devrites 3.0.4 → 3.0.6

package/engine/internal/lib/reconcile_test.go

@@ -75,7 +75,7 @@ func runReconcile(t *testing.T, root string, args ...string) (int, string) {
 
 func TestWorktreeTreeErrorsOutsideGitRepo(t *testing.T) {
 	dir := t.TempDir()
-	tree, err := worktreeTree(dir)
+	tree, err := worktreeTree(dir, t.TempDir())
 	if err == nil {
 		t.Fatalf("worktreeTree(%q) = %q, nil; want an error outside a git repo", dir, tree)
 	}
@@ -86,13 +86,14 @@ func TestWorktreeTreeErrorsOutsideGitRepo(t *testing.T) {
 
 func TestWorktreeTreeCapturesUntrackedFiles(t *testing.T) {
 	dir := newGitRepo(t)
+	objects := t.TempDir()
 
-	before, err := worktreeTree(dir)
+	before, err := worktreeTree(dir, objects)
 	if err != nil {
 		t.Fatalf("worktreeTree: %v", err)
 	}
 	writeFile(t, filepath.Join(dir, "untracked.go"), "package main\n")
-	after, err := worktreeTree(dir)
+	after, err := worktreeTree(dir, objects)
 	if err != nil {
 		t.Fatalf("worktreeTree: %v", err)
 	}
@@ -100,7 +101,7 @@ func TestWorktreeTreeCapturesUntrackedFiles(t *testing.T) {
 		t.Errorf("worktreeTree did not observe the untracked file: both trees = %s", before)
 	}
 
-	// The user's real index must be untouched — the file stays untracked.
+	// The user's real index must be untouched: the file stays untracked.
 	out, err := exec.Command("git", "-C", dir, "status", "--porcelain", "untracked.go").Output()
 	if err != nil {
 		t.Fatalf("git status: %v", err)
@@ -113,6 +114,13 @@ func TestWorktreeTreeCapturesUntrackedFiles(t *testing.T) {
 func TestReconcileSnapshotThenCleanCheck(t *testing.T) {
 	gitRoot := newGitRepo(t)
 	root := workspace(t, "feat")
+	objects := t.TempDir()
+	if err := os.Chmod(objects, 0o500); err != nil {
+		t.Fatalf("make git objects read-only: %v", err)
+	}
+	t.Cleanup(func() { _ = os.Chmod(objects, 0o700) })
+	t.Setenv("GIT_OBJECT_DIRECTORY", objects)
+	writeFile(t, filepath.Join(gitRoot, "untracked.go"), "package main\n")
 
 	if code, out := runReconcile(t, root, "snapshot", "feat"); code != 0 {
 		t.Fatalf("snapshot = %d, want 0\n%s", code, out)
@@ -137,7 +145,7 @@ func TestReconcileCheckFlagsUnclaimedChange(t *testing.T) {
 	if code, out := runReconcile(t, root, "snapshot", "feat"); code != 0 {
 		t.Fatalf("snapshot = %d, want 0\n%s", code, out)
 	}
-	// The orchestrator edits source it never claimed — the A1 breach.
+	// The orchestrator edits source it never claimed: the A1 breach.
 	writeFile(t, filepath.Join(gitRoot, "rogue.go"), "package main\n")
 	writeFile(t, filepath.Join(root, "work", "feat", ".reconcile-claimed"), "seed.go\n")
 

package/engine/internal/lib/resolve.go

@@ -107,7 +107,7 @@ func Resolve(root string, args []string, stdout, stderr io.Writer) int {
 				if err := clearAwaiting(sfile, bid); err != nil {
 					return fail(stderr, err.Error(), 1)
 				}
-				fmt.Fprintf(stdout, "Dropped:  %s — %s\n", bid, reason)
+				fmt.Fprintf(stdout, "Dropped:  %s: %s\n", bid, reason)
 			} else {
 				bid, ans := splitColon(line)
 				ans = strings.TrimPrefix(ans, " ")
@@ -169,7 +169,7 @@ func clockNow() time.Time {
 func nowUTC() string { return clockNow().UTC().Format("2006-01-02T15:04:05Z") }
 
 // resolveNextQID prints the next sequential question id for today, refusing (exit
-// 6) an id that already has a header — a sign questions.md was hand-edited.
+// 6) an id that already has a header: a sign questions.md was hand-edited.
 func resolveNextQID(qpath string, stdout, stderr io.Writer) int {
 	if qpath == "" {
 		return fail(stderr, "Usage: devrites-engine resolve next-qid <questions.md path>", 5)
@@ -363,7 +363,7 @@ func clearAwaiting(sfile, qid string) error {
 		out = append(out, fmt.Sprintf("- %s %s: resolved %s", ts, resumePhase, qid))
 	}
 	out, _ = state.SetCursorField(out, state.CursorStatus, "running")
-	out, _ = state.SetCursorField(out, state.CursorNextAction, "(resume — `"+resumeCommand.Both()+"` to continue the workflow)")
+	out, _ = state.SetCursorField(out, state.CursorNextAction, "(resume: `"+resumeCommand.Both()+"` to continue the workflow)")
 	if err := fsutil.WriteFileAtomic(sfile, joinRecords(out), 0o644); err != nil {
 		return fmt.Errorf("update state %s: %w", sfile, err)
 	}

package/engine/internal/lib/reviewerstats.go

@@ -29,7 +29,7 @@ type reviewerStatEntry struct {
 
 var reviewerAgentRe = regexp.MustCompile(`^devrites-[a-z][a-z-]*$`)
 
-// alwaysOnReviewers are the roster's unconditional axes — stats are recorded for
+// alwaysOnReviewers are the roster's unconditional axes: stats are recorded for
 // visibility but the verdict is always run.
 var alwaysOnReviewers = map[string]bool{
 	"devrites-spec-reviewer": true,
@@ -183,7 +183,7 @@ func reviewerVerdict(agent string, zeroStreak int) string {
 	case alwaysOnReviewers[agent]:
 		return "run (always-on)"
 	case insuranceReviewers[agent]:
-		return "run (insurance — never gated)"
+		return "run (insurance: never gated)"
 	case zeroStreak >= gateStreak:
 		return "gate-candidate"
 	default:

package/engine/internal/lib/reviewintegrity.go

@@ -8,14 +8,14 @@ import (
 	"strings"
 )
 
-// findingLabel matches a bold severity label — the shape a *real* finding carries
-// in review.md (`- **Critical** — ...`). A plain summary count ("Critical 0 /
+// findingLabel matches a bold severity label: the shape a *real* finding carries
+// in review.md (`- **Critical**: ...`). A plain summary count ("Critical 0 /
 // Important 0") is deliberately NOT matched: an all-zero tally is the rubber-stamp
 // this gate exists to catch, not evidence that review happened.
 var findingLabel = regexp.MustCompile(`\*\*(Critical|Important|Suggestion|Nit|FYI)\*\*`)
 
 // noFindingsMarker matches the justification an adversarial reviewer must leave
-// when it genuinely finds nothing — the axis stayed clean, and here is the
+// when it genuinely finds nothing: the axis stayed clean, and here is the
 // account of the passes that came back empty. Presence is all this gate checks;
 // the quality of the account is the reviewer fan-out's job (same contract as
 // doubt-coverage's `doubt: MISSING` and footprint's roster).
@@ -34,14 +34,14 @@ var reviewAxes = []struct {
 
 // ReviewIntegrity guards the opposite failure from the rest of review discipline:
 // not the noisy false positive (which confidence-banding suppresses) but the
-// silent false negative — a reviewer that returns "looks good, nothing found".
+// silent false negative: a reviewer that returns "looks good, nothing found".
 // An empty findings list is treated as suspicious, not as a pass: an adversarial
 // axis that reports nothing must justify the emptiness, exactly as it must quote a
 // line to raise a finding. Read-only; the workspace is <root>/work/<slug>.
 //
-//	0  every axis accounted for — has findings, has a no-findings justification, or review.md absent/freeform
+//	0  every axis accounted for: has findings, has a no-findings justification, or review.md absent/freeform
 //	2  usage (no slug)
-//	1  an adversarial axis is silent AND unjustified — a suspected rubber-stamp
+//	1  an adversarial axis is silent AND unjustified: a suspected rubber-stamp
 func ReviewIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 	slug := argAt(args, 0)
 	if slug == "" {
@@ -55,15 +55,15 @@ func ReviewIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 	dir := featureDir(root, slug)
 	review, ok := readFileOK(filepath.Join(dir, "review.md"))
 	if !ok {
-		fmt.Fprintln(stdout, "review-integrity: no review.md — nothing to assess (pass)")
+		fmt.Fprintln(stdout, "review-integrity: no review.md: nothing to assess (pass)")
 		return 0
 	}
 
 	sections := axisSections(review)
 	if len(sections) == 0 {
 		// A freeform review with no `## Spec` / `## Code review` headings can't be
-		// assessed mechanically — say so and pass rather than flag a format choice.
-		fmt.Fprintln(stdout, "review-integrity: no per-axis sections in review.md — heading-based check n/a (pass)")
+		// assessed mechanically: say so and pass rather than flag a format choice.
+		fmt.Fprintln(stdout, "review-integrity: no per-axis sections in review.md: heading-based check n/a (pass)")
 		return 0
 	}
 
@@ -71,7 +71,7 @@ func ReviewIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 	for _, ax := range reviewAxes {
 		body, present := sections[ax.label]
 		if !present {
-			continue // axis not written as its own section — nothing to check here
+			continue // axis not written as its own section: nothing to check here
 		}
 		hasFinding := findingLabel.MatchString(body)
 		justified := noFindingsMarker.MatchString(body)
@@ -79,7 +79,7 @@ func ReviewIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 		case hasFinding:
 			fmt.Fprintf(stdout, "  %s: findings present\n", ax.label)
 		case justified:
-			fmt.Fprintf(stdout, "  %s: clean — no-findings justification present\n", ax.label)
+			fmt.Fprintf(stdout, "  %s: clean: no-findings justification present\n", ax.label)
 		default:
 			fmt.Fprintf(stdout, "  %s: SILENT (no finding, no justification)\n", ax.label)
 			silent = append(silent, ax.label)
@@ -87,12 +87,12 @@ func ReviewIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 	}
 
 	if len(silent) > 0 {
-		fmt.Fprintf(stdout, "review-integrity: SILENT — %s reviewed nothing and justified nothing.\n", strings.Join(silent, ", "))
+		fmt.Fprintf(stdout, "review-integrity: SILENT: %s reviewed nothing and justified nothing.\n", strings.Join(silent, ", "))
 		fmt.Fprintln(stdout, "A zero-findings axis is suspicious, not a pass. Re-run the axis, or record a")
 		fmt.Fprintln(stdout, "'No-findings:' justification naming the adversarial passes that came back empty.")
 		return 1
 	}
-	fmt.Fprintln(stdout, "review-integrity: OK — every adversarial axis has findings or a justified clean bill.")
+	fmt.Fprintln(stdout, "review-integrity: OK: every adversarial axis has findings or a justified clean bill.")
 	return 0
 }
 

package/engine/internal/lib/reviewintegrity_test.go

@@ -36,7 +36,7 @@ Everything matches the spec. Nothing to report.
 Critical 0 / Important 0 / Suggestion 0
 
 ## Code review
-- **Important** — off-by-one in pagination at api/list.go:42.
+- **Important**: off-by-one in pagination at api/list.go:42.
 `)
 	code, out := runReviewIntegrity(t, root, "feat")
 	if code != 1 {
@@ -59,13 +59,13 @@ No-findings: ran the missing/partial/incorrect passes against each AC; every
 criterion is implemented and no scope creep found.
 
 ## Code review
-- **Nit** — rename tmp to buf at util.go:9.
+- **Nit**: rename tmp to buf at util.go:9.
 `)
 	code, out := runReviewIntegrity(t, root, "feat")
 	if code != 0 {
 		t.Fatalf("justified clean axis should pass, got %d\n%s", code, out)
 	}
-	if !contains(out, "Spec: clean — no-findings justification present") {
+	if !contains(out, "Spec: clean: no-findings justification present") {
 		t.Fatalf("want Spec recognised as justified, got:\n%s", out)
 	}
 }
@@ -73,10 +73,10 @@ criterion is implemented and no scope creep found.
 func TestReviewIntegrityBothWithFindingsPasses(t *testing.T) {
 	root := t.TempDir()
 	writeReview(t, root, "feat", `## Spec
-- **Critical** — AC-003 unimplemented.
+- **Critical**: AC-003 unimplemented.
 
 ## Code review
-- **Important** — missing error path.
+- **Important**: missing error path.
 `)
 	if code, out := runReviewIntegrity(t, root, "feat"); code != 0 {
 		t.Fatalf("both-with-findings should pass, got %d\n%s", code, out)
@@ -95,7 +95,7 @@ func TestReviewIntegrityNoReviewPasses(t *testing.T) {
 
 func TestReviewIntegrityFreeformPasses(t *testing.T) {
 	root := t.TempDir()
-	// No per-axis headings — can't assess mechanically, must not false-positive.
+	// No per-axis headings: can't assess mechanically, must not false-positive.
 	writeReview(t, root, "feat", "# Review\n\nLooks fine overall, shipping.\n")
 	if code, out := runReviewIntegrity(t, root, "feat"); code != 0 {
 		t.Fatalf("freeform review should pass, got %d\n%s", code, out)

package/engine/internal/lib/runbook.go

@@ -44,7 +44,7 @@ func Runbook(root string, args []string, stdout, stderr io.Writer) int {
 			fmt.Fprintf(stderr, "runbook: %v\n", err)
 			return 1
 		}
-		fmt.Fprintf(stdout, "runbook: OK — %d step(s) in %s\n", len(steps), displayRunbookPath(root, path))
+		fmt.Fprintf(stdout, "runbook: OK: %d step(s) in %s\n", len(steps), displayRunbookPath(root, path))
 		return 0
 	case "run":
 		return runbookRun(root, args[1:], stdout, stderr)

package/engine/internal/lib/session.go

@@ -227,7 +227,7 @@ func ReviewFingerprints(root string, args []string, stdout, stderr io.Writer) in
 	dir := featureDir(root, slug)
 	review, ok := readFileOK(filepath.Join(dir, "review.md"))
 	if !ok {
-		fmt.Fprintln(stdout, "review-fingerprints: no review.md — nothing to fingerprint.")
+		fmt.Fprintln(stdout, "review-fingerprints: no review.md: nothing to fingerprint.")
 		return 0
 	}
 	records := reviewFindingFingerprints(review)

package/engine/internal/lib/session_test.go

@@ -76,10 +76,10 @@ func TestReviewFingerprintsStableAndWritable(t *testing.T) {
 	writeReview(t, root, "feat", `# Review
 
 ## Spec
-- **Critical** — AC-003 is unproven.
+- **Critical**: AC-003 is unproven.
 
 ## Code review
-- **Important** — missing error handling.`)
+- **Important**: missing error handling.`)
 	stdout, stderr := &bytes.Buffer{}, &bytes.Buffer{}
 	code := ReviewFingerprints(root, []string{"--write", "feat"}, stdout, stderr)
 	if code != 0 {

package/engine/internal/lib/specparse.go

@@ -12,7 +12,7 @@ import (
 // — capability: <c>" section they sit under. It is the shared reader behind two
 // consumers: the spec-validate `--against` ledger cross-check (specvalidate.go)
 // and the capability-ledger fold (ledger.go). The grammar linter (lintSpec) is
-// deliberately left untouched — delta H2 headers are transparent to it — so this
+// deliberately left untouched (delta H2 headers are transparent to it) so this
 // parser adds delta-awareness without perturbing the flat-spec lint contract.
 
 // Delta kinds, lower-cased. A requirement outside any delta section has kind "".
@@ -35,7 +35,7 @@ var (
 // Requirement is one "### Requirement: <name>" block with its delta context.
 type Requirement struct {
 	Name       string // header text after "Requirement:", trailing space trimmed
-	Key        string // strings.ToLower(Name) — the identity used to match across specs
+	Key        string // strings.ToLower(Name): the identity used to match across specs
 	Kind       string // added | modified | removed | "" (flat, no delta section)
 	Capability string // from the section tag; "" when untagged
 	HeaderLine int    // 1-based line of the "### Requirement:" header
@@ -48,7 +48,7 @@ type SpecDoc struct {
 	HasDelta     bool // at least one "## … Requirements" delta section was seen
 }
 
-// ParseSpec reads and structures a spec.md. It never fails on grammar problems —
+// ParseSpec reads and structures a spec.md. It never fails on grammar problems:
 // that is lintSpec's job; ParseSpec only extracts blocks and their delta context.
 func ParseSpec(file string) (*SpecDoc, error) {
 	f, err := os.Open(file)
@@ -109,7 +109,7 @@ func ParseSpec(file string) (*SpecDoc, error) {
 }
 
 // requirementKeys returns the set of lower-cased requirement names present in a
-// spec file — the identity index a cross-spec existence check consults. A missing
+// spec file: the identity index a cross-spec existence check consults. A missing
 // or unreadable file yields an empty set (the caller decides whether that is an
 // error), matching how the ledger treats an unseeded capability.
 func requirementKeys(file string) map[string]bool {

package/engine/internal/lib/specskeleton.go

@@ -45,11 +45,11 @@ func SpecSkeleton(arg, cwd string, stdout, stderr io.Writer) int {
 		}
 	}
 	if len(missing) > 0 {
-		fmt.Fprintf(stdout, "spec-skeleton: BLOCKED — %s: missing top-level section(s): %s\n", rel, strings.Join(missing, ", "))
+		fmt.Fprintf(stdout, "spec-skeleton: BLOCKED: %s: missing top-level section(s): %s\n", rel, strings.Join(missing, ", "))
 		return 3
 	}
 
-	fmt.Fprintf(stdout, "spec-skeleton: OK — %s: all required top-level sections present\n", rel)
+	fmt.Fprintf(stdout, "spec-skeleton: OK: %s: all required top-level sections present\n", rel)
 	return 0
 }
 

package/engine/internal/lib/specvalidate.go

@@ -1,6 +1,6 @@
 // Package lib holds native Go implementations of the deterministic, zero-token
 // workflow checks DevRites used to run as individual .sh helpers. Each exported
-// function owns its logic outright — it does not shell out — and reproduces the
+// function owns its logic outright (it does not shell out) and reproduces the
 // legacy behavior (stdout + exit code) exactly, verified in the CLI test suite
 // by golden assertions or, transitionally, a bash-parity comparison.
 package lib
@@ -15,11 +15,11 @@ import (
 	"strings"
 )
 
-// Spec-grammar validator — deterministic lint of the structured
+// Spec-grammar validator: deterministic lint of the structured
 // Requirement/Scenario acceptance grammar in a spec.md. A port of
 // spec-validate.sh; see standards/spec-grammar.md for the grammar.
 //
-// Exit codes: 0 valid (or no structured requirements — nothing to lint) ·
+// Exit codes: 0 valid (or no structured requirements: nothing to lint) ·
 // 1 grammar violation(s) · 2 usage · 5 missing spec.md.
 var (
 	reqHeaderRe  = regexp.MustCompile(`^[[:space:]]*###[[:space:]]+[Rr]equirement:`)
@@ -57,13 +57,13 @@ func SpecValidate(arg, against, cwd string, stdout, stderr io.Writer) int {
 	rel := strings.TrimPrefix(spec, cwd+"/")
 
 	if reqs == 0 && len(findings) == 0 {
-		fmt.Fprintf(stdout, "spec-validate: %s uses the simple acceptance form (no \"### Requirement:\" blocks) — nothing to lint\n", rel)
+		fmt.Fprintf(stdout, "spec-validate: %s uses the simple acceptance form (no \"### Requirement:\" blocks): nothing to lint\n", rel)
 		return 0
 	}
 
 	// Delta cross-check (opt-in via --against): a spec written as deltas against a
 	// living ledger must classify each requirement correctly. Skipped for a flat
-	// snapshot (no delta sections) — there is nothing to reconcile.
+	// snapshot (no delta sections): there is nothing to reconcile.
 	if against != "" {
 		findings = append(findings, checkAgainstLedger(spec, against, defaultCapability(arg))...)
 	}
@@ -72,12 +72,12 @@ func SpecValidate(arg, against, cwd string, stdout, stderr io.Writer) int {
 		for _, f := range findings {
 			fmt.Fprintln(stderr, f)
 		}
-		fmt.Fprintf(stderr, "spec-validate: %s — %d requirement(s) / %d scenario(s); %d grammar error(s) (see standards/spec-grammar.md)\n",
+		fmt.Fprintf(stderr, "spec-validate: %s: %d requirement(s) / %d scenario(s); %d grammar error(s) (see standards/spec-grammar.md)\n",
 			rel, reqs, scens, len(findings))
 		return 1
 	}
 
-	fmt.Fprintf(stdout, "spec-validate: OK — %s: %d requirement(s) / %d scenario(s) well-formed (SHALL + WHEN/THEN, unique headers)\n",
+	fmt.Fprintf(stdout, "spec-validate: OK: %s: %d requirement(s) / %d scenario(s) well-formed (SHALL + WHEN/THEN, unique headers)\n",
 		rel, reqs, scens)
 	return 0
 }
@@ -220,7 +220,7 @@ func lintSpec(file string) (reqCount, scenCount int, findings []string, err erro
 			}
 			if scenInReq == 0 {
 				if looseWhenThen {
-					findings = append(findings, fmt.Sprintf("ERROR:%s: Requirement \"%s\" (line %d) has WHEN/THEN lines but no \"#### Scenario:\" header — wrap them in a scenario", file, curReq, reqLine))
+					findings = append(findings, fmt.Sprintf("ERROR:%s: Requirement \"%s\" (line %d) has WHEN/THEN lines but no \"#### Scenario:\" header: wrap them in a scenario", file, curReq, reqLine))
 				} else {
 					findings = append(findings, fmt.Sprintf("ERROR:%s: Requirement \"%s\" (line %d) has no \"#### Scenario:\" block", file, curReq, reqLine))
 				}
@@ -245,7 +245,7 @@ func lintSpec(file string) (reqCount, scenCount int, findings []string, err erro
 			looseWhenThen = false
 			key := strings.ToLower(name)
 			if first, dup := seen[key]; dup {
-				findings = append(findings, fmt.Sprintf("ERROR:%s: duplicate Requirement header \"%s\" (lines %d and %d) — headers must be unique", file, name, first, nr))
+				findings = append(findings, fmt.Sprintf("ERROR:%s: duplicate Requirement header \"%s\" (lines %d and %d): headers must be unique", file, name, first, nr))
 			} else {
 				seen[key] = nr
 			}
@@ -311,7 +311,7 @@ func resolveSpecPath(command, arg string, stderr io.Writer) (string, int, bool)
 	var spec string
 	switch {
 	case isDir(arg):
-		spec = arg + "/spec.md" // string concat, not filepath.Join — preserve the exact path bytes
+		spec = arg + "/spec.md" // string concat, not filepath.Join: preserve the exact path bytes
 	case isFile(arg):
 		spec = arg
 	default:
@@ -359,11 +359,11 @@ func checkAgainstLedger(spec, ledgerRoot, defaultCap string) []string {
 		switch r.Kind {
 		case DeltaAdded:
 			if exists {
-				findings = append(findings, fmt.Sprintf("ERROR:%s: Requirement %q (line %d) is marked ADDED but already exists in ledger capability %q — use MODIFIED, or drop the delta", spec, r.Name, r.HeaderLine, capability))
+				findings = append(findings, fmt.Sprintf("ERROR:%s: Requirement %q (line %d) is marked ADDED but already exists in ledger capability %q: use MODIFIED, or drop the delta", spec, r.Name, r.HeaderLine, capability))
 			}
 		case DeltaModified, DeltaRemoved:
 			if !exists {
-				findings = append(findings, fmt.Sprintf("ERROR:%s: Requirement %q (line %d) is marked %s but is absent from ledger capability %q — use ADDED, or fix the capability tag", spec, r.Name, r.HeaderLine, strings.ToUpper(r.Kind), capability))
+				findings = append(findings, fmt.Sprintf("ERROR:%s: Requirement %q (line %d) is marked %s but is absent from ledger capability %q: use ADDED, or fix the capability tag", spec, r.Name, r.HeaderLine, strings.ToUpper(r.Kind), capability))
 			}
 		}
 	}
@@ -371,7 +371,7 @@ func checkAgainstLedger(spec, ledgerRoot, defaultCap string) []string {
 }
 
 // defaultCapability derives the fallback capability for an untagged delta section:
-// the workspace slug — the basename of the workspace dir, or of the spec.md's
+// the workspace slug: the basename of the workspace dir, or of the spec.md's
 // parent directory when a bare file path was given.
 func defaultCapability(arg string) string {
 	if isDir(arg) {

package/engine/internal/lib/stuck.go

@@ -14,7 +14,7 @@ import (
 )
 
 // awkNumRe recognises an awk "numeric string" (optional surrounding blanks, sign,
-// int/float/exponent) — the class that makes a comparison numeric. awkLeadNumRe
+// int/float/exponent): the class that makes a comparison numeric. awkLeadNumRe
 // captures the leading numeric prefix strtod would convert (so "4x" → 4).
 var (
 	awkNumRe     = regexp.MustCompile(`^[ \t\n]*[+-]?([0-9]+\.?[0-9]*|\.[0-9]+)([eE][+-]?[0-9]+)?[ \t\n]*$`)
@@ -62,9 +62,9 @@ func sameWindow(h []string, winVal float64) bool {
 // Matching is by (tool,target) sha1, timestamps ignored. root is the .devrites
 // directory; the log lives at <root>/features/<slug>/action.log.
 //
-//	0  ok — not stuck (or logging, or no workspace: never fail the caller on log)
+//	0  ok: not stuck (or logging, or no workspace: never fail the caller on log)
 //	2  bad args
-//	3  STUCK — the recent window is a loop
+//	3  STUCK: the recent window is a loop
 func Stuck(root string, args []string, stdout, stderr io.Writer) int {
 	cmd := argAt(args, 0)
 	slug := argAt(args, 1)
@@ -84,7 +84,7 @@ func Stuck(root string, args []string, stdout, stderr io.Writer) int {
 			return 2
 		}
 		if !isDir(dir) {
-			return 0 // no workspace — never fail the caller
+			return 0 // no workspace: never fail the caller
 		}
 		record := fmt.Sprintf("%d %s %s\n", time.Now().Unix(), tool, sha1Hex(tool+"|"+target))
 		f, err := os.OpenFile(logPath, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0o644)
@@ -102,7 +102,7 @@ func Stuck(root string, args []string, stdout, stderr io.Writer) int {
 		}
 		data, err := os.ReadFile(logPath)
 		if err != nil {
-			fmt.Fprintln(stdout, "stuck: no actions logged — not stuck.")
+			fmt.Fprintln(stdout, "stuck: no actions logged: not stuck.")
 			return 0
 		}
 		return checkStuck(actionHashes(data), rawWin, stdout)
@@ -128,14 +128,14 @@ func actionHashes(data []byte) []string {
 
 // checkStuck evaluates the hash column for identical-repeat,
 // A<->B ping-pong (last 6), and one-action-dominates (≥6 of last 8). The window
-// arg is handled with awk-compatible semantics — see awkNum / sameWindow — because
+// arg is handled with awk-compatible semantics (see awkNum / sameWindow) because
 // the prior shell helper passed it verbatim to `awk -v win=`.
 func checkStuck(h []string, rawWin string, stdout io.Writer) int {
 	n := len(h)
 	winVal, isNumericString := awkNum(rawWin)
 
 	// `NR < win`: a numeric comparison when the token is a numeric string, else a
-	// string comparison of str(NR) against the raw token — awk's comparison rule.
+	// string comparison of str(NR) against the raw token: awk's comparison rule.
 	tooFew := false
 	if isNumericString {
 		tooFew = float64(n) < winVal
@@ -143,13 +143,13 @@ func checkStuck(h []string, rawWin string, stdout io.Writer) int {
 		tooFew = strconv.Itoa(n) < rawWin
 	}
 	if tooFew {
-		fmt.Fprintf(stdout, "stuck: only %d action(s) — not stuck.\n", n)
+		fmt.Fprintf(stdout, "stuck: only %d action(s): not stuck.\n", n)
 		return 0
 	}
 	// The last `win` actions are identical. The message echoes the raw token, as
 	// awk prints the `win` variable verbatim (so "04"/"+4" render unchanged).
 	if sameWindow(h, winVal) {
-		fmt.Fprintf(stdout, "stuck: last %s actions identical — STUCK.\n", rawWin)
+		fmt.Fprintf(stdout, "stuck: last %s actions identical: STUCK.\n", rawWin)
 		return 3
 	}
 	// A<->B ping-pong over the last 6 actions.
@@ -166,7 +166,7 @@ func checkStuck(h []string, rawWin string, stdout io.Writer) int {
 			}
 		}
 		if pp && h[n-1] != h[n-2] {
-			fmt.Fprintln(stdout, "stuck: A<->B ping-pong over last 6 — STUCK.")
+			fmt.Fprintln(stdout, "stuck: A<->B ping-pong over last 6: STUCK.")
 			return 3
 		}
 	}
@@ -183,11 +183,11 @@ func checkStuck(h []string, rawWin string, stdout io.Writer) int {
 			}
 		}
 		if top >= 6 {
-			fmt.Fprintf(stdout, "stuck: one action %d/8 of recent window — STUCK.\n", top)
+			fmt.Fprintf(stdout, "stuck: one action %d/8 of recent window: STUCK.\n", top)
 			return 3
 		}
 	}
-	fmt.Fprintln(stdout, "stuck: recent window varied — not stuck.")
+	fmt.Fprintln(stdout, "stuck: recent window varied: not stuck.")
 	return 0
 }
 
@@ -197,7 +197,7 @@ func sha1Hex(s string) string {
 	return hex.EncodeToString(sum[:])
 }
 
-// argAt returns args[i] or "" — the Go analogue of bash's ${N:-} positional reads.
+// argAt returns args[i] or "": the Go analogue of bash's ${N:-} positional reads.
 func argAt(args []string, i int) string {
 	if i < len(args) {
 		return args[i]

package/engine/internal/lib/templates/conventions_ledger_header.md

@@ -2,5 +2,5 @@
 
 Conventions proven by sealed slices on this project. **Local, gitignored, advisory.**
 The confidence band is earned: it reflects how many independent sealed slices corroborated
-the convention — it is not a model's guess. A high band is still untrusted data; a fresh
+the convention. It is not a model's guess. A high band is still untrusted data; a fresh
 observation of the live code always wins over a stale entry here.

package/engine/internal/lib/templates/conventions_orient_header.txt

@@ -1 +1 @@
-# Conventions ledger — proven priors (live code always overrides)
+# Conventions ledger: proven priors (live code always overrides)

package/engine/internal/lib/testintegrity.go

@@ -10,7 +10,7 @@ import (
 	"strings"
 )
 
-// skipMarkers matches a test that has been muted — a skip/focus/ignore marker
+// skipMarkers matches a test that has been muted: a skip/focus/ignore marker
 // across the common test frameworks. assertMarkers matches an assertion. Both are
 // counted per file to detect a test being weakened rather than fixed.
 var (
@@ -26,7 +26,7 @@ var (
 //
 //	0  clean, or skipped because this is not a git repo
 //	2  no active workspace / bad args
-//	3  WEAKENED — a test was deleted, skipped, or de-asserted since the base
+//	3  WEAKENED: a test was deleted, skipped, or de-asserted since the base
 func TestIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 	// Accept both `test-integrity [slug]` and the `check [slug]` alias; a leading
 	// dash is treated as "no slug".
@@ -56,7 +56,7 @@ func TestIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 	cwd, _ := os.Getwd()
 	gitRoot := gitToplevel(cwd)
 	if gitRoot == "" {
-		fmt.Fprintln(stderr, "test-integrity: not a git repo — gate skipped, eyeball the test diff by hand.")
+		fmt.Fprintln(stderr, "test-integrity: not a git repo: gate skipped, eyeball the test diff by hand.")
 		return 0
 	}
 
@@ -85,7 +85,7 @@ func TestIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 		testChanged++
 		old, ok := gitShow(gitRoot, ref+":"+f)
 		if !ok || old == "" {
-			continue // new test file — adding tests is never a weakening
+			continue // new test file: adding tests is never a weakening
 		}
 		if !isFile(filepath.Join(gitRoot, f)) {
 			weak++
@@ -110,17 +110,17 @@ func TestIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 	}
 
 	// Verification-gap advisory: source changed but no test file did. Not a
-	// weakening and never a verdict on its own — a pointer to run the
+	// weakening and never a verdict on its own: a pointer to run the
 	// verification-gap trace (testing.md), since a green suite can pass identically
 	// with the change reverted. Printed on both the clean and weakened paths.
 	gapAdvisory := ""
 	if srcChanged > 0 && testChanged == 0 {
-		gapAdvisory = fmt.Sprintf("test-integrity: advisory — %d source file(s) changed, 0 test file(s) touched; "+
+		gapAdvisory = fmt.Sprintf("test-integrity: advisory: %d source file(s) changed, 0 test file(s) touched; "+
 			"run the verification-gap trace (testing.md) to confirm each changed behavior is asserted.", srcChanged)
 	}
 
 	if weak > 0 {
-		fmt.Fprintf(stderr, "test-integrity: WEAKENED — %d test file(s) lost coverage since the slice base:\n", weak)
+		fmt.Fprintf(stderr, "test-integrity: WEAKENED: %d test file(s) lost coverage since the slice base:\n", weak)
 		fmt.Fprint(stderr, report.String())
 		fmt.Fprintln(stderr, "A test weakened to pass a gate is a Critical finding. Revert it; fix the code or raise a blocking question.")
 		if gapAdvisory != "" {
@@ -128,14 +128,14 @@ func TestIntegrity(root string, args []string, stdout, stderr io.Writer) int {
 		}
 		return 3
 	}
-	fmt.Fprintln(stdout, "test-integrity: OK — no test deleted, skipped, or de-asserted since the base.")
+	fmt.Fprintln(stdout, "test-integrity: OK: no test deleted, skipped, or de-asserted since the base.")
 	if gapAdvisory != "" {
 		fmt.Fprintln(stdout, gapAdvisory)
 	}
 	return 0
 }
 
-// isSourceFile recognises a path as project source worth pairing with a test —
+// isSourceFile recognises a path as project source worth pairing with a test:
 // a code file that is not itself a test. It filters out the common non-code
 // changes (docs, config, lockfiles) so the verification-gap advisory keys on
 // behavior-bearing edits, not a README or a manifest bump.

package/engine/internal/lib/tickafk.go

@@ -19,7 +19,7 @@ import (
 // any workspace. Exit codes:
 //
 //	0  a slice was spent and budget remains, or no budget is set (nothing to do)
-//	3  the budget is now exhausted — the caller must stop and hand back to a human
+//	3  the budget is now exhausted: the caller must stop and hand back to a human
 //	5  the file is missing, or the field holds a non-numeric value
 func TickAfk(args []string, stdout, stderr io.Writer) int {
 	path := argAt(args, 0)
@@ -37,7 +37,7 @@ func TickAfk(args []string, stdout, stderr io.Writer) int {
 
 	remaining, found := readBudget(lines)
 	if !found || remaining == "none" {
-		fmt.Fprintf(stdout, "tick-afk: no \"AFK slices remaining\" budget set in %s — no-op\n", path)
+		fmt.Fprintf(stdout, "tick-afk: no \"AFK slices remaining\" budget set in %s: no-op\n", path)
 		return 0
 	}
 	if !isAllDigits(remaining) {
@@ -62,8 +62,8 @@ func TickAfk(args []string, stdout, stderr io.Writer) int {
 	return 0
 }
 
-// readBudget returns the current "AFK slices remaining" value — the first blank-
-// delimited token after the field — and whether the field is present at all.
+// readBudget returns the current "AFK slices remaining" value: the first blank-
+// delimited token after the field, and whether the field is present at all.
 func readBudget(lines []string) (value string, found bool) {
 	value, found = state.CursorField(lines, state.CursorAFKSlicesRemaining)
 	if !found {