@zalom/plastic 1.14.1 → 2.0.0-alpha.2

package/scripts/lib/installer_core.rb

@@ -9,6 +9,7 @@ require "time"
 require_relative "hook_registry"
 require_relative "agent_models"
 require_relative "harness_text"
+require_relative "compact_instructions"
 
 # Shared installer machinery, instantiable with injected package root / store / agent
 # map so the verb scripts (install/update/uninstall/rollback) and their tests can run
@@ -33,6 +34,15 @@ class InstallerCore
   # Regex matching exactly one managed section (BEGIN line .. END line), non-greedy.
   CODEX_SECTION_RE = /^<!-- BEGIN PLASTIC INTEGRATION.*?-->\n.*?\n<!-- END PLASTIC INTEGRATION -->\n?/m
 
+  # Claude CLAUDE.md marked-section markers (intent 312). A pair of its own, not the
+  # Codex literals: the two managed files can be one file (a user who symlinks
+  # ~/.claude/CLAUDE.md at ~/.codex/AGENTS.md, or the reverse), and a shared literal
+  # would let one body silently replace the other and an uninstall of one strip both.
+  # doctor_core.rb matches these literals structurally, so keep the two in sync by hand.
+  CLAUDE_SECTION_BEGIN_PREFIX = "<!-- BEGIN PLASTIC COMPACT"
+  CLAUDE_SECTION_END = "<!-- END PLASTIC COMPACT -->"
+  CLAUDE_SECTION_RE = /^<!-- BEGIN PLASTIC COMPACT.*?-->\n.*?\n<!-- END PLASTIC COMPACT -->\n?/m
+
   # Curated essentials plus a pointer to ~/.plastic/PLASTIC.md and the plastic-conventions
   # skill, injected into ~/.codex/AGENTS.md. Not a slice of PLASTIC.md itself: AGENTS.md is
   # a shared file Codex merges from multiple sources, so this block stays a small,
@@ -174,13 +184,6 @@ class InstallerCore
     keys.uniq
   end
 
-  def channel_from(argv, default: "latest")
-    return "alpha" if argv.include?("--alpha")
-    return "beta" if argv.include?("--beta")
-    return "latest" if argv.include?("--latest")
-    default
-  end
-
   def prompt_agents(input: $stdin)
     return ["claude"] unless input.tty?
 
@@ -329,25 +332,21 @@ class InstallerCore
       "scripts/write-config" => "scripts/write-config",
       "scripts/select-update-target" => "scripts/select-update-target",
       "scripts/hook-session-start" => "scripts/hook-session-start",
-      "scripts/hook-continue" => "scripts/hook-continue",
-      "scripts/hook-future-intent-check" => "scripts/hook-future-intent-check",
-      "scripts/hook-gate-check" => "scripts/hook-gate-check",
-      "scripts/hook-savepoint-pre" => "scripts/hook-savepoint-pre",
-      "scripts/hook-power-tools" => "scripts/hook-power-tools",
-      "scripts/lib/qmd_hook.rb" => "scripts/lib/qmd_hook.rb",
+      "scripts/hook-capture" => "scripts/hook-capture",
+      "scripts/hook-record" => "scripts/hook-record",
+      "scripts/hook-close" => "scripts/hook-close",
       "scripts/lib/power_tools.rb" => "scripts/lib/power_tools.rb",
       "scripts/lib/ruby_probe.rb" => "scripts/lib/ruby_probe.rb",
       "scripts/lib/agent_models.rb" => "scripts/lib/agent_models.rb",
       "scripts/lib/config_asks.rb" => "scripts/lib/config_asks.rb",
       "scripts/lib/release_guard.rb" => "scripts/lib/release_guard.rb",
-      "scripts/hook-code-gate" => "scripts/hook-code-gate",
-      "scripts/hook-lock-gate" => "scripts/hook-lock-gate",
-      "scripts/hook-bash-gate" => "scripts/hook-bash-gate",
-      "scripts/hook-auto-arm" => "scripts/hook-auto-arm",
       "scripts/lib/bridge.rb" => "scripts/lib/bridge.rb",
+      "scripts/lib/savepoint.rb" => "scripts/lib/savepoint.rb",
+      "scripts/lib/arm.rb" => "scripts/lib/arm.rb",
       "scripts/lib/lock.rb" => "scripts/lib/lock.rb",
       "scripts/plastic-lock" => "scripts/plastic-lock",
       "scripts/lib/hook_registry.rb" => "scripts/lib/hook_registry.rb",
+      "scripts/lib/compact_instructions.rb" => "scripts/lib/compact_instructions.rb",
       "scripts/agent-report" => "scripts/agent-report",
       "scripts/lib/insights.rb" => "scripts/lib/insights.rb",
       "scripts/insight-append" => "scripts/insight-append",
@@ -380,13 +379,7 @@ class InstallerCore
       "scripts/validate-intent" => "scripts/validate-intent",
       "scripts/new-intent" => "scripts/new-intent",
       "scripts/end-intent" => "scripts/end-intent",
-      "scripts/hook-create-gate" => "scripts/hook-create-gate",
-      "scripts/hook-links-gate" => "scripts/hook-links-gate",
-      "scripts/lib/links_gate.rb" => "scripts/lib/links_gate.rb",
-      "scripts/lib/edit_gates.rb" => "scripts/lib/edit_gates.rb",
-      "scripts/hook-edit-gates" => "scripts/hook-edit-gates",
       "scripts/lib/apply_patch_envelope.rb" => "scripts/lib/apply_patch_envelope.rb",
-      "scripts/lib/codex_edit_gates.rb" => "scripts/lib/codex_edit_gates.rb",
       "scripts/lib/harness_text.rb" => "scripts/lib/harness_text.rb",
       "scripts/codex-hook" => "scripts/codex-hook",
       "scripts/spawn-preamble" => "scripts/spawn-preamble",
@@ -401,24 +394,36 @@ class InstallerCore
       "scripts/uninstall.rb" => "scripts/uninstall.rb",
       "scripts/rollback.rb" => "scripts/rollback.rb",
       "scripts/lib/outcome_guard.rb" => "scripts/lib/outcome_guard.rb",
-      "scripts/lib/spec_header.rb" => "scripts/lib/spec_header.rb",
       "scripts/lib/scaffold_intent.rb" => "scripts/lib/scaffold_intent.rb",
+      "scripts/lib/backfill_intent.rb" => "scripts/lib/backfill_intent.rb",
       "scripts/scaffold-intent" => "scripts/scaffold-intent",
       "scripts/lib/verify_intent.rb" => "scripts/lib/verify_intent.rb",
       "scripts/verify-intent" => "scripts/verify-intent",
-      "scripts/lib/start_intent.rb" => "scripts/lib/start_intent.rb",
-      "scripts/start-intent" => "scripts/start-intent",
       "scripts/lib/exec_worktree.rb" => "scripts/lib/exec_worktree.rb",
       "scripts/exec-worktree" => "scripts/exec-worktree",
       "scripts/doctor.rb" => "scripts/doctor.rb",
       "scripts/lib/doctor_core.rb" => "scripts/lib/doctor_core.rb",
       "scripts/lib/rule_catalog.rb" => "scripts/lib/rule_catalog.rb",
       "scripts/lib/doctor_exclusions.rb" => "scripts/lib/doctor_exclusions.rb",
+      "scripts/lib/doctor_session_ledger.rb" => "scripts/lib/doctor_session_ledger.rb",
       "scripts/dashboard.rb" => "scripts/dashboard.rb",
       "scripts/skill-lint" => "scripts/skill-lint",
       "scripts/lib/skill_lint.rb" => "scripts/lib/skill_lint.rb",
       "scripts/feedback-report" => "scripts/feedback-report",
       "scripts/lib/feedback_report.rb" => "scripts/lib/feedback_report.rb",
+      "scripts/append-ledger" => "scripts/append-ledger",
+      "scripts/lib/session_ledger.rb" => "scripts/lib/session_ledger.rb",
+      "scripts/session-commit" => "scripts/session-commit",
+      "scripts/file-session-intent" => "scripts/file-session-intent",
+      "scripts/promote-session-item" => "scripts/promote-session-item",
+      "scripts/lib/session_backfill.rb" => "scripts/lib/session_backfill.rb",
+      "scripts/lib/session_close.rb" => "scripts/lib/session_close.rb",
+      "scripts/lib/session_git.rb" => "scripts/lib/session_git.rb",
+      "scripts/lib/handoff.rb" => "scripts/lib/handoff.rb",
+      "scripts/lib/day_summary.rb" => "scripts/lib/day_summary.rb",
+      "scripts/write-handoff" => "scripts/write-handoff",
+      "scripts/day-summary" => "scripts/day-summary",
+      "scripts/hook-savepoint" => "scripts/hook-savepoint",
     }
   end
 
@@ -432,6 +437,8 @@ class InstallerCore
       version: 3
       execution_mode: subagent-driven
       stale_threshold_days: 3
+      context_offer_tokens: 350000
+      context_insist_tokens: 500000
       hash_length: 6
       hash_algorithm: sha256-base36
       max_slug_words: 5
@@ -718,7 +725,7 @@ class InstallerCore
   end
 
   # `install_skills_flat` relocates any top-level underscore-prefixed markdown
-  # fragment (today: `_active-intent-gate.md`, `_decision-tables.md`) out of the
+  # fragment (today: `_decision-tables.md`) out of the
   # per-agent skills tree and into `plastic_home` directly, then lists them in
   # `installed`, so they are manifest-tracked and eligible for prune. But
   # `install_for_agent`'s prune roots are `[config[:dir], config[:home_dir]]`,
@@ -790,6 +797,11 @@ class InstallerCore
     choice = statusline_choice(settings_path, argv: argv, input: input, reinstall: reinstall)
     merge_claude_hooks(settings_path, choice: choice)
 
+    # Instruction injection (intent 312): the compact-instructions block into
+    # ~/.claude/CLAUDE.md. A partial-ownership user file, so it is NOT manifest-tracked
+    # (stripped surgically on uninstall), the same treatment ~/.codex/AGENTS.md gets.
+    inject_claude_compact_md(File.join(config[:dir], "CLAUDE.md"))
+
     # Write manifest
     manifest_path = File.join(plastic_dir, "manifest.json")
     write_manifest(installed, manifest_path)
@@ -1012,7 +1024,7 @@ class InstallerCore
 
   # Copy each skills/<name>/ to <skills_root>/plastic-<name>/ (flat, namespaced by
   # directory name -- the only personal-skill namespacing Claude Code supports).
-  # Any top-level underscore-prefixed markdown fragment (e.g. `_active-intent-gate.md`,
+  # Any top-level underscore-prefixed markdown fragment (e.g. `_decision-tables.md`,
   # `_decision-tables.md`) is a shared non-skill fragment and relocates to ~/.plastic/
   # instead, so every skill can read it from one shared location. `exclude` skips
   # named top-level skill directories entirely (intent 185: the agent-advisor skill
@@ -1273,8 +1285,8 @@ class InstallerCore
     plastic_hooks.each do |event, group|
       hooks[event] ||= []
 
-      # An event may map to a LIST of plastic groups (PreToolUse carries the
-      # code-gate AND the create-gate). The purge pass above already removed all
+      # An event may map to a LIST of plastic groups (none does since the edit-path
+      # gates left in 2.0, intent 302; the shape stays). The purge pass above already removed all
       # prior plastic groups, so appending each desired group fresh is idempotent
       # across re-runs and never collapses two matchers into one group.
       groups = group.is_a?(Array) ? group : [group]
@@ -1355,14 +1367,28 @@ class InstallerCore
     raise e
   end
 
-  def codex_section(body: CODEX_AGENTS_MD_BODY)
+  # A managed instruction file may be a symlink into a dotfiles repo. write_text_atomic
+  # renames a temp file over its argument, which would replace the link with a regular
+  # file and silently detach it, so every read and write resolves the link first and the
+  # change lands on its target (intent 312).
+  def resolve_managed_path(path)
+    File.symlink?(path) ? File.realpath(path) : path
+  rescue Errno::ENOENT
+    path
+  end
+
+  def marked_section(body: CODEX_AGENTS_MD_BODY, begin_prefix: CODEX_SECTION_BEGIN_PREFIX,
+                     end_marker: CODEX_SECTION_END)
     hash = Digest::SHA256.hexdigest(body)[0, 12]
-    "#{CODEX_SECTION_BEGIN_PREFIX} hash:#{hash} -->\n#{body.strip}\n#{CODEX_SECTION_END}\n"
+    "#{begin_prefix} hash:#{hash} -->\n#{body.strip}\n#{end_marker}\n"
   end
 
   # Returns :created / :appended / :replaced / :refused. Never raises on a normal user file.
-  def inject_codex_agents_md(path, body: CODEX_AGENTS_MD_BODY)
-    section = codex_section(body: body)
+  def inject_marked_section(path, body: CODEX_AGENTS_MD_BODY,
+                            begin_prefix: CODEX_SECTION_BEGIN_PREFIX,
+                            end_marker: CODEX_SECTION_END, section_re: CODEX_SECTION_RE)
+    section = marked_section(body: body, begin_prefix: begin_prefix, end_marker: end_marker)
+    path = resolve_managed_path(path)
 
     unless File.exist?(path)
       FileUtils.mkdir_p(File.dirname(path))
@@ -1371,14 +1397,14 @@ class InstallerCore
     end
 
     content = File.read(path)
-    has_begin = content.include?(CODEX_SECTION_BEGIN_PREFIX)
-    has_end = content.include?(CODEX_SECTION_END)
+    has_begin = content.include?(begin_prefix)
+    has_end = content.include?(end_marker)
 
     # 22a safety rule: never write if the existing section cannot be parsed.
     return :refused if has_begin && !has_end
 
     if has_begin
-      write_text_atomic(path, content.sub(CODEX_SECTION_RE, section))
+      write_text_atomic(path, content.sub(section_re, section))
       :replaced
     else
       base = content.end_with?("\n") ? content : content + "\n"
@@ -1387,18 +1413,41 @@ class InstallerCore
     end
   end
 
+  # --- The two blocks Plastic ships, each with its own marker pair ---
+
+  def codex_section(body: CODEX_AGENTS_MD_BODY)
+    marked_section(body: body)
+  end
+
+  def inject_codex_agents_md(path, body: CODEX_AGENTS_MD_BODY)
+    inject_marked_section(path, body: body)
+  end
+
+  # The compact-instructions block for ~/.claude/CLAUDE.md (intent 312).
+  def claude_compact_section(body: CompactInstructions::BODY)
+    marked_section(body: body, begin_prefix: CLAUDE_SECTION_BEGIN_PREFIX,
+                   end_marker: CLAUDE_SECTION_END)
+  end
+
+  def inject_claude_compact_md(path, body: CompactInstructions::BODY)
+    inject_marked_section(path, body: body, begin_prefix: CLAUDE_SECTION_BEGIN_PREFIX,
+                          end_marker: CLAUDE_SECTION_END, section_re: CLAUDE_SECTION_RE)
+  end
+
   # Remove exactly Plastic's managed section from a user-owned AGENTS.md. Preserve all other
   # content. Delete the file only if Plastic created it and nothing else remains. Returns the
   # path when it acted, nil on no-op. Mirrors remove_claude_hooks: dedicated surgical strip,
   # never the manifest whole-file-delete path.
-  def strip_codex_section(path)
+  def strip_marked_section(path, begin_prefix: CODEX_SECTION_BEGIN_PREFIX,
+                           section_re: CODEX_SECTION_RE)
+    path = resolve_managed_path(path)
     return nil unless File.exist?(path)
     content = File.read(path)
-    return nil unless content.include?(CODEX_SECTION_BEGIN_PREFIX)
+    return nil unless content.include?(begin_prefix)
 
     # Remove the section plus the single separator newline the append introduced, so a
     # standard user file round-trips byte-identical.
-    stripped = content.sub(/\n?#{CODEX_SECTION_RE}/, "")
+    stripped = content.sub(/\n?#{section_re}/, "")
 
     if stripped.strip.empty?
       File.delete(path)                 # Plastic-created file: nothing else left
@@ -1409,6 +1458,15 @@ class InstallerCore
     path
   end
 
+  def strip_codex_section(path)
+    strip_marked_section(path)
+  end
+
+  def strip_claude_compact_section(path)
+    strip_marked_section(path, begin_prefix: CLAUDE_SECTION_BEGIN_PREFIX,
+                         section_re: CLAUDE_SECTION_RE)
+  end
+
   # --- Uninstall ---
 
   def handle_uninstall(uninstall_agents)
@@ -1435,6 +1493,7 @@ class InstallerCore
     puts "     ls ~/.claude/skills | grep '^plastic-'      # → no output"
     puts "     ls ~/.claude/hooks | grep '^plastic-'       # → no output"
     puts "     grep -c plastic ~/.claude/settings.json     # → only hook refs gone"
+    puts "     grep 'PLASTIC COMPACT' ~/.claude/CLAUDE.md  # → no output"
     puts "\n  To also delete your intent store: rm -rf #{tilde(plastic_home)}\n\n"
   end
 
@@ -1481,6 +1540,11 @@ class InstallerCore
       settings_path = File.join(config[:dir], "settings.json")
       remove_claude_hooks(settings_path) if File.exist?(settings_path)
       removed.concat(migrate_legacy_plugin(config[:dir]))
+
+      # The compact-instructions block in the user-owned CLAUDE.md (intent 312): a
+      # surgical strip, never the manifest whole-file-delete path above.
+      stripped = strip_claude_compact_section(File.join(config[:dir], "CLAUDE.md"))
+      removed << stripped if stripped
     end
 
     # Codex: surgically strip Plastic's marked section from the user-owned AGENTS.md

package/scripts/lib/lock.rb

@@ -49,11 +49,11 @@ module Lock
   DELEGATE_ACTIVITY_LIMIT = 20
   DELEGATE_STATUSES = %w[active finished failed].freeze
 
-  # Lease TTL. Heartbeats fire from the write-path hooks (PostToolUse
-  # gate-check and the lock-gate allow path), so a delivering session
-  # refreshes constantly; 30 minutes tolerates long read-only stretches
-  # without opening a takeover window mid-delivery. Reclaim is explicit
-  # either way (takeover), so the TTL only bounds WHEN takeover is allowed.
+  # Lease TTL. Heartbeats fire from the PostToolUse record hook on every write
+  # inside the intent dir (intent 302), so a delivering session refreshes
+  # constantly; 30 minutes tolerates long read-only stretches without opening
+  # a takeover window mid-delivery. Reclaim is explicit either way (takeover),
+  # so the TTL only bounds WHEN takeover is allowed.
   TTL_SECONDS = 1800
 
   # The write guard is a mutex, not a lock in the Plastic sense: it carries no
@@ -122,7 +122,7 @@ module Lock
     Array(data["delegates"]).map(&:to_s).include?(session.to_s)
   end
 
-  # The one question gates ask: does session hold this intent's lock?
+  # The one question the write path asks: does session hold this intent's lock?
   # Owner/delegate on an EXISTING lock counts even when stale (a stale lock is
   # still theirs until an explicit takeover replaces it); freshness only
   # guards AGAINST other sessions.
@@ -676,24 +676,4 @@ module Claim
     end
   end
 
-  # Second, independent write gate at the artifact grain (intent 111 D7). Returns a
-  # deny reason String to BLOCK, or nil to ALLOW. Composes UNDER the delivery-lock
-  # gate: only reached after the session already holds the intent's delivery lock.
-  # ENGAGES only when a claim file exists (dormant otherwise, so single-owner flows
-  # and the existing suite stay green, AC7). Fails open on stale/corrupt via
-  # fail_open?, the named contract.
-  def claim_gate_reason(intent_dir, artifact, session:, ttl: Lock::TTL_SECONDS, now: Time.now,
-                        harness: :claude)
-    return nil if Lock.blank?(artifact)
-    return nil unless File.exist?(path(intent_dir, artifact))   # dormant: no claim
-    return nil if holds_claim?(intent_dir, artifact, session: session)  # you hold it
-    return nil if fail_open?(intent_dir, artifact, ttl: ttl, now: now)  # stale/corrupt: yield
-    data = read(intent_dir, artifact)
-    holder = data && data["owner_session"]
-    since = data && data["acquired_at"]
-    "artifact #{artifact} is claimed by #{holder} since #{since}; another writer holds " \
-      "it. Back off or run #{Lock.skill_ref('plastic-doctor', harness: harness)} check the " \
-      "lock status. If you are a distinct delegate, the owner must register you: " \
-      "plastic-lock delegate --intent-dir #{intent_dir} --session <your-session-id>"
-  end
 end

package/scripts/lib/outcome_guard.rb

@@ -1,14 +1,16 @@
 # encoding: UTF-8
 # frozen_string_literal: true
 
-require_relative "bridge"
+require_relative "savepoint"
 require_relative "intent_validator"
 
 # OutcomeGuard - the single definition of "is outcome.md real and disposition-matched for
 # THIS close" (intent 222). Extracted verbatim from scripts/end-intent's own
-# outcome_guard_reason (intent 161/188) so end-intent's existing exit-2 path and doctor's new
-# per-intent check (intent_lifecycle_artifacts) can never independently drift on what counts
-# as a valid outcome.md. Pure, read-only: authors nothing regardless of outcome.
+# outcome_guard_reason (intent 161/188) so its two callers, doctor's per-intent check
+# (intent_lifecycle_artifacts) and end-intent's post-backfill self-check, can never drift on
+# what counts as a valid outcome.md. Since intent 308 nothing blocks on it: end-intent
+# backfills a missing or placeholder outcome.md first, prints a non-nil reason, and proceeds.
+# Pure, read-only: authors nothing regardless of outcome.
 module OutcomeGuard
   module_function
 
@@ -23,7 +25,7 @@ module OutcomeGuard
 
     content = File.read(path)
     first_line = content.each_line.first.to_s.chomp
-    if first_line == Bridge::PLACEHOLDER_SENTINEL
+    if first_line == Savepoint::PLACEHOLDER_SENTINEL
       return "outcome.md is still the scaffold placeholder (first line is the sentinel)"
     end
 

package/scripts/lib/project_validator.rb

@@ -24,6 +24,15 @@ require "yaml"
 module ProjectValidator
   module_function
 
+  # The two enumerated flow: knobs (intent 300, spec D2). Kept as a plain
+  # literal here rather than a require on SessionGit: this validator only
+  # reports a bad value in `errors` (project.yml is still "accepted", spec
+  # D2's matrix row), it never blocks spawn completeness, since a bad value
+  # degrades gracefully at commit time (SessionGit falls back with a Note)
+  # rather than blocking the spawn.
+  FLOW_MODES = %w[direct pull_request].freeze
+  FLOW_WORKSPACES = %w[checkout worktree].freeze
+
   def validate(slug, plastic_home: File.join(Dir.home, ".plastic"))
     missing = []
     errors = []
@@ -53,7 +62,9 @@ module ProjectValidator
       rescue StandardError
         nil
       end
-      unless parsed.is_a?(Hash)
+      if parsed.is_a?(Hash)
+        validate_flow_block(parsed, errors)
+      else
         missing << "project.yml (valid YAML)"
         errors << "project.yml exists at #{project_yml_path} but does not parse as YAML"
       end
@@ -88,6 +99,24 @@ module ProjectValidator
     { ok: missing.empty?, missing: missing, errors: errors }
   end
 
+  # Non-blocking: an unknown `mode` or `workspace` value in project.yml's
+  # `flow:` block, if present, is reported in `errors` but never added to
+  # `missing`, so it never flips `ok`.
+  def validate_flow_block(parsed, errors)
+    flow = parsed["flow"]
+    return unless flow.is_a?(Hash)
+
+    validate_flow_knob(flow, "mode", FLOW_MODES, errors)
+    validate_flow_knob(flow, "workspace", FLOW_WORKSPACES, errors)
+  end
+
+  def validate_flow_knob(flow, key, allowed, errors)
+    value = flow[key]
+    return if value.nil? || allowed.include?(value.to_s)
+
+    errors << "project.yml flow.#{key} is #{value.inspect}, must be one of #{allowed.join(", ")}"
+  end
+
   # Invariant 1: registered in projects.yml with a 'path'. Returns the
   # project's entry Hash, or nil when unregistered or the entry has no path.
   def registration_for(slug, plastic_home)

package/scripts/lib/roadmap_queue.rb

@@ -20,10 +20,10 @@ class FileOrderRanker
   end
 end
 
-# RoadmapQueue - the one deterministic reader the auto loop and plastic-roadmap-continuing
+# RoadmapQueue - the one deterministic reader the auto loop and plastic-intent-continuing
 # both call (intent 148). Constructor-DI, hermetic: clock and paths injected, no eval, no ENV
 # or global config seam. It does two things: liveness-ranks a tier's roadmaps/*.md files
-# (porting plastic-roadmap-continuing's read-time algorithm), and, within the winning
+# (porting plastic-intent-continuing's read-time algorithm), and, within the winning
 # roadmap, selects the frontier wave plus its dispatchable set (D-b), value-ordered by the
 # injected ranker (default FileOrderRanker, the intent-173 swap seam). Every frontier token is
 # reconciled against INDEX.md first, INDEX wins. Reads through the 134 ledger via the public
@@ -181,7 +181,7 @@ class RoadmapQueue
     File.join(File.dirname(@roadmaps_dir), "INDEX.md")
   end
 
-  # --- liveness ranking (ports plastic-roadmap-continuing's read-time algorithm) -
+  # --- liveness ranking (ports plastic-intent-continuing's read-time algorithm) -
 
   def rank_candidates(parsed_list)
     parsed_list.map do |c|

package/scripts/lib/roadmap_savepoint.rb

@@ -102,7 +102,7 @@ module RoadmapSavepoint
   # entry has a `merged` line. Every timestamp comes from an on-disk source (the Log, or INDEX
   # `## Completed`); an entry with no recoverable timestamp is not emitted (D4, never invented).
   # Overwrites the ledger (the one operation allowed to rewrite it, matching
-  # `Bridge.rebuild_savepoint`). Returns the number of lines written.
+  # `Savepoint.rebuild_savepoint`). Returns the number of lines written.
   def rebuild(roadmap_path)
     text = File.read(roadmap_path)
     log_lines = classify_log(section_body(text, "Log"))

package/scripts/lib/rule_catalog.rb

@@ -5,9 +5,9 @@
 # different axes so there is exactly one place to look up or register a rule name:
 #
 #   EXCLUDABLE_CHECKS - a doctor check `name` a per-store doctor-exclusions file may name. A
-#   check name says WHICH DIAGNOSTIC FIRED. v1 carries exactly one key, savepoint_operational
-#   (see spec D3): most doctor checks have no exclusion mechanism at all, and this is the only
-#   one the owner asked to make skippable.
+#   check name says WHICH DIAGNOSTIC FIRED. Two keys: savepoint_operational (274, spec D3) and
+#   backfilled_complete (308). Most doctor checks have no exclusion mechanism at all; these two
+#   are the ones whose gap can be a known, accepted fact on an old or migrated intent.
 #
 #   REVISION_RULES - the `[rule: <tag>]` vocabulary every revisions.md entry must carry
 #   (scripts/lib/revisions_writer.rb). A tag says WHY an intent's files were structurally
@@ -33,6 +33,9 @@ module RuleCatalog
                                "delivered|abandoned echo, on a terminal intent. Usually " \
                                "repairable via maintenance-run --tool rebuild-savepoint; " \
                                "excludable for the gaps 219 D6 forbids ever repairing.",
+    "backfilled_complete" => "spec.md or plan.md missing or still the placeholder, or no real " \
+                             "action file, on a terminal intent. Repairable via scaffold-intent " \
+                             "backfill; excludable for an old intent whose record was never kept.",
   }.freeze
 
   # Measured from live store data across all eight stores, 2026-08-24 (spec D1).