baldart 5.3.1 → 5.3.2

package/CHANGELOG.md

@@ -5,6 +5,25 @@ All notable changes to BALDART will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [5.3.2] - 2026-07-03
+
+**AGENTS.md primitive 1.7.4 — commit-format MUST scoped to card-bound work.**
+The commit rule was unconditional ("MUST use commit format `[FEAT-XXXX]
+description`"), so a Codex session doing card-less chore work on a consumer
+(mayo) fabricated the missing datum: it grabbed the last card ID committed in
+`git log` (assuming correlation) and typed the commit `feat`. Same failure
+family as 5.3.1/1.7.3 — an unscoped constraint pushes the model to invent data
+to satisfy it — and it contradicted § Change Tiers ("Light work → no backlog
+card").
+
+- **Primitive `AGENTS.md` 1.7.4**: the card reference is scoped to commits that
+  implement THAT card (picked, `IN_PROGRESS`, branch carries its ID); card-less
+  work uses plain `<type>: description`; copying a card ID from `git log` / the
+  previous commit "for consistency" is explicitly forbidden; the type must
+  describe THIS change's nature (`chore:` for a chore — never `feat` unless the
+  commit adds a feature), never inherited from neighboring commits.
+- Codex parity: portable (the primitive is the cross-tool SSOT).
+
 ## [5.3.1] - 2026-07-03
 
 **AGENTS.md primitive 1.7.3 — anti-fabricated-policy guard on the grounding spawn.**

package/VERSION

@@ -1 +1 @@
-5.3.1
+5.3.2

package/framework/templates/primitives/AGENTS.CHANGELOG.md

@@ -4,6 +4,21 @@ Formato: [Keep a Changelog](https://keepachangelog.com/) · [SemVer](https://sem
 Questo è il changelog INTERNO dello skeleton spedito (`primitive_version`), separato dal
 file `AGENTS.md` generato nel consumer e indipendente dal `VERSION` del framework.
 
+## 1.7.4 — 2026-07-03
+
+- **Commit-format MUST scoped to card-bound work — no borrowed card IDs, no inherited
+  types.** The rule was unconditional ("MUST use commit format `[FEAT-XXXX] description`"),
+  so a Codex session doing card-less chore work fabricated the missing datum: it grabbed the
+  last card ID from `git log` (assuming correlation) and typed the commit `feat`. Same
+  failure family as 1.7.3 (an unscoped constraint → the model invents data to satisfy it),
+  and it contradicted § Change Tiers, which already says Light work carries "no backlog
+  card". The MUST now scopes the card reference to commits that implement THAT card (picked,
+  `IN_PROGRESS`, branch carries its ID), mandates plain `<type>: description` for card-less
+  work, explicitly forbids copying a card ID from `git log` / the previous commit "for
+  consistency", and requires the type to describe THIS change's nature (`chore:` for a
+  chore — never `feat` unless the commit adds a feature), never inherited from neighboring
+  commits. Portable (Claude + Codex).
+
 ## 1.7.3 — 2026-07-03
 
 - **Anti-fabricated-policy guard: no runtime policy gates the `codebase-architect` spawn.**

package/framework/templates/primitives/AGENTS.md

@@ -1,4 +1,4 @@
-<!-- baldart-primitive: name=AGENTS primitive_version=1.7.3
+<!-- baldart-primitive: name=AGENTS primitive_version=1.7.4
      This is the SHIPPED SKELETON. The writer (src/utils/root-primitives.js) strips
      this banner, resolves every {{ slot }} / {{> partial }} / {{#flag}} from
      baldart.config.yml (+ package.json/README), merges .baldart/overlays/AGENTS.md,
@@ -75,7 +75,14 @@ mechanics — this file remains the single source of truth for the protocol.
   data-model update, new external dependency without docs, API-contract change without an
   API-reference update.
 - MUST keep docs and code in sync — a code change without the matching doc update is invalid.
-- MUST use commit format `{{ git.commit_format }}`; small, traceable commits.
+- MUST use commit format `{{ git.commit_format }}` for **card-bound work only** — a commit
+  references a card ONLY when it implements THAT card (the card is in scope: picked,
+  `IN_PROGRESS`, branch carries its ID). Work with no card in scope (chore / fix / docs /
+  maintenance outside the backlog) gets **NO card reference** — NEVER copy a card ID from
+  `git log` or the previous commit "for consistency"; use plain `<type>: description`
+  instead. The type/verb MUST describe THIS change's nature (a chore is `chore:`, a fix is
+  `fix:` — never `feat` unless the commit adds a feature), never inherited from neighboring
+  commits. Small, traceable commits.
 - MUST NOT commit with failing lint/type checks. Full build only before opening a PR.
 - MUST pre-sync (`git fetch`, clean status, confirm branch, `--ff-only`) and NEVER push
   directly to `{{ git.protected_branch }}` — the protected branch reaches its state only

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "baldart",
-  "version": "5.3.1",
+  "version": "5.3.2",
   "description": "Claude Agent Framework - Reusable framework for coordinating AI agents and humans in software projects",
   "bin": {
     "baldart": "./bin/baldart.js"