISK_BYPASS: reducing` label to commits that actually reduce risk.
-#
-# Structural assertions — Permitted Exception to the source-grep ban (ADR-005 / P011).
-#
-# Background: P043 analysed 329 risk reports across 6 projects and found
-# `RISK_BYPASS: reducing` applied to 97.9% of commits in this repo and
-# 79.6% across consumer projects. The scorer treated changeset metadata,
-# ADR checkbox ticks, docs-only edits, and genuinely risk-reducing fixes
-# all the same way. When nearly every commit is "reducing", the label
-# provides no discriminating signal.
-#
-# The tightened criteria require the commit to:
-#   1. Close a problem ticket, OR
-#   2. Explicitly remediate a previously-flagged risk, OR
-#   3. Remove a documented risk
-# Ordinary docs-only or test-only commits that don't meet one of these
-# conditions are risk-neutral — no bypass label.
-#
-# Cross-reference:
-#   P043:    docs/problems/043-risk-bypass-reducing-lost-discriminating-power.open.md
-#   ADR-013: docs/decisions/013-structured-user-interaction-for-governance-decisions.proposed.md
-#   @jtbd JTBD-001 (enforce governance — bypass must reflect real risk reduction)
-#   @jtbd JTBD-202 (pre-flight governance — bypass label must be auditable)
-
-setup() {
-  AGENTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  PIPELINE="${AGENTS_DIR}/pipeline.md"
-}
-
-# NOTE: wip.md is intentionally excluded from these assertions — wip-mode emits
-# RISK_VERDICT: CONTINUE/PAUSE, not RISK_BYPASS labels. Bypass criteria apply
-# only to the pipeline (commit/push/release) scorer.
-
-# ──────────────────────────────────────────────────────────────────────────────
-# pipeline.md: tightened reducing criteria
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md reducing bypass requires closing a ticket" {
-  # Must reference ticket closure as a valid trigger for reducing bypass.
-  run grep -qE "[Cc]lose[sd]?.*ticket|[Cc]loses P[0-9]|problem.*close" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md reducing bypass requires remediating a flagged risk" {
-  run grep -qE "remediate.*risk|remediates.*risk|flagged risk" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md reducing bypass excludes docs-only neutral commits" {
-  # Ordinary docs/test commits without ticket closure must NOT earn the bypass.
-  run grep -qE "docs-only.*neutral|test-only.*neutral|ordinary.*neutral|neutral.*no bypass" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md requires audit reason for reducing bypass" {
-  # Audit trail: cite which ticket closed, which risk remediated, etc.
-  run grep -qE "RISK_BYPASS_REASON|cite.*ticket|reason.*bypass|bypass.*reason" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-

package/agents/test/risk-scorer-register-hint.bats

@@ -1,111 +0,0 @@
-#!/usr/bin/env bats
-# Doc-lint guard: pipeline scorer MUST emit a structured RISK_REGISTER_HINT
-# block when a register-worthy risk shape is identified.
-#
-# Structural assertions — Permitted Exception to the source-grep ban (ADR-005 / P011).
-# These tests assert that the pipeline scorer's prompt defines the passive-trigger
-# contract required by P110. Agent prompts are specification documents; a
-# behavioural check of an LLM's output is out of scope for bats — the contract
-# document is what the PostToolUse hook and consuming orchestrator rely on.
-#
-# Background: P102 landed `/wr-risk-scorer:create-risk` as an on-demand
-# invocation surface for the risk register (docs/risks/). JTBD-001
-# (Enforce Governance Without Slowing Down) requires passive triggers that
-# fire "without a manual step" — assistant-remembering-to-invoke is the same
-# failure mode the job identifies as a pain point. P110 closes the gap by
-# having the pipeline scorer — which fires on every commit/push/release gate
-# — emit a structured hint line when it sees a register-worthy risk shape.
-# The calling orchestrator consumes the hint post-remediation-loop and
-# invokes /wr-risk-scorer:create-risk with pre-filled context.
-#
-# Cross-reference:
-#   P110:    docs/problems/110-risk-register-has-no-passive-trigger-slash-command-alone-partial-jtbd-001.open.md
-#   P102:    the parent ticket (slash-command MVP invocation surface)
-#   ADR-015: docs/decisions/015-on-demand-assessment-skills.proposed.md (Scorer Output Contract)
-#   ADR-013: docs/decisions/013-structured-user-interaction-for-governance-decisions.proposed.md
-#   ADR-042: docs/decisions/042-auto-apply-scorer-remediations-open-vocabulary.proposed.md (consumption timing)
-#   @jtbd JTBD-001 (enforce governance without slowing down — passive trigger)
-#   @jtbd JTBD-005 (invoke governance assessments on demand — composed via pre-filled create-risk)
-
-setup() {
-  AGENTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  PIPELINE="${AGENTS_DIR}/pipeline.md"
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# Contract surface: RISK_REGISTER_HINT block exists and is documented
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md defines RISK_REGISTER_HINT block" {
-  # The structured hint line is the machine-readable passive-trigger contract.
-  run grep -q "RISK_REGISTER_HINT:" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md RISK_REGISTER_HINT uses bulleted-list shape" {
-  # Multi-hint capable: a single pipeline run can surface both an
-  # above-appetite residual AND a confidentiality-disclosure risk.
-  # Shape parallels RISK_REMEDIATIONS: (list-valued), not RISK_BYPASS_REASON: (single).
-  run grep -qE "^RISK_REGISTER_HINT:[[:space:]]*$" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# Trigger conditions: architect-approved three-trigger set
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md names above-appetite-residual trigger" {
-  # Trigger (a): any cumulative residual score > appetite.
-  run grep -q "above-appetite-residual" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md names confidentiality-disclosure trigger" {
-  # Trigger (b): confidential information (client names, revenue, pricing) flagged.
-  # Composes with the existing "Confidential Information Disclosure" section.
-  run grep -q "confidentiality-disclosure" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md names user-stated-precondition trigger" {
-  # Trigger (c): unmet user-stated precondition flagged as a Risk item.
-  # Composes with the existing "User-Stated Preconditions Check" section.
-  run grep -q "user-stated-precondition" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# Consumption semantics: hint is consumed post-loop, not interleaved
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md documents post-loop consumption semantics" {
-  # Architect advisory: the hint is consumed by the orchestrator AFTER the
-  # ADR-042 auto-apply remediation loop converges (or Rule 5 halts), not
-  # interleaved — otherwise register entries would be created for risks the
-  # loop might have remediated away.
-  run grep -qiE "post.?loop|after.*remediation.*(converge|loop)|after.*auto.?apply" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# Cross-reference: hint hands off to /wr-risk-scorer:create-risk
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md names the create-risk hand-off target" {
-  # The hint routes the consuming orchestrator to the MVP invocation surface
-  # from P102. Without the hand-off target, a hint line is undirected.
-  run grep -q "create-risk" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# Silence guarantee: below appetite + no special triggers = no hint
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md documents no-hint silence when within appetite and no triggers fire" {
-  # JTBD-001 "without slowing down": no hint noise when nothing is
-  # register-worthy. This parallels the Below-Appetite Output Rule for
-  # RISK_REMEDIATIONS: and protects the solo-developer 60-second review budget.
-  run grep -qE "[Dd]o NOT emit.*RISK_REGISTER_HINT|[Oo]mit.*RISK_REGISTER_HINT|no hint|no.*RISK_REGISTER_HINT" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}

package/agents/test/risk-scorer-structured-remediations.bats

@@ -1,123 +0,0 @@
-#!/usr/bin/env bats
-# Doc-lint guard: risk-scorer agent prompts must define a structured
-# machine-readable RISK_REMEDIATIONS block with the full 5-column format.
-#
-# Structural assertions — Permitted Exception to the source-grep ban (ADR-005 / P011).
-# These tests assert that agent specification documents conform to the
-# structured-interaction contract (ADR-013) and the machine-readable format
-# required by P021.
-#
-# Background: P021 identified that above-appetite risk-scorer output used
-# free-text "Your call:" prose. The fix defined a structured RISK_REMEDIATIONS:
-# block. This test guards that all three scoring modes (pipeline, wip, plan)
-# define the block AND include the full 5-column format so calling skills
-# can render structured option prompts with effort and risk-delta context.
-#
-# Cross-reference:
-#   ADR-013: docs/decisions/013-structured-user-interaction-for-governance-decisions.proposed.md
-#   P021:    docs/problems/021-governance-skill-structured-prompts.known-error.md
-#   @jtbd JTBD-001 (enforce governance without slowing down)
-#   @jtbd JTBD-002 (ship with confidence — structured remediations are auditable)
-
-setup() {
-  AGENTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  PIPELINE="${AGENTS_DIR}/pipeline.md"
-  WIP="${AGENTS_DIR}/wip.md"
-  PLAN="${AGENTS_DIR}/plan.md"
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# pipeline.md: above-appetite structured output
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md defines RISK_REMEDIATIONS block" {
-  # Must emit a structured block, not free-text, above appetite (ADR-013 Rule 1).
-  run grep -q "RISK_REMEDIATIONS:" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md RISK_REMEDIATIONS format includes effort column" {
-  # 5-column format: id | description | effort (S/M/L) | risk_delta (-N) | files_touched
-  # This column allows calling skills to size each remediation and present
-  # a structured AskUserQuestion with effort context.
-  run grep -q "effort" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md RISK_REMEDIATIONS format includes risk_delta column" {
-  # risk_delta lets calling skills show how much each remediation reduces score.
-  run grep -q "risk_delta" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md defines Below-Appetite Output Rule" {
-  # Below appetite: silent pass, no advisory prose (ADR-013 Rule 5).
-  run grep -q "Below-Appetite" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# wip.md: above-appetite structured output
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "wip.md defines RISK_REMEDIATIONS block" {
-  run grep -q "RISK_REMEDIATIONS:" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md RISK_REMEDIATIONS format includes effort column" {
-  run grep -q "effort" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md RISK_REMEDIATIONS format includes risk_delta column" {
-  run grep -q "risk_delta" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md defines Below-Appetite Rule" {
-  run grep -q "Below-Appetite" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# plan.md: FAIL-verdict structured output
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "plan.md defines RISK_REMEDIATIONS block" {
-  run grep -q "RISK_REMEDIATIONS:" "$PLAN"
-  [ "$status" -eq 0 ]
-}
-
-@test "plan.md RISK_REMEDIATIONS format includes effort column" {
-  run grep -q "effort" "$PLAN"
-  [ "$status" -eq 0 ]
-}
-
-@test "plan.md RISK_REMEDIATIONS format includes risk_delta column" {
-  run grep -q "risk_delta" "$PLAN"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# P108: scorer writes prose descriptions; agent decides (ADR-042 Rule 2a)
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md RISK_REMEDIATIONS format has no action_class column" {
-  # ADR-042 Rule 2a: no structured action_class column. The agent reads
-  # the description and decides. Match only markdown-table column-header
-  # rows so prose mentions of "action_class" (e.g. "No structured
-  # action_class column.") do not trip the assertion (P114).
-  run grep -qE '^\| *action_class\b' "$PIPELINE"
-  [ "$status" -ne 0 ]
-}
-
-@test "wip.md RISK_REMEDIATIONS format has no action_class column" {
-  run grep -qE '^\| *action_class\b' "$WIP"
-  [ "$status" -ne 0 ]
-}
-
-@test "plan.md RISK_REMEDIATIONS format has no action_class column" {
-  run grep -qE '^\| *action_class\b' "$PLAN"
-  [ "$status" -ne 0 ]
-}

package/agents/test/risk-scorer-user-stated-preconditions.bats

@@ -1,89 +0,0 @@
-#!/usr/bin/env bats
-# Doc-lint guard: risk-scorer agent prompts must define a User-Stated
-# Preconditions Check as a sub-rule of Control Discovery.
-#
-# Structural assertions — Permitted Exception to the source-grep ban (ADR-005 / P011).
-# These tests assert that the pipeline, wip, and plan scorer prompts
-# instruct the scorer to detect user-stated conditional-delivery warnings
-# and surface unmet preconditions as Risk items.
-#
-# Background: P041 identified that the risk scorer evaluated technical
-# risk of a diff in isolation and missed explicit user-stated warnings
-# that a change was conditional on a paired capability. Downstream this
-# caused a breaking change to ship to production despite a twice-stated
-# user warning. This guard prevents regression of the fix: every scoring
-# agent must have a User-Stated Preconditions Check.
-#
-# Cross-reference:
-#   P041:    docs/problems/041-risk-scorer-misses-user-stated-dependencies.known-error.md
-#   ADR-013: structured user interaction for governance decisions
-#   @jtbd JTBD-002 (ship with confidence — user-stated preconditions are honoured)
-#   @jtbd JTBD-202 (pre-flight governance checks surface explicit warnings)
-
-setup() {
-  AGENTS_DIR="$(cd "$(dirname "$BATS_TEST_FILENAME")/.." && pwd)"
-  PIPELINE="${AGENTS_DIR}/pipeline.md"
-  WIP="${AGENTS_DIR}/wip.md"
-  PLAN="${AGENTS_DIR}/plan.md"
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# pipeline.md: user-stated precondition check
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "pipeline.md defines User-Stated Preconditions Check section" {
-  run grep -q "User-Stated Preconditions" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md precondition check surfaces unmet preconditions as Risk items" {
-  # Unmet preconditions must flow through the existing Risk item structure,
-  # which feeds RISK_REMEDIATIONS above appetite (>= 5).
-  run grep -qE "precondition.*Risk item|Risk item.*precondition" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-@test "pipeline.md precondition check credits zero reduction when paired capability is unmet" {
-  # Aligns with existing Control Discovery rule: if a control cannot be named,
-  # or a stated precondition is unmet, the control provides 0 reduction.
-  run grep -qE "zero reduction|0 reduction" "$PIPELINE"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# wip.md: user-stated precondition check
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "wip.md defines User-Stated Preconditions Check section" {
-  run grep -q "User-Stated Preconditions" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md precondition check surfaces unmet preconditions as Risk items" {
-  run grep -qE "precondition.*Risk item|Risk item.*precondition" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-@test "wip.md precondition check credits zero reduction when paired capability is unmet" {
-  run grep -qE "zero reduction|0 reduction" "$WIP"
-  [ "$status" -eq 0 ]
-}
-
-# ──────────────────────────────────────────────────────────────────────────────
-# plan.md: user-stated precondition check
-# ──────────────────────────────────────────────────────────────────────────────
-
-@test "plan.md defines User-Stated Preconditions Check section" {
-  run grep -q "User-Stated Preconditions" "$PLAN"
-  [ "$status" -eq 0 ]
-}
-
-@test "plan.md precondition check surfaces unmet preconditions as Risk items" {
-  run grep -qE "precondition.*Risk item|Risk item.*precondition" "$PLAN"
-  [ "$status" -eq 0 ]
-}
-
-@test "plan.md precondition check credits zero reduction when paired capability is unmet" {
-  run grep -qE "zero reduction|0 reduction" "$PLAN"
-  [ "$status" -eq 0 ]
-}