anti-slop-engineering 1.6.0 → 1.7.0

package/.skills.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://skills.sh/schema.json",
   "name": "anti-slop-engineering",
-  "version": "1.6.0",
+  "version": "1.7.0",
   "description": "An Engineering Discipline Playbook & Guard System for AI Coding Agents. Enforces Google SRE, Clean-Room Senior Dev Ladders, and Rust/Go Microservices.",
   "repository": "https://github.com/imMamdouhaboammar/anti-slop-engineering",
   "author": "Mamdouh Aboammar",

package/README.md

@@ -12,7 +12,7 @@
 [![Skills.sh](https://img.shields.io/badge/Skills.sh-Compatible-000000?style=flat-square&logo=vercel&logoColor=white)](https://skills.sh)
 [![Claude Code](https://img.shields.io/badge/Claude%20Code-Certified%20Skill-D97706?style=flat-square&logo=anthropic&logoColor=white)](https://claude.ai)
 
-[Install](#install) · [What it catches](#what-it-catches) · [Engines](#engines) · [Decision Guard](#decision-guard) · [Root-Fix Gate](#root-fix-gate) · [Future-Scale Gate](#future-scale-gate) · [Paranoid Architect](#the-paranoid-principal-architect) · [Forensic Bug Hunter](#forensic-bug-hunter-scanner) · [Execution Guard](#in-flight-execution-guard) · [Install Anti-Slop](#install-anti-slop-oxlint--skill) · [Agent skill](#agent-skill) · [Anti-pattern catalog](#anti-pattern-catalog-217-patterns)
+[Install](#install) · [What it catches](#what-it-catches) · [Engines](#engines) · [Decision Guard](#decision-guard) · [Root-Fix Gate](#root-fix-gate) · [Future-Scale Gate](#future-scale-gate) · [Paranoid Architect](#the-paranoid-principal-architect) · [Forensic Bug Hunter](#forensic-bug-hunter-scanner) · [Execution Guard](#in-flight-execution-guard) · [AST Slop Gate](#type-level--ast-slop-gate) · [Install Anti-Slop](#install-anti-slop-oxlint--skill) · [Agent skill](#agent-skill) · [Anti-pattern catalog](#anti-pattern-catalog-217-patterns)
 
 </div>
 
@@ -285,6 +285,22 @@ bunx anti-slop-engineering paranoid audit skills/paranoid-principal-architect/ex
 
 ---
 
+## Observability & SLO Architect (Google Monarch & Dapper)
+
+The [Observability & SLO Architect](skills/observability-and-slo-architect/SKILL.md) skill transforms observability from passive `logger.error` statements into a proactive telemetry architecture following Google Monarch & Dapper specifications:
+
+1. **OpenTelemetry by Default:** Binds every network I/O, database query, cache fetch, and queue operation to standard Spans with unbroken W3C `traceparent` (`00-<traceId>-<spanId>-<flags>`) and `correlation_id` context propagation.
+2. **Google Monarch Low-Cardinality Discipline:** Strictly separates low-cardinality time-series metrics ($\prod |L_i| \le 1,000$) from high-cardinality traces and logs. Collapses unmatched 404 paths to `"__unmatched__"` to neutralize TSDB cardinality denial-of-service attacks.
+3. **Automated RED & USE Metrics:** Automatically emits Rate, Errors, and Duration (Histograms with P50/P95/P99 quantiles and Trace Exemplars) for endpoints, and Utilization, Saturation, and Errors for resources (CPU, Memory, DB Connection Pools, Worker Queues).
+4. **SLI/SLO-Driven Alerts:** Bans non-impact threshold alerts (e.g. CPU > 80%). Production alerts are gated strictly on Google SRE Multi-Window Multi-Burn-Rate Error Budget policies (14.4x 1h/5m for paging; 6.0x 6h/30m for ticketing).
+
+```bash
+# Audit an Observability & SLO record and scan source files for cardinality or tracing hazards:
+bunx anti-slop-engineering observability audit skills/observability-and-slo-architect/examples/observability-slo-record.json --source skills/observability-and-slo-architect/examples/dapper-monarch-telemetry-pipeline.ts --json
+```
+
+---
+
 ## Forensic Bug Hunter Scanner
 
 Zero-trust static analysis scanner across 9 application stacks detecting booby traps, concurrency leaks, race conditions, memory leaks, and EDoS vulnerabilities:
@@ -302,6 +318,42 @@ Modular playbooks and architectural checklists are located in [`skills/paranoid-
 
 ---
 
+## Apple Craft & Interaction Physics
+
+The [Apple Craft & Interaction Physics module](skills/apple-craft-and-interaction-physics/SKILL.md) elevates client user interfaces from baseline hygiene to Apple HIG design engineering excellence. It enforces four physical pillars:
+
+1. **Exhaustive UI State Matrix:** Eliminates boolean soup in favor of typed Discriminated Union state machines handling all 8 operational states (`loading_skeleton`, `empty`, `partial_error`, `offline`, `optimistic_rollback`, `loaded_fresh`, `revalidating_stale`, and `terminal_error`) with compile-time exhaustiveness.
+2. **Zero Layout Shift (CLS = 0.000):** Strictly pre-reserves dynamic element geometry, skeleton dimensions, media aspect ratios, and stable scrollbar gutters.
+3. **Interruptible Physics & Velocity Continuity:** Mandates mass-spring-damper motion ($F = -kx - cv$) with immediate gesture interruption, momentum handover ($v_0$), compositor-only execution, and epsilon termination ($\epsilon \le 10^{-4}$).
+4. **Keyboard & Focus Mastery:** Guarantees full keyboard operability, high-contrast `:focus-visible` rings with offset (bans naked `outline: none`), modal focus trapping with return restoration, and polite ARIA live regions.
+
+```bash
+# Audit an assessment record and scan component for layout thrashing, transition:all, or bare outline:none:
+node bin/cli.js apple-craft audit skills/apple-craft-and-interaction-physics/examples/apple-craft-record.json --source skills/apple-craft-and-interaction-physics/examples/interactive-craft-component.ts --json
+
+# Package CLI invocation:
+bunx anti-slop-engineering apple-craft audit path/to/record.json --json
+```
+
+---
+
+## Type-Level & AST Slop Gate
+
+Prevents evidence fabrication, quadratic reductions, eager array allocations, and test-oracle erosion in TypeScript and JavaScript. Runs across two complementary tiers:
+
+```bash
+# Tier 1: Zero-dependency pre-commit diff scan (<100ms):
+bunx anti-slop-engineering ast --base HEAD
+
+# Direct file or directory sweep:
+bunx anti-slop-engineering ast src/ --json
+
+# Strict gate (exit code 2 on blockers):
+bunx anti-slop-engineering ast --base origin/main --strict
+```
+
+---
+
 ## Install Anti-Slop (Oxlint & Skill)
 
 Opinionated anti-slop Oxlint lint rules and agent skill for TypeScript and JavaScript codebases. Catches runtime type assertion risks, unconstrained object parameters, type widening, and module mocking leaks at lint-time:
@@ -310,16 +362,17 @@ Opinionated anti-slop Oxlint lint rules and agent skill for TypeScript and JavaS
 
 Invoke `/install-anti-slop` in any supported AI coding agent (Claude Code, Antigravity, Gemini CLI, Cursor, Windsurf) to automatically inspect the target repository, detect package managers, vendor the AST plugins, and configure `oxlint.config.ts` or `.oxlintrc.json`.
 
-### CLI Command
+### Install & Update Vendored Oxlint Plugin
 
 ```bash
 # Install Oxlint plugin directly into target repository (creates tools/oxlint/anti-slop/):
 bunx anti-slop-engineering install-oxlint
-# Or via npx:
-npx anti-slop-engineering install-oxlint
+
+# Reconcile and update vendored rules while preserving local custom modifications:
+bunx anti-slop-engineering update-oxlint tools/oxlint/anti-slop --apply
 ```
 
-Follow the procedure in [install-anti-slop](skills/install-anti-slop/SKILL.md) to register the bundled plugins (`anti-slop` and optional `anti-slop-effect`) directly into `oxlint.config.ts` or `.oxlintrc.json`:
+Register the generic and optional Effect plugins in `oxlint.config.ts` or `.oxlintrc.json`:
 
 ```ts
 // oxlint.config.ts or .oxlintrc.json
@@ -332,9 +385,13 @@ export default {
     "tools/oxlint/anti-slop/**"
   ],
   jsPlugins: [
-    { name: "anti-slop", specifier: "./tools/oxlint/anti-slop/index.ts" }
+    { name: "anti-slop", specifier: "./tools/oxlint/anti-slop/index.ts" },
+    { name: "anti-slop-effect", specifier: "./tools/oxlint/anti-slop/effect/index.ts" }
   ],
   rules: {
+    "oxc/no-accumulating-spread": "error",
+    "anti-slop/no-array-filter-map": "error",
+    "anti-slop/no-reduce-accumulator-copy": "error",
     "anti-slop/no-chained-type-assertions": "error",
     "anti-slop/no-conditional-empty-object-spread": "error",
     "anti-slop/no-known-value-widening": "error",
@@ -349,7 +406,13 @@ export default {
     "anti-slop/no-unknown-type-aliases": "error",
     "anti-slop/no-unsafe-dictionary-type": "error",
     "anti-slop/no-widen-then-assert": "error",
-    "anti-slop/require-safety-comment-for-type-assertion": "error"
+    "anti-slop/require-readable-spacing": "error",
+    "anti-slop/require-safety-comment-for-type-assertion": "error",
+    "anti-slop-effect/no-manual-effect-error-tag": "error",
+    "anti-slop-effect/no-manual-tag-comparison": "error",
+    "anti-slop-effect/no-manual-tagged-construction": "error",
+    "anti-slop-effect/no-service-constructor-imports": "error",
+    "anti-slop-effect/prefer-effect-match": "error"
   }
 };
 ```
@@ -382,6 +445,74 @@ bunx anti-slop-engineering cases
 
 ---
 
+## Cognitive Bandwidth & Attention Economy Governor
+
+Inspired by human attention scarcity, scannability science, and executive cognitive load reduction (attention-span & i-have-adhd), the Attention Governor statically audits agent responses, PR descriptions, standup briefs, and multi-agent TOON handoffs against 5 deterministic cognitive invariants:
+
+| Metric | Target | Failure / Blocker |
+| --- | --- | --- |
+| **Terminal Blocking Placement ($\mathcal{B}_{pos}$)** | Last block | Question buried mid-reply before trailing status prose |
+| **Line-1 Skimmer Flag** | Explicit flag on line 1 | Asks in long replies ($\ge 40$ words) without a line-1 prompt |
+| **Deliverable Purity ($\mathcal{P}_{deliv}$)** | 100% clean payload | Opener wrappers (`Here is...`), closer offers (`Hope this helps!`), and lead-ins |
+| **Time-to-Point ($TTP$)** | $\le 20$ words | Answers buried behind conversational preamble |
+| **Max Wall Words ($W_{max}$)** | $\le 60$ words | Dense, anchor-free prose paragraphs causing cognitive bounce |
+| **Working Memory Cap ($\mathcal{M}_{cap}$)** | $\le 5$ items | Unchunked flat lists exceeding working memory capacity |
+| **Non-Regression Gate** | 100% preservation | Dropped numeric thresholds, scoped conditions, or safety caveats |
+
+```bash
+# Audit markdown documentation for cognitive scannability:
+bunx anti-slop-engineering attention --file docs/rfc.md --json
+
+# Verify 100% deliverable purity on generated commit message or PR body:
+bunx anti-slop-engineering attention --text "$COMMIT_MSG" --check-deliverable
+
+# Audit git diff additions across documentation:
+bunx anti-slop-engineering attention --base HEAD
+```
+
+---
+
+## Tagore Engineering Discourse & Substance Guard
+
+Inspired by Rabindranath Tagore's literary philosophy of restraint, empirical specificity, and authentic human voice over statistical predictability and mechanical puffery, Tagore Guard audits PR descriptions, commit messages, ADRs, documentation, and agent reasoning traces against a dual-direction attack:
+
+1. **Scrub the Tells:** Eliminates 29 cataloged AI tells (significance inflation, copula avoidance, superficial -ing chains, rule-of-three, em-dash addiction, and marketing hype).
+2. **Inject the Substance:** Mandates active engineering agency, empirical measurements, and explicit operational trade-offs/failure modes.
+
+### 8-Dimension Scoring Rubric
+
+$$\text{Total Score} \ge 56/80 \quad \land \quad \text{Mechanics} \ge 35/50 \quad \land \quad \text{Substance} \ge 21/30$$
+
+| Category | Dimension | Max | Floor | Focus |
+| --- | --- | :---: | :---: | --- |
+| **Mechanics** | Directness | 10 | — | Immediate technical statements; zero announcements or throat-clearing |
+| | Rhythm | 10 | — | Varied sentence length cadence ($\text{stddev} \ge 5.0$); no em-dash crutches |
+| | Trust | 10 | — | Zero affordance narration, zero hand-holding, zero servile hedging |
+| | Authenticity | 10 | — | Free of AI buzzwords (`delve`, `tapestry`, `testament`), copula avoidance, and triads |
+| | Density | 10 | — | Free of filler phrases (`in order to`), bolding abuse, and passive voice ($< 35\%$) |
+| *Subtotal* | **Mechanics Floor** | **50** | **35** | *Substance cannot mask slop-shaped mechanics* |
+| **Substance** | Specificity | 10 | — | Empirical numbers, benchmark percentages, latencies, and exact file paths |
+| | Restraint | 10 | — | Achievements sized at actual technical magnitude; zero promotional puffery |
+| | Technical Voice | 10 | — | Explicit trade-offs, concurrency race conditions, and failure modes |
+| *Subtotal* | **Substance Floor** | **30** | **21** | *Mechanics cannot mask sterile, soulless wire-copy* |
+| **Total** | **Pass Gate** | **80** | **56** | *Both floors + $\ge 56$ required for `PROCEED`* |
+
+```bash
+# Audit inline text with suggested deslopping rewrites:
+bunx anti-slop-engineering tagore --text "$PR_BODY" --suggest
+
+# Audit markdown documentation or ADR file:
+bunx anti-slop-engineering tagore --file docs/adr/ADR-007.md --json
+
+# Calibrate repository voice profile against maintainer ground truth:
+bunx anti-slop-engineering tagore --calibrate README.md
+
+# Inspect active repository voice profile:
+bunx anti-slop-engineering tagore --profile
+```
+
+---
+
 ## Agent skill
 
 The agent skill wires Anti-Slop Engineering into your AI coding agent's context. Once installed, code changes are guided by the Seven Gates, the 217-pattern anti-pattern catalog, and the Google SRE enforcement rules.
@@ -424,7 +555,7 @@ Spotted a recurring failure mode from an AI agent — test tampering, scope cree
 2. Document symptom, root cause, and remediation using the 5-part catalog schema.
 3. Update [`SKILL.md`](SKILL.md) with explicit agent rules.
 4. Add heuristics to `scripts/diff_guard.py` with unit tests.
-5. Run `make check` — all 44 tests must stay green.
+5. Run `make check-all` — all unit and polyglot tests (458 Python, 21 Rust, 14 Go, 49 Node/Bun) and linters must stay green.
 
 ```bash
 npx anti-slop-engineering contribute

package/SKILL.md

@@ -4,7 +4,7 @@ description: Prevent, detect, and repair AI coding slop and dirty engineering in
 author: Mamdouh Aboammar <mamdouhfces1997@gmail.com>
 license: MIT
 metadata:
-  version: "1.6.0"
+  version: "1.7.0"
   focus: "engineering-discipline"
   repository: "https://github.com/imMamdouhaboammar/anti-slop-engineering"
 ---
@@ -41,6 +41,16 @@ metadata:
 16. **Root-Fix Gate for scattered symptom patches:** When a local behavior change spreads through controllers, views, endpoints or multiple layers, read [Root-Fix Gate](skills/root-fix-gate/SKILL.md). Trace the owner of the domain invariant, compare a coherent source correction with consumer workarounds, and inspect actual change paths. Do not assume the model owns every rule or that few files prove safety.
 17. **Future-Scale Gate for irreversible foundations:** Before locking in a core runtime, public contract, persistence model, or platform boundary for a long-lived product, read [Future-Scale Gate](skills/future-scale-gate/SKILL.md). Establish credible future operating scenarios, assess reversal cost and run a bounded evolution proof. Design the cheap necessary foundation now; defer speculative infrastructure with measurable revisit triggers. Lack of a present bottleneck does not disprove future architectural constraints.
 18. **Paranoid Principal Architect for 10M scale & zero-trust:** When designing system architectures, generating backend/frontend code, refactoring critical paths, conducting adversarial security reviews, or diagnosing scale bottlenecks, race conditions, memory leaks, and EDoS vulnerabilities, read [Paranoid Principal Architect](skills/paranoid-principal-architect/SKILL.md). Enforce the 10,000,000 Concurrent Users Axiom and Active Battlefield Zero-Trust mindset. Reject happy-path assumptions, unbounded async loops, hot keys, client authority, and unparsed inputs from line one.
+19. **Deterministic Simulation & Property Testing (MSR & AWS Rigor):** When verifying distributed consensus, stateful lifecycles, concurrency protocols, serialization codecs, or untrusted boundaries, read [Deterministic Simulation & Property Testing](skills/deterministic-simulation-and-property-testing/SKILL.md). Reject example-based test complacency: mandate Property-Based Testing (fast-check, Hypothesis, proptest) generating >= 1,000 inputs with automated shrinking to discover minimal failing counterexamples; mandate Deterministic Simulation Testing (DST) with a virtual clock and 64-bit reproducible seed (simulating packet drops, clock skews, and message reordering; zero unseeded `Math.random()` or wall-clock sleeps); enforce explicit State Transition Tables with impossible states made unrepresentable in the type system; and enforce Structure-Aware Fuzzing on all parsers and deserializers asserting crash freedom, bounded recursion (<= 16), and payload byte caps (<= 10MB).
+20. **Privacy & Data Lineage Gate (Apple Privacy & Meta Data Infra):** When designing user data architectures, processing PII/sensitive customer data, implementing GDPR/CCPA deletion lifecycles, or designing analytics/telemetry pipelines, read [Privacy & Data Lineage Gate](skills/privacy-and-data-lineage-gate/SKILL.md). Protect user data from the system itself: wrap all sensitive personal attributes in compiler-enforced branded Tainted PII types (`Redacted<T>`) with unredacted logging and serialization banned; mandate Cryptographic Erasure (Crypto-Shredding via KMS key-per-subject envelope encryption) ensuring account deletion instantaneously destroys the encryption key rendering distributed cold backups, append-only WALs, and multi-tier caches permanently unreadable; enforce Data Minimization & Mandatory Retention TTL by rejecting any table, document schema, or cache storing user data without an explicit purpose binding and automated TTL garbage collection; and maintain an audited Data Lineage DAG with telemetry egress strictly fenced against an allowlist and differential privacy ($\epsilon \le 1.0$).
+21. **Type-Level & AST Slop Gate (Oxlint & Strict AST Discipline):** When writing or auditing TypeScript/JavaScript code, refactoring contracts, or configuring linters, read [Type-Level & AST Slop Gate](skills/type-level-and-ast-slop-gate/SKILL.md). Enforce the 18 generic and 5 Effect AST rules: eliminate chained type assertions (`as unknown as T`), ungrounded assertions (`as T` without nearby `// SAFETY:` invariant justification), quadratic reducer accumulator copies, eager array `.filter().map()` chaining, conditional empty spreads `...(c ? { x } : {})`, and test-oracle erosion via module mocking (`vi.mock()`). Audit diffs with `bunx anti-slop-engineering ast --base HEAD` and vendor Oxlint plugins via `bunx anti-slop-engineering install-oxlint`.
+22. **API Ergonomics & Contract Governor (Microsoft TypeScript & Stripe DX):** When designing public SDKs, library interfaces, CLI commands, or internal module boundaries, read [API Ergonomics & Contract Governor](skills/api-ergonomics-and-contract-governor/SKILL.md). Enforce Pit-of-Success defaults (safe timeouts <=10s, automatic idempotent retries with full jitter, default bounded pagination), render illegal states unrepresentable via tagged discriminated unions and nominal branded types (`CustomerId`, `PaymentIntentId`), structure progressive disclosure across 3 tiers (1-liner common facade -> typed options bag -> raw transport/streaming power engine), and standardize all machine and network errors on RFC 9457 Problem Details with deterministic machine codes and remediation guidance. Audit contract records with `npx anti-slop-engineering contract audit <record.json> --json`.
+23. **UI Craftsmanship, Copywriting & WCAG 2.2 Contrast Discipline:** When generating or modifying frontend user interfaces, styling, components, or marketing/product copy, read [UI & Copywriting Discipline](skills/ui-and-copy-discipline/SKILL.md). Enforce the 5 Craftsmanship Standards (C-1 Intentionality, C-2 Functional Completeness, C-3 Content-Driven Composition, C-4 Resilience & WCAG 2.2 Contrast, C-5 Performance & Motion). All visual techniques must pass the Purpose Test. Low-contrast text (<4.5:1 for normal, <3:1 for large), uniform pill buttons on inputs, decorative comment banners (`// =====`), generic AI gradient cliches (`from-blue-500 via-purple-500 to-pink-500`), and AI marketing hyperbole ("Unleash the power of AI") are strictly flagged. Verify contrast with `bunx anti-slop-engineering contrast "#FFFFFF" "#1E293B"` or `bunx anti-slop-engineering contrast --scan src/`.
+24. **Apple Craft & Interaction Physics (Apple HIG & Design Engineering):** When building, refactoring, or auditing user interfaces, transitions, animations, or client state flows, read [Apple Craft & Interaction Physics](skills/apple-craft-and-interaction-physics/SKILL.md). Enforce the Four Physical Pillars: (1) Exhaustive UI State Matrix covering loading_skeleton, empty, partial_error, offline, and optimistic_rollback via Discriminated Unions with compile-time exhaustiveness; (2) Zero Cumulative Layout Shift (CLS = 0.000) via pre-reserved geometry for skeletons, images, dynamic error slots, and scrollbar-gutter: stable; (3) Interruptible Physics with velocity continuity ($F = -kx - cv$), immediate cancellation on user intent change, compositor-only transform/opacity, and epsilon-terminated rAF ($\epsilon \le 10^{-4}$); and (4) Keyboard & Focus Mastery with high-contrast :focus-visible rings (never unstyled outline: none), modal focus trap and restoration, roving tabindex for composite controls, and ARIA live regions. Audit records with `npx anti-slop-engineering apple-craft audit <record.json> --json`.
+25. **Observability & SLO Architect (Google Monarch & Dapper Telemetry):** When designing telemetry architectures, instrumenting APIs, background queues, outbox workers, or database queries, read [Observability & SLO Architect](skills/observability-and-slo-architect/SKILL.md). Transform observability into proactive engineering: enforce OpenTelemetry by default with unbroken W3C `traceparent` (`00-<trace_id>-<span_id>-<flags>`) and `correlation_id` across every synchronous RPC, message broker hop (Kafka, SQS, RabbitMQ, BullMQ), Transactional Outbox, and SQLcommenter database span; mandate Google Monarch stream pre-aggregation discipline by strictly banning dynamic identifiers (`user_id`, `request_id`, `order_id`, `email`, raw URLs) in metric labels ($\prod |L_i| \le 1,000$) and collapsing unmatched 404 routes to `"__unmatched__"`; measure latencies exclusively via explicit-bucket Histograms with Trace Exemplars (never Gauge averages); emit automated RED metrics (Rate, Errors, Duration) for endpoints and USE metrics (Utilization, Saturation, Errors) for resources; and ban non-impact threshold alerts (e.g. CPU > 80%), gating production alerts strictly on Google SRE Multi-Window Multi-Burn-Rate Error Budget policies (14.4x 1h/5m for paging; 6.0x 6h/30m for ticketing). Audit telemetry records with `npx anti-slop-engineering observability audit <record.json> [--source <file>] --json`.
+26. **Repo Memory & Invariant Steward (Architectural Memory & Zero-Drift Defense):** When designing architectures, conducting PR reviews, starting tasks at Gate 0, or evolving contracts, read [Repo Memory & Invariant Steward](skills/repo-memory-and-invariant-steward/SKILL.md). Prevent architectural amnesia across sessions: sync historical decision records into the compact Invariant Ledger (`.anti-slop/invariant-ledger.json` and `.anti-slop/invariant-ledger.toon`), enforce Gate 0 ingestion of active invariants before modifying governed paths, audit PRs for architectural drift (`bunx anti-slop-engineering steward drift --base HEAD`), and require formal Reassessment Triggers (`reassessment-trigger.json`) before modifying or superseding established invariants. Audit ledger records with `bunx anti-slop-engineering steward audit <file> --json`.
+27. **Cognitive Bandwidth & Attention Economy Governor:** When communicating with users, drafting pull request descriptions, generating standalone deliverables, authoring documentation, or orchestrating multi-agent handoffs, read [Cognitive Bandwidth & Attention Governor](skills/cognitive-load-and-attention-governor/SKILL.md). Enforce scannability metrics ($TTP \le 20$ words, $W_{max} \le 60$ words, anchor density $\ge 3.0$ anchors per 100 words), terminal blocking-question placement, deliverable purity (zero opener/closer fluff), working memory bounding ($\le 5$ items), and non-regression discipline. Audit records with `bunx anti-slop-engineering attention --file <file> --json`.
+28. **Tagore Engineering Discourse & Substance Guard:** When drafting, editing, or auditing pull request descriptions, git commit messages, Architectural Decision Records (ADRs), documentation, state notes, or agent reasoning traces, read [Tagore Engineering Discourse Guard](skills/tagore-guard/SKILL.md). Eliminate the 29 cataloged AI tells (significance inflation, copula avoidance, superficial -ing chains, rule-of-three, em-dash addiction, and promotional hype); mandate active engineering agency and empirical measurements; enforce the 8-Dimension Scoring Matrix with non-negotiable Mechanics ($\ge 35/50$) and Substance ($\ge 21/30$) subtotal floors ($\text{Total} \ge 56/80$); calibrate prose to repository ground truth via `.anti-slop/voice-profile.json`; and run the self-audit reflection loop before delivering. Audit with `bunx anti-slop-engineering tagore --file <file> --json`.
 
 ## Activation / modes
 
@@ -50,11 +60,27 @@ Select the relevant mode and follow the same gates:
 - **FIX:** reproduce observed bug first, fix smallest root cause, prove regression tests hold.
 - **REVIEW:** read-only diff and repository-context audit; report findings with severity, evidence, and counterfactual.
 - **CLEANUP:** establish an observable behavior baseline, isolate pure refactors from feature changes, prove no drift.
+- **ATTENTION:** when communicating with human developers, writing pull request bodies, generating standalone artifacts, or compressing inter-agent handoff messages, follow [Cognitive Bandwidth & Attention Governor](skills/cognitive-load-and-attention-governor/SKILL.md) to eliminate cognitive slop.
 - **NOTED_SLOP:** codify newly observed AI slop into a diagnostic catalog pattern, agent directive, and automated diff guard heuristic (see [CONTRIBUTING.md](CONTRIBUTING.md)).
 - **DECIDE:** when premises, direct answers or long-term architecture choices are materially uncertain, follow [Decision Guard](skills/decision-guard/SKILL.md) before BUILD. Return to ordinary modes after a decision; skip the extra protocol for routine repairs.
 - **ROOT-FIX:** when a symptom attracts scattered fixes or ownership is uncertain, follow [Root-Fix Gate](skills/root-fix-gate/SKILL.md) to establish the change boundary, then resume BUILD/FIX with regression tests.
 - **FUTURE-SCALE:** when an architecture commitment would be expensive to reverse as the product evolves, follow [Future-Scale Gate](skills/future-scale-gate/SKILL.md). Skip routine reversible edits and avoid capacity theater.
 - **PARANOID-ARCHITECT:** when building or reviewing systems against 10M concurrent user load, adversarial traffic, race conditions, hot-key contention, or zero-trust boundaries, follow [Paranoid Principal Architect](skills/paranoid-principal-architect/SKILL.md).
+- **OBSERVABILITY-ARCHITECT:** when designing telemetry, instrumenting OpenTelemetry spans, emitting RED/USE metrics, or configuring Multi-Window Multi-Burn-Rate SLO alerting, follow [Observability & SLO Architect](skills/observability-and-slo-architect/SKILL.md).
+- **INVARIANT-STEWARD:** when syncing architectural decisions into the living Invariant Ledger, ingesting constraints at Gate 0, checking PRs for architectural drift, or validating Reassessment Triggers, follow [Repo Memory & Invariant Steward](skills/repo-memory-and-invariant-steward/SKILL.md).
+- **APPLE-CRAFT:** when designing or auditing client interfaces for 120Hz ProMotion interaction physics, CLS=0.000, exhaustive state matrices, interruptible spring transitions, and keyboard/screen reader accessibility, follow [Apple Craft & Interaction Physics](skills/apple-craft-and-interaction-physics/SKILL.md).
+- **DETERMINISTIC-SIMULATION:** when verifying distributed protocols, concurrent actors, complex state machines, or parsers, follow [Deterministic Simulation & Property Testing](skills/deterministic-simulation-and-property-testing/SKILL.md).
+- **PRIVACY-GATE:** when designing user data pipelines, processing personal identifiers, enforcing cryptographic erasure, or instrumenting telemetry egress, follow [Privacy & Data Lineage Gate](skills/privacy-and-data-lineage-gate/SKILL.md).
+- **AST-SLOP:** when auditing type safety, eliminating type assertions, optimizing reducer complexity, or configuring Oxlint rules, follow [Type-Level & AST Slop Gate](skills/type-level-and-ast-slop-gate/SKILL.md).
+- **API-GOVERNOR:** when designing public SDKs, library interfaces, CLI commands, or internal boundaries, follow [API Ergonomics & Contract Governor](skills/api-ergonomics-and-contract-governor/SKILL.md).
+- **SYSTEM-DRIFT:** when auditing multi-surface applications for cross-route design system drift, component variant budgets, and keyboard focus ring suppression, follow [Design System Drift Guard](skills/design-system-drift-guard/SKILL.md).
+- **CHROMA-DRIFT:** when auditing colors, themes, or gradients for cheerful saturation drift, OKLCH adherence, and category reflex band clichés, follow [Chromatic Drift Guard](skills/chromatic-drift-guard/SKILL.md).
+- **HOUSE-TELL:** before writing code for any landing or UI surface, enforce the Gate 0 Pre-Commit Contract and contractually break at least two habits of the agent itself via [House-Tell Guard](skills/house-tell-guard/SKILL.md).
+- **MOTION-RUNTIME:** when profiling or verifying animations, scroll flights, or canvas state machines under DPR 2 retina conditions and 4x CPU throttle, follow [Motion Runtime Guard](skills/motion-runtime-guard/SKILL.md).
+- **ASSET-PROVENANCE:** when sourcing or embedding media, models, audio, or fonts, maintain cryptographic SHA-256 and open-license ledger tracking via [Asset Provenance Guard](skills/asset-provenance-guard/SKILL.md).
+- **TAGORE:** when drafting, editing, or reviewing engineering prose, PR descriptions, commit messages, ADRs, state notes, or agent reasoning traces, eliminate the 29 cataloged tells, enforce mechanics (>=35/50) and substance (>=21/30) floors, and calibrate to repository ground truth via [Tagore Engineering Discourse Guard](skills/tagore-guard/SKILL.md).
+- **AUDIT:** orchestrate all guards (Diff, SRE, AST Slop, Contrast, Privacy, Contract) into a structured, numbered markdown report `anti-slop/audit-NNN.md` via `bunx anti-slop-engineering audit`. Configure modes (`during`, `after`, `ask`) via `bunx anti-slop-engineering mode [during|after|ask]`.
+- **INSTALL-AGENTS:** install and configure anti-slop skills across 14 AI coding agents via `bunx anti-slop-engineering install`. Upgrade in one shot via `bunx anti-slop-engineering update`.
 
 For extensive audits, load [anti-pattern catalog](references/anti-pattern-catalog.md). For Google SRE discipline and distributed resilience patterns, load [google-sre-discipline](references/google-sre-discipline.md). For any test changes, load [test integrity policy](references/test-integrity.md). For a PR or merge request, load [PR review protocol](references/pr-review.md). For elevated permissions, sensitive code, network access, or deployment, load [security and execution boundaries](references/security-and-operations.md). For project-specific exceptions, load [judgment and exceptions](references/engineering-judgment.md). For community contributions, follow [contributor guidelines](CONTRIBUTING.md).
 

package/action.yml

@@ -0,0 +1,90 @@
+name: "Anti-Slop Engineering Guard"
+description: "Clean-room AI coding guard, PR boundary triage, AST slop detector, honeypot sensor, and Google SRE discipline for GitHub Pull Requests."
+author: "Mamdouh Aboammar <mamdouhfces1997@gmail.com>"
+
+inputs:
+  base:
+    description: "Base commit or branch to compare against (default: HEAD~1 or origin/main)"
+    required: false
+    default: "HEAD~1"
+  pr-title:
+    description: "PR title string to evaluate against conventional commits and length bounds"
+    required: false
+    default: ""
+  pr-body-file:
+    description: "Path to file containing PR description markdown"
+    required: false
+    default: ""
+  template-file:
+    description: "Path to repository PR template markdown"
+    required: false
+    default: ".github/pull_request_template.md"
+  fail-on-blocker:
+    description: "Whether to fail the action if blocker-severity findings are detected"
+    required: false
+    default: "true"
+  canary-token:
+    description: "Active HMAC canary token to verify against hallucinated bot echoes"
+    required: false
+    default: ""
+
+outputs:
+  status:
+    description: "Overall audit status (PASSED or BLOCKED)"
+    value: ${{ steps.anti-slop-audit.outputs.status }}
+  findings-count:
+    description: "Total number of findings identified"
+    value: ${{ steps.anti-slop-audit.outputs.findings-count }}
+  blockers-count:
+    description: "Number of blocker-severity findings identified"
+    value: ${{ steps.anti-slop-audit.outputs.blockers-count }}
+
+runs:
+  using: "composite"
+  steps:
+    - name: Run Anti-Slop Multi-Guard Audit
+      id: anti-slop-audit
+      shell: bash
+      run: |
+        python3 -u "${{ github.action_path }}/scripts/audit_runner.py" audit --base "${{ inputs.base }}" --json > audit_result.json || true
+        cat audit_result.json
+
+        # Check PR boundary if title or body provided
+        if [ -n "${{ inputs.pr-title }}" ] || [ -f "${{ inputs.pr-body-file }}" ]; then
+          python3 -u "${{ github.action_path }}/scripts/pr_boundary_guard.py" \
+            --base "${{ inputs.base }}" \
+            --pr-title "${{ inputs.pr-title }}" \
+            --pr-body-file "${{ inputs.pr-body-file }}" \
+            --template-file "${{ inputs.template-file }}" \
+            --json > pr_boundary_result.json || true
+          cat pr_boundary_result.json
+        fi
+
+        # Check Honeypots if canary provided
+        if [ -n "${{ inputs.canary-token }}" ]; then
+          python3 -u "${{ github.action_path }}/scripts/honeypot_trap_guard.py" \
+            --pr-title "${{ inputs.pr-title }}" \
+            --pr-body-file "${{ inputs.pr-body-file }}" \
+            --canary-token "${{ inputs.canary-token }}" \
+            --json > honeypot_result.json || true
+          cat honeypot_result.json
+        fi
+
+        # Check comment budget
+        python3 -u "${{ github.action_path }}/scripts/comment_budget_guard.py" \
+          --base "${{ inputs.base }}" \
+          --json > comment_budget_result.json || true
+        cat comment_budget_result.json
+
+        BLOCKERS=$(grep -c '"severity": "blocker"' pr_boundary_result.json honeypot_result.json comment_budget_result.json 2>/dev/null || echo 0)
+        echo "blockers-count=$BLOCKERS" >> $GITHUB_OUTPUT
+        if [ "$BLOCKERS" -gt 0 ]; then
+          echo "status=BLOCKED" >> $GITHUB_OUTPUT
+          if [ "${{ inputs.fail-on-blocker }}" = "true" ]; then
+            echo "❌ Anti-Slop Guard detected $BLOCKERS blocker finding(s)."
+            exit 2
+          fi
+        else
+          echo "status=PASSED" >> $GITHUB_OUTPUT
+          echo "✅ All Anti-Slop checks passed cleanly."
+        fi

package/assets/logo-dark.svg

@@ -0,0 +1,6 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Anti-Slop Engineering logo for dark surfaces">
+  <rect width="512" height="512" rx="112" fill="#0F172A"/>
+  <path d="M256 96 L384 152 V264 C384 340 328 400 256 424 C184 400 128 340 128 264 V152 Z" fill="#1E293B" stroke="#38BDF8" stroke-width="20" stroke-linejoin="round"/>
+  <path d="M192 256 L236 300 L324 212" fill="none" stroke="#F8FAFC" stroke-width="28" stroke-linecap="round" stroke-linejoin="round"/>
+  <circle cx="256" cy="180" r="16" fill="#38BDF8"/>
+</svg>

package/assets/logo-light.svg

@@ -0,0 +1,6 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Anti-Slop Engineering logo for light surfaces">
+  <rect width="512" height="512" rx="112" fill="#F8FAFC"/>
+  <path d="M256 96 L384 152 V264 C384 340 328 400 256 424 C184 400 128 340 128 264 V152 Z" fill="#0F172A" stroke="#0284C7" stroke-width="20" stroke-linejoin="round"/>
+  <path d="M192 256 L236 300 L324 212" fill="none" stroke="#F8FAFC" stroke-width="28" stroke-linecap="round" stroke-linejoin="round"/>
+  <circle cx="256" cy="180" r="16" fill="#38BDF8"/>
+</svg>

package/assets/mark.svg

@@ -0,0 +1,5 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="Anti-Slop Engineering mark">
+  <rect width="512" height="512" rx="112" fill="#0F172A"/>
+  <path d="M256 96 L384 152 V264 C384 340 328 400 256 424 C184 400 128 340 128 264 V152 Z" fill="none" stroke="#38BDF8" stroke-width="24" stroke-linejoin="round"/>
+  <path d="M192 256 L236 300 L324 212" fill="none" stroke="#F8FAFC" stroke-width="28" stroke-linecap="round" stroke-linejoin="round"/>
+</svg>