baldart 5.3.0 → 5.3.2

package/CHANGELOG.md

@@ -5,6 +5,46 @@ All notable changes to BALDART will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.3.2] - 2026-07-03
+
+**AGENTS.md primitive 1.7.4 — commit-format MUST scoped to card-bound work.**
+The commit rule was unconditional ("MUST use commit format `[FEAT-XXXX]
+description`"), so a Codex session doing card-less chore work on a consumer
+(mayo) fabricated the missing datum: it grabbed the last card ID committed in
+`git log` (assuming correlation) and typed the commit `feat`. Same failure
+family as 5.3.1/1.7.3 — an unscoped constraint pushes the model to invent data
+to satisfy it — and it contradicted § Change Tiers ("Light work → no backlog
+card").
+
+- **Primitive `AGENTS.md` 1.7.4**: the card reference is scoped to commits that
+  implement THAT card (picked, `IN_PROGRESS`, branch carries its ID); card-less
+  work uses plain `<type>: description`; copying a card ID from `git log` / the
+  previous commit "for consistency" is explicitly forbidden; the type must
+  describe THIS change's nature (`chore:` for a chore — never `feat` unless the
+  commit adds a feature), never inherited from neighboring commits.
+- Codex parity: portable (the primitive is the cross-tool SSOT).
+
+## [5.3.1] - 2026-07-03
+
+**AGENTS.md primitive 1.7.3 — anti-fabricated-policy guard on the grounding spawn.**
+A live Codex session on an up-to-date consumer (mayo) reconstructed the
+`codebase-architect PROFILE=ui` mandate correctly and then self-exempted by
+inventing a runtime constraint ("subagent tool disponibile ma policy runtime lo
+vieta senza delega esplicita") that exists nowhere — the only real Codex limit
+is `agents.max_depth: 1`, which forbids *nested* spawns from inside a subagent,
+never the top-level session. Recurrence of the 1.7.0/v4.98.0 misreading class:
+the AGENTS.md delegation rules inverted into "spawn only on explicit user
+delegation".
+
+- **Primitive `AGENTS.md` 1.7.3**: the grounding MUST now states in place that
+  **the mandate IS the delegation** — claiming a runtime policy requires prior
+  user delegation is named as non-compliant, and the degrade precondition is
+  tightened to "Task tool absent AND no
+  `.codex/agents/codebase-architect.toml`". Declaring the tool available and
+  degrading anyway is a protocol violation, not a fallback.
+- Codex parity: portable (the primitive is the cross-tool SSOT; the guard's
+  Codex branch cites the real `max_depth` semantics from `CODEX-AGENTS.md`).
+
 ## [5.3.0] - 2026-07-03
 
 **Haiku banned fleet-wide + FEAT-0067 post-mortem fixes.** The FEAT-0067 audit

package/VERSION

@@ -1 +1 @@
-5.3.0
+5.3.2

package/framework/templates/primitives/AGENTS.CHANGELOG.md

@@ -4,6 +4,37 @@ Formato: [Keep a Changelog](https://keepachangelog.com/) · [SemVer](https://sem
 Questo è il changelog INTERNO dello skeleton spedito (`primitive_version`), separato dal
 file `AGENTS.md` generato nel consumer e indipendente dal `VERSION` del framework.
 
+## 1.7.4 — 2026-07-03
+
+- **Commit-format MUST scoped to card-bound work — no borrowed card IDs, no inherited
+  types.** The rule was unconditional ("MUST use commit format `[FEAT-XXXX] description`"),
+  so a Codex session doing card-less chore work fabricated the missing datum: it grabbed the
+  last card ID from `git log` (assuming correlation) and typed the commit `feat`. Same
+  failure family as 1.7.3 (an unscoped constraint → the model invents data to satisfy it),
+  and it contradicted § Change Tiers, which already says Light work carries "no backlog
+  card". The MUST now scopes the card reference to commits that implement THAT card (picked,
+  `IN_PROGRESS`, branch carries its ID), mandates plain `<type>: description` for card-less
+  work, explicitly forbids copying a card ID from `git log` / the previous commit "for
+  consistency", and requires the type to describe THIS change's nature (`chore:` for a
+  chore — never `feat` unless the commit adds a feature), never inherited from neighboring
+  commits. Portable (Claude + Codex).
+
+## 1.7.3 — 2026-07-03
+
+- **Anti-fabricated-policy guard: no runtime policy gates the `codebase-architect` spawn.**
+  A live Codex session (mayo, UP-TO-DATE install with 1.7.2) correctly reconstructed the
+  mandate ("Grounding obbligatorio via codebase-architect PROFILE=ui") and then self-exempted
+  by inventing a constraint — "subagent tool disponibile ma policy runtime lo vieta senza
+  delega esplicita" — a policy that exists nowhere (framework or Codex runtime; the only real
+  Codex limit is `agents.max_depth: 1`, which forbids *nested* spawns from inside a subagent,
+  never the top-level session). Same misreading class as 1.7.0's Claude/Codex asymmetry: the
+  AGENTS.md *delegation* rules ("MUST delegate Heavy implementation…") inverted into "I may
+  only spawn when the user explicitly delegates". The MUST now states in place that **the
+  mandate IS the delegation**, names the fabricated-policy claim as non-compliant, and
+  tightens the degrade precondition to "Task tool absent AND no
+  `.codex/agents/codebase-architect.toml`" — declaring the tool available and degrading anyway
+  is a protocol violation, not a fallback. Portable (Claude + Codex).
+
 ## 1.7.2 — 2026-07-02
 
 - **Negative guard: the understanding step is `codebase-architect`, NOT a generic search

package/framework/templates/primitives/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- baldart-primitive: name=AGENTS primitive_version=1.7.2
+<!-- baldart-primitive: name=AGENTS primitive_version=1.7.4
      This is the SHIPPED SKELETON. The writer (src/utils/root-primitives.js) strips
      this banner, resolves every {{ slot }} / {{> partial }} / {{#flag}} from
      baldart.config.yml (+ package.json/README), merges .baldart/overlays/AGENTS.md,
@@ -43,7 +43,15 @@ mechanics — this file remains the single source of truth for the protocol.
   matching profile) — **NOT the generic built-in search / `general-purpose` agent**, which
   lacks the profile engine, Reuse Analysis, Canonical Evidence, and the Return Contract; that
   is the agent to invoke, not a generic explorer.
-  Only if NEITHER invocation mechanism exists, degrade explicitly to inline retrieval
+  **No runtime policy gates this spawn — this mandate IS the delegation.** Never claim the
+  spawn requires "explicit user delegation" or that a "runtime policy forbids it": no such
+  rule exists on Claude Code or Codex (Codex's `agents.max_depth: 1` only forbids a
+  *subagent* spawning further agents — it never applies to the top-level session, which is
+  where this rule fires). If the invocation mechanism is reachable, invoking it is the only
+  compliant move; declaring the tool available and then degrading anyway is a protocol
+  violation, not a fallback.
+  Only if NEITHER invocation mechanism exists (Task tool absent AND no
+  `.codex/agents/codebase-architect.toml`), degrade explicitly to inline retrieval
   (code-graph → LSP → Grep) and SAY SO.
 - MUST have any **Heavy** plan (see § Change Tiers) reviewed BEFORE presenting it for
   approval — run `plan-auditor` + `doc-reviewer` (in parallel), incorporate their feedback,
@@ -67,7 +75,14 @@ mechanics — this file remains the single source of truth for the protocol.
   data-model update, new external dependency without docs, API-contract change without an
   API-reference update.
 - MUST keep docs and code in sync — a code change without the matching doc update is invalid.
-- MUST use commit format `{{ git.commit_format }}`; small, traceable commits.
+- MUST use commit format `{{ git.commit_format }}` for **card-bound work only** — a commit
+  references a card ONLY when it implements THAT card (the card is in scope: picked,
+  `IN_PROGRESS`, branch carries its ID). Work with no card in scope (chore / fix / docs /
+  maintenance outside the backlog) gets **NO card reference** — NEVER copy a card ID from
+  `git log` or the previous commit "for consistency"; use plain `<type>: description`
+  instead. The type/verb MUST describe THIS change's nature (a chore is `chore:`, a fix is
+  `fix:` — never `feat` unless the commit adds a feature), never inherited from neighboring
+  commits. Small, traceable commits.
 - MUST NOT commit with failing lint/type checks. Full build only before opening a PR.
 - MUST pre-sync (`git fetch`, clean status, confirm branch, `--ff-only`) and NEVER push
   directly to `{{ git.protected_branch }}` — the protected branch reaches its state only

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baldart",
-  "version": "5.3.0",
+  "version": "5.3.2",
   "description": "Claude Agent Framework - Reusable framework for coordinating AI agents and humans in software projects",
   "bin": {
     "baldart": "./bin/baldart.js"