create-agdf 0.20.1 → 0.30.0

package/generated/plugins/copilot/agdf/skills/agdf-prd-definition/SKILL.md

@@ -35,9 +35,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `prd-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `prd-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill prd-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/copilot/agdf/skills/agdf-qa-gate/SKILL.md

@@ -51,9 +51,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `qa-gate`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `qa-gate`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill qa-gate`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -74,12 +75,11 @@ evidence into `pass`, or claim native qualification. Only a deliberate human dec
 new exact presentation can accept deviations through the existing approval owner. The technical
 QA result and open findings remain unchanged and accompany UAT and OR.
 
-When post-CD+Tests review evidence exists, present the Runtime Contract's derived Quality
-Readiness projection before the detailed QA report: Plan coverage, Solution integrity, Code
-quality and QA decision in that order. Name `qa-gate` as the sole decision owner, show one
-decisive reason and one permissible next action, and keep detailed reports as evidence links or
-on-demand detail. The projection is non-authorizing and must not replace the Run Status Card,
-Gate Transition Card or the durable QA report.
+For routine technical pass, use quality.md Quality Readiness Projection's concise result
+and report reference. At revise/block show its four dimensions in the canonical order,
+with the decisive source/reason and next permissible action. Explicit detail/status
+requests may show the full overview even at pass. This derived, non-authorizing output
+never replaces durable reports, complete gate material or deliberate human decisions.
 
 ## Resolved Target Run And Evidence Discovery
 
@@ -107,6 +107,8 @@ QA owns the Quality Readiness and QA decision only. It must not reconstruct or p
 Card, Gate Transition Card, native QA card or interactive QA card. Operational run status and gate
 approval orientation remain owned by gate-check and the Interaction Contract.
 
+Apply quality.md Proportionate Tests And Evidence and Verification Effectiveness And Completion. Assess evidence applicability and targeted finding re-verification; sufficient checking ends redundant collection, never required reviews or approvals. Missing proof and accepted deviations retain their original technical effect.
+
 ## Rules
 1. No QA pass without strong evidence.
 2. TP is the reference, not merely working code.
@@ -183,9 +185,9 @@ If Context Graph impact is relevant, include the fields from `../contracts/conte
 
 ### Compact Chat Output
 
-At `pass`: one line — `QA: pass — <one-line summary>`. Reference the durable QA report
-path. Do not show the Quality Readiness projection or evidence inventory in chat.
-At `revise`/`block`: show the decisive dimension, reason and next action.
+Follow quality.md Quality Readiness Projection: routine `pass` is one concise line
+with the durable report reference; explicit detail requests may show the overview.
+At `revise`/`block`, show its four dimensions and the decisive source/reason/next action.
 
 ## Decision Guidance
 - `pass`: required TP tasks are done, evidence is strong, no blocking Brownfield or solution-integrity risk remains.

package/generated/plugins/copilot/agdf/skills/agdf-release-or/SKILL.md

@@ -56,9 +56,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `release-or`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `release-or`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill release-or`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -66,9 +67,11 @@ On skill_continuation use only its target/control. Without that tool and a valid
 or help retries. Dispatch never authorizes.
 
 OR-specific output must make gate status, delivered and intentionally not delivered content, missing approvals, missing evidence, risks, retained fallbacks, and the next permissible step visible.
-When `.agdf/control/` is present, persist or link the OR under `.agdf/control/artefacts/<key>/OR.md` and reference it from the selected canonical `RUN_STATE.md` or `MASTER_BACKLOG.md` when it is steering-relevant.
+When `.agdf/control/` is present, persist or link the OR under `.agdf/control/runs/<run_id>/documents/OR.md` and reference it from the selected canonical `RUN_STATE.md` when it is steering-relevant; no central backlog update is required.
 Use the Runtime Contract definition of `Relevant Run` to decide whether OR is mandatory or whether a Quick Task mini-closeout is enough.
-Close a `quick_task` with the validator's `run-step --step closeout --result --evidence --risk --next`.
+Close a `quick_task` through bound `agdf_closeout/closeout.record`, preserving its exact
+confirmation and original UUID. If that MCP group is unavailable, use the supplied
+validator's `run-step --step closeout --result --evidence --risk --next`.
 
 ## Rules
 1. OR is always allowed and mandatory for relevant runs as defined in the Runtime Contract.
@@ -86,7 +89,7 @@ Close a `quick_task` with the validator's `run-step --step closeout --result --e
 13. Keep machine status normalization in the CLI; do not write internal snake_case status values into the human-facing backlog.
 14. Reconcile Context Graph impact before clean closeout: report `context_graph_reconciliation: resolved | not_applicable | open_gap`.
 15. If Context Graph work remains unresolved, report it as an explicit open gap and do not describe the run as cleanly handoff-ready.
-16. After writing or updating `MASTER_BACKLOG.md`, run `agdf_inspect` with `operation: doctor` when the host lists it, otherwise `doctor --json` (or the locally available equivalent) and resolve any `AGDF_BACKLOG_STATUS_UNKNOWN` or `AGDF_BACKLOG_ARTEFACT_LABEL_UNKNOWN` finding before closeout. See the AGDF control scaffold's `MASTER_BACKLOG.md` template Rules section for the canonical status/artefact label vocabulary.
+16. Preserve optional legacy backlog information without new synchronization or locks. Check the selected Run and registered closeout evidence through the existing doctor/gate owners; legacy-only diagnostics cannot veto unrelated valid Run work. Explicit supported recovery alone may finish an old journal's already-recorded backlog output.
 17. When Delivery Map exposes `parent_reconciliation`, report that evaluated object without
     rediscovering or reclassifying the relationship. Keep Child completion and Parent coordination
     visibly separate. An `open` result retains exactly one next action and does not invalidate Child

package/generated/plugins/copilot/agdf/skills/agdf-sd-definition/SKILL.md

@@ -8,7 +8,8 @@ description: "Use this skill for this scope: bound SD content. Boundary: content
 ## Runtime Contract
 
 Use the returned `continuation.runtime_contracts` after `skill_continuation`. If absent, load
-`../contracts/sd-definition.md` and `../contracts/gate-artifact-preparation.md`
+`../contracts/sd-definition.md`, `../contracts/gate-artifact-preparation.md`
+and `../contracts/quality.md`
 through the supplied contract reader or bundled files.
 Missing contract or invalid binding: stop. This skill owns SD content; gate-check owns readiness.
 
@@ -35,9 +36,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `sd-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `sd-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill sd-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/copilot/agdf/skills/agdf-task-plan-review/SKILL.md

@@ -48,9 +48,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `task-plan-review`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `task-plan-review`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill task-plan-review`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -62,6 +63,8 @@ If `context_graph_required_action` is not `none`, the affected task is complete
 Applicable review gaps must use `../contracts/quality.md` §Normalized Review Gaps. This skill
 must not maintain its own type-to-route mapping.
 
+Verify scoped coverage, reuse applicability and remaining obligations under quality.md Proportionate Tests And Evidence and Verification Effectiveness And Completion. Reuse valid results without replacing this review assessment; a later gate alone requires no recollection.
+
 ## Rules
 1. The Task Plan is the reference, not plausible code.
 2. No assumptions without evidence.

package/generated/plugins/copilot/agdf/skills/agdf-tp-definition/SKILL.md

@@ -8,7 +8,8 @@ description: "Use this skill for this scope: bound TP content. Boundary: content
 ## Runtime Contract
 
 Use the returned `continuation.runtime_contracts` after `skill_continuation`. If absent, load
-`../contracts/tp-definition.md` and `../contracts/gate-artifact-preparation.md`
+`../contracts/tp-definition.md`, `../contracts/gate-artifact-preparation.md`
+and `../contracts/quality.md`
 through the supplied contract reader or bundled files.
 Missing contract or invalid binding: stop. This skill owns TP content; gate-check owns readiness.
 
@@ -35,9 +36,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `tp-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `tp-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill tp-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/copilot/agdf/skills/agdf-ur-definition/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: agdf-ur-definition
-description: "Use this skill for this scope: bound UR drafting, clarification or revision. Boundary: content only; preserves approved intent. The requested effect, not discovery, decides AGDF activation."
+description: "Use this skill for this scope: UR drafting in planning scope or a bound Run. Boundary: content only; no start or approval authority. The requested effect, not discovery, decides AGDF activation."
 ---
 
 # ur-definition
@@ -34,9 +34,15 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `ur-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `ur-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+For deliberate pre-Run planning, pass the confirmed `planning` scope instead of `run_id`.
+Use `plan-<future mutation UUID>` and null expected digest for capture, or the inspected
+plan identity/current digest for refinement. No delivery intake/continue/revision fields.
+Follow only `phase: planned_ur_definition`, shared template/contract and planning-scoped typed
+writers. Missing compatible Core stops before mutation; no CLI/shell writer or Run-assignment fallback.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill ur-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -51,4 +57,6 @@ review timing in the UR; creation belongs to the later bound analytical step.
 Set the initial `Preview requirement` metadata according to the UR contract; a required
 interactive before-PRD preview uses `before_prd_interactive`, otherwise `none`.
 Write only the supplied unapproved UR, preserving uncertainty and explicit human approval.
-After canonical recording, redispatch gate-check; use its fresh presentation and wait.
+In Run mode, after canonical recording redispatch gate-check; use its fresh presentation and wait.
+In planning mode, report the saved draft, source and remaining questions without requesting a
+gate approval. Only a later explicit selected-source start request uses the Core handoff contract.

package/generated/plugins/copilot/agdf/skills/agdf-ux-intent-definition/SKILL.md

@@ -40,9 +40,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `ux-intent-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `ux-intent-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill ux-intent-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -97,7 +98,7 @@ implementation. A requested change to the actual product still follows its exist
 #### Retain a run-bound preview
 
 For a preview used in this bound analysis, save a durable, reopenable copy under
-`.agdf/control/artefacts/<run_id>/previews/<short-name>-v<N>/index.html`, relative to the supplied
+`.agdf/control/runs/<run_id>/evidence/previews/<short-name>-v<N>/index.html`, relative to the supplied
 governance target. Derive the run from the valid assignment, not cwd, recency or another run.
 Resolve containment and reject symlink escapes before writing; never put preview content in
 `runs/<run_id>/RUN_STATE.md`. Use a new unused version for revisions and preserve reviewed versions.
@@ -175,7 +176,7 @@ Populate each field or use an explicit, justified `not_applicable`:
 
 For `blocked`, `blocking_reason`, `open_product_questions`, `affected_outputs`, `evidence`,
 `missing_evidence` and `required_next_step` are mandatory. When durable control state exists, write
-the result to `.agdf/control/artefacts/<run_id>/UX_INTENT_DEFINITION.md` without a Gate or approval field.
+the result to `.agdf/control/runs/<run_id>/documents/UX_INTENT_DEFINITION.md` without a Gate or approval field.
 
 ## Forbidden
 

package/generated/plugins/copilot/agdf/skills/contracts/closeout.md

@@ -65,7 +65,7 @@ An explicit Parent/programme run may project two independent evidence values:
 - `startable: true` requires at least one evidenced `Aggregate | includes | child_run:<run_id>` row
   whose Child has a completed OR;
 - `final_ready: true` additionally requires one valid declared acceptance artefact beneath
-  `.agdf/control/artefacts/`, concrete aggregation evidence and
+  the selected Run documents/evidence roles, concrete aggregation evidence and
   `programme_aggregation_missing_evidence: none`.
 
 `final_ready: true` always implies `startable: true`. Failed prerequisites stay false with explicit

package/generated/plugins/copilot/agdf/skills/contracts/control-scaffold.md

@@ -50,51 +50,68 @@ in the surrounding control artefact when they are relevant.
 
 ### Run-Scoped Control State
 
-Canonical mutable run state lives at `.agdf/control/runs/<run_id>/RUN_STATE.md`, one file per run.
-Repository-level discovery is derived; do not maintain a writable active-run dashboard. Select with
-`--run`, then `AGDF_RUN_ID`, or automatically only when exactly one run is active. Ambiguity fails
-closed. Legacy `AGDF_RUN.md` is migration input or an explicitly rendered non-authoritative projection,
-never a second writable owner. Read-only commands must not migrate state.
-
-`run-create` writes a sealed run. The seal covers the run state and every file listed under
-Artefacts; an unrecorded edit blocks `doctor` and `gate-check` with `AGDF_RUN_SEAL_MISMATCH`. After
-changing either, call `run-update --run <run_id> --revision <revision_id>` before `gate-check`; it
-advances the revision and refuses Approvals changes. Only `run-approve` records an approval. Both run
-on the surface-local validator. The seal detects unrecorded edits; it is not a signature.
-Keep one `Artefacts` row per type: update the existing placeholder row instead of appending another.
-`run-update` and all run writers reject duplicate rows without advancing the revision. Remove the
-extra row and retry `run-update` to record the correction. Duplicate rows in older sealed runs also
-block `doctor` and gate presentation.
-
-When a repository needs durable AGDF state, use the plugin-local `control/` scaffold as the starting point.
-
-- `config.json` stores project language preferences. Use `artifact_language` for generated AGDF artefacts. `chat_language` is the direct-command presentation default; dispatcher calls supply `presentation_language` under their current-request language contract. This presentation override never changes `artifact_language`. Runtime rules remain English. Authoring continuations supply the resolved languages and any required localized approval-summary heading before drafting.
-- `.agdf/control/runs/<run_id>/RUN_STATE.md` is the canonical current-run dashboard; legacy `AGDF_RUN.md` is migration input or an explicit non-authoritative projection.
-- `MASTER_BACKLOG.md` is the living pointer for active delivery work.
-- `BROWNFIELD_REVIEW.md` records the post-UR existing-system view and Mode/Slice Decision before PRD depth or Quick Task execution is chosen.
-- `SOT_REGISTRY.md` prevents parallel sources of truth.
-- `CONTEXT_GRAPH.md` stores durable Brownfield findings, decisions, risks, evidence and exit criteria.
-- `AGENT_QUALITY_CONTRACTS.json` stores reusable block, revise and warning conditions.
-- `memory_target`, `multi_scope_state` and branch/workspace evidence fields make ambiguity and persistence decisions visible without turning chat history into the source of truth.
-- OR reports live under `.agdf/control/artefacts/<key>/OR.md` when a run closeout is steering-relevant or should be auditable beyond the chat.
-
-### Human-readable Master Backlog
-
-The Markdown backlog is a human steering view; CLI reports are its normalized
-machine projection.
-
-- Use readable status labels such as `In progress`, `Awaiting UAT` and
-  `Completed` in Markdown.
-- Use links relative to `MASTER_BACKLOG.md`, such as
-  `[UR](artefacts/<key>/UR.md)`, instead of exposing long raw paths.
-- Keep `Priority`, `Key`, `Work item`, `Status`, `Artefacts`, `Current spec`
-  and `Next step` visible for active and planned work.
-- Keep one canonical template. Generated surface copies remain derived output.
-- Normalize human labels and link targets only at the CLI parser boundary.
-- Existing wide rows, raw paths and snake_case statuses remain supported for
-  backward compatibility.
-
-The scaffold is not a second documentation site. Link to authoritative artefacts instead of copying them.
+Canonical mutable state lives at `.agdf/control/runs/<run_id>/RUN_STATE.md`.
+Only explicit `control_layout: run-folders-v1` and Run version 4 are supported.
+Missing/old/unknown layouts or versions are unsupported, not an empty store or
+an invitation to migrate, reset or fall back. Read-only inspection preserves bytes.
+
+One Run owns `documents/`, `evidence/`, `control/presentations/` and
+`history/` below its directory. Pending operation journals live in `control/` only
+while required; source archives live in `history/revisions/<operation_id>/`.
+The creation receipt and `history/planning/UR.md` preserve handed-off planning
+provenance without an origin JSON copy. Project configuration, templates, SoT,
+curated context and target-wide multi-Run closure previews remain project-wide.
+
+Identity, objective, mode and typed records are canonical. Current gate, approval
+status, current document pointers, document relationships, evidence summaries and
+inventory derive through the existing parser/evaluator boundary. Do not persist
+parallel current tables, a generated state file, global dashboard or maintained index.
+Independent Parent/programme relations use the authored Relationships section;
+derived document bindings never become hand-editable rows.
+
+`run-create` creates a sealed unapproved Run. Current CLI aliases and fixed MCP
+groups share input normalization and captured configuration. Every original UUID
+binds its effective input. Exact replay acknowledges that original effect only;
+changed intent, stale bindings and unknown ownership fail closed. No command
+repairs arbitrary edits by resealing them. Only `approval.record` records a fresh
+deliberate exact gate reply to the frozen presentation. Local seals are cooperative
+integrity checks, not signatures or independent human identity proof.
+
+Current persisted families are Run 4, RunOperation 4, ArtefactBinding 3,
+ApprovalOperation 4, presentation 7, source proposal 3, source receipt 4,
+revision archive 2 and transaction journal 7. Existing resolved/1 wrapping and
+resolution version 1 are mandatory; captured active configuration includes the
+current layout. Unchanged record families retain their current shape. Source
+revision policy 2 preserves its existing eligibility, confirmation, invalidation
+and reassessment boundaries. Content seal domain is agdf-run-seal/2; approval
+seal domain is agdf-approval-seal/4. No old codec/default omission is accepted.
+Current optional QA-deviation and preview payloads retain their capability semantics.
+
+An ArtefactBinding contains exact source/destination and inline reviewer attestation;
+there is no separate RECORD/REVIEW JSON. Internal steps reference their canonical
+EvidenceBinding identity instead of copying report and source-set metadata.
+The writer publishes typed facts and owned output atomically. Independent Run locks,
+resource claims and exact original-operation recovery remain mandatory. Unsupported
+journals and foreign bytes never grant relocation, deletion or recovery permission.
+
+A Run ends as superseded or abandoned only through the current closure preview/apply
+owner with exact deliberate confirmation. The target-wide preview changes no Run.
+Each applied Run gets its own lifecycle receipt; its subsequent writers reject with
+lifecycle_ended. Continuing work needs a new Run. Pending repository closure conflicts
+retain the existing fail-closed boundary.
+
+Planning is UR-only under `planned/<plan_id>/UR.md`. Core inventory derives from
+planned entries and Runs. The optional Codex planning extension authors planning
+inputs through existing ur-definition; explicit source-bound handoff creates one
+unapproved Run. Core does not require that extension. See control/planned-urs.md.
+
+The normative worktree rule is owned by
+[task-target-resolution.md](task-target-resolution.md#worktree-placement-and-assigned-checkout).
+`config.json` stores project language preferences: artifact_language for authored artefacts,
+chat_language for direct presentation defaults; current explicit presentation_language
+never changes artifact_language. Runtime rules remain English.
+Keep config preferences, SoT, context and quality contracts under their existing
+project owners. No central Masterbacklog participates in reading or writing control.
 
 ## Agent-Native Runtime And CLI Verification
 
@@ -126,7 +143,7 @@ They make the repository state checkable, but they do not replace the native ski
 ## Delivery Map
 
 `delivery-map --json` is the machine-readable delivery picture for the selected canonical control state.
-It derives, but does not replace, the selected `RUN_STATE.md` and `MASTER_BACKLOG.md` state.
+It derives from the selected `RUN_STATE.md` and its registered sources. Current inventory also includes independent planned URs.
 
 It must expose:
 

package/generated/plugins/copilot/agdf/skills/contracts/gate-artifact-preparation.md

@@ -4,16 +4,48 @@ This contract guides the `gate-check` skill when canonical gate evaluation retur
 `control.next_operation.type: prepare_gate_artifact`. It is procedural guidance only; canonical
 Run State, gate evaluation and exact approval remain authoritative.
 
+## Typed MCP control transport
+
+When the current host lists the fixed MCP control groups, use them for every eligible control step in Quick Task, Verified Change, Structured Slice and Structured Delivery. External source edits, actual test execution and Git actions remain external work. Read agdf_inspect/operation-contract for exact schemas and agdf_inspect/authoring-inputs for the current versioned template and all exact source chunks. Follow every cursor. Do not require local template/proof discovery, hashing or a validator shell switch.
+
+For explicit first setup, read agdf_inspect/project-state with the confirmed existing Git target and no Run/revision. Only deliberate setup uses agdf_project/project.initialize with the returned target_id and one original UUID. This fixed canonical scaffold operation creates no Run/approval and never repairs/migrates/installs or grants permissions. Matching authored governance is read-only unchanged observation; conflicts/unowned partial states stay protected. After uncertainty inspect operation-status module project.initialize/<original UUID> before exact replay. Setup success returns the creation help next call. No diagnosis or creation implicitly initializes.
+
+When native MCP is unavailable, the installed CLI/validator supports read-only
+`project-state --dir ABSOLUTE_GIT_ROOT --json` and
+`operation-status --dir ABSOLUTE_GIT_ROOT --module project.initialize/ORIGINAL_UUID --json`.
+These share Core facts; optional `--language TAG` selects presentation. This CLI status route
+supports project.initialize only; existing MCP operation families are unchanged. For explicit setup,
+`agdf-project --command-file REQUEST.json` uses the exact project.initialize envelope returned by
+project-state. Preserve target, original UUID, payload and receipt; inspect original status after
+uncertainty before eligible exact replay. Read exits: 0 complete available (including pending),
+2 blocked/unavailable/incomplete, 1 usage error. Unknown/absent never proves nonexecution.
+Missing Run/document, stale revision and runtime failures retain distinct causes. Preserve deleted
+state and original identity; never recreate sources or wait blindly for a known missing path.
+
+Create independent work with agdf_run/run.create using a semantic title and one original operation UUID; observe lost responses with pre-Run operation-status for that original UUID. Never ask the human for Run/revision IDs. An unbound or incomplete inventory cannot establish assignment.
+
+Transfer UTF-8 material using agdf_record/material.stage: begin declares up to four slots and byte counts (128 KiB/file, 512 KiB/set); append supplies exact canonical base64 (no line breaks) of at most 16 KiB raw bytes at the returned offset; seal validates all bytes and returns material references/digests. Requests remain <=64 KiB. Buffers are private to the serving generation, expire after ten minutes/two idle minutes and are bounded to four sets/two MiB. They are not files or approval. Correct a rejected offset/slot/revision using the returned diagnostics; never publish protected files as a workaround. After a generation loss, restage identical semantic bytes, preserve the original mutation UUID and inspect its receipt before retrying. Reference IDs may change; semantic digests may not.
+
+Record UR/internal/evidence/route/review via step.record; replace only a registered unapproved UR with agdf_revise/ur_draft.replace. Formal artefact.record takes the material, exact gate, reviewer, explicit reviewed:true and update_draft. Follow authoring-inputs recording.mode/update_draft and current operation help: initial uses false; explicit replace_unapproved or renew_invalidated_binding uses true and fresh current source/review. draft_registered false after a source revision does not erase historical binding obligations. Effective analytical next_operation selects the actual template/format, including UX reassessment at an outer PRD gate; never substitute the gate template or require source-code lookup. Actual reviewed source mapping remains required; Core retains its reviewed relationship and proof atomically, never inventing an independent semantic review. Approved sources use the existing reviewed source_revision.preview/apply owner, including a staged EVIDENCE JSON proposal; archive/receipt retains its exact logical reference without publishing a generic caller-selected file. Preserve deliberate confirmation and original-UUID recovery.
+
+Verified Change uses verified_change.record phases eligibility/execution, the same read-only Git observations and unchanged compact evaluator. Core captures baseline/actual paths; scope escape escalates. Stage Mini-Closeout in its Verified Change slot and use closeout.record with the returned exact confirmation. Quick Task uses its existing review/evidence and OR-lite owner. No mode accepts hand edits or reseals as a control path. Presentation prepare/deliver follows interaction.md; only a new deliberate exact human reply reaches approval.record.
+
+The following local path/CLI forms remain compatibility fallback for hosts without these listed capabilities. They do not override typed MCP continuations.
+
 ## Common Route
 
-- Use only the supplied `gate`, `artifact_path`, `template_path`, `source_artifacts`, `target`,
+- With MCP use only the returned current gate/Run/revision, bound template and exact source
+  chunks from `authoring-inputs`; its template role and digest identify the version-matched owner.
+  CLI fallback uses only the supplied `gate`, `artifact_path`, `template_path`, `source_artifacts`, `target`,
   `run_id` and `revision_id`. `template_path` is the absolute canonical authoring template from the
   installed, version-matched plugin for PRD, SD, TP or QA Report preparation. Repository scaffold
   copies are derived references only. Do not rediscover or substitute a run, target, source
   artifact or template. A missing or unsafe template blocks authoring without fallback or mutation.
 - Prepare only the named current-gate artifact from the supplied approved sources.
-  Record with `run-step --step artefact --gate <PRD|SD|TP|QA>
-  --evidence .agdf/control/artefacts/<run_id>/<input.json> --run <run_id> --revision <revision_id>`.
+  With MCP use `agdf_record/artefact.record` and the bounded reviewed material above.
+  CLI fallback records with `run-step --step artefact --gate <PRD|SD|TP|QA>
+  --evidence <reviewed-material.md> --reviewer <name> --reviewed true
+  --update-draft <true|false> --run <run_id> --revision <revision_id> --operation <uuid>`.
   Do not publish a pointer and its required source relationship in separate accepted revisions.
 - After persistence, redispatch `gate-check` for the same target/run and use its fresh revision,
   gate route and approval presentation. Do not reuse this operation or ask for approval until the
@@ -22,13 +54,13 @@ Run State, gate evaluation and exact approval remain authoritative.
   dependent authoring. Use interaction.md Bounded internal recovery only for its dispatched eligible
   analytical owner; other conditions stay blocked. Never infer approval or create later-gate work.
 
-## Reviewed Recording Input (version 1)
+## Reviewed Material Recording
 
 ### Language and approval summary preparation
 
 Use the supplied `artifact_language` from `.agdf/control/config.json` for the artefact and
 the resolved `presentation_language` for user-facing text. The configured chat language is
-the direct-command default; dispatcher presentation input follows its current-request contract.
+the direct-command default; MCP may inherit a known matching configured language; a different current-request language needs an explicit presentation_language override. CLI and complete Core language remain explicit.
 Neither the request language nor English runtime/template text changes the artefact language.
 When `approval_summary_required` is true, before recording include exactly one
 `## <approval_summary_heading>` section with the supplied heading verbatim and a complete
@@ -67,49 +99,27 @@ correction stays with the existing authoring continuation, once per diagnosed co
 by canonical replacement and fresh evaluation. A ready draft still needs actual editing intent;
 status is read-only, protected sources and unrelated blockers remain stopped.
 
-Prepare files under `.agdf/control/artefacts/<run_id>/` before recording. The single shared Core
-relationship registry selects PRD-derived_from-UR, SD-derived_from-PRD, TP-derived_from-SD or
-QA_REPORT-tests-TP. UR-approved_by remains exclusively approval-owned. QA recording copies an
-existing report's explicit Decision/Status value (`pass | revise | block`); it does not decide QA.
-
-The JSON object has exactly these fields:
-
-- `schema_version`: string `1`.
-- `target_id`: existing local command-target identity, SHA-256 of `agdf-command-target/1`, NUL,
-  and the canonical real absolute governance target. This is a binding, not authority.
-- `run_id`, `expected_revision_id`: the supplied selected run and current revision.
-- `destination`: exactly `type`, `path`, `digest`, `status`; logical registry type, canonical
-  run-local `<type>.md`, full canonical SHA-256 and `draft` for PRD/SD/TP, report decision for QA.
-- `source`: exactly `type`, `path`, `digest`; the registry's approved source and canonical digest.
-- `relationship`: exactly `from`, `relationship`, `to`; the explicit registry triple.
-- `review`: exactly `reviewer`, `path`, `digest`; named reviewer, separate contained mapping file
-  and its canonical SHA-256. Do not overwrite an earlier sealed proof file.
-- `update_draft`: boolean; true only for an explicit current-gate draft update.
-
-The mapping file is JSON with exactly `schema_version`, `target_id`, `run_id`, `relationship`,
-`destination`, `source`, `reviewer`, `reviewed`. Identity and source/destination objects match
-the recording input exactly; reviewer matches review.reviewer, and reviewed is boolean true.
-Digests use the existing canonical text/line-ending semantics. This is cooperative review
-attestation, never independent proof of a human review or semantic derivation. QA/review assesses
-the meaning. A prose header or gate order is not machine proof.
-
-The existing operation checks current permission, contained non-symlink files, exact approved
-sources and revision under locks. It appends its sealed Artefact Bindings receipt/history and
-publishes pointer, relationship and audit together. The receipt is writer-owned; do not hand-author
-it. An allowed draft replacement supersedes the prior active binding, retaining history. A changed
-draft is accepted only when its prior binding reconstructs the recorded seal and every other
-bound/approved byte remains unchanged. Otherwise stop with explicit maintenance/revision recovery.
-
-Before presentation/approval, a recorded eligible current artefact must have its evidenced source
-relationship. Missing artefacts remain draftable; a relationship-only blocker must not redraft the
-artefact repeatedly. Only authorized bound continuation can attempt one exact previously sealed
-proof correction before output. The shared Core continuation service coordinates this operation
-and fresh routing; the dispatcher service itself only reads and routes. Explicit status, doctor,
-evaluation and run-present never correct.
-Unknown/malformed/foreign/stale/ambiguous proof, missing full approval integrity or unrelated
-blockers remain blocked; legacy absence grants no correction permission. A successful correction
-creates a new audited revision and fresh evaluation without another approval. Terminal output
-already emitted is never intercepted. Older runtimes have no automatic correction capability.
+Record reviewed material through `artefact.record`: `gate`, exact bounded `material`,
+`reviewer`, explicit `reviewed: true` and boolean `update_draft`. The writer derives
+PRD-derived_from-UR, SD-derived_from-PRD, TP-derived_from-SD and QA_REPORT-tests-TP
+from the existing registry and current exact approved source. UR-approved_by remains
+exclusively approval-owned. QA recording preserves the report's explicit result;
+it never decides QA. This is cooperative review attestation, not independent proof
+of human review or semantic correctness.
+
+Core publishes the canonical document under the Run documents role, its binding
+and revision atomically. Source/destination mapping and reviewer are recorded once
+in the typed binding; there are no RECORD/REVIEW JSON inputs or duplicate proofs.
+An unapproved replacement supersedes its previous binding while retaining history.
+The previous canonical bytes must still be valid before recording; stage the new
+material instead of editing a bound document. Approved sources require the current
+source-revision preview/apply owner and exact deliberate confirmation.
+
+Before presentation, an eligible recorded artefact must have the exact current
+source relationship. Missing, stale, foreign or malformed bindings remain blocked.
+Do not hand-author a receipt, repair a seal or automatically adopt unknown edits.
+Read-only status, doctor, evaluation and presentation never correct state. After
+an allowed recording, evaluate the new revision and prepare a fresh exact decision.
 
 ## Gate-Specific Work