archsutra-ai 0.1.2 → 0.1.4

package/dist/scaffold.js

@@ -0,0 +1,87 @@
+const UNKNOWN = '> **unknown.** A deterministic scan cannot choose this. Fill it in the matching ArchSutra skill inside your IDE. No model API was called.';
+export function renderReview(res) {
+    const lines = res.findings.map((f) => `- ${f.rule} ${f.severity} ${f.title} (${f.evidence[0]?.path ?? '.'})`);
+    return [
+        '# Evidence review',
+        '',
+        'Observed findings from `archsutra audit`. This is the deterministic review. It is not a design judgment.',
+        '',
+        lines.length ? lines.join('\n') : '_No findings._',
+        '',
+        UNKNOWN,
+        '',
+    ].join('\n');
+}
+export function renderDesign(res) {
+    const mods = res.map.modules.map((m) => `- ${m.name}: ${m.files} files, ${m.lines} lines (${m.ecosystems.join(', ')})`);
+    return [
+        '# Design starter',
+        '',
+        '## Observed structure',
+        mods.length ? mods.join('\n') : '_No modules._',
+        '',
+        `Ecosystems: ${res.map.ecosystems.join(', ') || 'none'}.`,
+        `Blind spots: ${res.map.blindSpots.join(' ') || 'none recorded.'}`,
+        '',
+        '## Options',
+        UNKNOWN,
+        '',
+        '## Non-functional targets',
+        UNKNOWN,
+        '',
+        '## Decision',
+        UNKNOWN,
+        '',
+    ].join('\n');
+}
+export function renderThreatModel(res) {
+    const sec = res.findings.filter((f) => f.category === 'security' || f.category === 'ai-security' || f.category === 'infrastructure');
+    const row = (f) => `| ${f.rule} | observed | ${f.severity} | ${f.title} | ${f.evidence[0]?.path ?? '.'} |`;
+    return [
+        '# Threat-model starter',
+        '',
+        'Rows below are observed rule hits. They are not a complete STRIDE model.',
+        '',
+        '| Rule | Evidence | Severity | Title | Path |',
+        '|---|---|---|---|---|',
+        sec.length ? sec.map(row).join('\n') : '| — | unknown | — | No security rule fired | — |',
+        '',
+        '## Spoofing, tampering, repudiation, information disclosure, denial of service, elevation',
+        UNKNOWN,
+        '',
+        '## LLM and agent threats',
+        UNKNOWN,
+        '',
+    ].join('\n');
+}
+export function renderModernize(res) {
+    const rows = res.findings.map((f, i) => `${i + 1}. **${f.rule}** (${f.severity}, effort ${f.effort}). ${f.title}. Evidence: ${f.evidence[0]?.path ?? '.'}. Fix recorded by the rule: ${f.fix}`);
+    return [
+        '# Modernization starter',
+        '',
+        'Each slice is one open finding. Target architecture is unknown until you set it.',
+        '',
+        rows.length ? rows.join('\n') : '_No findings to slice._',
+        '',
+        '## Target architecture',
+        UNKNOWN,
+        '',
+        '## Success numbers',
+        UNKNOWN,
+        '',
+    ].join('\n');
+}
+export function renderCost(res) {
+    return [
+        '# Cost starter',
+        '',
+        'Cost is **not assessed**. The scan has no prices, regions, or traffic.',
+        '',
+        `Observed manifests and ecosystems: ${res.map.ecosystems.join(', ') || 'none'}.`,
+        `Datastores named in manifests: ${res.map.datastores.join(', ') || 'none'}.`,
+        '',
+        '## Spend, unit cost, lock-in',
+        UNKNOWN,
+        '',
+    ].join('\n');
+}

package/dist/suppress.js

@@ -0,0 +1,51 @@
+import { readFile } from 'node:fs/promises';
+import path from 'node:path';
+/** Load `.archsutra/suppress.json`. Missing file means nothing is suppressed. Invalid JSON throws. Entries without a rule and a reason are ignored. */
+export async function loadSuppressions(root, today = new Date().toISOString().slice(0, 10)) {
+    const abs = path.join(root, '.archsutra', 'suppress.json');
+    let text;
+    try {
+        text = await readFile(abs, 'utf8');
+    }
+    catch (e) {
+        if (e.code === 'ENOENT')
+            return [];
+        throw e;
+    }
+    let raw;
+    try {
+        raw = JSON.parse(text);
+    }
+    catch {
+        throw new Error('.archsutra/suppress.json is not valid JSON.');
+    }
+    const list = Array.isArray(raw) ? raw : raw.suppress;
+    if (!Array.isArray(list))
+        throw new Error('.archsutra/suppress.json must be an array, or an object with a suppress array.');
+    const out = [];
+    for (const item of list) {
+        if (!item || typeof item !== 'object')
+            continue;
+        const row = item;
+        if (typeof row.rule !== 'string' || typeof row.reason !== 'string' || !row.reason.trim())
+            continue;
+        if (typeof row.expires === 'string' && row.expires < today)
+            continue;
+        out.push({
+            rule: row.rule,
+            path: typeof row.path === 'string' ? row.path.replace(/\\/g, '/').replace(/^\.\//, '') : undefined,
+            reason: row.reason.trim(),
+            expires: typeof row.expires === 'string' ? row.expires : undefined,
+        });
+    }
+    return out;
+}
+export function isSuppressed(finding, rules) {
+    return rules.some((s) => {
+        if (s.rule !== finding.rule)
+            return false;
+        if (!s.path)
+            return true;
+        return finding.evidence.some((e) => e.path === s.path || e.path.startsWith(`${s.path}/`));
+    });
+}

package/docs/architecture/overview.html

@@ -19,7 +19,7 @@
 <link rel="icon" href="../assets/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="../assets/site.css">
 <script>try{var t=localStorage.getItem('as-theme');if(t)document.documentElement.setAttribute('data-theme',t)}catch(e){}</script>
-<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Architecture overview","description":"Architecture overview - ArchSutra AI documentation.","author":{"@type":"Person","name":"Vatsal Shah"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
+<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Architecture overview","description":"Architecture overview - ArchSutra AI documentation.","author":{"@type":"Person","name":"Vatsal Shah","url":"https://shahvatsal.com"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
 </head>
 <body class="doc">
 <a class="skip" href="#main">Skip to content</a>
@@ -34,7 +34,7 @@
 <div class="layout">
   <aside id="sidebar" class="sidebar" aria-label="Documentation"><div class="nav-group"><p class="nav-title">Handbook</p><ul><li><a href="../handbook/index.html">Overview</a></li><li><a href="../handbook/01-executive-summary.html">Executive summary</a></li><li><a href="../handbook/02-functional-specification.html">Functional specification</a></li><li><a href="../handbook/03-technical-specification.html">Technical specification</a></li><li><a href="../handbook/04-architecture.html">Architecture</a></li><li><a href="../handbook/05-user-guide.html">User guide</a></li><li><a href="../handbook/06-cli-reference.html">CLI reference</a></li><li><a href="../handbook/07-security-privacy-legal.html">Security, privacy and legal</a></li><li><a href="../handbook/08-testing-and-proof.html">Testing and proof</a></li><li><a href="../handbook/09-compatibility-and-roadmap.html">Compatibility and roadmap</a></li><li><a href="../handbook/10-contributor-guide.html">Contributor guide</a></li><li><a href="../handbook/11-glossary-and-faq.html">Glossary and FAQ</a></li><li><a href="../handbook/12-rule-catalog.html">Audit rule catalog</a></li><li><a href="../handbook/13-trust-and-assurance.html">Trust and assurance</a></li><li><a href="../handbook/14-real-world-evaluation.html">Real-world evaluation</a></li><li><a href="../handbook/15-supply-chain-and-release.html">Supply chain and release</a></li><li><a href="../handbook/16-performance-and-quality-metrics.html">Performance and quality metrics</a></li></ul></div><div class="nav-group"><p class="nav-title">Reference</p><ul><li><a href="../architecture/overview.html" aria-current="page">Architecture overview</a></li><li><a href="../architecture/threat-model.html">Threat model (ArchSutra CLI and skills)</a></li><li><a href="../compatibility/matrix.html">Compatibility matrix</a></li><li><a href="../rfc/0001-archsutra-v0.1.html">RFC 0001: ArchSutra AI v0.1</a></li><li><a href="../decisions/ADR-0001-deterministic-cli-plus-ide-skills.html">ADR-0001: Deterministic CLI plus IDE-native skills</a></li><li><a href="../compatibility/smoke-tests/index.html">Live smoke tests</a></li><li><a href="../community/good-first-issues.html">Good first issues (ready to file)</a></li><li><a href="../legal/trademark-and-name-clearance.html">Name and trademark clearance</a></li><li><a href="../legal/legal-review-brief.html">Legal review brief</a></li><li><a href="../proof/accessibility.html">Accessibility audit of the documentation site</a></li></ul></div></aside>
   <main id="main" class="content"><article class="prose"><p class="crumbs"><a href="../index.html">ArchSutra AI</a> / Reference</p><h1 id="architecture-overview">Architecture overview</h1>
-<p class="meta">Version 0.1.2 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/architecture/overview.md" rel="noopener">docs/architecture/overview.md</a></p>
+<p class="meta">Version 0.1.4 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/architecture/overview.md" rel="noopener">docs/architecture/overview.md</a></p>
 <p>ArchSutra has two cooperating halves:</p>
 <ol><li><strong>Skills and agents</strong> (<code>skills/</code>, <code>agents/</code>): canonical Markdown that an AI IDE loads. Reasoning runs on the IDE's own model.</li><li><strong>Deterministic CLI</strong> (<code>src/</code>): produces reproducible evidence without any model.</li></ol>
 <figure class="diagram"><pre class="mermaid">flowchart TB
@@ -63,7 +63,7 @@
 </div>
 <footer class="footer">
   <div class="footer-inner">
-    <p><strong>ArchSutra AI</strong> v0.1.2. Design. Audit. Evolve. Created by <a href="https://github.com/shahvatsalofficial" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
+    <p><strong>ArchSutra AI</strong> v0.1.4. Design. Audit. Evolve. Created by <a href="https://shahvatsal.com" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
     <p class="fine">Review aid only. Not a certification, compliance attestation, security guarantee or legal advice. Not affiliated with Anthropic, OpenAI, Cursor, GitHub or Google; product names belong to their owners. <a href="../handbook/07-security-privacy-legal.html">Legal details</a>.</p>
   </div>
 </footer>

package/docs/architecture/threat-model.html

@@ -19,7 +19,7 @@
 <link rel="icon" href="../assets/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="../assets/site.css">
 <script>try{var t=localStorage.getItem('as-theme');if(t)document.documentElement.setAttribute('data-theme',t)}catch(e){}</script>
-<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Threat model (ArchSutra CLI and skills)","description":"Threat model (ArchSutra CLI and skills) - ArchSutra AI documentation.","author":{"@type":"Person","name":"Vatsal Shah"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
+<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Threat model (ArchSutra CLI and skills)","description":"Threat model (ArchSutra CLI and skills) - ArchSutra AI documentation.","author":{"@type":"Person","name":"Vatsal Shah","url":"https://shahvatsal.com"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
 </head>
 <body class="doc">
 <a class="skip" href="#main">Skip to content</a>
@@ -34,7 +34,7 @@
 <div class="layout">
   <aside id="sidebar" class="sidebar" aria-label="Documentation"><div class="nav-group"><p class="nav-title">Handbook</p><ul><li><a href="../handbook/index.html">Overview</a></li><li><a href="../handbook/01-executive-summary.html">Executive summary</a></li><li><a href="../handbook/02-functional-specification.html">Functional specification</a></li><li><a href="../handbook/03-technical-specification.html">Technical specification</a></li><li><a href="../handbook/04-architecture.html">Architecture</a></li><li><a href="../handbook/05-user-guide.html">User guide</a></li><li><a href="../handbook/06-cli-reference.html">CLI reference</a></li><li><a href="../handbook/07-security-privacy-legal.html">Security, privacy and legal</a></li><li><a href="../handbook/08-testing-and-proof.html">Testing and proof</a></li><li><a href="../handbook/09-compatibility-and-roadmap.html">Compatibility and roadmap</a></li><li><a href="../handbook/10-contributor-guide.html">Contributor guide</a></li><li><a href="../handbook/11-glossary-and-faq.html">Glossary and FAQ</a></li><li><a href="../handbook/12-rule-catalog.html">Audit rule catalog</a></li><li><a href="../handbook/13-trust-and-assurance.html">Trust and assurance</a></li><li><a href="../handbook/14-real-world-evaluation.html">Real-world evaluation</a></li><li><a href="../handbook/15-supply-chain-and-release.html">Supply chain and release</a></li><li><a href="../handbook/16-performance-and-quality-metrics.html">Performance and quality metrics</a></li></ul></div><div class="nav-group"><p class="nav-title">Reference</p><ul><li><a href="../architecture/overview.html">Architecture overview</a></li><li><a href="../architecture/threat-model.html" aria-current="page">Threat model (ArchSutra CLI and skills)</a></li><li><a href="../compatibility/matrix.html">Compatibility matrix</a></li><li><a href="../rfc/0001-archsutra-v0.1.html">RFC 0001: ArchSutra AI v0.1</a></li><li><a href="../decisions/ADR-0001-deterministic-cli-plus-ide-skills.html">ADR-0001: Deterministic CLI plus IDE-native skills</a></li><li><a href="../compatibility/smoke-tests/index.html">Live smoke tests</a></li><li><a href="../community/good-first-issues.html">Good first issues (ready to file)</a></li><li><a href="../legal/trademark-and-name-clearance.html">Name and trademark clearance</a></li><li><a href="../legal/legal-review-brief.html">Legal review brief</a></li><li><a href="../proof/accessibility.html">Accessibility audit of the documentation site</a></li></ul></div></aside>
   <main id="main" class="content"><article class="prose"><p class="crumbs"><a href="../index.html">ArchSutra AI</a> / Reference</p><h1 id="threat-model-archsutra-cli-and-skills">Threat model (ArchSutra CLI and skills)</h1>
-<p class="meta">Version 0.1.2 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/architecture/threat-model.md" rel="noopener">docs/architecture/threat-model.md</a></p>
+<p class="meta">Version 0.1.4 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/architecture/threat-model.md" rel="noopener">docs/architecture/threat-model.md</a></p>
 <p>Scope: the <code>archsutra</code> CLI run on a developer machine or CI, and the skills loaded by an AI IDE.</p>
 <h2 id="assets">Assets<a class="anchor" href="#assets" aria-label="Link to this section">#</a></h2>
 <ul><li>Source code and any secrets inside it</li><li>The developer's files outside the target project</li><li>Integrity of installed skills (they steer an AI agent)</li></ul>
@@ -52,7 +52,7 @@
 </div>
 <footer class="footer">
   <div class="footer-inner">
-    <p><strong>ArchSutra AI</strong> v0.1.2. Design. Audit. Evolve. Created by <a href="https://github.com/shahvatsalofficial" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
+    <p><strong>ArchSutra AI</strong> v0.1.4. Design. Audit. Evolve. Created by <a href="https://shahvatsal.com" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
     <p class="fine">Review aid only. Not a certification, compliance attestation, security guarantee or legal advice. Not affiliated with Anthropic, OpenAI, Cursor, GitHub or Google; product names belong to their owners. <a href="../handbook/07-security-privacy-legal.html">Legal details</a>.</p>
   </div>
 </footer>

package/docs/community/good-first-issues.html

@@ -19,7 +19,7 @@
 <link rel="icon" href="../assets/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="../assets/site.css">
 <script>try{var t=localStorage.getItem('as-theme');if(t)document.documentElement.setAttribute('data-theme',t)}catch(e){}</script>
-<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Good first issues (ready to file)","description":"A starter backlog of well-scoped tasks for new contributors, each with an acceptance test.","author":{"@type":"Person","name":"Vatsal Shah"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
+<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Good first issues (ready to file)","description":"A starter backlog of well-scoped tasks for new contributors, each with an acceptance test.","author":{"@type":"Person","name":"Vatsal Shah","url":"https://shahvatsal.com"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
 </head>
 <body class="doc">
 <a class="skip" href="#main">Skip to content</a>
@@ -34,7 +34,7 @@
 <div class="layout">
   <aside id="sidebar" class="sidebar" aria-label="Documentation"><div class="nav-group"><p class="nav-title">Handbook</p><ul><li><a href="../handbook/index.html">Overview</a></li><li><a href="../handbook/01-executive-summary.html">Executive summary</a></li><li><a href="../handbook/02-functional-specification.html">Functional specification</a></li><li><a href="../handbook/03-technical-specification.html">Technical specification</a></li><li><a href="../handbook/04-architecture.html">Architecture</a></li><li><a href="../handbook/05-user-guide.html">User guide</a></li><li><a href="../handbook/06-cli-reference.html">CLI reference</a></li><li><a href="../handbook/07-security-privacy-legal.html">Security, privacy and legal</a></li><li><a href="../handbook/08-testing-and-proof.html">Testing and proof</a></li><li><a href="../handbook/09-compatibility-and-roadmap.html">Compatibility and roadmap</a></li><li><a href="../handbook/10-contributor-guide.html">Contributor guide</a></li><li><a href="../handbook/11-glossary-and-faq.html">Glossary and FAQ</a></li><li><a href="../handbook/12-rule-catalog.html">Audit rule catalog</a></li><li><a href="../handbook/13-trust-and-assurance.html">Trust and assurance</a></li><li><a href="../handbook/14-real-world-evaluation.html">Real-world evaluation</a></li><li><a href="../handbook/15-supply-chain-and-release.html">Supply chain and release</a></li><li><a href="../handbook/16-performance-and-quality-metrics.html">Performance and quality metrics</a></li></ul></div><div class="nav-group"><p class="nav-title">Reference</p><ul><li><a href="../architecture/overview.html">Architecture overview</a></li><li><a href="../architecture/threat-model.html">Threat model (ArchSutra CLI and skills)</a></li><li><a href="../compatibility/matrix.html">Compatibility matrix</a></li><li><a href="../rfc/0001-archsutra-v0.1.html">RFC 0001: ArchSutra AI v0.1</a></li><li><a href="../decisions/ADR-0001-deterministic-cli-plus-ide-skills.html">ADR-0001: Deterministic CLI plus IDE-native skills</a></li><li><a href="../compatibility/smoke-tests/index.html">Live smoke tests</a></li><li><a href="../community/good-first-issues.html" aria-current="page">Good first issues (ready to file)</a></li><li><a href="../legal/trademark-and-name-clearance.html">Name and trademark clearance</a></li><li><a href="../legal/legal-review-brief.html">Legal review brief</a></li><li><a href="../proof/accessibility.html">Accessibility audit of the documentation site</a></li></ul></div></aside>
   <main id="main" class="content"><article class="prose"><p class="crumbs"><a href="../index.html">ArchSutra AI</a> / Reference</p><h1 id="good-first-issues-ready-to-file">Good first issues (ready to file)</h1>
-<p class="lede">A starter backlog of well-scoped tasks for new contributors, each with an acceptance test.</p><p class="meta">Version 0.1.2 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/community/good-first-issues.md" rel="noopener">docs/community/good-first-issues.md</a></p>
+<p class="lede">A starter backlog of well-scoped tasks for new contributors, each with an acceptance test.</p><p class="meta">Version 0.1.4 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/community/good-first-issues.md" rel="noopener">docs/community/good-first-issues.md</a></p>
 <p>Each item is small, has a clear test, and matches a known limitation. Open them as GitHub issues with the labels <code>good first issue</code> and <code>help wanted</code>.</p>
 <div class="table-wrap" tabindex="0" role="region" aria-label="Table 1: Good first issues (ready to file)"><table><thead><tr><th scope="col">#</th><th scope="col">Title</th><th scope="col">Area</th><th scope="col">Acceptance test</th></tr></thead><tbody><tr><td>1</td><td>Smoke test report: Claude Code</td><td>compatibility</td><td>Row added to <code>docs/compatibility/smoke-tests/README.md</code> with version and evidence</td></tr><tr><td>2</td><td>Smoke test report: Cursor</td><td>compatibility</td><td>same</td></tr><tr><td>3</td><td>Smoke test report: OpenAI Codex</td><td>compatibility</td><td>same</td></tr><tr><td>4</td><td>Smoke test report: GitHub Copilot</td><td>compatibility</td><td>same</td></tr><tr><td>5</td><td>Smoke test report: Gemini CLI or Antigravity CLI</td><td>compatibility</td><td>same; note the successor tool status</td></tr><tr><td>6</td><td>Go import graph (<code>import &quot;...&quot;</code> of module-internal packages)</td><td>analyzer</td><td>Fixture with a Go cycle is reported by <code>AS-ARC-001</code></td></tr><tr><td>7</td><td>Java/Kotlin import graph</td><td>analyzer</td><td>Fixture with a package cycle is reported</td></tr><tr><td>8</td><td>C# <code>using</code> graph</td><td>analyzer</td><td>Fixture with a namespace cycle is reported</td></tr><tr><td>9</td><td>Rust <code>mod</code>/<code>use crate::</code> graph</td><td>analyzer</td><td>Fixture with a module cycle is reported</td></tr><tr><td>10</td><td>Suppression file (<code>.archsutraignore</code> or inline <code>archsutra-ignore: AS-SEC-005 reason</code>)</td><td>feature</td><td>Test: suppressed finding disappears; suppression without a reason is rejected</td></tr><tr><td>11</td><td>Baseline mode: report only findings that are new since a saved <code>findings.json</code></td><td>feature</td><td>Test with two runs</td></tr><tr><td>12</td><td>Port-aware <code>AS-IAC-001</code> for Kubernetes <code>Service</code> and <code>Ingress</code></td><td>rule</td><td>Fixture: public 443 not flagged, public 22 flagged</td></tr><tr><td>13</td><td>Rule: missing <code>HEALTHCHECK</code> in Dockerfile (info)</td><td>rule</td><td>True-positive and false-positive tests</td></tr><tr><td>14</td><td>Rule: GitHub Actions <code>pull_request_target</code> with checkout of PR head</td><td>rule</td><td>Fixture and test</td></tr><tr><td>15</td><td>Rule: GitHub Actions using unpinned <code>uses:</code> references</td><td>rule</td><td>Fixture and test</td></tr><tr><td>16</td><td>Label 20 more real findings and open a PR adding them to <code>docs/proof/realworld/</code></td><td>evaluation</td><td><code>node scripts/realworld.mjs report</code> reproduces numbers</td></tr><tr><td>17</td><td>Add 5 more repositories to a new holdout batch and label the sample</td><td>evaluation</td><td>New <code>labels-&lt;batch&gt;.json</code> and summary</td></tr><tr><td>18</td><td>Translate the README summary into another language</td><td>docs</td><td>Link from README, no claim differs from English</td></tr><tr><td>19</td><td>Screen-reader pass of the docs site (NVDA or VoiceOver)</td><td>accessibility</td><td>Notes added to <code>docs/proof/accessibility.md</code></td></tr><tr><td>20</td><td>Add an <code>--format sarif</code> option to <code>audit</code></td><td>feature</td><td><code>audit --format sarif</code> equals <code>export</code> SARIF output</td></tr></tbody></table></div>
 <p>When filing, link this page and the contributor guide (<code>docs/handbook/10-contributor-guide.md</code>).</p></article></main>
@@ -42,7 +42,7 @@
 </div>
 <footer class="footer">
   <div class="footer-inner">
-    <p><strong>ArchSutra AI</strong> v0.1.2. Design. Audit. Evolve. Created by <a href="https://github.com/shahvatsalofficial" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
+    <p><strong>ArchSutra AI</strong> v0.1.4. Design. Audit. Evolve. Created by <a href="https://shahvatsal.com" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
     <p class="fine">Review aid only. Not a certification, compliance attestation, security guarantee or legal advice. Not affiliated with Anthropic, OpenAI, Cursor, GitHub or Google; product names belong to their owners. <a href="../handbook/07-security-privacy-legal.html">Legal details</a>.</p>
   </div>
 </footer>

package/docs/compatibility/matrix.html

@@ -19,7 +19,7 @@
 <link rel="icon" href="../assets/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="../assets/site.css">
 <script>try{var t=localStorage.getItem('as-theme');if(t)document.documentElement.setAttribute('data-theme',t)}catch(e){}</script>
-<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Compatibility matrix","description":"Compatibility matrix - ArchSutra AI documentation.","author":{"@type":"Person","name":"Vatsal Shah"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
+<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Compatibility matrix","description":"Compatibility matrix - ArchSutra AI documentation.","author":{"@type":"Person","name":"Vatsal Shah","url":"https://shahvatsal.com"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
 </head>
 <body class="doc">
 <a class="skip" href="#main">Skip to content</a>
@@ -34,7 +34,7 @@
 <div class="layout">
   <aside id="sidebar" class="sidebar" aria-label="Documentation"><div class="nav-group"><p class="nav-title">Handbook</p><ul><li><a href="../handbook/index.html">Overview</a></li><li><a href="../handbook/01-executive-summary.html">Executive summary</a></li><li><a href="../handbook/02-functional-specification.html">Functional specification</a></li><li><a href="../handbook/03-technical-specification.html">Technical specification</a></li><li><a href="../handbook/04-architecture.html">Architecture</a></li><li><a href="../handbook/05-user-guide.html">User guide</a></li><li><a href="../handbook/06-cli-reference.html">CLI reference</a></li><li><a href="../handbook/07-security-privacy-legal.html">Security, privacy and legal</a></li><li><a href="../handbook/08-testing-and-proof.html">Testing and proof</a></li><li><a href="../handbook/09-compatibility-and-roadmap.html">Compatibility and roadmap</a></li><li><a href="../handbook/10-contributor-guide.html">Contributor guide</a></li><li><a href="../handbook/11-glossary-and-faq.html">Glossary and FAQ</a></li><li><a href="../handbook/12-rule-catalog.html">Audit rule catalog</a></li><li><a href="../handbook/13-trust-and-assurance.html">Trust and assurance</a></li><li><a href="../handbook/14-real-world-evaluation.html">Real-world evaluation</a></li><li><a href="../handbook/15-supply-chain-and-release.html">Supply chain and release</a></li><li><a href="../handbook/16-performance-and-quality-metrics.html">Performance and quality metrics</a></li></ul></div><div class="nav-group"><p class="nav-title">Reference</p><ul><li><a href="../architecture/overview.html">Architecture overview</a></li><li><a href="../architecture/threat-model.html">Threat model (ArchSutra CLI and skills)</a></li><li><a href="../compatibility/matrix.html" aria-current="page">Compatibility matrix</a></li><li><a href="../rfc/0001-archsutra-v0.1.html">RFC 0001: ArchSutra AI v0.1</a></li><li><a href="../decisions/ADR-0001-deterministic-cli-plus-ide-skills.html">ADR-0001: Deterministic CLI plus IDE-native skills</a></li><li><a href="../compatibility/smoke-tests/index.html">Live smoke tests</a></li><li><a href="../community/good-first-issues.html">Good first issues (ready to file)</a></li><li><a href="../legal/trademark-and-name-clearance.html">Name and trademark clearance</a></li><li><a href="../legal/legal-review-brief.html">Legal review brief</a></li><li><a href="../proof/accessibility.html">Accessibility audit of the documentation site</a></li></ul></div></aside>
   <main id="main" class="content"><article class="prose"><p class="crumbs"><a href="../index.html">ArchSutra AI</a> / Reference</p><h1 id="compatibility-matrix">Compatibility matrix</h1>
-<p class="meta">Version 0.1.2 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/compatibility/matrix.md" rel="noopener">docs/compatibility/matrix.md</a></p>
+<p class="meta">Version 0.1.4 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/compatibility/matrix.md" rel="noopener">docs/compatibility/matrix.md</a></p>
 <p>Levels: <code>native</code> (host loads ArchSutra directly, verified in a live session), <code>adapter</code> (files written to the vendor-documented layout, checked against vendor docs, <strong>not yet smoke-tested live</strong>), <code>manual</code> (copy-paste fallback), <code>experimental</code> (layout unconfirmed), <code>unsupported</code>.</p>
 <div class="table-wrap" tabindex="0" role="region" aria-label="Table 1: Compatibility matrix"><table><thead><tr><th scope="col">Host</th><th scope="col">Level</th><th scope="col">Skills path</th><th scope="col">Agents path</th><th scope="col">Checked against docs</th><th scope="col">Verified by tests</th><th scope="col">Not verified</th></tr></thead><tbody><tr><td>Claude Code</td><td>adapter</td><td><code>.claude/skills/&lt;name&gt;/SKILL.md</code></td><td><code>.claude/agents/&lt;name&gt;.md</code> (<code>name</code>, <code>description</code>, <code>tools</code>)</td><td>2026-11-01</td><td>file generation, idempotent install, frontmatter keys</td><td>live discovery</td></tr><tr><td>Cursor</td><td>adapter</td><td><code>.cursor/skills/&lt;name&gt;/SKILL.md</code></td><td><code>.cursor/agents/&lt;name&gt;.md</code> (<code>name</code>, <code>description</code>, <code>readonly</code>)</td><td>2026-11-01</td><td>file generation, frontmatter keys</td><td>live discovery</td></tr><tr><td>OpenAI Codex</td><td>adapter</td><td><code>.agents/skills/&lt;name&gt;/SKILL.md</code> + <code>AGENTS.md</code> block</td><td>none</td><td>2026-11-01</td><td>file generation</td><td>live discovery</td></tr><tr><td>GitHub Copilot</td><td>adapter</td><td><code>.github/skills/&lt;name&gt;/SKILL.md</code></td><td><code>.github/agents/&lt;name&gt;.agent.md</code> (<code>description</code>, <code>tools</code>)</td><td>2026-11-01</td><td>file generation, frontmatter keys</td><td>live behavior</td></tr><tr><td>Gemini CLI</td><td>adapter</td><td><code>.gemini/skills/&lt;name&gt;/SKILL.md</code></td><td>none</td><td>2026-11-01</td><td>file generation</td><td>live discovery; the docs site announces Antigravity CLI as successor, re-verify</td></tr></tbody></table></div>
 <p>Overlap warning: Cursor and Copilot also read <code>.claude/skills</code> and <code>.agents/skills</code>; Gemini CLI reads <code>.agents/skills</code>; Cursor reads <code>.codex/skills</code>. Install <strong>one</strong> host per project to avoid the same skill appearing twice.</p>
@@ -47,7 +47,7 @@
 </div>
 <footer class="footer">
   <div class="footer-inner">
-    <p><strong>ArchSutra AI</strong> v0.1.2. Design. Audit. Evolve. Created by <a href="https://github.com/shahvatsalofficial" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
+    <p><strong>ArchSutra AI</strong> v0.1.4. Design. Audit. Evolve. Created by <a href="https://shahvatsal.com" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
     <p class="fine">Review aid only. Not a certification, compliance attestation, security guarantee or legal advice. Not affiliated with Anthropic, OpenAI, Cursor, GitHub or Google; product names belong to their owners. <a href="../handbook/07-security-privacy-legal.html">Legal details</a>.</p>
   </div>
 </footer>

package/docs/compatibility/smoke-tests/index.html

@@ -19,7 +19,7 @@
 <link rel="icon" href="../../assets/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="../../assets/site.css">
 <script>try{var t=localStorage.getItem('as-theme');if(t)document.documentElement.setAttribute('data-theme',t)}catch(e){}</script>
-<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Live host smoke tests","description":"A step-by-step protocol to prove ArchSutra's skills load and work in each AI IDE, plus the results log.","author":{"@type":"Person","name":"Vatsal Shah"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
+<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Live host smoke tests","description":"A step-by-step protocol to prove ArchSutra's skills load and work in each AI IDE, plus the results log.","author":{"@type":"Person","name":"Vatsal Shah","url":"https://shahvatsal.com"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
 </head>
 <body class="doc">
 <a class="skip" href="#main">Skip to content</a>
@@ -34,7 +34,7 @@
 <div class="layout">
   <aside id="sidebar" class="sidebar" aria-label="Documentation"><div class="nav-group"><p class="nav-title">Handbook</p><ul><li><a href="../../handbook/index.html">Overview</a></li><li><a href="../../handbook/01-executive-summary.html">Executive summary</a></li><li><a href="../../handbook/02-functional-specification.html">Functional specification</a></li><li><a href="../../handbook/03-technical-specification.html">Technical specification</a></li><li><a href="../../handbook/04-architecture.html">Architecture</a></li><li><a href="../../handbook/05-user-guide.html">User guide</a></li><li><a href="../../handbook/06-cli-reference.html">CLI reference</a></li><li><a href="../../handbook/07-security-privacy-legal.html">Security, privacy and legal</a></li><li><a href="../../handbook/08-testing-and-proof.html">Testing and proof</a></li><li><a href="../../handbook/09-compatibility-and-roadmap.html">Compatibility and roadmap</a></li><li><a href="../../handbook/10-contributor-guide.html">Contributor guide</a></li><li><a href="../../handbook/11-glossary-and-faq.html">Glossary and FAQ</a></li><li><a href="../../handbook/12-rule-catalog.html">Audit rule catalog</a></li><li><a href="../../handbook/13-trust-and-assurance.html">Trust and assurance</a></li><li><a href="../../handbook/14-real-world-evaluation.html">Real-world evaluation</a></li><li><a href="../../handbook/15-supply-chain-and-release.html">Supply chain and release</a></li><li><a href="../../handbook/16-performance-and-quality-metrics.html">Performance and quality metrics</a></li></ul></div><div class="nav-group"><p class="nav-title">Reference</p><ul><li><a href="../../architecture/overview.html">Architecture overview</a></li><li><a href="../../architecture/threat-model.html">Threat model (ArchSutra CLI and skills)</a></li><li><a href="../../compatibility/matrix.html">Compatibility matrix</a></li><li><a href="../../rfc/0001-archsutra-v0.1.html">RFC 0001: ArchSutra AI v0.1</a></li><li><a href="../../decisions/ADR-0001-deterministic-cli-plus-ide-skills.html">ADR-0001: Deterministic CLI plus IDE-native skills</a></li><li><a href="../../compatibility/smoke-tests/index.html" aria-current="page">Live smoke tests</a></li><li><a href="../../community/good-first-issues.html">Good first issues (ready to file)</a></li><li><a href="../../legal/trademark-and-name-clearance.html">Name and trademark clearance</a></li><li><a href="../../legal/legal-review-brief.html">Legal review brief</a></li><li><a href="../../proof/accessibility.html">Accessibility audit of the documentation site</a></li></ul></div></aside>
   <main id="main" class="content"><article class="prose"><p class="crumbs"><a href="../../index.html">ArchSutra AI</a> / Reference</p><h1 id="live-host-smoke-tests">Live host smoke tests</h1>
-<p class="lede">A step-by-step protocol to prove ArchSutra's skills load and work in each AI IDE, plus the results log.</p><p class="meta">Version 0.1.2 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/compatibility/smoke-tests/README.md" rel="noopener">docs/compatibility/smoke-tests/README.md</a></p>
+<p class="lede">A step-by-step protocol to prove ArchSutra's skills load and work in each AI IDE, plus the results log.</p><p class="meta">Version 0.1.4 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/compatibility/smoke-tests/README.md" rel="noopener">docs/compatibility/smoke-tests/README.md</a></p>
 <p>The adapters write files in each vendor's documented layout (checked against the vendor docs on 2026-11-01; see the table below). <strong>No live session has been recorded yet.</strong> This page defines how to record one, and where results go. A host moves from <code>adapter</code> to <code>native</code> only after a passing record exists here.</p>
 <h2 id="documentation-check-done">Documentation check (done)<a class="anchor" href="#documentation-check-done" aria-label="Link to this section">#</a></h2>
 <div class="table-wrap" tabindex="0" role="region" aria-label="Table 1: Documentation check (done)"><table><thead><tr><th scope="col">Host</th><th scope="col">Docs read (2026-11-01)</th><th scope="col">Confirmed</th><th scope="col">Notes</th></tr></thead><tbody><tr><td>Claude Code</td><td>code.claude.com/docs/en/skills, /sub-agents</td><td>skills <code>.claude/skills/&lt;name&gt;/SKILL.md</code>; subagents <code>.claude/agents/*.md</code> with <code>name</code>, <code>description</code>, <code>tools</code> (comma list)</td><td>skills page partly summarized by the fetch tool</td></tr><tr><td>Cursor</td><td>cursor.com/docs/skills, /subagents</td><td>skills <code>.cursor/skills/</code> and <code>.agents/skills/</code>; subagents <code>.cursor/agents/</code> with <code>name</code>, <code>description</code>, <code>model</code>, <code>readonly</code>, <code>is_background</code></td><td>Cursor also reads <code>.claude/skills</code> and <code>.codex/skills</code>: install one host per project to avoid duplicates</td></tr><tr><td>OpenAI Codex</td><td>learn.chatgpt.com/docs/build-skills, /agent-configuration/agents-md</td><td>skills <code>.agents/skills</code>; <code>AGENTS.md</code> discovery</td><td>docs moved from developers.openai.com (308 redirect)</td></tr><tr><td>GitHub Copilot</td><td>docs.github.com Copilot: about agent skills, create skills, custom agents configuration</td><td>skills <code>.github/skills</code>; agents <code>.github/agents/&lt;name&gt;.agent.md</code>; <code>description</code> required; <code>tools</code> list</td><td>also reads <code>.claude/skills</code> and <code>.agents/skills</code></td></tr><tr><td>Gemini CLI</td><td>geminicli.com/docs/cli/skills, /creating-skills, /settings</td><td>skills <code>.gemini/skills</code> or <code>.agents/skills</code>; <code>skills.enabled</code> default true</td><td>site announces Antigravity CLI as successor (2026-06-18): re-verify</td></tr></tbody></table></div>
@@ -48,7 +48,7 @@
 </div>
 <footer class="footer">
   <div class="footer-inner">
-    <p><strong>ArchSutra AI</strong> v0.1.2. Design. Audit. Evolve. Created by <a href="https://github.com/shahvatsalofficial" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
+    <p><strong>ArchSutra AI</strong> v0.1.4. Design. Audit. Evolve. Created by <a href="https://shahvatsal.com" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
     <p class="fine">Review aid only. Not a certification, compliance attestation, security guarantee or legal advice. Not affiliated with Anthropic, OpenAI, Cursor, GitHub or Google; product names belong to their owners. <a href="../../handbook/07-security-privacy-legal.html">Legal details</a>.</p>
   </div>
 </footer>

package/docs/compatibility/smoke-tests/results-2026-11-07.md

@@ -0,0 +1,17 @@
+# Host file-layout check — 2026-11-07
+
+Automated. Not a live model session.
+
+`archsutra install --host <id>` was run for Claude Code, Cursor, Codex, Copilot, and Gemini CLI in a temporary directory. Each host received `architecture-audit/SKILL.md` at the vendor path the adapter documents:
+
+| Host | Path checked |
+|---|---|
+| Claude Code | `.claude/skills/architecture-audit/SKILL.md` |
+| Cursor | `.cursor/skills/architecture-audit/SKILL.md` |
+| Codex | `.agents/skills/architecture-audit/SKILL.md` |
+| Copilot | `.github/skills/architecture-audit/SKILL.md` |
+| Gemini CLI | `.gemini/skills/architecture-audit/SKILL.md` |
+
+The test is `install writes all five host layouts` in `test/archsutra.test.mjs`.
+
+This does **not** prove the host discovered the skill, spawned an agent, or produced a review. Support level stays `adapter`. A live session still needs a person in each IDE.

package/docs/decisions/ADR-0001-deterministic-cli-plus-ide-skills.html

@@ -19,7 +19,7 @@
 <link rel="icon" href="../assets/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="../assets/site.css">
 <script>try{var t=localStorage.getItem('as-theme');if(t)document.documentElement.setAttribute('data-theme',t)}catch(e){}</script>
-<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"ADR-0001: Deterministic CLI plus IDE-native skills","description":"ADR-0001: Deterministic CLI plus IDE-native skills - ArchSutra AI documentation.","author":{"@type":"Person","name":"Vatsal Shah"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
+<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"ADR-0001: Deterministic CLI plus IDE-native skills","description":"ADR-0001: Deterministic CLI plus IDE-native skills - ArchSutra AI documentation.","author":{"@type":"Person","name":"Vatsal Shah","url":"https://shahvatsal.com"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
 </head>
 <body class="doc">
 <a class="skip" href="#main">Skip to content</a>
@@ -34,7 +34,7 @@
 <div class="layout">
   <aside id="sidebar" class="sidebar" aria-label="Documentation"><div class="nav-group"><p class="nav-title">Handbook</p><ul><li><a href="../handbook/index.html">Overview</a></li><li><a href="../handbook/01-executive-summary.html">Executive summary</a></li><li><a href="../handbook/02-functional-specification.html">Functional specification</a></li><li><a href="../handbook/03-technical-specification.html">Technical specification</a></li><li><a href="../handbook/04-architecture.html">Architecture</a></li><li><a href="../handbook/05-user-guide.html">User guide</a></li><li><a href="../handbook/06-cli-reference.html">CLI reference</a></li><li><a href="../handbook/07-security-privacy-legal.html">Security, privacy and legal</a></li><li><a href="../handbook/08-testing-and-proof.html">Testing and proof</a></li><li><a href="../handbook/09-compatibility-and-roadmap.html">Compatibility and roadmap</a></li><li><a href="../handbook/10-contributor-guide.html">Contributor guide</a></li><li><a href="../handbook/11-glossary-and-faq.html">Glossary and FAQ</a></li><li><a href="../handbook/12-rule-catalog.html">Audit rule catalog</a></li><li><a href="../handbook/13-trust-and-assurance.html">Trust and assurance</a></li><li><a href="../handbook/14-real-world-evaluation.html">Real-world evaluation</a></li><li><a href="../handbook/15-supply-chain-and-release.html">Supply chain and release</a></li><li><a href="../handbook/16-performance-and-quality-metrics.html">Performance and quality metrics</a></li></ul></div><div class="nav-group"><p class="nav-title">Reference</p><ul><li><a href="../architecture/overview.html">Architecture overview</a></li><li><a href="../architecture/threat-model.html">Threat model (ArchSutra CLI and skills)</a></li><li><a href="../compatibility/matrix.html">Compatibility matrix</a></li><li><a href="../rfc/0001-archsutra-v0.1.html">RFC 0001: ArchSutra AI v0.1</a></li><li><a href="../decisions/ADR-0001-deterministic-cli-plus-ide-skills.html" aria-current="page">ADR-0001: Deterministic CLI plus IDE-native skills</a></li><li><a href="../compatibility/smoke-tests/index.html">Live smoke tests</a></li><li><a href="../community/good-first-issues.html">Good first issues (ready to file)</a></li><li><a href="../legal/trademark-and-name-clearance.html">Name and trademark clearance</a></li><li><a href="../legal/legal-review-brief.html">Legal review brief</a></li><li><a href="../proof/accessibility.html">Accessibility audit of the documentation site</a></li></ul></div></aside>
   <main id="main" class="content"><article class="prose"><p class="crumbs"><a href="../index.html">ArchSutra AI</a> / Reference</p><h1 id="adr-0001-deterministic-cli-plus-ide-native-skills">ADR-0001: Deterministic CLI plus IDE-native skills</h1>
-<p class="meta">Version 0.1.2 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/decisions/ADR-0001-deterministic-cli-plus-ide-skills.md" rel="noopener">docs/decisions/ADR-0001-deterministic-cli-plus-ide-skills.md</a></p>
+<p class="meta">Version 0.1.4 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/decisions/ADR-0001-deterministic-cli-plus-ide-skills.md" rel="noopener">docs/decisions/ADR-0001-deterministic-cli-plus-ide-skills.md</a></p>
 <ul><li>Status: accepted</li><li>Date: 2026-10-31</li><li>Deciders: Vatsal Shah</li></ul>
 <h2 id="context">Context<a class="anchor" href="#context" aria-label="Link to this section">#</a></h2>
 <p>Users want AI architecture review without managing another API key. Shell scripts cannot call an IDE's authenticated model, and scraping IDE credentials is unsafe and unsupported.</p>
@@ -48,7 +48,7 @@
 </div>
 <footer class="footer">
   <div class="footer-inner">
-    <p><strong>ArchSutra AI</strong> v0.1.2. Design. Audit. Evolve. Created by <a href="https://github.com/shahvatsalofficial" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
+    <p><strong>ArchSutra AI</strong> v0.1.4. Design. Audit. Evolve. Created by <a href="https://shahvatsal.com" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
     <p class="fine">Review aid only. Not a certification, compliance attestation, security guarantee or legal advice. Not affiliated with Anthropic, OpenAI, Cursor, GitHub or Google; product names belong to their owners. <a href="../handbook/07-security-privacy-legal.html">Legal details</a>.</p>
   </div>
 </footer>

package/docs/handbook/01-executive-summary.html

@@ -19,7 +19,7 @@
 <link rel="icon" href="../assets/favicon.svg" type="image/svg+xml">
 <link rel="stylesheet" href="../assets/site.css">
 <script>try{var t=localStorage.getItem('as-theme');if(t)document.documentElement.setAttribute('data-theme',t)}catch(e){}</script>
-<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Executive summary","description":"The problem ArchSutra AI solves, what it delivers, what it costs, what it does not do, and the risks.","author":{"@type":"Person","name":"Vatsal Shah"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
+<script type="application/ld+json">{"@context":"https://schema.org","@type":"TechArticle","headline":"Executive summary","description":"The problem ArchSutra AI solves, what it delivers, what it costs, what it does not do, and the risks.","author":{"@type":"Person","name":"Vatsal Shah","url":"https://shahvatsal.com"},"inLanguage":"en","isPartOf":{"@type":"WebSite","name":"ArchSutra AI","url":"https://shahvatsalofficial.github.io/archsutra-ai"}}</script>
 </head>
 <body class="doc">
 <a class="skip" href="#main">Skip to content</a>
@@ -34,7 +34,7 @@
 <div class="layout">
   <aside id="sidebar" class="sidebar" aria-label="Documentation"><div class="nav-group"><p class="nav-title">Handbook</p><ul><li><a href="../handbook/index.html">Overview</a></li><li><a href="../handbook/01-executive-summary.html" aria-current="page">Executive summary</a></li><li><a href="../handbook/02-functional-specification.html">Functional specification</a></li><li><a href="../handbook/03-technical-specification.html">Technical specification</a></li><li><a href="../handbook/04-architecture.html">Architecture</a></li><li><a href="../handbook/05-user-guide.html">User guide</a></li><li><a href="../handbook/06-cli-reference.html">CLI reference</a></li><li><a href="../handbook/07-security-privacy-legal.html">Security, privacy and legal</a></li><li><a href="../handbook/08-testing-and-proof.html">Testing and proof</a></li><li><a href="../handbook/09-compatibility-and-roadmap.html">Compatibility and roadmap</a></li><li><a href="../handbook/10-contributor-guide.html">Contributor guide</a></li><li><a href="../handbook/11-glossary-and-faq.html">Glossary and FAQ</a></li><li><a href="../handbook/12-rule-catalog.html">Audit rule catalog</a></li><li><a href="../handbook/13-trust-and-assurance.html">Trust and assurance</a></li><li><a href="../handbook/14-real-world-evaluation.html">Real-world evaluation</a></li><li><a href="../handbook/15-supply-chain-and-release.html">Supply chain and release</a></li><li><a href="../handbook/16-performance-and-quality-metrics.html">Performance and quality metrics</a></li></ul></div><div class="nav-group"><p class="nav-title">Reference</p><ul><li><a href="../architecture/overview.html">Architecture overview</a></li><li><a href="../architecture/threat-model.html">Threat model (ArchSutra CLI and skills)</a></li><li><a href="../compatibility/matrix.html">Compatibility matrix</a></li><li><a href="../rfc/0001-archsutra-v0.1.html">RFC 0001: ArchSutra AI v0.1</a></li><li><a href="../decisions/ADR-0001-deterministic-cli-plus-ide-skills.html">ADR-0001: Deterministic CLI plus IDE-native skills</a></li><li><a href="../compatibility/smoke-tests/index.html">Live smoke tests</a></li><li><a href="../community/good-first-issues.html">Good first issues (ready to file)</a></li><li><a href="../legal/trademark-and-name-clearance.html">Name and trademark clearance</a></li><li><a href="../legal/legal-review-brief.html">Legal review brief</a></li><li><a href="../proof/accessibility.html">Accessibility audit of the documentation site</a></li></ul></div></aside>
   <main id="main" class="content"><article class="prose"><p class="crumbs"><a href="../index.html">ArchSutra AI</a> / Handbook</p><h1 id="executive-summary">Executive summary</h1>
-<p class="lede">The problem ArchSutra AI solves, what it delivers, what it costs, what it does not do, and the risks.</p><p class="meta">Version 0.1.2 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/handbook/01-executive-summary.md" rel="noopener">docs/handbook/01-executive-summary.md</a></p>
+<p class="lede">The problem ArchSutra AI solves, what it delivers, what it costs, what it does not do, and the risks.</p><p class="meta">Version 0.1.4 &middot; Source: <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/docs/handbook/01-executive-summary.md" rel="noopener">docs/handbook/01-executive-summary.md</a></p>
 <h2 id="the-problem">The problem<a class="anchor" href="#the-problem" aria-label="Link to this section">#</a></h2>
 <p>Software architecture decays quietly. Dependencies tangle, boundaries blur, secrets leak, and the reasons behind decisions are forgotten. Traditional architecture reviews are expensive, infrequent and hard to reproduce. Generic AI assistants can discuss architecture, but they tend to guess: they invent components, cite no evidence, and give different answers each time.</p>
 <h2 id="the-solution">The solution<a class="anchor" href="#the-solution" aria-label="Link to this section">#</a></h2>
@@ -50,16 +50,16 @@
 <h2 id="cost-and-licensing">Cost and licensing<a class="anchor" href="#cost-and-licensing" aria-label="Link to this section">#</a></h2>
 <p>Free and open source under Apache-2.0. Running the CLI costs nothing. Using the skills consumes your AI IDE's normal usage allowance. Any future server or bring-your-own-key mode would call third-party model providers at the user's expense and is <strong>not</strong> part of v0.1.</p>
 <h2 id="key-risks">Key risks<a class="anchor" href="#key-risks" aria-label="Link to this section">#</a></h2>
-<div class="table-wrap" tabindex="0" role="region" aria-label="Table 2: Key risks"><table><thead><tr><th scope="col">Risk</th><th scope="col">Impact</th><th scope="col">Mitigation</th><th scope="col">Owner</th></tr></thead><tbody><tr><td>Heuristic rules produce false positives or miss issues</td><td>Wasted effort or false comfort</td><td>Each finding lists caveats and confidence; labeled-fixture evaluation; reports say absence of findings is not proof</td><td>Maintainers</td></tr><tr><td>Host IDE skill layouts change</td><td>Install writes to a stale path</td><td>Adapters labelled <code>adapter</code>/<code>experimental</code>; <code>doctor</code>; smoke-test issue template</td><td>Maintainers, community</td></tr><tr><td>Prompt injection from repository content</td><td>Agent follows hostile text</td><td>Skills treat repo content as data; agents are read-only; residual risk documented</td><td>Users, host vendors</td></tr><tr><td>Name collision or trademark claim on &quot;ArchSutra&quot;</td><td>Rebranding cost</td><td>No registration or clearance search done; npm and GitHub exact-name checks were clear on 2026-10-31</td><td>Creator</td></tr><tr><td>Single-maintainer project</td><td>Bus factor</td><td>Open license, contributor docs, CI, full handbook</td><td>Creator</td></tr></tbody></table></div>
+<div class="table-wrap" tabindex="0" role="region" aria-label="Table 2: Key risks"><table><thead><tr><th scope="col">Risk</th><th scope="col">Impact</th><th scope="col">Mitigation</th><th scope="col">Owner</th></tr></thead><tbody><tr><td>Heuristic rules produce false positives or miss issues</td><td>Wasted effort or false comfort</td><td>Each finding lists caveats and confidence; labeled-fixture evaluation; reports say absence of findings is not proof</td><td>Maintainers</td></tr><tr><td>Host IDE skill layouts change</td><td>Install writes to a stale path</td><td>Adapters labelled <code>adapter</code>/<code>experimental</code>; <code>doctor</code>; smoke-test issue template</td><td>Maintainers, community</td></tr><tr><td>Prompt injection from repository content</td><td>Agent follows hostile text</td><td>Skills treat repo content as data; agents are read-only; residual risk documented</td><td>Users, host vendors</td></tr><tr><td>Name collision or trademark claim on &quot;ArchSutra&quot;</td><td>Rebranding cost</td><td>No registration or attorney clearance. Informal checks on 2026-10-31. On 2026-11-06 <code>archsutra-ai</code> is this project's npm package and <code>archsutra</code> was still unclaimed</td><td>Creator</td></tr><tr><td>Single-maintainer project</td><td>Bus factor</td><td>Open license, contributor docs, CI, full handbook</td><td>Creator</td></tr></tbody></table></div>
 <h2 id="decisions-needed-from-the-owner">Decisions needed from the owner<a class="anchor" href="#decisions-needed-from-the-owner" aria-label="Link to this section">#</a></h2>
-<ol><li>Trademark clearance for &quot;ArchSutra&quot; before any commercial use or paid offering.</li><li>Whether to publish to the npm registry (names <code>archsutra-ai</code> and <code>archsutra</code> were unclaimed when checked).</li><li>Priorities for the next milestone (live host smoke tests, more language analyzers, optional model runtimes).</li></ol>
+<ol><li>Trademark clearance for &quot;ArchSutra&quot; before any commercial use or paid offering.</li><li>Next npm release must be <code>0.1.4</code> or later, from GitHub Actions with provenance. <code>archsutra-ai@0.1.2</code> and <code>@0.1.3</code> are already published. <code>0.1.3</code> cannot be replaced. <code>archsutra</code> (no <code>-ai</code>) was still unclaimed on 2026-11-06. Do not publish that name from the parent stub.</li><li>Priorities for the next milestone (live host smoke tests, more language analyzers, optional model runtimes).</li></ol>
 <h2 id="where-to-go-next">Where to go next<a class="anchor" href="#where-to-go-next" aria-label="Link to this section">#</a></h2>
 <ul><li>How it works: <a href="04-architecture.html">Architecture</a></li><li>Try it: <a href="05-user-guide.html">User guide</a></li><li>Trust it: <a href="07-security-privacy-legal.html">Security, privacy and legal</a> and <a href="08-testing-and-proof.html">Testing and proof</a></li></ul></article></main>
   <aside class="rail"><nav class="toc" aria-label="On this page"><p class="nav-title">On this page</p><ul><li class="l2"><a href="#the-problem">The problem</a></li><li class="l2"><a href="#the-solution">The solution</a></li><li class="l2"><a href="#value">Value</a></li><li class="l2"><a href="#what-it-is-not">What it is not</a></li><li class="l2"><a href="#status">Status</a></li><li class="l2"><a href="#cost-and-licensing">Cost and licensing</a></li><li class="l2"><a href="#key-risks">Key risks</a></li><li class="l2"><a href="#decisions-needed-from-the-owner">Decisions needed from the owner</a></li><li class="l2"><a href="#where-to-go-next">Where to go next</a></li></ul></nav></aside>
 </div>
 <footer class="footer">
   <div class="footer-inner">
-    <p><strong>ArchSutra AI</strong> v0.1.2. Design. Audit. Evolve. Created by <a href="https://github.com/shahvatsalofficial" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
+    <p><strong>ArchSutra AI</strong> v0.1.4. Design. Audit. Evolve. Created by <a href="https://shahvatsal.com" rel="noopener">Vatsal Shah</a>. Licensed under <a href="https://github.com/shahvatsalofficial/archsutra-ai/blob/main/LICENSE" rel="noopener">Apache-2.0</a>.</p>
     <p class="fine">Review aid only. Not a certification, compliance attestation, security guarantee or legal advice. Not affiliated with Anthropic, OpenAI, Cursor, GitHub or Google; product names belong to their owners. <a href="../handbook/07-security-privacy-legal.html">Legal details</a>.</p>
   </div>
 </footer>

package/docs/handbook/01-executive-summary.md

@@ -48,13 +48,13 @@ Free and open source under Apache-2.0. Running the CLI costs nothing. Using the
 | Heuristic rules produce false positives or miss issues | Wasted effort or false comfort | Each finding lists caveats and confidence; labeled-fixture evaluation; reports say absence of findings is not proof | Maintainers |
 | Host IDE skill layouts change | Install writes to a stale path | Adapters labelled `adapter`/`experimental`; `doctor`; smoke-test issue template | Maintainers, community |
 | Prompt injection from repository content | Agent follows hostile text | Skills treat repo content as data; agents are read-only; residual risk documented | Users, host vendors |
-| Name collision or trademark claim on "ArchSutra" | Rebranding cost | No registration or clearance search done; npm and GitHub exact-name checks were clear on 2026-10-31 | Creator |
+| Name collision or trademark claim on "ArchSutra" | Rebranding cost | No registration or attorney clearance. Informal checks on 2026-10-31. On 2026-11-06 `archsutra-ai` is this project's npm package and `archsutra` was still unclaimed | Creator |
 | Single-maintainer project | Bus factor | Open license, contributor docs, CI, full handbook | Creator |
 
 ## Decisions needed from the owner
 
 1. Trademark clearance for "ArchSutra" before any commercial use or paid offering.
-2. Whether to publish to the npm registry (names `archsutra-ai` and `archsutra` were unclaimed when checked).
+2. Next npm release must be `0.1.4` or later, from GitHub Actions with provenance. `archsutra-ai@0.1.2` and `@0.1.3` are already published. `0.1.3` cannot be replaced. `archsutra` (no `-ai`) was still unclaimed on 2026-11-06. Do not publish that name from the parent stub.
 3. Priorities for the next milestone (live host smoke tests, more language analyzers, optional model runtimes).
 
 ## Where to go next