bigpowers 2.88.11 → 2.88.13

package/.zcode/skills/change-request/SKILL.md

@@ -4,8 +4,8 @@ model: sonnet
 description: "Add a new requirement or reorder epics by WSJF against specs/release-plan.yaml and epic capsule directories. Modes Add and Reorder. Use when a new requirement arrives mid-release or the plan needs prioritization."
 ---
 
-# story: e45s29
-# story: e20s01
+<!-- story: e45s29 -->
+<!-- story: e20s01 -->
 
 # Change Request
 

package/.zcode/skills/commit-message/SKILL.md

@@ -4,7 +4,7 @@ model: haiku
 description: "Reviews working-tree changes, then drafts a Conventional Commits title/body and states the semantic-release version bump a single such commit would imply. Also notes which defensive-code categories were touched. Use when the user wants to commit recent work, prepare a Conventional Commits message, or asks for semantic-release / semver-consistent messaging before git commit."
 ---
 
-# story: e82s02
+<!-- story: e82s02 -->
 
 # Commit Message
 > **HARD GATE** — **HARD GATE** — Commits must follow Conventional Commits spec (type(scope): description). Do NOT use vague messages like 'fix' or 'updates.' The message must explain the 'why,' not the 'what.'

package/.zcode/skills/compose-workflow/SKILL.md

@@ -4,9 +4,9 @@ model: sonnet
 description: "Chain multiple bigpowers skills into a custom workflow recipe saved in specs/. Use when a project repeats a non-standard skill sequence, or user wants a documented playbook beyond orchestrate-project modes."
 ---
 
-# story: e09s01
-# story: e45s27
-# story: e21s04
+<!-- story: e09s01 -->
+<!-- story: e45s27 -->
+<!-- story: e21s04 -->
 
 # Compose Workflow
 > **HARD GATE** — **HARD GATE** — Workflows are orchestration, not automation. Do NOT create workflows for tasks that should be single skills. Workflow complexity must be justified.

package/.zcode/skills/delegate-task/SKILL.md

@@ -4,7 +4,7 @@ model: sonnet
 description: "Delegate one complex task to a single subagent, review its work in two stages before merging back. Sequential — one agent at a time, with oversight. Use when a task is complex and requires careful review before the result is accepted. Distinct from dispatch-agents (no parallelism here; reviewer sees full diff before proceeding)."
 ---
 
-# story: e45s30
+<!-- story: e45s30 -->
 
 # Delegate Task
 > **HARD GATE** — **HARD GATE** — Delegated work must have clear success criteria and verification commands. The delegate must be able to verify completion independently.

package/.zcode/skills/dispatch-agents/SKILL.md

@@ -4,12 +4,12 @@ model: sonnet
 description: "Dispatch multiple subagents in parallel on independent tasks. No waiting between them — all run concurrently. Use when tasks are truly decoupled and speed matters. Distinct from delegate-task (concurrent here, no inter-task review gate)."
 ---
 
-# story: e09s04
-# story: e45s38
+<!-- story: e09s04 -->
+<!-- story: e45s38 -->
 <!-- story: e45s11 -->
 
 
-# story: e45s30
+<!-- story: e45s30 -->
 
 # Dispatch Agents
 > **HARD GATE** — **HARD GATE** — Agent work must be parallelizable and have explicit synchronization points. Do NOT dispatch work that has hidden dependencies between agents.

package/.zcode/skills/evolve-skill/SKILL.md

@@ -4,10 +4,10 @@ model: opus
 description: "Benchmark-gated skill evolution — consume bigpowers-benchmark report, propose plan-work change, edit skill via craft-skill, re-run benchmark, record ADR. Use when a skill underperforms on benchmark or stocktake finds systemic gap."
 ---
 
-# story: e23s03
+<!-- story: e23s03 -->
 
-# story: e09s01
-# story: e09s05
+<!-- story: e09s01 -->
+<!-- story: e09s05 -->
 
 # Evolve Skill
 

package/.zcode/skills/kickoff-branch/SKILL.md

@@ -4,9 +4,9 @@ model: haiku
 description: "Create an isolated Git worktree/branch or Jujutsu workspace, then verify a clean test baseline before code. Use when starting a feature or task."
 ---
 
-# story: e51s03
-# story: e20s03
-# story: e82s02
+<!-- story: e51s03 -->
+<!-- story: e20s03 -->
+<!-- story: e82s02 -->
 
 
 # Kickoff Branch

package/.zcode/skills/migrate-spec/SKILL.md

@@ -4,12 +4,12 @@ model: sonnet
 description: "Detect GSD, spec-kit, or BMAD spec artifacts and transform them into bigpowers YAML layout (state.yaml, release-plan.yaml, epics/, requirements/, plans/, ADRs). Use when migrating foreign spec docs."
 ---
 
-# story: e25s01
-# story: e25s02
-# story: e25s03
-# story: e25s04
-# story: e25s05
-# story: e25s06
+<!-- story: e25s01 -->
+<!-- story: e25s02 -->
+<!-- story: e25s03 -->
+<!-- story: e25s04 -->
+<!-- story: e25s05 -->
+<!-- story: e25s06 -->
 
 # Migrate Spec
 

package/.zcode/skills/plan-work/SKILL.md

@@ -4,7 +4,7 @@ model: opus
 description: "PLANNING SPINE STEP 3 of 3 — Plan the work: write detailed implementation tasks into the active epic capsule (specs/epics/eNN-slug/). Produces countable-story-format .md specs and runnable -tasks.yaml files. Use after slice-tasks (step 2). Not a substitute for scope-work (step 1) or slice-tasks (step 2)."
 ---
 
-# story: e45s29
+<!-- story: e45s29 -->
 
 # Plan Work
 

package/.zcode/skills/request-review/SKILL.md

@@ -4,12 +4,23 @@ model: opus
 description: "Dispatch a fresh reviewer agent with a clean context to critique the code after audit-code passes. The reviewer has no shared state with the coding agent and gives a genuine second opinion. Use after audit-code passes, before committing, or when user wants an independent code review."
 ---
 
-# story: e45s28
+<!-- story: e45s28 -->
 
 # Request Review
 
 Dispatch fresh reviewer agents with clean contexts. Reviewers have no shared state — they find what the coding agent missed.
 
+## Target (argument)
+
+If an argument was passed after `/request-review` (e.g. `/request-review abc1234` or `/request-review HEAD~3..HEAD`), use it as the diff target when building the reviewer brief:
+
+```bash
+git diff <arg>        # range: abc..def, HEAD~3..HEAD
+git show <arg>        # single commit: abc1234
+```
+
+If no argument was given, review uncommitted working-tree changes.
+
 **Distinct from `audit-code`:** `audit-code` is self-review (internal). This skill dispatches external agents.
 
 **Solo developer note:** Reviewer agents replace the human reviewer.

package/.zcode/skills/research-first/SKILL.md

@@ -4,8 +4,8 @@ model: sonnet
 description: "Look-before-build — search registries, repo, existing skills, and web for prior art before implementing. Appends Prior Art to the spec. Use after survey-context and before elaborate-spec, when adding dependencies, or when the task may already be solved."
 ---
 
-# story: e03s01
-# story: e21s02
+<!-- story: e03s01 -->
+<!-- story: e21s02 -->
 
 # Research First
 

package/.zcode/skills/run-planning/SKILL.md

@@ -4,7 +4,7 @@ model: sonnet
 description: "DISCOVER-PHASE ADVANCER — Drive the discover-phase checklist (specs/planning-status.yaml) through survey-context → scope-work → research-first → elaborate-spec → plan-release → slice-tasks. NOT a duplicate of plan-work or the planning spine; it orchestrates the pre-coding discover phase only."
 ---
 
-# story: e24s03
+<!-- story: e24s03 -->
 
 # Run Planning
 

package/.zcode/skills/scope-work/SKILL.md

@@ -4,8 +4,8 @@ model: sonnet
 description: "PLANNING SPINE STEP 1 of 3 — Scope the work: define what is in and out of scope and save as specs/product/SCOPE_LATEST.yaml. Use before slice-tasks or plan-release on any new initiative. Not a substitute for slice-tasks (step 2) or plan-work (step 3)."
 ---
 
-# story: e03s01
-# story: e24s02
+<!-- story: e03s01 -->
+<!-- story: e24s02 -->
 
 # Scope Work
 

package/.zcode/skills/search-skills/SKILL.md

@@ -4,8 +4,8 @@ model: haiku
 description: "Find the right bigpowers skill from natural-language intent using a local lexical index over SKILL.md frontmatter. Use when unsure which skill to invoke, or at start of research-first."
 ---
 
-# story: e09s01
-# story: e21s01
+<!-- story: e09s01 -->
+<!-- story: e21s01 -->
 
 # Search Skills
 

package/.zcode/skills/security-review/SKILL.md

@@ -4,16 +4,16 @@ model: sonnet
 description: "AI-powered security analysis of code changes — traces data flow, detects injection, auth bypass, secrets exposure, and unsafe deserialization across files. Use when reviewing pending changes, before release-branch, during verify-work Phase 5, during build-epic Step 0 threat modeling, or when the user says \"security review\" or \"scan for vulns\"."
 ---
 
-# story: e45s41
+<!-- story: e45s41 -->
 <!-- story: e45s18 -->
-# story: e26s01
-# story: e26s02
-# story: e26s03
-# story: e26s04
-# story: e26s05
-# story: e26s06
-# story: e26s07
-# story: e45s26
+<!-- story: e26s01 -->
+<!-- story: e26s02 -->
+<!-- story: e26s03 -->
+<!-- story: e26s04 -->
+<!-- story: e26s05 -->
+<!-- story: e26s06 -->
+<!-- story: e26s07 -->
+<!-- story: e45s26 -->
 
 # Security Review
 

package/.zcode/skills/seed-conventions/SKILL.md

@@ -4,12 +4,12 @@ model: sonnet
 description: "Generate CLAUDE.md and CONVENTIONS.md for a brand-new project through a brief interview, and create the specs/ directory with evolved bigpowers structure (product/, tech-architecture/, verifications/, epics/archive/). Entry point for greenfield projects. Use when starting a new project from scratch, when user asks to set up AI agent conventions, or when there is no CLAUDE.md yet."
 ---
 
-# story: e10s01
-# story: e47s02
-# story: e10s02
-# story: e51s02
-# story: e45s21
-# story: e79s03
+<!-- story: e10s01 -->
+<!-- story: e47s02 -->
+<!-- story: e10s02 -->
+<!-- story: e51s02 -->
+<!-- story: e45s21 -->
+<!-- story: e79s03 -->
 
 
 # Seed Conventions

package/.zcode/skills/session-state/SKILL.md

@@ -4,7 +4,7 @@ model: haiku
 description: "Track implementation decisions and progress in specs/state.yaml to prevent context rot. Use at the start of a session to load context, and whenever a significant decision is made or a milestone is reached."
 ---
 
-# story: e45s23
+<!-- story: e45s23 -->
 
 # Session State
 > **HARD GATE** — **HARD GATE** — Session state must be synchronized with git state. If state.yaml conflicts with the working tree, halt and ask for clarification. Do NOT assume state is correct.

package/.zcode/skills/slice-tasks/SKILL.md

@@ -4,7 +4,7 @@ model: sonnet
 description: "PLANNING SPINE STEP 2 of 3 — Slice the work: break a scoped PRD into vertical-slice stories in specs/epics/. Use after scope-work (step 1), before plan-work (step 3). Not a substitute for scope-work or plan-work."
 ---
 
-# story: e45s29
+<!-- story: e45s29 -->
 
 # Slice Tasks
 

package/.zcode/skills/stocktake-skills/SKILL.md

@@ -4,7 +4,7 @@ model: sonnet
 description: "Sequential subagent batch audit of the bigpowers skill catalog — Quick Scan (changed only) or Full (all skills). Use during sustain phase, before a major release, or when catalog drift is suspected."
 ---
 
-# story: e09s01
+<!-- story: e09s01 -->
 <!-- story: e45s12 -->
 <!-- story: e79s04 -->
 

package/.zcode/skills/survey-context/SKILL.md

@@ -4,7 +4,7 @@ model: haiku
 description: "Per-task context bootstrap — reads existing specs/ and tech-architecture docs to map the current lifecycle phase and suggest the next skill. Use at the start of any task, when returning after a break, or when unsure what to do next. For deriving a tech-stack doc from scratch, use map-codebase first."
 ---
 
-# story: e82s02
+<!-- story: e82s02 -->
 
 # Survey Context
 

package/CHANGELOG.md

@@ -1,3 +1,18 @@
+## [2.88.13](https://github.com/danielvm-git/bigpowers/compare/v2.88.12...v2.88.13) (2026-10-25)
+
+
+### Bug Fixes
+
+* **ci:** cut golden suite critical path by removing duplicate gate work ([#161](https://github.com/danielvm-git/bigpowers/issues/161)) ([2db0bb9](https://github.com/danielvm-git/bigpowers/commit/2db0bb98663ae7f44e1990f06e9f90b6db60a773))
+
+## [2.88.12](https://github.com/danielvm-git/bigpowers/compare/v2.88.11...v2.88.12) (2026-10-25)
+
+
+### Bug Fixes
+
+* **install,skills:** config bridge append, worktree TDD gate, story tags, audit args ([#158](https://github.com/danielvm-git/bigpowers/issues/158)) ([120a0d9](https://github.com/danielvm-git/bigpowers/commit/120a0d993df3af671c1e3acdeb78934830ee7ddd)), closes [#149](https://github.com/danielvm-git/bigpowers/issues/149) [#142](https://github.com/danielvm-git/bigpowers/issues/142) [#140](https://github.com/danielvm-git/bigpowers/issues/140) [#141](https://github.com/danielvm-git/bigpowers/issues/141)
+* live receipts page data + restore green CI on main ([#159](https://github.com/danielvm-git/bigpowers/issues/159)) ([6136322](https://github.com/danielvm-git/bigpowers/commit/6136322a0f436be22c96f4a7a005d4744de29c29)), closes [#158](https://github.com/danielvm-git/bigpowers/issues/158)
+
 ## [2.88.11](https://github.com/danielvm-git/bigpowers/compare/v2.88.10...v2.88.11) (2026-10-25)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bigpowers",
-  "version": "2.88.11",
+  "version": "2.88.13",
   "description": "73 agent skills synthesizing 17 years of software engineering discipline into a prescriptive methodology for solo developers",
   "main": "index.js",
   "scripts": {

package/scripts/golden-g13-script-orphans.sh

@@ -53,12 +53,14 @@ is_manual_utility() { # $1 = script path
 }
 
 is_referenced() { # $1 = script basename, $2... = candidate file globs already expanded
+  # One grep over all candidate files per script, not one per (script, file)
+  # pair — the per-file loop forked ~100×N greps and took ~1 min in CI.
   local name="$1"; shift
   local f
-  for f in "$@"; do
-    [[ "$f" == *"/$name" || "$(basename "$f")" == "$name" ]] && continue # self
-    grep -q "$name" "$f" 2>/dev/null && return 0
-  done
+  while IFS= read -r f; do
+    [[ "$f" == *"/$name" || "${f##*/}" == "$name" ]] && continue # self
+    return 0
+  done < <(grep -lF -- "$name" "$@" 2>/dev/null)
   return 1
 }
 
@@ -161,7 +163,7 @@ if [[ -z "$ORPHANS" ]]; then
 fi
 
 echo "  orphaned scripts (present but reachable from no gate, doc, or workflow):"
-printf '%s' "$ORPHANS"
+printf '%s\n' "$ORPHANS"
 echo -e "${RED}FAIL${NC} wire them into a gate, reference them from a skill/doc, tag them '# bp-manual-utility: <reason>', or delete them"
 echo "G-13: FAIL"
 exit 1

package/scripts/lib/context-wire.sh

@@ -34,7 +34,13 @@ wire_config_bridge() {
   if [[ -f "$bridge_file" ]] && grep -q "^${bridge_key}:" "$bridge_file" 2>/dev/null; then
     return 0
   fi
-  printf '%s: %s\n' "$bridge_key" "$agents_path" > "$bridge_file"
+  if [[ -f "$bridge_file" ]]; then
+    cp "$bridge_file" "${bridge_file}.bak"
+    printf '%s: %s\n' "$bridge_key" "$agents_path" >> "$bridge_file"
+    echo "install: appended ${bridge_key} to ${bridge_file} (existing content preserved; backup at ${bridge_file}.bak)"
+  else
+    printf '%s: %s\n' "$bridge_key" "$agents_path" > "$bridge_file"
+  fi
 }
 
 wire_context_mode() {

package/scripts/lib/golden-suite-gates.sh

@@ -72,6 +72,8 @@ GOLDEN_GATES=(
   "import-boundaries:bash scripts/check-import-boundaries.sh:false"
   "skill-catalog:bash scripts/validate-skill-catalog.sh:false"
   "specs-parse:bash scripts/validate-specs-yaml.sh:false"
+  # The runner itself: failing output is shown, skips are named and reasoned.
+  "golden-gate-runner:bash scripts/test-golden-gate-runner.sh:false"
   # Tier 2 of the verify arc (#106): executes the verify: of every story marked
   # done. Tier 1 (SKILL.md) is run-skill-verify.sh in golden-suite.yml.
   "story-verify-selftest:bash scripts/run-story-verify.sh --self-test:false"
@@ -120,15 +122,48 @@ golden_agent_dry_run() {
   return 0
 }
 
+# GOLDEN_SKIP_GATES (comma list) skips gates another CI job already runs —
+# golden-suite.yml skips story-verify because its story-verify job runs the
+# same command. Local Preflight leaves it unset, so every gate runs there. A
+# name that matches no gate is a FAIL: a typo must not look like a skip.
+golden_is_skipped() { # $1 = gate name
+  case ",${GOLDEN_SKIP_GATES:-}," in *",$1,"*) return 0 ;; esac
+  return 1
+}
+
+golden_check_skip_names() {
+  local skip gate known
+  for skip in $(printf '%s' "${GOLDEN_SKIP_GATES:-}" | tr ',' ' '); do
+    [[ -z "$skip" ]] && continue
+    known=false
+    for gate in "${GOLDEN_GATES[@]}"; do
+      [[ "${gate%%:*}" == "$skip" ]] && known=true
+    done
+    $known && continue
+    echo -e "[$skip] ${GOLDEN_RED}FAIL${GOLDEN_NC} (GOLDEN_SKIP_GATES names no such gate)"
+    GATE_RESULTS+=("  - name: $skip" "    exit_code: 2" "    duration_seconds: 0" "    status: fail" "    error: unknown gate in GOLDEN_SKIP_GATES")
+    (( FAIL_COUNT += 1 ))
+  done
+}
+
 golden_run_deterministic_gates() {
-  local gate name cmd is_optional main_cmd script_path
+  local gate name cmd is_optional main_cmd script_path gate_out
   PASS_COUNT=0 FAIL_COUNT=0 SKIP_COUNT=0
   GATE_RESULTS=()
+  golden_check_skip_names
 
   for gate in "${GOLDEN_GATES[@]}"; do
     IFS=':' read -r name cmd is_optional <<< "$gate"
     echo -n "[$name] "
 
+    if golden_is_skipped "$name"; then
+      local reason="${GOLDEN_SKIP_REASON:-listed in GOLDEN_SKIP_GATES}"
+      echo -e "${GOLDEN_YELLOW}SKIP${GOLDEN_NC} ($reason)"
+      GATE_RESULTS+=("  - name: $name" "    exit_code: skipped" "    duration_seconds: 0" "    status: skipped" "    note: $reason")
+      (( SKIP_COUNT += 1 ))
+      continue
+    fi
+
     main_cmd=$(echo "$cmd" | awk '{print $1}')
     if [[ "$main_cmd" == "bash" ]]; then
       script_path=$(echo "$cmd" | awk '{print $2}')
@@ -148,7 +183,7 @@ golden_run_deterministic_gates() {
 
     local START_TIME END_TIME DURATION_MS DURATION_SEC GATE_EXIT
     START_TIME=$(date +%s%N)
-    eval "$cmd" >/dev/null 2>&1 && GATE_EXIT=$? || GATE_EXIT=$?
+    gate_out=$(eval "$cmd" 2>&1) && GATE_EXIT=$? || GATE_EXIT=$?
     END_TIME=$(date +%s%N)
     DURATION_MS=$(( (END_TIME - START_TIME) / 1000000 ))
     DURATION_SEC=$(echo "scale=2; $DURATION_MS / 1000" | bc 2>/dev/null || echo "0")
@@ -159,6 +194,8 @@ golden_run_deterministic_gates() {
       (( PASS_COUNT += 1 ))
     else
       echo -e "${GOLDEN_RED}FAIL${GOLDEN_NC} (${DURATION_SEC}s, exit $GATE_EXIT)"
+      # Without the tail, CI shows FAIL with no reason (#158: compliance).
+      printf '%s\n' "$gate_out" | tail -20 | sed 's/^/    | /'
       GATE_RESULTS+=("  - name: $name" "    exit_code: $GATE_EXIT" "    duration_seconds: $DURATION_SEC" "    status: fail")
       (( FAIL_COUNT += 1 ))
     fi

package/scripts/lib/install-helpers.js

@@ -142,6 +142,10 @@ function bridgeHermesConfig(configPath) {
   if (fs.existsSync(configPath)) {
     const existing = fs.readFileSync(configPath, 'utf8');
     if (/^instructions:/m.test(existing)) return;
+    fs.copyFileSync(configPath, configPath + '.bak');
+    fs.appendFileSync(configPath, 'instructions: AGENTS.md\n');
+    console.log(`install: appended instructions to ${configPath} (existing content preserved; backup at ${configPath}.bak)`);
+    return;
   }
   fs.writeFileSync(configPath, 'instructions: AGENTS.md\n');
 }

package/scripts/run-story-verify.sh

@@ -41,7 +41,7 @@ PASS=0; FAIL=0; SKIP=0
 TARGET="${1:-}"
 
 extract_records() {
-  "$PYTHON" "$REPO_ROOT/scripts/lib/extract-story-verify.py" "$REPO_ROOT"
+  "$PYTHON" "$REPO_ROOT/scripts/lib/extract-story-verify.py" "${EXTRACT_ROOT:-$REPO_ROOT}"
 }
 
 # Report a story whose directive can never fail. Kept separate from execution so
@@ -58,6 +58,55 @@ reject_non_executable() {
   FAIL=$((FAIL + 1))
 }
 
+# Many stories share one verify (e61s02…e76s02 all run the same installer
+# test); same command at the same commit gives the same result, so run it once
+# per gate_all and reuse the verdict for every story that declares it.
+# Sets RUN_RC, RUN_OUT, and RUN_REUSED (1 when nothing new ran).
+run_memoized() {
+  local cmd="$1" key
+  key=$(printf '%s' "$cmd" | cksum | tr -d ' ')
+  if [ -n "${MEMO_DIR:-}" ] && [ -f "$MEMO_DIR/$key.rc" ]; then
+    RUN_RC=$(cat "$MEMO_DIR/$key.rc")
+    RUN_OUT=$(cat "$MEMO_DIR/$key.out")
+    return 0
+  fi
+  RUN_REUSED=0
+  RUN_OUT=$(run_with_timeout "$cmd") && RUN_RC=0 || RUN_RC=$?
+  if [ -n "${MEMO_DIR:-}" ]; then
+    printf '%s' "$RUN_RC" > "$MEMO_DIR/$key.rc"
+    printf '%s' "$RUN_OUT" > "$MEMO_DIR/$key.out"
+  fi
+}
+
+# A plain `a && b && c` chain shares no shell state between segments when it
+# has no quoting, expansion, grouping, pipes, `;`, cd, export or assignment —
+# so each segment can be cached on its own (test-adapter-render.sh prefixes ten
+# different story verifies). Anything else is cached as one whole command.
+is_plain_and_chain() {
+  case "$1" in
+    *\'*|*\"*|*\$*|*\`*|*\(*|*\)*|*\{*|*\}*|*\|*|*\;*|*=*|*\<*) return 1 ;;
+  esac
+  printf '%s' "$1" | grep -qE '(^|&&)[[:space:]]*(cd|export|source|\.)[[:space:]]' && return 1
+  return 0
+}
+
+run_verify_cmd() {
+  local cmd="$1" seg
+  RUN_REUSED=1
+  if ! is_plain_and_chain "$cmd"; then
+    run_memoized "$cmd"
+    return
+  fi
+  local rest="$cmd"
+  while :; do
+    seg=${rest%%&&*}
+    run_memoized "$(printf '%s' "$seg" | sed 's/^[[:space:]]*//;s/[[:space:]]*$//')"
+    [ "$RUN_RC" -eq 0 ] || return
+    [ "$seg" = "$rest" ] && return
+    rest=${rest#*&&}
+  done
+}
+
 run_story_verify() {
   local sid="$1" src="$2" cmd="$3"
 
@@ -70,20 +119,23 @@ run_story_verify() {
     return 1
   fi
 
-  local output
-  if output=$(run_with_timeout "$cmd"); then
-    echo "PASS: $sid"
+  run_verify_cmd "$cmd"
+  local note=""
+  [ "$RUN_REUSED" -eq 1 ] && note=" (shared result)"
+  if [ "$RUN_RC" -eq 0 ]; then
+    echo "PASS: $sid$note"
     PASS=$((PASS + 1))
     return 0
   fi
-  echo "FAIL: $sid [$src] — $cmd"
-  echo "      output: $(echo "$output" | tail -3 | tr '\n' ' ')"
+  echo "FAIL: $sid [$src]$note — $cmd"
+  echo "      output: $(echo "$RUN_OUT" | tail -3 | tr '\n' ' ')"
   FAIL=$((FAIL + 1))
   return 1
 }
 
 gate_all() {
   local sid src status cmd
+  MEMO_DIR=$(mktemp -d)
   while IFS=$'\t' read -r sid src status cmd; do
     [ -z "${sid:-}" ] && continue
     if [ -n "$TARGET" ] && [ "$sid" != "$TARGET" ]; then
@@ -96,6 +148,58 @@ gate_all() {
     fi
     run_story_verify "$sid" "$src" "$cmd" || true
   done < <(extract_records)
+  rm -rf "$MEMO_DIR"
+  MEMO_DIR=""
+}
+
+# Shared-command proof: stories that declare the same verify run it once, yet
+# each story still gets its own verdict — a failing shared command fails every
+# story that declares it, never just the first.
+self_test_shared_commands() {
+  local root="$1/shared" out runs
+  mkdir -p "$root/specs/epics/e98-shared"
+  cat > "$root/specs/epics/e98-shared/epic.yaml" <<YAML
+id: e98
+title: shared-command capsule
+stories:
+  - id: e98s01
+    status: done
+    verify: printf x >> $root/ok-runs && test -d $root/specs
+  - id: e98s02
+    status: done
+    verify: printf x >> $root/ok-runs && test -d $root/specs
+  - id: e98s03
+    status: done
+    verify: printf x >> $root/bad-runs && test -f $root/missing
+  - id: e98s04
+    status: done
+    verify: printf x >> $root/bad-runs && test -f $root/missing
+  - id: e98s05
+    status: done
+    verify: printf x >> $root/seg-runs && test -d $root/specs
+  - id: e98s06
+    status: done
+    verify: printf x >> $root/seg-runs && test -d $root/specs/epics
+  - id: e98s07
+    status: done
+    verify: printf x >> $root/seg-runs && test -f $root/missing
+YAML
+  out=$(EXTRACT_ROOT="$root" TARGET="" PASS=0 FAIL=0 SKIP=0 gate_all)
+  local problems=0
+  runs=$(wc -c < "$root/ok-runs" | tr -d ' ')
+  [ "$runs" = "1" ] || { echo "FAIL: self-test — shared passing command ran $runs times, want 1"; problems=$((problems + 1)); }
+  runs=$(wc -c < "$root/bad-runs" | tr -d ' ')
+  [ "$runs" = "1" ] || { echo "FAIL: self-test — shared failing command ran $runs times, want 1"; problems=$((problems + 1)); }
+  runs=$(wc -c < "$root/seg-runs" | tr -d ' ')
+  [ "$runs" = "1" ] || { echo "FAIL: self-test — shared && segment ran $runs times, want 1"; problems=$((problems + 1)); }
+  local sid
+  for sid in e98s01 e98s02 e98s05 e98s06; do
+    echo "$out" | grep -q "^PASS: $sid" || { echo "FAIL: self-test — $sid not reported PASS"; problems=$((problems + 1)); }
+  done
+  for sid in e98s03 e98s04 e98s07; do
+    echo "$out" | grep -q "^FAIL: $sid" || { echo "FAIL: self-test — $sid not reported FAIL"; problems=$((problems + 1)); }
+  done
+  [ "$problems" -eq 0 ]
 }
 
 # Anti-vacuity proof: seed a capsule whose done story must fail, and one that
@@ -178,6 +282,8 @@ EOF
   rm -rf "$tmp_root"
   trap - EXIT
 
+  self_test_shared_commands "$tmp_root" || problems=$((problems + 1))
+
   if [ "$checked" -lt 5 ]; then
     echo "FAIL: self-test — extractor found $checked/5 fixture stories"
     return 1