ai-engineering-loop 1.0.12 → 1.0.13

package/.agents/judge.md

@@ -14,6 +14,10 @@ Finish in at most 4 tool calls, then emit the verdict. Read the Finding Ledger a
 
 Use only paths in the spawn prompt: Goal Contract, verification evidence, Finding Ledger. Ignore Maker optimism and reviewer tone. Disposition never overrides Validity plus Severity.
 
+AC source is the Goal Contract **file** only. Chat `setuju` and the parent transcript are not AC. Do not PASS because the parent agreed in chat. `CONTEXT_ISOLATION_ONLY` does not relax this.
+
+ITERATE if verification is missing, vague, non-zero, proves a different artifact than the AC names, or is only a source grep.
+
 ## Axes
 
 Do not merge Spec and Standards into one ranking.

package/.agents/workflows/ai-engineering-loop.md

@@ -5,7 +5,7 @@ description: Run the AI Engineering Loop on Antigravity (init, status, refresh,
 
 Follow `policies/review-budget.md`. Parent is Maker plus orchestrator. Do not use `browser_subagent`.
 
-Stage 1: grill if the task is ambiguous (`core/grill-policy.md`), then freeze the Goal Contract. On `adapter_type: dot`, that grill includes `task-impact-inquiry` (Antigravity skill under `~/.gemini/config/skills/`); do not run a second interview. Use `.ai-engineering-loop/glossary.md`. Name test seams. Maker: TDD at those seams (`policies/tdd-policy.md`). Bugs: red repro first (`core/root-cause-analysis.md`). Mid-loop stop: `core/handoff-policy.md`.
+Stage 1: if the user asks for ideas, list a short menu and wait; do not implement. Grill if the task is ambiguous (`core/grill-policy.md`), then freeze the Goal Contract file. Chat agreement is not freeze. On `adapter_type: dot`, that grill includes `task-impact-inquiry` (Antigravity skill under `~/.gemini/config/skills/`); do not run a second interview. Use `.ai-engineering-loop/glossary.md`. Name test seams. Maker: TDD at those seams (`policies/tdd-policy.md`). Bugs: red repro first (`core/root-cause-analysis.md`). Mid-loop stop: `core/handoff-policy.md`.
 
 If `invoke_subagent` (or Task) exists, spawn `devil-advocate` then `judge` as siblings. Wait for each child. Do not run them in the background. Use `general-purpose` only if the named type is rejected.
 

package/.claude/agents/judge.md

@@ -15,6 +15,10 @@ Finish in at most 4 tool calls, then emit the verdict. Read the Finding Ledger a
 
 Use only paths in the spawn prompt: Goal Contract, verification evidence, Finding Ledger. Ignore Maker optimism and reviewer tone. Disposition never overrides Validity plus Severity.
 
+AC source is the Goal Contract **file** only. Chat `setuju` and the parent transcript are not AC. Do not PASS because the parent agreed in chat. `CONTEXT_ISOLATION_ONLY` does not relax this.
+
+ITERATE if verification is missing, vague, non-zero, proves a different artifact than the AC names, or is only a source grep.
+
 ## Axes
 
 Do not merge Spec and Standards into one ranking.

package/.claude/skills/ai-engineering-loop/SKILL.md

@@ -32,7 +32,7 @@ Claude Code talks to strict proxies (including Kiro). Follow this exactly:
 Parent session is Maker plus orchestrator. Spawn Devil's Advocate and Judge as **siblings**, not nested.
 
 1. Stage 0: `npx ai-engineering-loop sync-hosts` then `npx ai-engineering-loop status` (init or refresh if missing or stale). Read `.ai-engineering-loop/glossary.md`. If sync-hosts copied files, tell the user a new session is needed for updated skill text; keep going with this session.
-2. Stage 1: Goal Contract (`core/goal-contract.md`). If the task is ambiguous and the user can answer, grill first (`core/grill-policy.md`): design tree, recommended answers, do not ask look-up facts. Skip grill if the contract is already frozen or the user waived it. On `adapter_type: dot`, that grill includes the four-pillar blast radius (state, sibling, approval, queues). Do not run a second interview. Freeze before any production edit. Name test seams. Use glossary terms.
+2. Stage 1: Goal Contract (`core/goal-contract.md`). If the user asks for ideas, list a short menu and wait; do not implement. If the task is ambiguous and the user can answer, grill first (`core/grill-policy.md`): design tree, recommended answers, do not ask look-up facts. Skip grill if the contract is already frozen or the user waived it. On `adapter_type: dot`, that grill includes the four-pillar blast radius (state, sibling, approval, queues). Do not run a second interview. Chat agreement is not freeze: every user-visible decision must be a numbered AC in the Goal Contract file. Freeze before any production edit. Name test seams. Use glossary terms.
 3. Stages 2-4: Maker in the parent. Bugs: red repro first (`core/root-cause-analysis.md`). Features: TDD at named seams (`policies/tdd-policy.md`). Surgical diff.
 4. Stage 5: run commands from `.ai-engineering-loop/verification.md`. Keep command, exit code, stdout, test counts. Vague "seems green" is invalid.
 5. Write artifacts, then spawn. Before Devil's Advocate:

package/.gemini/skills/ai-engineering-loop/SKILL.md

@@ -25,7 +25,7 @@ Canonical mode ids: `TRUE_INDEPENDENT_AGENT`, `ISOLATED_AGENT_INSTANCE`, `FRESH_
 ## Loop
 
 1. Stage 0: `npx ai-engineering-loop sync-hosts` then `npx ai-engineering-loop status` (init or refresh if missing or stale). Read `.ai-engineering-loop/glossary.md`. If sync-hosts copied files, tell the user a new session is needed for updated skill text; keep going with this session.
-2. Stage 1: Goal Contract (`core/goal-contract.md`). If the task is ambiguous and the user can answer, grill first (`core/grill-policy.md`): design tree, recommended answers, do not ask look-up facts. Skip grill if the contract is already frozen or the user waived it. On `adapter_type: dot`, that grill includes `task-impact-inquiry` (this host: `~/.gemini/config/skills/task-impact-inquiry`); do not run a second interview. Freeze before any production edit. Name test seams. Use glossary terms.
+2. Stage 1: Goal Contract (`core/goal-contract.md`). If the user asks for ideas, list a short menu and wait; do not implement. If the task is ambiguous and the user can answer, grill first (`core/grill-policy.md`): design tree, recommended answers, do not ask look-up facts. Skip grill if the contract is already frozen or the user waived it. On `adapter_type: dot`, that grill includes `task-impact-inquiry` (this host: `~/.gemini/config/skills/task-impact-inquiry`); do not run a second interview. Chat agreement is not freeze: every user-visible decision must be a numbered AC in the Goal Contract file. Freeze before any production edit. Name test seams. Use glossary terms.
 3. Stages 2-4: Maker in the parent. Bugs: red repro first (`core/root-cause-analysis.md`). Features: TDD at named seams (`policies/tdd-policy.md`). Surgical diff.
 4. Stage 5: run commands from `.ai-engineering-loop/verification.md`. Keep command, exit code, stdout, test counts. Vague "seems green" is invalid.
 5. Write artifacts, then spawn. Before Devil's Advocate:

package/.grok/agents/judge.md

@@ -16,6 +16,10 @@ Finish in at most 4 tool calls, then emit the verdict. Read the Finding Ledger a
 
 Use only paths in the spawn prompt: Goal Contract, verification evidence, Finding Ledger. Ignore Maker optimism and reviewer tone. Disposition never overrides Validity plus Severity.
 
+AC source is the Goal Contract **file** only. Chat `setuju` and the parent transcript are not AC. Do not PASS because the parent agreed in chat. `CONTEXT_ISOLATION_ONLY` does not relax this.
+
+ITERATE if verification is missing, vague, non-zero, proves a different artifact than the AC names, or is only a source grep.
+
 ## Axes
 
 Do not merge Spec and Standards into one ranking.

package/.grok/skills/ai-engineering-loop/SKILL.md

@@ -45,7 +45,7 @@ Run `npx ai-engineering-loop <command>` in the target repo. Do not commit unless
 ### `/ai-engineering-loop [task]`
 
 1. Stage 0: `npx ai-engineering-loop sync-hosts` then `npx ai-engineering-loop status` (init/refresh if missing or stale). Read `.ai-engineering-loop/glossary.md`. If sync-hosts copied files, tell the user a new session is needed for updated skill text; keep going with this session.
-2. Stage 1: Goal Contract (`core/goal-contract.md`). If the task is ambiguous and the user can answer, grill first (`core/grill-policy.md`): design tree, recommended answers, do not ask look-up facts. Skip grill if the contract is already frozen or the user waived it. On `adapter_type: dot`, that grill includes the four-pillar blast radius (state, sibling, approval, queues). Do not run a second interview. Freeze before any production edit. Name test seams. Use glossary terms.
+2. Stage 1: Goal Contract (`core/goal-contract.md`). If the user asks for ideas, list a short menu and wait; do not implement. If the task is ambiguous and the user can answer, grill first (`core/grill-policy.md`): design tree, recommended answers, do not ask look-up facts. Skip grill if the contract is already frozen or the user waived it. On `adapter_type: dot`, that grill includes the four-pillar blast radius (state, sibling, approval, queues). Do not run a second interview. Chat agreement is not freeze: every user-visible decision must be a numbered AC in the Goal Contract file. Freeze before any production edit. Name test seams. Use glossary terms.
 3. Stages 2–4: Maker work in the **parent**. Bugs: red repro first (`core/root-cause-analysis.md`). Features: TDD at named seams (`policies/tdd-policy.md`). Surgical diff. Parent may be the Maker; do not spawn Maker as a child if you still need to spawn DA/Judge afterward from the same parent.
 4. Stage 5: run verification from `.ai-engineering-loop/verification.md`. Keep command, exit code, stdout, test counts. Vague "seems green" is invalid.
 5. Write artifacts to disk so children do not need parent chat:

package/README.md

@@ -6,7 +6,7 @@
 [![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](https://opensource.org/licenses/MIT)
 [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](https://github.com/egagofur/ai-engineering-loop/pulls)
 [![AI Engineering](https://img.shields.io/badge/AI-Engineering%20Loop-orange.svg)](https://github.com/egagofur/ai-engineering-loop)
-[![Release](https://img.shields.io/badge/release-v1.0.12-purple.svg)](https://github.com/egagofur/ai-engineering-loop/releases)
+[![Release](https://img.shields.io/badge/release-v1.0.13-purple.svg)](https://github.com/egagofur/ai-engineering-loop/releases)
 
 **A Reusable, Framework-Agnostic AI Engineering Operating System for Autonomous Coding Agents**
 
@@ -64,7 +64,7 @@ The 8-stage loop stays one OS. These techniques sit **inside** existing stages (
 
 | Stage | Technique | Spec |
 |---|---|---|
-| 1 | Grill until the design-tree frontier is empty, then freeze the Goal Contract. Skip if already frozen, waived, or headless with testable AC. | `core/grill-policy.md` |
+| 1 | Grill until the design-tree frontier is empty, then freeze the Goal Contract. Idea requests: menu, wait, then grill the pick. Chat `setuju` is not freeze; user-visible decisions must be numbered AC in the contract file. | `core/grill-policy.md` |
 | 1 | Ubiquitous language in `.ai-engineering-loop/glossary.md`; load-bearing choices in `.ai-engineering-loop/adrs/` | `core/repo-config-schema.md` |
 | 2 | Bugs: red repro → minimise → hypothesise → instrument → fix | `core/root-cause-analysis.md` |
 | 4–5 | Red-green at named **seams**; no implementation-coupled or tautological tests | `policies/tdd-policy.md` |

package/agents/shared/judge.body.md

@@ -8,6 +8,10 @@ Finish in at most 4 tool calls, then emit the verdict. Read the Finding Ledger a
 
 Use only paths in the spawn prompt: Goal Contract, verification evidence, Finding Ledger. Ignore Maker optimism and reviewer tone. Disposition never overrides Validity plus Severity.
 
+AC source is the Goal Contract **file** only. Chat `setuju` and the parent transcript are not AC. Do not PASS because the parent agreed in chat. `CONTEXT_ISOLATION_ONLY` does not relax this.
+
+ITERATE if verification is missing, vague, non-zero, proves a different artifact than the AC names, or is only a source grep.
+
 ## Axes
 
 Do not merge Spec and Standards into one ranking.

package/bin/ai-engineering-loop.js

@@ -21,7 +21,7 @@ const {
   formatHostSyncReport
 } = require('../lib/sync-hosts.js');
 
-const VERSION = '1.0.12';
+const VERSION = '1.0.13';
 const CWD = process.cwd();
 const CONTEXT_DIR = path.join(CWD, '.ai-engineering-loop');
 
@@ -275,7 +275,7 @@ function generateContextFiles(rootDir, discovery, trigger = 'init', impact = 'IN
 
   // 0. metadata.json (Baseline)
   const metadataJson = {
-    contextVersion: '1.0.12',
+    contextVersion: '1.0.13',
     generatedAt: new Date().toISOString(),
     repositoryRevision: currentRevision,
     projectProfile: discovery.profile,

package/core/goal-contract.md

@@ -77,6 +77,9 @@ Every Goal Contract MUST adhere to the following schema in Markdown or structure
    - Neither the Maker Agent nor the Devil's Advocate Agent may alter Acceptance Criteria during an iteration loop to make tests pass or bypass critique.
 3. **Contract Amendments**:
    - If during implementation a fundamental contradiction or impossible requirement is discovered, the agent must trigger **Human Escalation**. Only a human user may amend the Goal Contract.
+4. **Chat is not the contract**:
+   - Parent-transcript `setuju` does not freeze AC.
+   - Every user-visible grill decision (order of pages, enable flags, layout) MUST appear as AC-1..N in the contract file before Maker starts.
 
 ---
 
@@ -100,3 +103,5 @@ Every single item listed under `Acceptance Criteria` must map to at least one co
 - **The Parallel Glossary**: Using 20 words for a concept that already has a term in `glossary.md`.
 - **The Missing Constraint**: Failing to declare out-of-scope files, leading to arbitrary refactoring of adjacent legacy modules.
 - **The Self-Serving Goal**: Modifying acceptance criteria post-hoc when tests fail rather than fixing the underlying implementation.
+- **The Chat Contract**: Treating "setuju" in the parent transcript as AC. The file is the contract.
+- **The Wrong Artifact**: Tests pass on a `/tmp` build while the sample the user opens omits the feature.

package/core/grill-policy.md

@@ -21,6 +21,30 @@ Skip grill (write the Goal Contract from what is already known) when any of thes
 
 Do not interview the user for **facts** you can look up (files, scripts, types, git). Look them up. Grill only **decisions**.
 
+## Idea and menu requests
+
+If the user asks for ideas, a feature catalog, or "what should we add" without naming one task:
+
+1. Do not implement.
+2. Do not freeze a Goal Contract.
+3. List at most five options. Mark one recommended. Wait for a pick.
+4. After they pick, grill that one task, then freeze.
+
+`/ai-engineering-loop` on an idea request still stays this loop: menu, then grill. Do not switch to a parallel brainstorm product.
+
+## Freeze gate
+
+Chat `setuju`, `lanjut`, `ok`, or "looks good" is **not** a freeze.
+
+Before Maker starts:
+
+1. Every accepted grill decision that changes user-visible output is a numbered AC in the Goal Contract **file** (page order, enable flags, layout, copy, numbering).
+2. Each of those ACs names the artifact to inspect (sample path, command, seam).
+3. Write `.ai-engineering-loop/tasks/goal-contract.md` (or the path this repo uses). Show the AC list.
+4. Freeze only after that file exists and contains those ACs.
+
+If a decision was agreed in chat and is missing from the file, the contract is not frozen. Do not start Maker.
+
 ## DOT adapter (`adapter_type: dot`)
 
 On DOT repositories, grill is **one** session that includes the four-pillar blast radius from Antigravity skill `task-impact-inquiry` (`~/.gemini/config/skills/task-impact-inquiry/SKILL.md`). Do not run that skill as a second interview after grill.

package/core/judge-policy.md

@@ -52,13 +52,18 @@ The Judge renders decisions based strictly on **Validity + Severity**, then **re
   3. Zero open `VALID + BLOCKER` or `VALID + HIGH` findings.
   4. Any `INVALID` findings are formally dismissed with counter-evidence.
   5. Any `VALID + MEDIUM/LOW` findings are documented as tradeoffs.
+  6. AC source is **only** the Goal Contract file given to the Judge. Chat agreement is not an AC. `CONTEXT_ISOLATION_ONLY` does not relax this.
+  7. Evidence is for the artifact the AC names (sample path, seam, verification command). A `/tmp` build is not proof of a different user-facing file.
+  8. Source `grep` of implementation files is not AC proof (`policies/tdd-policy.md`).
 
 ---
 
 ### Verdict 2: `ITERATE`
 - **Conditions**:
-  1. One or more `VALID + BLOCKER` or `VALID + HIGH` findings exist.
-  2. Active iteration count $< \text{MAX\_ITERATIONS}$ (default 3).
+  1. One or more `VALID + BLOCKER` or `VALID + HIGH` findings exist (Spec, or Standards with `hardConvention: true`).
+  2. Active iteration count is below MAX_ITERATIONS (default 3).
+  3. Maker or verification cites chat agreement for behavior that is not an AC in the Goal Contract file.
+  4. Evidence is for the wrong artifact, is source-grep only, or does not map to written AC ids.
 - **Maker Directive**: The Maker must adopt the concrete alternative diff or provide an equivalent verified architectural resolution, authoring regression unit tests.
 
 ---

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ai-engineering-loop",
-  "version": "1.0.12",
+  "version": "1.0.13",
   "description": "A reusable, framework-agnostic AI Engineering Operating System for autonomous coding agents.",
   "main": "bin/ai-engineering-loop.js",
   "bin": {

package/policies/tdd-policy.md

@@ -25,6 +25,7 @@ The test reads like a specification of behavior at the seam. Names use `.ai-engi
 
 - **Implementation-coupled:** mocks internal collaborators, tests private methods, or asserts through a side channel (raw DB) instead of the seam.
 - **Tautological:** expected value is computed the same way as the code (`expect(add(a,b)).toBe(a+b)`).
+- **Source grep:** `grep -q 'featureFlag' src/file` is not a test of the AC. Prove behavior at the named seam or on the named artifact.
 - **Horizontal slicing:** all tests first, then all implementation.
 
 ## Evidence

package/tests/skill-host-compat.test.js

@@ -206,6 +206,33 @@ test('Host skills Stage 0 runs sync-hosts before status', () => {
   }
 });
 
+test('Grill freeze gate and idea menu are in the loop, not a parallel product', () => {
+  const grill = readRepo('core/grill-policy.md');
+  assert.match(grill, /Idea and menu requests/);
+  assert.match(grill, /Do not implement/);
+  assert.match(grill, /is \*\*not\*\* a freeze/);
+  assert.match(grill, /numbered AC/);
+  const contract = readRepo('core/goal-contract.md');
+  assert.match(contract, /Chat is not the contract/);
+  assert.match(contract, /The Chat Contract/);
+  assert.match(contract, /The Wrong Artifact/);
+  const judge = readRepo('agents/shared/judge.body.md');
+  assert.match(judge, /Goal Contract \*\*file\*\* only/);
+  assert.match(judge, /source grep/);
+  const tdd = readRepo('policies/tdd-policy.md');
+  assert.match(tdd, /Source grep/);
+  for (const rel of [
+    '.claude/skills/ai-engineering-loop/SKILL.md',
+    '.grok/skills/ai-engineering-loop/SKILL.md',
+    '.gemini/skills/ai-engineering-loop/SKILL.md',
+    '.agents/workflows/ai-engineering-loop.md'
+  ]) {
+    const text = readRepo(rel);
+    assert.match(text, /list a short menu and wait/, rel);
+    assert.match(text, /Chat agreement is not freeze/, rel);
+  }
+});
+
 test('Host skills absorb grill, TDD, glossary, and two-axis review without splitting the loop', () => {
   for (const rel of [
     '.claude/skills/ai-engineering-loop/SKILL.md',