ai-catapult 0.1.0

package/dist/codex-plugin/skills/ai-catapult-init/templates/boundary-manifest.json

@@ -0,0 +1,247 @@
+{
+  "schema_version": "1.0",
+  "description": "Mechanical/judgment boundary manifest for the v3 .ai/ scaffold. Every path listed under 'mechanical' has a corresponding static template file in this directory. Paths listed under 'judgment_laden' are produced in-harness by the ai-catapult plugin and are NOT templated here. This manifest is consumed by Slice 3 parity fixtures.",
+  "classification_rules": {
+    "mechanical": "Path layout is deterministic and repo-agnostic; content is fixed or contains only well-typed placeholder tokens ({{REPO_ID}}, {{DATE}}, {{UPSTREAM_URL}}, {{UPSTREAM_REF}}). No domain knowledge or architecture judgment required.",
+    "judgment_laden": "Content requires interpretation of the specific repo's domain, architecture decisions, cascade topology, or AI-failure-mode analysis. Generated in-harness by the plugin after discovery."
+  },
+  "paths": [
+    {
+      "path": ".ai/matrix.json",
+      "classification": "mechanical",
+      "template": "dot-ai/matrix.json",
+      "rationale": "Template emits the STANDALONE matrix skeleton only (topology_type hardcoded to 'standalone', max_allowed_depth/current_depth fixed at 0, managed_repositories empty). The umbrella matrix — which requires populated managed_repositories and max_allowed_depth=3 — is judgment-laden and plugin-generated, consistent with cascade-plan.json classification."
+    },
+    {
+      "path": ".ai/system-prompts/architect.md",
+      "classification": "mechanical",
+      "template": "dot-ai/system-prompts/architect.md",
+      "rationale": "Role-specific instructions are fixed conventions, not repo-specific decisions."
+    },
+    {
+      "path": ".ai/system-prompts/developer.md",
+      "classification": "mechanical",
+      "template": "dot-ai/system-prompts/developer.md",
+      "rationale": "Role-specific instructions are fixed conventions."
+    },
+    {
+      "path": ".ai/system-prompts/qa-engineer.md",
+      "classification": "mechanical",
+      "template": "dot-ai/system-prompts/qa-engineer.md",
+      "rationale": "Role-specific instructions are fixed conventions."
+    },
+    {
+      "path": ".ai/skills/git-ops.json",
+      "classification": "mechanical",
+      "template": "dot-ai/skills/git-ops.json",
+      "rationale": "Tool injection descriptor; operations list and confirmation gates are fixed."
+    },
+    {
+      "path": ".ai/skills/workspace-sync.json",
+      "classification": "mechanical",
+      "template": "dot-ai/skills/workspace-sync.json",
+      "rationale": "Tool injection descriptor; fixed operations set."
+    },
+    {
+      "path": ".ai/workflows/repo-workflow.md",
+      "classification": "mechanical",
+      "template": "dot-ai/workflows/repo-workflow.md",
+      "rationale": "Workflow phase sequence is fixed and deterministic."
+    },
+    {
+      "path": ".ai/workflows/repo-workflow.json",
+      "classification": "mechanical",
+      "template": "dot-ai/workflows/repo-workflow.json",
+      "rationale": "Machine-readable workflow manifest; workflow_id and phase list are fixed."
+    },
+    {
+      "path": ".ai/phases/01-discover-decide/status.json",
+      "classification": "mechanical",
+      "template": "dot-ai/phases/01-discover-decide/status.json",
+      "rationale": "Phase schema is fixed (schema_version, workflow_id, phase_id, title, required, status scaffold). Initial status is 'pending'."
+    },
+    {
+      "path": ".ai/phases/02-govern-plan/status.json",
+      "classification": "mechanical",
+      "template": "dot-ai/phases/02-govern-plan/status.json",
+      "rationale": "Phase schema is fixed."
+    },
+    {
+      "path": ".ai/phases/03-configure-generate/status.json",
+      "classification": "mechanical",
+      "template": "dot-ai/phases/03-configure-generate/status.json",
+      "rationale": "Phase schema is fixed."
+    },
+    {
+      "path": ".ai/phases/04-validate-handoff/status.json",
+      "classification": "mechanical",
+      "template": "dot-ai/phases/04-validate-handoff/status.json",
+      "rationale": "Phase schema is fixed."
+    },
+    {
+      "path": ".ai/policies/model-routing.json",
+      "classification": "mechanical",
+      "template": "dot-ai/policies/model-routing.json",
+      "rationale": "Provider-neutral tier table (ADR-0003) is fixed. host_aliases are illustrative examples included as an optional deployment convenience; teams may replace or extend them — replacing host aliases requires no architecture judgment about the repo itself."
+    },
+    {
+      "path": ".ai/mcp/registry.json",
+      "classification": "mechanical",
+      "template": "dot-ai/mcp/registry.json",
+      "rationale": "MCP registry stub (ADR-0005) is fixed; all servers carry status:stub and no live endpoint."
+    },
+    {
+      "path": ".ai/mcp/a2a-handoff.md",
+      "classification": "mechanical",
+      "template": "dot-ai/mcp/a2a-handoff.md",
+      "rationale": "A2A cross-agent handoff convention (ADR-0005) is fixed prose, not repo-specific."
+    },
+    {
+      "path": ".ai/evals/coverage-exceptions.json",
+      "classification": "mechanical",
+      "template": "dot-ai/evals/coverage-exceptions.json",
+      "rationale": "Empty array at scaffold time; shape is fixed."
+    },
+    {
+      "path": ".ai/rules/security.md",
+      "classification": "mechanical",
+      "template": "dot-ai/rules/security.md",
+      "rationale": "Baseline security guardrails are fixed conventions applicable to any repo."
+    },
+    {
+      "path": ".ai/rules/technical-bounds.md",
+      "classification": "mechanical",
+      "template": "dot-ai/rules/technical-bounds.md",
+      "rationale": "Baseline technical-bounds are fixed placeholder rules; teams extend post-scaffold."
+    },
+    {
+      "path": ".ai/drift/last-drift.json",
+      "classification": "mechanical",
+      "template": "dot-ai/drift/last-drift.json",
+      "rationale": "Empty/null initial drift record; shape is fixed."
+    },
+    {
+      "path": ".ai/observability/conventions.md",
+      "classification": "mechanical",
+      "template": "dot-ai/observability/conventions.md",
+      "rationale": "Logging and trace conventions (ADR-0005) are fixed scaffold prose."
+    },
+    {
+      "path": ".ai/observability/audit-checklist.md",
+      "classification": "mechanical",
+      "template": "dot-ai/observability/audit-checklist.md",
+      "rationale": "Token-cost and trajectory-audit checklist (ADR-0005) is fixed."
+    },
+    {
+      "path": ".ai/reviews/ai-failure-modes.md",
+      "classification": "mechanical",
+      "template": "dot-ai/reviews/ai-failure-modes.md",
+      "rationale": "AI-failure-mode review checklist (spec §4.B) is fixed; failure mode categories are invariant."
+    },
+    {
+      "path": "AGENTS.md",
+      "classification": "mechanical",
+      "template": "AGENTS.md",
+      "rationale": "Skeleton with Harness Map section and placeholder tokens is fixed; actual workflow decisions (ADRs, cascade list) are judgment-laden and filled in-harness."
+    },
+    {
+      "path": "CLAUDE.md",
+      "classification": "mechanical",
+      "template": "CLAUDE.md",
+      "rationale": "Thin pointer to AGENTS.md (ADR-0004). No content-bearing sections."
+    },
+    {
+      "path": "GEMINI.md",
+      "classification": "mechanical",
+      "template": "GEMINI.md",
+      "rationale": "Thin pointer to AGENTS.md (ADR-0004). No content-bearing sections."
+    },
+    {
+      "path": ".rules.ts",
+      "classification": "mechanical",
+      "template": "dot-rules.ts",
+      "rationale": "Five-domain Archgate rules file with standard placeholder rules. Teams customize rule entries post-scaffold."
+    },
+    {
+      "path": "prek.toml",
+      "classification": "mechanical",
+      "template": "prek.toml",
+      "rationale": "Hook configuration is fixed schema (validate-rules local hook)."
+    },
+    {
+      "path": ".github/workflows/ci-prek.yml",
+      "classification": "mechanical",
+      "template": "dot-github/workflows/ci-prek.yml",
+      "rationale": "CI workflow for prek is fixed (j178/prek-action@v2 with --all-files)."
+    },
+    {
+      "path": ".ai/handoff/init-ai-repo-handoff.md",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Handoff document summarises what the plugin discovered and decided about the specific repo. Generated in-harness after all four phases complete."
+    },
+    {
+      "path": ".ai/traceability/graph.json",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Traceability graph nodes reference actual BRD/PRD/issue IDs specific to the repo."
+    },
+    {
+      "path": ".ai/traceability/index.md",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Human-readable index of traceability links; content is per-repo."
+    },
+    {
+      "path": ".ai/traceability/validation-report.md",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Validation report reflects discovered coverage gaps for this specific repo."
+    },
+    {
+      "path": "docs/architecture/adr/0001-init.md",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "ADR body captures the specific architectural decision context of this repo. Cannot be templated without losing meaning."
+    },
+    {
+      "path": ".ai/cascade/cascade-plan.json",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Cascade plan lists specific managed repositories and host adapters discovered during phase 1. Per-repo topology judgment."
+    },
+    {
+      "path": ".memory/human-override/custom-conventions.md",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Terminal-priority human-override content is never generated; only written by humans."
+    },
+    {
+      "path": ".memory/human-override/tribal-knowledge.md",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Terminal-priority human-override content. Same rationale."
+    },
+    {
+      "path": ".memory/self-learned/error-patterns.json",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Written only by local agents at runtime, not scaffolded."
+    },
+    {
+      "path": ".memory/self-learned/module-complexity.json",
+      "classification": "judgment_laden",
+      "template": null,
+      "rationale": "Written only by local agents at runtime, not scaffolded."
+    }
+  ],
+  "mechanical_count": 28,
+  "judgment_laden_count": 10,
+  "notes": [
+    "Dirs without a named file get a .gitkeep in the template tree so the directory is tracked by git.",
+    "The .ai/evals/<set>/ evalset files (evalset.json, rubric.md, judge-config.json) are judgment_laden — the eval set name and rubric content are per-repo.",
+    "The .ai/drift/backups/ dir is runtime-only (written by sync path), not scaffolded.",
+    "The .ai/skills/catalog-audit.json and description-exceptions.json are generated by the skill-catalog branch, not the base scaffold.",
+    "upstream.lock is omitted: it requires resolving a live git SHA at scaffold time and is written by foundation.md artifacts, not the .ai/ tree."
+  ]
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/drift/last-drift.json

@@ -0,0 +1,7 @@
+{
+  "schema_version": "1.0",
+  "generated_at": "{{DATE}}",
+  "drift_detected": false,
+  "assets_checked": [],
+  "note": "Initial scaffold — no prior sync to diff against."
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/evals/coverage-exceptions.json

@@ -0,0 +1 @@
+[]

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/matrix.json

@@ -0,0 +1,19 @@
+{
+  "schema_version": "1.0",
+  "topology_type": "standalone",
+  "max_allowed_depth": 0,
+  "current_depth": 0,
+  "sync_strategy": "physical-copy",
+  "upstream_authority": {
+    "type": "git",
+    "url": "{{UPSTREAM_URL}}",
+    "ref": "{{UPSTREAM_REF}}"
+  },
+  "managed_repositories": [],
+  "inherited_assets": [],
+  "sync_status": {
+    "last_synced_at": "{{DATE}}",
+    "drift_detected": false,
+    "last_drift_report": ".ai/drift/last-drift.json"
+  }
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/mcp/a2a-handoff.md

@@ -0,0 +1,51 @@
+# A2A Cross-Agent Handoff Convention
+
+**ADR:** ADR-0005
+**Generated by:** ai-catapult-init
+
+This document defines the cross-agent handoff convention for this repository.
+All agent-to-agent transfers must include a correlation ID so task chains remain
+auditable.
+
+## Required handoff fields
+
+Every A2A handoff payload must carry:
+
+| Field | Type | Description |
+|-------|------|-------------|
+| `correlation_id` | string (UUID) | Shared across all agents in a task chain. |
+| `from_agent` | string | Identifier of the handing-off agent. |
+| `to_agent` | string | Identifier of the receiving agent. |
+| `task_summary` | string | One-sentence description of what was completed. |
+| `next_action` | string | One-sentence description of what the receiving agent must do. |
+| `artifacts` | array | List of file paths or artifact references produced. |
+| `timestamp` | string (ISO-8601) | Handoff time in UTC. |
+
+## Example
+
+```json
+{
+  "correlation_id": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
+  "from_agent": "planner",
+  "to_agent": "executor",
+  "task_summary": "Architecture decisions recorded in docs/architecture/adr/.",
+  "next_action": "Generate the v3 scaffold from the confirmed matrix and ADRs.",
+  "artifacts": [
+    "docs/architecture/adr/0001-init.md",
+    ".ai/matrix.json"
+  ],
+  "timestamp": "{{DATE}}"
+}
+```
+
+## Correlation ID lifecycle
+
+- The first agent in a task chain generates the `correlation_id`.
+- Every subsequent agent in the chain preserves and forwards the same ID.
+- The final agent records the ID in `.ai/handoff/init-ai-repo-handoff.md`.
+
+## MCP registry
+
+The MCP server registry stub lives at `.ai/mcp/registry.json`. Stubs have
+`status: "stub"` and no resolved endpoint; promotion to live requires an ADR
+update and a registry entry update.

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/mcp/registry.json

@@ -0,0 +1,27 @@
+{
+  "schema_version": "1.0",
+  "generated_by": "ai-catapult-init",
+  "adr": "ADR-0005",
+  "description": "MCP-server registry stub. Offline/deterministic: declared servers are stubs; ai-catapult-init resolves no live endpoint and makes no network call.",
+  "servers": [
+    {
+      "name": "filesystem",
+      "transport": "stdio",
+      "status": "stub",
+      "endpoint": null,
+      "tools": ["read_file", "write_file", "list_directory"]
+    },
+    {
+      "name": "git",
+      "transport": "stdio",
+      "status": "stub",
+      "endpoint": null,
+      "tools": ["git_status", "git_diff", "git_log"]
+    }
+  ],
+  "a2a": {
+    "protocol": "A2A",
+    "handoff_convention": ".ai/mcp/a2a-handoff.md",
+    "correlation_id_required": true
+  }
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/observability/audit-checklist.md

@@ -0,0 +1,32 @@
+# Observability Audit Checklist
+
+**ADR:** ADR-0005
+**Generated by:** ai-catapult-init
+
+Use this checklist when reviewing a behavior-changing PR. Check each item
+that applies. Record the checklist results in the PR description or review comment.
+
+## Token-cost audit
+
+- [ ] Total token count for this PR's AI-assisted work is recorded in the PR description.
+- [ ] No single agent turn exceeded 100k input tokens without a documented reason.
+- [ ] Caching was used where available (e.g. prompt prefix caching for repeated context).
+
+## Trajectory audit
+
+- [ ] Agent action sequence is summarized in the PR description (what agent did what, in order).
+- [ ] No agent self-approved its own output without a separate review pass.
+- [ ] The `correlation_id` chain is present for multi-agent task chains.
+
+## Drift audit
+
+- [ ] `.ai/drift/last-generation.json` was updated if scaffold files were regenerated.
+- [ ] No inherited asset was overwritten without a prior backup under `.ai/drift/backups/`.
+- [ ] Drift report (`.ai/drift/last-drift.json`) reflects the current sync state.
+
+## Coverage
+
+- [ ] All modified `.ai/` files are covered by a validation check
+  (see `modules/validation.md`).
+- [ ] No new `.ai/` path was added without a corresponding entry in the
+  boundary manifest (`ai-catapult-init/templates/boundary-manifest.json`).

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/observability/conventions.md

@@ -0,0 +1,35 @@
+# Observability Conventions
+
+**ADR:** ADR-0005
+**Generated by:** ai-catapult-init
+
+These conventions define how logging and tracing are recorded for AI-assisted
+work in this repository. They are generated conventions, not live metering:
+token-cost and trajectory metering execute out-of-band and results are recorded
+as evidence; CI validates only that this file and the audit checklist exist.
+
+## Logging conventions
+
+- **Structured JSON** for all agent-emitted log entries.
+- **Required fields per log entry:** `timestamp` (ISO-8601), `agent_id`,
+  `correlation_id`, `level` (`info` | `warn` | `error`), `message`.
+- **Optional fields:** `task_id`, `file_path`, `token_count`, `model_id`.
+- Log files are written to `.ai/drift/` (drift/audit logs) or to the
+  calling host's log sink. Never committed to the repository.
+
+## Trace conventions
+
+- Each task chain carries a single `correlation_id` (UUID v4) from first
+  agent to last.
+- Trace entries are appended to `.ai/drift/last-generation.json` during
+  scaffold generation.
+- Trajectory audits (sequence of agent actions) are recorded per-PR as
+  evidence in the PR description, not as committed artifacts.
+
+## Token-cost conventions
+
+- Token counts are recorded as `token_count` in log entries when available.
+- The audit checklist (`.ai/observability/audit-checklist.md`) is the
+  canonical reference for what must be measured and where results land.
+- No CI gate enforces token budgets in this iteration; the gate enforces
+  only that conventions and checklist files exist.

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/phases/01-discover-decide/status.json

@@ -0,0 +1,16 @@
+{
+  "schema_version": "1.0",
+  "workflow_id": "init-ai-repo",
+  "phase_id": "01-discover-decide",
+  "title": "Discover & Decide",
+  "required": true,
+  "status": "pending",
+  "inputs": [".ai/matrix.json"],
+  "outputs": [
+    ".ai/matrix.json",
+    ".ai/init/repo-profile.json",
+    ".ai/init/sdlc-path.md"
+  ],
+  "evidence": null,
+  "next_actions": ["Run ai-catapult-init phase 01 to profile this repo."]
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/phases/02-govern-plan/status.json

@@ -0,0 +1,15 @@
+{
+  "schema_version": "1.0",
+  "workflow_id": "init-ai-repo",
+  "phase_id": "02-govern-plan",
+  "title": "Govern & Plan",
+  "required": true,
+  "status": "pending",
+  "inputs": [".ai/init/repo-profile.json", ".ai/init/sdlc-path.md"],
+  "outputs": [
+    "docs/architecture/adr/",
+    ".ai/policies/model-routing.json"
+  ],
+  "evidence": null,
+  "next_actions": ["Complete phase 01 first."]
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/phases/03-configure-generate/status.json

@@ -0,0 +1,22 @@
+{
+  "schema_version": "1.0",
+  "workflow_id": "init-ai-repo",
+  "phase_id": "03-configure-generate",
+  "title": "Configure & Generate",
+  "required": true,
+  "status": "pending",
+  "inputs": [
+    ".ai/matrix.json",
+    ".ai/policies/model-routing.json",
+    "docs/architecture/adr/"
+  ],
+  "outputs": [
+    ".ai/traceability/graph.json",
+    ".ai/workflows/repo-workflow.json",
+    "AGENTS.md",
+    ".rules.ts",
+    "prek.toml"
+  ],
+  "evidence": null,
+  "next_actions": ["Complete phases 01 and 02 first."]
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/phases/04-validate-handoff/status.json

@@ -0,0 +1,18 @@
+{
+  "schema_version": "1.0",
+  "workflow_id": "init-ai-repo",
+  "phase_id": "04-validate-handoff",
+  "title": "Validate & Handoff",
+  "required": true,
+  "status": "pending",
+  "inputs": [
+    ".ai/traceability/graph.json",
+    ".ai/workflows/repo-workflow.json"
+  ],
+  "outputs": [
+    ".ai/handoff/init-ai-repo-handoff.md",
+    ".ai/traceability/validation-report.md"
+  ],
+  "evidence": null,
+  "next_actions": ["Complete phases 01, 02, and 03 first."]
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/policies/model-routing.json

@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.0",
+  "description": "Provider-neutral model-routing policy (ADR-0003). Task classes map to portable tiers; host_aliases bind tiers to host model names per provider. Host model names are illustrative examples — replace them with the model IDs your provider/CLI exposes at deployment time.",
+  "tiers": ["frontier", "mid", "cheap"],
+  "task_classes": {
+    "requirements": "frontier",
+    "architecture": "frontier",
+    "initial-implementation": "frontier",
+    "hard-verification": "frontier",
+    "standard-implementation": "mid",
+    "planning": "mid",
+    "test-generation": "cheap",
+    "first-pass-code-review": "cheap",
+    "ci-monitoring": "cheap",
+    "lookups": "cheap"
+  },
+  "host_aliases": {
+    "claude": {
+      "frontier": "opus",
+      "mid": "sonnet",
+      "cheap": "haiku"
+    },
+    "codex": {
+      "frontier": "o3",
+      "mid": "o4-mini",
+      "cheap": "gpt-4o-mini"
+    }
+  }
+}

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/reviews/ai-failure-modes.md

@@ -0,0 +1,42 @@
+# AI Failure-Mode Review Checklist
+
+**Spec:** §4.B
+**Generated by:** ai-catapult-init
+
+Use this checklist when reviewing any PR that contains AI-authored code.
+Mark each item as addressed or N/A before approving.
+
+## Hallucinated dependencies
+
+- [ ] All imported packages/modules exist in the package manifest (package.json,
+  pyproject.toml, Cargo.toml, etc.).
+- [ ] No import references a package name that looks plausible but is not
+  declared — verify with the lock file.
+
+## Slopsquatting / typosquatting
+
+- [ ] Package names match official registries exactly (check npm, PyPI, crates.io).
+- [ ] No package name is a one-character-off variant of a popular package.
+
+## Inadequate error handling
+
+- [ ] Every external call (network, filesystem, subprocess) has explicit error
+  handling or is documented as intentionally fail-fast.
+- [ ] Error messages include enough context to diagnose the failure without
+  reading source code.
+- [ ] No bare `catch` / `except Exception` / `recover()` swallows errors silently.
+
+## "Looks-right" / subtle correctness gaps
+
+- [ ] Off-by-one boundaries (array indices, pagination cursors, date ranges)
+  are covered by at least one test.
+- [ ] Concurrency assumptions (shared state, ordering guarantees) are documented
+  or guarded by a test.
+- [ ] Any cryptographic or security-sensitive code was reviewed by a human, not
+  only by an agent.
+
+## Scope creep
+
+- [ ] The PR diff touches only files named in the task description or acceptance
+  criteria (Karpathy Rule 3 — Surgical Changes).
+- [ ] No new abstraction was introduced for a pattern that exists exactly once.

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/rules/security.md

@@ -0,0 +1,38 @@
+# Security Guardrails
+
+**Generated by:** ai-catapult-init
+**Scope:** All agents operating in this repository.
+
+These are baseline security rules. Extend this file with repo-specific constraints
+after scaffolding.
+
+## Secrets and credentials
+
+- Never commit secrets, API keys, tokens, or credentials to the repository.
+- Never log secret values, even at debug level.
+- Use environment variables or a secrets manager for all credentials.
+- Patterns that must trigger a hard stop: `sk-`, `ghp_`, `github_pat_`,
+  PEM private-key headers (BEGIN … PRIVATE KEY), `AKIA` (AWS access key prefix).
+
+## Input validation
+
+- All external inputs (HTTP request bodies, CLI args, environment variables,
+  file contents) must be validated before use.
+- String inputs used in SQL, shell commands, or file paths must be sanitised
+  or parameterised — never interpolated directly.
+
+## Dependency hygiene
+
+- New dependencies must be pinned to an exact version in the lock file.
+- Dependencies must be sourced from official registries only.
+- Before adding a new dependency, verify the package name matches the official
+  registry exactly (guard against typosquatting).
+
+## Agent-specific rules
+
+- Agents must not execute shell commands that were constructed from
+  unvalidated external input.
+- Agents must not write files outside the repository root without explicit
+  user confirmation.
+- Agents must not make outbound network calls to undeclared hosts; declared
+  hosts are listed in `.ai/mcp/registry.json`.

package/dist/codex-plugin/skills/ai-catapult-init/templates/dot-ai/rules/technical-bounds.md

@@ -0,0 +1,38 @@
+# Technical Bounds
+
+**Generated by:** ai-catapult-init
+**Scope:** All agents operating in this repository.
+
+These are baseline technical-bounds rules. Extend this file with repo-specific
+constraints (language versions, framework choices, architectural boundaries)
+after scaffolding.
+
+## Architectural boundaries
+
+- Dependencies must only flow inward: domain ← application ← infrastructure.
+  Infrastructure layers must not import from the domain layer directly.
+- Route handlers must not import from the data layer directly; all data access
+  goes through a service layer.
+- Circular imports between modules are prohibited.
+
+## Code quality floor
+
+- Functions must not exceed 40 lines. Extract logical sections into named helpers.
+- Tests must follow Arrange-Act-Assert with one assertion group per test.
+- Source files must use kebab-case. Test files must end in `.test.ts` or `.spec.ts`.
+
+## AI scaffold integrity
+
+- The `.ai/` directory is agent-managed governance surface. Do not edit files
+  under `.ai/` manually unless you are updating a human-override file under
+  `.memory/human-override/`.
+- `.memory/human-override/` is terminal priority. Its contents are never
+  overwritten by sync or scaffold runs.
+- `inherited_assets` listed in `.ai/matrix.json` are propagated by physical
+  copy only; symlinks and git submodules are not permitted as sync modes.
+
+## Language and runtime (placeholder — fill in post-scaffold)
+
+- **Language version:** (e.g. Node 20 LTS, Python 3.12, Go 1.22)
+- **Framework:** (e.g. Express 4, FastAPI 0.111, Gin 1.9)
+- **Test runner:** (e.g. Vitest, pytest, go test)