@yunhozz/arc 0.1.4 → 0.1.5

package/codex/skill/SKILL.md

@@ -12,27 +12,25 @@ Orchestrator MUST NEVER author them and MUST NEVER invoke `brainstorming` or `wr
 If either auto-triggers in Orchestrator context, Orchestrator stops and routes to Planner, citing that skill's SKILL.md
 path in the brief. A user request to skip questions never waives design or approval gates; Planner returns questions to
 Orchestrator. Each top-level task (a plan task, or the whole request without a plan) gets a FRESH Coder,
-and each task that needs QA (risk-scaled, unchanged) gets a FRESH QA, never one reused from another task;
+and each task that needs QA under Risk-scaled execution gets a FRESH QA, never one reused from another task;
 same-task rechecks may reuse.
 
 Follow user instructions and project guidance. Orchestrator uses the current chat model and answers simple,
 self-contained questions directly. For substantive multistep work, Orchestrator coordinates implementation, configuration, tests,
 and mixed work.
 Orchestrator handles research directly when the needed material is already in its context or the check is a quick read
-of a few known
-files; all other material research/analysis and bounded exploration (read-only, of static code, documents, data, and
+of a few known files; all other material research/analysis and bounded exploration (read-only, of static code, documents, data, and
 logs/reports) goes to Scouter with its configured settings (a bounded lookup gets a narrow brief: known paths,
 specific facts, no synthesis). Route by object and deliverable, not verbs alone.
 Standalone document writing has no specialist auto-route. Design, spec, plan, and brainstorming drafts are not
 standalone document writing (see Role gate).
 For mixed research/document requests, Orchestrator may explicitly assign only research to Scouter.
-Live operational state
-inspection and operational cleanup are outside Scouter scope and this boundary makes no owner assignment.
+Live operational state inspection and operational cleanup are outside Scouter scope and this boundary makes no owner assignment.
 
 ## Shared terms
 
-The handoff, git-recovery, and commit references and the Coder profile use these terms; context-specific commands,
-paths, and state checks still apply.
+The coordination, handoff, handoff-prep, git-recovery, verification, and commit references and the Coder profile use
+these terms; context-specific commands, paths, and state checks still apply.
 
 - **Preservation rule**: preserve unrelated staged, unstaged, and untracked changes and edit ownership; never
   automatically stash, reset, clean, unstage, discard, amend, or delete branches/worktrees; never change permissions,
@@ -44,12 +42,13 @@ paths, and state checks still apply.
   automatically; revalidate affected gates after resolution.
 - **Evidence verdict**: each criterion is proven, unmet, or unverified; passing runs, reports, or disposition never
   turn unverified into proven; reports keep unverified scope visible.
+- **Common handoff gate**: the full verification Orchestrator passes before every Coder first start/restart and
+  Orchestrator direct edit; see [handoff](references/handoff.md#common-handoff-gate).
 
 ## Mandatory task references
 
 Orchestrator and each assigned role must read the applicable references before dependent decisions or actions,
-and Orchestrator must
-include in the role brief the accessible path and section name of each reference section the role must read.
+and Orchestrator must include in the role brief the accessible path and section name of each reference section the role must read.
 Resolve paths relative to this installed skill directory.
 These contracts are conditional on the trigger, mandatory when triggered. Missing, inaccessible, or conflicting
 references must be reported to Orchestrator; stop dependent work until resolved.
@@ -64,8 +63,8 @@ Do not load all references on every task.
 | [handoff-prep](references/handoff-prep.md) | Execution-target choice request, each preparation Git mutation (branch creation/switch, staging, commit) |
 | [handoff-worktree](references/handoff-worktree.md) | After explicit new managed worktree selection, before its creation, branch work or document transfer |
 | [commit](references/commit.md) | Plan-task acceptance and its focused commit, resuming a task with an unclear commit result |
-| [verification](references/verification.md) | Orchestrator's verification design, QA/Reviewer assignment, correction rechecks, UI acceptance checks, risk classification, acceptance and completion;  QA and Reviewer use their profiles and only brief-cited sections |
-| [git-recovery](references/git-recovery.md) | Branch collision, Git preparation failure, partial completion, metadata write denial recovery |
+| [verification](references/verification.md) | Orchestrator's verification design, QA/Reviewer assignment, correction rechecks, UI acceptance checks, risk classification, acceptance and completion; QA and Reviewer use their profiles and only brief-cited sections |
+| [git-recovery](references/git-recovery.md) | Branch collision, Git preparation failure, partial completion, metadata write denial, handoff record write denial recovery |
 | [visual-companion](references/visual-companion.md) | Visual companion offer or operation |
 
 Before classifying a small-task, plan-omission, or TDD exception, read the full conditions in [handoff](references/handoff.md), including Coder TDD and constraints and Orchestrator direct path for small tasks; read [planning](references/planning.md) for design/plan-depth judgments and [verification](references/verification.md) for the full risk criteria before deciding eligibility. An exception name or this index alone never establishes eligibility.

package/codex/skill/references/commit.md

@@ -6,9 +6,8 @@ a task whose commit result is unclear.
 ## Automatic commit after plan-task acceptance
 
 One approved top-level task is the unit of one focused implementation commit. Orchestrator verifies the task's
-acceptance
-criteria, currently required checks (Reviewer timing: SKILL.md Risk-scaled execution), and findings,
-accepts the task by its own judgment, then immediately
+acceptance criteria, currently required checks (Reviewer timing:
+[Risk-scaled execution](verification.md#risk-scaled-execution)), and findings, accepts the task by its own judgment, then immediately
 creates its focused local Git commit without additional user commit approval.
 After Orchestrator accepts a task, the next action is the required Git state/scope checks, staging, and focused commit.
 Do not commit before task acceptance or defer the task commit until the plan ends.
@@ -16,19 +15,17 @@ Only Orchestrator accepts the task and executes its focused commit; Coder comple
 Substeps and checkboxes are progress records, not separate commit units. Checkbox completion, Coder reports, and
 passing checks alone do not establish task acceptance: connect criteria's conditions and expected results to actual
 evidence. Existing plan-skip paths have no new plan obligation; their commits follow applicable guidance and user
-requests.
+requests. Push, merge, publish, deploy, and install still follow their separate guidance and approval rules.
 
 Before committing, Orchestrator verifies the approved plan version, task ID and accepted scope, actual absolute
-workspace,
-repository, branch or detached HEAD, HEAD, staged/unstaged/untracked state and edit ownership. Verify staged paths and
+workspace, repository, branch or detached HEAD, HEAD, staged/unstaged/untracked state and edit ownership. Verify staged paths and
 content match only that task, and verify the finalized commit message. If the same file contains other tasks or user
 changes, prove safe separation before committing. Unrelated staged changes stop the commit under the Preservation
 rule. After committing, verify SHA, actual message, included
 paths and content, post-commit HEAD, actual branch and remaining staged/unstaged/untracked state. A successful command exit
 alone does not establish completion. In the accessible canonical record link plan path/version, task ID, acceptance
 evidence and Orchestrator judgment, required checks and findings, commit results and state, hold/no-change/reuse
-reasons,
-and remaining final plan verification.
+reasons, and remaining final plan verification.
 
 Hold the task commit for unmet or unresolved criteria, required checks that failed or were not run,
 unresolved findings or evidence gaps without disposition, scope expansion or revised-plan needs, ownership or staged
@@ -40,8 +37,7 @@ Orchestrator follows git-recovery and reverifies affected evidence after resolvi
 
 For a no-change task, make no empty commit; record acceptance evidence and no change. On resume, verify the same task's
 existing commit SHA, content and validity, then reuse it; do not duplicate a successful task commit.
-For a missing record,
-inspect the actual result before any retry. Normal accepted task commits retain valid choice reuse under handoff, with
+For a missing record, inspect the actual result before any retry. Normal accepted task commits retain valid choice reuse under handoff, with
 fresh state and ownership checks. Task acceptance/commit is distinct from final plan acceptance; remaining final
 QA/Reviewer/integration checks still apply with the timing in verification.
 
@@ -57,10 +53,9 @@ planning and approval obligations.
 Local commit authority does not authorize early planning-document commits: pre-Coder document approvals,
 explicit execution-target choice and batch preparation remain unchanged. Historical spec/plan records are not changed
 retroactively. Structural checks of this contract do not prove actual agent runtime compliance.
-Follow Conventional Commits with the message form
-`<type>(<scope>): <description>`. Use a concise, specific English description without a trailing period, a lowercase
-scope when useful, one top-level task's logical change per commit, and body/footer only when needed while preserving
-Git trailer syntax.
+Follow Conventional Commits with the message form `<type>(<scope>): <description>`. Use a concise, specific English
+description without a trailing period, a lowercase scope when useful, one top-level task's logical change per commit,
+and body/footer only when needed while preserving Git trailer syntax.
 
 ## Shared-checkout coordination
 
@@ -81,13 +76,6 @@ Approval scope and continuity are defined in [planning](planning.md#authorizatio
 limits are defined in [verification](verification.md#completion-continuity). This plan-task commit contract adds no
 commit obligation to no-plan work and does not turn a local commit into overall completion.
 
-## Automatic commit after plan-task acceptance
-
-Orchestrator accepts each approved top-level task by its own judgment and immediately creates one focused local commit
-for that
-task without additional user commit approval. Read [commit](commit.md) before the acceptance and commit.
-Push, merge, publish, deploy, and install still follow their separate guidance and approval rules.
-
 
 [ARC role policy: contract begin]
 Generated from lib/policy/role-policy.json; do not edit this managed section manually.

package/codex/skill/references/coordination.md

@@ -1,4 +1,4 @@
-# 역할 배정과 조정
+# Role assignment and coordination
 
 Orchestrator reads this before the first specialist creation or assignment and related coordination decisions. Also read [limits](limits.md) and installed `../limits.toml` before first creation. Missing, inaccessible or conflicting references stop dependent work; report the exact paths.
 
@@ -39,8 +39,7 @@ Apply platform, user, and project instructions according to their precedence, th
 permissions, models, concurrency, routing, and approvals, then the local ARC reference assigned to the role. A called skill
 adds no agents or authority. Map executor requests such as `superpowers:executing-plans` and
 `superpowers:subagent-driven-development` to Orchestrator's dependency-aware coordination and risk-scaled verification;
-this replaces
-executor mechanics and any separate execution-method choice, including prompts in an existing local reference.
+this replaces executor mechanics and any separate execution-method choice, including prompts in an existing local reference.
 Preserve plan approval, workspace, design, spec, and other applicable requirements, including TDD subject to the
 explicit ARC exception in [handoff](handoff.md#coder-tdd-and-constraints). Adapt local `brainstorming` role, save, and early spec commit instructions to
 ARC Planner ownership and evidence gates in planning/handoff; preserve upstream reference content. Report conflicts or
@@ -59,10 +58,9 @@ ARC approval, ownership, TDD exceptions and executor adapters still apply.
 Orchestrator integrates role results, routes decisions and required approvals, and owns development acceptance
 and completion. Orchestrator coordinates dependent implementation tasks sequentially and
 starts a fresh Coder for each top-level task (Role gate); reuse the current Coder only for corrections, rework,
-or rechecks of the same task while the
-approved scope, workspace, ownership, and relevant context remain valid; before sending corrections or rework to a
-reused Coder, Orchestrator rechecks workspace, branch/HEAD and change state against the brief.
-A fresh Coder for the next task is a restart under handoff (choice reuse and restart brief rules are there).
+or rechecks of the same task while the approved scope, workspace, ownership, and relevant context remain valid; before
+sending corrections or rework to a reused Coder, Orchestrator rechecks workspace, branch/HEAD and change state against the brief.
+A fresh Coder for the next task is a restart under handoff (choice reuse and restart brief rules are in handoff).
 After an approved plan or acceptance-criteria amendment, start a fresh Coder for
 the remaining work even within the same task; it is also a restart under handoff. Task-boundary gates
 follow [Risk-scaled execution](verification.md#risk-scaled-execution).

package/codex/skill/references/git-recovery.md

@@ -1,30 +1,34 @@
 # Git recovery contract
 
-Read on branch collision, Git preparation failure, partial completion, or metadata write denial.
+Read on branch collision, Git preparation failure, partial completion, metadata write denial, or handoff record write denial.
 Use [handoff-prep.md](handoff-prep.md) for approved branch selection, [handoff-worktree.md](handoff-worktree.md) for the
 managed worktree path, and [handoff.md](handoff.md) for the complete restart gate.
 
+## Recovery cases
+
 ### Git metadata write denial
 
 If authorized staging, committing, branch creation, or switching is denied while writing `.git/index.lock` or other
 Git metadata, Orchestrator blocks handoff and safely inspects the exact command, workspace, error, failed path,
-actual Git
-directory, branch, HEAD, index state, and partial completion. Read-only inspection includes lock existence and any
+actual Git directory, branch, HEAD, index state, and partial completion. Read-only inspection includes lock existence and any
 observable related processes, sandbox restrictions, OS permissions/ACLs, and concurrent Git activity. Record supported
 causes and remaining uncertainty; denial of lock creation alone does not prove a stale lock.
 
 Apply the Preservation rule: do not delete lock files, use `chmod` or `chown`, bypass the sandbox, or move to another
-workspace. If
-evidence confirms sandbox denial of an already authorized operation, request through the permission system only (not
+workspace. If evidence confirms sandbox denial of an already authorized operation, request through the permission system only (not
 a sandbox bypass) the tool-supported minimum escalation for only the exact single Git command and workspace, never
-broad Git access. Before retrying,
-recheck branch, HEAD, index, and partial completion; do not repeat work already completed. After success verify the
-commit or branch result and final state, then reevaluate the entire handoff gate. Denied escalation or unresolved OS
-permission/ACL problems keep handoff blocked; report the reason and actual state to Orchestrator/user.
-Choosing the final
-message in advance prevents unnecessary amend but does not repair required Git write access; only successful
+broad Git access. Before retrying, recheck branch, HEAD, index, and partial completion; do not repeat work already
+completed. After success verify the commit or branch result and final state, then reevaluate the entire handoff gate.
+Denied escalation or unresolved OS permission/ACL problems keep handoff blocked; report the reason and actual state to Orchestrator/user.
+Choosing the final message in advance prevents unnecessary amend but does not repair required Git write access; only successful
 authorized writes and verified results establish recovery.
 
+### Handoff record write denial
+
+If writing the canonical handoff record is denied or unavailable, stop that write, report the path and error to
+Orchestrator, and do not change permissions or bypass the sandbox. Use the inline-record fallback in
+[handoff.md](handoff.md).
+
 ### Existing changes and failures
 
 A branch does not isolate uncommitted changes into a separate directory as a worktree does. Record how existing staged,
@@ -44,15 +48,14 @@ execution-target choice block handoff. Orchestrator resolves the problem and rec
 ### Worktree failures and partial completion
 
 Worktree creation, registration, attachment, identity/base verification, checkout, document transfer, staging,
-or commit failure means stop dependent work
-and Coder handoff. Partial completion includes branch-only creation, partial path creation, registration/actual-path
-mismatch, wrong base or branch, and partial document transfer. Record source and target exact command, error,
-branch, HEAD, Git common directory, registration, index and files, including target dirty state and source preservation.
-Before any authorized retry, inspect actual state and completed work under the Stop and inspect rule; do not repeat
-completed actions.
+or commit failure means stop dependent work and Coder handoff. Partial completion includes branch-only creation, partial
+path creation, registration/actual-path mismatch, wrong base or branch, and partial document transfer. Record source and
+target exact command, error, branch, HEAD, Git common directory, registration, index and files, including target dirty
+state and source preservation. Before any authorized retry, inspect actual state and completed work under the Stop and
+inspect rule; do not repeat completed actions.
 Do not automatically fallback, retry another path/branch, delete paths, prune registrations with `git worktree prune`,
 or use `--force` or `-B`; apply the Preservation rule.
-Normal worktree preparation after explicit third-path selection is permitted under handoff; moving to an arbitrary
+Normal worktree preparation after explicit managed-worktree selection is permitted under handoff; moving to an arbitrary
 workspace during recovery remains prohibited. Resolve preparation and revalidate the full gate; a new explicit choice
 follows Choice lifetime and restart record in handoff.md. No automatic cleanup/archive is authorized.
 

package/codex/skill/references/handoff-prep.md

@@ -2,7 +2,7 @@
 
 Orchestrator reads before an execution-target choice request and each preparation Git mutation (branch creation/switch,
 staging, commit). The new managed worktree option's selection target is listed in the Execution-target request gate.
-The Coder start gate, handoff evidence and choice lifetime are in [handoff.md](handoff.md).
+The [Coder handoff gate](handoff.md#coder-handoff-gate), handoff evidence and choice lifetime are in [handoff.md](handoff.md).
 
 ## Workspace handoff
 
@@ -22,14 +22,12 @@ For every supported execution-target option, before obtaining the user's choice,
 
 Obtain explicit choice under the Explicit choice rule before preparation.
 When offering the new managed worktree option, Orchestrator first verifies and then presents its selection target
-(source absolute
-path, intended repository and Git common directory, source branch or detached HEAD, verified full source HEAD SHA,
+(source absolute path, intended repository and Git common directory, source branch or detached HEAD, verified full source HEAD SHA,
 approved branch candidate and collision status, descriptive name, planned document scope and any existing approved document transfer/commit scope). Verification
 validates the approved branch candidate and collision status under New task branch naming rules and checks source state
 (unrelated staged changes; existing approved document HEAD/index/working-tree state) before offering. The app chooses the actual
 destination path: do not ask the user for a destination path or propose one, and do not fetch or substitute a remote
-HEAD
-or default branch for the base. Read [handoff-worktree.md](handoff-worktree.md) only after the user
+HEAD or default branch for the base. Read [handoff-worktree.md](handoff-worktree.md) only after the user
 explicitly selects that option and before its creation, branch work, or document transfer.
 
 ### Git mutation evidence gate
@@ -71,7 +69,9 @@ main purpose and a short, specific lowercase kebab-case topic with no spaces. Fo
 | revert/ | Revert a prior change |
 
 Validate the name and check for collisions before creation. If the base name exists, never automatically substitute a
-suffix; present a new candidate for explicit approval. Never reuse, delete, or overwrite an existing branch.
+suffix; present a new candidate for explicit approval. Never reuse, delete, or overwrite an existing branch, except
+that reuse of an approved existing branch on the managed worktree path follows the conditions in
+[handoff-worktree.md](handoff-worktree.md) (Exception for this managed path).
 Distinguish a lookup error from a missing branch.
 Recheck the workspace, current branch or detached HEAD, base HEAD, and candidate before execution. If the approval
 target changes, present the new target and obtain explicit user approval. If the candidate changes because of a new
@@ -89,9 +89,9 @@ creation.
 ### Current checkout
 
 Only after the user explicitly selects the current checkout for this handoff, or valid reuse is verified,
-confirm the absolute workspace,
-current branch or detached HEAD, HEAD, and existing changes with their preservation and edit ownership. Record this
-state and the choice evidence in the brief. Missing choice, unconfirmed state, or unclear ownership blocks handoff.
+confirm the absolute workspace, current branch or detached HEAD, HEAD, and existing changes with their preservation and
+edit ownership. Record this state and the choice evidence in the brief. Missing choice, unconfirmed state, or unclear
+ownership blocks handoff.
 
 ### Planning document commit
 
@@ -100,12 +100,11 @@ Verify complete approved document set, approval evidence and versions before sta
 On the new task branch path, verify the successful switch, actual branch, unchanged checkout path, and preserved
 changes first. On the current checkout path, verify the selected branch or detached HEAD, path, and existing changes.
 On the new worktree path, verify the created app-managed worktree, current-chat attachment, identity/base, approved
-branch and direct target documents (or protected legacy/restart document transfer) before any target docs commit.
+branch and direct target documents (or protected pre-existing/restart document transfer) before any target docs commit.
 At the target, commit only remaining approved documents once; do not automatically make a source document commit.
 Record the selected base SHA and post-commit HEAD.
 Orchestrator verifies each approved spec/plan already committed for this task by SHA, actual message, included paths,
-and
-content matching the approved version and validity in the selected checkout; reuse valid commits without recommitting
+and content matching the approved version and validity in the selected checkout; reuse valid commits without recommitting
 them.
 
 For approved documents still uncommitted, Orchestrator records the approved versions and paths, finalizes the specific
@@ -119,10 +118,9 @@ MUST NOT commit a generic temporary message and routinely repair it with `git co
 
 If the docs commit fails or staged content differs, stop handoff and apply the Stop and inspect rule to the actual
 branch, HEAD, index, and partial completion. Resolve the issue before resuming; do not commit implementation instead.
-After success verify SHA, actual
-message, included paths/content, post-commit HEAD, final branch, and staged/unstaged/untracked state in the brief.
-A successful command exit alone does not prove preparation complete. This commit is not implementation acceptance
-or push approval; do not push without a separate explicit user request.
+After success verify SHA, actual message, included paths/content, post-commit HEAD, final branch, and
+staged/unstaged/untracked state in the brief. A successful command exit alone does not prove preparation complete. This
+commit is not implementation acceptance or push approval; do not push without a separate explicit user request.
 
 Skip this commit only when no planning documents were required and none were produced under the design/plan depth
 rules; record that fact and the applicable depth rationale. Uncommitted documents cannot be treated as absent.

package/codex/skill/references/handoff-worktree.md

@@ -1,8 +1,7 @@
 # Managed worktree handoff contract
 
 Orchestrator reads after the user explicitly selects the new managed worktree option, before its creation,
-branch work or
-document transfer. Apply [handoff-prep.md](handoff-prep.md) and [handoff.md](handoff.md) gates as well.
+branch work or document transfer. Apply [handoff-prep.md](handoff-prep.md) and [handoff.md](handoff.md) gates as well.
 
 ## Workspace handoff
 
@@ -27,6 +26,7 @@ and verification, apply Choice lifetime and restart record in handoff.md.
 Before calling mcp__codex_app__create_worktree, validate the approved branch candidate and collision state with
 New task branch naming rules in handoff-prep.md. A collision requires a new explicit choice; never automatically
 substitute a suffix.
+Default is the prohibition on reusing an existing branch in handoff-prep.md; only this narrow exception applies.
 Exception for this managed path: an existing approved branch at the same base and not checked out in any worktree
 may be reused; verify both conditions before reuse. An unexpected branch, different base or lookup uncertainty means
 stop.
@@ -47,19 +47,18 @@ For registration failure only, retry the returned workspace with mcp__codex_app_
 managed registration, current-chat attachment and approved branch verification, perform no formal drafting, saving, document transfer, staging,
 commit or Coder start. If tools are unavailable, reattachment fails or results mismatch, stop and record actual state.
 Do not fall back to raw Git worktree creation, automatically retry other name/ref/path/branch inputs,
-or perform automatic
-cleanup, delete, prune or archive. See git-recovery.md before dependent recovery.
+or perform automatic cleanup, delete, prune or archive. See git-recovery.md before dependent recovery.
 
 Verify the returned actual absolute worktree path and app-managed current-chat attachment using app artifacts.
 Record initial branch or detached HEAD, approved branch candidate, final branch, and target HEAD equal to approved ref.
 Verify linked-worktree registration and source/target Git common directory identity, registered path,
-target dirty state,
-and source branch, HEAD, index and files preservation; shared Git metadata additions for the approved target are
+target dirty state, and source branch, HEAD, index and files preservation; shared Git metadata additions for the approved target are
 authorized.
 Linked worktree .git may be a file; do not require the same top-level path or a .git directory for repository identity.
 Verify registration, attachment and base before creating/checking out the approved branch. If initially detached,
 use `git switch -c <approved-branch> <ref>`; if the existing approved branch has the same base and is not checked out
-in any worktree, use `git switch <approved-branch>`. Do not move a branch pointer, choose another branch or use --force
+in any worktree, use `git switch <approved-branch>` (the exception above to the default no-reuse rule in
+handoff-prep.md). Do not move a branch pointer, choose another branch or use --force
 or -B.
 If the app initially returns the approved branch, verify it and its base rather than repeating completed work.
 Unexpected branch or mismatched HEAD means stop. Verify final approved branch and HEAD before formal drafting, saving, document transfer,
@@ -77,16 +76,15 @@ For those existing approved documents, use Worktree document transfer before tar
 
 ### Worktree document transfer
 
-Use only for existing approved documents in legacy or restart/target-change cases.
+Use only for existing approved documents in pre-existing-document or restart/target-change cases.
 
 Verify existing approved commits by SHA, message, paths and approved content valid at base and target; reuse them.
 Copy only uncommitted approved spec/plan documents to the target at the same repository-relative path.
 Do not move, delete, or modify the source documents. If a destination resolves outside the worktree, including through
 an escaping symlink, stop. Before transfer verify target HEAD equals the selected source base SHA.
-Before replacing an existing destination,
-prove its clean base state with no staged/unstaged changes and index and working-tree bytes matching the base version;
-then replace with the approved version. A document absent from base must also be absent at the destination.
-For unexpected changes, do not overwrite; stop.
+Before replacing an existing destination, prove its clean base state with no staged/unstaged changes and index and
+working-tree bytes matching the base version; then replace with the approved version. A document absent from base must
+also be absent at the destination. For unexpected changes, do not overwrite; stop.
 For identical content, verify approved bytes before reuse. After transfer verify bytes match the approved version.
 The canonical record includes each document approval/version/evidence, source and target absolute paths and the common
 relative path plus content verification. Changed content or approval scope requires approval of the revised version.

package/codex/skill/references/handoff.md

@@ -1,8 +1,7 @@
 # Handoff contract
 
 Orchestrator reads before every Coder first start or restart preparation. Coder trusts the Orchestrator-verified facts
-in the brief under
-the Coder profile and reads this file only for sections the brief explicitly cites. First-start preparation
+in the brief under the Coder profile and reads this file only for sections the brief explicitly cites. First-start preparation
 (execution-target choice request, preparation Git mutations, planning-document commit) is in
 [handoff-prep.md](handoff-prep.md); the new managed worktree path is in [handoff-worktree.md](handoff-worktree.md).
 
@@ -11,8 +10,7 @@ the Coder profile and reads this file only for sections the brief explicitly cit
 ### Checkout approval
 
 Before every Coder first start and restart, Orchestrator confirms the supplied absolute workspace is accessible and
-belongs
-to the intended Git repository; record its actual absolute path, current branch or detached HEAD, HEAD, and staged,
+belongs to the intended Git repository; record its actual absolute path, current branch or detached HEAD, HEAD, and staged,
 unstaged, and untracked changes. Stop if the workspace is inaccessible, is not the intended repository, or HEAD
 cannot be resolved. Do not initialize Git or switch to another repository automatically.
 
@@ -28,9 +26,8 @@ drafting or preparation and does not require document completion. Never fall bac
 After initial design approval, obtain and record an explicit user choice for the first start under the
 Explicit choice rule: use the current checkout, create a new task branch from the verified base HEAD in that same
 checkout, or create a new managed worktree and task branch (selection target under handoff-prep.md; contract in
-handoff-worktree.md after selection). Without an
-explicit execution-target choice or verified valid reuse under the choice-lifetime rules below, wait and do not start or
-restart Coder.
+handoff-worktree.md after selection). Without an explicit execution-target choice or verified valid reuse under the
+choice-lifetime rules below, wait and do not start or restart Coder.
 
 ### Coder handoff gate
 
@@ -51,13 +48,11 @@ Orchestrator may start or restart Coder only after all of these conditions are v
    failure or partial completion.
 7. The brief includes these preparation and final-verification facts and evidence.
 
-Before a Orchestrator direct edit, Orchestrator verifies the same conditions, with the approved scope record as the
-applicable approval,
-and records them in the brief.
+Before an Orchestrator direct edit, Orchestrator verifies the same conditions, with the approved scope record as the
+applicable approval, and records them in the brief.
 
 A missing or failed condition blocks handoff. Orchestrator may continue read-only investigation and authorized
-preparation
-or recovery, but cannot start Coder early. Reverify affected evidence when approved content, execution target, branch,
+preparation or recovery, but cannot start Coder early. Reverify affected evidence when approved content, execution target, branch,
 HEAD, or relevant state changes. Coder's conflict reporting is in its profile; Orchestrator
 resolves preparation and passes the gate again before Coder resumes.
 
@@ -79,12 +74,10 @@ Record the Complete planning-document set fields from planning.md, confirming no
 writing/approval.
 Distinguish reused commits from the batch preparation commit, or record valid document absence.
 Record applicable approvals and the initial explicit execution-target choice or verified reuse for each first start or
-restart. Give all five
-roles (Coder, QA, Planner, Reviewer, Scouter) the same actual workspace and selected execution checkout or absolute
-worktree path, preparation
-evidence, and absolute artifact paths. Each
-role stays in the supplied workspace, reports missing, inaccessible, or conflicting paths and unexpected branch state to
-Orchestrator before dependent work, and does not create or switch workspaces or branches.
+restart. Give all five roles (Coder, QA, Planner, Reviewer, Scouter) the same actual workspace and selected execution checkout or absolute
+worktree path, preparation evidence, and absolute artifact paths. Each role stays in the supplied workspace, reports
+missing, inaccessible, or conflicting paths and unexpected branch state to Orchestrator before dependent work, and does
+not create or switch workspaces or branches.
 
 ### Task readiness at every assignment
 
@@ -107,8 +100,7 @@ Unexpected HEAD or ownership changes stop affected work for Orchestrator resolut
 
 For the same approved scope, workspace, repository, and execution target, reuse the initial explicit choice only
 when its evidence is accessible and still valid. On every first start and restart, Orchestrator rechecks actual Git
-state
-against the current brief: absolute workspace and repository identity, branch or detached HEAD, HEAD,
+state against the current brief: absolute workspace and repository identity, branch or detached HEAD, HEAD,
 staged/unstaged/untracked changes, preservation and edit ownership, applicable approvals and artifacts,
 planning-document SHA/message/paths/content or valid no-document rationale, and Orchestrator's final state verification
 (Coder handoff gate items 1-7); a reused choice never waives any gate. A restart without document changes reuses
@@ -119,14 +111,12 @@ verify that they match approved work, ownership, and the intended target. A work
 evidence; target HEAD need not remain at that base; source preservation and unexpected-state checks still apply.
 Link the approved plan version, task ID and commit SHA/content/validity with current Git state and edit ownership in
 the restart brief under Orchestrator's full handoff gate. Verify/reuse successful task commits without duplication and
-keep planning-document preparation
-evidence distinct; task commits do not require repeating valid document preparation.
+keep planning-document preparation evidence distinct; task commits do not require repeating valid document preparation.
 
 If scope, workspace, repository, target, or approved branch candidate changes, obtain a fresh explicit choice before dependent drafting or preparation; reselection does not require document completion. If an invalidating failure means the old target cannot be trusted,
 obtain a fresh explicit choice after Orchestrator resolves preparation. State mismatches and unresolved failures block
 editing until Orchestrator resolves and revalidates the full gate; resolution does not automatically require a new
-choice
-unless it invalidates the old target. Do not fall back automatically; apply the Explicit choice rule.
+choice unless it invalidates the old target. Do not fall back automatically; apply the Explicit choice rule.
 
 Keep one canonical initial handoff record accessible to each assigned role, containing the approved scope/version,
 repository/workspace identity, and the Handoff evidence fields above; do not create a separate storage service.
@@ -135,8 +125,7 @@ Markdown file at `<git-common-dir>/arc/handoff/<plan-or-task-slug>.md` (slug uni
 stem, or a spec/task slug when no plan exists; never overwrite another plan's record; resolve with
 `git rev-parse --path-format=absolute --git-common-dir`; outside the working tree and shared by linked worktrees; not a
 Git mutation, never staged or committed; contains no secrets), gives its absolute path in every brief, and restart
-briefs cite it. If
-the write is denied or unavailable, each Coder brief states why and includes the full record inline, with no delta;
+briefs cite it. If the write is denied or unavailable, each Coder brief states why and includes the full record inline, with no delta;
 that inline record satisfies the accessible record requirement. Do not delete it automatically.
 
 Restart brief: supply only verified deltas and mark unchanged fields; `unchanged` means unchanged relative to the record
@@ -166,8 +155,8 @@ Before any exception judgment, Orchestrator reads [Risk-scaled execution](verifi
 
 ## Common handoff gate
 
-Before every Coder first start/restart, Orchestrator passes the full gate in
-[handoff](handoff.md): applicable approvals/artifacts or valid omissions, explicit execution-target choice
+Before every Coder first start/restart, Orchestrator passes the full gate:
+applicable approvals/artifacts or valid omissions, explicit execution-target choice
 or verified reuse, intended accessible repository/workspace, actual Git identity/state, preservation/ownership,
 verified document commits or valid absence, and no unresolved failure/partial completion.
 Missing evidence, mismatches, unclear ownership or unresolved preparation block handoff and require Orchestrator
@@ -175,7 +164,7 @@ resolution and full revalidation. Handoff owns the evidence fields, canonical ha
 and reuse. Coder trusts the Orchestrator-verified brief and reports actual conflicts under its self-contained profile;
 never replace its local guards with a requirement to load Orchestrator procedures.
 Depth-2 roles use the supplied workspace and report path/state conflicts; they cannot create/switch workspaces or
-branches. The same conditions apply before a Orchestrator direct edit.
+branches. The same conditions apply before an Orchestrator direct edit.
 For a selected worktree, handoff requires common directory, registration, app-managed current-chat attachment,
 approved branch, and source preservation; prepare only through the selected managed-worktree contract.
 
@@ -200,12 +189,10 @@ generalize it to behavior work.
 ## Orchestrator direct path for small tasks
 
 Orchestrator may make a task's edits directly, without Planner brainstorming or Coder, only when every small,
-low-risk criterion
-holds, every plan-skip criterion holds
-(one local change, no dependent stages, no cross-component shared state, lifecycle, or integration-order concerns,
-and one
-focused verification path), and no significant-risk trigger applies. Spike, architectural, ordinary-behavior,
-significant/high-risk, unclear-risk work, and edits overlapping files assigned to a running Coder are not eligible.
+low-risk criterion holds, every plan-skip criterion holds (one local change, no dependent stages, no cross-component shared state,
+lifecycle, or integration-order concerns, and one focused verification path), and no significant-risk trigger applies.
+Spike, architectural, ordinary-behavior, significant/high-risk, unclear-risk work, and edits overlapping files assigned
+to a running Coder are not eligible.
 
 Before editing, Orchestrator records a scope record (not a brainstorming design) with scope and files,
 why every criterion holds, acceptance criteria, and focused verification. Apply authorization in
@@ -213,23 +200,19 @@ why every criterion holds, acceptance criteria, and focused verification. Apply
 that scope; no duplicate approval is needed. Otherwise present the scope record to the user and obtain explicit
 approval before editing. Silence, an ambiguous response, or approval of other work is not approval.
 Orchestrator then passes the Coder handoff gate in handoff,
-with the
-approved scope record as the applicable approval, before the first edit. Orchestrator edits only the approved files,
-preserves others' edits, makes surgical edits in
-the local style without unrelated refactoring or speculative additions, and does not install dependencies without
-authorization.
+with the approved scope record as the applicable approval, before the first edit. Orchestrator edits only the approved files,
+preserves others' edits, makes surgical edits in the local style without unrelated refactoring or speculative additions,
+and does not install dependencies without authorization.
 
 Behavior edits follow Coder TDD and constraints; when TDD applies, Orchestrator follows local
 `test-driven-development`.
 After editing, Orchestrator records the changed files, runs the focused checks, connects each acceptance criterion to
-evidence,
-and preserves unverified scope. Orchestrator is not independent of its own edit; assign QA when the evidence is
+evidence, and preserves unverified scope. Orchestrator is not independent of its own edit; assign QA when the evidence is
 incomplete.
 After a failed focused check or a QA finding, Orchestrator routes the correction to Coder and obtains a recheck.
 
 If scope expands, risk becomes unclear, or a criterion stops holding, Orchestrator stops editing, records the changes
-already
-made, and reclassifies; further work follows the normal Planner/Coder flow with Coder owning subsequent edits. Do not
+already made, and reclassifies; further work follows the normal Planner/Coder flow with Coder owning subsequent edits. Do not
 automatically revert, reset, stash, or clean those changes. Like other plan-skip paths, there is no automatic task
 commit; commits follow applicable guidance and user requests.
 

package/codex/skill/references/limits.md

@@ -30,7 +30,7 @@ Serialize work when a batch does not fit. There are no reserved role slots.
 
 Preserve the ledger through continuation, resume and context compaction; reconcile actual instance
 IDs before dispatch. Ledger loss must never reset counters to zero. If reconstruction is incomplete,
-hold creation and report the unknown budget; use a conservative bound only with sufficient evidence.
+hold creation and report the unknown budget; use a conservative upper bound only when the reconstructed records support it.
 Completion frees confirmed active capacity; it does not restore the total-created budget. Exhaustion holds new
 creation and requires reporting remaining work and budgets. It does not authorize skipping required
 QA or Reviewer, role freshness, approval, ownership, dependency or same-file edit gates.