devrites 3.2.1 → 3.2.3

package/pack/.claude/skills/rite-seal/reference/phase-contract.md

@@ -45,8 +45,7 @@
      against the ledger: an every-slice-trivial feature (`- none`) is a valid pass; a stood triggering
      decision (boundary / data-model / auth / public-API / migration / branching) with no verdict is
      the finding, same severity as rc=3.
-   - **rc=0:** covered, or not assessable (an inline build logs no dispatch: verify the ledger's
-     verdicts by hand).
+   - **rc=0:** covered, or not assessable because no wright was logged.
    Either way, walk the `## Decisions stood` ledger yourself: severity rides the unverified
    **decision**, never the exit code alone.
 5. Check **security, data, migration, rollback**, strategy scope, principles,
@@ -61,7 +60,7 @@
    [`parallel-dispatch.md`](../../devrites-lib/reference/parallel-dispatch.md). Await
    fresh-context batches of at most three and give reviewers only the workspace path plus
    immutable diff, without author reasoning. Use named role → safely enforced generic fresh
-   agent → labelled inline; inline output is never independent. Carry Spec/Code verdicts only
+   agent; if neither is available, seal remains NO-GO. Carry Spec/Code verdicts only
    for an unchanged post-review diff; rerun the other applicable axes.
    **Footprint: account for the whole roster.** For each reviewer you dispatch, append
    `devrites-engine footprint log <slug> reviewer devrites-<x>-reviewer` (the reviewer's **exact agent name**:

package/pack/.claude/skills/rite-seal/reference/risk-and-rollback.md

@@ -25,18 +25,16 @@ For each risky step, state how to back it out:
 - A new external dependency with no failure handling is at least **Important**.
 - Record the chosen rollback path in `seal.md` → "Rollback / Recovery".
 
-## Fresh-context fallback weighting
-
-An inline final-rung review is useful signal but **not independent evidence**:
-
-- Record `independence: fallback` and a roster skip reason; never log it as a dispatched
-  reviewer or a clean fresh-context pass.
-- Preserve its findings at their normal severity. A clean inline result still leaves an
-  **Important assurance gap** and cannot silently satisfy a required axis.
-- Seal remains NO-GO until that axis runs through a fresh-context spawn, or the human
-  explicitly accepts the reduced assurance in `seal.md`. AFK never auto-accepts it.
-- Security or irreversible-risk scope has no reduced-assurance override: unavailable
-  independent review remains NO-GO.
+## Fresh-context availability
+
+A required review must run in a fresh spawned agent:
+
+- If neither a named role nor a guarded generic agent is available, record the roster
+  skip reason and keep seal **NO-GO**.
+- Never run the reviewer in the root context or log root work as a dispatched review.
+- AFK never auto-accepts a missing reviewer.
+- Security or irreversible-risk scope remains NO-GO while independent review is
+  unavailable.
 
 ## Destructive operations
 Confirm any destructive step with the user before shipping. Verify backups exist where

package/pack/.claude/skills/rite-ship/SKILL.md

@@ -3,6 +3,7 @@ name: rite-ship
 description: Ship the sealed feature: commit, push, tag, archive, close. Use when the user says "ship it", "push the branch", "tag the release", or "close the task" after /rite-seal GO. Not for GO/NO-GO readiness.
 argument-hint: "[feature-slug]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-ship: ship + close the task

package/pack/.claude/skills/rite-spec/SKILL.md

@@ -3,6 +3,7 @@ name: rite-spec
 description: Spec new or high-risk behavior before code and write its `.devrites/work/<slug>/` workspace. Use for a feature/app, vague product idea, auth or migration work, or a public-API change. Not for approved-spec planning.
 argument-hint: "<feature or idea>"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-spec: investigate and write the spec

package/pack/.claude/skills/rite-status/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked read-only active-feature report: phase, active slice,
 argument-hint: "[feature-slug]"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # /rite-status: active feature status

package/pack/.claude/skills/rite-temper/SKILL.md

@@ -3,6 +3,7 @@ name: rite-temper
 description: Temper a readied spec before planning. Use when the user says "temper this", "strategy review", "pre-mortem the spec", or asks if we are over/under-building. Not for code review or final seal.
 argument-hint: "[feature-slug] [--mode expand|selective|hold|reduce]"
 user-invocable: true
+required-agent-roles: devrites-strategy-reviewer
 ---
 
 # /rite-temper: review scope and risk before planning
@@ -112,8 +113,8 @@ that needs more than the default pre-mortem) selected by the section's risk).
    dimension still below bar after 3 is classified by decision ownership: a product/scope/risk
    choice becomes a blocking question; an objective spec defect stays blocked with the exact
    required edit and routes to `/rite-spec`, not `/rite-resolve`. Irreversible-risk findings
-   always pause. Use the shared capability ladder; an inline final-rung pass is labeled
-   `independence: fallback`, never an independent review. After an accepted edit to a
+   always pause. Use the shared capability ladder; if no fresh-agent rung is available,
+   stop for HITL. After an accepted edit to a
    coverage-bound input, repeat step 6's revalidation and digest refresh before handoff.
 8. **STOP.** Report the mode, the scope deltas, and the floor verdict; recommend `/rite-define`.
 

package/pack/.claude/skills/rite-upgrade/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked semantic upgrade for an active legacy DevRites workspa
 argument-hint: "[feature-slug]"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: devrites-upgrade-planner
 ---
 
 # /rite-upgrade: bring an active workspace onto the current contract
@@ -58,7 +59,8 @@ Plan, Vet, Converge, and Build phase contracts needed by the assessment.
    devrites-engine snapshot [feature-slug]
    ```
    If every semantic artifact names the current contract and `build-readiness` passes,
-   report a no-op.
+   mark the candidate as a likely no-op; the fresh upgrade assessment in step 2 must
+   confirm that before reporting it.
 1. **Freeze the preservation baseline.** Create the standard orchestrator-controlled
    `agent-packet/v1` baseline. Include exact paths for current phase/artifact contracts,
    `state.md`, `spec.md`, `decision-coverage.md`, `architecture.md`, `plan.md`, `tasks.md`,

package/pack/.claude/skills/rite-vet/SKILL.md

@@ -3,6 +3,7 @@ name: rite-vet
 description: Vet a defined plan before code with senior-engineer engineering review. Use when the user says "vet the plan", "engineering review", "lock in the plan", or before building. Not for code review or final seal.
 argument-hint: "[slug] [--cross-model] [--full]"
 user-invocable: true
+required-agent-roles: devrites-plan-reviewer
 ---
 
 # /rite-vet: review the plan before build

package/pack/.claude/skills/rite-zoom-out/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked read-only structural map of unfamiliar code: modules,
 argument-hint: "[symbol | file | area to map]"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # /rite-zoom-out: step up one abstraction layer

package/pack/generated/claude/skills/devrites-api-interface/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-api-interface
 description: Design stable API/interface contracts before implementation: REST/GraphQL endpoints, module boundaries, type contracts, FE/BE splits. Use when the user says "design the API" or a slice crosses a boundary. Not for helpers.
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-api-interface: contract before implementation

package/pack/generated/claude/skills/devrites-audit/SKILL.md

@@ -3,6 +3,7 @@ name: devrites-audit
 description: Read-only feature audit on security/perf/simplify: auth trust boundary, injection, secrets, hot-path, payload-size, perf budget, Chesterton delete/cleanup. Use when auditing one axis. Not for writes.
 argument-hint: "<security | perf | simplify>"
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-audit: read-only audit dispatch
@@ -39,14 +40,12 @@ no cross-pollination and the shared maximum of three concurrent read-only roles.
 
 ## Fallback and scope
 
-Use the capability ladder; inline is allowed only when no safe fresh-context rung
-preserves the role's read-only boundary or policy rejects it, and must say
-`independence: fallback`. Use these role contracts:
+Use the capability ladder. If no safe fresh-context rung preserves the role's
+read-only boundary, stop for HITL. Use these role contracts:
 
 - `.claude/agents/devrites-security-auditor.md`
 - `.claude/agents/devrites-performance-reviewer.md`
 - `.claude/agents/devrites-simplifier-reviewer.md`
 
-Seal weights that fallback under
-[`risk-and-rollback.md`](../rite-seal/reference/risk-and-rollback.md). Stay inside the
-active feature. Critical findings block seal; simplification never changes behavior.
+Stay inside the active feature. Critical findings block seal; simplification never
+changes behavior.

package/pack/generated/claude/skills/devrites-browser-proof/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-browser-proof
 description: Observe and prove working UI behavior in a real browser with screenshots, interactions, network evidence, and Core Web Vitals. Use for browser proof or performance after the page works.
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-browser-proof: runtime evidence for UI

package/pack/generated/claude/skills/devrites-debug-recovery/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-debug-recovery
 description: Debug application failures: tests, builds, CI, runtime exceptions, browser errors, app 500s. Reproduce, rank hypotheses, fix root cause, regression-test. Use when "debug", "build is red", "tests fail", or the app is broken. Not for DevRites install health.
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-debug-recovery: fix the root cause, not the symptom

package/pack/generated/claude/skills/devrites-doubt/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-doubt
 description: Stress-test one non-trivial decision with an adversarial independent take. Use when the user says "are we sure", "double-check", "what could go wrong", or before boundary/data/auth/API/migration choices. Not for trivial choices.
 user-invocable: false
+required-agent-roles: devrites-doubt-reviewer
 ---
 
 # devrites-doubt: CLAIM → EXTRACT → DOUBT → RECONCILE → STOP
@@ -22,7 +23,7 @@ code · claiming "this is safe", "this scales", or "this matches the spec".
   `agent-packet/v1` and the adversarial objective *"find what's wrong; do not
   validate."* Follow
   [`agents.md`](../devrites-lib/reference/standards/agents.md). Inline does not satisfy
-  independence; it is a labeled fallback only at the final capability-ladder rung.
+  independence; if no fresh-agent rung is available, stop for HITL.
 - [ ] **4. RECONCILE**: classify EVERY finding: contract misread | valid & actionable |
   valid trade-off | noise. **Doubt-theater check:** if two or more cycles find substantive
   issues but classify **zero** as actionable, the review is too agreeable. Sharpen the

package/pack/generated/claude/skills/devrites-frontend-craft/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-frontend-craft
 description: Implement frontend at senior designer-engineer quality: every state covered, anti-AI-slop, WCAG 2.2 AA. Use when the user says "build the UI", "design system", "a11y", or `/rite-build` detects UI. Not for polishing a built feature or design exploration.
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-frontend-craft: UI like a senior designer-engineer

package/pack/generated/claude/skills/devrites-interview/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-interview
 description: Interview the user one question at a time to extract intent. Use when the user says "interview me", "I am not sure what I want", or the ask is underspecified. Not for casual clarification.
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-interview: extract intent

package/pack/generated/claude/skills/devrites-lib/SKILL.md

@@ -3,6 +3,7 @@ name: devrites-lib
 description: Internal shared DevRites helper library. Documents cross-cutting engine commands and references; not a user workflow. Do not invoke directly.
 user-invocable: false
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # devrites-lib: internal shared helpers (not a command)

package/pack/generated/claude/skills/devrites-lib/reference/model-tiers.md

@@ -21,13 +21,14 @@ one to a reviewer to save cost. The tier a scout runs on is where savings are sa
 ## The degradation rule
 
 Tiers are an optimization, never a correctness dependency. A skill written against tiers must run
-correctly on a harness that cannot select models per agent, or has no subagent primitive at all:
+correctly on a harness that cannot select models per agent:
 
 1. **Per-agent model override unavailable** → dispatch the scout on the **inherited** model and
    keep its **read budget and output cap**. The cost control falls back to structure, not model
    choice. This is why every scout dispatch also carries an explicit read budget.
-2. **No subagent primitive at all** → run the scout work **inline** in the orchestrator, with the
-   same budgets. The tier still tells you how much to spend, even with nothing to dispatch to.
+2. **No safe fresh-agent rung** → stop for HITL when the scout is required, or record the
+   explicitly optional scout as skipped. Never relabel root-context work as independent
+   specialist dispatch.
 
 A skill that only works when it can pick a cheap model is broken. The tier names the *intent*; the
 budget enforces it regardless of what the harness can do.

package/pack/generated/claude/skills/devrites-lib/reference/parallel-dispatch.md

@@ -91,9 +91,8 @@ devrites-engine footprint roster <slug>
 ```
 
 `roster` rc=3 means an unaccounted reviewer: dispatch or record why it does not apply.
-rc=1 means an always-on skip; this is valid only for an unchanged-candidate carry-forward
-or the explicit independence fallback in
-[`../../rite-seal/reference/risk-and-rollback.md`](../../rite-seal/reference/risk-and-rollback.md).
+rc=1 means an always-on skip; this is valid only for an unchanged-candidate
+carry-forward. A required reviewer that cannot be dispatched blocks the phase.
 
 ## Reconciliation
 
@@ -106,5 +105,5 @@ or the explicit independence fallback in
 6. Apply the caller's gate; do not invent a composite score.
 
 Every panel reviewer runs at the ceiling or inherited tier. If the named role is
-unavailable, use the universal ladder. Record an inline fallback as non-independent
-under the seal risk rule, never as a fresh-context pass.
+unavailable, use the universal ladder. If no fresh-agent rung is available, stop for
+HITL; never execute the reviewer in the root context.

package/pack/generated/claude/skills/devrites-lib/reference/standards/agents.md

@@ -50,7 +50,7 @@ review fan-out. Phase skills own their phase-locked role choice.
 
 ## Fresh-context dispatch ladder
 
-Use the first available rung; capability failure never changes the contract:
+Use the first safe rung:
 
 1. Dispatch the named custom role with the host's spawn primitive.
 2. If spawning works but that role is unavailable, use a generic fresh agent only when
@@ -59,13 +59,19 @@ Use the first available rung; capability failure never changes the contract:
    allowlist (or an isolated/staged checkout) for a `worker`. Tell it to read the
    generated role contract, then give it the same packet. An instruction-only shared-tree
    writer is not an available rung.
-3. When no safe fresh-context rung exists or policy rejects spawning, run the discipline
-   inline under the same budgets and label it `independence: fallback`. It is not an
-   independent review; seal applies
-   [`risk-and-rollback.md`](../../../rite-seal/reference/risk-and-rollback.md).
-
-Host mapping: Claude Code uses `Agent` (`Task` is its legacy alias); Codex uses
-`spawn_agent`. Use the host-neutral term **fresh-context dispatch** in shared guidance.
+3. Otherwise stop for HITL; specialist work never runs in the root context.
+
+Every canonical skill declares `required-agent-roles` in its frontmatter. Use `none`
+when no fresh agent is unconditionally required for that invocation. Codex reads this
+field from the installed skill at `UserPromptSubmit` and arms a fail-closed completion
+receipt for every listed role; the engine derives roles from skill metadata.
+Conditional scouts and reviewers remain owned by their explicit phase triggers.
+
+Claude uses `Agent` (`Task` alias); Codex uses `spawn_agent`. V2 sends the exact named
+role, a unique `task_name`, and `fork_turns="none"`; Codex loads its TOML natively.
+Because V2 lifecycle calls bypass hooks, Stop/reconcile verify the durable rollout's
+role, instructions, wait, completion, and delivered result. V1 uses guarded
+`explorer`/`worker` with injected rules and a lifecycle receipt. Prose isn't evidence.
 
 ## File-backed dispatch contract
 

package/pack/generated/claude/skills/devrites-prose-craft/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-prose-craft
 description: Humanize prose without losing technical content. Use when asked to remove AI-writing tells, match a writing sample or project voice, edit artifacts/replies/commit or PR prose, or run `/rite-polish`'s prose pass. Not for code comments or UI craft.
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-prose-craft: prose that reads human

package/pack/generated/claude/skills/devrites-refresh-indexes/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-refresh-indexes
 description: Refresh stale optional indexes. Use when structural lookup disagrees with live code or rite-doctor requests a synchronous reindex.
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-refresh-indexes: keep the code-intelligence indexes fresh

package/pack/generated/claude/skills/devrites-source-driven/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-source-driven
 description: Verify uncertain framework/library behavior against official docs or installed source before relying on it. Use when the user says "check the docs", "verify this assumption", or hits an unfamiliar API. Not for internal code.
 user-invocable: false
+required-agent-roles: devrites-evidence-scout
 ---
 
 # devrites-source-driven: verify, don't guess

package/pack/generated/claude/skills/devrites-ux-shape/SKILL.md

@@ -2,6 +2,7 @@
 name: devrites-ux-shape
 description: Plan UX/UI before code: design direction, design brief, visual direction, key states, interaction model for screens/forms/dashboards/settings pages. Use when shaping UI. Not for building/polish.
 user-invocable: false
+required-agent-roles: none
 ---
 
 # devrites-ux-shape: plan the UX/UI before code

package/pack/generated/claude/skills/rite/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked DevRites menu and router; no args renders the menu, a
 argument-hint: "[verb [args...]]"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # /rite: DevRites menu + router

package/pack/generated/claude/skills/rite-adopt/SKILL.md

@@ -3,6 +3,7 @@ name: rite-adopt
 description: Adopt an existing or legacy codebase into DevRites by reverse-engineering current behavior, seeding conventions, and establishing the workflow. Use for inherited or live applications.
 argument-hint: "[path or area to adopt] [+ what you want to build next]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-adopt: onboard existing code

package/pack/generated/claude/skills/rite-autocomplete/SKILL.md

@@ -3,6 +3,7 @@ name: rite-autocomplete
 description: Run the DevRites lifecycle end-to-end unattended; --ship confirms the final gate. Use when the user says "autocomplete", "one-shot this feature", or "ship it autonomously". Not for a single phase.
 argument-hint: "[idea] [--ship|--yolo] [--max-slices N]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-autocomplete: full lifecycle, unattended

package/pack/generated/claude/skills/rite-build/SKILL.md

@@ -3,6 +3,7 @@ name: rite-build
 description: Build one approved vertical slice, then stop with evidence. Use when the next planned slice should be implemented. Not for multiple slices.
 argument-hint: "[slice number or name]"
 user-invocable: true
+required-agent-roles: devrites-slice-wright
 ---
 
 # /rite-build: one verified slice
@@ -19,7 +20,7 @@ doubt, fail-on-red, recording, and stop checks. See
 ## Rules consulted (read on demand from `.claude/skills/devrites-lib/reference/standards/`)
 Read `.claude/skills/devrites-lib/reference/standards/core.md` first (workflow step 0). The
 following load on demand: **the wright reads them** (they are named in its contract) while it
-writes; read them yourself for the doubt/record gates or in the inline fallback:
+writes; read them yourself for the doubt/record gates:
 - `coding-style.md`: naming, function shape, guard clauses, comments, reuse-first.
 - `error-handling.md`: fail fast, no silent catches, fail closed.
 - `testing.md`: pyramid, behaviour over implementation, see-it-fail-first.

package/pack/generated/claude/skills/rite-build/reference/phase-contract.md

@@ -55,9 +55,8 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    **Default serial branch.** Follow
    [`wright-dispatch.md`](wright-dispatch.md) end to end; it owns snapshot timing, stuck
    logging, the exact packet, conditional skill loading, and return checks. Dispatch through
-   named wright → safely enforced generic fresh worker → labelled inline fallback. Inline is
-   allowed only when no fresh worker preserves recognized wright identity plus exact allowlist
-   enforcement or isolated staging; it never skips reconciliation. Before any canonical
+   named wright → safely enforced generic fresh worker. If neither is available, stop for
+   HITL; the root never performs wright work. Before any canonical
    `.devrites/` mutation, validate the typed result and require a clean immediate
    `devrites-engine reconcile check`; exit `5` rejects the writer result.
 4. **Doubt every stood decision before accepting the slice.** The writer never grades its
@@ -176,4 +175,4 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    just built. **When every slice is built** (`✅ ALL BUILT`) say so explicitly (the build
    phase is complete, the next phase is `/rite-prove`) don't leave completion implicit.
 
-> **Mid-flight discipline.** The wright (or you, in the inline fallback) must resist doing two slices, skipping TDD, adding a defensive check, or wandering outside `touched-files.md`; you must resist skipping the post-return `devrites-doubt` because the wright "seems confident": see [`anti-patterns.md`](anti-patterns.md). Load it the moment you reach for the excuse.
+> **Mid-flight discipline.** The wright must resist doing two slices, skipping TDD, adding a defensive check, or wandering outside `touched-files.md`; you must resist skipping the post-return `devrites-doubt` because the wright "seems confident": see [`anti-patterns.md`](anti-patterns.md). Load it the moment you reach for the excuse.

package/pack/generated/claude/skills/rite-build/reference/wright-dispatch.md

@@ -121,15 +121,14 @@ Only then persist `state.md`, `evidence.md`, `touched-files.md`, decision/doubt
 and browser evidence. Keep the retained window across a genuine human wait that will
 resume the same slice. Close it before abandoning the slice for a scope/plan transition.
 
-## Host fallback
-
-Use named wright → safely enforced generic fresh worker → labelled inline fallback from
-`standards/agents.md`. A generic worker is eligible only when the host preserves
-recognized wright identity plus exact allowlist enforcement, or contains it in an
-isolated/staged checkout. Post-hoc reconciliation alone cannot authorize an
-instruction-only shared-tree writer.
-
-When no safe fresh-context writer rung is callable, the root may execute the same bounded
-wright discipline inline. Write `.reconcile-inline` after the initial snapshot so the legacy
-A1 pre-hook recognizes the authorized fallback; reconciliation does **not** skip. The
-same allowlist, baseline, integrity gates, and close command remain mandatory.
+## Host dispatch
+
+Use named wright → enforced V1 generic worker from `standards/agents.md`. On Codex
+MultiAgent V2, dispatch the exact named `devrites-slice-wright` with a unique
+`task_name` and `fork_turns="none"`; its durable child rollout must prove the native
+wright role, wait, completion, and non-empty result from the current reconcile window.
+Any generic worker still needs the exact allowlist or an isolated checkout;
+reconciliation alone is insufficient. If no safe fresh-agent rung is available, stop
+for HITL. On Codex, `reconcile check` and `reconcile close` require the completed
+wright receipt bound to the current reconcile snapshot.
+The root never performs wright work.

package/pack/generated/claude/skills/rite-clarify/SKILL.md

@@ -3,6 +3,7 @@ name: rite-clarify
 description: Run the topology-first decision-coverage scan after rite-spec and before strategy or architecture. Audit actors, journeys, states, data, integrations, operations, proof, assumptions, and must-NOT boundaries; close Partial/Missing rows and emit decision-coverage.md CLEAR. Use for missing/stale coverage or a missed pre-build product decision.
 argument-hint: "[feature-slug]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-clarify: resolve product decisions

package/pack/generated/claude/skills/rite-converge/SKILL.md

@@ -3,6 +3,7 @@ name: rite-converge
 description: Converge intent and live code. Use when resuming a half-built feature, after `/rite-adopt` drift, or the user asks "what's left to build". Not for initial planning.
 argument-hint: "[feature-slug]"
 user-invocable: true
+required-agent-roles: devrites-evidence-scout
 ---
 
 # /rite-converge: compare live code with intent

package/pack/generated/claude/skills/rite-customize/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked helper for authoring DevRites overrides or extensions.
 argument-hint: "[override <agent> | extension <name>]"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # /rite-customize: guided project customization

package/pack/generated/claude/skills/rite-define/SKILL.md

@@ -3,6 +3,7 @@ name: rite-define
 description: Define the first build plan from an approved spec: architecture, task slices, traceability, and state. Use when turning approved intent into its initial plan.
 argument-hint: "[feature-slug]"
 user-invocable: true
+required-agent-roles: devrites-plan-drafter
 ---
 
 # /rite-define: plan from the spec

package/pack/generated/claude/skills/rite-doctor/SKILL.md

@@ -3,6 +3,7 @@ name: rite-doctor
 description: Doctor DevRites setup or index health. Use when workflow wiring is broken, the user asks to check DevRites, or says "reindex". Not for application bugs.
 argument-hint: "[--code | --reindex]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-doctor: health check

package/pack/generated/claude/skills/rite-dogfood/SKILL.md

@@ -4,6 +4,7 @@ description: Explicit browser dogfood QA for the active feature or branch.
 argument-hint: "[feature-slug|branch] [--port N]"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # /rite-dogfood: diff-scoped browser QA

package/pack/generated/claude/skills/rite-explain/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked explainer that teaches one concept, diff, idea, or rec
 argument-hint: "[a concept | a diff ref | an idea | \"what did I do this week?\"], or bare to be asked"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # /rite-explain: the human half of the learning loop
@@ -42,8 +43,9 @@ Dispatch by task shape, per [`devrites-lib/reference/model-tiers.md`](../devrite
   orchestrator's own model; nothing is dispatched down. Teaching quality is the whole product: do
   not cheapen it.
 
-The degradation rule in that file applies: no per-agent model control → run the scout inline under
-the same budget.
+No per-agent model control means dispatch the scout as a same-model fresh agent under the
+same budget. If no fresh-agent rung is available, stop with the missing capability; never run
+the scout in the root context.
 
 ## Workflow
 

package/pack/generated/claude/skills/rite-frame/SKILL.md

@@ -3,6 +3,7 @@ name: rite-frame
 description: Frame an ad-hoc ask before coding, then audit the diff. Use for underspecified imperative asks, raw-diff self-audits, or `/rite-quick` setup. Not a lifecycle gate.
 argument-hint: "[task to frame | diff to audit]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-frame: frame the goal, audit the diff

package/pack/generated/claude/skills/rite-handoff/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked handoff writer: sync chat-only context into `.devrites
 user-invocable: true
 disable-model-invocation: true
 argument-hint: "[what the next session will focus on]"
+required-agent-roles: none
 ---
 
 # /rite-handoff: chat-only context, into a fresh-agent doc

package/pack/generated/claude/skills/rite-learn/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked review of the learning ledger; promotes recurring less
 argument-hint: "[--mine | \"<lesson to record>\"]"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # /rite-learn: the cross-feature learning loop

package/pack/generated/claude/skills/rite-plan/SKILL.md

@@ -3,6 +3,7 @@ name: rite-plan
 description: Re-plan existing work when reality invalidates the plan: reslice a slice that is too big, repair drift, reorder dependencies, split boundaries, or unblock work. Not first-pass decomposition.
 argument-hint: "[mode: decompose|reslice|repair|reorder|split|unblock|course-correct|revise]"
 user-invocable: true
+required-agent-roles: devrites-plan-drafter
 ---
 
 # /rite-plan: (re)plan an active feature

package/pack/generated/claude/skills/rite-polish/SKILL.md

@@ -3,6 +3,7 @@ name: rite-polish
 description: Polish the active feature before review: code always, UI when touched. Use when the user says "polish this", "finish before review", "normalize the UI", or "make it bolder/quieter". Not for repo-wide refactors.
 argument-hint: "[target | bolder | quieter | distill | harden | normalize-only]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-polish: finish before review

package/pack/generated/claude/skills/rite-pov/SKILL.md

@@ -3,6 +3,7 @@ name: rite-pov
 description: Project-grounded verdict for adopting, switching, rejecting, or revisiting a named external technology, library, platform, CVE, or pattern. Use when deciding whether this project should commit to an outside option.
 argument-hint: "[candidate/link/question]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-pov: project-grounded external verdict

package/pack/generated/claude/skills/rite-pr-feedback/SKILL.md

@@ -4,6 +4,7 @@ description: Explicit utility for resolving GitHub PR review feedback.
 argument-hint: "[PR number|thread URL|blank for current branch]"
 user-invocable: true
 disable-model-invocation: true
+required-agent-roles: none
 ---
 
 # /rite-pr-feedback: resolve PR review threads

package/pack/generated/claude/skills/rite-pressure-test/SKILL.md

@@ -3,6 +3,7 @@ name: rite-pressure-test
 description: Pressure-test a rough/vague idea: ideate, explore 3-5 approaches, radically different shapes, diverge then converge on direction before spec. Not for writing spec.
 argument-hint: "[rough idea or plan to stress-test]"
 user-invocable: true
+required-agent-roles: none
 ---
 
 # /rite-pressure-test: diverge then converge

package/pack/generated/claude/skills/rite-prototype/SKILL.md

@@ -4,6 +4,7 @@ description: User-invoked throwaway prototype for one logic or UI design questio
 user-invocable: true
 disable-model-invocation: true
 argument-hint: "[the question the prototype is answering]"
+required-agent-roles: none
 ---
 
 # /rite-prototype: answer one question with throwaway code

package/pack/generated/claude/skills/rite-prove/SKILL.md

@@ -3,6 +3,7 @@ name: rite-prove
 description: Prove a completed feature with tests and the full test suite, build/typecheck/lint, end-to-end/browser evidence, screenshots, commands, and outputs for seal. Not for single-slice proof.
 argument-hint: "[feature-slug]"
 user-invocable: true
+required-agent-roles: devrites-proof-runner
 ---
 
 # /rite-prove: prove the completed feature