arkgate 4.8.11 → 4.8.14

package/CHANGELOG.md

@@ -3,6 +3,130 @@
 All notable changes to ArkGate (`arkgate`; formerly `ark-runtime-kernel`) are documented here or
 in the immutable pre-2.0 archive linked below.
 
+## Unreleased
+
+## 4.8.14 — 2026-09-06
+
+**Patch** over **4.8.13**. Catch npm `latest` up to `main`: first-class
+`/ark-order` (#217 / #216) and the other ships that landed after tag
+`v4.8.13`. **Write. Check. Ship.** **No required config migration.** No
+`schemaVersion` bump. Does not close `K01` / `Z09`. This mother
+`ark.config.json` still does **not** turn `arkOrder` on.
+
+**Status: prepared** (npm `latest` remains **4.8.13** until Actions `publish-npm`
+runs with `tag=v4.8.14` and `dry_run=false`).
+
+### Added
+- Skill catalog covers 100% of product capacity (issue [#216](https://github.com/pedroknigge/arkgate/issues/216) /
+  [ADR 0036](docs/adr/0036-skill-catalog-product-capacity.md) / [#217](https://github.com/pedroknigge/arkgate/pull/217)).
+  First-class `/ark-order` mirrors `/ark-runtime` for ArkOrder. Leftover
+  `/ark-architect` / `/ark-contract` / `/ark-fix` / `/ark-loop` / `/ark-think`
+  stay as one-release redirect stubs. Remaining doors speak Contener · Guiar ·
+  Ordenar and name the sibling for each job. ACS05 “no new skill names” freeze
+  opened; the catalog stays closed in Domain (`ARK_SKILL_NAMES`). Leftover
+  `/ark-fix` / `/ark-loop` stubs keep the Y04 mechanical-edit hygiene outcomes.
+  Skills never enforce.
+
+### Changed
+- First-contact leftovers after the north-star / billing / one-breath ships
+  ([#225](https://github.com/pedroknigge/arkgate/pull/225)): gallery index and
+  the hexagonal demo open in ordinary English; `arkgate-check --help` leads with
+  the deny; the write-gate fallback and the two newcomer deny codes
+  (`LAYER_IMPORT_VIOLATION`, `ARKORDER_UNVALVED_RELEASE`) drop ξ /
+  “architecture contract” from the first line.
+- Doctor / start first-contact always tell the ArkOrder one-breath (what it
+  is, when to use it, next step) even when the extra is off ([#224](https://github.com/pedroknigge/arkgate/pull/224)).
+  Reuses `/ark-order` and `examples/arkorder-billing`. Verdicts stay silent (not a
+  score; Layers unchanged).
+- First-contact now names **Contener · Guiar · Ordenar** in ordinary English
+  (contain the write, guide the next step, order leftover mess)
+  ([#222](https://github.com/pedroknigge/arkgate/pull/222)). README, doctor
+  one-light, CLI help, host projections, and first-class skills share the same
+  breath. Write. Check. Ship. stays the deny.
+- Billing gallery is the undeniable ArkOrder proof path
+  ([#223](https://github.com/pedroknigge/arkgate/pull/223)): site/docs
+  (`docs/use.md`, docs hub, enthusiast) →
+  [examples/README.md](https://github.com/pedroknigge/arkgate/blob/main/examples/README.md)
+  → [examples/arkorder-billing](https://github.com/pedroknigge/arkgate/tree/main/examples/arkorder-billing)
+  (first freeze `release()`, later `proposeRelease` then `apply`). Still GitHub-only;
+  not added to the npm tarball or `GALLERY_STARTERS`.
+- Living docs (AGENTS hub, claims matrix, agent-guide skill install, product-voice
+  filter) restate the catalog after `#217`: first-class `/ark-order`, leftover
+  shortcuts as one-release stubs, ACS05 freeze opened, Domain still closes
+  `ARK_SKILL_NAMES`. The skill *set* covers Layers + ArkRules + ArkRun + ArkOrder
+  (Contener · Guiar · Ordenar). Historical 14/14 100% and last 4.8.3 C-020 stay
+  Planned.
+- Pre-adoption publish is the thin path: slim CI on prepare PRs (no `release`
+  label or branch-name full-matrix), annotated tags (unsigned allowed),
+  CHANGELOG + `publish-npm` provenance. MCP registry, site, companion republish,
+  and `docs/releases/` notes stay optional.
+
+### Fixed
+- `--changed` no longer builds facts for the whole include tree (issue
+  [#205](https://github.com/pedroknigge/arkgate/issues/205) /
+  [#221](https://github.com/pedroknigge/arkgate/pull/221)). The check now
+  resolves touched sources plus their import closure, skips the unused
+  tsconfig file walk, and does not list every governed file just to filter
+  the diff. File-local ArkRules sensors stay on the touched set. Full-tree
+  `ark-check` is unchanged. Dual gate (write + PR) stays the merge line.
+- Short `arkgate-check --help` now names `--changed --base <ref>` as the local /
+  pre-push fast path (issue [#204](https://github.com/pedroknigge/arkgate/issues/204) /
+  [#220](https://github.com/pedroknigge/arkgate/pull/220)).
+  Encyclopedia `--help --all` is unchanged.
+- `ark-check` human warnings now print `path:line` the way denies already do
+  (ArkOrder / ArkRun advisory findings already carried the location; the
+  printer dropped it). Findings with no file say so — they are about the
+  project rules, not a line you just edited. The green `--plan` pointer names
+  the first evidence path next to each design smell (issue #203).
+- `start --apply` / `--install-agent-gates` now merge the Ark write-path
+  contract into a project-owned `AGENTS.md` and upsert `mcpServers.ark` in
+  existing `.mcp.json` (and host copies) without `--force`. Doctor no longer
+  reports `gatesMissing: ["AGENTS.md", ".mcp.json"]` after the stranger happy
+  path on a repo that already had those files (issue #210).
+
+## 4.8.13 — 2026-09-06
+
+**Patch** over **4.8.12**. Publish gate: remaining ArkOrder doctor/deny branches so
+`test:confidence` / `release:npm` clears the 81% floor. Tag `v4.8.12` stands;
+this is the ship. **Write. Check. Ship.** **No required config migration.** No
+`schemaVersion` bump. Does not close `K01` / `Z09`. No new skill names. This
+mother `ark.config.json` still does **not** turn `arkOrder` on.
+
+**Status: prepared** (tag `v4.8.13` and the GitHub Release already exist;
+npm `latest` remains **4.8.11** until Actions `publish-npm` runs with
+`tag=v4.8.13` and `dry_run=false`).
+
+### Fixed
+- Confidence coverage: remaining ArkOrder doctor/deny `Next:` and HTML/doctor
+  residual paths so the publish job is not blocked by a 0.03-point branch miss.
+
+## 4.8.12 — 2026-09-05
+
+**Patch** over **4.8.11**. First-contact honesty for the optional ArkOrder extra.
+Sensors, valve, and `arkgate/order` already shipped on 4.8.11; this projects
+them through doctor / start / status / the check label, in plain words.
+**Write. Check. Ship.** **No required config migration.** No `schemaVersion` bump.
+Does not close `K01` / `Z09`. No new skill names. This mother `ark.config.json`
+still does **not** turn `arkOrder` on.
+
+**Status: tagged, not published** (tag `v4.8.12` stands; `publish-npm` failed
+the 81% branch floor at 80.97%. Do not retag. Do not ship this version to npm.
+Consumers stay on **4.8.11** until **4.8.13** is published.
+npm `latest` remains **4.8.11**).
+
+### Added
+- Doctor / HTML / status `arkOrder` section (`notAScore`), same envelope as
+  ArkRun. Absence is a silent row. When on: one-breath + named choices + leftover count.
+- Check prints `[ArkOrder]` on `ARKORDER_*` denies (and `[ArkRun]` on
+  `ARKRUN_*`) so rewriting `plan` like a seat count reads as clearly as a bad import.
+- `ark start` preview says extras stay off — layers only, they stop bad imports.
+
+### Changed
+- Merge-planes honesty now names enforced ArkOrder skip findings. The stamp
+  already claimed this plane; `failMergeWhen` now matches.
+- First-contact copy (README, use, doctor, deny `Next:`, start, gallery) uses
+  the one-minute breath. No ξ / Haken / slaving on the first screen.
+
 ## 4.8.11 — 2026-09-02
 
 **Patch** over **4.8.10**. Nested `--config` with `--root` stays inside that
@@ -10,8 +134,7 @@ tree. Library Shape splits `adapterContract` and `agentProjection` so the AI
 edits one concern at a time. **Write. Check. Ship.** **No required config migration.**
 No `schemaVersion` bump. Does not close `K01` / `Z09`. No new skill names.
 
-**Status: prepared** (tree candidate; npm `latest` remains **4.8.10** until the
-signed-tag provenance workflow succeeds).
+**Status: published** (on npm `latest`; see `docs/releases/4.8.11.md`).
 
 ### Fixed
 - Nested `--config` is a file path: `ark-check --root examples/app --config

package/README.md

@@ -11,10 +11,12 @@ AI can build fast—and make a mess just as fast.
 
 Keep the product easy to understand, change, and trust.
 
-ArkGate stops bad shortcuts. ArkRules protects how each part should behave. ArkRun keeps work moving. ArkOrder protects the few big choices that should not change by accident.
+Contain what the AI may write, and in what shape. Guide you with proven patterns and one next step. Order leftover mess toward a clean tree, a little at a time.
 
 Safer changes, fewer surprises, and extra protection only when you choose it.
 
+That is **Contener · Guiar · Ordenar**.
+
 Works with Cursor, Claude, Codex, and Grok.
 
 [![Website](https://img.shields.io/badge/website-arkgate.online-0a0a0a)](https://www.arkgate.online/)
@@ -37,15 +39,15 @@ Works with Cursor, Claude, Codex, and Grok.
 
 </div>
 
-> **ArkGate 4.8.11** is prepared on this tree; npm `latest` remains **4.8.10**.
+> **ArkGate 4.8.14** is prepared on this tree; npm `latest` remains **4.8.13** until `publish-npm` for `v4.8.14`.
 > Write. Check. Ship. Adopted = required GitHub
 > status running `arkgate-check --strict-merge`, or an explicit `advisory-only` stance.
 > Status is compact (`arkgate-check --doctor`; `--all` for Details). Optional **ArkRun**
 > (`arkgate/runtime`) is an in-memory runtime — not Postgres. Optional **ArkOrder**
-> (`arkgate/order`) stops the agent rewriting the few slow product decisions as CRUD;
-> later pattern change is `proposeRelease` then `apply`.
+> (`arkgate/order`) stops rewriting a big product choice — like the billing plan —
+> as if it were a seat count. Change those choices through a valve, not a generic update.
 > `@arkgate/runtime` is deprecated.
-> [4.8.11 prepared](docs/releases/4.8.11.md) · [4.8.10 published](docs/releases/4.8.10.md) · [4.8.9](docs/releases/4.8.9.md) · [4.8.8](docs/releases/4.8.8.md) · [4.8.7](docs/releases/4.8.7.md) · [4.8.6](docs/releases/4.8.6.md) · [4.8.5](docs/releases/4.8.5.md) · [4.8.4](docs/releases/4.8.4.md) · [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
+> [4.8.14 prepared](CHANGELOG.md) · [4.8.11 published](docs/releases/4.8.11.md) · [4.8.10](docs/releases/4.8.10.md) · [4.8.9](docs/releases/4.8.9.md) · [4.8.8](docs/releases/4.8.8.md) · [4.8.7](docs/releases/4.8.7.md) · [4.8.6](docs/releases/4.8.6.md) · [4.8.5](docs/releases/4.8.5.md) · [4.8.4](docs/releases/4.8.4.md) · [4.8.3](docs/releases/4.8.3.md) · [4.8.2](docs/releases/4.8.2.md) · [4.8.1](docs/releases/4.8.1.md) · [4.8.0](docs/releases/4.8.0.md) · [Docs hub](docs/README.md) · [Voice](docs/product-voice.md)
 
 ---
 
@@ -106,15 +108,15 @@ See [docs/package-surface.md](docs/package-surface.md#installing-from-git).
 
 When the agent writes a bad import, the write doesn’t land.
 The same check fails the pull request. That is **ArkGate** — import rules, always on
-once you adopt. The other three are optional.
+once you adopt (**Contener**). The other three are optional.
 
 | | Role | When |
 |--|------|------|
 | **While the agent writes** | The write doesn’t land on supported hosts; warning only elsewhere | Always (ArkGate) |
 | **Before merge** | `arkgate-check` as a **required** CI status | Always (ArkGate) |
-| **ArkRules** | Optional policies *inside* a layer | When you ask |
-| **ArkRun** | Optional experimental runtime (`arkgate/runtime`) | Off unless you turn it on |
-| **ArkOrder** | Stops the agent rewriting the few slow product decisions as CRUD (`arkgate/order`). Valve: first `release()`, later ξ is `proposeRelease` then `apply` | Off unless you turn it on |
+| **ArkRules** | Optional policies *inside* a layer (**Contener** — shape) | When you ask |
+| **ArkRun** | Optional experimental runtime (`arkgate/runtime`) (**Guiar**) | Off unless you turn it on |
+| **ArkOrder** | Extra for the few big choices — billing plan, not seat counts (`arkgate/order`) (**Ordenar**) | Off unless you turn it on |
 
 Layers (who may import whom) always run. ArkRules, ArkRun, and ArkOrder change no
 inter-layer verdict when absent. Label leftovers **`[Layer]`** vs **`[ArkRules]`** vs
@@ -142,15 +144,13 @@ check: [4.3.0 — What ArkGate is / isn't](docs/releases/4.3.0.md#what-arkgate-i
 
 ## Why it exists
 
-AI coding agents generate code at unprecedented speeds. However, they tend to take the shortest path to solve a problem. If an agent needs data in a Domain layer, it might directly import a database adapter. Left unchecked, this creates spaghetti code and technical debt at light speed.
-
-Traditional linters catch these architectural violations in CI *after* the agent has finished its work, breaking the flow.
-
-ArkGate solves this by shifting the check to the exact moment of writing:
+AI takes the shortest path. Contain the write so a bad import never lands. Guide
+the next step so a non-expert is not stuck. Order leftover mess toward a clean
+tree, one small refactor at a time.
 
-1. **Fail fast at the write boundary.** Through IDE hooks and MCP, ArkGate intercepts the file write. If the agent writes a bad import, the write doesn't land. The agent gets immediate feedback and can self-correct before saving to disk.
-2. **The check is the single source of truth.** A simple `ark.config.json` defines your layers and allowed edges.
-3. **Honest reporting.** Green imports do not equal elegant design. ArkGate separates structural correctness from design smells, providing an improvement compass to guide leftover design work without blocking the PR.
+Traditional linters catch this only in CI after the agent finished. ArkGate
+checks at write time and again on the PR. Green imports are not elegant design —
+leftover mess is **needs a refactor**, not “done”.
 
 ---
 
@@ -231,7 +231,7 @@ expectation.
 | Placement + preflight for multi-file changes | ✅ | ❌ |
 | Honest governed % + dual plan (edges vs shape) | ✅ | ❌ |
 | Opt-in intra-layer ArkRules (structure + invariants) | ✅ | ❌ |
-| Stops agents rewriting slow product decisions as CRUD (ArkOrder) | ✅ | ❌ |
+| Stops rewriting a big product choice like billing plan (ArkOrder) | ✅ | ❌ |
 | Incomplete analysis cannot look green | ✅ | varies |
 
 ---
@@ -251,7 +251,7 @@ npx arkgate-check --strict-merge   # CI / required status
 npx arkgate-check --install-agent-gates --tools claude,cursor,codex,grok,antigravity
 # optional: refresh shared home skills (Claude/Grok/Antigravity/Codex; never downgrades)
 # npx arkgate-check --install-agent-gates --skills-only --agent-homes --force
-# optional: same 13 skills via Agent Skills ecosystem (no new names)
+# optional: closed skill catalog via Agent Skills ecosystem (ARK_SKILL_NAMES)
 # npx skills add ./node_modules/arkgate/templates/agent-skills
 # optional ArkRun: poll the loopback inspector (ANSI TUI — not a gate)
 # npx ark-dashboard --url http://127.0.0.1:<port>/snapshot
@@ -302,31 +302,23 @@ interfaces for production. Details: [docs/production-hardening.md](docs/producti
 
 ## Optional ArkOrder
 
-Layers stop a bad import. They do not stop a *legal* import that overwrites the
-billing plan.
-
-If the product can name a few slow decisions in an afternoon — plan, cycle,
-tenancy; a clinical protocol; match rules — an agent will still ship one PUT
-that changes them together with seats and invoices. The write gate stays green
-because “what may be the plan” was never a rule.
-
-**ArkOrder** (`arkgate/order`) is that rule. Off unless you add `arkOrder`.
-Name the slow keys (`xiKeys`: plan, protocol, cost-code bound — not `projectId`).
-A status you can recompute from data you already have is not a slow decision. Derive it. Do not freeze it.
-Posting an invoice is absorbed. Changing plan is `proposeRelease` then `apply`.
-`refreshSigma`; ingest residual `absorb | escalate_up | hold` + `reasonCode`;
-capacity pack as data; in-memory `ReleaseStore`; `ingestTravelAction`; ArkRun
-`decisionTape`. A generic `update` of the plan does not land. A use-case that
-PATCHes those keys through Prisma is named. Same npm package.
-In-memory. Not durable. Does not replace ArkRun.
-**ArkOrder freezes the pattern through a valve. ArkRun is how the residual travels.**
-
-The billing gallery (`plan` / `cycle` / `tenancy`) lives on GitHub, not in the
-npm tarball:
-[examples/arkorder-billing](https://github.com/pedroknigge/arkgate/tree/main/examples/arkorder-billing).
-Rename the three keys. Compact starters leave it off. Details:
-[ArkOrder](docs/arkorder.md) · [configuration](docs/configuration.md) ·
-[package surface](docs/package-surface.md).
+Layers stop a bad import. ArkOrder stops rewriting a big product choice — like
+the billing plan — as if it were a seat count. Change those choices through a
+valve, not a generic update.
+
+Off unless you add `arkOrder`. Same npm package (`arkgate/order`). In-memory.
+Not a service. Does not replace ArkGate or ArkRun.
+
+Name the few choices (`xiKeys`: plan, cycle, tenancy — not seat counts). First
+freeze is `release()`. Later change is `proposeRelease` then `apply`. A generic
+`update` does not land.
+
+Proof path (GitHub, not the npm tarball):
+[examples/arkorder-billing](https://github.com/pedroknigge/arkgate/tree/main/examples/arkorder-billing)
+— first freeze is `release()`; later plan change is `proposeRelease` then `apply`.
+Gallery index:
+[examples/README.md](https://github.com/pedroknigge/arkgate/blob/main/examples/README.md).
+Compact starters leave the extra off. Details: [ArkOrder](docs/arkorder.md).
 
 ---
 
@@ -342,8 +334,9 @@ Rename the three keys. Compact starters leave it off. Details:
 | Config · package surface · TS | [configuration](docs/configuration.md) · [package-surface](docs/package-surface.md) · [typescript-support](docs/typescript-support.md) |
 | Brownfield | [docs/brownfield-adoption.md](docs/brownfield-adoption.md) |
 | Security | [SECURITY.md](SECURITY.md) |
-| Prepared (4.8.11; not published) | [docs/releases/4.8.11.md](docs/releases/4.8.11.md) · [CHANGELOG](CHANGELOG.md) |
-| Current published (4.8.10 on npm `latest`) | [docs/releases/4.8.10.md](docs/releases/4.8.10.md) · [CHANGELOG](CHANGELOG.md) |
+| Prepared (4.8.14; not published) | [CHANGELOG](CHANGELOG.md) |
+| Current published (4.8.11 on npm `latest`) | [docs/releases/4.8.11.md](docs/releases/4.8.11.md) · [CHANGELOG](CHANGELOG.md) |
+| Prior published (4.8.10) | [docs/releases/4.8.10.md](docs/releases/4.8.10.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.9) | [docs/releases/4.8.9.md](docs/releases/4.8.9.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.7) | [docs/releases/4.8.7.md](docs/releases/4.8.7.md) · [CHANGELOG](CHANGELOG.md) |
 | Prior published (4.8.6) | [docs/releases/4.8.6.md](docs/releases/4.8.6.md) |

package/SECURITY.md

@@ -28,9 +28,11 @@ a private security contact without including exploit details.
 ArkGate releases are GitHub-first:
 
 1. Changes land on GitHub and must pass CI plus the dedicated security workflow.
-2. A GitHub Release is created from a signed `vX.Y.Z` tag (`git tag -s`). The publish
-   workflow verifies the signature and fails closed for unsigned tags. The local override
-   exists only for explicit emergency use and is not enabled in CI.
+2. A GitHub Release is created from an **annotated** `vX.Y.Z` tag (`git tag -a` is
+   enough). The publish workflow checks that the tag matches `package.json` and is
+   annotated. Unsigned annotated tags are allowed. Signed tags still verify when
+   present. Set `ARK_REQUIRE_SIGNED_RELEASE_TAG=true` on the publish job only if
+   you want signed-only again.
 3. The manual `Publish npm` workflow verifies the tag, requires the GitHub Release to
    exist, reruns release checks, publishes npm with provenance, and uploads a SHA-256
    checksum for the npm tarball to the GitHub Release.

package/bin/ark-check-runtime.mjs

@@ -77,6 +77,7 @@ import {
   writeBaseline,
   printViolation,
   printViolationBreakdown,
+  printWarning,
   CONCENTRATION_MIN_VIOLATIONS,
 } from './lib/violations.mjs';
 import {
@@ -102,6 +103,8 @@ import {
   UNGOVERNED_PROBE_CAP,
   collectGovernedFiles,
   countUngovernedSourceFiles,
+  governedFilesFromRelativePaths,
+  isGovernedSourcePath,
   normalize,
   walk,
 } from './lib/scan-files.mjs';
@@ -123,7 +126,6 @@ import {
   applyAgainstRatchet,
   bindTeamBaseRefs,
   contractSessionFrom,
-  filterChangedGovernedFiles,
   runTeamPreflight,
   ungovernedDumpMessage,
 } from './lib/team-parliament-io.mjs';
@@ -1405,8 +1407,7 @@ async function main() {
   }
   const manifest = readManifest(root, args.manifest);
   const rules = manifest?.architecture?.rules ?? config.rules;
-  const allGovernedFiles = loadGovernedFiles();
-  if (verdictPath) {
+  if (verdictPath && !args.changed) {
     const refusal = emptyAnalysisRefusalNow();
     if (refusal) {
       reportEmptyAnalysis(refusal);
@@ -1414,10 +1415,9 @@ async function main() {
     }
   }
   if (args.failUngoverned && teamParliament?.changeSet?.productPaths?.length) {
-    const governedRel = new Set(
-      allGovernedFiles.map((abs) => normalize(path.relative(root, abs)))
+    const dumped = teamParliament.changeSet.productPaths.filter(
+      (rel) => !isGovernedSourcePath(root, rel, config)
     );
-    const dumped = teamParliament.changeSet.productPaths.filter((rel) => !governedRel.has(rel));
     if (dumped.length > 0) {
       const message = ungovernedDumpMessage(dumped);
       if (args.json) {
@@ -1430,8 +1430,8 @@ async function main() {
     }
   }
   const files = args.changed
-    ? filterChangedGovernedFiles(allGovernedFiles, root, changedPaths, normalize)
-    : allGovernedFiles;
+    ? governedFilesFromRelativePaths(root, changedPaths, config)
+    : loadGovernedFiles();
 
   // --coverage is a pure glob/report view (no TypeScript resolver), so serve it BEFORE the
   // TS import: the report must work — and exit 0 — even when typescript isn't installed.
@@ -1821,6 +1821,7 @@ async function main() {
         mode: fitness.mode,
         improvementCompass: reportCompass,
         arkRun: designDepth?.arkRun ?? null,
+        arkOrder: designDepth?.arkOrder ?? null,
       }),
       leftoverDesignWork: designDepth?.designFitness?.designWeak === true,
     };
@@ -1863,6 +1864,7 @@ async function main() {
           ? { deepModuleCoach: designDepth.deepModuleCoach }
           : {}),
         ...(designDepth?.arkRun ? { arkRun: designDepth.arkRun } : {}),
+        ...(designDepth?.arkOrder ? { arkOrder: designDepth.arkOrder } : {}),
       },
     };
     const html = args.beginner
@@ -1964,7 +1966,7 @@ async function main() {
     }, null, 2));
   } else {
     for (const warning of warnings) {
-      console.error(`${color.yellow('warning')} ${warning.ruleId} ${warning.message}`);
+      printWarning(warning);
     }
     for (const violation of activeViolations) {
       printViolation(violation);

package/bin/lib/agent-projection-formatters.mjs

@@ -105,6 +105,8 @@ export function buildAgentProjectionBody(facts) {
         '',
         AGENT_PROJECTION_NON_ENFORCEMENT_LABEL,
         '',
+        'Contener · Guiar · Ordenar — contain the write, guide the next step, order leftover mess. Skills never enforce.',
+        '',
         `- **arkgateVersion:** \`${version}\` (must match the installed package; regenerate with \`ark agents-md --write\` after upgrade)`,
         `- **projectionSchema:** \`${ARK_AGENT_PROJECTION_SCHEMA_VERSION}\``,
         `- **profile:** \`${profile}\`${host ? ` · **host:** \`${host}\`` : ''}`,

package/bin/lib/agent-skills-package.mjs

@@ -19,7 +19,51 @@ export const FLAT_SKILL_TEMPLATES_RELATIVE_ROOT = 'templates/skills';
 /** Required entry filename inside each skill directory (Agent Skills standard). */
 export const AGENT_SKILL_ENTRY_FILENAME = 'SKILL.md';
 /**
- * Closed skill-name freeze (ACS / ADR skill freeze). Exactly these 13 names ship.
+ * North-star filter for first-class doors. Not a score. Not enforcement.
+ * Skills speak these so an agent picks the right sibling.
+ */
+export const ARK_SKILL_NORTH_STAR = Object.freeze(['Contener', 'Guiar', 'Ordenar']);
+/**
+ * First-class doors. Each must have crisp when / not when / handoff.
+ * Sorted alphabetically.
+ */
+export const ARK_FIRST_CLASS_SKILL_NAMES = Object.freeze([
+    'ark-adopt',
+    'ark-autopilot',
+    'ark-coverage',
+    'ark-explain',
+    'ark-explore',
+    'ark-order',
+    'ark-place',
+    'ark-runtime',
+    'ark-upgrade',
+]);
+/**
+ * One-release redirect stubs. Muscle memory / old docs still resolve.
+ * Values are first-class doors. Capability surface must stay zero-loss.
+ */
+export const ARK_SKILL_STUB_REDIRECTS = Object.freeze({
+    'ark-architect': 'ark-adopt',
+    'ark-contract': 'ark-adopt',
+    'ark-fix': 'ark-autopilot',
+    'ark-loop': 'ark-autopilot',
+    'ark-think': 'ark-explore',
+});
+/**
+ * Product surface → first-class doors that exercise it.
+ * Standing check: every surface has at least one first-class door.
+ */
+export const ARK_SKILL_CAPACITY = Object.freeze({
+    Layers: ['ark-adopt', 'ark-place', 'ark-explore', 'ark-autopilot', 'ark-coverage', 'ark-explain'],
+    ArkRules: ['ark-adopt', 'ark-explore', 'ark-autopilot'],
+    ArkRun: ['ark-adopt', 'ark-runtime', 'ark-place', 'ark-autopilot'],
+    ArkOrder: ['ark-adopt', 'ark-order', 'ark-place', 'ark-autopilot'],
+    Contener: ['ark-adopt', 'ark-place', 'ark-upgrade'],
+    Guiar: ['ark-explore', 'ark-autopilot', 'ark-explain', 'ark-coverage', 'ark-runtime'],
+    Ordenar: ['ark-order'],
+});
+/**
+ * Closed shipped catalog (first-class + one-release stubs).
  * Sorted alphabetically for deterministic inventory diffs.
  */
 export const ARK_SKILL_NAMES = Object.freeze([
@@ -32,12 +76,13 @@ export const ARK_SKILL_NAMES = Object.freeze([
     'ark-explore',
     'ark-fix',
     'ark-loop',
+    'ark-order',
     'ark-place',
     'ark-runtime',
     'ark-think',
     'ark-upgrade',
 ]);
-/** Count of frozen skill names (must stay 13 until a ROADMAP item lifts the freeze). */
+/** Count of shipped skill names (first-class + stubs). */
 export const ARK_SKILL_NAME_COUNT = ARK_SKILL_NAMES.length;
 const AGENT_SKILL_NAME_PATTERN = /^[a-z0-9]+(?:-[a-z0-9]+)*$/;
 /**
@@ -51,10 +96,20 @@ export function isValidAgentSkillName(name) {
         return false;
     return AGENT_SKILL_NAME_PATTERN.test(name);
 }
-/** True when `name` is one of the frozen 13 Ark skill names. */
+/** True when `name` is in the closed shipped catalog. */
 export function isArkSkillName(name) {
     return ARK_SKILL_NAMES.includes(name);
 }
+/** True when `name` is a first-class door (not a redirect stub). */
+export function isFirstClassArkSkillName(name) {
+    return ARK_FIRST_CLASS_SKILL_NAMES.includes(name);
+}
+/** First-class door a leftover name redirects to, or null. */
+export function arkSkillStubRedirect(name) {
+    if (!(name in ARK_SKILL_STUB_REDIRECTS))
+        return null;
+    return ARK_SKILL_STUB_REDIRECTS[name];
+}
 /**
  * Parse a skill markdown document with optional YAML frontmatter.
  * Supports the simple `key: value` / `key: "quoted"` form used by Ark templates
@@ -135,7 +190,7 @@ export function validateAgentSkillDocument(input) {
     else if (requireArk && !isArkSkillName(name)) {
         issues.push({
             code: 'UNKNOWN_SKILL_NAME',
-            message: `Skill name "${name}" is not in the frozen Ark 13-skill catalog (no new skill names).`,
+            message: `Skill name "${name}" is not in the closed Ark skill catalog (ARK_SKILL_NAMES).`,
             skillName: name,
         });
     }
@@ -163,7 +218,7 @@ export function validateAgentSkillDocument(input) {
     return issues;
 }
 /**
- * Validate a full Agent Skills package inventory against the frozen 13-name catalog.
+ * Validate a full Agent Skills package inventory against the closed catalog.
  * Detects missing, extra, duplicate, invalid, and (when supplied) flat-template drift.
  */
 export function validateAgentSkillsPackage(entries) {
@@ -201,7 +256,7 @@ export function validateAgentSkillsPackage(entries) {
         if (!seen.has(expected)) {
             issues.push({
                 code: 'MISSING_SKILL',
-                message: `Missing frozen skill "${expected}" from Agent Skills package.`,
+                message: `Missing catalog skill "${expected}" from Agent Skills package.`,
                 skillName: expected,
             });
         }
@@ -212,14 +267,14 @@ export function validateAgentSkillsPackage(entries) {
             if (!issues.some((i) => i.code === 'UNKNOWN_SKILL_NAME' && i.skillName === name)) {
                 issues.push({
                     code: 'EXTRA_SKILL',
-                    message: `Extra skill "${name}" is not in the frozen Ark 13-skill catalog.`,
+                    message: `Extra skill "${name}" is not in the closed Ark skill catalog.`,
                     skillName: name,
                 });
             }
             else {
                 issues.push({
                     code: 'EXTRA_SKILL',
-                    message: `Extra skill "${name}" is not in the frozen Ark 13-skill catalog.`,
+                    message: `Extra skill "${name}" is not in the closed Ark skill catalog.`,
                     skillName: name,
                 });
             }