code-ai-installer 4.0.1-b → 4.0.1

package/dist/shared/pipeline.d.ts

@@ -14,12 +14,12 @@ import { z } from "zod";
  */
 /**
  * Sign-off policy for a single gate.
- *   "den"            → always asks DEN
+ *   "user"            → always asks the user
  *   "mcp_auto_pass"  → MCP runs a deterministic check; pass auto-signs, fail → exception
- *   "either"         → MCP attempts auto-pass; on green, no DEN attention; on red, surfaces to DEN
+ *   "either"         → MCP attempts auto-pass; on green, no the user attention; on red, surfaces to the user
  */
 export declare const SignOffPolicy: z.ZodEnum<{
-    den: "den";
+    user: "user";
     mcp_auto_pass: "mcp_auto_pass";
     either: "either";
 }>;
@@ -60,7 +60,7 @@ export declare const GateConfig: z.ZodObject<{
     produced_by: z.ZodDefault<z.ZodArray<z.ZodString>>;
     signs_off: z.ZodDefault<z.ZodArray<z.ZodString>>;
     sign_off_policy: z.ZodEnum<{
-        den: "den";
+        user: "user";
         mcp_auto_pass: "mcp_auto_pass";
         either: "either";
     }>;
@@ -108,7 +108,7 @@ export declare const ModeConfig: z.ZodObject<{
         produced_by: z.ZodDefault<z.ZodArray<z.ZodString>>;
         signs_off: z.ZodDefault<z.ZodArray<z.ZodString>>;
         sign_off_policy: z.ZodEnum<{
-            den: "den";
+            user: "user";
             mcp_auto_pass: "mcp_auto_pass";
             either: "either";
         }>;
@@ -139,7 +139,7 @@ export declare const CircuitBreakerConfig: z.ZodObject<{
 export type CircuitBreakerConfig = z.infer<typeof CircuitBreakerConfig>;
 /**
  * Touchpoint compression budget per pipeline (from 2026-05-23 decisions drawer item #4).
- * Number of DEN touchpoints allowed before the pipeline is considered over-budget.
+ * Number of the user touchpoints allowed before the pipeline is considered over-budget.
  */
 export declare const TouchpointBudget: z.ZodObject<{
     hotfix: z.ZodDefault<z.ZodNumber>;
@@ -156,14 +156,14 @@ export type TouchpointBudget = z.infer<typeof TouchpointBudget>;
  *   schema_version: 1
  *   domain: development
  *   default_mode: full
- *   default_signer: den
+ *   default_signer: user
  *   modes:
  *     - mode: full
  *       gates:
  *         - gate: PM
  *           produced_by: [pm]
  *           signs_off: [pm]
- *           sign_off_policy: den
+ *           sign_off_policy: user
  *         ...
  *   circuit_breaker: { enabled: true, dev_rollback_threshold: 2, ... }
  */
@@ -181,7 +181,7 @@ export declare const PipelineYaml: z.ZodObject<{
         hotfix: "hotfix";
     }>>;
     default_signer: z.ZodDefault<z.ZodEnum<{
-        den: "den";
+        user: "user";
         mcp: "mcp";
         system: "system";
     }>>;
@@ -220,7 +220,7 @@ export declare const PipelineYaml: z.ZodObject<{
             produced_by: z.ZodDefault<z.ZodArray<z.ZodString>>;
             signs_off: z.ZodDefault<z.ZodArray<z.ZodString>>;
             sign_off_policy: z.ZodEnum<{
-                den: "den";
+                user: "user";
                 mcp_auto_pass: "mcp_auto_pass";
                 either: "either";
             }>;

package/dist/shared/pipeline.js

@@ -16,11 +16,11 @@ import { AgentName } from "./frontmatter.js";
  */
 /**
  * Sign-off policy for a single gate.
- *   "den"            → always asks DEN
+ *   "user"            → always asks the user
  *   "mcp_auto_pass"  → MCP runs a deterministic check; pass auto-signs, fail → exception
- *   "either"         → MCP attempts auto-pass; on green, no DEN attention; on red, surfaces to DEN
+ *   "either"         → MCP attempts auto-pass; on green, no the user attention; on red, surfaces to the user
  */
-export const SignOffPolicy = z.enum(["den", "mcp_auto_pass", "either"]);
+export const SignOffPolicy = z.enum(["user", "mcp_auto_pass", "either"]);
 /** Reference to a named deterministic check (MCP tool name). Used by mcp_auto_pass policies. */
 export const AutoCheckRef = z.object({
     tool: z.string().min(1),
@@ -73,7 +73,7 @@ export const CircuitBreakerConfig = z.object({
 });
 /**
  * Touchpoint compression budget per pipeline (from 2026-05-23 decisions drawer item #4).
- * Number of DEN touchpoints allowed before the pipeline is considered over-budget.
+ * Number of the user touchpoints allowed before the pipeline is considered over-budget.
  */
 export const TouchpointBudget = z.object({
     hotfix: z.number().int().min(1).default(1),
@@ -91,14 +91,14 @@ export const TouchpointBudget = z.object({
  *   schema_version: 1
  *   domain: development
  *   default_mode: full
- *   default_signer: den
+ *   default_signer: user
  *   modes:
  *     - mode: full
  *       gates:
  *         - gate: PM
  *           produced_by: [pm]
  *           signs_off: [pm]
- *           sign_off_policy: den
+ *           sign_off_policy: user
  *         ...
  *   circuit_breaker: { enabled: true, dev_rollback_threshold: 2, ... }
  */
@@ -108,7 +108,7 @@ export const PipelineYaml = z.object({
     /** Default mode chosen when the user doesn't specify one. */
     default_mode: PipelineMode.default("full"),
     /** Default signer if a gate doesn't override. */
-    default_signer: Signer.default("den"),
+    default_signer: Signer.default("user"),
     modes: z.array(ModeConfig).min(1),
     circuit_breaker: CircuitBreakerConfig.default(() => CircuitBreakerConfig.parse({})),
     touchpoint_budget: TouchpointBudget.default(() => TouchpointBudget.parse({})),

package/dist/shared/tools.d.ts

@@ -419,7 +419,7 @@ export declare const RequestDecisionInput: z.ZodObject<{
 export declare const RequestDecisionOutput: z.ZodObject<{
     chosen_option_id: z.ZodString;
     signer: z.ZodEnum<{
-        den: "den";
+        user: "user";
         mcp: "mcp";
         system: "system";
     }>;
@@ -465,7 +465,7 @@ export declare const RecordDecisionInput: z.ZodObject<{
     chosen_option_id: z.ZodString;
     rationale: z.ZodString;
     signer: z.ZodEnum<{
-        den: "den";
+        user: "user";
         mcp: "mcp";
         system: "system";
     }>;
@@ -681,7 +681,7 @@ export declare const SignOffInput: z.ZodObject<{
         TECH_LEAD: "TECH_LEAD";
     }>;
     signer: z.ZodEnum<{
-        den: "den";
+        user: "user";
         mcp: "mcp";
         system: "system";
     }>;
@@ -690,7 +690,7 @@ export declare const SignOffInput: z.ZodObject<{
 export declare const SignOffOutput: z.ZodObject<{
     signed: z.ZodLiteral<true>;
     signer: z.ZodEnum<{
-        den: "den";
+        user: "user";
         mcp: "mcp";
         system: "system";
     }>;
@@ -808,7 +808,7 @@ export declare const ReportExceptionInput: z.ZodObject<{
 export declare const ReportExceptionOutput: z.ZodObject<{
     exception_id: z.ZodString;
     surfaced_to: z.ZodEnum<{
-        den: "den";
+        user: "user";
         mcp: "mcp";
         system: "system";
     }>;
@@ -963,7 +963,7 @@ export declare const RecentDecisionsOutput: z.ZodObject<{
         question: z.ZodString;
         chosen_option_id: z.ZodString;
         signer: z.ZodEnum<{
-            den: "den";
+            user: "user";
             mcp: "mcp";
             system: "system";
         }>;
@@ -1413,7 +1413,7 @@ export declare const ProposalReviewEvent: z.ZodObject<{
         superseded: "superseded";
     }>;
     decided_by: z.ZodEnum<{
-        den: "den";
+        user: "user";
         auditor_auto: "auditor_auto";
     }>;
     note: z.ZodOptional<z.ZodString>;
@@ -1428,7 +1428,7 @@ export declare const ReviewProposalInput: z.ZodObject<{
         reject: "reject";
     }>;
     decided_by: z.ZodEnum<{
-        den: "den";
+        user: "user";
         auditor_auto: "auditor_auto";
     }>;
     note: z.ZodOptional<z.ZodString>;
@@ -1969,7 +1969,7 @@ export declare const TOOL_REGISTRY: {
         readonly output: z.ZodObject<{
             chosen_option_id: z.ZodString;
             signer: z.ZodEnum<{
-                den: "den";
+                user: "user";
                 mcp: "mcp";
                 system: "system";
             }>;
@@ -2015,7 +2015,7 @@ export declare const TOOL_REGISTRY: {
             chosen_option_id: z.ZodString;
             rationale: z.ZodString;
             signer: z.ZodEnum<{
-                den: "den";
+                user: "user";
                 mcp: "mcp";
                 system: "system";
             }>;
@@ -2231,7 +2231,7 @@ export declare const TOOL_REGISTRY: {
                 TECH_LEAD: "TECH_LEAD";
             }>;
             signer: z.ZodEnum<{
-                den: "den";
+                user: "user";
                 mcp: "mcp";
                 system: "system";
             }>;
@@ -2240,7 +2240,7 @@ export declare const TOOL_REGISTRY: {
         readonly output: z.ZodObject<{
             signed: z.ZodLiteral<true>;
             signer: z.ZodEnum<{
-                den: "den";
+                user: "user";
                 mcp: "mcp";
                 system: "system";
             }>;
@@ -2358,7 +2358,7 @@ export declare const TOOL_REGISTRY: {
         readonly output: z.ZodObject<{
             exception_id: z.ZodString;
             surfaced_to: z.ZodEnum<{
-                den: "den";
+                user: "user";
                 mcp: "mcp";
                 system: "system";
             }>;
@@ -2513,7 +2513,7 @@ export declare const TOOL_REGISTRY: {
                 question: z.ZodString;
                 chosen_option_id: z.ZodString;
                 signer: z.ZodEnum<{
-                    den: "den";
+                    user: "user";
                     mcp: "mcp";
                     system: "system";
                 }>;
@@ -2868,7 +2868,7 @@ export declare const TOOL_REGISTRY: {
                 reject: "reject";
             }>;
             decided_by: z.ZodEnum<{
-                den: "den";
+                user: "user";
                 auditor_auto: "auditor_auto";
             }>;
             note: z.ZodOptional<z.ZodString>;

package/dist/shared/tools.js

@@ -156,7 +156,7 @@ export const SignOffInput = z.object({
     task_id: TaskId,
     gate: GateName,
     signer: Signer,
-    /** Evidence — for mcp signer this is the auto_check tool output; for den it's free-form. */
+    /** Evidence — for mcp signer this is the auto_check tool output; for user it's free-form. */
     evidence: z.unknown().optional(),
 });
 export const SignOffOutput = z.object({
@@ -502,7 +502,7 @@ export const ProposalReviewEvent = z.object({
     id: z.string(),
     status: ProposalStatus,
     /** Who authorized the transition. "auditor_auto" is matrix/toggle-gated in review_proposal. */
-    decided_by: z.enum(["den", "auditor_auto"]),
+    decided_by: z.enum(["user", "auditor_auto"]),
     note: z.string().optional(),
     reviewed_at: z.string(),
 });
@@ -511,7 +511,7 @@ export const ReviewProposalInput = z.object({
     /** approve/reject act on a pending proposal; applied marks an approved one as written. */
     decision: z.enum(["approve", "reject", "applied"]),
     /** Authorizer. "auditor_auto" only valid for low/additive when the approval gate is OFF. */
-    decided_by: z.enum(["den", "auditor_auto"]),
+    decided_by: z.enum(["user", "auditor_auto"]),
     note: z.string().optional(),
 });
 export const ReviewProposalOutput = z.object({

package/dist/shared/vocabulary.d.ts

@@ -117,8 +117,8 @@ export declare const GateName: z.ZodEnum<{
 export type GateName = z.infer<typeof GateName>;
 /**
  * LLM MUST classify each gate before producing artifact. Per the silent-by-default contract:
- *   - auto_resolve: green path, no DEN attention required, artifact still produced for audit
- *   - fork:        decision-point that needs DEN — surfaces via request_decision
+ *   - auto_resolve: green path, no the user attention required, artifact still produced for audit
+ *   - fork:        decision-point that needs the user — surfaces via request_decision
  *   - exception:   automated check failed, breakdown written to exception channel
  */
 export declare const ClassificationOutcome: z.ZodEnum<{
@@ -170,9 +170,9 @@ export declare const SkillType: z.ZodEnum<{
     discretionary: "discretionary";
 }>;
 export type SkillType = z.infer<typeof SkillType>;
-/** "den" = the user. "mcp" = auto-pass via deterministic check. "system" = circuit-breaker / audit. */
+/** "user" = the user. "mcp" = auto-pass via deterministic check. "system" = circuit-breaker / audit. */
 export declare const Signer: z.ZodEnum<{
-    den: "den";
+    user: "user";
     mcp: "mcp";
     system: "system";
 }>;

package/dist/shared/vocabulary.js

@@ -100,8 +100,8 @@ export const GateName = z.enum(uniqueGates([
 // ─── Classification (the only decision channel before each gate transition) ──
 /**
  * LLM MUST classify each gate before producing artifact. Per the silent-by-default contract:
- *   - auto_resolve: green path, no DEN attention required, artifact still produced for audit
- *   - fork:        decision-point that needs DEN — surfaces via request_decision
+ *   - auto_resolve: green path, no the user attention required, artifact still produced for audit
+ *   - fork:        decision-point that needs the user — surfaces via request_decision
  *   - exception:   automated check failed, breakdown written to exception channel
  */
 export const ClassificationOutcome = z.enum([
@@ -169,8 +169,8 @@ export const SkillType = z.enum([
     "discretionary",
 ]);
 // ─── Signers (who can sign off a gate) ───────────────────────────────────────
-/** "den" = the user. "mcp" = auto-pass via deterministic check. "system" = circuit-breaker / audit. */
-export const Signer = z.enum(["den", "mcp", "system"]);
+/** "user" = the user. "mcp" = auto-pass via deterministic check. "system" = circuit-breaker / audit. */
+export const Signer = z.enum(["user", "mcp", "system"]);
 // ─── Controlled vocab seeds (extendable via request_decision) ───────────────
 /**
  * tech + topic enums are seeded at migration start (<=30 each per plan).

package/dist/types.d.ts

@@ -29,7 +29,7 @@ export interface InstallOperation {
     optional?: boolean;
     transform?: {
         target: TargetId;
-        assetType: "orchestrator" | "agent" | "skill";
+        assetType: "orchestrator" | "agent" | "skill" | "workflow";
     };
 }
 /**

package/domains/analytics/.agents/workflows/analytics-pipeline-rules.md

@@ -11,6 +11,16 @@ description: Абсолютные правила аналитического п
 
 ---
 
+## Машина гейтов (code-ai MCP)
+
+Аналитический пайплайн исполняется машиной состояний `code-ai` MCP; источник правды — `analytics/pipeline.yaml`. Каждый гейт проходится через MCP-поток: `current_gate` → `classify_gate` → `load_role` (роль гейта) + `get_skill` → deliverable + `submit_artifact` → `sign_off` → `advance_gate`.
+
+- **Подпись:** в аналитике **все гейты `user`** — каждый закрывается явным "Approved" пользователя (домен суждения; детерминированных авто-чеков, как тесты в разработке, здесь нет). Авто-пас на зелёном не применяется.
+- **Circuit breaker отключён** (нет полосы откатов DEV/OPS/REV/TEST); возвраты идут через reverse `$handoff` (см. протокол ниже).
+- Оркестрационные скиллы `$board` / `$handoff` / `$gates` — человекочитаемый слой поверх машины (доска статусов, передача, проверка готовности). Эскалация-развилка — `request_decision`; решения уровня ADR — `record_decision`.
+
+---
+
 ## Три режима пайплайна
 
 ### 🔵 Full Pipeline (`/analyze`) — 5 сессий
@@ -65,7 +75,7 @@ CONDUCTOR → INTERVIEWER → RESEARCHER → DATA_ANALYST → STRATEGIST → MED
 ### Правило 2: User sign-off на каждом гейте
 - Переход к следующему гейту — **только** после явного "Approved" от пользователя.
 - При sign-off пользователь **верифицирует**, что AI правильно загрузил агента и его скиллы.
-- `ShouldAutoProceed = false` ВСЕГДА.
+- Переход — только через `sign_off` по политике `user`; авто-пас на зелёном в аналитике не применяется.
 
 **Применяющие скилы:** `$gates` (запрашивает Approved), `$handoff` (ожидает Approved перед передачей).
 
@@ -122,7 +132,7 @@ CONDUCTOR → INTERVIEWER → RESEARCHER → DATA_ANALYST → STRATEGIST → MED
 | # | Блок | Когда | Что проверяет | При провале |
 |---|------|-------|---------------|-------------|
 | 1 | **Pre-flight check** | Перед записью deliverable | Процитировать последний "Approved" пользователя | Остановиться, запросить Approved |
-| 2 | **Skill read check** | Перед применением скилла | Прочитать SKILL.md через `view_file` | Прочитать, затем применять |
+| 2 | **Skill read check** | Перед применением скилла | Загрузить скилл через `get_skill` | Загрузить, затем применять |
 | 3 | **Data verification check** | Каждый факт в deliverable | Source URL + date + confidence (✅/⚠️/🔮) | Пометить как 🔮 Assumed или удалить |
 | 4 | **Handoff file check** | Перед закрытием сессии (Full) | `docs/analytics/session-N-handoff.md` сохранён, самодостаточен | Не закрывать сессию, сохранить файл |
 | 5 | **Team mode check** | Conductor при каждом handoff | Агент работает в назначенном team mode | Вернуть и переназначить |
@@ -135,7 +145,7 @@ CONDUCTOR → INTERVIEWER → RESEARCHER → DATA_ANALYST → STRATEGIST → MED
 1. Показать deliverable и запросить "Approved".
 2. Если нет ответа — **ожидать**. Не переходить к следующему гейту.
 3. Напомнить: «Ожидаю "Approved" для перехода к [следующий гейт]».
-4. **Никогда** не auto-proceed. `ShouldAutoProceed = false` ВСЕГДА.
+4. **Никогда** не двигать гейт без `sign_off` (все гейты `user` — нужен явный "Approved").
 
 ### При повторных FAIL на `$gates`
 | Итерация | Действие |

package/domains/analytics/.agents/workflows/analyze.md

@@ -9,6 +9,7 @@ description: Полный аналитический пайплайн — 5 се
 Полный аналитический пайплайн с состязательным подходом. Две конкурирующие команды (Аналитики и Критики) независимо исследуют вопрос, Медиатор оценивает результаты, верстальщики готовят PDF-отчёт. Разбит на 5 сессий для управления контекстным окном.
 
 > **Правила пайплайна:** Этот воркфлоу подчиняется `analytics-pipeline-rules.md` — 7 обязательных правил, mechanical blocks, метрики здоровья, протокол эскалации.
+> Исполняется машиной code-ai MCP: `current_gate` → `classify_gate` → `load_role`/`get_skill` → `submit_artifact` → `sign_off` → `advance_gate`; все гейты `user`. См. секцию «Машина гейтов» в `analytics-pipeline-rules.md`.
 
 ## Когда использовать
 

package/domains/analytics/.agents/workflows/quick-insight.md

@@ -9,6 +9,7 @@ description: Быстрый аналитический пайплайн — 1 с
 Упрощённый аналитический пайплайн в одной сессии. Одна команда Аналитиков (без Критиков), Медиатор верифицирует логическую цепочку, верстальщики готовят PDF-отчёт. Подходит для простых вопросов и быстрых проверок.
 
 > **Правила пайплайна:** Этот воркфлоу подчиняется `analytics-pipeline-rules.md` — все 7 правил, mechanical blocks и протокол эскалации применяются полностью, как и в /analyze.
+> Исполняется машиной code-ai MCP: `current_gate` → `classify_gate` → `load_role`/`get_skill` → `submit_artifact` → `sign_off` → `advance_gate`; все гейты `user`. См. секцию «Машина гейтов» в `analytics-pipeline-rules.md`.
 
 ## Когда использовать
 

package/domains/analytics/locales/en/.agents/workflows/analytics-pipeline-rules.md

@@ -11,6 +11,16 @@ description: Absolute rules of the analytical pipeline — gates, discipline, in
 
 ---
 
+## Gate machine (code-ai MCP)
+
+The analytical pipeline is executed by the `code-ai` MCP state machine; the source of truth is `analytics/pipeline.yaml`. Every gate runs through the MCP flow: `current_gate` → `classify_gate` → `load_role` (the gate's role) + `get_skill` → deliverable + `submit_artifact` → `sign_off` → `advance_gate`.
+
+- **Sign-off:** in analytics **all gates are `user`** — each is closed by the user's explicit "Approved" (a judgment domain; there are no deterministic auto-checks here, like tests in development). No auto-pass on green.
+- **Circuit breaker is disabled** (there is no DEV/OPS/REV/TEST rollback band); returns go through reverse `$handoff` (see protocol below).
+- Orchestration skills `$board` / `$handoff` / `$gates` are a human-readable layer over the machine (status board, transfer, readiness check). The escalation fork is `request_decision`; ADR-level decisions are `record_decision`.
+
+---
+
 ## Three Pipeline Modes
 
 ### 🔵 Full Pipeline (`/analyze`) — 5 sessions
@@ -65,7 +75,7 @@ User request
 ### Rule 2: User sign-off at every gate
 - Transitioning to the next gate is **only** allowed after an explicit "Approved" from the user.
 - Upon sign-off, the user **verifies** that the AI correctly loaded the agent and its skills.
-- `ShouldAutoProceed = false` ALWAYS.
+- Transition happens only via `sign_off` under the `user` policy; no auto-pass on green in analytics.
 
 **Applied skills:** `$gates` (requests Approved), `$handoff` (waits for Approved before transfer).
 
@@ -122,7 +132,7 @@ User request
 | # | Block | When | What it checks | On failure |
 |---|-------|------|----------------|------------|
 | 1 | **Pre-flight check** | Before writing a deliverable | Quote the last user's "Approved" | Stop, request Approved |
-| 2 | **Skill read check** | Before applying a skill | Read SKILL.md via `view_file` | Read, then apply |
+| 2 | **Skill read check** | Before applying a skill | Load the skill via `get_skill` | Load, then apply |
 | 3 | **Data verification check** | Every fact in the deliverable | Source URL + date + confidence (✅/⚠️/🔮) | Mark as 🔮 Assumed or remove |
 | 4 | **Handoff file check** | Before closing the session (Full) | `docs/analytics/session-N-handoff.md` saved, self-contained | Do not close session, save file |
 | 5 | **Team mode check** | Conductor at every handoff | Agent works in the assigned team mode | Return and reassign |
@@ -135,7 +145,7 @@ User request
 1. Show the deliverable and request "Approved".
 2. If there is no answer — **wait**. Do not proceed to the next gate.
 3. Remind: "Waiting for 'Approved' to transition to [next gate]".
-4. **Never** auto-proceed. `ShouldAutoProceed = false` ALWAYS.
+4. **Never** move a gate without `sign_off` (all gates are `user` — an explicit "Approved" is required).
 
 ### Upon repeated FAILs at `$gates`
 | Iteration | Action |

package/domains/analytics/locales/en/.agents/workflows/analyze.md

@@ -9,6 +9,7 @@ description: Full analytical pipeline — 5 sessions, adversarial approach, medi
 Full analytical pipeline with an adversarial approach. Two competing teams (Analysts and Critics) independently research the question, the Mediator evaluates the results, and the design/layout team prepares a PDF report. Divided into 5 sessions to manage context window limits.
 
 > **Pipeline rules:** This workflow obeys `analytics-pipeline-rules.md` — 7 mandatory rules, mechanical blocks, health metrics, and the escalation protocol.
+> Executed by the code-ai MCP machine: `current_gate` → `classify_gate` → `load_role`/`get_skill` → `submit_artifact` → `sign_off` → `advance_gate`; all gates `user`. See the "Gate machine" section in `analytics-pipeline-rules.md`.
 
 ## When to use
 

package/domains/analytics/locales/en/.agents/workflows/quick-insight.md

@@ -9,6 +9,7 @@ description: Quick analytical pipeline — 1 session, one team, logic mediation,
 A simplified, rapid analytical pipeline contained within a single session. One single Analysts team (no Critics); the Mediator verifies logical chaining, and the designers layout a PDF report. Designed for simple, direct questions and quick checks.
 
 > **Pipeline rules:** This workflow adheres to `analytics-pipeline-rules.md` — all 7 rules, mandatory checks, and the escalation protocol apply strictly, identical to /analyze.
+> Executed by the code-ai MCP machine: `current_gate` → `classify_gate` → `load_role`/`get_skill` → `submit_artifact` → `sign_off` → `advance_gate`; all gates `user`. See the "Gate machine" section in `analytics-pipeline-rules.md`.
 
 ## When to use
 

package/domains/analytics/locales/en/agents/interviewer.md

@@ -5,7 +5,7 @@ domain: analytics
 signs_off_at:
   - INTERVIEWER
 tool_allowlist: role:interviewer
-budget_lines: 477
+budget_lines: 478
 schema_version: 1
 ---
 
@@ -54,6 +54,7 @@ this is a defect in the Interviewer's work.
 ## Utilized Skills
 
 ### Mandatory (every time)
+- **$karpathy-guidelines** — think first, do only what's needed, edit precisely, work from the result
 - **`$gates`** — verification of the deliverable against INT-xx criteria before transfer
 - **`$handoff`** — receiving handoff from COND-01 + formatting the envelope with Research Brief
 - **`$board`** — updating INT-01 status

package/domains/analytics/locales/en/agents/layouter.md

@@ -5,7 +5,7 @@ domain: analytics
 signs_off_at:
   - LAYOUTER
 tool_allowlist: role:layouter
-budget_lines: 359
+budget_lines: 360
 schema_version: 1
 ---
 
@@ -50,6 +50,7 @@ and getting a professional PDF without manual configuration.
 ## Utilized Skills
 
 ### Mandatory (every time)
+- **$karpathy-guidelines** — think first, do only what's needed, edit precisely, work from the result
 - **`$html-pdf-report`** — full HTML generation protocol: CSS, Chart.js, Mermaid, components, testing
 - **`$gates`** — verification of deliverable against LY-xx criteria + Release Gate
 - **`$handoff`** — receipt from DS-01 + transmission to Release Gate

package/domains/analytics/locales/en/agents/mediator.md

@@ -5,7 +5,7 @@ domain: analytics
 signs_off_at:
   - MEDIATOR
 tool_allowlist: role:mediator
-budget_lines: 487
+budget_lines: 488
 schema_version: 1
 ---
 
@@ -52,6 +52,7 @@ analyses and a practical decision.
 ## Utilized Skills
 
 ### Mandatory (every time)
+- **$karpathy-guidelines** — think first, do only what's needed, edit precisely, work from the result
 - **`$gates`** — verification of deliverable against MED-xx criteria before transmission
 - **`$handoff`** — receipt from COND-04 + formulating the envelope with Mediated Conclusion
 - **`$board`** — updating MED-01 status

package/domains/analytics/locales/en/agents/researcher.md

@@ -5,7 +5,7 @@ domain: analytics
 signs_off_at:
   - RESEARCHER
 tool_allowlist: role:researcher
-budget_lines: 441
+budget_lines: 442
 schema_version: 1
 ---
 
@@ -57,6 +57,7 @@ research question, at least 3 independent sources.
 ## Utilized Skills
 
 ### Mandatory (every time)
+- **$karpathy-guidelines** — think first, do only what's needed, edit precisely, work from the result
 - **`$web-research`** — web search and data verification. Runs **always**. Protocol: source tiering (T1/T2/T3), 3-level confidence, audit trail, counter-search, quality metrics.
 - **`$gates`** — verification of deliverable against RES-xx criteria (web-search = Blocker, dependency check)
 - **`$handoff`** — receipt from COND-xx + transmission envelope for AN-xx

package/domains/analytics/locales/en/agents/strategist.md

@@ -5,7 +5,7 @@ domain: analytics
 signs_off_at:
   - STRATEGIST
 tool_allowlist: role:strategist
-budget_lines: 444
+budget_lines: 445
 schema_version: 1
 ---
 
@@ -60,6 +60,7 @@ from raw data through analytical insights to the strategic decision.
 ## Utilized Skills
 
 ### Mandatory (every time)
+- **$karpathy-guidelines** — think first, do only what's needed, edit precisely, work from the result
 - **`$gates`** — verification of deliverable against ST-xx criteria (traceability, dependency check)
 - **`$handoff`** — receipt from AN-xx + constructing the envelope for Conductor
 - **`$board`** — updating ST-xx status

package/domains/analytics/pipeline.yaml

@@ -20,14 +20,14 @@
 # mode is deferred — the PipelineMode enum (full/bugfix/hotfix) carries dev
 # semantics, so a content/analytics fast-path needs its own design later.
 #
-# All gates use sign_off_policy=den: analytics has no wired deterministic auto-
+# All gates use sign_off_policy=user: analytics has no wired deterministic auto-
 # check MCP tools. Circuit breaker is DISABLED (the breaker mechanic is hardwired
 # to a rollback into the DEV gate, which analytics has no analog for).
 
 schema_version: 1
 domain: analytics
 default_mode: full
-default_signer: den
+default_signer: user
 
 modes:
   - mode: full
@@ -35,49 +35,49 @@ modes:
       - gate: INTERVIEWER
         produced_by: [interviewer]
         signs_off: [interviewer, conductor]
-        sign_off_policy: den
+        sign_off_policy: user
         classify_required: true
         retryable: true
       - gate: RESEARCHER
         produced_by: [researcher]
         signs_off: [researcher, conductor]
-        sign_off_policy: den
+        sign_off_policy: user
         classify_required: true
         retryable: true
       - gate: DATA_ANALYST
         produced_by: [data_analyst]
         signs_off: [data_analyst, conductor]
-        sign_off_policy: den
+        sign_off_policy: user
         classify_required: true
         retryable: true
       - gate: STRATEGIST
         produced_by: [strategist]
         signs_off: [strategist, conductor]
-        sign_off_policy: den
+        sign_off_policy: user
         classify_required: true
         retryable: true
       - gate: MEDIATOR
         produced_by: [mediator]
         signs_off: [mediator, conductor]
-        sign_off_policy: den
+        sign_off_policy: user
         classify_required: true
         retryable: true
       - gate: DESIGNER
         produced_by: [designer]
         signs_off: [designer, conductor]
-        sign_off_policy: den
+        sign_off_policy: user
         classify_required: true
         retryable: true
       - gate: LAYOUTER
         produced_by: [layouter]
         signs_off: [layouter, conductor]
-        sign_off_policy: den
+        sign_off_policy: user
         classify_required: true
         retryable: true
       - gate: RELEASE_GATE
         produced_by: [conductor]
         signs_off: [conductor]
-        sign_off_policy: den
+        sign_off_policy: user
         classify_required: true
         retryable: false