arkgate 4.7.1 → 4.7.3

package/docs/product-voice.md

@@ -11,32 +11,125 @@ deliberately in the same change). Voice is product surface, not marketing decora
 
 ---
 
+## Canonical misreader (old-school engineer)
+
+First-contact copy has a **named test reader**: a senior who learned Fowler, ESLint, and CI
+quality gates — and does not live in agent hosts. If they can walk away with any of the
+three documented misreads, the line failed. Rewrite it. Do not argue the config at them.
+
+This reader is not a junior to educate and not a vibe-coder to simplify for. They are why
+“gate”, “contract”, and “architecture config” in the first sentence lose the room.
+
+### Misread A — “file structure keeper for TypeScript”
+
+**Cause:** the first sentence is folders, layers, `ark.config.json`, or “who may import whom.”
+**They hear:** eslint-plugin-boundaries, dependency-cruiser, Nx tags.
+
+The layer plane *is* import rules. That is not the product. The product is **when** those
+rules fire: the host blocks the write; required CI blocks the merge.
+
+### Misread B — “a Gateway”
+
+**Cause:** bare “gate” as the first unexplained noun; or verbs from the wrapper family:
+access, wrap, abstract, “extend without touching what it represents.”
+**They hear:** Fowler Gateway / API Gateway / facade — an intermediate object that talks
+to a resource so callers do not.
+
+A Gateway **lets traffic through and translates**. ArkGate **decides whether the write
+enters**. It is not a layer in the app. It does not wrap Stripe, a database, or HTTP.
+
+### Misread C — “not a contract, a manifesto”
+
+**Cause:** calling `ark.config.json` a **contract** (or leading with the file) before the
+deny is visible.
+**They hear:** Agile Manifesto, a principles doc, AGENTS.md — intent you hope people follow.
+
+They are right whenever the checkpoint is off. A contract in this reader’s dictionary has
+two parties and a consequence. Ours is: the host blocks the write; required CI blocks the
+merge. Without that, the file **is** a manifesto. Do not win the argument by repeating
+“it is a contract.” Show the teeth. Human copy already prefers **architecture config**
+over contract; **law / constitution** only after the checkpoint is named.
+
+Advisory-only adoption (`stance: "advisory-only"`, or no required merge status) is the
+honest manifesto case. Say so. Do not dress it as a binding contract.
+
+### First-contact order (required)
+
+On README, `docs/use.md`, develop, enthusiast, the docs hub, and the product site, use
+**common software English**. Do not invent a synonym and then explain it.
+
+**Locked sentences:**
+
+1. **Deny:** `If the AI writes an illegal import, the write is rejected. The same check fails the pull request.`
+2. **Not-that (one line):** `Not an API Gateway. Not a folder linter. If the check is not required on the PR, the rules file is just documentation.`
+3. **How:** `One rules file. One check. One next step.`
+
+The 4.6.2 line `One architecture config. One check. One coach.` is **historical**. Do not
+lead with it. First-run CLI help stays under the AL04 noun budget.
+
+ADR 0001 keeps the product title **ArkGate — Architecture Co-pilot for AI TypeScript**.
+That identity line is not a substitute for the deny.
+
+---
+
+## Common language (allowlist)
+
+First-contact copy (README hero, use/develop/hub openings, site home / start / how-it-works
+heroes, npm description, `llms.txt` lede) may use **only** these kinds of words:
+
+| Say | Do not say on first contact |
+|-----|-----------------------------|
+| illegal import / import rules / who may import whom | architecture config, contract, constitution, law |
+| the write is rejected / the hook rejects the write | write checkpoint, write gate, write firewall, pre-write block |
+| required CI check / fails the pull request / required GitHub status | merge gate, extra merge teeth |
+| rules file (`ark.config.json`) | the contract, the manifesto (except the one honest “just documentation” line) |
+| `arkgate-check --doctor` — shows what's wrong and what to do first | doctor is the control plane, coach, co-pilot |
+| warning, not blocked | advisory write |
+| extra rules inside a layer | dual plane, intra-layer sensors |
+| optional extra (off unless you turn it on) | third extra, gated complement |
+
+**Categorical brands** (do not hide, do not replace with a synonym): **ArkGate**, **ArkRules**
+(opt-in extra rules inside a layer), **ArkRun** (opt-in; not required). Gloss once. Then the
+common word.
+
+**Command names stay command names:** `arkgate`, `arkgate-check --doctor`, `--strict-merge`.
+Do not nickname them.
+
+If a term is not on this allowlist and is not a brand or a command, **cut it** or move it
+below the fold (develop docs, JSON field names, ADRs).
+
+Where we cannot use a common word — because the thing is ours — **one sentence, no hedging:**
+“ArkRules is optional. It is extra rules inside a layer. It is off unless you turn it on.”
+
+---
+
 ## North star
 
 A track so simple a newcomer enters, so strict a senior trusts — and the AI ships faster
 because the design space is small and honest.
 
-- **Gate side:** architecture config (`ark.config.json`) + pre-write block where the host
-  supports it + required CI. Deterministic. Don’t show green if we could not verify.
-  Two planes: **import rules** (who may import whom) always; **ArkRules** (structure rules
-  inside a layer) opt-in. Third extra: **ArkRun** (kernel usage + declarations) via companion
-  `@arkgate/runtime` — not a durability claim.
-- **Coach side:** where code belongs, who talks to whom, how; fix imports first, then leftover
-  design work; one small refactor at a time; never silent auto-reshape; never weaken the config.
-- **Five-door autonomy:** invoking `/ark-adopt`, `/ark-place`, `/ark-autopilot`, `/ark-explore`,
-  or `/ark-upgrade` **is** the approval. The agent writes or maps in that turn. CLI/MCP are
-  sensor + gate. Silent reshape from the compact router (unasked) stays forbidden.
-- **Team parliament:** the architecture file is a **constitution**. A product change must not
-  amend it. Stewards own loosen and baseline-grow. The ratchet is **new vs the branch you
+- **Reject the write. Fail the PR.** Rules file (`ark.config.json`) + the hook rejects listed
+  writes where the host supports it + required CI. Deterministic. Don’t show green if we could
+  not verify. Two kinds of rules: **import rules** (who may import whom) always; **ArkRules**
+  (extra rules inside a layer) opt-in. Optional extra: **ArkRun** (kernel usage + declarations)
+  via companion `@arkgate/runtime` — not a durability claim. Not a Gateway.
+- **Where code belongs:** who talks to whom, and how; fix illegal imports first, then leftover
+  design work; one small refactor at a time; never silent auto-reshape; never weaken the rules
+  file.
+- **Five doors:** invoking `/ark-adopt`, `/ark-place`, `/ark-autopilot`, `/ark-explore`,
+  or `/ark-upgrade` **is** the approval. The agent writes or maps in that turn. CLI/MCP check;
+  they do not silently rewrite. Silent reshape from the compact router (unasked) stays forbidden.
+- **Team:** the rules file is a different change type than product code. A product change must
+  not amend it. Stewards own loosen and baseline-grow. The ratchet is **new vs the branch you
   merge to**, not only the file on this checkout. A small PR pays `--changed --base`, not
   the whole tree. Humans who never hit the write hook are allowed to ignore Ark.
-- **Agent contract surface (4.3.0):** agents read **guardrail catalogs** and **scan** evidence;
-  they **process** (judge / coach) outside the package. Projection and skills never become the
-  pass/fail gate.
-- **Improvement compass (4.4.0):** residual architecture work is named as **lenses** (SoC, DIP,
+- **Agent surface (4.3.0):** agents read **guardrail catalogs** and **scan** evidence;
+  they **judge** outside the package. Projection and skills never become the
+  pass/fail check.
+- **Improvement compass (4.4.0):** leftover architecture work is named as **lenses** (SoC, DIP,
   domain alignment, …) projected from existing sensors — **never** a 0–10 score or Excellent/Good
   rank. Out-of-scope lenses (perf, app security tooling, full resilience) stay honest.
-- **Vibe-coder dual depth:** human doctor and skills lead with plain outcomes and one next move;
+- **Dual depth:** human doctor and skills lead with plain outcomes and one next move;
   experts keep full JSON. Full-AI workflows get the same single door — not a skill menu exam.
 - **False done is forbidden:** “Rules on” ≠ elegant design. Leftover design work must not
   read as “healthy finished.” Empty ArkRules inventory is not a score. MCP configuration on
@@ -73,29 +166,31 @@ stay stable unless a change explicitly adds an alias.
 
 | Prefer (human) | Was / JSON | Use for |
 |----------------|------------|---------|
-| **architecture config** | contract | `ark.config.json` layers, rules, include |
+| **rules file** (`ark.config.json`) | contract / architecture config | Layers, rules, include. Never the first noun. Without required CI, this reader hears **manifesto** |
+| **manifesto** (honesty only) | advisory-only / no required CI | What the file is until the write is rejected and CI is required. Never the product name |
 | **import rules** / **allowed dependencies** | Layers plane / edges | Who may import whom; placement, purity, isolation |
-| **ArkRules** (opt-in; gloss: structure rules inside a layer) | ArkRules | Intra-layer sensors + domain invariant catalogs (`arkrules/*`) |
-| **ArkRun** (opt-in; gloss: kernel usage + complete declarations) | arkRun | Extra plane on the gate; companion kernel is `@arkgate/runtime`; factory `createStrictArkKernel` (per instance, no singleton). Never a score. |
-| **advisory ArkRules** | advisory ArkRules | Default sensor mode — **not** merge teeth; does not fail CI/merge alone |
+| **ArkRules** (opt-in; gloss: extra rules inside a layer) | ArkRules | Structure sensors + domain invariant catalogs (`arkrules/*`). Off unless you turn it on. |
+| **ArkRun** (opt-in; gloss: kernel usage + complete declarations) | arkRun | Optional extra; companion kernel is `@arkgate/runtime`; factory `createStrictArkKernel` (per instance, no singleton). Never a score. |
+| **advisory ArkRules** | advisory ArkRules | Default sensor mode — does not fail CI/merge alone |
 | **extra merge checks** | extraMergeTeeth | Only when enforced structure/invariant rules exist **and** classification is honest |
 | **label `[Layer]` vs `[ArkRules]`** | dual-plane residual | Never blur import-rule findings with ArkRules findings |
 | **ArkRules counts** | rulesUnderContract | Doctor/inventory counts — **never a score** |
 | **type-only import debt** | type-only placement debt | `import type` on the violations list with `failsStrict:false` |
-| **pre-write block** | hard write | Host actually blocks listed edit ops (installed + trusted) |
-| **warning only (not blocked)** | advisory write | MCP/rules coach; not a hard block |
+| **the write is rejected** / **required CI check** | write checkpoint / gate (as first noun) | Pass/fail: hook rejects the write + required CI. **Not** Fowler Gateway, not a resource wrapper, not a layer in the app |
+| **the hook rejects the write** | hard write / pre-write block | Host actually blocks listed edit ops (installed + trusted) |
+| **warning only (not blocked)** | advisory write | MCP/rules warn; not a hard block |
 | **import graph** | edges | Allowed imports (fix these first) |
 | **baseline** | baseline | Frozen known debt; does not make a wrong config honest |
 | **fix** | remediation | Fixing violations against the config |
 | **one small refactor** | pilot | One extraction / reshape cluster at a time |
 | **shape / leftover design work** | **design-weak** / residual | Imports clean under Enforce, but design smells remain — not “done” |
-| **coach** | co-pilot | Guidance that proposes order without silent auto-reshape |
+| **doctor** / **next step** | coach / co-pilot | Guidance that proposes order without silent auto-reshape |
 | **don’t show green if unverified** | fail-closed | Incomplete analysis or unproven enforcement never looks green |
 | **honest coverage** | honest coverage | Governed % and empty scope that cannot false-green |
 | **safe to auto-apply** | mechanical-safe | Deterministic auto-apply class only |
 | **your judgment** | judgment | Human/agent design work; invoke of an apply door is the approval — not silent compact-router reshape |
 | **five doors** | skill menu of 13 | adopt · place · autopilot · explore · upgrade — other names are shortcuts |
-| **law / constitution** | contract + baseline + ArkRules files | `ark.config.json`, `arkrules/*`, `.ark-baseline.json` — a different change type than product |
+| **rules file + ArkRules files** (different change type than product) | law / constitution / contract + baseline | `ark.config.json`, `arkrules/*`, `.ark-baseline.json` — a product PR must not amend them |
 | **steward** | contract owner | GitHub handle or email in `stewards`; only they may loosen the law or grow the baseline |
 | **several hands** | multi-author / CODEOWNERS | Doctor asks for stewards or shows list drift; empty `stewards[]` is unfinished ENFORCE (not Adapt); adopt proposes handles or emails, never invents names |
 | **contract session** | `--contract-session` | Explicit “this diff is a law change”; required to loosen or grow the baseline even with an empty steward list; still never mixed with product files |
@@ -112,7 +207,7 @@ stay stable unless a change explicitly adds an alias.
 | **host limitation** | environment residual | Soft-write or uncovered host path (e.g. OpenCode, hosted/specialized tools) — do not paint the whole project unfinished |
 | **allowed rule ids** | guardrail catalog | Closed vocabulary of sensors, capabilities, `ruleId`s, skill roles |
 | **check (tool)** | scan | Deterministic engine / CLI / MCP. Same inputs → same verdict. No LLM. |
-| **coaching / your judgment** | process | Skill- or agent-side. **Never** package pass/fail |
+| **your judgment** | process / coaching | Skill- or agent-side. **Never** package pass/fail |
 | **diagnostic code** / **ruleId** | ruleId | Stable public violation id — catalog-linked ([diagnostics.md](diagnostics.md)) |
 | **agent summary** | agent projection | Version-matched AGENTS/CLAUDE block; **non-authoritative** |
 | **finding id** | finding ref | Stable id (ruleId + target key) across turns |
@@ -170,7 +265,7 @@ gate  →  same binary verdict on every parity-capable adapter
 | Surface | Language to use | Language to avoid |
 |---------|-----------------|-------------------|
 | CLI / MCP / CI | “Scan found…”, “Checked edges…”, “Verdict: pass/fail/incomplete” | “The model decided…”, “AI validated architecture” |
-| Skills / doctor coach | “Process next: one pilot…”, “Judgment: Shape door…” | “Process mode enforces…”, “Skill pass/fail” |
+| Skills / doctor | “Next: one small refactor…”, “Judgment: Shape door…” | “Process mode enforces…”, “Skill pass/fail” |
 | Catalog / codes | “ruleId from the diagnostic catalog”, “closed capability set” | Open-ended “any rule string”, free-generated sensors |
 | Projection / AGENTS.md | “Agent-facing summary; not the gate” | “Follow AGENTS.md to pass CI” |
 
@@ -178,21 +273,23 @@ gate  →  same binary verdict on every parity-capable adapter
 
 | Do | Example |
 |----|---------|
+| Lead first-contact with the deny, then not-that | “If the AI writes an illegal import, the write is rejected. The same check fails the pull request. Not an API Gateway. Not a folder linter.” |
+| Name manifesto only when teeth are off | “No required merge status — the rules file is advisory (a manifesto). Next: require `arkgate-check --strict-merge`.” |
 | Name the status light + plain fact + next action | “Enforce · leftover design work. Import rules check out; design smells remain. Next: one Shape door — explore → plan B → autopilot with OK.” |
 | Rank one primary door under residual | Doctor **Primary next action** #1; **Also** only for secondary |
 | Label expert skills as escapes | “Install skill pack only when doctor or a STOP handoff names a skill.” |
 | State host write honesty | “Cursor blocks trusted Write/StrReplace. Codex blocks complete trusted local `apply_patch` after runtime observation. Required GitHub status covers every path.” |
-| Soft/unverified write ≠ unfinished project | “Architecture config ready; this host operation is advisory or unverified.” Keep environment residual in evidence; reserve **Not finished** for config/project debt. |
+| Soft/unverified write ≠ unfinished project | “Rules file ready; this host operation is a warning, not a block, or unverified.” Keep environment residual in evidence; reserve **Not finished** for config/project debt. |
 | Keep Suggest on start → doctor | New-here primary is finish `start`, not a competing recommend/architect curriculum |
 | Qualify import-clean under leftover design | “None on checked imports … leftover design work remains. Not healthy finished.” |
-| Prefer unverified-as-not-green | Incomplete analysis, unobserved hooks, and soft MCP never paint as a hard green pre-write block |
+| Prefer unverified-as-not-green | Incomplete analysis, unobserved hooks, and soft MCP never paint as a hard green “write rejected” |
 | State project binding before verdict | “Ark MCP matched this workspace; `ark_manifest` evidence is for this project.” Otherwise: “Ark MCP is configured, but we have not proven this is the right project. Restart and call `ark_identity` with the exact project root.” |
 | Keep inventory claims evidence-bound | “Possible rule candidate in the configured Application layer.” A filename or technical constant alone is not Domain evidence. |
 | Honesty clear ≠ architecture healthy | `productHonesty.finished` means residual **architecture** honesty sensors are clear — not a green graph score. Open blocking violations, ADAPT/SUGGEST with debt, dual-truth pin, or design residual keep `unfinished: true`. Permanent soft-write alone does **not**. |
 | Separate CI runtime from provider policy | Successful CI run ≠ required status; GitHub Free plan 403 → `unavailable-plan`, not “CI never ran.” |
 | Prefer catalog language for agent DX | “Stable `ruleId` with why/fix anchors.” Not a free-form list of “things that might be wrong.” |
 | Name the check before coaching | “Check: two layer import violations. Next: fix the Application→Domain import first.” |
-| Label projection non-enforcing | “Regenerated agent contract for this package version. Enforcement remains ark-check / hooks / required CI.” |
+| Label projection non-enforcing | “Regenerated agent summary for this package version. The check remains ark-check / hooks / required CI.” |
 | Keep status counts honest | “Inventory and residual counts are evidence — not a health score.” |
 | Prefer deep modules | “Small interface, hide the complexity. Name the seam; test at the public interface.” |
 | Apply the deletion test | “If deleting this extract would vanish the complexity, skip the pass-through; if callers re-absorb it, keep the module.” |
@@ -203,6 +300,12 @@ gate  →  same binary verdict on every parity-capable adapter
 
 | Avoid | Why |
 |-------|-----|
+| Leading first-contact with folders, layers, or `ark.config.json` | Old-school SE hears “file structure keeper” |
+| Bare “gate” as the first unexplained noun on README / use / hub / first-run | They load Fowler Gateway / API Gateway / facade |
+| Calling ArkGate a Gateway, facade, adapter, or “abstraction layer” | A Gateway wraps a resource; this check rejects the write |
+| “Access resources”, “extend without touching what it represents” | Wrapper-family verbs. The rules file is not a port |
+| Calling `ark.config.json` a **contract** as the first noun | Old-school SE hears manifesto — intent with no consequence |
+| “Our architecture manifesto” as product copy | Insult when teeth exist; a lie when they do not. Honesty case = advisory-only |
 | vibes, “crush it,” emoji rain | Cheap; seniors dismiss it |
 | “eh amigo,” fake familiarity | Condescension |
 | “you don’t need to understand anything” | Lies about the product |
@@ -237,10 +340,10 @@ gate  →  same binary verdict on every parity-capable adapter
 ## Progressive disclosure (product rule)
 
 1. **One primary path** — newcomer does not skill-shop among thirteen `/ark-*` skills.
-2. **Doctor is the control plane** — one status light, one next action (human-grade + technical).
+2. **Doctor shows what's wrong and what to do first** — one status light, one next action (human-grade + technical).
 3. **Compact router / default install first** — full skill pack is **expert depth**, not onboarding UI.
 4. **Post-green shape** is a first-class single door when edges are clean but residual remains.
-5. **Day-to-day** — place + gate protect; guided organize via `/ark-autopilot` when needed.
+5. **Day-to-day** — place + check protect; guided organize via `/ark-autopilot` when needed.
 
 ```text
 npx arkgate start → start --apply → ark-check --doctor
@@ -253,16 +356,19 @@ Skills table in docs = **escapes / expert**, not a second onboarding track.
 
 ## Hero phrases (approved)
 
-- One architecture config. One check. One coach.
+- If the AI writes an illegal import, the write is rejected. The same check fails the pull request.
+- Not an API Gateway. Not a folder linter. If the check is not required on the PR, the rules file is just documentation.
+- One rules file. One check. One next step.
+- One architecture config. One check. One coach. *(historical 4.6.2 — never the first sentence)*
 - Green must mean something real.
 - You arrive at Enforce; you never turn it on.
 - Enforce does not mean the design is elegant — only that checked imports are honest.
 - A clean import check is not “architecture healthy” when leftover design work remains.
 - One small refactor at a time. Pattern bets are never auto-applied.
-- Doctor is the control plane: status light + next action.
-- The check is deterministic. Coaching is judgment. Only the gate decides pass/fail.
+- Doctor shows what's wrong and what to do first: status light + next action.
+- The check is deterministic. Your judgment is not. Only the check decides pass/fail.
 - Guardrails are a catalog, not free generation.
-- Agent docs summarize the config; they never replace the gate.
+- Agent docs summarize the rules file; they never replace the check.
 - **ArkGate** and **ArkRules** are product names — gloss them; don’t invent a second brand.
 
 ## Hero phrases (forbidden)
@@ -273,6 +379,10 @@ Skills table in docs = **escapes / expert**, not a second onboarding track.
 - Ship it 🚀 / crush the spaghetti with vibes.
 - The AI validated your architecture / model pass/fail.
 - Follow AGENTS.md to pass the architecture gate.
+- Keep your file structure / folders clean.
+- An abstraction layer over your architecture.
+- A Gateway for your architecture / resources.
+- Our architecture manifesto / the contract file.
 
 ---
 
@@ -353,7 +463,7 @@ Invoking a five-door skill **is** the approval. Write or map in the same turn.
 then check. Forbidden as the deliverable: dumping `--plan` JSON, “approve?”, or
 `STOP — invoke /ark-X` for work that door absorbs.
 
-**Still never:** weaken the architecture config; invent `mechanical-safe` kinds; claim finished
+**Still never:** weaken the rules file; invent `mechanical-safe` kinds; claim finished
 while leftover design work remains; batch every Shape bet in one turn.
 
 ---
@@ -363,10 +473,13 @@ while leftover design work remains; batch every Shape bet in one turn.
 - [ ] One next action is obvious.
 - [ ] Status light is not a mode picker.
 - [ ] No false done under design-weak / incomplete analysis.
-- [ ] Technical terms present (architecture config, import rules, ArkGate, ArkRules) without slang.
+- [ ] Technical terms present (rules file, import rules, ArkGate, ArkRules) without slang.
 - [ ] Leftover design work is never called “done”.
 - [ ] Expert skills are labeled expert — not the default curriculum.
 - [ ] Scan vs process is not blurred with package LLM pass/fail.
 - [ ] Codes, sensors, and capabilities stay inside the guardrail catalog.
 - [ ] Projection / AGENTS.md never claimed as enforcement.
 - [ ] Seniors would not be embarrassed to paste the line into a PR.
+- [ ] First-contact sentence would not read as Fowler Gateway, a folder linter, or a manifesto of intent.
+- [ ] Bare “gate” is glossed as the write is rejected / the hook rejects the write / required CI on first use.
+- [ ] “Contract” never appears as the first noun; without required CI, the file is named a manifesto.

package/docs/use.md

@@ -2,7 +2,12 @@
 
 For **anyone** shipping TypeScript with an AI coding agent. You do not need to study clean architecture first.
 
-**One architecture config. One check. One coach.**
+**If the AI writes an illegal import, the write is rejected. The same check fails the pull request.**
+
+Not an API Gateway. Not a folder linter. If the check is not required on the PR, the rules
+file is just documentation.
+
+**One rules file. One check. One next step.**
 
 ---
 
@@ -11,12 +16,12 @@ For **anyone** shipping TypeScript with an AI coding agent. You do not need to s
 ```bash
 npm install -D arkgate typescript
 npx arkgate start                 # preview what will change
-npx arkgate start --apply         # install compact contract + host router + CI plan
-npx arkgate-check --doctor        # where am I? one status light, one next action
-npx arkgate-check --doctor --all  # encyclopedia (Details)
+npx arkgate start --apply         # install compact config + host router + CI plan
+npx arkgate-check --doctor        # what's wrong, what to do first
+npx arkgate-check --doctor --all  # full details
 ```
 
-Then keep working with your agent. The doctor is the **control plane**: when stuck, run doctor and do action **#1**. Compact first; `--all` for Details.
+Then keep working with your agent. Stuck? Run `--doctor` and do action **#1**. Compact first; `--all` for details.
 
 | Stuck on… | Do this |
 |-----------|---------|
@@ -36,7 +41,8 @@ Skip ArkGate (or treat it as overkill) when:
 - The project has **no AI coding agents** and **no multi-layer integration boundaries** worth pinning.
 - It is a **single-developer hobby CRUD** with no pressure to keep layers honest over time.
 - The team will **not** maintain `ark.config.json` layers or make `arkgate-check --strict-merge` a
-  **required** GitHub status context — without that, local advisory write stays avoidable.
+  **required** GitHub status context — without that, the rules file is just documentation and a
+  warning at write time can be ignored.
 
 In those cases a boundary linter or editor rules may be enough; see [README — Why not only ESLint / Nx / cruiser?](../README.md#why-not-only-eslint--nx--cruiser). When you *do* adopt, day-to-day honesty is still: advisory write on soft hosts → required merge status. Surface that with `npx arkgate-check --doctor` or `npx arkgate status --json` ([agent guide — Write-path honesty](agent-guide.md#write-path-honesty)).
 
@@ -46,23 +52,24 @@ In those cases a boundary linter or editor rules may be enough; see [README —
 
 | When | What happens |
 |------|----------------|
-| While the AI writes | Host write gate or advisory MCP (depends on host) |
+| While the AI writes | The write is rejected, or you get a warning (depends on the host) |
 | Before merge | Make the Ark job a **required GitHub status context** running `arkgate-check --strict-merge` (alias `ark-check`). Until that status is required — or you write `.ark/adoption-stance.json` with `stance: "advisory-only"` — doctor will not call the tree adopted. |
 | Anytime | Doctor: Suggest / Adapt / Enforce (+ leftover design work if the design is still messy) |
 
-**Cursor:** pre-write block for Write/StrReplace when `.cursor/hooks.json` is trusted.
-**Codex CLI / local Desktop:** pre-write block for a complete `apply_patch` when
+**Cursor:** the hook rejects Write/StrReplace when `.cursor/hooks.json` is trusted.
+**Codex CLI / local Desktop:** the hook rejects a complete `apply_patch` when
 `.codex/hooks.json` is trusted and the operation is observed. Hosted/specialized paths,
 shell/direct writes, and incomplete patches still rely on CI. **OpenCode:** local write stays
 advisory (warning only, not blocked). An unverified host hook is environment evidence, not
 unfinished architecture; **Not finished** is reserved for real project/config debt.
 
-ArkGate is **not** a web framework, ORM, or app runtime. It is architecture enforcement + a coach for AI TypeScript.
+ArkGate is **not** an API Gateway, a folder linter, a web framework, ORM, or app runtime.
+The rules file only binds when the write is rejected and CI is required.
 
-### Planes (you choose)
+### Two kinds of rules (you choose)
 
-| Plane | Plain English | Config | Enforces |
-|-------|---------------|--------|----------|
+| Kind | Plain English | Config | Enforces |
+|------|---------------|--------|----------|
 | **Layers** | Who may talk to whom | `layers[]` + `rules[]` | Import direction, purity, forbidden globals, capabilities, peer isolation |
 | **ArkRules** (optional extra) | Habits *inside* a layer + named policies | `arkRules` + `arkrules/<Layer>.json` | Structure **heuristics** (module shape); invariant **catalog + coverage evidence** (not full business proof) |
 | **ArkRun** (optional extra) | Kernel usage + complete declarations | `arkRun` on schema `1.2` | Only `mode: "enforced"` when the tree is classified. Absence is silent. Doctor `arkRun` is **not a score**. |
@@ -76,7 +83,7 @@ Start always gives you **layers**. ArkRules templates may ship with start/init;
 **Happy path:** put a new module under an existing layer directory/glob (`layers[].patterns`). Usually
 **no** `ark.config.json` edit — the file classifies and the existing rules apply.
 
-**Touch the contract only when** you invent a new boundary (new layer or allow/deny edge), leave an
+**Touch the rules file only when** you invent a new boundary (new layer or allow/deny edge), leave an
 ungoverned path under `include`, or need a capability / forbidden-global exception. Optional ArkRules
 `appliesTo` globs narrow invariants inside a layer; empty `appliesTo: []` fails closed. Full field
 list: [configuration.md](configuration.md).

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "arkgate",
-  "version": "4.7.1",
-  "description": "One architecture config. One check. One coach.",
+  "version": "4.7.3",
+  "description": "If the AI writes an illegal import, the write is rejected. The same check fails the pull request.",
   "type": "module",
   "main": "./dist/index.cjs",
   "module": "./dist/index.js",
@@ -200,14 +200,13 @@
     "architecture-gate",
     "ai-agents",
     "mcp",
-    "write-gate",
+    "import-check",
     "hexagonal",
     "clean-architecture",
     "layered-architecture",
     "import-rules",
     "dependency-rules",
     "boundaries",
-    "co-pilot",
     "governance",
     "typescript",
     "eslint",

package/server.json

@@ -1,17 +1,17 @@
 {
   "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
   "name": "io.github.pedroknigge/arkgate",
-  "description": "When your agent writes TypeScript, ArkGate stops it from breaking the layers.",
+  "description": "If the AI writes an illegal import, the write is rejected. The same check fails the pull request.",
   "repository": {
     "url": "https://github.com/pedroknigge/arkgate",
     "source": "github"
   },
-  "version": "4.7.1",
+  "version": "4.7.3",
   "packages": [
     {
       "registryType": "npm",
       "identifier": "arkgate",
-      "version": "4.7.1",
+      "version": "4.7.3",
       "runtimeHint": "npx",
       "transport": {
         "type": "stdio"
@@ -31,7 +31,7 @@
           "type": "named",
           "name": "--config",
           "value": "ark.config.json",
-          "description": "Path to the ArkGate architecture config"
+          "description": "Path to the rules file (ark.config.json)"
         }
       ]
     }

package/templates/agent-skills/README.md

@@ -7,7 +7,7 @@
 This directory is the **Agent Skills–compatible** packaging of the same **13**
 `/ark-*` skills shipped as flat templates for Ark install. **No new skill names.**
 
-Package version when last generated context: **arkgate@4.7.1**
+Package version when last generated context: **arkgate@4.7.3**
 Schema: agent-skills package contract `1.0`
 
 ## Skills (frozen catalog)

package/templates/agent-skills/ark-adopt/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: ark-adopt
-description: Session 0 — mark the Ark path. Greenfield scaffold or brownfield honesty. Write ark.config, optional advisory ArkRules, baseline, and gates in this turn. CLI validates.
+description: Session 0 — write the rules file (ark.config.json) to match the real folders. Optional extra rules inside a layer. CLI validates.
 ---
 
 # /ark-adopt — Mark the path (session 0)
 
-**When:** empty tree, or the architecture config does not match the real folders (session 0).
+**When:** empty tree, or the rules file does not match the real folders (session 0).
 **Not when:** a single new file (`/ark-place`) or leftover design after the path is honest (`/ark-explore` then `/ark-autopilot`).
 
 ## Steps

package/templates/agent-skills/ark-architect/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-architect
-description: Shortcut to /ark-adopt for greenfield shape. Deprecated as a first-class door. Do adopt’s job.
+description: Shortcut to /ark-adopt for a new tree. Deprecated as a first-class door.
 ---
 
 # /ark-architect — Shortcut to /ark-adopt

package/templates/agent-skills/ark-autopilot/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-autopilot
-description: Apply Ark end-to-end — explore first; dual plan A (edges) + B (shape); write mechanical-safe and judgment in this turn; one Shape refactor. Empty plan A is not healthy if leftover design remains. CLI is a sensor; you edit files.
+description: Fix illegal imports and one leftover-design refactor. CLI is a sensor; you edit files.
 ---
 
 # /ark-autopilot — Apply the path
@@ -14,7 +14,7 @@ description: Apply Ark end-to-end — explore first; dual plan A (edges) + B (sh
 2. Fix import-rule debt; if leftover design remains, apply **one** small refactor.
 3. Re-run doctor. Never weaken `ark.config.json`.
 
-**This is the apply door.** Invoking it **is** the approval. Doctor remains the control plane.
+**This is the apply door.** Invoking it **is** the approval. Run `arkgate-check --doctor` for the next step.
 
 ## Autonomy contract
 

package/templates/agent-skills/ark-contract/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-contract
-description: Shortcut to /ark-adopt (session 0) or /ark-autopilot (later config tighten). Edit layers, ArkRules, or the ArkRun extra. Deprecated as a first-class door.
+description: Shortcut — edit the rules file or extra rules. Use /ark-adopt or /ark-autopilot.
 ---
 
 # /ark-contract — Shortcut to adopt / autopilot

package/templates/agent-skills/ark-coverage/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-coverage
-description: Ark adoption fitness audit — governed%, gates, baseline honesty, capability gaps. CLI is a sensor; read enough source to prove gaps. Full product recon and pattern dual-plan belong to /ark-explore.
+description: How much of the tree the rules file covers. CLI is a sensor; read the source.
 ---
 
 # /ark-coverage — Ark adoption fitness (not full recon)

package/templates/agent-skills/ark-explain/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-explain
-description: Explain this project's architecture in plain language and generate the showcase HTML report — layers, rules, coverage, gates, and why the contract exists.
+description: Explain the rules file in plain language and generate the HTML report.
 ---
 
 # /ark-explain — Understand this project's architecture

package/templates/agent-skills/ark-explore/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-explore
-description: Map skill — decision-grade recon of layers + ArkRules opportunities + dual-plan seed (no apply). Primary post-green door when leftover design work remains. CLI is a sensor; you read the tree. No gate bypass.
+description: Map import rules and leftover design. No apply. CLI is a sensor; you read the tree.
 ---
 
 # /ark-explore — Recon the real project (map only)

package/templates/agent-skills/ark-fix/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-fix
-description: Shortcut to /ark-autopilot for a small violation cluster. Deprecated as a first-class door.
+description: Shortcut to /ark-autopilot for a small illegal-import cluster.
 ---
 
 # /ark-fix — Shortcut to /ark-autopilot

package/templates/agent-skills/ark-loop/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-loop
-description: Shortcut to /ark-autopilot for driving plan A to zero. Deprecated as a first-class door. CLI validates — you edit code.
+description: Shortcut to /ark-autopilot for illegal-import fixes. CLI validates — you edit code.
 ---
 
 # /ark-loop — Shortcut to /ark-autopilot

package/templates/agent-skills/ark-place/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-place
-description: "Where does new code go? Names the layer, directory, and naming for a new artifact from the contract, and writes it there. Autonomous."
+description: "Where does new code go? Names the folder from the rules file and writes the file there."
 ---
 
 # /ark-place — Where does this code go?

package/templates/agent-skills/ark-runtime/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-runtime
-description: Evaluate and wire the experimental ArkRun companion (@arkgate/runtime) against hand-rolled event bus, outbox, saga, projection, policy, or NestJS code. One candidate. Extra on via /ark-adopt; new files via /ark-place. Skills never enforce.
+description: Wire the optional ArkRun extra (@arkgate/runtime). One candidate. Extra on via /ark-adopt.
 ---
 
 # /ark-runtime — Evaluate and wire ArkRun (experimental opt-in)

package/templates/agent-skills/ark-think/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-think
-description: Host-side architectural reasoning — 2–3 enforceable options on layer and/or ArkRules planes for ONE decision. Not full recon (use /ark-explore). No gate bypass. No package LLM call.
+description: 2–3 options for one import-rule or ArkRules decision. Not a full map (use /ark-explore).
 ---
 
 # /ark-think — Architectural reasoning (host LLM only)

package/templates/agent-skills/ark-upgrade/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ark-upgrade
-description: Upgrade ArkGate through a content-identity preview, preserve customized files, and verify the active host and architecture contract.
+description: Upgrade ArkGate. Preview first, keep customized files, then apply.
 ---
 
 # /ark-upgrade — managed ArkGate upgrade

package/templates/skills/ark-adopt.md

@@ -1,11 +1,11 @@
 ---
 name: ark-adopt
-description: Session 0 — mark the Ark path. Greenfield scaffold or brownfield honesty. Write ark.config, optional advisory ArkRules, baseline, and gates in this turn. CLI validates.
+description: Session 0 — write the rules file (ark.config.json) to match the real folders. Optional extra rules inside a layer. CLI validates.
 ---
 
 # /ark-adopt — Mark the path (session 0)
 
-**When:** empty tree, or the architecture config does not match the real folders (session 0).
+**When:** empty tree, or the rules file does not match the real folders (session 0).
 **Not when:** a single new file (`/ark-place`) or leftover design after the path is honest (`/ark-explore` then `/ark-autopilot`).
 
 ## Steps