deuk-agent-flow 4.0.19

package/scripts/update-download-badge.mjs

@@ -0,0 +1,107 @@
+#!/usr/bin/env node
+import { mkdirSync, writeFileSync } from "fs";
+import { dirname, join } from "path";
+
+const DEFAULT_PACKAGES = ["deuk-agent-flow", "deuk-agent-rule"];
+const DEFAULT_RANGE = "last-month";
+const DEFAULT_OUT = "docs/badges/npm-downloads.json";
+const DEFAULT_CANONICAL_PACKAGE = "deuk-agent-flow";
+
+function parseArgs(argv) {
+  const opts = {
+    packages: [...DEFAULT_PACKAGES],
+    range: DEFAULT_RANGE,
+    out: DEFAULT_OUT,
+    canonicalPackage: DEFAULT_CANONICAL_PACKAGE,
+  };
+
+  for (let i = 0; i < argv.length; i += 1) {
+    const arg = argv[i];
+    if (arg === "--packages") {
+      opts.packages = argv[++i].split(",").map((name) => name.trim()).filter(Boolean);
+    } else if (arg === "--range") {
+      opts.range = argv[++i];
+    } else if (arg === "--out") {
+      opts.out = argv[++i];
+    } else if (arg === "--canonical") {
+      opts.canonicalPackage = argv[++i];
+    } else {
+      throw new Error(`Unknown argument: ${arg}`);
+    }
+  }
+
+  if (opts.packages.length === 0) {
+    throw new Error("--packages must include at least one npm package name");
+  }
+
+  return opts;
+}
+
+async function fetchDownloads(packageName, range) {
+  const url = `https://api.npmjs.org/downloads/point/${encodeURIComponent(range)}/${encodeURIComponent(packageName)}`;
+  const res = await fetch(url);
+
+  if (res.status === 404) {
+    return { package: packageName, downloads: 0, missing: true };
+  }
+
+  if (!res.ok) {
+    throw new Error(`npm downloads request failed for ${packageName}: ${res.status} ${res.statusText}`);
+  }
+
+  const body = await res.json();
+  return {
+    package: packageName,
+    downloads: Number(body.downloads || 0),
+    missing: false,
+  };
+}
+
+function formatDownloads(value) {
+  return new Intl.NumberFormat("en", {
+    notation: "compact",
+    maximumFractionDigits: value >= 1000 ? 1 : 0,
+  }).format(value);
+}
+
+export async function buildDownloadsBadge(opts) {
+  const canonicalPackage = opts.canonicalPackage || opts.packages[0];
+  const packages = await Promise.all(opts.packages.map((name) => fetchDownloads(name, opts.range)));
+  const total = packages.reduce((sum, pkg) => sum + pkg.downloads, 0);
+  const canonical = packages.find((pkg) => pkg.package === canonicalPackage) || packages[0];
+  const aliases = packages.filter((pkg) => pkg.package !== canonical.package);
+  const aliasTotal = aliases.reduce((sum, pkg) => sum + pkg.downloads, 0);
+
+  return {
+    schemaVersion: 1,
+    label: `${canonical.package} downloads`,
+    message: `${formatDownloads(total)}/${opts.range}`,
+    color: "2f6fed",
+    namedLogo: "npm",
+    cacheSeconds: 86400,
+    total,
+    canonicalPackage: canonical.package,
+    canonicalDownloads: canonical.downloads,
+    aliasTotal,
+    range: opts.range,
+    packages,
+    aliases,
+  };
+}
+
+export async function main(argv = process.argv.slice(2)) {
+  const opts = parseArgs(argv);
+  const badge = await buildDownloadsBadge(opts);
+  const outPath = join(process.cwd(), opts.out);
+
+  mkdirSync(dirname(outPath), { recursive: true });
+  writeFileSync(outPath, JSON.stringify(badge, null, 2) + "\n", "utf8");
+  console.log(`Wrote ${opts.out}: ${badge.message}`);
+}
+
+if (import.meta.url === `file://${process.argv[1]}`) {
+  main().catch((error) => {
+    console.error(error.message);
+    process.exit(1);
+  });
+}

package/templates/MODULE_RULE_TEMPLATE.md

@@ -0,0 +1,11 @@
+# Submodule Rules: [Module Name]
+
+- **Path Root:** `[Path]`
+- **Tech Stack:** `[Tech]`
+
+## Architecture & Conventions
+- [Add module-specific conventions here]
+
+## Build & Test
+- Build: `[Command]`
+- Test: `[Command]`

package/templates/PROJECT_RULE.md

@@ -0,0 +1,47 @@
+---
+architecture_docs: ""
+---
+
+# Project Rules
+
+## Architecture Boundaries
+
+> [!NOTE] **To AI Agents**
+> If `architecture_docs` is empty and no rules are defined below,
+> this project has no architecture rules yet.
+> → Ask user to define them, or analyze codebase and propose a draft.
+> → Do NOT make assumptions about project architecture.
+
+### Module Ownership
+<!-- Define which modules exist and who owns them -->
+| Module | Owner | Editable |
+|--------|-------|----------|
+| `src/` | Core source | Yes |
+
+### Dependency Direction
+<!-- Define allowed dependency directions between modules -->
+
+## DC-CODEGEN: Generated File Mapping
+
+> [!IMPORTANT] **REQUIRED**
+> Agents use this table to decide which files are safe to edit.
+> Files not listed here → agent MUST ask user before editing.
+
+| Generated (DO NOT EDIT) | Source (edit here) | Build command |
+|-------------------------|-------------------|---------------|
+| `dist/` | `src/` | `npm run build` |
+
+## DC-* Guards (project-specific)
+
+| Guard | Condition → Action |
+|-------|-------------------|
+| DC-HALT | Infrastructure error → stop, no bypass, report to user. |
+| DC-INFRA | Bootstrap/transport/DB/routing code → separate ticket + approval. |
+
+## Build & Test
+
+| Action | Command |
+|--------|---------|
+| Build | `npm run build` |
+| Test | `npm test` |
+| Lint | `npx deuk-agent-flow lint:md` |

package/templates/TICKET_TEMPLATE.ko.md

@@ -0,0 +1,44 @@
+---
+<%- frontmatter %>
+---
+# <%= meta.title %>
+
+## Agent Permission Contract (APC)
+
+[BOUNDARY]
+- 확인된 범위를 기준으로 정확한 수정 가능 모듈을 적습니다.
+- 생성물, 무관한 공용 영역, 외부 루트처럼 건드리면 안 되는 범위를 적습니다.
+- 이 범위를 지배하는 프로젝트 규칙과 코어 규칙을 적습니다.
+
+[CONTRACT]
+- 이 티켓이 의존하는 실제 입력, 근거, 아티팩트를 적습니다.
+- 이 티켓이 만들어야 하는 실제 결과를 적습니다.
+- 허용되는 부작용과 명시적으로 제외할 항목을 적습니다.
+- 사용자가 명시적으로 요청한 경우가 아니면 테스트 작성/확장은 넣지 않습니다.
+
+[PATCH PLAN]
+- 확인된 로컬 맥락을 기준으로 정확한 구현 경로를 적습니다.
+
+## Compact Plan
+
+- 실제로 확인한 문제, 선택한 접근, 가장 작은 검증 대상을 적습니다.
+
+## Problem Analysis
+
+- 확인된 관측을 바탕으로 실제 불일치, 실패, 요청 내용을 적습니다.
+
+## Source Observations
+
+- 파일, 명령, diff, 문서, 이전 티켓 기록에서 확인한 실제 근거를 적습니다.
+
+## Cause Hypotheses
+
+- 현재 가장 유력한 설명과 아직 경쟁 중인 다른 가설을 적습니다.
+
+## Improvement Direction
+
+- 선택한 방향, 범위 경계, 이 경로를 택한 이유를 적습니다.
+
+## Audit Evidence
+
+- 승인 전과 실행 전까지 확인한 사실과 명령을 적습니다.

package/templates/TICKET_TEMPLATE.md

@@ -0,0 +1,44 @@
+---
+<%- frontmatter %>
+---
+# <%= meta.title %>
+
+## Agent Permission Contract (APC)
+
+[BOUNDARY]
+- Record the exact editable modules for this ticket using confirmed scope.
+- Record forbidden/generated/unrelated areas that must stay untouched.
+- Cite the governing project/core rule set that defines the boundary.
+
+[CONTRACT]
+- Record the concrete inputs, artifacts, or local evidence this ticket depends on.
+- Record the concrete output expected from this ticket.
+- Record allowed side effects and anything explicitly excluded.
+- Do not include test creation or test expansion unless the user explicitly requested tests.
+
+[PATCH PLAN]
+- Record the exact implementation path for this ticket using confirmed local context.
+
+## Compact Plan
+
+- Record the concrete finding, chosen approach, and smallest verification target.
+
+## Problem Analysis
+
+- Record the actual mismatch, failure, or request using confirmed observations.
+
+## Source Observations
+
+- Record concrete local evidence from files, commands, diffs, docs, or prior ticket history.
+
+## Cause Hypotheses
+
+- Record the current best explanation and the alternatives still under consideration.
+
+## Improvement Direction
+
+- Record the chosen direction, scope boundaries, and why this path is being taken.
+
+## Audit Evidence
+
+- Record the confirmed facts and commands gathered before approval and execution.

package/templates/project-pilot/CONFORMANCE_GATE_TEMPLATE.md

@@ -0,0 +1,23 @@
+# Conformance Gate Template
+
+## Pre-Implementation
+
+- Implementation matrix exists:
+- Refactor contract exists:
+- Owner map exists:
+- Drift checklist completed:
+
+## Verification Commands
+
+| Stage | Command | Expected Result | Actual Result |
+| --- | --- | --- | --- |
+| structure | | | |
+| build/test | | | |
+| runtime/report | | | |
+
+## Exit Criteria
+
+- Contract and implementation agree.
+- Unsupported paths are explicit.
+- Generated/runtime/report outputs match the intended owner path.
+- Residual risks are recorded.

package/templates/project-pilot/DRIFT_CHECKLIST.md

@@ -0,0 +1,19 @@
+# Drift Checklist
+
+Mark each line before implementation.
+
+- [ ] No silent fallback remains in the touched path.
+- [ ] No alias-only path is being treated as a real contract.
+- [ ] No no-op or placeholder path is being counted as support.
+- [ ] No generated artifact is being edited directly.
+- [ ] No single-language patch is being presented as a shared fix.
+- [ ] No unsupported-by-contract path is being mislabeled as broken.
+- [ ] No broken-entrypoint is being hidden as unsupported.
+- [ ] Error behavior is explicit and testable.
+- [ ] Verification covers the actual owner path.
+
+## Known Exceptions
+
+| Exception | Reason | Guard |
+| --- | --- | --- |
+| | | |

package/templates/project-pilot/FLOW_CONTRACT_TEMPLATE.md

@@ -0,0 +1,26 @@
+# Flow Contract Template
+
+## Flow Identity
+
+- Workflow or call path:
+- Trigger:
+- Expected owner:
+
+## Steps
+
+| Step | Surface | Contract | Evidence |
+| --- | --- | --- | --- |
+| | | | |
+
+## Flow Rules
+
+- Required order:
+- Required handoff:
+- Forbidden shortcut:
+- Verification point:
+
+## Exceptions
+
+| Exception | Scope | Required guard |
+| --- | --- | --- |
+| | | |

package/templates/project-pilot/IMPLEMENTATION_MATRIX_TEMPLATE.md

@@ -0,0 +1,30 @@
+# Implementation Matrix Template
+
+## Target
+
+- Feature or contract family:
+- Matrix axis A:
+- Matrix axis B:
+
+## Status Codes
+
+| Code | Meaning |
+| --- | --- |
+| `C` | complete |
+| `P` | partial |
+| `S` | stub |
+| `B` | broken-entrypoint |
+| `U` | unsupported-by-contract |
+| `D` | documented exception |
+
+## Matrix
+
+| Axis A | Axis B | Status | Evidence | Owner | Action |
+| --- | --- | --- | --- | --- | --- |
+| | | | | | |
+
+## Notes
+
+- Hidden shortcut candidates:
+- Split candidates:
+- Explicit unsupported paths:

package/templates/project-pilot/INTEGRATION_CONTRACT_TEMPLATE.md

@@ -0,0 +1,26 @@
+# Integration Contract Template
+
+## Integration Identity
+
+- Connected surfaces:
+- Shared contract:
+- Expected direction:
+
+## Surface Rules
+
+| Surface | Responsibility | Input | Output | Owner |
+| --- | --- | --- | --- | --- |
+| | | | | |
+
+## Drift Risks
+
+- Alias risk:
+- Fallback risk:
+- Generated/source mismatch risk:
+- Report/test mismatch risk:
+
+## Verification
+
+- Minimum command:
+- Expected proof:
+- Residual risk:

package/templates/project-pilot/OWNER_MAP_TEMPLATE.md

@@ -0,0 +1,15 @@
+# Owner Map Template
+
+| Symptom Surface | Source of Truth | Editable Here | Regeneration or Sync Command | Notes |
+| --- | --- | --- | --- | --- |
+| generated file | | yes/no | | |
+| runtime implementation | | yes/no | | |
+| report output | | yes/no | | |
+| template | | yes/no | | |
+| contract data | | yes/no | | |
+
+## Owner Decision
+
+- Primary owner:
+- Secondary owner:
+- Do-not-edit surfaces:

package/templates/project-pilot/PROJECT_PILOT_RULE_TEMPLATE.md

@@ -0,0 +1,34 @@
+# ProjectPilot Rule Template
+
+## Scope
+
+- Product:
+- Shared refactor contract:
+- Generated/source/runtime boundaries:
+
+## Mandatory Gates
+
+1. Build an implementation matrix before cross-surface edits.
+2. Classify `B`, `S`, `P`, `U`, and documented exceptions separately.
+3. Identify the source owner before touching any generated or report artifact.
+4. Define the conformance gate before implementation.
+
+## Prohibited Shortcuts
+
+- Silent fallback
+- Alias-only compatibility patch
+- No-op implementation presented as support
+- Generated artifact direct edit
+- Single-language patch presented as shared fix
+
+## Required Evidence
+
+- File and line references:
+- Verification commands:
+- Contract references:
+
+## Project Exceptions
+
+| Exception | Why allowed | Guard |
+| --- | --- | --- |
+| | | |

package/templates/project-pilot/REFACTOR_CONTRACT_TEMPLATE.md

@@ -0,0 +1,32 @@
+# Refactor Contract Template
+
+## Contract Identity
+
+- Feature or protocol:
+- Canonical entrypoint:
+- Supported callers:
+
+## Input Shape
+
+- Required inputs:
+- Optional inputs:
+- Invalid inputs:
+
+## Result Shape
+
+- Success result:
+- Error result:
+- Unsupported result:
+
+## Shared Guarantees
+
+- Naming rule:
+- Ownership rule:
+- Fail-fast rule:
+- Generated/runtime alignment rule:
+
+## Exceptions
+
+| Exception | Scope | Required evidence |
+| --- | --- | --- |
+| | | |

package/templates/project-pilot/REMEDIATION_PLAN_TEMPLATE.md

@@ -0,0 +1,33 @@
+# Remediation Plan Template
+
+## Scope
+
+- Parent ProjectPilot ticket:
+- Target matrix row(s):
+- Owner path:
+
+## Defect Class
+
+- `B` broken-entrypoint
+- `S` stub
+- `P` partial
+- `U` unsupported-by-contract formalization
+- `D` documented exception alignment
+
+## Implementation Goal
+
+- Exact symptom:
+- Intended shared behavior:
+- Non-goals:
+
+## Required Evidence
+
+- Matrix reference:
+- Refactor contract reference:
+- Owner map reference:
+
+## Verification
+
+- Minimum command:
+- Expected proof:
+- Residual risk:

package/templates/rules.d/deukcontext-mcp.md

@@ -0,0 +1,31 @@
+---
+id: deukcontext-mcp
+condition:
+  mcp: deuk-agent-context
+inject_target: ["AGENTS.md", "GEMINI.md"]
+---
+## DeukContext RAG Protocol
+
+### RAG Usage
+- Start with local source-of-truth files: current source code, tests, project rules, and CLI ticket state.
+- Use `mcp_deukcontext_search_*` when local evidence is insufficient, prior decisions may matter, the task crosses old tickets, or the user asks for historical/deep analysis.
+- Use RAG as advisory memory. Current source code, tests, and ticket state remain the source of truth.
+- Treat DeukAgentContext as an online-only memory layer. Do not rely on offline snapshots or local mirrors as the primary context source.
+- Choose the narrowest MCP tool: `search_code` for symbols, `search_rules` for policy, `search_tickets` for prior outcomes, and `synthesize_knowledge` only for cross-collection questions.
+- Search narrowly: include the concrete project plus symbol, file, command, rule id, or failure mode.
+- Stop after 2 MCP calls for the same question. Do not broaden repeatedly.
+- **Do NOT use RAG for Ticket Navigation.** Ticket lookup is a direct CLI operation, not a search task.
+
+### RAG Quality Gate
+- Treat placeholder summaries, duplicate ticket/report chunks, stale archive-only hits, unrelated projects, or summaries with no usable fact as a miss.
+- When a result only says to read the file, read the current file locally before deciding.
+- Prefer `search_code` for implementation questions and request evidence only when the extra context is likely to be useful.
+- Record hit/weak-hit/miss/stale evidence in the ticket when it changes confidence, plan, or follow-up direction.
+- For investigation, regression, quality, or root-cause tasks, write confirmed facts, hypotheses, improvement direction, and open questions into the active ticket before asking the user for clarification. Then point the user to the ticket instead of keeping the analysis only in chat.
+
+### RAG Failure Handling
+- **Error** (2+ failures): Switch to local search (`grep_search`/`view_file`). Do not retry in a loop.
+- **Miss or weak hit** (`[RAG-MISS]`, placeholder, duplicate, stale): Fall back to local search. If local analysis finds reusable current-code knowledge, inject it once via `mcp_deukcontext_add_knowledge` with project, source path, code status, and applicability.
+- **Stale indexed doc**: If an indexed document is wrong or incomplete, use `mcp_deukcontext_refresh_document` instead of adding a competing fragment.
+- **Archive boundary**: Completed work should be preserved through ticket archive and knowledge distillation so the active context does not accumulate stale live-state references.
+- **Docs vs knowledge**: `.deuk-agent/docs/` holds human-readable source artifacts (all plans and reports under `docs/plan`, archived originals in `docs/archive`). `.deuk-agent/knowledge/` holds only distilled machine-readable retrieval JSON generated from archived tickets/plans.

package/templates/rules.d/platform-coexistence.md

@@ -0,0 +1,29 @@
+---
+id: platform-coexistence
+inject_target: ["AGENTS.md"]
+---
+## Platform MCP Bridge
+
+### MCP Configuration per Platform
+
+Each platform uses a different MCP config file. Ensure `deuk-agent-context` is registered in the appropriate location:
+
+| Platform | MCP Config Path | Registration |
+|----------|----------------|--------------|
+| Antigravity | `.mcp.json` (project root) | Auto-detected by IDE |
+| Claude Code | `.mcp.json` (project root) | `claude mcp add --transport sse deuk-agent-context <url>` |
+| Copilot | `.vscode/mcp.json` | VS Code settings or manual JSON edit |
+| Codex | `.mcp.json` (project root) | Manual JSON edit |
+| Cursor | `.cursor/mcp.json` | Cursor Settings > MCP |
+
+### Artifact Path Self-Check
+
+Before saving any artifact, verify the platform's native path is NOT the only copy:
+
+| Platform Native Path | RAG-Indexed? | Action Required |
+|---------------------|:------------:|-----------------|
+| `brain/<conv>/` (Antigravity) | NO | Copy to `.deuk-agent/docs/` |
+| `.cursor/plans/` (Cursor) | NO | Copy to `.deuk-agent/docs/plan/` |
+| Terminal output (Claude/Codex) | NO | Save directly to `.deuk-agent/docs/` |
+| VS Code diff (Copilot) | NO | Save plan text to `.deuk-agent/docs/plan/` |
+| `.deuk-agent/docs/` | **YES** | ✓ Correct path |

package/templates/skills/context-recall/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: context-recall
+summary: Reuse prior ticket and rule memory without turning RAG into the source of truth.
+---
+
+# Context Recall
+
+Authority: follow `core-rules/AGENTS.md`, the active ticket APC, Phase Gate, and `PROJECT_RULE.md`.
+
+Use this skill when a task repeats a failure family, references prior decisions, asks why something happened, or crosses old tickets/rules.
+
+## Micro-Protocol
+
+1. Read current local source, project rules, and active ticket first.
+2. Ask DeukAgentContext one narrow query naming the project, symbol, file, command, or failure mode.
+3. Treat stale, duplicate, placeholder, or unrelated hits as weak evidence.
+4. Put useful recall into the ticket as evidence, not chat narration.
+5. If local analysis produces reusable current knowledge after a miss, add one knowledge record.
+
+## Stop Conditions
+
+- Two weak or stale recall attempts for the same question.
+- RAG conflicts with current local source.
+- Recall would expand scope beyond the active ticket.
+- The remembered fix path bypasses current generated/source, parity, or verification rules.

package/templates/skills/generated-file-guard/SKILL.md

@@ -0,0 +1,25 @@
+---
+name: generated-file-guard
+summary: Prevent direct generated artifact edits and route changes to their source.
+---
+
+# Generated File Guard
+
+Authority: follow `core-rules/AGENTS.md`, the active ticket APC, Phase Gate, and `PROJECT_RULE.md`.
+
+Use this skill when a task mentions generated files, `dist`, `gen`, codegen, reports, benchmark outputs, or synchronized spokes.
+
+## Micro-Protocol
+
+1. Check `PROJECT_RULE.md` generated/source mapping.
+2. Check target files for `@generated`, `DO NOT EDIT`, generated directories, or report artifact paths.
+3. If the target is generated, identify the source file or generator command.
+4. Prefer dry-run or `/tmp` output when probing generators.
+5. Record the source-of-truth owner and verification command in the ticket before edits.
+
+## Stop Conditions
+
+- The source-of-truth file cannot be identified after bounded lookup.
+- A broad regeneration would modify outputs outside ticket scope.
+- The proposed fix hides, relabels, or narrows failing generated/report rows.
+- The change would edit both generated output and source in the same patch.

package/templates/skills/project-pilot/SKILL.md

@@ -0,0 +1,63 @@
+---
+name: project-pilot
+summary: Apply the ProjectPilot Refactor Contract Kit before cross-language, generated/runtime, or repeated-drift refactors.
+---
+
+# ProjectPilot
+
+Authority: follow `core-rules/AGENTS.md`, the active ticket APC, Phase Gate, and project rules.
+
+Use this skill when the task involves any of the following:
+
+- multi-language feature or behavior changes
+- protocol, serialization, transport, codec, or table lane work
+- generated/runtime/report contract drift
+- fallback, alias, helper, no-op, placeholder, or silent stub cleanup
+- convention, naming, file layout, factory surface, or lifecycle unification
+- repeated failure families where one local fix would hide shared contract drift
+
+## Micro-Protocol
+
+1. Read local project rules and architecture constraints first.
+2. Create or select the active ticket and record ProjectPilot scope before editing.
+3. Define the refactor contract before proposing or making edits.
+4. Build the implementation matrix across the relevant surfaces.
+5. Classify drift as `C`, `P`, `S`, `B`, `U`, or `D`.
+6. Identify source owners before touching source, generated, runtime, report, or template files.
+7. Fill the drift checklist and reject shortcuts that hide drift.
+8. Define the conformance gate in the ticket without creating tests unless the user requested tests.
+9. Only then split remediation tickets or implement scoped changes.
+
+## Required Outputs
+
+- Implementation Matrix
+- Refactor Contract
+- Flow Contract
+- Integration Contract
+- Owner Map
+- Drift Checklist
+- Conformance Gate
+- Remediation Plan
+
+Use the shared ProjectPilot semantics and templates when available:
+
+- `docs/PROJECT_PILOT.md`
+- `templates/project-pilot/IMPLEMENTATION_MATRIX_TEMPLATE.md`
+- `templates/project-pilot/REFACTOR_CONTRACT_TEMPLATE.md`
+- `templates/project-pilot/FLOW_CONTRACT_TEMPLATE.md`
+- `templates/project-pilot/INTEGRATION_CONTRACT_TEMPLATE.md`
+- `templates/project-pilot/OWNER_MAP_TEMPLATE.md`
+- `templates/project-pilot/DRIFT_CHECKLIST.md`
+- `templates/project-pilot/CONFORMANCE_GATE_TEMPLATE.md`
+- `templates/project-pilot/REMEDIATION_PLAN_TEMPLATE.md`
+
+Consumer projects may keep only project-local pilot evidence and references. Shared ProjectPilot semantics and templates are owned by DeukAgentFlow.
+
+## Stop Conditions
+
+- No active ticket or no approval boundary for refactor-contract work.
+- No implementation matrix or refactor contract can be stated clearly.
+- Source-of-truth owner cannot be identified.
+- A fix depends on generated direct edits or hidden fallback.
+- Unsupported-by-contract and broken-entrypoint are not separated.
+- Verification cannot prove the claimed alignment.