arkgate 4.5.7 → 4.6.1

package/docs/README.md

@@ -53,14 +53,15 @@ These are **not** the day-to-day product path. They stay in the repo for evidenc
 | Area | Path |
 |------|------|
 | Release notes (by version) | [releases/](releases/) · [CHANGELOG.md](../CHANGELOG.md) |
-| Epic plans (seeded + shipped) | [plans/](plans/) — maintainer seeds (e.g. [field-upgrade-mcp-truth](plans/field-upgrade-mcp-truth/README.md) **shipped in 4.5.6**; deep-module coach **shipped in 4.5.5**; domain fitness & session truth for **4.5.0**; improvement compass for **4.4.0**; agent contract surface for **4.3.0**). Product how-to stays in use/develop/agent-guide; plans are not required reading to use the package. |
+| Epic plans (seeded + shipped) | [plans/](plans/) — maintainer seeds (e.g. [team-parliament](plans/team-parliament/README.md) **4.6.1 prepared**; [five-door-autonomy](plans/five-door-autonomy/README.md) **4.6.1 prepared**; [understandable-ark-4.6](plans/understandable-ark-4.6/README.md) **4.6.0**; [field-upgrade-mcp-truth](plans/field-upgrade-mcp-truth/README.md) **shipped in 4.5.6**; deep-module coach **shipped in 4.5.5**; domain fitness & session truth for **4.5.0**; improvement compass for **4.4.0**; agent contract surface for **4.3.0**). Product how-to stays in use/develop/agent-guide; plans are not required reading to use the package. |
 | Claims audit | [audit/claims-matrix.md](audit/claims-matrix.md) |
 | Field adoption kit (scaffolding, not closed) | [field/](field/) |
 | Runtime hardening (experimental) | [production-hardening.md](production-hardening.md) |
 
-Current published: [releases/4.5.6.md](releases/4.5.6.md) (`arkgate@4.5.6` on npm `latest`).  
-Prior: [releases/4.4.0.md](releases/4.4.0.md) (`arkgate@4.4.0`).  
-Previous: [releases/4.3.0.md](releases/4.3.0.md) · [releases/4.2.1.md](releases/4.2.1.md) · [releases/4.2.0.md](releases/4.2.0.md) · [releases/4.1.1.md](releases/4.1.1.md).  
+Prepared: [releases/4.6.1.md](releases/4.6.1.md) (`arkgate@4.6.1` — not yet npm `latest`).  
+Current published: [releases/4.6.0.md](releases/4.6.0.md) (`arkgate@4.6.0` on npm `latest`).  
+Prior: [releases/4.5.7.md](releases/4.5.7.md) (`arkgate@4.5.7`).  
+Previous: [releases/4.5.6.md](releases/4.5.6.md) · [releases/4.5.5.md](releases/4.5.5.md) · [releases/4.5.0.md](releases/4.5.0.md) · [releases/4.4.0.md](releases/4.4.0.md) · [releases/4.3.0.md](releases/4.3.0.md) · [releases/4.2.1.md](releases/4.2.1.md) · [releases/4.2.0.md](releases/4.2.0.md) · [releases/4.1.1.md](releases/4.1.1.md).  
 Previous major: [releases/4.0.0.md](releases/4.0.0.md) (`arkgate@4.0.0`).  
 Config: [configuration.md](configuration.md) · Agent skills dual-plane: [agent-guide.md](agent-guide.md).
 

package/docs/agent-guide.md

@@ -233,7 +233,7 @@ When the top two shapes are close or projected governed coverage is below 90%, J
 `requiresConfirmation: true` and explains why in `confirmationReasons`.
 
 Human output highlights phase-1 layers and the analogy; JSON is the stable contract for
-MCP `ark_recommend` and the `/ark-architect` skill.
+MCP `ark_recommend` and the `/ark-adopt` skill (leftover name `/ark-architect` is a shortcut).
 
 ### Terminal onboarding (Phase B)
 
@@ -270,13 +270,17 @@ To remove a compact host integration, preview `ark start --remove-host <host>` a
 only after review. Ark removes only its exact compact artifacts, leaves customized files untouched
 as unresolved decisions, and restores the integration with `ark start --tools <host> --apply`.
 
-**Skill roles (expert depth — avoid overlap):** `/ark-autopilot` = **guided end-to-end** default
-when skills are installed (explore → apply A + propose/apply-with-ok B). `/ark-explore` = map +
-dual-plan **seed** + Shape residual (no apply); primary post-green map half. `/ark-coverage` = Ark
-**fitness** only (governed/gates). `/ark-think` = one decision (2–3 options). `/ark-adopt` =
-brownfield Align/Stabilize + seed Shape B. `/ark-loop` = plan A only. Empty plan A is not
-“architecture healthy” if design-weak residual remains. Full routing table: full-install
-`AGENTS.md` / [README expert skills](../README.md#expert-skills-escapes--not-onboarding).
+**Five doors (emphasize):** `/ark-adopt` = session 0 (greenfield scaffold + brownfield honesty —
+write the path). `/ark-place` = new feature (place **and write**). `/ark-autopilot` = apply
+plan A + one Shape refactor (invoke = approval). `/ark-explore` = map + dual-plan seed (no
+apply). `/ark-upgrade` = preview then apply in-turn. Other `/ark-*` names stay installed as
+**shortcuts**. Empty plan A is not “architecture healthy” if leftover design remains.
+
+**Team parliament:** adopt is a **contract session** (law-only). Feature work must not edit
+`ark.config.json` / `arkrules/*` / `.ark-baseline.json`. Prefer
+`ark-check --changed --base <merge-ref>` in local gates. `--contract-diff` + `--author`
+when `stewards` is set (`--author` is a GitHub handle or email, not git `user.name`).
+`ark status --vs <ref>` prints pin / contract / baseline drift.
 
 **Design fitness (3.0.1+ / Phase Q 3.0.3):** after checked edges are clean, doctor can still
 report **SUGGEST / ADAPT / ENFORCE · design-weak** using the mode it actually observed; a weak
@@ -290,7 +294,7 @@ npx ark-check --doctor --fail-on-new-smells --base-ref origin/main --json # opt-
 
 **Post-green path (Q01):** when design-weak, doctor sets `postGreenPath` / `primaryNextAction`
 (`clarify-for-ai`) — **one** Shape door: `/ark-explore` shape-focus → dual-plan B, then
-`/ark-autopilot` only to apply B with your OK. Do not skill-shop coverage/think for the same residual.
+`/ark-autopilot` applies one pilot. Do not skill-shop coverage/think for the same residual.
 
 **Pilot loop (Q04):** when design-weak, `pilotLoop.nextPilot` is **one** extraction card
 (pilot target, move, success, kill-switch). Apply **that one pilot only**, then re-doctor.
@@ -363,7 +367,7 @@ clusters per anchor directory (concentration, not volume — dispersed hooks nev
 fixed corpus-calibrated thresholds; anchors under `app/`/`pages/` are `fixedByConvention` and
 never move. `reshapePilot.nextPilot` is a **proposed** one-at-a-time card (`moveSample`,
 `movesTotal`, `successSignal`, `killSwitch`, `doNot[]`): run it only via `/ark-loop` through the
-write gate + atomic preflight; merges are `/ark-architect` judgment cards. `notAScore`, never a
+write gate + atomic preflight; merges are `/ark-adopt` / `/ark-autopilot` judgment cards. `notAScore`, never a
 verdict/`designFitness` input; there is no apply path.
 
 **Reshape decision memory (Y01):** when the team accepts, defers, or rejects that target, record
@@ -479,21 +483,21 @@ in `ark.config.json`.
 closed solely by `import type` (common with generated route trees) is **not** reported as
 `CIRCULAR_DEPENDENCY`. Value cycles still fail.
 
-### MCP `ark_recommend` and `/ark-architect` (Phase C)
+### MCP `ark_recommend` and `/ark-adopt` (Phase C)
 
 The `ark-mcp` server exposes **`ark_recommend`** — same JSON as
-`ark-check --recommend --json`. Call it (or invoke `/ark-architect`) before
+`ark-check --recommend --json`. Call it (or invoke `/ark-adopt`) before
 generating project structure on greenfield or early-adoption repos.
 
 `ark-mcp --session-context` appends a one-line enthusiast hint when governed
 coverage is low or the config is fresh:
 
 ```
-New to Ark? Run /ark-architect or: ark-check --recommend
+New to Ark? Run /ark-adopt (or /ark-architect) or: ark-check --recommend
 ```
 
-The `/ark-architect` skill ships in `templates/skills/ark-architect.md` and installs
-via `ark-check --install-agent-gates`.
+The `/ark-adopt` skill ships in `templates/skills/ark-adopt.md` (leftover
+`/ark-architect` is a shortcut) and installs via `ark-check --install-agent-gates`.
 
 ### Adoption plan artifact (Phase E)
 
@@ -588,9 +592,9 @@ checks; this improves early feedback without upgrading Codex's bypassable hook t
 boundary. Removing `AGENTS.md`, skills, or session context never changes the contract verdict.
 
 Do not invent layers outside the 11-layer profile or named presets. Unrecognized
-directories (`utils/`, `lib/`) must be classified explicitly via `/ark-contract`.
+directories (`utils/`, `lib/`) must be classified explicitly via `/ark-adopt`.
 
-**Brownfield** (existing messy repo): use `/ark-adopt` and [brownfield-adoption.md](brownfield-adoption.md), not `/ark-architect`.
+**Brownfield** (existing messy repo): use `/ark-adopt` and [brownfield-adoption.md](brownfield-adoption.md). `/ark-architect` is a leftover shortcut to the same door.
 
 ## Supported agent hosts
 
@@ -607,10 +611,10 @@ npx arkgate-check --install-agent-gates --tools claude,cursor,codex,grok,antigra
 
 | Host | Installed paths | Skills path |
 |------|-----------------|-------------|
-| Claude Code | `.claude/settings.json` hook + `.mcp.json` / `claude mcp add` | `.claude/skills/<name>/SKILL.md` |
-| Cursor | `.cursor/mcp.json` + `.cursor/rules/ark.mdc` | `.cursor/commands/` |
+| Claude Code | `.claude/settings.json` hook + `.mcp.json` / `claude mcp add` | **Repo:** `.claude/skills/<name>/SKILL.md`; **home:** `$CLAUDE_HOME/skills` (default `~/.claude/skills`, `--claude-home`) |
+| Cursor | `.cursor/mcp.json` + `.cursor/rules/ark.mdc` | `.cursor/commands/` (Cursor also loads Claude **home** skills from `~/.claude/skills`) |
 | OpenAI Codex | `.codex/config.toml` (project primary, relative `--root .`; configured on disk is not runtime-active until restart + `ark_identity` match); optional legacy `$CODEX_HOME/config.toml` fallback uses absolute roots and scoped secondaries — see [ai-gates.md](ai-gates.md) | **Repo:** `.agents/skills/<name>/SKILL.md`; **home:** `$CODEX_HOME/skills/<name>/SKILL.md` (`--codex-home`) |
-| **Grok Build** | `.grok/hooks/ark-write-gate.json` + `.grok/config.toml` / `.mcp.json` | `.grok/skills/<name>/SKILL.md` |
+| **Grok Build** | `.grok/hooks/ark-write-gate.json` + `.grok/config.toml` / `.mcp.json` | **Repo:** `.grok/skills/<name>/SKILL.md`; **home:** `$GROK_HOME/skills` (default `~/.grok/skills`, `--grok-home`) |
 | Google Antigravity | `.agents/hooks.json` (+ `GEMINI.md` for shared Gemini consumers) | `.agents/skills/<name>/SKILL.md` |
 | OpenCode | `opencode.json` MCP (`type: local`; advisory) | `.opencode/skills/<name>/SKILL.md` |
 
@@ -618,10 +622,13 @@ This is a path reference, not a guarantee table. Full copy-paste setups:
 [ai-gates.md](ai-gates.md). Skill inventory: main
 [README](../README.md#other-skills-only-when-you-need-them).
 When several repositories share one machine, repo catalogs stay pinned and isolated; unchanged
-skill bodies are not rewritten for a version stamp. The optional `$CODEX_HOME/skills` catalog is
-monotonic across ArkGate 4.2.0+ installers. Pre-4.2 binaries ignore its metadata and lock, so
-upgrade legacy repos before they write the optional home catalog. See
-[AI gates — Codex skill catalog](ai-gates.md#codex-skill-catalog-skillmd-not-flat-prompts).
+skill bodies are not rewritten for a version stamp. Shared **home** catalogs (Codex since 4.2;
+Claude/Grok since 4.6) are the machine floor: always latest additive, never downgrade. Refresh
+with `--agent-homes` (or `--claude-home` / `--grok-home` / `--codex-home`). Absent home trees
+are normal — doctor stays quiet until `ark-*` skills exist there. Pre-4.2 binaries ignore Codex
+home metadata and lock, so upgrade legacy repos before they write the optional Codex home
+catalog. See [AI gates — Codex skill catalog](ai-gates.md#codex-skill-catalog-skillmd-not-flat-prompts)
+and [shared Claude/Grok homes](ai-gates.md#shared-claude--grok-home-skills).
 
 ### Install skills — Ark and ecosystem {#install-skills-ark-and-ecosystem}
 

package/docs/ai-gates.md

@@ -446,6 +446,25 @@ severity **info**, marked `deferred: true`, and omitted from doctor **Primary ne
 `/ark-upgrade` on Grok/Claude is not Incomplete because of them. **Temp/upgrade primary roots**
 stay fail-closed urgent (rewritten, not multi-project).
 
+### Shared Claude / Grok home skills {#shared-claude--grok-home-skills}
+
+Project catalogs follow that checkout’s ArkGate pin (they may lag). Shared user-home catalogs
+are the **machine floor**:
+
+| Scope | Path | Flag |
+|-------|------|------|
+| Claude home | `$CLAUDE_HOME/skills` (default `~/.claude/skills`) | `--claude-home` |
+| Grok home | `$GROK_HOME/skills` (default `~/.grok/skills`) | `--grok-home` |
+| All three + Codex | same monotonic protocol | `--agent-homes` |
+
+Doctor reports `agentHomeGaps` only when those catalogs already contain `ark-*` skills and
+lag the installed package. Temp/upgrade `--root` never mutates default user homes. Cursor
+sessions treat a stale Claude home as urgent because Cursor loads `~/.claude/skills`.
+
+```bash
+npx arkgate-check --install-agent-gates --skills-only --agent-homes --force
+```
+
 ### Codex skill catalog (SKILL.md, not flat prompts)
 
 Codex discovers skills as directories containing `SKILL.md` (Agent Skills standard):

package/docs/configuration.md

@@ -190,7 +190,7 @@ a hash-bound policy weakening. Empty `appliesTo: []` fails closed; zero-match gl
 
 **What they do not do:** prove business semantics end-to-end; replace Layers import edges;
 make “green” mean elegant Shape. Promoting structure to enforced can force rename-to-pass
-heuristics — prefer judgment extraction via `/ark-fix` / `/ark-loop` when the real goal is
+heuristics — prefer judgment extraction via `/ark-autopilot` when the real goal is
 Domain ownership.
 
 ```bash
@@ -198,7 +198,7 @@ Domain ownership.
 npx arkgate-check --rules-inventory --json
 ```
 
-Edit ArkRules through skill `/ark-contract`; extract/implement via `/ark-fix` or `/ark-loop`.
+Edit ArkRules through `/ark-adopt` (session 0) or `/ark-autopilot`; extract/implement via `/ark-autopilot`.
 
 ## Contract transitions
 
@@ -239,6 +239,40 @@ JSON artifact passed with `--policy-ack`:
 The acknowledgement must list every blocking finding exactly. It is not a permanent allowlist:
 changing either contract changes its hash and invalidates the acknowledgement.
 
+## Team parliament (law vs feature)
+
+Optional `stewards` lists **GitHub handles or emails** who may **loosen** the contract or
+**grow** the baseline (`pedroknigge` or `pedroknigge@users.noreply.github.com` — not
+`Pedro Knigge`). The field is metadata — it does not change the policy hash. The lock
+matches `--author`, then `GITHUB_ACTOR` / `ARK_STEWARD`, then `GIT_AUTHOR_EMAIL`. A
+noreply GitHub mail and the handle are the same person. Git `user.name` is not identity.
+
+Doctor detects several recent authors or a CODEOWNERS file (`doctor.stewardNudge`).
+When `stewards` is empty it **asks** who owns the law and proposes handles or emails.
+When the list exists but CODEOWNERS is ahead, or you started with one steward and git
+now shows more authors, it shows the **gap** and asks whether to update. `/ark-adopt`
+writes only after you confirm — it does not invent names or remove entries.
+
+```json
+"stewards": ["pedroknigge", "Amarilla-David"]
+```
+
+Law files (`ark.config.json`, `arkrules/*`, `.ark-baseline.json`) are a different change
+type than product source:
+
+| Check | What it does |
+|-------|----------------|
+| `ark-check --changed --base origin/dev` | Layer check on touched sources only. A CSS/i18n PR pays almost nothing. |
+| `ark-check --against origin/dev` | New violation keys vs **that ref's** baseline (not only HEAD). |
+| `ark-check --contract-diff --base origin/dev` | Classifies tighten / loosen / reclassify / baseline-grow. |
+| `--contract-session --author <id>` | Law-only PR. Mixed law+product still fails. Loosen/grow need a listed steward. |
+| `--persona touch\|contributor\|agent\|steward` | Budget presets for the same teeth. |
+| `ark status --vs origin/dev` | One line: pin / contract / baseline drift vs that ref. |
+
+Write-gate ApplyPatch denies a batch that mixes law files with product source. Humans who
+never hit PreToolUse are unchanged. Local `pnpm` gates should call `--changed --base`, not
+only full-tree `--strict-merge`.
+
 MCP clients can call `ark_policy_delta` with the previous `baseConfig`, an optional candidate
 contract (the current project contract is the default), and the same optional acknowledgement.
 It invokes the public classifier directly, is read-only, and marks a blocking result as an MCP

package/docs/develop.md

@@ -35,9 +35,9 @@ Local write hardness **differs by host**. CI required status is the shared hard
 
 | Host | Local write | MCP | Merge |
 |------|-------------|-----|-------|
-| Claude · Grok · Antigravity | Hard PreToolUse when installed + trusted | Advisory | Required status context |
-| Codex · OpenCode | Best-effort / advisory | Advisory | Required status context |
-| Cursor | Advisory only | Advisory | Required status context |
+| Claude · Grok · Antigravity | Pre-write block when installed + trusted | Advisory | Required status context |
+| Codex · OpenCode | Warning only (not blocked) | Advisory | Required status context |
+| Cursor | Pre-write block for Write/StrReplace when `.cursor/hooks.json` is trusted | Advisory | Required status context |
 
 Full matrix and install commands: [ai-gates.md](ai-gates.md) · canonical table in [README](../README.md#host-enforcement-support).
 
@@ -65,7 +65,7 @@ can show `runtimeObserved: true` even when branch-protection policy is plan-unav
 | Concern | Doc / tool |
 |---------|------------|
 | Layers, rules, globs | [configuration.md](configuration.md) · `ark.config.json` |
-| ArkRules (structure + invariants) | [configuration.md](configuration.md#arkrules-intra-layer-opt-in) · `arkRules` / `arkrules/*` · skill `/ark-contract` |
+| ArkRules (structure + invariants) | [configuration.md](configuration.md#arkrules-intra-layer-opt-in) · `arkRules` / `arkrules/*` · skill `/ark-adopt` (session 0) or `/ark-autopilot` |
 | Rules inventory (brownfield) | `arkgate-check --rules-inventory` · MCP `ark_rules_inventory` |
 | Stable package API | [package-surface.md](package-surface.md) |
 | Diagnostic codes (`ruleId` why/fix) | [diagnostics.md](diagnostics.md) · root `DIAGNOSTIC_CATALOG` |
@@ -133,10 +133,22 @@ npx arkgate agents-md --write       # embed/refresh projection markers
 npx arkgate preflight --changes changes.json --json
 npx arkgate upgrade --json          # managed content preview
 npx arkgate upgrade --apply
+npx arkgate-check --changed --base origin/dev
+npx arkgate-check --against origin/dev
+npx arkgate status --vs origin/dev
 ```
 
 ---
 
+## Team parliament (law vs feature)
+
+`ark.config.json`, `arkrules/*`, and `.ark-baseline.json` are a **constitution**. A product PR
+must not amend them. Optional `stewards` (GitHub handle or email) makes loosen / baseline-grow
+steward-only. Doctor `stewardNudge` asks who owns the law or shows list drift — never invents
+names. Details: [configuration.md](configuration.md#team-parliament-law-vs-feature).
+
+---
+
 ## Optional experimental runtime
 
 Gates need **no** runtime kernel. `@arkgate/runtime` is experimental, separate package, not the day-zero product. See [package-surface.md](package-surface.md) and [production-hardening.md](production-hardening.md).

package/docs/enthusiast/README.md

@@ -70,7 +70,7 @@ Deep teaching example (runnable API + break exercises): [hexagonal-order-api](ht
 
 | Situation | Use |
 |-----------|-----|
-| New or empty repo | `/ark-architect`, `ark-check --recommend`, gallery starters |
+| New or empty repo | `/ark-adopt`, `ark-check --recommend`, gallery starters |
 | Existing messy codebase | `/ark-adopt`, [brownfield playbook](../brownfield-adoption.md) |
 
 ## Related

package/docs/enthusiast/how-to-agent-gates.md

@@ -15,8 +15,8 @@ Installs:
   Still exit 2 / hard block; never silent write. Drop `--hook-repair` for
   reject-only prose, or set `ARK_HOOK_REPAIR=0` and omit the flag.
 - MCP server entry (`.mcp.json`, Cursor/Codex/Grok equivalents)
-- `/ark-*` skills including **`/ark-architect`**, **`/ark-autopilot`**, **`/ark-loop`**
-  (with current `mechanical-safe` remediation kinds)
+- `/ark-*` skills: five doors **`/ark-adopt`**, **`/ark-place`**, **`/ark-autopilot`**,
+  **`/ark-explore`**, **`/ark-upgrade`** (other names are shortcuts)
 
 | Host | Extra paths |
 |------|-------------|
@@ -33,7 +33,7 @@ local, MCP, CI, and repair guarantees. The table above only lists installed path
 `arkgate-mcp --session-context` appends when governed coverage is low:
 
 ```
-New to Ark? Run /ark-architect or: ark-check --recommend
+New to Ark? Run /ark-adopt (or /ark-architect) or: ark-check --recommend
 ```
 
 ## Verify gates

package/docs/enthusiast/how-to-pick-shape.md

@@ -14,7 +14,7 @@ Call tool **`ark_recommend`** — same JSON as `--recommend --json`.
 
 ## Skill
 
-Run **`/ark-architect`** on a greenfield or early-adoption repo.
+Run **`/ark-adopt`** on a greenfield or early-adoption repo (leftover `/ark-architect` is a shortcut).
 
 ## What to read in the output
 
@@ -37,7 +37,7 @@ If `confidence < 0.5`, ask:
 1. Will this app save data between sessions?
 2. Is this one app or several in one repository?
 
-Then re-run `--recommend` or continue with `/ark-architect`.
+Then re-run `--recommend` or continue with `/ark-adopt`.
 
 ## Reference
 

package/docs/enthusiast/tutorial-first-project.md

@@ -61,7 +61,7 @@ Or copy a [gallery starter](../enthusiast/how-to-gallery-starter.md) and run `np
 npx ark-check --install-agent-gates
 ```
 
-This installs `/ark-architect`, `/ark-place`, `/ark-autopilot`, and the other `/ark-*` skills for Claude, Cursor, Codex, Grok, and other detected hosts.
+This installs the five doors (`/ark-adopt`, `/ark-place`, `/ark-autopilot`, `/ark-explore`, `/ark-upgrade`) and leftover shortcut names for Claude, Cursor, Codex, Grok, and other detected hosts.
 
 ## 6. Verify honestly
 
@@ -75,9 +75,10 @@ Report `governed.percent` truthfully. An empty layer is fine; an ungoverned `lib
 
 ## 7. Build a feature with the agent
 
-Invoke `/ark-architect` once at the start, then `/ark-place` for each new file. The agent
+Invoke `/ark-adopt` once at the start, then `/ark-place` for each new file. The agent
 should place use cases in `application/`, ports in `domain/`, and never import the database
-into `domain/`.
+into `domain/`. Do not edit `ark.config.json` in the same change as a feature — that is a
+steward contract session. Teams: `ark-check --changed --base origin/dev`.
 
 ## Next steps
 

package/docs/package-surface.md

@@ -47,6 +47,7 @@ hardening guide remains repository-hosted rather than duplicated in the gate tar
 | **Managed upgrade self-service honesty (4.5 / DF05)** | `ark upgrade [--json]` → `selfService` (+ human “Self-service honesty” lines) | Additive, advisory. Answers without a maintainer: write-path activation labels per selected host (`hard`\|`advisory`\|`unavailable`) and customized content-identity preserve (`customizedPaths` / `customizedContentPreserved`). Soft hosts never hard; upgrade never invents `hardWriteActive` from disk alone. Always `notAScore: true`. Not a gate input; not part of `planDigest`. |
 | **Product honesty readiness split (4.1.1)** | doctor JSON `productHonesty` | Additive. `unfinished` / `headline` / `primaryNextAction` / `reasonIds` remain; EH adds `contractReadiness` (`ready`\|`partial`\|`not-ready`), `localWriteBoundary` (`advisory`\|`hard`\|`unverified`\|`unknown`), `architectureReasonIds`, `environmentResidualIds` / `environmentResiduals`. Soft-write hosts stay in evidence without alone forcing global **Not finished**. `notAScore: true` always. |
 | **Policy transition analysis (3.1.0)** | `analyzePolicyDelta(...)`; MCP `ark_policy_delta`; CLI `--policy-base` / `--policy-base-ref` / `--policy-ack`; check JSON `policyDelta` | Additive schema `1.0`. Classifications and finding ids are deterministic. Weakening/judgment requires an acknowledgement bound to both policy hashes and the exact blocking finding set. |
+| **Team parliament (law vs feature)** | Optional `stewards` on `ark.config.json` (GitHub handle or email); CLI `--changed` / `--against` / `--base` / `--contract-diff` / `--contract-session` / `--persona` / `--author`; check JSON `teamParliament`; `ark status --vs`; write-gate mixed-batch deny | Additive. Law files must not mix with product source. Loosen / baseline-grow are steward-only when `stewards` is set. `--against` ratchets vs the base-ref baseline. `--changed` scans touched sources. `stewards` is excluded from policy hash. Identity is handle or email, not git `user.name`. No org plane. |
 | **Atomic change preflight (3.1.0)** | `preflightChange(...)`; CLI `ark preflight --changes <file> --json`; MCP `ark_prepare_change` | Additive schema `1.0`. One complete governed production-source `{path,content}` / `{path,delete:true}` batch; read-only; returns operation, content/tree/policy/compiler fingerprints and stable graph findings. MCP availability alone is advisory. |
 | **Architecture change map (3.1.0)** | `arkgate/schema/change-map` or `arkgate/schema/ark.change-map.schema.json`; CLI `ark preflight --change-map <file>`; MCP `ark_prepare_change.changeMap` | Optional strict schema `1.0`. Canonical planned paths + operations + resolved Ark layers + dependencies between planned files. Preflight returns `changeMapHash`; absence is normal and adds no project file. Structural intent only, never behavioral completion. |
 | **Structural convergence (3.1.0)** | `analyzeArchitectureConvergence(...)`; map-enabled `preflightChange(...)`; existing CLI/MCP preflight adapters | Additive `convergence` result with stable `satisfied`, `missing`, `contradictory`, and `unplanned` findings. Uses the supplied/current project tree as base and the explicit complete change set as candidate; no implicit Git or LLM input. `readOnly: true`; `behavioralCompletion: "not-evaluated"`. Structural mismatch makes preflight invalid. |
@@ -56,7 +57,7 @@ hardening guide remains repository-hosted rather than duplicated in the gate tar
 | **`arkgate/schema/analysis-result`** or **`arkgate/schema/ark.analysis-result.schema.json`** | Public CLI/MCP/hook diagnostic envelope (`schemaVersion`, `mode`, `valid`, `completeness`, `completenessReasons`, `diagnostics`, resolved identities) | Schema **`1.5`** adds optional stable finding refs on diagnostics: `findingRef` (`fnv1a-` + hex), `targetKey` (baseline-compatible freeze identity), `docsCodePath` (`docs/diagnostics.md#RULE_ID`). Factory-emitted diagnostics always include them; consumer-owned 1.0–1.4 values remain valid without them. `1.4` added optional `evidence.arkruleId` / `evidence.arkruleSource` for ArkRules; `1.3` distinguished `resolved-candidate-facts` from `lexical-compatibility`; partial/unavailable analysis is always non-green, and resolved complete/partial results require policy/resolver/facts/tree identities. `1.2` added completeness and remains accepted alongside consumer-owned 1.0/1.1 values. |
 | **Stable finding refs (4.3)** | Root API `adapterFindingTargetKey` / `adapterFindingRefFromTargetKey` / `toAdapterDiagnostic` / `createAdapterResult`; CLI/MCP/repair envelopes via analysis-result diagnostics | Multi-turn re-address without fuzzy message match. `targetKey` **is** the baseline (occurrence) key so freeze identity is never orphaned; `findingRef` is a compact FNV-1a of that key. Line/message drift does not change the ref. Multi-turn fixture: `tests/fixtures/finding-refs/multi-turn-stability.json`. |
 | **Diagnostic code catalog** | Root API `DIAGNOSTIC_CATALOG` / `getDiagnosticCatalogEntry` / `diagnosticDocsPath`; docs [diagnostics.md](diagnostics.md) (`#RULE_ID` anchors) | Closed vocabulary of public `ruleId`s with why/fix anchors. Cataloguing only — no new rule semantics. Remediation parity is test-guarded. Docs ship in the npm tarball. |
-| **Status manifest** | CLI `ark status [--json]`; MCP `ark_status`; `arkgate/schema/status-manifest`; root API `buildStatusManifest` / `ARK_STATUS_MANIFEST_SCHEMA` / `projectStatusImprovementCompass` | Schema `1.0`. One session/project snapshot: identity binding, honest write-path activation (`hard`\|`advisory`\|`unavailable`), last-check summary, rules residual counts, primary next action, and **`improvementCompass`** with honesty **`mode`** `full`\|`subset`\|`unavailable` (residual ids only; always `notAScore: true`; optional `reasonCode`/`reason`/`factsSource`/`contractHash`). **Not a score.** Residual never changes gate verdicts. Never prompts (`CI=1` forces JSON). Optional `--expected-root` / `--expected-project-id` (MCP `project`) for matched vs stale identity. |
+| **Status manifest** | CLI `ark status [--json] [--vs <ref>]`; MCP `ark_status`; `arkgate/schema/status-manifest`; root API `buildStatusManifest` / `ARK_STATUS_MANIFEST_SCHEMA` / `projectStatusImprovementCompass` | Schema `1.0`. One session/project snapshot: identity binding, honest write-path activation (`hard`\|`advisory`\|`unavailable`), last-check summary, rules residual counts, primary next action, **`improvementCompass`** with honesty **`mode`** `full`\|`subset`\|`unavailable` (residual ids only; always `notAScore: true`; optional `reasonCode`/`reason`/`factsSource`/`contractHash`), and optional **`vsBase`** (pin / contract / baseline grow vs a git ref; advisory only). **Not a score.** Residual never changes gate verdicts. Never prompts (`CI=1` forces JSON). Optional `--expected-root` / `--expected-project-id` (MCP `project`) for matched vs stale identity. |
 | **Agent contract projection** | CLI `ark agents-md [--write] [--check] [--stdout] [--json]`; install/upgrade AGENTS templates; root API `buildAgentProjectionBlock` / `mergeAgentProjectionDocument` | Schema `1.0` (projection markers). Version-stamped managed block (`arkgateVersion` + contract summary + diagnostic short list). **Non-authoritative** — not a gate input; enforcement is ark-check / hooks / CI. Content-identity merge preserves customized regions outside markers. Drift: `--check` vs package version. |
 | **Agent Skills packaging** | `templates/agent-skills/<name>/SKILL.md` (+ package README); root API `ARK_SKILL_NAMES` / `validateAgentSkillsPackage`; `npm run check:agent-skills` | Schema `1.0` (package contract). Same **13** skill names as flat templates; Agent Skills–compatible layout for `npx skills add`. No new skill names. Layout is generated 1:1 from `templates/skills/*.md`. |
 | **`arkgate/schema/arkrules`** or **`arkgate/schema/ark.arkrules.schema.json`** | Per-layer structure sensors + invariant catalog (ADR 0012) | Schema `1.0`. Opt-in via root `arkRules` map (`ark.config` schema `1.1`). |
@@ -209,8 +210,9 @@ production deployment would need to satisfy; it is not a readiness certification
 ## Release notes (maintainers)
 
 Ship notes for a version live under [releases/](https://github.com/pedroknigge/arkgate/tree/main/docs/releases)
-(current published: [4.5.6.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.5.6.md);
- prior published: [4.5.0.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.5.0.md), [4.4.0.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.4.0.md), [4.3.0.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.3.0.md),
+(prepared: [4.6.1.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.6.1.md);
+ current published: [4.6.0.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.6.0.md);
+ prior published: [4.5.7.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.5.7.md), [4.5.6.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.5.6.md), [4.5.0.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.5.0.md), [4.4.0.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.4.0.md), [4.3.0.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.3.0.md),
 [4.2.1.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.2.1.md);
 previous: [4.2.0.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.2.0.md),
 [4.1.1.md](https://github.com/pedroknigge/arkgate/blob/main/docs/releases/4.1.1.md),