axstack 0.36.1 → 0.38.0

package/README.md

@@ -88,10 +88,11 @@ and [guides](docs/guides.md) for features, reviews, watches, debugging and relea
 | Understand | [axstack-research](skills/axstack-research/SKILL.md) | Answer one bounded question with sources. |
 | Understand | [axstack-scout](skills/axstack-scout/SKILL.md) | Gather codebase evidence for an agent across several areas. |
 | Understand | [axstack-explain](skills/axstack-explain/SKILL.md) | Explain a system and separate known behavior from gaps. |
-| Understand | [axstack-diagram](skills/axstack-diagram/SKILL.md) | Draw SVG/CSS in inline pages, Mermaid for chat/GitHub/docs, or requested archify viewers. |
+| Understand | [axstack-anatomy](skills/axstack-anatomy/SKILL.md) | Build an isometric physical-object figure with the vendored anatomy kit. |
 
 Explanations default to checked inline T3 pages above a short reply.
-Use [archify](https://github.com/tt-a1i/archify) (MIT) only on an explicit viewer request.
+Use Anatomy only on an explicit isometric or physical-object figure request.
+Every Explain visual is authored and independently reviewed; plain prose stays proportional.
 
 ## How work stays controlled
 
@@ -114,8 +115,8 @@ subject to explicit stop-after-publication or observation requests.
 See [Host operations](docs/host-operations.md#chat-run-watch-activation) for wake activation and cadence.
 See [Chat-run PR watch](docs/workflows.md#chat-run-pr-watch) for the lifecycle and quiet cadence.
 
-An optional native T3 review manager runs finite peer-review passes every 15
-minutes; the review automation never merges for you. Activation needs live
+An optional native T3 review manager runs finite peer-review passes hourly
+(`everyMs:3600000`); the review automation never merges for you. Activation needs live
 host validation. See [PR-manager setup and safety](docs/host-operations.md#optional-native-peer-review-automation).
 
 

package/bin/axstack.js

@@ -13,7 +13,7 @@ import {
   uninstallBundle,
   validateBundle,
 } from '../src/installer.js';
-import { BUN_FLOOR, checkArchify, checkCapabilities, meetsFloor, runRealCheck } from '../src/capabilities.js';
+import { BUN_FLOOR, checkCapabilities, meetsFloor, runRealCheck } from '../src/capabilities.js';
 import { findLegacyRoutingLines } from '../src/instructions.js';
 import { harnessLocations } from '../src/locations.js';
 
@@ -43,7 +43,7 @@ function packageVersion() {
 const HELP = `axstack — Axstack setup CLI (installation bookkeeping only)
 
 Usage:
-  axstack install --preset <mixed|codex-only|claude-only> --bundle <dir> --skills-dir <dir> [--tools-dir <dir>] [--instructions <file>] [--claude-settings <file>|--no-claude-settings] [--harness <name>] [--force] [--yes]
+  axstack install --preset <mixed|codex-only|claude-only> --bundle <dir> --skills-dir <dir> [--instructions <file>] [--claude-settings <file>|--no-claude-settings] [--harness <name>] [--force] [--yes]
   axstack check [--bundle <dir>] [--instructions <file>] [--skills-dir <dir>|--harness <name>]
   axstack uninstall --skills-dir <dir> [--instructions <file>] [--claude-settings <file>|--no-claude-settings] [--harness <name>] [--force] [--yes]
   axstack --help | --version
@@ -62,8 +62,6 @@ Flags:
                       Aliases: codex = codex-only; claude = claude-only.
   --skills-dir <dir>  Explicit install target. Overrides harness skill defaults
                       and automatic legacy Codex skill retirement.
-  --tools-dir <dir>   Pinned archify copies. Defaults to ~/.axstack/tools.
-                      Must be outside skills roots and contain no symlink path.
   --instructions <file>
                       Instruction file to receive the owned routing block.
                       Harness defaults: ~/.claude/CLAUDE.md for Claude,
@@ -107,10 +105,11 @@ function parseArgs(argv) {
   }
   out.command = rest.shift();
   const wantsValue = new Set([
-    '--bundle', '--skills-dir', '--tools-dir', '--instructions', '--harness', '--preset', '--claude-settings',
+    '--bundle', '--skills-dir', '--instructions', '--harness', '--preset', '--claude-settings',
   ]);
   while (rest.length > 0) {
     const tok = rest.shift();
+    if (tok === '--tools-dir') throw new Error('--tools-dir is obsolete; archify provisioning has been retired');
     if (tok === '--profile') {
       throw new Error(
         '--profile is obsolete in the T3 Code installer; role data is installed as axstack/roles.json and legacy Paseo cleanup is separate',
@@ -309,7 +308,6 @@ async function main() {
         bundleDir: flags.bundle ? resolve(flags.bundle) : PACKAGE_ROOT,
         skillsDir,
         preset: flags.preset,
-        toolsDir: flags['tools-dir'] ? expandHome(flags['tools-dir']) : undefined,
         instructionsPath,
         inheritedInstructions: legacyCodexManifest?.instructions,
         force: !!flags.force,
@@ -409,18 +407,6 @@ async function main() {
     }
     if (command === 'check') {
       const report = await checkCapabilities(runRealCheck);
-      const toolSkillsDir = flags['skills-dir'] ? expandHome(flags['skills-dir']) :
-        flags.harness ? resolveHarnessTarget(flags.harness) : null;
-      if (toolSkillsDir) {
-        const tool = await checkArchify(toolSkillsDir);
-        console.log(`archify record: ${tool.recordFile}`);
-        if (tool.record) console.log(`archify copy: ${tool.record.path}; recorded SHA: ${tool.record.sha}; checked-out SHA: ${tool.actual ?? 'unavailable'}`);
-        if (tool.reason) {
-          console.log(`archify: ${tool.reason}`);
-          report.gaps.push(`archify: ${tool.reason}`);
-        }
-        console.log(tool.chrome ? `Chrome: ${tool.chrome}` : 'WARN Chrome: unavailable (viewer verification needs Chrome)');
-      }
       if (flags.bundle) {
         const bundle = await validateBundle(resolve(flags.bundle));
         const presetNames = Object.keys(bundle.presets);

package/docs/getting-started.md

@@ -26,7 +26,7 @@ axstack check --harness codex
 ```
 
 Installation writes owned skills and instructions, preserving unrelated content,
-and fetches the pinned archify tool for explicit viewer requests. Reload the
+with the vendored anatomy kit included. Reload the
 harness's skills in T3 after installation. Use the [installation reference](installation.md) for other
 harnesses, source installs or conflicts.
 
@@ -40,13 +40,13 @@ A successful check exits 0. Its four capability rows mean:
 | `t3` | T3's version command succeeds and meets the floor. |
 
 The `gh stack` extension is needed only for preexisting native stacks; ordinary
-PRs/chains use Git and `gh pr`. With this harness target, check also validates the archify record/copy/SHA and
-reports the owned instruction binding. Missing Chrome is a warning. Any reported
-gap exits 1; follow [troubleshooting](installation.md#exit-codes-and-troubleshooting) before
-starting a task.
+PRs/chains use Git and `gh pr`. With this harness target, check also reports the
+owned instruction binding. Any reported gap exits 1; follow
+[troubleshooting](installation.md#exit-codes-and-troubleshooting) before starting a task.
 
 Explanations default to checked inline T3 pages above a short reply.
-Use archify only on an explicit viewer request. Spec approval readbacks also
+Use Anatomy only on an explicit isometric or physical-object figure request.
+Every Explain visual receives author and reviewer dispatches. Spec approval readbacks also
 use inline pages, identifying the revision you approve.
 
 Check does not prove live provider readiness, schedule activation or mobile delivery.

package/docs/host-operations.md

@@ -52,7 +52,8 @@ Every verified own-PR publication arms or joins the driver's chat-run watch.
 Its bound T3 schedule uses the cadence in [Chat-run watch activation](#chat-run-watch-activation).
 See [Chat-run PR watch](workflows.md#chat-run-pr-watch) for authority, schedule identity and stop conditions.
 Missing schedule capability holds activation.
-The optional review manager uses an unbound 15-minute T3 schedule and requires
+The optional review manager uses an unbound hourly T3 schedule
+(`everyMs:3600000`) and requires
 its separate native canary before activation. Installed guidance does not prove
 live behavior. See [Review manager](../skills/axstack/references/automations.md).
 
@@ -172,8 +173,10 @@ with the PR; remove the exact unit and route after settlement.
 
 The optional native review manager uses the VPS T3 project `axstack-review-lane`
 on the existing host clone. Configure and read back the lane's `axstack-owner`
-binding, then create an unbound T3 schedule every 15 minutes. Each pass starts
-in a fresh finite worktree from `origin/main`, fetches first, and checks its
+binding, then create an unbound hourly T3 schedule (`everyMs:3600000`).
+The packaged prompt checks for a quiet exit before skill loading; full passes
+follow the lifecycle below. Each pass starts in a fresh finite worktree from
+`origin/main`, fetches first, and checks its
 binding. Continuity lives outside worktrees at
 `~/.local/share/axstack/runs/review-manager/progress.md`. Per-PR detached
 review checkouts come from existing host clones; a missing clone holds that job.
@@ -211,8 +214,9 @@ and [Single T3 server](#single-t3-server).
 
 ## Review automation
 
-The review manager uses one short packaged prompt that loads the current
-relative contract and invokes `axstack-review`. Bounded jobs publish ordinary
+The review manager uses one short packaged prompt that checks for a quiet exit,
+then loads the current relative contract and invokes `axstack-review` for a full pass.
+Bounded jobs publish ordinary
 exact-head review verdicts; peer PRs are merged by the user. Manual adopted-PR maintenance
 uses `axstack-watch` with local-SHA review before authorized publication.
 Exceptional security, permanent-on-chain, or architectural decisions remain actionable in GitHub or a durable user-owned conversation

package/docs/installation.md

@@ -11,9 +11,8 @@ Requirements: Bun >=1.3.14, Git, `gh`, and a running
 T3 Code `0.0.46-nightly.20261003.2610` or newer. The driver is a T3 thread
 with the `t3-code` MCP. See the [T3 runtime boundary](../skills/axstack/references/t3-runtime.md).
 Axstack has no runtime package dependencies. Filesystem access uses Bun-backed
-`node:fs` and `node:fs/promises`. The pinned archify tool is the sole external-tool
-exception: installation uses Git and the network, and Bun runs its Node-oriented
-code. This exception introduces no Node.js runtime requirement.
+`node:fs` and `node:fs/promises`. Vendored anatomy code runs with Bun;
+installation has no tool network or Git step and adds no Node.js runtime requirement.
 
 For project setup, remote access, provider runtimes, and relay validation, see
 [Host operations](host-operations.md).
@@ -76,16 +75,11 @@ the settings sidecar preserves the value while any other install still owns it.
 - `--yes` confirms writes under the user's home directory. Tests use temporary
   homes and fixtures only.
 
-Explanations default to inline T3 pages; use archify only on an explicit viewer request.
-Installation sparse-clones archify at the reviewed full SHA in `src/archify-pin.js`
-into `<tools-dir>/archify-<sha>`. It verifies HEAD before use and keeps the
-payload's licence and third-party notices. The manifest owns
-`<skills-dir>/axstack-diagram/archify.json`, which records `{path, sha}`.
-The adjacent `<tools-dir>/archify-<sha>.owners.json` lists its skills-root owners.
-Multiple roots share one copy. Repeat installs leave unchanged files untouched.
-An offline, Git-less, or failed clone still installs the skills, reports
-`archify: unavailable (<reason>)`, and exits 0. An existing SHA mismatch fails.
-`AXSTACK_ARCHIFY_REPO` is a test-only repository override; fixtures use a local repository without network access.
+Explanations default to inline T3 pages. Use Anatomy only on an explicit
+isometric or physical-object figure request. Every visual is authored and
+independently reviewed through the selected preset's explanation roles.
+Repeat installs leave unchanged files untouched. Legacy tool copies are
+released by ownership on upgrade and uninstall; retained copies report why.
 
 See [Account selection environment](concepts.md#account-selection-environment)
 for the picker cache directory and test-only usage endpoint variables.
@@ -145,13 +139,6 @@ owned, missing, unowned, edited, or bound to a different path. Hand-written
 legacy routing outside the owned block is reported for manual migration and
 preserved byte for byte.
 
-With `--skills-dir` or `--harness`, check reports the archify record path, copy
-path, recorded SHA, and checked-out SHA. A missing record, missing copy, or SHA
-mismatch fails the check. Chrome absence prints a warning and does not fail it.
-`ARCHIFY_CHROME` selects the Chrome executable. Without it, check looks for
-common Chrome and Chromium executables on PATH. A check without a skills target
-probes host capabilities only.
-
 Check does not prove MCP readiness, provider/model availability, schedule
 activation, or mobile delivery. Effective permission, skill reload, task
 execution, and end-to-end compatibility also require their own runtime receipts.
@@ -167,14 +154,10 @@ bytes match the manifest. Uninstall with `--force` can remove edited owned files
 Custom, unknown, and unrelated files survive. Directories
 are pruned only when empty, and the target root is never removed.
 
-Uninstall drops that skills root from archify's owners file. It removes the copy
-only when no owners remain, HEAD matches the recorded SHA, and
-`git status --porcelain --ignored` is empty. Otherwise it keeps the copy and
-reports why, even with `--force`. A pin bump or a changed `--tools-dir` releases
-the old copy through the same guard. Installation clones into a temporary sibling
-and renames it into place. A later owner or manifest write failure restores
-ownership and removes only a copy created by that installation. Older manifests
-without an archify record still load.
+Legacy tool release drops only this skills root's ownership. It removes an
+unchanged real copy only at its recorded SHA with no other owners and no
+tracked, untracked or ignored edits. Otherwise it reports why the copy stays.
+Edited or unowned legacy records stay intact; failed manifest writes restore owners.
 
 ## Environment variables
 
@@ -184,8 +167,6 @@ without an archify record still load.
   and the legacy skills manifest; it does not change the shared skill default.
 - `CLAUDE_CONFIG_DIR` selects the directory containing `settings.json` for
   Claude settings management; `--claude-settings` overrides that file.
-- `ARCHIFY_CHROME` selects the Chrome executable used by the archify check.
-- `AXSTACK_ARCHIFY_REPO` is a test-only repository override for archify fixtures.
 
 ## Exit codes and troubleshooting
 
@@ -194,13 +175,12 @@ For every command (install, check, uninstall, help and version), Bun below
 1.3.14 exits 1 before argument parsing or any capability report.
 
 - Install exits 1 for argument or validation errors: an unknown command or flag,
-  missing flag value, obsolete `--profile`, conflicting Claude settings flags,
+  missing flag value, obsolete `--profile` or `--tools-dir`, conflicting Claude settings flags,
   Bun below the floor, missing or invalid preset, unresolved skills target,
-  unavailable default tools path, malformed bundle or manifest, unsafe path or
-  symlink, overlapping skills/tools roots, or a refused home write without `--yes`.
+  malformed bundle or manifest, unsafe path or
+  symlink, overlapping roots, or a refused home write without `--yes`.
 - Install exits 1 for ownership or transaction failures: an unknown destination
-  without `--force`, conflicting instruction-path binding, edited or unowned
-  archify record, existing archify SHA mismatch, Claude settings/sidecar conflict,
+  without `--force`, conflicting instruction-path binding, Claude settings/sidecar conflict,
   concurrent edit, filesystem failure, or failed recovery.
 - Install exits 1 for an instruction conflict that was preserved. Resolve the
   reported block conflict manually before retrying.
@@ -209,19 +189,18 @@ For every command (install, check, uninstall, help and version), Bun below
 - Install exits 1 for a legacy retirement failure after a canonical Codex install;
   that canonical install can already be complete. Preserve the reported assets
   and resolve the retirement error before retrying.
-- Check exits 1 for any reported gap: a failed capability row, invalid archify
-  record/copy/SHA, non-owned instruction binding, or legacy routing outside the
+- Check exits 1 for any reported gap: a failed capability row,
+  non-owned instruction binding, or legacy routing outside the
   owned block. Check exits 1 for argument, bundle-validation, and filesystem errors.
 - Uninstall exits 1 for argument, validation, ownership-binding, home-confirmation,
   or transaction errors; preserved user edits are reported without failing.
 
 Install exits 0 for a clean or idempotent result, preserved edits to ordinary
-owned skills, or unavailable archify caused by an offline host, missing Git, or
-clone failure. Check exits 0 when there are no gaps, and Chrome absence is a warning.
+owned skills. Check exits 0 when there are no gaps.
 Uninstall exits 0 on completion, including preserved user edits and retained
-archify copies. Help and version exit 0 when the Bun floor is met.
+legacy tool copies. Help and version exit 0 when the Bun floor is met.
 
-Start with the reported path and reason. Choose an explicit skills or tools path
+Start with the reported path and reason. Choose an explicit skills path
 when a default cannot resolve. Use `--yes` only for intended home writes, and
 `--force` only after deciding to replace the specific asset. Back up edited files
 before changing ownership. An incomplete rollback reports manual recovery needs;

package/docs/workflows.md

@@ -33,16 +33,17 @@ Direct routes need no spec ceremony:
   questions using independent, read-only seats.
 - `axstack-correct` reports repeated mistakes and proposes stronger checks.
   Only the user invokes it.
+- [axstack-anatomy](../skills/axstack-anatomy/SKILL.md) builds an isometric,
+  physical-object, or anatomy-style figure with the vendored kit and Bun.
 - `axstack-explain` separates implemented, intended, tested, live, and unknown
   behavior. Explanations default to checked inline T3 pages above a short reply.
-  Consequential or complex claims, archify output, or a user request require
-  independent explanation review; interactive pages receive a verifier pass.
-- [axstack-diagram](../skills/axstack-diagram/SKILL.md) selects inline SVG or CSS
-  inside pages and Mermaid for chat fallback, GitHub, and docs.
-  Explain loads it for every diagram. Use
-  [archify](https://github.com/tt-a1i/archify) (MIT) only on an explicit viewer request,
-  authored by `axstack-explainer`, with a pinned tool, a passing finalize receipt,
-  rendered QA, and node-and-edge source review.
+  Every visual is authored by `axstack-explainer` and independently reviewed by
+  `axstack-explainer-review`; interactive pages receive a verifier pass.
+  Whole-work understanding and defense covers high-level flow, decisions,
+  data/state, misbehaviour at trust boundaries and visible failure, with open
+  evidence gaps. Narrow questions stay proportional.
+  Explain owns SVG/CSS in inline pages and Mermaid in chat, GitHub and docs.
+  Use Anatomy only on an explicit isometric or physical-object figure request.
 - `axstack-improve` returns a small ranked set of evidenced improvement
   candidates without editing code. Its test-audit lens marks every declaration
   in one owner boundary R/F/C/D, reports reviewed and eligible counts, and routes
@@ -138,7 +139,9 @@ intentionally absent in `codex-only`. Mixed web-google and X retain their
 source-specific Antigravity and Grok routes.
 The mixed `axstack-auditor` uses Haiku 5.5 xhigh, pinned to `claude-haiku-5-5`;
 missing that ID or xhigh effort holds without substitution. The mixed
-`axstack-explainer-review` uses Sol medium; `axstack-explainer` stays Sonnet high.
+`axstack-explainer-review` uses Sol medium; `axstack-explainer` pins
+`claude-sonnet-5-5` high with class `sonnet`. Both roles cover every Explain
+visual, including chat Mermaid and anatomy figures.
 In `claude-only`, `axstack-auditor` uses the Claude Sonnet class at high effort.
 The new `-sol` auditor, research-code, and explore-execution seats use Sol high
 in `mixed` and `codex-only`; `claude-only` records each as intentionally absent.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "axstack",
-  "version": "0.36.1",
+  "version": "0.38.0",
   "description": "Axstack installer and setup CLI: installs owned chat skills and role data, configures supported harness settings, and checks T3 Code capabilities.",
   "keywords": [
     "claude-code",

package/profiles/presets/claude-only.json

@@ -142,7 +142,7 @@
       "provider": "claude",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "high",
-      "notes": "Archify viewer author: authors archify only on an explicit viewer request, with source fidelity. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
+      "notes": "Visual author: authors every visual Explain delivers, including pages, chat Mermaid and anatomy figures, with source fidelity. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
       "modelClass": "sonnet"
     },
     {
@@ -151,7 +151,7 @@
       "provider": "claude",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "high",
-      "notes": "Independent explanation reviewer: reviews consequential or complex claims, archify output, or on request. Checks the exact artifact for text and source fidelity. The rendered pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
+      "notes": "Independent explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The rendered pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
       "modelClass": "sonnet"
     },
     {
@@ -160,7 +160,7 @@
       "provider": "claude",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "high",
-      "notes": "Read-only UI verifier: uses T3 preview_* tools against the given build, URL, or artifact; captures screenshots, interactions, accessibility, desktop/mobile, and reduced-motion evidence in the dispatch evidence folder; returns a verdict with evidence paths. Performs the inline page interaction pass for every interactive page, bound to the exact bytes and SHA-256. Never edits source. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
+      "notes": "Read-only UI verifier: uses the configured verifier browser tools against the given build, URL, or artifact; captures screenshots, interactions, accessibility, desktop/mobile, and reduced-motion evidence in the dispatch evidence folder; returns a verdict with evidence paths. Performs the inline page interaction pass for every interactive page, bound to the exact bytes and SHA-256. Never edits source. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
       "modelClass": "sonnet"
     },
     {

package/profiles/presets/codex-only.json

@@ -142,7 +142,7 @@
       "provider": "codex",
       "modeId": "full-access",
       "thinkingOptionId": "high",
-      "notes": "Archify viewer author: authors archify only on an explicit viewer request, with source fidelity. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
+      "notes": "Visual author: authors every visual Explain delivers, including pages, chat Mermaid and anatomy figures, with source fidelity. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
       "modelClass": "sol"
     },
     {
@@ -151,7 +151,7 @@
       "provider": "codex",
       "modeId": "full-access",
       "thinkingOptionId": "xhigh",
-      "notes": "Independent explanation reviewer: reviews consequential or complex claims, archify output, or on request. Checks the exact artifact for text and source fidelity. The rendered pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
+      "notes": "Independent explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The rendered pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
       "modelClass": "luna"
     },
     {
@@ -160,7 +160,7 @@
       "provider": "codex",
       "modeId": "full-access",
       "thinkingOptionId": "medium",
-      "notes": "Read-only UI verifier: uses T3 preview_* tools against the given build, URL, or artifact; captures screenshots, interactions, accessibility, desktop/mobile, and reduced-motion evidence in the dispatch evidence folder; returns a verdict with evidence paths. Performs the inline page interaction pass for every interactive page, bound to the exact bytes and SHA-256. Never edits source. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
+      "notes": "Read-only UI verifier: uses the configured verifier browser tools against the given build, URL, or artifact; captures screenshots, interactions, accessibility, desktop/mobile, and reduced-motion evidence in the dispatch evidence folder; returns a verdict with evidence paths. Performs the inline page interaction pass for every interactive page, bound to the exact bytes and SHA-256. Never edits source. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
       "modelClass": "sol"
     },
     {

package/profiles/presets/mixed.json

@@ -142,8 +142,9 @@
       "provider": "claude",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "high",
-      "notes": "Archify viewer author: authors archify only on an explicit viewer request, with source fidelity. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
-      "modelClass": "sonnet"
+      "notes": "Visual author: authors every visual Explain delivers, including pages, chat Mermaid and anatomy figures, with source fidelity. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
+      "modelClass": "sonnet",
+      "model": "claude-sonnet-5-5"
     },
     {
       "id": "axstack-explainer-review",
@@ -151,7 +152,7 @@
       "provider": "codex",
       "modeId": "full-access",
       "thinkingOptionId": "medium",
-      "notes": "Independent Sol medium explanation reviewer: reviews consequential or complex claims, archify output, or on request. Checks the exact artifact for text and source fidelity. The rendered pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
+      "notes": "Independent Sol medium explanation reviewer: always reviews every visual. Reviews consequential or complex driver-written prose or on request. Checks the exact artifact for text and source fidelity. The rendered pass belongs to axstack-ui-verifier. Any artifact change invalidates its review. Resolve the class from saved T3 capabilities at run start; rejection and unavailable settings hold without substitution.",
       "modelClass": "sol"
     },
     {
@@ -160,7 +161,7 @@
       "provider": "claude",
       "modeId": "bypassPermissions",
       "thinkingOptionId": "high",
-      "notes": "Read-only UI verifier: uses T3 preview_* tools against the given build, URL, or artifact; captures screenshots, interactions, accessibility, desktop/mobile, and reduced-motion evidence in the dispatch evidence folder; returns a verdict with evidence paths. Performs the inline page interaction pass for every interactive page, bound to the exact bytes and SHA-256. Never edits source. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
+      "notes": "Read-only UI verifier: uses the configured verifier browser tools against the given build, URL, or artifact; captures screenshots, interactions, accessibility, desktop/mobile, and reduced-motion evidence in the dispatch evidence folder; returns a verdict with evidence paths. Performs the inline page interaction pass for every interactive page, bound to the exact bytes and SHA-256. Never edits source. T3 resolves Claude classes from saved capabilities; a Claude rejection holds.",
       "modelClass": "sonnet"
     },
     {

package/skills/axstack/references/automations.md

@@ -40,11 +40,16 @@ A missing, non-durable or unreadable continuity path holds admission.
 Follow the [Run record](run-record.md) and use the
 [Review-manager continuity template](run-record.md#review-manager-continuity-template):
 overwrite its four current-state sections and archive superseded history once
-beside it. A no-change pass appends at most one history line.
+beside it. A no-change full pass appends at most one history line.
+
+Follow the quiet check in the packaged [review-manager prompt](review-manager-prompt.md).
+The full pass records in Watermarks `Quiet gate:` as the sorted list and
+`Last full pass:` as UTC only as owner-of-record, then reads back the save.
+The sections below govern full passes; a quiet exit bypasses their teardown.
 
 Configure the lane thread via `t3_thread_configure` with the `axstack-owner`
 binding and verify its read-back. Then `schedule_task` uses the packaged prompt,
-`everyMs:900000`, `bindToCurrentThread:false`, and a stable `clientRequestId`.
+hourly with `everyMs:3600000`, `bindToCurrentThread:false`, and a stable `clientRequestId`.
 Record the schedule ID, project, lane binding and pass thread/run identities.
 Each pass compares its own `t3_thread_configuration` with the recorded binding
 after any owner-only instance update under [Provider bindings](t3-runtime.md#preflight-and-binding), before admission.

package/skills/axstack/references/lifecycle.md

@@ -131,7 +131,8 @@ differs from merged.
 ## Review automation health
 
 The native review manager uses fresh finite T3 pass threads from its dedicated
-lane project on a 15-minute T3 scheduled task. It admits actionable PR events
+lane project on an hourly T3 scheduled task (`everyMs:3600000`). It admits
+actionable PR events
 within measured host capacity; waiting PRs remain covered without reserving slots.
 Bounded PR jobs use driver-made detached checkouts and settle after descendants.
 Build no custom scheduler, state engine or legacy fallback. See

package/skills/axstack/references/review-manager-prompt.md

@@ -1,6 +1,44 @@
 # Review manager prompt
 
-At pass start, follow [Provider bindings](t3-runtime.md#preflight-and-binding) for own account selection.
+The account picker must run first, before the quiet check: from the installed
+`axstack` skill directory, run `bun scripts/pick-instance.js --provider <own provider> --json`.
+Find this pass's current instance from `t3_thread_configuration` in the picker
+JSON `instances` and inspect its `state`; defer reference loads until a full pass.
+An eligible current instance remains quiet-eligible even when `chosenInstanceId`
+names a different instance.
+Run the quiet check before invoking `axstack-review` or reading any `skills/**` file.
+
+Resolve self with `gh api user --jq .login`, then union two paginated `gh search prs`
+queries (`review-requested:@me` and `involves:@me`), each with `--limit 1000`,
+for open, non-draft PRs authored by someone else,
+producing a sorted (repo#number, headRefOid, updatedAt) list.
+Search omits head OIDs: obtain them with read-only `gh pr view --json headRefOid`.
+A result count at or above 1000 in either query makes coverage incomplete.
+Inventory every page of T3 lane threads and their run liveness, including recorded
+PR-job descendants, using exact lane identities.
+Read continuity at `~/.local/share/axstack/runs/review-manager/progress.md` and
+compare its Watermarks with the inventory:
+
+- Run the full pass when the picker JSON marks this pass's current instance `excluded`.
+- Run the full pass when the picker exits with code 1.
+- Run the full pass when the picker exits with code 2.
+- Run the full pass when the sorted list differs from `Quiet gate:`.
+- Run the full pass when any other lane thread is non-terminal.
+- Run the full pass when continuity or either watermark is missing, malformed or unreadable.
+- Run the full pass when `Last full pass:` is at least 4 hours old or in the future.
+- Run the full pass when any call fails or pagination, PR head OIDs or thread/run liveness is incomplete or unknown.
+- Run the full pass when continuity records any unserved, capacity-deferred, `INCOMPLETE` or re-eligible event, or any open hold with a resume condition beyond a user decision (such as capacity or remeasure).
+
+Holds awaiting only the user remain quiet-eligible: a user decision on the PR
+changes `updatedAt` and the 4 h full pass bounds reminders.
+
+If every busy condition is false, end the turn with no text, no skill load, no sweep and no continuity write.
+Otherwise continue with the full pass below; incomplete evidence retains the
+existing admission and cleanup holds.
+
+## Full pass
+
+Follow [Provider bindings](t3-runtime.md#preflight-and-binding) for own account selection.
 
 You are a fresh finite T3 review-manager pass in project `axstack-review-lane`
 on the VPS's existing `axatbhardwaj/axstack` clone. Fetch first; this unbound
@@ -17,5 +55,8 @@ Report retained worktree count and disable the schedule and hold past its
 authorized limit. Only the owner retires settled predecessors and saves and
 reads back continuity at
 `~/.local/share/axstack/runs/review-manager/progress.md` using
-`run-record.md#review-manager-continuity-template`; settle descendants and end
-the finite turn. Stay quiet when unchanged. Never check out a PR branch here.
+`run-record.md#review-manager-continuity-template`.
+The full pass records in Watermarks `Quiet gate:` as the sorted list and
+`Last full pass:` as UTC only as owner-of-record, then reads back the save.
+Settle descendants and end the finite turn. Stay quiet when unchanged.
+Never check out a PR branch here.

package/skills/axstack/references/role-roster.md

@@ -22,9 +22,11 @@
   `axstack-arena-judge-opus` judges round 1; `axstack-escalation-fable`/`axstack-arena-judge-astra` judge round 2.
   High-stakes/trigger: fresh [contract](contracts.md) session.
   `axstack-auditor` audits; `axstack-checker` reports discrepancies.
-- `axstack-explainer` authors archify only on an explicit viewer request.
-- `axstack-explainer-review` reviews consequential or complex claims, archify
-  output, or on request; `codex/sol` medium in mixed.
+- `axstack-explainer` authors every visual Explain delivers, including pages,
+  chat Mermaid and anatomy figures; mixed pins Sonnet 5.5 high exactly.
+- `axstack-explainer-review` always reviews every visual; `codex/sol` medium in mixed.
+  Consequential or complex driver-written prose keeps its review rule; every
+  whiteboard defense is consequential, in chat too.
 - `axstack-diligence`: read-only [diligence checks](diligence.md) for every PR
   review round and bounded research, spec, ticket, receipt, and release claims.
 - `axstack-ui-verifier`: owns the inline page interaction pass under [UI checks](ui-verification.md)
@@ -56,11 +58,16 @@
   `axstack-research-x`, `axstack-checker`, `axstack-research-code-sol`,
   `axstack-explore-execution-sol`, `axstack-auditor-sol`,
   `axstack-explore-codebase-flash`.
-  Always dispatch optional seats when configured and available. Only a
+  Always dispatch optional seats when configured and available, except research
+  branches, which follow [Research step 2](../../axstack-research/SKILL.md#procedure) sizing.
+  A research branch unneeded by an open claim is recorded `not needed (<reason>)`,
+  never as absent or a malfunction. Only a
   launch failure, trust/login prompt, or prompt block makes one absent:
   fence the attempt, record `absent (<reason>)`, name it once in the next
   read-back, and skip it without a relay or substitution. An uncertain
-  dispatch is reconciled, not called absent. A mixed fan-out still includes
-  at least one Codex and one Claude seat; otherwise hold that fan-out.
+  dispatch is reconciled, not called absent. A sized mixed research fan-out
+  requires dispatched branches spanning at least two different providers;
+  otherwise hold that fan-out. Every other mixed fan-out, including arena and
+  peer review, retains at least one Codex and one Claude seat; otherwise hold that fan-out.
   Intentional absences in codex-only and claude-only remain unchanged.
 - `axstack-debug-investigator-1..4` probe L1 briefs.

package/skills/axstack/references/routing.md

@@ -44,7 +44,8 @@ An exhausted account with no eligible sibling still holds; dispatched roles neve
 Follow [Provider bindings](t3-runtime.md#preflight-and-binding) for driver account re-selection at turn boundaries.
 [Model discipline](contracts.md#model-discipline) governs optional seats,
 auditor preflight, and required holds; [Role roster](role-roster.md) governs
-single-provider absence and mixed Codex+Claude fan-out.
+single-provider absence, mixed research with at least two different providers,
+and other mixed Codex+Claude fan-out (including arena and peer review).
 Bundled presets are setup inputs, not runtime readiness proof.
 
 Load the [Role roster](role-roster.md) for configured roles and authored-review pairings.

package/skills/axstack/references/run-record.md

@@ -159,6 +159,8 @@ in the adjacent history file, not below this template.
 - <PR or lane, reason, evidence, owner, resume condition; or none>
 
 ## Watermarks
+- Quiet gate: <sorted (repo#number, headRefOid, updatedAt) list; [] when empty>
+- Last full pass: <UTC timestamp of the last full pass>
 - <PR/event identity, exact head/base, last observed receipt; or none>
 
 ## Last pass

package/skills/axstack/references/ui-verification.md

@@ -1,6 +1,6 @@
 # UI verification
 
-Every Playwright, browser, or rendered-UI check outside the three named browser
+Every Playwright, browser, or rendered-UI check outside the two named browser
 exceptions, including a "confirm it in the browser" step, goes through async
 `delegate_task` to `axstack-ui-verifier` from the run's role snapshot. Give it the exact build, URL, or artifact and the private
 dispatch's evidence folder. The verifier is read-only: it never edits source.
@@ -8,30 +8,26 @@ The PR writer remains the sole writer.
 
 Before using a PR preview URL, the UI verifier must read [PR previews](preview.md).
 
-The first named browser exception is archify `finalize` as a headless build gate.
-Keep finalize outputs only in the private evidence folder.
-Never replace the verifier's rendered pass with finalize.
-
-The second named browser exception is the driver's two `html_preview`
+The first named browser exception is the driver's two `html_preview`
 runs at 728px dark and 360px light.
 Never replace the verifier's interaction pass with `html_preview`.
 Follow [Inline pages](../../axstack-explain/references/inline-pages.md) for the page checks.
 
-The third named browser exception permits dispatched roles to use
+The second named browser exception permits dispatched roles to use
 `html_preview` as a non-publishing self-check.
 Dispatched-role self-checks never replace the driver's two previews or the `axstack-ui-verifier` pass.
 Dispatched roles never call `html_render`.
-All other browser checks outside the three named exceptions remain delegated to `axstack-ui-verifier`.
+All other browser checks outside the two named exceptions remain delegated to `axstack-ui-verifier`.
 
 Read the [T3 runtime boundary](t3-runtime.md) before dispatch; for candidate
 checks use its driver-made disposable detached checkout at the pinned candidate SHA.
-The verifier uses T3 `preview_*` tools for rendered checks.
+Use the configured verifier browser and honor the user browser-tool policy.
 Candidate browser and visual checks must run in the delegated `axstack-ui-verifier` in its own detached checkout; outputs go to its private evidence folder, never the driver worktree.
 
 For every interactive page, require a real-browser `axstack-ui-verifier` interaction pass.
 Give the evidence path and SHA-256 of the exact bytes in the verifier brief.
 The verifier serves the exact bytes on loopback.
-The verifier opens the page with `preview_open` using `open:false`.
+The verifier opens the loopback page in its configured browser.
 The verifier checks clicks, keyboard, focus order, screen-reader names, expanded states, and reduced motion.
 Require that `performance.getEntriesByType('resource')` is empty.
 The detached-checkout rule does not apply to a page without a candidate.