bigpowers 2.84.1 → 2.85.1

package/scripts/lib/land-branch-push.sh

@@ -0,0 +1,106 @@
+#!/usr/bin/env bash
+# land-branch-push.sh — push + protected-branch fallback helpers for land-branch.sh
+# story: BUG-2026-07-25-land-branch-protected
+set -euo pipefail
+
+if [[ -n "${LAND_BRANCH_PUSH_LOADED:-}" ]]; then return 0; fi
+LAND_BRANCH_PUSH_LOADED=1
+
+LAND_PR_FALLBACK=0
+
+is_protected_branch_rejection() {
+  local output="$1"
+  echo "$output" | grep -qE '(^|[[:space:]])GH006|Changes must be made through a pull request'
+}
+
+land_recovery_branch_name() {
+  local feature_branch="$1"
+  echo "land-recovery/${feature_branch}"
+}
+
+land_print_recovery_commands() {
+  local recovery_branch="$1"
+  local land_sha="$2"
+  local default_branch="$3"
+  local commit_msg="$4"
+
+  {
+    echo "ERROR: Protected-branch fallback failed. Run these commands to recover manually:"
+    echo ""
+    echo "  git branch $recovery_branch $land_sha"
+    echo "  git checkout $default_branch"
+    echo "  git fetch origin $default_branch"
+    echo "  git reset --hard origin/$default_branch"
+    echo "  git push -u origin $recovery_branch"
+    echo "  gh pr create --base $default_branch --head $recovery_branch --title \"$commit_msg\""
+  } >&2
+}
+
+land_fallback_to_pr() {
+  local default_branch="$1"
+  local land_sha="$2"
+  local feature_branch="$3"
+  local commit_msg="$4"
+  local recovery_branch
+  recovery_branch="$(land_recovery_branch_name "$feature_branch")"
+  local full_sha
+  full_sha="$(git rev-parse "$land_sha")"
+
+  echo "==> Protected branch push rejected; falling back to PR workflow"
+  echo "    Recovery branch: $recovery_branch @ $land_sha"
+
+  if git show-ref --verify --quiet "refs/heads/$recovery_branch"; then
+    git branch -D "$recovery_branch"
+  fi
+  git branch "$recovery_branch" "$full_sha"
+
+  git fetch origin "$default_branch"
+  git reset --hard "origin/$default_branch"
+
+  if ! git push -u origin "$recovery_branch"; then
+    land_print_recovery_commands "$recovery_branch" "$full_sha" "$default_branch" "$commit_msg"
+    return 1
+  fi
+
+  local pr_body
+  pr_body="Automated recovery from \`land-branch.sh\` after protected-branch push rejection on \`$default_branch\`.
+
+Squash commit: \`$land_sha\`
+Source feature branch: \`$feature_branch\`"
+
+  if ! gh pr create \
+    --base "$default_branch" \
+    --head "$recovery_branch" \
+    --title "$commit_msg" \
+    --body "$pr_body"; then
+    land_print_recovery_commands "$recovery_branch" "$full_sha" "$default_branch" "$commit_msg"
+    return 1
+  fi
+
+  LAND_PR_FALLBACK=1
+  echo "==> PR created via protected-branch fallback (local $default_branch reset to origin)"
+  return 0
+}
+
+land_push_default_branch() {
+  local default_branch="$1"
+  local land_sha="$2"
+  local feature_branch="$3"
+  local commit_msg="$4"
+  local push_output=""
+  local push_status=0
+
+  if push_output=$(git push origin "$default_branch" 2>&1); then
+    return 0
+  fi
+  push_status=$?
+
+  if is_protected_branch_rejection "$push_output"; then
+    echo "$push_output" >&2
+    land_fallback_to_pr "$default_branch" "$land_sha" "$feature_branch" "$commit_msg"
+    return $?
+  fi
+
+  echo "$push_output" >&2
+  return "$push_status"
+}

package/scripts/run-skill-verify.sh

@@ -3,8 +3,8 @@
 # Run all SKILL.md → verify: commands and report PASS/FAIL/SKIP.
 # Exit 0 only when zero FAILs.
 # Usage: bash scripts/run-skill-verify.sh [skill-name]
-#   No args: runs all skills
-#   With arg: runs only the named skill
+#   No args: runs all skills + negative-path self-test
+#   With arg: runs only the named skill (skips self-test)
 
 set -uo pipefail
 
@@ -19,56 +19,131 @@ fi
 
 REPO_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
 cd "$REPO_ROOT"
-# SKILLS_ROOT: use skills/ when it exists, fall back to repo root
 SKILLS_ROOT="$REPO_ROOT"
 [[ -d "$REPO_ROOT/skills" ]] && SKILLS_ROOT="$REPO_ROOT/skills"
 
 PASS=0; FAIL=0; SKIP=0
 TARGET="${1:-}"
 
+is_fail_open_directive() {
+  local cmd="$1"
+  echo "$cmd" | grep -qE '\|\|[[:space:]]*echo|\|[[:space:]]*awk'
+}
+
+normalize_verify_cmd() {
+  local raw="$1"
+  raw=$(echo "$raw" | sed 's/^> // ; s/^→ verify: *//')
+  raw=$(echo "$raw" | sed 's/^`//; s/`$//')
+  echo "$raw"
+}
+
+is_executable_verify() {
+  local cmd="$1"
+  echo "$cmd" | grep -qE '^[a-zA-Z][a-zA-Z0-9_.-]*\b|^\['
+}
+
+run_verify_cmd() {
+  local skill="$1"
+  local cmd="$2"
+  local label="${3:-$skill}"
+
+  if is_fail_open_directive "$cmd"; then
+    echo "FAIL: $label — fail-open pattern (|| echo or | awk): $cmd"
+    FAIL=$((FAIL + 1))
+    return 1
+  fi
+
+  local output
+  if output=$(run_with_timeout "$cmd"); then
+    echo "PASS: $label"
+    PASS=$((PASS + 1))
+    return 0
+  else
+    echo "FAIL: $label — $cmd"
+    echo "      output: $(echo "$output" | head -1)"
+    FAIL=$((FAIL + 1))
+    return 1
+  fi
+}
+
 run_skill() {
   local skill_md="$1"
   local skill
   skill=$(dirname "$skill_md")
 
-  # Only match → verify: at line start (after optional blockquote "> " or numbered-list prefix)
-  # This prevents false matches against description prose or template examples.
-  local cmd
-  cmd=$(grep -E '^(> )?→ verify:' "$skill_md" 2>/dev/null | head -1 | sed 's/^> // ; s/^→ verify: *//')
+  mapfile -t verify_lines < <(grep -E '^(> )?→ verify:' "$skill_md" 2>/dev/null || true)
 
-  if [ -z "$cmd" ]; then
+  if [ "${#verify_lines[@]}" -eq 0 ]; then
     echo "SKIP: $skill"
     SKIP=$((SKIP + 1))
     return
   fi
 
-  # Strip surrounding backticks — SKILL.md verify: commands use markdown code-span wrapping
-  # but bash -c would interpret the backticks as command substitution, causing false FAILs.
-  cmd=$(echo "$cmd" | sed 's/^`//; s/`$//')
-
-  # Skip verify directives that are prose, not executable shell commands.
-  # Heuristic: if the command doesn't start with a known command word or path,
-  # it's likely descriptive text, not a runnable verification.
-  if ! echo "$cmd" | grep -qE '^[a-zA-Z][a-zA-Z0-9_.-]*\b|^\['; then
+  local idx=0 ran=0
+  for line in "${verify_lines[@]}"; do
+    idx=$((idx + 1))
+    local cmd
+    cmd=$(normalize_verify_cmd "$line")
+    [ -z "$cmd" ] && continue
+    if ! is_executable_verify "$cmd"; then
+      if [ "$idx" -eq "${#verify_lines[@]}" ] && [ "$ran" -eq 0 ]; then
+        echo "SKIP: $skill (non-executable verify)"
+        SKIP=$((SKIP + 1))
+      fi
+      continue
+    fi
+    ran=1
+    local label="$skill"
+    [ "${#verify_lines[@]}" -gt 1 ] && label="$skill#$idx"
+    run_verify_cmd "$skill" "$cmd" "$label" || true
+  done
+  if [ "$ran" -eq 0 ] && [ "${#verify_lines[@]}" -gt 0 ]; then
     echo "SKIP: $skill (non-executable verify)"
     SKIP=$((SKIP + 1))
-    return
   fi
+}
 
+run_negative_fixture_self_test() {
+  local fixture_md="$REPO_ROOT/specs/verifications/fixtures/skill-verify-fail-open/SKILL.md"
+  echo ""
+  echo "=== Skill-verify negative-path self-test ==="
+  if [[ ! -f "$fixture_md" ]]; then
+    echo "FAIL: negative fixture missing at $fixture_md"
+    FAIL=$((FAIL + 1))
+    return 1
+  fi
+  local fail_open_cmd='test -f /nonexistent/path/for/skill-verify-self-test && echo OK || echo FAIL'
+  if ! is_fail_open_directive "$fail_open_cmd"; then
+    echo "FAIL: self-test — fail-open detector did not match canonical || echo pattern"
+    FAIL=$((FAIL + 1))
+    return 1
+  fi
+  echo "PASS: self-test — fail-open detector rejects || echo pattern"
+  local real_fail_cmd='test -f /nonexistent/path/for/skill-verify-self-test'
   local output
-  if output=$(run_with_timeout "$cmd"); then
-    echo "PASS: $skill"
-    PASS=$((PASS + 1))
-  else
-    echo "FAIL: $skill — $cmd"
-    echo "      output: $(echo "$output" | head -1)"
+  if output=$(run_with_timeout "$real_fail_cmd"); then
+    echo "FAIL: self-test — real failing check exited 0 (fail-open risk)"
+    FAIL=$((FAIL + 1))
+    return 1
+  fi
+  echo "PASS: self-test — real failing check exits non-zero"
+  local saved_fail=$FAIL saved_pass=$PASS
+  run_skill "$fixture_md"
+  if [ "$FAIL" -le "$saved_fail" ]; then
+    echo "FAIL: self-test — fixture skill did not register a failure"
     FAIL=$((FAIL + 1))
+    return 1
   fi
+  FAIL=$((FAIL - 1))
+  PASS=$saved_pass
+  echo "PASS: self-test — fixture skill correctly fails verification"
 }
 
 if [ -n "$TARGET" ]; then
   if [ -f "$TARGET/SKILL.md" ]; then
     run_skill "$TARGET/SKILL.md"
+  elif [ -f "$SKILLS_ROOT/$TARGET/SKILL.md" ]; then
+    run_skill "$SKILLS_ROOT/$TARGET/SKILL.md"
   else
     echo "ERROR: $TARGET/SKILL.md not found"
     exit 1
@@ -77,9 +152,9 @@ else
   for skill_md in "$SKILLS_ROOT"/*/SKILL.md; do
     run_skill "$skill_md"
   done
+  run_negative_fixture_self_test
 fi
 
 echo ""
 echo "Results: $PASS PASS, $FAIL FAIL, $SKIP SKIP"
-
 [ "$FAIL" -eq 0 ]

package/scripts/validate-agentic-ste.sh

@@ -0,0 +1,229 @@
+#!/usr/bin/env bash
+# story: e79s02
+# validate-agentic-ste.sh — mechanical Agentic STE checks for instructional prose.
+set -euo pipefail
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+REPO_ROOT="$(cd "$SCRIPT_DIR/.." && pwd)"
+
+MAX_WORDS=20
+BANNED_RE='\b(should|might|could|may|consider|try|generally|typically)\b'
+
+STRICT=false
+AUDIT=false
+SELF_TEST=false
+TARGETS=()
+
+ste_usage() {
+  echo "Usage: bash scripts/validate-agentic-ste.sh [--self-test|--strict|--audit] [file|dir ...]"
+  echo "  (no args)     Run built-in fixture self-test"
+  echo "  --strict      Exit 1 on violations (craft-skill gate)"
+  echo "  --audit       WARN-only catalog scan (stocktake)"
+  exit 2
+}
+
+while [[ $# -gt 0 ]]; do
+  case "$1" in
+    --strict) STRICT=true; shift ;;
+    --audit) AUDIT=true; shift ;;
+    --self-test) SELF_TEST=true; shift ;;
+    -h|--help) ste_usage ;;
+    --) shift; TARGETS+=("$@"); break ;;
+    -*) echo "Unknown flag: $1" >&2; ste_usage ;;
+    *) TARGETS+=("$1"); shift ;;
+  esac
+done
+
+VIOLATIONS=0
+WARNINGS=0
+
+ste_report_fail() {
+  echo "FAIL: $1" >&2
+  VIOLATIONS=$((VIOLATIONS + 1))
+}
+
+ste_report_warn() {
+  echo "WARN: $1" >&2
+  WARNINGS=$((WARNINGS + 1))
+}
+
+ste_strip_frontmatter() {
+  awk '
+    BEGIN { n=0; emit=0 }
+    /^---$/ { n++; if (n==1) next; if (n==2) { emit=1; next } }
+    emit { print }
+  ' "$1"
+}
+
+ste_extract_prose() {
+  local file="$1"
+  local body
+  if [[ "$(basename "$file")" == "SKILL.md" ]]; then
+    body="$(ste_strip_frontmatter "$file")"
+  else
+    body="$(cat "$file")"
+  fi
+  printf '%s\n' "$body" | awk '
+    BEGIN { in_code=0 }
+    /^```/ { in_code = !in_code; next }
+    in_code { next }
+    /^[[:space:]]*#/ { next }
+    /^[[:space:]]*\|/ { next }
+    /^[[:space:]]*<!--/ { next }
+    /^[[:space:]]*$/ { next }
+    /^# story:/ { next }
+    /^<!-- story:/ { next }
+    { print }
+  '
+}
+
+ste_count_words() {
+  # shellcheck disable=SC2207
+  local words=($1)
+  echo "${#words[@]}"
+}
+
+ste_audit_line() {
+  local file="$1"
+  local line_no="$2"
+  local line="$3"
+  local label="${file}:${line_no}"
+
+  if echo "$line" | grep -qiE "$BANNED_RE"; then
+    local word
+    word="$(echo "$line" | grep -oiE "$BANNED_RE" | head -1)"
+    if $STRICT; then
+      ste_report_fail "$label — banned hedge modal '$word'"
+    else
+      ste_report_warn "$label — banned hedge modal '$word'"
+    fi
+  fi
+
+  local sentence
+  while IFS= read -r sentence; do
+    [[ -z "$sentence" ]] && continue
+    local trimmed
+    trimmed="$(echo "$sentence" | sed 's/^[[:space:]]*//;s/[[:space:]]*$//')"
+    [[ -z "$trimmed" ]] && continue
+    local wc
+    wc="$(ste_count_words "$trimmed")"
+    if (( wc > MAX_WORDS )); then
+      if $STRICT; then
+        ste_report_fail "$label — sentence has ${wc} words (max ${MAX_WORDS}): ${trimmed:0:60}..."
+      else
+        ste_report_warn "$label — sentence has ${wc} words (max ${MAX_WORDS}): ${trimmed:0:60}..."
+      fi
+    fi
+  done < <(echo "$line" | sed 's/[.!?]/&\n/g')
+}
+
+ste_audit_file() {
+  local file="$1"
+  [[ -f "$file" ]] || { ste_report_fail "not found: $file"; return; }
+
+  local prose line_no=0
+  prose="$(ste_extract_prose "$file")"
+  while IFS= read -r line; do
+    line_no=$((line_no + 1))
+    ste_audit_line "$file" "$line_no" "$line"
+  done <<< "$prose"
+}
+
+ste_collect_files() {
+  local path="$1"
+  if [[ -f "$path" ]]; then
+    echo "$path"
+  elif [[ -d "$path" ]]; then
+    find "$path" -type f \( -name 'SKILL.md' -o -name 'CLAUDE.md' -o -name 'CONVENTIONS.md' -o -name 'AGENTS.md' \) | sort
+  fi
+}
+
+ste_run_self_test() {
+  local tmp
+  tmp="$(mktemp -d)"
+  trap 'rm -rf "$tmp"' RETURN
+
+  cat > "$tmp/good-skill.md" <<'EOF'
+---
+name: fixture-good
+description: Test fixture for Agentic STE validator. Use when running self-test.
+---
+# Fixture Good
+> **HARD GATE** — Run Preflight before forward work.
+Run tests after every change.
+Write specs to specs/ at project root.
+EOF
+
+  cat > "$tmp/bad-hedge.md" <<'EOF'
+---
+name: fixture-bad
+description: Bad fixture.
+---
+You should consider running tests generally.
+EOF
+
+  cat > "$tmp/bad-long.md" <<'EOF'
+---
+name: fixture-long
+description: Long sentence fixture.
+---
+Run the full local green stack including compliance verification gates sync skills trace stories and catalog drift check before any forward implementation work on this repository.
+EOF
+
+  local saved_strict=$STRICT saved_audit=$AUDIT
+  STRICT=true
+  AUDIT=false
+  VIOLATIONS=0
+
+  ste_audit_file "$tmp/good-skill.md"
+  if (( VIOLATIONS > 0 )); then
+    echo "SELF-TEST FAIL: good fixture should pass" >&2
+    return 1
+  fi
+
+  VIOLATIONS=0
+  ste_audit_file "$tmp/bad-hedge.md"
+  if (( VIOLATIONS == 0 )); then
+    echo "SELF-TEST FAIL: hedge fixture should fail" >&2
+    return 1
+  fi
+
+  VIOLATIONS=0
+  ste_audit_file "$tmp/bad-long.md"
+  if (( VIOLATIONS == 0 )); then
+    echo "SELF-TEST FAIL: long-sentence fixture should fail" >&2
+    return 1
+  fi
+
+  STRICT=$saved_strict
+  AUDIT=$saved_audit
+  VIOLATIONS=0
+  echo "validate-agentic-ste: self-test PASS"
+  return 0
+}
+
+if $SELF_TEST || [[ ${#TARGETS[@]} -eq 0 ]]; then
+  ste_run_self_test
+  exit $?
+fi
+
+if $AUDIT; then
+  STRICT=false
+fi
+
+for target in "${TARGETS[@]}"; do
+  while IFS= read -r f; do
+    [[ -n "$f" ]] && ste_audit_file "$f"
+  done < <(ste_collect_files "$target")
+done
+
+if (( VIOLATIONS > 0 )); then
+  echo "validate-agentic-ste: $VIOLATIONS violation(s)" >&2
+  exit 1
+fi
+
+if $AUDIT; then
+  echo "validate-agentic-ste: audit complete ($WARNINGS warning(s))"
+else
+  echo "validate-agentic-ste: PASS"
+fi

package/skills/assess-impact/SKILL.md

@@ -29,13 +29,13 @@ grep -rn "[symbol-name]" . --include="*.ts" | grep -v node_modules
 git log --oneline -10 -- [file-path]
 ```
 
-→ verify: `grep -rn "[target]" . | wc -l`
+→ verify: `test -f specs/IMPACT_LATEST.md || test -d specs/bugs`
 
 ### 3. Map to release plan stories
 
 Read `specs/release-plan.yaml + epic capsule directories` (if it exists). For each dependent found in Step 2, identify which story owns that module. List stories that will be affected by the change.
 
-→ verify: `grep -c "Story" specs/release-plan.yaml + epic capsule directories 2>/dev/null || echo "no release plan"`
+→ verify: `grep -c "Story" specs/release-plan.yaml 2>/dev/null || echo "no release plan"`
 
 ### 4. List test coverage
 
@@ -45,7 +45,7 @@ Find tests that exercise the target:
 grep -rn "[symbol-name]" . --include="*.test.*" --include="*.spec.*"
 ```
 
-→ verify: `grep -rn "[target]" . --include="*.test.*" | wc -l`
+→ verify: `test -d specs/epics || test -d skills`
 
 ### 5. Classify risk
 

package/skills/audit-code/SKILL.md

@@ -129,7 +129,7 @@ In `--gate` mode, print one summary line per checklist section (`PASS Supply Cha
 
 ## Verify
 
-→ verify: `test -f CONVENTIONS.md && test -d skills/enforce-first && test -d skills/request-review && echo "OK: audit-code dependencies present" || echo "FAIL"`
+→ verify: `test -f CONVENTIONS.md && test -d skills/enforce-first && test -d skills/request-review`
 
 ## Handoff
 

package/skills/audit-plan/SKILL.md

@@ -87,4 +87,4 @@ NOT READY — N gaps remain; close before proceeding
 
 ## Verify
 
-→ verify: `test -f specs/PLAN-AUDIT_LATEST.md && grep -q 'Verdict' specs/PLAN-AUDIT_LATEST.md && echo OK || echo FAIL`
+→ verify: `test -f specs/PLAN-AUDIT_LATEST.md && grep -q Verdict specs/PLAN-AUDIT_LATEST.md`

package/skills/build-epic/SKILL.md

@@ -101,7 +101,7 @@ Write `handoff.next_skill` and `handoff.context` in `state.yaml` when pausing mi
 
 ## Verify
 
-→ verify: `test -f specs/state.yaml && test -f specs/execution-status.yaml && test -f specs/release-plan.yaml && test -d skills/assess-impact && test -d skills/audit-code && test -d skills/security-review && echo "OK: build-epic dependencies present" || echo "FAIL"`
+→ verify: `test -f specs/state.yaml && test -f specs/execution-status.yaml && test -f specs/release-plan.yaml && test -d skills/assess-impact && test -d skills/audit-code && test -d skills/security-review`
 
 
 <!-- story: e38s02 -->

package/skills/change-request/SKILL.md

@@ -12,7 +12,7 @@ description: Add a new requirement or reorder epics by WSJF against specs/releas
 
 > **HARD GATE** — `specs/release-plan.yaml` must exist before running either mode. If it doesn't, run `plan-release` first.
 >
-> → verify: `[ -f specs/release-plan.yaml ] && echo "ready" || echo "BLOCKED: run plan-release first"`
+> → verify: `test -f specs/release-plan.yaml`
 
 Two modes. State which one you want or the skill will ask.
 

package/skills/compose-workflow/SKILL.md

@@ -62,6 +62,6 @@ Add to `AGENTS.md`:
 
 ## Verify
 
-→ verify: `ls specs/workflows/*.yaml 2>/dev/null | wc -l | awk '{if($1>=8) print "OK: " $1 " recipes"; else print "FAIL"}'`
+→ verify: `[ "$(ls specs/workflows/*.yaml 2>/dev/null | wc -l | tr -d ' ')" -ge 8 ]`
 
 See [REFERENCE.md](REFERENCE.md) for template.

package/skills/context7-mcp/SKILL.md

@@ -54,4 +54,4 @@ Do NOT substitute training-data answers without labeling them UNVERIFIED.
 
 ## Verify
 
-→ verify: `test -f scripts/lib/doc-fetch-cache.sh && grep -q CONTEXT7_UNAVAILABLE skills/context7-mcp/SKILL.md && echo OK || echo FAIL`
+→ verify: `test -f scripts/lib/doc-fetch-cache.sh`

package/skills/craft-skill/SKILL.md

@@ -1,5 +1,6 @@
 # story: e45s02
 <!-- story: e45s12 -->
+<!-- story: e79s02 -->
 ---
 name: craft-skill
 model: sonnet
@@ -9,7 +10,7 @@ description: Create new bigpowers skills with proper structure, progressive disc
 
 # Craft Skill
 
-> **HARD GATE** — Do NOT name a skill without a two-word verb-noun pair. Do NOT merge a new skill without running `sync-skills.sh` — the generated `.cursor/rules/` and `.gemini/` artifacts must match the source SKILL.md.
+> **HARD GATE** — Do NOT name a skill without a two-word verb-noun pair. Do NOT merge a new skill without running `sync-skills.sh`. Generated `.cursor/rules/` and `.gemini/` artifacts MUST match the source SKILL.md.
 
 ## CSO Description Discipline (e45s02)
 
@@ -24,11 +25,25 @@ The YAML `description` is the **Catalog Selection Object** — the only field ag
 
 Move process detail into the SKILL.md body or REFERENCE.md — never into `description`.
 
+## Agentic STE body discipline (e79s02)
+
+Skill-body instructional prose MUST follow [AGENTIC-STE.md](../../docs/AGENTIC-STE.md).
+
+| Rule | Limit |
+|------|-------|
+| Sentence length | ≤20 words per instruction sentence |
+| Voice | Imperative, active |
+| Directive terms | MUST, MUST NOT, NEVER, ALWAYS, DO, DO NOT |
+| Banned modals | should, might, could, may, consider, try, generally, typically |
+| Scope | SKILL.md body only — not YAML `description`, not `terse-mode` output |
+
+> **HARD GATE** — Do NOT merge a new or edited skill until `bash scripts/validate-agentic-ste.sh --strict skills/<name>/SKILL.md` exits 0. Fix violations before `sync-skills.sh`.
+
 ## Process
 
 1. **Gather requirements** — ask user about:
    - What task/domain does the skill cover?
-   - What specific use cases should it handle?
+   - Which use cases must the skill handle?
    - Does it need executable scripts or just instructions?
    - Any reference materials to include?
    - What specs/ output does it produce (if any)?
@@ -44,7 +59,8 @@ Move process detail into the SKILL.md body or REFERENCE.md — never into `descr
    - Additional reference files if content exceeds 100 lines
    - Utility scripts if deterministic operations needed
 
-   **Auto-skill from library README:** When user provides a library README or API docs URL, extract: triggers, HARD GATEs, verify commands, specs/ output — draft SKILL.md without inventing APIs not in the source.
+   **Auto-skill from library README:** When user provides a library README or API docs URL, extract triggers and HARD GATEs.
+   Draft verify commands and specs/ output into SKILL.md. Do NOT invent APIs not in the source.
 
 4. Add `model:` frontmatter (`haiku` | `sonnet` | `opus`) per [model-profiles.md](https://github.com/danielvm-git/bigpowers/blob/main/docs/references/model-profiles.md).
 
@@ -53,10 +69,11 @@ Move process detail into the SKILL.md body or REFERENCE.md — never into `descr
 5. **Review with user** — present draft and ask:
    - Does this cover your use cases?
    - Anything missing or unclear?
-   - Should any section be more/less detailed?
+   - Does any section need more or less detail?
 
 6. **Completion-honesty gate (HARD GATE — e45s02)** — Before declaring done:
    - Run `bash scripts/validate-skill-description.sh skills/<name>/SKILL.md` — must exit 0
+   - Run `bash scripts/validate-agentic-ste.sh --strict skills/<name>/SKILL.md` — must exit 0 (e79s02)
    - Run `bash scripts/sync-skills.sh` — must complete without error
    - Run `bash scripts/run-skill-verify.sh <name>` if the skill defines a verify command
    - Show terminal output for each — narration without evidence is rejected
@@ -81,6 +98,7 @@ After drafting, verify:
 - [ ] Consistent terminology with CONVENTIONS.md
 - [ ] specs/ output documented if applicable
 - [ ] `validate-skill-description.sh` exits 0
+- [ ] `validate-agentic-ste.sh --strict` exits 0 (e79s02)
 - [ ] `sync-skills.sh` run to propagate to Cursor/Gemini
 - [ ] `bash scripts/validate-skill-catalog.sh` passes for the new skill (HARD GATE — completion honesty)
 
@@ -88,4 +106,4 @@ After drafting, verify:
 
 ## Verify
 
-→ verify: `bash scripts/validate-skill-catalog.sh --strict --skill craft-skill && bash scripts/validate-skill-description.sh skills/craft-skill/SKILL.md && echo OK || echo FAIL`
+→ verify: `bash scripts/validate-skill-catalog.sh --strict --skill craft-skill && bash scripts/validate-skill-description.sh skills/craft-skill/SKILL.md`

package/skills/deepen-architecture/SKILL.md

@@ -113,7 +113,7 @@ Run the check before proposing cross-module `source` edges. Convention docs alon
 
 ## Verify
 
-→ verify: `test -f specs/import-boundaries.json && bash scripts/check-import-boundaries.sh && echo OK || echo FAIL`
+→ verify: `test -f specs/import-boundaries.json && bash scripts/check-import-boundaries.sh`