create-agdf 0.11.0 → 0.11.3

package/generated/.github/skills/agdf-gate-check/SKILL.md

@@ -69,6 +69,12 @@ for a native-capable adapter.
 
 The CLI reports are validators and JSON evidence, not the primary user experience, not a required ritual for normal work and not a second rule system. If a report says `blocked`, do not continue with later-gate artefacts until the reported blocker is resolved.
 
+## Repository Activation Diagnosis
+
+`doctor --json` on the resolved surface-local validator is the sole canonical, code-owned, tool-shell-safe activation probe. Determine whether a repository is AGDF-active through `doctor --json` (or `gate-check --json` for a selected run), not through plugin `AGDF_*` environment variables, not through a relative glob, not through a relative `grep`, and not through a relative `read` of `.agdf/control/config.json`.
+
+Plugin `AGDF_*` environment variables set by the OpenCode `shell.env` hook are convenience only and must not be used as the only proof of activation; host shell-env propagation to spawned tool shells is not guaranteed and is OpenCode-owned, not AGDF-owned. A relative glob or `grep` for `.agdf/control/config.json` must not be used as proof of presence or absence of `.agdf/control/config.json`; an absolute `read` or the canonical CLI probe is required.
+
 ## Native Interaction Path
 
 `../contracts/interaction.md` is the complete normative owner for interaction kinds, locale,
@@ -163,6 +169,15 @@ If a status is not explicit, do not assume it is satisfied.
 11. When `.agdf/control/` is missing or incomplete, make the next allowed artefact action explicit. For a fresh request, that means draft the minimal UR in the response, then request `Approval: UR`. Do not write a full control scaffold unless durable control state was explicitly requested or is already the repository's live AGDF working state.
 12. If branch, workspace and durable artefacts disagree, do not choose a scope silently; report the ambiguity and ask for the smallest clarifying gate action.
 
+### Scope Classification Output
+When this skill classifies a fresh scope as ungated (Quick Task or Trivial Change Boundary), consume
+`scope_classification.markdown` verbatim from `renderScopeClassificationCard` in
+`../contracts/interaction.md` § Scope Classification Card. The card is a compact, localized,
+non-authorizing projection: mode, boundary, UR-trigger evaluation, one allowed line, one forbidden
+line, escalation triggers and the challenge path. Do not maintain or render a skill-local
+classification card template. If the renderer returns `null`, fail closed to the existing ceremony
+and do not model-reconstruct Markdown.
+
 ## Output
 Keep the result short and operational. For a status-only response, consume the Runtime Contract's
 code-owned `status_presentation.markdown` verbatim. It is the compact localized operational Run

package/generated/.github/skills/agdf-interaction-locales.json

@@ -39,6 +39,25 @@
         "breadcrumbOpen": "\u25cb",
         "breadcrumbSeparator": " \u00b7 "
       },
+      "scopeClassification": {
+        "title": "AGDF scope classification",
+        "field": "Field",
+        "value": "Value",
+        "classification": "Classification",
+        "mode": {
+          "quick_task": "Quick Task",
+          "verified_change": "Verified Change"
+        },
+        "boundary": {
+          "inside": "Trivial change boundary satisfied",
+          "outside": "Outside trivial change boundary"
+        },
+        "grounds": "UR trigger evaluation",
+        "allowed": "Currently allowed",
+        "forbidden": "Remains forbidden",
+        "escalation": "Escalation triggers",
+        "challenge": "Challenge path"
+      },
       "internalStateLabels": {
         "verifiedChange": "Compact change under review",
         "verifiedChangeEscalated": "Escalated to structured delivery",
@@ -246,6 +265,25 @@
         "breadcrumbOpen": "\u25cb",
         "breadcrumbSeparator": " \u00b7 "
       },
+      "scopeClassification": {
+        "title": "AGDF-Scope-Klassifizierung",
+        "field": "Feld",
+        "value": "Wert",
+        "classification": "Klassifizierung",
+        "mode": {
+          "quick_task": "Quick Task",
+          "verified_change": "Verified Change"
+        },
+        "boundary": {
+          "inside": "Trivial-Change-Boundary erfüllt",
+          "outside": "Außerhalb der Trivial-Change-Boundary"
+        },
+        "grounds": "UR-Trigger-Evaluation",
+        "allowed": "Aktuell erlaubt",
+        "forbidden": "Bleibt verboten",
+        "escalation": "Eskalationsauslöser",
+        "challenge": "Widerspruchspfad"
+      },
       "internalStateLabels": {
         "verifiedChange": "Kompakte Änderung wird geprüft",
         "verifiedChangeEscalated": "Eskaliert zu structured delivery",

package/generated/.github/skills/contracts/control-scaffold.md

@@ -89,6 +89,10 @@ Helper commands are deterministic proof and automation interfaces, not the norma
 Machine-readable outputs should stay agent-friendly: stable decisions, blocking gate or current gate, missing approval, allowed outputs, forbidden outputs, next step, evidence and findings.
 They make the repository state checkable, but they do not replace the native skill workflow or the durable control artefacts.
 
+### Repository Activation Diagnosis Boundary
+
+`doctor --json` on the resolved surface-local validator is the sole canonical, code-owned, tool-shell-safe activation probe. Plugin `AGDF_*` environment variables set by the OpenCode `shell.env` hook are an internal plugin status channel consumed by `opencode-status`, not an agent-facing diagnosis proof; host shell-env propagation to spawned tool shells is not guaranteed and is OpenCode-owned. A relative glob or `grep` for `.agdf/control/config.json` must not be used as proof of presence or absence of `.agdf/control/config.json`; an absolute `read` or the canonical CLI probe is required.
+
 ## Delivery Map
 
 `delivery-map --json` is the machine-readable delivery picture for the selected canonical control state.

package/generated/.github/skills/contracts/interaction.md

@@ -338,6 +338,25 @@ repeat the sentence later in the same request. Existing-run status inspection re
 uses the existing status projection; this branch must not create a second status-card or narration
 owner.
 
+### Scope Classification Card
+
+When `agdf-gate-check` classifies a fresh scope as ungated (Quick Task or Trivial Change Boundary),
+the agent consumes the canonical `scope_classification.markdown` verbatim from
+`renderScopeClassificationCard` in `create-agdf/lib/interaction-presentation.js`. The card is a
+compact, localized, non-authorizing projection of the classification: mode, boundary result,
+UR-trigger evaluation, one currently-allowed line, one remains-forbidden line, escalation triggers
+and the challenge path. It carries `authorizes: false` and never renders approval controls.
+
+The card renders exactly once per fresh-scope ungated classification, before work proceeds. It must
+not appear for gated scopes, internal steps of a selected run, or as a substitute for the two-card
+approval envelope. Read-only requests keep the single read-only orientation sentence above; the
+scope classification card and the read-only orientation are mutually exclusive for the same request.
+
+If the classification input is missing, unknown, contradictory or the locale section is incomplete,
+the renderer returns `null` and the agent fails closed to the existing ceremony — never
+model-reconstructed Markdown. The card introduces no gate, no approval value, no persistence and no
+second presentation owner. `agdf-gate-check` must not maintain a skill-local card template.
+
 Exact textual approvals remain canonical and fully supported on every surface. If native capability availability or safety is unknown, use the textual fallback. Host permission, plan approval, native question presentation, timeout/default behavior, hook output and agent messages never carry AGDF gate authority by themselves.
 
 ### Interaction Locale Contract

package/generated/.opencode/agdf-interaction-locales.json

@@ -39,6 +39,25 @@
         "breadcrumbOpen": "\u25cb",
         "breadcrumbSeparator": " \u00b7 "
       },
+      "scopeClassification": {
+        "title": "AGDF scope classification",
+        "field": "Field",
+        "value": "Value",
+        "classification": "Classification",
+        "mode": {
+          "quick_task": "Quick Task",
+          "verified_change": "Verified Change"
+        },
+        "boundary": {
+          "inside": "Trivial change boundary satisfied",
+          "outside": "Outside trivial change boundary"
+        },
+        "grounds": "UR trigger evaluation",
+        "allowed": "Currently allowed",
+        "forbidden": "Remains forbidden",
+        "escalation": "Escalation triggers",
+        "challenge": "Challenge path"
+      },
       "internalStateLabels": {
         "verifiedChange": "Compact change under review",
         "verifiedChangeEscalated": "Escalated to structured delivery",
@@ -246,6 +265,25 @@
         "breadcrumbOpen": "\u25cb",
         "breadcrumbSeparator": " \u00b7 "
       },
+      "scopeClassification": {
+        "title": "AGDF-Scope-Klassifizierung",
+        "field": "Feld",
+        "value": "Wert",
+        "classification": "Klassifizierung",
+        "mode": {
+          "quick_task": "Quick Task",
+          "verified_change": "Verified Change"
+        },
+        "boundary": {
+          "inside": "Trivial-Change-Boundary erfüllt",
+          "outside": "Außerhalb der Trivial-Change-Boundary"
+        },
+        "grounds": "UR-Trigger-Evaluation",
+        "allowed": "Aktuell erlaubt",
+        "forbidden": "Bleibt verboten",
+        "escalation": "Eskalationsauslöser",
+        "challenge": "Widerspruchspfad"
+      },
       "internalStateLabels": {
         "verifiedChange": "Kompakte Änderung wird geprüft",
         "verifiedChangeEscalated": "Eskaliert zu structured delivery",

package/generated/.opencode/contracts/control-scaffold.md

@@ -89,6 +89,10 @@ Helper commands are deterministic proof and automation interfaces, not the norma
 Machine-readable outputs should stay agent-friendly: stable decisions, blocking gate or current gate, missing approval, allowed outputs, forbidden outputs, next step, evidence and findings.
 They make the repository state checkable, but they do not replace the native skill workflow or the durable control artefacts.
 
+### Repository Activation Diagnosis Boundary
+
+`doctor --json` on the resolved surface-local validator is the sole canonical, code-owned, tool-shell-safe activation probe. Plugin `AGDF_*` environment variables set by the OpenCode `shell.env` hook are an internal plugin status channel consumed by `opencode-status`, not an agent-facing diagnosis proof; host shell-env propagation to spawned tool shells is not guaranteed and is OpenCode-owned. A relative glob or `grep` for `.agdf/control/config.json` must not be used as proof of presence or absence of `.agdf/control/config.json`; an absolute `read` or the canonical CLI probe is required.
+
 ## Delivery Map
 
 `delivery-map --json` is the machine-readable delivery picture for the selected canonical control state.

package/generated/.opencode/contracts/interaction.md

@@ -338,6 +338,25 @@ repeat the sentence later in the same request. Existing-run status inspection re
 uses the existing status projection; this branch must not create a second status-card or narration
 owner.
 
+### Scope Classification Card
+
+When `agdf-gate-check` classifies a fresh scope as ungated (Quick Task or Trivial Change Boundary),
+the agent consumes the canonical `scope_classification.markdown` verbatim from
+`renderScopeClassificationCard` in `create-agdf/lib/interaction-presentation.js`. The card is a
+compact, localized, non-authorizing projection of the classification: mode, boundary result,
+UR-trigger evaluation, one currently-allowed line, one remains-forbidden line, escalation triggers
+and the challenge path. It carries `authorizes: false` and never renders approval controls.
+
+The card renders exactly once per fresh-scope ungated classification, before work proceeds. It must
+not appear for gated scopes, internal steps of a selected run, or as a substitute for the two-card
+approval envelope. Read-only requests keep the single read-only orientation sentence above; the
+scope classification card and the read-only orientation are mutually exclusive for the same request.
+
+If the classification input is missing, unknown, contradictory or the locale section is incomplete,
+the renderer returns `null` and the agent fails closed to the existing ceremony — never
+model-reconstructed Markdown. The card introduces no gate, no approval value, no persistence and no
+second presentation owner. `agdf-gate-check` must not maintain a skill-local card template.
+
 Exact textual approvals remain canonical and fully supported on every surface. If native capability availability or safety is unknown, use the textual fallback. Host permission, plan approval, native question presentation, timeout/default behavior, hook output and agent messages never carry AGDF gate authority by themselves.
 
 ### Interaction Locale Contract

package/generated/.opencode/skills/agdf-gate-check/SKILL.md

@@ -69,6 +69,12 @@ for a native-capable adapter.
 
 The CLI reports are validators and JSON evidence, not the primary user experience, not a required ritual for normal work and not a second rule system. If a report says `blocked`, do not continue with later-gate artefacts until the reported blocker is resolved.
 
+## Repository Activation Diagnosis
+
+`doctor --json` on the resolved surface-local validator is the sole canonical, code-owned, tool-shell-safe activation probe. Determine whether a repository is AGDF-active through `doctor --json` (or `gate-check --json` for a selected run), not through plugin `AGDF_*` environment variables, not through a relative glob, not through a relative `grep`, and not through a relative `read` of `.agdf/control/config.json`.
+
+Plugin `AGDF_*` environment variables set by the OpenCode `shell.env` hook are convenience only and must not be used as the only proof of activation; host shell-env propagation to spawned tool shells is not guaranteed and is OpenCode-owned, not AGDF-owned. A relative glob or `grep` for `.agdf/control/config.json` must not be used as proof of presence or absence of `.agdf/control/config.json`; an absolute `read` or the canonical CLI probe is required.
+
 ## Native Interaction Path
 
 `../../contracts/interaction.md` is the complete normative owner for interaction kinds, locale,
@@ -163,6 +169,15 @@ If a status is not explicit, do not assume it is satisfied.
 11. When `.agdf/control/` is missing or incomplete, make the next allowed artefact action explicit. For a fresh request, that means draft the minimal UR in the response, then request `Approval: UR`. Do not write a full control scaffold unless durable control state was explicitly requested or is already the repository's live AGDF working state.
 12. If branch, workspace and durable artefacts disagree, do not choose a scope silently; report the ambiguity and ask for the smallest clarifying gate action.
 
+### Scope Classification Output
+When this skill classifies a fresh scope as ungated (Quick Task or Trivial Change Boundary), consume
+`scope_classification.markdown` verbatim from `renderScopeClassificationCard` in
+`../../contracts/interaction.md` § Scope Classification Card. The card is a compact, localized,
+non-authorizing projection: mode, boundary, UR-trigger evaluation, one allowed line, one forbidden
+line, escalation triggers and the challenge path. Do not maintain or render a skill-local
+classification card template. If the renderer returns `null`, fail closed to the existing ceremony
+and do not model-reconstruct Markdown.
+
 ## Output
 Keep the result short and operational. For a status-only response, consume the Runtime Contract's
 code-owned `status_presentation.markdown` verbatim. It is the compact localized operational Run

package/generated/plugins/agdf/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.11.0",
+  "version": "0.11.3",
   "description": "AI Governance & Delivery Framework (AGDF) brings an operating system for governed AI-assisted delivery to Claude Code, combining workflow skills, control templates and machine-readable repository checks for gate decisions, Brownfield analysis, task-plan review, QA decisions, durable run state and auditable closeout.",
   "keywords": [
     "agentic",

package/generated/plugins/agdf/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.11.0",
+  "version": "0.11.3",
   "description": "Operating system for governed AI-assisted delivery.",
   "author": {
     "name": "Arndt Gold",

package/generated/plugins/agdf/meta/agdf-interaction-locales.json

@@ -39,6 +39,25 @@
         "breadcrumbOpen": "\u25cb",
         "breadcrumbSeparator": " \u00b7 "
       },
+      "scopeClassification": {
+        "title": "AGDF scope classification",
+        "field": "Field",
+        "value": "Value",
+        "classification": "Classification",
+        "mode": {
+          "quick_task": "Quick Task",
+          "verified_change": "Verified Change"
+        },
+        "boundary": {
+          "inside": "Trivial change boundary satisfied",
+          "outside": "Outside trivial change boundary"
+        },
+        "grounds": "UR trigger evaluation",
+        "allowed": "Currently allowed",
+        "forbidden": "Remains forbidden",
+        "escalation": "Escalation triggers",
+        "challenge": "Challenge path"
+      },
       "internalStateLabels": {
         "verifiedChange": "Compact change under review",
         "verifiedChangeEscalated": "Escalated to structured delivery",
@@ -246,6 +265,25 @@
         "breadcrumbOpen": "\u25cb",
         "breadcrumbSeparator": " \u00b7 "
       },
+      "scopeClassification": {
+        "title": "AGDF-Scope-Klassifizierung",
+        "field": "Feld",
+        "value": "Wert",
+        "classification": "Klassifizierung",
+        "mode": {
+          "quick_task": "Quick Task",
+          "verified_change": "Verified Change"
+        },
+        "boundary": {
+          "inside": "Trivial-Change-Boundary erfüllt",
+          "outside": "Außerhalb der Trivial-Change-Boundary"
+        },
+        "grounds": "UR-Trigger-Evaluation",
+        "allowed": "Aktuell erlaubt",
+        "forbidden": "Bleibt verboten",
+        "escalation": "Eskalationsauslöser",
+        "challenge": "Widerspruchspfad"
+      },
       "internalStateLabels": {
         "verifiedChange": "Kompakte Änderung wird geprüft",
         "verifiedChangeEscalated": "Eskaliert zu structured delivery",

package/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.11.0",
+  "version": "0.11.3",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Operating system for governed AI-assisted delivery.",

package/generated/plugins/agdf/meta/contracts/control-scaffold.md

@@ -89,6 +89,10 @@ Helper commands are deterministic proof and automation interfaces, not the norma
 Machine-readable outputs should stay agent-friendly: stable decisions, blocking gate or current gate, missing approval, allowed outputs, forbidden outputs, next step, evidence and findings.
 They make the repository state checkable, but they do not replace the native skill workflow or the durable control artefacts.
 
+### Repository Activation Diagnosis Boundary
+
+`doctor --json` on the resolved surface-local validator is the sole canonical, code-owned, tool-shell-safe activation probe. Plugin `AGDF_*` environment variables set by the OpenCode `shell.env` hook are an internal plugin status channel consumed by `opencode-status`, not an agent-facing diagnosis proof; host shell-env propagation to spawned tool shells is not guaranteed and is OpenCode-owned. A relative glob or `grep` for `.agdf/control/config.json` must not be used as proof of presence or absence of `.agdf/control/config.json`; an absolute `read` or the canonical CLI probe is required.
+
 ## Delivery Map
 
 `delivery-map --json` is the machine-readable delivery picture for the selected canonical control state.

package/generated/plugins/agdf/meta/contracts/interaction.md

@@ -338,6 +338,25 @@ repeat the sentence later in the same request. Existing-run status inspection re
 uses the existing status projection; this branch must not create a second status-card or narration
 owner.
 
+### Scope Classification Card
+
+When `gate-check` classifies a fresh scope as ungated (Quick Task or Trivial Change Boundary),
+the agent consumes the canonical `scope_classification.markdown` verbatim from
+`renderScopeClassificationCard` in `create-agdf/lib/interaction-presentation.js`. The card is a
+compact, localized, non-authorizing projection of the classification: mode, boundary result,
+UR-trigger evaluation, one currently-allowed line, one remains-forbidden line, escalation triggers
+and the challenge path. It carries `authorizes: false` and never renders approval controls.
+
+The card renders exactly once per fresh-scope ungated classification, before work proceeds. It must
+not appear for gated scopes, internal steps of a selected run, or as a substitute for the two-card
+approval envelope. Read-only requests keep the single read-only orientation sentence above; the
+scope classification card and the read-only orientation are mutually exclusive for the same request.
+
+If the classification input is missing, unknown, contradictory or the locale section is incomplete,
+the renderer returns `null` and the agent fails closed to the existing ceremony — never
+model-reconstructed Markdown. The card introduces no gate, no approval value, no persistence and no
+second presentation owner. `gate-check` must not maintain a skill-local card template.
+
 Exact textual approvals remain canonical and fully supported on every surface. If native capability availability or safety is unknown, use the textual fallback. Host permission, plan approval, native question presentation, timeout/default behavior, hook output and agent messages never carry AGDF gate authority by themselves.
 
 ### Interaction Locale Contract

package/generated/plugins/agdf/runtime/create-agdf/generated/plugins/agdf/meta/agdf-interaction-locales.json

@@ -39,6 +39,25 @@
         "breadcrumbOpen": "\u25cb",
         "breadcrumbSeparator": " \u00b7 "
       },
+      "scopeClassification": {
+        "title": "AGDF scope classification",
+        "field": "Field",
+        "value": "Value",
+        "classification": "Classification",
+        "mode": {
+          "quick_task": "Quick Task",
+          "verified_change": "Verified Change"
+        },
+        "boundary": {
+          "inside": "Trivial change boundary satisfied",
+          "outside": "Outside trivial change boundary"
+        },
+        "grounds": "UR trigger evaluation",
+        "allowed": "Currently allowed",
+        "forbidden": "Remains forbidden",
+        "escalation": "Escalation triggers",
+        "challenge": "Challenge path"
+      },
       "internalStateLabels": {
         "verifiedChange": "Compact change under review",
         "verifiedChangeEscalated": "Escalated to structured delivery",
@@ -246,6 +265,25 @@
         "breadcrumbOpen": "\u25cb",
         "breadcrumbSeparator": " \u00b7 "
       },
+      "scopeClassification": {
+        "title": "AGDF-Scope-Klassifizierung",
+        "field": "Feld",
+        "value": "Wert",
+        "classification": "Klassifizierung",
+        "mode": {
+          "quick_task": "Quick Task",
+          "verified_change": "Verified Change"
+        },
+        "boundary": {
+          "inside": "Trivial-Change-Boundary erfüllt",
+          "outside": "Außerhalb der Trivial-Change-Boundary"
+        },
+        "grounds": "UR-Trigger-Evaluation",
+        "allowed": "Aktuell erlaubt",
+        "forbidden": "Bleibt verboten",
+        "escalation": "Eskalationsauslöser",
+        "challenge": "Widerspruchspfad"
+      },
       "internalStateLabels": {
         "verifiedChange": "Kompakte Änderung wird geprüft",
         "verifiedChangeEscalated": "Eskaliert zu structured delivery",

package/generated/plugins/agdf/runtime/create-agdf/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.11.0",
+  "version": "0.11.3",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Operating system for governed AI-assisted delivery.",

package/generated/plugins/agdf/runtime/create-agdf/lib/interaction-presentation.js

@@ -349,6 +349,69 @@ export function renderOperationalStatusCard(statusCard, {
   });
 }
 
+export function renderScopeClassificationCard(classification, {
+  registry,
+  requestedLocale,
+} = {}) {
+  if (!plainObject(classification)) return null;
+  const outcome = String(classification.outcome ?? "").trim();
+  const mode = String(classification.mode ?? "").trim();
+  const trivialBoundary = String(classification.trivial_boundary ?? "").trim();
+  const urTriggerEvaluation = String(classification.ur_trigger_evaluation ?? "").trim();
+  const allowedSummary = String(classification.allowed_summary ?? "").trim();
+  const forbiddenSummary = String(classification.forbidden_summary ?? "").trim();
+  const escalationTriggers = Array.isArray(classification.escalation_triggers)
+    ? classification.escalation_triggers.map((item) => String(item ?? "").trim()).filter(Boolean)
+    : [];
+  const challengePath = String(classification.challenge_path ?? "").trim();
+
+  if (outcome !== "ungated") return null;
+  if (!["quick_task", "verified_change"].includes(mode)) return null;
+  if (!["inside", "outside"].includes(trivialBoundary)) return null;
+  if (!urTriggerEvaluation || !allowedSummary || !forbiddenSummary || !challengePath) return null;
+  if (escalationTriggers.length === 0) return null;
+
+  let locale;
+  try {
+    locale = resolvePresentationLocale(registry, requestedLocale);
+  } catch {
+    return null;
+  }
+  if (!locale) return null;
+
+  const pack = localePack(registry, locale);
+  const labels = pack?.scopeClassification;
+  if (!plainObject(labels)) return null;
+
+  const modeLabel = labels.mode?.[mode] ?? mode;
+  const boundaryLabel = labels.boundary?.[trivialBoundary] ?? trivialBoundary;
+
+  const rows = [
+    [labels.classification, `${modeLabel} · ${boundaryLabel}`],
+    [labels.grounds, urTriggerEvaluation],
+    [labels.allowed, allowedSummary],
+    [labels.forbidden, forbiddenSummary],
+    [labels.escalation, escalationTriggers.join("; ")],
+    [labels.challenge, challengePath],
+  ];
+
+  const markdown = [
+    `## ${labels.title ?? "AGDF scope classification"}`,
+    "",
+    `| ${labels.field ?? "Field"} | ${labels.value ?? "Value"} |`,
+    "|---|---|",
+    ...rows.map(([label, value]) => `| ${markdownCell(label)} | ${markdownCell(value)} |`),
+  ].join("\n");
+
+  return Object.freeze({
+    schema_version: "1",
+    semantic_block: "scope_classification_card",
+    presentation_language: locale,
+    markdown,
+    authorizes: false,
+  });
+}
+
 export function gateOptions(registry, requestedLocale, gate, { includeCancel = false } = {}) {
   const pack = localePack(registry, requestedLocale);
   const options = [

package/generated/plugins/agdf/runtime/create-agdf/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-agdf",
-  "version": "0.11.0",
+  "version": "0.11.3",
   "description": "Bootstrap AGDF repository-local plugin files, Copilot/OpenCode instructions, skills, control files and machine-readable checks.",
   "type": "module",
   "files": [

package/generated/plugins/agdf/runtime/runtime-manifest.json

@@ -2,7 +2,7 @@
   "schema_version": "1",
   "generated": true,
   "source": "create-agdf/cli",
-  "version": "0.11.0",
+  "version": "0.11.3",
   "entrypoint": "create-agdf/bin/agdf-validator.js",
-  "digest": "55653e0c7f7d732bd4bf2973f5208fea23c6d7edb6a4616499c818d1089c4f3b"
+  "digest": "217946af2b7c5782e9a620c18a0aa3ce351993b4bda8874bbfbf7d8406cc48ff"
 }

package/generated/plugins/agdf/scripts/check-runtime-integrity.mjs

@@ -376,6 +376,58 @@ if (!gateCheckSkill.includes("`status_presentation.markdown` verbatim")) {
 if (gateCheckSkill.includes("| Run status | Value |")) {
   failures.push("gate-check must not maintain a second operational status-card template");
 }
+if (!gateCheckSkill.includes("## Repository Activation Diagnosis")) {
+  failures.push("gate-check must own the repository activation diagnosis section");
+}
+if (!gateCheckSkill.includes("`doctor --json` on the resolved surface-local validator is the sole canonical, code-owned, tool-shell-safe activation probe")) {
+  failures.push("gate-check must name doctor --json as the sole canonical activation probe");
+}
+if (!gateCheckSkill.includes("must not be used as the only proof of activation")) {
+  failures.push("gate-check must forbid AGDF_* env vars as sole activation proof");
+}
+if (!gateCheckSkill.includes("must not be used as proof of presence or absence of `.agdf/control/config.json`")) {
+  failures.push("gate-check must forbid relative glob/grep as activation proof");
+}
+for (const antiPattern of [
+  "AGDF_CONTROL_DIR` to confirm",
+  "AGDF_CONTROL_DIR` to verify",
+  "AGDF_CONTROL_DIR` to check",
+  "relative glob to confirm",
+  "relative glob to verify",
+]) {
+  if (gateCheckSkill.includes(antiPattern)) failures.push(`gate-check must not instruct agents to use anti-pattern diagnosis: ${antiPattern}`);
+}
+if (!runtimeContract.includes("### Repository Activation Diagnosis Boundary")) {
+  failures.push("control-scaffold contract must own the repository activation diagnosis boundary");
+}
+if (!runtimeContract.includes("### Scope Classification Card")) {
+  failures.push("interaction contract must own the scope classification card section");
+}
+if (!gateCheckSkill.includes("scope_classification.markdown` verbatim")) {
+  failures.push("gate-check must consume the canonical scope classification projection verbatim");
+}
+if (gateCheckSkill.includes("## Scope Classification Card Template") || gateCheckSkill.includes("| Classification | Mode | Boundary |")) {
+  failures.push("gate-check must not maintain a skill-local scope classification card template");
+}
+const interactionPresentationPath = join(pluginRoot, "..", "create-agdf", "lib", "interaction-presentation.js");
+if (sourceMode && isFile(interactionPresentationPath)) {
+  const interactionPresentation = read(interactionPresentationPath);
+  if (!interactionPresentation.includes("export function renderScopeClassificationCard")) {
+    failures.push("interaction-presentation.js must export renderScopeClassificationCard");
+  }
+}
+for (const locale of ["en", "de"]) {
+  const pack = interactionLocales?.locales?.[locale];
+  if (!pack?.scopeClassification?.title || !pack?.scopeClassification?.mode?.quick_task || !pack?.scopeClassification?.challenge) {
+    failures.push(`Interaction locale ${locale} missing scopeClassification section keys`);
+  }
+}
+if (!runtimeContract.includes("not an agent-facing diagnosis proof")) {
+  failures.push("control-scaffold contract must classify AGDF_* env vars as non-agent-facing diagnosis");
+}
+if (!runtimeContract.includes("must not be used as proof of presence or absence of `.agdf/control/config.json`")) {
+  failures.push("control-scaffold contract must forbid relative glob/grep as activation proof");
+}
 if (!runtimeContract.includes("### Deterministic Operational Presentation")
   || !/must\s+not reconstruct a table/.test(runtimeContract)) {
   failures.push("interaction contract must own deterministic operational status presentation");

package/generated/plugins/agdf/skills/gate-check/SKILL.md

@@ -69,6 +69,12 @@ for a native-capable adapter.
 
 The CLI reports are validators and JSON evidence, not the primary user experience, not a required ritual for normal work and not a second rule system. If a report says `blocked`, do not continue with later-gate artefacts until the reported blocker is resolved.
 
+## Repository Activation Diagnosis
+
+`doctor --json` on the resolved surface-local validator is the sole canonical, code-owned, tool-shell-safe activation probe. Determine whether a repository is AGDF-active through `doctor --json` (or `gate-check --json` for a selected run), not through plugin `AGDF_*` environment variables, not through a relative glob, not through a relative `grep`, and not through a relative `read` of `.agdf/control/config.json`.
+
+Plugin `AGDF_*` environment variables set by the OpenCode `shell.env` hook are convenience only and must not be used as the only proof of activation; host shell-env propagation to spawned tool shells is not guaranteed and is OpenCode-owned, not AGDF-owned. A relative glob or `grep` for `.agdf/control/config.json` must not be used as proof of presence or absence of `.agdf/control/config.json`; an absolute `read` or the canonical CLI probe is required.
+
 ## Native Interaction Path
 
 `../../meta/contracts/interaction.md` is the complete normative owner for interaction kinds, locale,
@@ -163,6 +169,15 @@ If a status is not explicit, do not assume it is satisfied.
 11. When `.agdf/control/` is missing or incomplete, make the next allowed artefact action explicit. For a fresh request, that means draft the minimal UR in the response, then request `Approval: UR`. Do not write a full control scaffold unless durable control state was explicitly requested or is already the repository's live AGDF working state.
 12. If branch, workspace and durable artefacts disagree, do not choose a scope silently; report the ambiguity and ask for the smallest clarifying gate action.
 
+### Scope Classification Output
+When this skill classifies a fresh scope as ungated (Quick Task or Trivial Change Boundary), consume
+`scope_classification.markdown` verbatim from `renderScopeClassificationCard` in
+`../../meta/contracts/interaction.md` § Scope Classification Card. The card is a compact, localized,
+non-authorizing projection: mode, boundary, UR-trigger evaluation, one allowed line, one forbidden
+line, escalation triggers and the challenge path. Do not maintain or render a skill-local
+classification card template. If the renderer returns `null`, fail closed to the existing ceremony
+and do not model-reconstruct Markdown.
+
 ## Output
 Keep the result short and operational. For a status-only response, consume the Runtime Contract's
 code-owned `status_presentation.markdown` verbatim. It is the compact localized operational Run

package/lib/interaction-presentation.js

@@ -349,6 +349,69 @@ export function renderOperationalStatusCard(statusCard, {
   });
 }
 
+export function renderScopeClassificationCard(classification, {
+  registry,
+  requestedLocale,
+} = {}) {
+  if (!plainObject(classification)) return null;
+  const outcome = String(classification.outcome ?? "").trim();
+  const mode = String(classification.mode ?? "").trim();
+  const trivialBoundary = String(classification.trivial_boundary ?? "").trim();
+  const urTriggerEvaluation = String(classification.ur_trigger_evaluation ?? "").trim();
+  const allowedSummary = String(classification.allowed_summary ?? "").trim();
+  const forbiddenSummary = String(classification.forbidden_summary ?? "").trim();
+  const escalationTriggers = Array.isArray(classification.escalation_triggers)
+    ? classification.escalation_triggers.map((item) => String(item ?? "").trim()).filter(Boolean)
+    : [];
+  const challengePath = String(classification.challenge_path ?? "").trim();
+
+  if (outcome !== "ungated") return null;
+  if (!["quick_task", "verified_change"].includes(mode)) return null;
+  if (!["inside", "outside"].includes(trivialBoundary)) return null;
+  if (!urTriggerEvaluation || !allowedSummary || !forbiddenSummary || !challengePath) return null;
+  if (escalationTriggers.length === 0) return null;
+
+  let locale;
+  try {
+    locale = resolvePresentationLocale(registry, requestedLocale);
+  } catch {
+    return null;
+  }
+  if (!locale) return null;
+
+  const pack = localePack(registry, locale);
+  const labels = pack?.scopeClassification;
+  if (!plainObject(labels)) return null;
+
+  const modeLabel = labels.mode?.[mode] ?? mode;
+  const boundaryLabel = labels.boundary?.[trivialBoundary] ?? trivialBoundary;
+
+  const rows = [
+    [labels.classification, `${modeLabel} · ${boundaryLabel}`],
+    [labels.grounds, urTriggerEvaluation],
+    [labels.allowed, allowedSummary],
+    [labels.forbidden, forbiddenSummary],
+    [labels.escalation, escalationTriggers.join("; ")],
+    [labels.challenge, challengePath],
+  ];
+
+  const markdown = [
+    `## ${labels.title ?? "AGDF scope classification"}`,
+    "",
+    `| ${labels.field ?? "Field"} | ${labels.value ?? "Value"} |`,
+    "|---|---|",
+    ...rows.map(([label, value]) => `| ${markdownCell(label)} | ${markdownCell(value)} |`),
+  ].join("\n");
+
+  return Object.freeze({
+    schema_version: "1",
+    semantic_block: "scope_classification_card",
+    presentation_language: locale,
+    markdown,
+    authorizes: false,
+  });
+}
+
 export function gateOptions(registry, requestedLocale, gate, { includeCancel = false } = {}) {
   const pack = localePack(registry, requestedLocale);
   const options = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "create-agdf",
-  "version": "0.11.0",
+  "version": "0.11.3",
   "description": "Bootstrap AGDF repository-local plugin files, Copilot/OpenCode instructions, skills, control files and machine-readable checks.",
   "type": "module",
   "files": [