cfsa-antigravity 1.0.0

package/template/.agent/skills/prd-templates/references/design-system-decisions.md

@@ -0,0 +1,198 @@
+# Design System Decision Options & Output Template
+
+Reference material for the `/create-prd-design-system` workflow. Contains option menus for all seven decisions and the canonical output template for `docs/plans/design-system.md`.
+
+---
+
+## Navigation Paradigm Options
+
+### Web surfaces
+
+- **Sidebar + topnav** — Collapsible sidebar for section nav, top bar for global actions. Good for complex apps with deep IA; competes with content width on small screens.
+- **Tab bar (app-style)** — Horizontal tab bar, web app feels like a native app. Limited to 5–7 top-level destinations; unfamiliar on traditional websites.
+- **Full-page transitions** — Each section is a full-page view with navigation between pages. Poor for frequent cross-section navigation; high cognitive load for data-heavy apps.
+- **Command palette primary** — Keyboard-first navigation with minimal visible chrome. High power-user efficiency; steep learning curve, requires discoverability affordances.
+- **Minimal/none** — No persistent navigation; content-first with contextual links. Clean and focused; users may feel lost without orientation cues.
+
+### Mobile surfaces
+
+- **Bottom tab bar** — iOS/Android standard, 3–5 tabs at screen bottom. Limited to 5 top-level destinations; thumb-friendly.
+- **Drawer + top header** — Slide-out drawer with a persistent top header bar. Supports many sections; discoverability issues — out of sight, out of mind.
+- **Stack navigation only** — Linear forward/back navigation with no persistent tabs. No quick access to unrelated sections; relies on back button.
+- **Tab bar + stack hybrid** — Bottom tabs for top-level sections, stack navigation within each tab. Combines discoverability with depth; tab count still limited.
+
+### Desktop (native) surfaces
+
+- **Menu bar + sidebar** — OS-native menu bar with sidebar panel. Platform-specific conventions differ (macOS vs Windows vs Linux).
+- **Ribbon (Office-style)** — Grouped toolbar with tabbed ribbon. Heavy initial learning curve; takes vertical space.
+- **Panel system** — Draggable/dockable panels with customizable layout. Window management complexity; steep learning curve.
+- **Sidebar only** — Vertical sidebar as sole navigation element. No menu bar discoverability for infrequent actions.
+
+---
+
+## Page Archetype Options
+
+| Archetype | Description | Typical Layout Zones |
+|-----------|-------------|---------------------|
+| **Dashboard** | Data overview with cards/charts | Nav zone · Summary strip · Grid/card zone · Detail panel |
+| **List → Detail** | Browse items, select to view/edit | Nav zone · Filter bar · List zone · Detail zone |
+| **Form** | Multi-step or single-page data entry | Nav zone · Form zone · Action bar |
+| **Content/Article** | Long-form reading with optional sidebar | Nav zone · Content zone · Sidebar/TOC zone |
+| **Settings** | Tabbed or sectioned preference panels | Nav zone · Section nav · Settings zone |
+| **Empty/Onboarding** | First-run or zero-data state | Nav zone · Illustration zone · CTA zone |
+| **Auth** | Login/signup/password-reset | Centered card zone · Background zone |
+| **Error** | 404/500/offline states | Nav zone · Error illustration zone · Recovery CTA |
+
+### Example wireframe (Dashboard archetype)
+
+```
+┌─────────────────────────────────────┐
+│              Nav Zone               │
+├────────┬────────────────────────────┤
+│        │       Summary Strip        │
+│  Side  ├────────────────────────────┤
+│  bar   │                            │
+│  Zone  │       Content Zone         │
+│        │                            │
+├────────┴────────────────────────────┤
+│            Action Bar               │
+└─────────────────────────────────────┘
+```
+
+---
+
+## Global Component Categories
+
+- **Navigation components** — derived from the navigation paradigm (e.g., TopNav, Sidebar, BottomTabBar, Breadcrumb)
+- **Layout components** — derived from archetypes (e.g., PageShell, ContentArea, Sidebar, ActionBar)
+- **Feedback components** — Loading skeleton, Toast, ErrorBoundary, EmptyState
+- **Form primitives** — Input, Select, Checkbox, Radio, TextArea, DatePicker, FileUpload
+- **Data display** — Table, Card, Badge, Avatar, Stat, Chart container
+- **Overlay components** — Modal, Drawer, Popover, Tooltip, ContextMenu
+- **Action components** — Button, IconButton, Link, Dropdown menu
+
+---
+
+## Motion Language Options
+
+| Level | Description | Typical Durations | Use When |
+|-------|-------------|-------------------|----------|
+| **Instant** | No transitions — all state changes are immediate | 0ms | Performance-critical tools, terminal UIs, accessibility-first products |
+| **Subtle** | Micro-transitions only — fades and opacity shifts | 100–150ms ease-out | Productivity tools, data-dense dashboards, professional/enterprise apps |
+| **Balanced** | Purposeful transitions for navigation and state changes | 150–300ms ease-in-out | Most consumer apps, SaaS products, general-purpose UIs |
+| **Rich** | Expressive animations — page transitions, element choreography, spring physics | 200–500ms spring/cubic-bezier | Marketing sites, creative tools, consumer apps where delight matters |
+
+> **Mandatory regardless of level**: All motion must respect `prefers-reduced-motion: reduce`. When reduced motion is active, all animations collapse to instant (0ms) or opacity-only transitions (≤100ms).
+
+---
+
+## Data Density Options
+
+| Philosophy | Description | Best For | Characteristics |
+|------------|-------------|----------|-----------------|
+| **Compact** | Maximum information per viewport — tight spacing, smaller text, dense tables | Data-heavy dashboards, admin panels, developer tools | 12–14px body text, 4–8px element spacing, minimal whitespace |
+| **Spacious** | Generous whitespace, larger text, breathing room between elements | Consumer apps, marketing, content-focused products | 16–18px body text, 16–24px element spacing, generous padding |
+| **Hybrid** | Context-dependent — compact for data tables/lists, spacious for forms/content | Apps mixing data overview with detail editing | Defined rules for when each density applies |
+
+If **Hybrid** is selected, ask the user to define the density rules:
+- Which archetypes get compact density?
+- Which archetypes get spacious density?
+- What is the transition behavior between densities?
+
+---
+
+## Global State Design Language Options
+
+### Loading states
+
+| Option | Description | Best For |
+|--------|-------------|----------|
+| **Skeleton screens** | Grey placeholder shapes matching the expected layout | Content-heavy pages where layout stability matters |
+| **Spinner/shimmer** | Centered spinner or shimmer overlay | Simple actions, modals, inline operations |
+| **Progressive** | Skeleton for page-level, spinner for component-level operations | Complex apps with mixed loading contexts |
+
+### Error states
+
+- **Inline** — Error message appears near the failed element (forms, field validation)
+- **Toast** — Transient notification for non-blocking errors (network retry, background sync)
+- **Full-page** — Dedicated error page (404, 500, offline)
+- **Error boundary** — Component-level fallback UI (prevents cascade, isolates failure)
+
+### Empty states
+
+- **Illustration + copy** — Custom illustration with descriptive text and CTA
+- **Minimal** — Text-only with action link
+- **Contextual** — Different empty states per archetype (empty dashboard vs. empty list)
+
+**Copy tone**: Helpful / Playful / Neutral — must align with the confirmed design direction.
+
+---
+
+## design-system.md Output Template
+
+The final `docs/plans/design-system.md` must have this exact structure:
+
+```markdown
+# Design System
+
+> **Confirmed Design Direction**: [confirmed direction from brand-guidelines]
+> **Date**: [YYYY-MM-DD]
+> **Status**: Locked
+
+## Navigation Paradigm
+[Confirmed paradigm with rationale]
+[Surface-specific notes if multi-surface project]
+
+## Layout Grid
+
+| Breakpoint | Columns | Gutter | Max Width |
+|------------|---------|--------|-----------|
+| Mobile (≤768px) | [confirmed] | [confirmed] | [confirmed] |
+| Tablet (769–1024px) | [confirmed] | [confirmed] | [confirmed] |
+| Desktop (≥1025px) | [confirmed] | [confirmed] | [confirmed] |
+
+**Grid type**: [confirmed]
+
+## Page Archetypes
+
+### [Archetype Name]
+**Layout zones**: [nav] | [content] | [sidebar] | [action]
+[Optional: ASCII wireframe for additional clarity]
+
+[repeat for each confirmed archetype]
+
+## Global Component Inventory
+- `<ComponentName>` — [what it does / what it renders]
+- `<ComponentName>` — [what it does / what it renders]
+[repeat for each confirmed global component]
+
+## Motion Language
+**Style**: [confirmed style — Instant / Subtle / Balanced / Rich]
+**Default duration**: [confirmed duration range]
+**Default easing**: [confirmed easing function]
+**Interaction transitions**: [confirmed interaction transition behavior]
+**Reduced-motion policy**: All animations disabled when `prefers-reduced-motion: reduce` is active.
+
+## Data Density Philosophy
+**Default density**: [confirmed density — Compact / Spacious / Hybrid]
+**Rules**: [when each density applies — per archetype if hybrid]
+
+## Global State Design Language
+
+### Loading States
+- **Skeleton screens**: use when [confirmed rule]
+- **Spinner/shimmer**: use when [confirmed rule]
+- **Progressive**: use when [confirmed rule]
+
+### Error States
+- **Inline errors**: use when [confirmed rule — e.g., form field validation]
+- **Toast errors**: use when [confirmed rule — e.g., non-blocking network errors]
+- **Full-page errors**: use when [confirmed rule — e.g., 404, 500, offline]
+- **Error boundaries**: use when [confirmed rule — e.g., component-level isolation]
+
+### Empty States
+**Illustration style**: [confirmed style]
+**Copy tone**: [confirmed tone — must align with confirmed design direction]
+**CTA**: Every empty state MUST include a primary call-to-action that guides the user toward populating the view.
+[Per-archetype empty state rules if contextual]
+```

package/template/.agent/skills/prd-templates/references/engineering-standards-template.md

@@ -0,0 +1,124 @@
+# Engineering Standards Template
+
+Use this template when creating `docs/plans/ENGINEERING-STANDARDS.md`. Fill in concrete values based on tech stack decisions — **no TBDs allowed**.
+
+```markdown
+# [Project Name] — Engineering Standards
+
+> **Architecture**: [link to architecture-design.md]
+> **Date**: YYYY-MM-DD
+> **Status**: Draft | Review | Approved
+
+## Test Coverage
+- Minimum unit test coverage: [e.g., 80%]
+- Integration test requirement: [e.g., every API endpoint]
+- E2E test requirement: [e.g., every critical user flow]
+- Coverage tool: [e.g., vitest coverage-v8]
+
+## Linting & Formatting
+- Linter: [e.g., ESLint with strict config]
+- Formatter: [e.g., Prettier]
+- Type checker: [e.g., TypeScript strict mode]
+- Pre-commit hooks: [yes/no, tool]
+
+## Performance Budgets
+
+> **Baseline**: Budgets target [device tier] on [network condition]. Every threshold must have a named enforcement tool — a threshold without an enforcement tool is incomplete.
+
+### Web Vitals per page type (web/desktop surfaces only)
+
+| Page Type | LCP target | INP target | CLS target | Enforcement Tool |
+|-----------|-----------|-----------|-----------|-----------------|
+| [e.g., Landing] | [e.g., ≤ 2.0 s] | [e.g., ≤ 150 ms] | [e.g., ≤ 0.05] | [e.g., Lighthouse CI] |
+| [e.g., Dashboard] | [e.g., ≤ 2.5 s] | [e.g., ≤ 200 ms] | [e.g., ≤ 0.1] | [e.g., Lighthouse CI] |
+| [e.g., Detail/Form] | [e.g., ≤ 2.0 s] | [e.g., ≤ 100 ms] | [e.g., ≤ 0.05] | [e.g., Lighthouse CI] |
+
+### JS Bundle Size per page type (web/desktop surfaces only)
+
+| Page Type | Initial JS (gzipped) | Total JS (gzipped) | Enforcement Tool |
+|-----------|---------------------|-------------------|-----------------|
+| [e.g., Landing] | [e.g., ≤ 80 KB] | [e.g., ≤ 150 KB] | [e.g., size-limit] |
+| [e.g., Dashboard] | [e.g., ≤ 150 KB] | [e.g., ≤ 300 KB] | [e.g., size-limit] |
+
+### API Response Time per tier
+
+| Tier | Description | p50 | p95 | p99 | Enforcement Tool |
+|------|------------|-----|-----|-----|-----------------|
+| Tier 1 — Cached read | [e.g., Response from cache] | [e.g., ≤ 10 ms] | [e.g., ≤ 30 ms] | [e.g., ≤ 50 ms] | [e.g., k6] |
+| Tier 2 — Uncached read | [e.g., Single-entity DB fetch] | [e.g., ≤ 30 ms] | [e.g., ≤ 80 ms] | [e.g., ≤ 150 ms] | [e.g., k6] |
+| Tier 3 — Write | [e.g., Create, update, delete] | [e.g., ≤ 80 ms] | [e.g., ≤ 200 ms] | [e.g., ≤ 400 ms] | [e.g., k6] |
+| Tier 4 — Background | [e.g., Async jobs, external calls] | [Best-effort] | [e.g., ≤ 1000 ms] | [e.g., ≤ 3000 ms] | [e.g., k6] |
+
+### DB Query Time per tier
+
+| Tier | Description | p50 | p95 | Enforcement Tool |
+|------|------------|-----|-----|-----------------|
+| Tier 1 — Indexed point lookup | [e.g., PK or unique-index fetch] | [e.g., ≤ 5 ms] | [e.g., ≤ 15 ms] | [e.g., pgbench] |
+| Tier 2 — Indexed range scan | [e.g., Range or list on indexed column] | [e.g., ≤ 15 ms] | [e.g., ≤ 50 ms] | [e.g., pgbench] |
+| Tier 3 — Aggregation | [e.g., COUNT, SUM, GROUP BY] | [e.g., ≤ 50 ms] | [e.g., ≤ 150 ms] | [e.g., pgbench] |
+| Tier 4 — Full-text / vector / analytical | [e.g., Search, similarity, reports] | [e.g., ≤ 100 ms] | [e.g., ≤ 300 ms] | [e.g., pgbench] |
+
+### Desktop surfaces (if applicable)
+
+| Metric | Threshold | Enforcement Tool |
+|--------|----------|-----------------|
+| Cold start | [e.g., ≤ 2 s] | [e.g., platform profiler] |
+| Memory (idle) | [e.g., ≤ 200 MB] | [e.g., platform profiler] |
+| Memory (active) | [e.g., ≤ 500 MB] | [e.g., platform profiler] |
+| Installer size | [e.g., ≤ 100 MB] | [e.g., CI size check] |
+
+### Mobile surfaces (if applicable)
+
+| Metric | Threshold | Enforcement Tool |
+|--------|----------|-----------------|
+| Cold launch | [e.g., ≤ 1.5 s] | [e.g., platform profiler] |
+| Warm launch | [e.g., ≤ 0.5 s] | [e.g., platform profiler] |
+| Battery drain (active) | [e.g., ≤ 5 %/hr] | [e.g., platform profiler] |
+| Download size | [e.g., ≤ 50 MB] | [e.g., CI size check] |
+
+### CLI surfaces (if applicable)
+
+| Metric | Threshold | Enforcement Tool |
+|--------|----------|-----------------|
+| Execution time | [e.g., ≤ 500 ms for common operations] | [e.g., hyperfine] |
+| Binary size | [e.g., ≤ 20 MB] | [e.g., CI size check] |
+| Startup latency | [e.g., ≤ 100 ms] | [e.g., hyperfine] |
+
+### CI Enforcement
+
+| Budget Category | Enforcement Tool | Fail Condition | Fail vs. Warn |
+|----------------|-----------------|----------------|---------------|
+| Web Vitals | [e.g., Lighthouse CI] | [e.g., Score below threshold] | [Fail] |
+| Bundle size | [e.g., size-limit] | [e.g., Exceeds per-page-type cap] | [Fail] |
+| API response time | [e.g., k6] | [e.g., p95 exceeds tier target] | [Warn / Fail after baseline] |
+| DB query time | [e.g., pgbench] | [e.g., p95 exceeds tier target] | [Warn / Fail after baseline] |
+| Desktop/mobile | [e.g., platform profiler] | [e.g., Any metric exceeds threshold] | [Warn] |
+
+## Accessibility
+- WCAG level: [e.g., 2.1 AA] (web/mobile)
+- Screen reader testing: [required/optional]
+- Keyboard navigation: [all interactive elements]
+- Platform accessibility APIs: [e.g., UIAccessibility for iOS, AccessibilityNodeInfo for Android]
+
+## Security
+- Dependency audit: [e.g., npm audit on every CI run]
+- Secret scanning: [tool/approach]
+- CSP policy: [strict/relaxed + details] (web surfaces)
+- Code signing: [signing certificate strategy] (desktop/mobile surfaces)
+
+## Code Quality
+- Max file length: [e.g., 300 lines]
+- Max function length: [e.g., 50 lines]
+- Max cyclomatic complexity: [e.g., 10]
+- Required documentation: [public APIs / all exports / none]
+
+## CI/CD Gates
+- Tests must pass: [yes]
+- Lint must pass: [yes]
+- Type-check must pass: [yes]
+- Build must succeed: [yes]
+- Coverage threshold met: [yes]
+
+## Validation Command
+[The single command that enforces all of the above]
+```

package/template/.agent/skills/prd-templates/references/fe-classification-procedures.md

@@ -0,0 +1,47 @@
+# FE Classification — Accessibility & Conditional Rendering Procedures
+
+Procedures used during `/write-fe-spec-classify` Step 4c to build accessibility inventories and conditional rendering matrices.
+
+---
+
+## Accessibility Extraction Gate
+
+Build an accessibility inventory table for every interactive component or interaction in this feature:
+
+| Component/Interaction | WCAG Req | Keyboard Nav | Screen Reader | IA Source |
+|-----------------------|----------|-------------|--------------|-----------|
+| [component name] | [WCAG level + criterion] | [key bindings + focus order] | [aria-label / role / live region] | [IA shard § section] |
+| [interaction name] | [WCAG level + criterion] | [key bindings + focus order] | [aria-label / role / live region] | [IA shard § section] |
+
+**Thin a11y coverage flag**: If an interactive feature has **< 3 accessibility specifications** in the IA shard (fewer than 3 rows in the inventory table for a feature with interactive elements), flag it:
+
+> ⚠️ **Thin accessibility coverage** for [feature name]: only [N] a11y specs found in IA shard. Options:
+> 1. Resolve now — add missing WCAG requirements to the IA shard before proceeding
+> 2. Accept thin coverage — proceed with what exists and flag as tech debt
+
+**Wait for the user's choice before proceeding.**
+
+**Carry-forward instruction**: The accessibility inventory table becomes inline annotations in the `## Component Inventory` section during `/write-fe-spec-write`. Each component's specification must include its WCAG requirements, keyboard navigation, and screen reader behavior directly — not as a separate accessibility section.
+
+---
+
+## Conditional Rendering Enumeration (Step 4c.5)
+
+Read the IA shard's `## Access Control` section. Build a **role × feature rendering matrix** for every feature-level component or interaction:
+
+| Feature/Component | Free | Paid | Creator | Guardian | Junior | Business | Staff | Admin |
+|-------------------|------|------|---------|----------|--------|----------|-------|-------|
+| [component name] | [hidden/locked/read-only/full] | [hidden/locked/read-only/full] | [hidden/locked/read-only/full] | [hidden/locked/read-only/full] | [hidden/locked/read-only/full] | [hidden/locked/read-only/full] | [hidden/locked/read-only/full] | [hidden/locked/read-only/full] |
+
+**Values**: `hidden` (not rendered), `locked` (visible but disabled with upgrade prompt), `read-only` (visible, non-interactive), `full` (full access).
+
+**Variant mapping**: Every non-trivial cell (any value other than `full` for the majority role) becomes a **named variant** in the component's `variants` spec in the FE spec. For example, if `Creator` gets `read-only` access to a component while `Paid` gets `full`, the component spec must include a `readOnlyCreator` variant (or equivalent named variant).
+
+**Unspecified role × feature combinations**: If the IA shard's `## Access Control` does not specify the rendering state for a particular role × feature combination, flag it explicitly:
+
+> ⚠️ **Unspecified role × feature combination**: [component] × [role] is not defined in the IA shard's access control.
+> Options:
+> 1. Define it now — specify the rendering state
+> 2. Apply closest-tier default — inherit from the nearest tier (e.g., Free inherits from the most restrictive, Admin inherits `full`)
+
+**Do not assume.** Every cell must be explicitly defined or explicitly defaulted with user confirmation.

package/template/.agent/skills/prd-templates/references/fe-spec-template.md

@@ -0,0 +1,84 @@
+# FE Spec Template
+
+Use this template when writing FE specs to `docs/plans/fe/[NN-feature-name].md`.
+
+```markdown
+# [Feature] — Frontend Specification
+
+> **BE Source**: [link to BE spec(s), or N/A for cross-cutting]
+> **IA Source**: [link to IA shard, or N/A for cross-cutting]
+> **Status**: Draft | Review | Complete
+
+## Source Map
+
+| FE Spec Section | Source | Section/Lines |
+|-----------------|--------|---------------|
+| Component Inventory | [be-spec.md or conventions] | § Response Contracts |
+| Page/Route Definitions | [ia-shard.md or conventions] | § User Flows |
+| Interactions | [ia-shard.md or conventions] | § User Flows + § Edge Cases |
+| Accessibility | [ia-shard.md or conventions] | § Accessibility (lines N–M) |
+| Responsive Behavior | [ia-shard.md or conventions] | § Device Strategy |
+| Data Mapping | [be-spec.md or conventions] | § Request/Response Contracts |
+
+## Design Requirements
+**Direction**: [from brand-guidelines — confirmed direction]
+**Typography**: [font/size/weight per text element]
+**Colors**: [primary/secondary/accent for default, hover, active, disabled, error states]
+**Motion**: [animation/transition behavior, or "none"]
+**Anti-patterns**: [what AI slop looks like for this component and how to avoid it]
+
+## Design System Compliance
+**Page archetype(s)**: [name the archetype(s) from design-system.md]
+**Navigation**: [confirm which nav elements this spec uses from the global component inventory]
+**Loading states**: [confirm skeleton vs. spinner — cite design-system.md rule]
+**Error states**: [confirm inline/toast/full-page/boundary — cite design-system.md rule for each context]
+**Empty states**: [confirm illustration style and copy tone from design-system.md]
+
+## Component Inventory
+[Tree with props interfaces]
+
+## Page/Route Definitions
+[URL patterns, guards, redirects]
+
+## State Management
+[Server state, client state, URL state, loading/error/empty]
+
+## Interaction Specification
+[Click, hover, keyboard, form validation matching Zod]
+
+## Responsive Behavior
+[Breakpoints, component behavior per breakpoint]
+
+## Accessibility
+[ARIA roles, keyboard nav, screen reader, WCAG compliance]
+
+## Data Mapping
+[Which BE response fields map to which component props]
+
+## Open Questions
+
+## Changelog
+
+| Date | Change | Workflow | Sections Affected |
+|------|--------|----------|-------------------|
+| [date] | Initial creation | /write-fe-spec | All |
+```
+
+## Quality Gates Checklist
+
+Apply after writing every FE spec:
+
+- [ ] Every component has a props interface
+- [ ] Every interactive element has defined behavior
+- [ ] Every data field maps to a BE response field (if applicable)
+- [ ] Loading, error, and empty states defined for every data-fetching view
+- [ ] Accessibility requirements meet WCAG 2.1 AA
+- [ ] Responsive behavior specified for all breakpoints
+- [ ] IA shard's accessibility section fully consumed (not re-derived from BE spec)
+- [ ] IA shard's user flows reflected in interaction specification
+- [ ] Account-tier conditional rendering rules from IA access model included
+- [ ] Source Map is complete — no FE spec section lacks a traceable source
+- [ ] Design Requirements section filled from brand-guidelines (not placeholders)
+- [ ] Page archetype named and matches design-system.md
+- [ ] All loading/error/empty states use the confirmed design language from design-system.md
+- [ ] No global component re-invented (consuming from global inventory, not re-implementing)

package/template/.agent/skills/prd-templates/references/infrastructure-report-template.md

@@ -0,0 +1,71 @@
+# Infrastructure Verification Report Template
+
+Use this template when creating the report during `/verify-infrastructure`.
+
+## Initial Report (Step 0.6)
+
+Create at `docs/audits/verify-infrastructure-YYYY-MM-DD-HHMM[-auth].md`:
+
+```markdown
+# Infrastructure Verification Report
+
+**Date**: YYYY-MM-DD HH:MM
+**Trigger**: [infrastructure slice | auth slice]
+**Verdict**: ⏳ in-progress
+
+## Results
+
+| # | Check | Status | Notes |
+|---|-------|--------|-------|
+| 0 | Placeholder audit | ⏳ | |
+| 1 | CI/CD config | ⏳ | |
+| 2 | CI/CD green | ⏳ | |
+| 3 | Environment audit | ⏳ | |
+| 4 | Migration check | ⏳ | |
+| 5 | Staging deployment | ⏳ | |
+| 6 | Auth smoke test | ⏳ | |
+| 6.5 | Logging gate | ⏳ | |
+| 6.6 | Error tracking gate | ⏳ | |
+
+## Failures (if any)
+
+None yet.
+
+## Next Steps
+
+In progress.
+```
+
+## Final Report (Step 8)
+
+Update the same file — change the Verdict and fill in results:
+
+```markdown
+# Infrastructure Verification Report
+
+**Date**: YYYY-MM-DD
+**Trigger**: [infrastructure slice | auth slice]
+**Verdict**: [PASS | FAIL]
+
+## Results
+
+| # | Check | Status | Notes |
+|---|-------|--------|-------|
+| 0 | Placeholder audit | ✅/❌ | |
+| 1 | CI/CD config | ✅/❌ | |
+| 2 | CI/CD green | ✅/❌ | |
+| 3 | Environment audit | ✅/❌ | |
+| 4 | Migration check | ✅/❌ | |
+| 5 | Staging deployment | ✅/❌ | |
+| 6 | Auth smoke test | ✅/❌/⏭️ | |
+| 6.5 | Logging gate | ✅/❌ | |
+| 6.6 | Error tracking gate | ✅/❌ | |
+
+## Failures (if any)
+
+[Details of any failing checks]
+
+## Next Steps
+
+[What to do next based on the verdict]
+```

package/template/.agent/skills/prd-templates/references/operational-templates.md

@@ -0,0 +1,116 @@
+# Operational Templates
+
+Templates for operational artifacts produced during planning, assessment, and provisioning workflows.
+
+---
+
+## Slice Acceptance Criteria
+
+Use when writing slice entries during `/plan-phase` Step 4:
+
+```markdown
+### Slice N: [Name]
+**Size**: S/M/L
+**Surfaces**: Contract, API, DB, UI
+
+#### Tasks
+- [ ] Contract: Zod schema for [entity] ← no tag (orchestrator handles sequentially)
+- [ ] `BE` API endpoints for [entity] ← backend agent
+- [ ] `FE` [entity] page and components ← frontend agent
+- [ ] `QA` Integration tests for [entity] ← QA agent (runs FIRST to write failing tests, AND after BE+FE to verify)
+
+#### Acceptance Criteria
+- [ ] Given [context], when [action], then [result]
+- [ ] Given [context], when [error condition], then [error response]
+- [ ] [Performance/security criteria if applicable]
+
+#### Dependencies
+- Requires: Slice M
+- Enables: Slice P
+```
+
+---
+
+## Remediation State
+
+Use when writing `docs/audits/remediation-state.md` during `/remediate-pipeline-assess`:
+
+```markdown
+# Remediation State
+
+> Generated: [ISO 8601 date]
+
+## Layer Status
+
+- vision: [confirmed-clean | unverified-clean | needs-audit | no-content]
+- architecture: [confirmed-clean | unverified-clean | needs-audit | no-content]
+- ia: [confirmed-clean | unverified-clean | needs-audit | no-content]
+- be: [confirmed-clean | unverified-clean | needs-audit | no-content]
+- fe: [confirmed-clean | unverified-clean | needs-audit | no-content]
+
+## Current Layer
+
+[layer — the layer to process next]
+
+## Layers Confirmed Clean This Session
+
+(none yet)
+
+## Notes
+
+[Any relevant context]
+```
+
+---
+
+## Installed Skills List
+
+Use when updating `{{INSTALLED_SKILLS}}` during `/bootstrap-agents-provision` Step 8:
+
+```markdown
+### Default Skills
+- fix-bug — TDD bug fix workflow
+- refactor — Safe refactoring with test verification
+- add-feature — Add feature to existing architecture
+- deploy — Full deployment pipeline
+- pr-review — Structured PR review
+- security-audit — Security review across all layers
+- main-workflow — General development workflow
+- iterate-plan — Tech stack gap analysis
+- setup-session — Session initialization
+- using-git-worktrees — Isolated workspace management
+- github-workflow-automation — GitHub CI/CD patterns
+- audit-context-building — Deep code analysis
+- context7-auto-research — Auto documentation lookup
+- self-improving-agent — Learning from experiences
+
+### Stack Skills
+- [skill-name] — [description] (installed for [STACK_KEY]=[value])
+- ...
+
+### Surface Skills
+- [skill-name] — [description] (installed for [surface] surface)
+- ...
+```
+
+---
+
+## Sync Integration Inventory
+
+Use when building the integration inventory during `/sync-kit` Step 5a:
+
+```markdown
+## New Kit Content Since Last Sync
+
+### New Rules
+- [list new rules, e.g. boundary-not-placeholder]
+
+### New Skills
+- [list new skills, e.g. parallel-agents, parallel-debugging]
+
+### Changed Rules/Instructions
+- [list what changed, e.g. tdd-always now references BOUNDARY stubs]
+
+### New Concepts
+- [list new concepts, e.g. boundary stubs, file ownership, synthesis protocol]
+```

package/template/.agent/skills/prd-templates/references/placeholder-guard-template.md

@@ -0,0 +1,21 @@
+# Placeholder Guard — Hard Stop Template
+
+Use this template in any workflow `## 0. Placeholder guard` step to emit a hard stop when required placeholders are unfilled.
+
+## Hard Stop Message Format
+
+Emit one block per unfilled placeholder:
+
+> ❌ **Bootstrap incomplete — cannot proceed.**
+>
+> **Unfilled placeholder:** `{{PLACEHOLDER_NAME}}`
+>
+> **Recovery:** If `docs/plans/*-architecture-design.md` exists, read it and extract the confirmed [tech decision] value, then run `/bootstrap-agents` with `KEY=<confirmed-value>`. If no architecture design document exists, run `/create-prd-stack` first to confirm tech stack decisions.
+>
+> **Why this matters:** [specific step] cannot produce correct output without this skill — [concrete consequence of proceeding without it].
+
+## Guard Procedure
+
+1. For each placeholder listed in the workflow's `requires_placeholders` frontmatter, check whether the literal characters `{{` still appear in the value.
+2. If **any** are unfilled, emit the hard stop message above (one block per unfilled placeholder) and **do not proceed** to the next step.
+3. Only proceed when **all** required placeholders report no literal `{{` characters.