devrites 3.2.5 → 3.2.7

package/engine/tests/hook_test.go

@@ -899,6 +899,18 @@ func writeCodexSkillContract(t *testing.T, root, skill, roles string) {
 	}
 }
 
+func writeCodexConditionalSkillContract(t *testing.T, root, skill, role string) {
+	t.Helper()
+	dir := filepath.Join(filepath.Dir(root), ".agents", "skills", skill)
+	if err := os.MkdirAll(dir, 0o755); err != nil {
+		t.Fatal(err)
+	}
+	contract := "---\nname: " + skill + "\ndescription: Test skill.\nrequired-agent-roles: none\n---\n\nConditionally dispatch `" + role + "` when needed.\n"
+	if err := os.WriteFile(filepath.Join(dir, "SKILL.md"), []byte(contract), 0o600); err != nil {
+		t.Fatal(err)
+	}
+}
+
 func writeCodexV2Rollouts(
 	t *testing.T,
 	codeHome, projectRoot, sessionID, turnID, role, taskName string,
@@ -1096,6 +1108,156 @@ func TestCodexAgentDispatchArmsInstalledSkillRequirements(t *testing.T) {
 	}
 }
 
+func TestCodexAgentDispatchPromptGivesExactNamedCallBeforeCompletion(t *testing.T) {
+	root := newWorkspace(t)
+	role := "devrites-plan-drafter"
+	writeCodexAgentContract(t, root, role)
+	writeCodexSkillContract(t, root, "rite-plan", role)
+
+	out, stderr, code := runDevritesIO(t, root, hookPayload(t, map[string]any{
+		"hook_event_name": "UserPromptSubmit",
+		"session_id":      "session-plan-drafter-guidance",
+		"turn_id":         "turn-plan-drafter-guidance",
+		"prompt":          "$rite-plan repair",
+	}), nil, "hook", "agent-dispatch", "--harness=codex")
+	if code != 0 {
+		t.Fatalf("arm exit=%d stderr=%s", code, stderr)
+	}
+	for _, want := range []string{
+		"MANDATORY DISPATCH THIS TURN",
+		"spawn_agent",
+		"agent_type=" + role,
+		"unique task_name",
+		`fork_turns="none"`,
+		".codex/agents/" + role + ".toml",
+		"send agent_type anyway",
+		"Wait for the returned child",
+	} {
+		if !strings.Contains(out, want) {
+			t.Fatalf("initial dispatch guidance omitted %q:\n%s", want, out)
+		}
+	}
+}
+
+func TestCodexConditionalAgentDispatchRejectsDefaultAndArmsNamedRole(t *testing.T) {
+	root := newWorkspace(t)
+	role := "devrites-proof-runner"
+	writeCodexAgentContract(t, root, role)
+	writeCodexConditionalSkillContract(t, root, "rite-polish", role)
+	sessionID, turnID := "session-conditional-role", "turn-conditional-role"
+
+	out, stderr, code := runDevritesIO(t, root, hookPayload(t, map[string]any{
+		"hook_event_name": "UserPromptSubmit",
+		"session_id":      sessionID,
+		"turn_id":         turnID,
+		"prompt":          "$rite-polish",
+	}), nil, "hook", "agent-dispatch", "--harness=codex")
+	if code != 0 {
+		t.Fatalf("arm exit=%d stderr=%s", code, stderr)
+	}
+	for _, want := range []string{
+		"CONDITIONAL DISPATCH RULE",
+		"exact named agent_type=devrites-<role>",
+		`fork_turns="none"`,
+		"send agent_type anyway",
+		"never use a default child",
+	} {
+		if !strings.Contains(out, want) {
+			t.Fatalf("conditional dispatch guidance omitted %q:\n%s", want, out)
+		}
+	}
+
+	for _, agentType := range []string{"", "default"} {
+		out, stderr, code = runDevritesIO(t, root, hookPayload(t, map[string]any{
+			"hook_event_name": "PreToolUse",
+			"session_id":      sessionID,
+			"turn_id":         turnID,
+			"tool_name":       "spawn_agent",
+			"tool_use_id":     "default-" + agentType,
+			"tool_input": map[string]any{
+				"agent_type": agentType,
+				"task_name":  "conditional_default",
+				"fork_turns": "none",
+				"message":    "Run the conditional DevRites check.",
+			},
+		}), nil, "hook", "agent-dispatch", "--harness=codex")
+		if code != 0 {
+			t.Fatalf("default spawn exit=%d stderr=%s", code, stderr)
+		}
+		if decision, reason := parsePermissionDecision(t, out); decision != "deny" ||
+			!strings.Contains(reason, "exact named agent_type=devrites-<role>") {
+			t.Fatalf("conditional default child not denied: decision=%q reason=%q out=%s", decision, reason, out)
+		}
+	}
+
+	out, stderr, code = runDevritesIO(t, root, hookPayload(t, map[string]any{
+		"hook_event_name": "PreToolUse",
+		"session_id":      sessionID,
+		"turn_id":         turnID,
+		"tool_name":       "spawn_agent",
+		"tool_use_id":     "missing-named-type",
+		"tool_input": map[string]any{
+			"task_name":  "conditional_missing_type",
+			"fork_turns": "none",
+			"message":    "Read .codex/agents/" + role + ".toml and run the check.",
+		},
+	}), nil, "hook", "agent-dispatch", "--harness=codex")
+	if code != 0 {
+		t.Fatalf("missing type spawn exit=%d stderr=%s", code, stderr)
+	}
+	if decision, reason := parsePermissionDecision(t, out); decision != "deny" ||
+		!strings.Contains(reason, "agent_type="+role) ||
+		!strings.Contains(reason, "send agent_type anyway") {
+		t.Fatalf("missing named type did not get exact retry: decision=%q reason=%q out=%s", decision, reason, out)
+	}
+
+	out, stderr, code = runDevritesIO(t, root, hookPayload(t, map[string]any{
+		"hook_event_name": "PreToolUse",
+		"session_id":      sessionID,
+		"turn_id":         turnID,
+		"tool_name":       "spawn_agent",
+		"tool_use_id":     "named-conditional",
+		"tool_input": map[string]any{
+			"agent_type": role,
+			"task_name":  "conditional_proof",
+			"fork_turns": "none",
+			"message":    "Run the conditional DevRites check.",
+		},
+	}), nil, "hook", "agent-dispatch", "--harness=codex")
+	if code != 0 || strings.TrimSpace(out) != "" {
+		t.Fatalf("named conditional spawn rejected: exit=%d out=%s stderr=%s", code, out, stderr)
+	}
+
+	out, stderr, code = runDevritesIO(t, root, hookPayload(t, map[string]any{
+		"hook_event_name": "Stop",
+		"session_id":      sessionID,
+		"turn_id":         turnID,
+	}), nil, "hook", "agent-dispatch", "--harness=codex")
+	if code != 0 || !strings.Contains(out, "DevRites dispatch for "+role+" is not complete") {
+		t.Fatalf("named conditional spawn was not armed: exit=%d out=%s stderr=%s", code, out, stderr)
+	}
+}
+
+func TestCodexAgentDispatchAllowsDefaultChildOutsideSkillTurn(t *testing.T) {
+	root := newWorkspace(t)
+	out, stderr, code := runDevritesIO(t, root, hookPayload(t, map[string]any{
+		"hook_event_name": "PreToolUse",
+		"session_id":      "session-unrelated-default",
+		"turn_id":         "turn-unrelated-default",
+		"tool_name":       "spawn_agent",
+		"tool_use_id":     "unrelated-default",
+		"tool_input": map[string]any{
+			"agent_type": "default",
+			"task_name":  "unrelated",
+			"fork_turns": "all",
+			"message":    "Handle an unrelated bounded task.",
+		},
+	}), nil, "hook", "agent-dispatch", "--harness=codex")
+	if code != 0 || strings.TrimSpace(out) != "" {
+		t.Fatalf("unrelated default child was rejected: exit=%d out=%s stderr=%s", code, out, stderr)
+	}
+}
+
 func TestCodexAgentDispatchRejectsInvalidInstalledSkillRequirements(t *testing.T) {
 	root := newWorkspace(t)
 	writeCodexSkillContract(t, root, "rite-vet", "root-inline-reviewer")
@@ -1406,6 +1568,79 @@ func TestCodexAgentDispatchConfirmsDurableV2NamedRole(t *testing.T) {
 	}
 }
 
+func TestCodexAgentDispatchConfirmsConditionalDurableV2NamedRole(t *testing.T) {
+	root := newWorkspace(t)
+	codeHome := t.TempDir()
+	sessionID, turnID := "session-v2-conditional", "turn-v2-conditional"
+	role := "devrites-security-auditor"
+	writeCodexAgentContract(t, root, role)
+	writeCodexConditionalSkillContract(t, root, "devrites-audit", role)
+
+	runDevritesIO(t, root, hookPayload(t, map[string]any{
+		"hook_event_name": "UserPromptSubmit",
+		"session_id":      sessionID,
+		"turn_id":         turnID,
+		"prompt":          "$devrites-audit security",
+	}), nil, "hook", "agent-dispatch", "--harness=codex")
+
+	writeCodexV2Rollouts(
+		t, codeHome, filepath.Dir(root), sessionID, turnID, role,
+		"devrites_security_auditor_conditional", true, true, true,
+	)
+	stop := hookPayload(t, map[string]any{
+		"hook_event_name": "Stop",
+		"session_id":      sessionID,
+		"turn_id":         turnID,
+	})
+	if out, stderr, code := runDevritesIO(t, root, stop,
+		[]string{"CODEX_HOME=" + codeHome},
+		"hook", "agent-dispatch", "--harness=codex"); code != 0 || strings.TrimSpace(out) != "" {
+		t.Fatalf("conditional durable v2 stop exit=%d out=%s stderr=%s", code, out, stderr)
+	}
+}
+
+func TestCodexAgentDispatchRejectsConditionalDurableV2DefaultChild(t *testing.T) {
+	root := newWorkspace(t)
+	codeHome := t.TempDir()
+	sessionID, turnID := "session-v2-default", "turn-v2-default"
+	writeCodexConditionalSkillContract(t, root, "devrites-audit", "devrites-security-auditor")
+
+	runDevritesIO(t, root, hookPayload(t, map[string]any{
+		"hook_event_name": "UserPromptSubmit",
+		"session_id":      sessionID,
+		"turn_id":         turnID,
+		"prompt":          "$devrites-audit security",
+	}), nil, "hook", "agent-dispatch", "--harness=codex")
+
+	writeCodexV2Rollouts(
+		t, codeHome, filepath.Dir(root), sessionID, turnID, "default",
+		"default_conditional_child", true, true, true,
+	)
+	stop := hookPayload(t, map[string]any{
+		"hook_event_name": "Stop",
+		"session_id":      sessionID,
+		"turn_id":         turnID,
+	})
+	out, stderr, code := runDevritesIO(t, root, stop,
+		[]string{"CODEX_HOME=" + codeHome},
+		"hook", "agent-dispatch", "--harness=codex")
+	if code != 0 {
+		t.Fatalf("conditional default stop exit=%d stderr=%s", code, stderr)
+	}
+	var decision struct {
+		Decision string `json:"decision"`
+		Reason   string `json:"reason"`
+	}
+	if err := json.Unmarshal([]byte(strings.TrimSpace(out)), &decision); err != nil {
+		t.Fatalf("invalid conditional default response: %v\n%s", err, out)
+	}
+	if decision.Decision != "block" ||
+		!strings.Contains(decision.Reason, "default or non-DevRites child") ||
+		!strings.Contains(decision.Reason, "never use a default child") {
+		t.Fatalf("conditional V2 default child passed: %#v", decision)
+	}
+}
+
 func TestCodexAgentDispatchRejectsIncompleteDurableV2(t *testing.T) {
 	for _, tc := range []struct {
 		name          string

package/pack/.claude/skills/rite-build/reference/forge.md

@@ -166,8 +166,8 @@ decision.
 
 Hand the winner's structured artifact to the normal cycle. Run immediate
 reconciliation, doubt every stood decision, and complete test-integrity,
-package-existence, targeted, browser, and other slice proof. Only after every
-required gate is green:
+targeted, browser, and other slice proof. Only after every required gate is
+green:
 
 ```bash
 devrites-engine forge record "$RUN_ID" verification verified \

package/pack/.claude/skills/rite-build/reference/phase-contract.md

@@ -73,14 +73,13 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    (reported in its `Principles` field, or that you detect against `.devrites/principles.md`) is
    handled here like an irreversible-risk item: block, route to a human-approved scoped
    exception in the register or stop; never doubt-and-accept a principle violation into the slice.
-5. **Run retained-baseline integrity gates, then recover any objective red.**
+5. **Run the retained-baseline integrity gate, then recover any objective red.**
    ```bash
    devrites-engine test-integrity; echo "test-integrity rc=$?"
-   devrites-engine package-existence; echo "package-existence rc=$?"
    ```
-   If the wright's `Gates` were red (targeted tests / types / lint), either integrity gate
-   failed, or it
-   couldn't verify: do **not** mark the slice `built`, and **do not fix the code yourself**.
+   If the wright's `Gates` were red (targeted tests / types / lint), `test-integrity`
+   failed, or proof could not be verified: do **not** mark the slice `built`, and **do not
+   fix the code yourself**.
    Classify each causal fingerprint through
    [`cleanup-and-classify.md`](../../devrites-debug-recovery/reference/cleanup-and-classify.md),
    run `devrites-engine recovery route <class>`, and follow the `recovery-route/v1`
@@ -95,9 +94,9 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    `recovery clear --class <class> "<root cause>" <slug>` only after green. Before every
    re-dispatch, update the root-owned allowlist only for an accepted in-slice path and run
    `reconcile snapshot`: after a clean check this refreshes canonical-state scope while
-   retaining the original source baseline. Repeat reconcile and both integrity gates on every
-   return. This owns red
-   gates, missing coverage, browser/runtime failures, and workflow-tool defects.
+   retaining the original source baseline. Repeat reconcile and the integrity gate on every
+   return. This owns red gates, missing coverage, browser/runtime failures, and
+   workflow-tool defects.
    After recovery:
    - green → continue to record;
    - product-contract/acceptance ambiguity or irreversible risk → open the genuine human gate
@@ -106,22 +105,14 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    - exhausted objective failure → preserve reproduction/dead ends, set `Status: blocked` and
      `Next step: /rite-plan unblock`, then STOP without a question or `/rite-resolve`.
 6. **Close the retained baseline, then record. You are the canonical writer.**
-   Reconciliation ran immediately on return and the two integrity gates ran in step 5.
+   Reconciliation ran immediately on return and `test-integrity` ran in step 5.
    **Exit 3 → hard STOP:** a test was deleted, skipped, or de-asserted since the slice base: the
    slice went green by weakening its tests, a Critical protocol violation. Revert the weakening and
    re-dispatch the wright; do **not** mark the slice `built`.
 
-   The package-existence gate (anti-hallucination) requires every new third-party import
-   to appear in a project manifest:
-   **Exit 3 → STOP:** an imported package is not declared in any manifest (`package.json`, `go.mod`,
-   `requirements.txt`, `pyproject.toml`, `Pipfile`, `Cargo.toml`): the classic shape of a
-   hallucinated or typo-squatted dependency. Confirm the name on the registry and declare it via the
-   package manager, or remove the import; do **not** mark the slice `built`. The gate is deterministic
-   and fail-open (not a git repo / no manifest / stdlib-only import → rc 0). If the nearest
-   manifest declares the package, treat the mismatch as a workflow-tool defect under bounded
-   recovery, not a plan repair or retry-authorization question. Once every gate and doubt
-   verdict is accepted, a forged slice records successful verification and runs
-   manifest-only cleanup per [`forge.md`](forge.md). Then close the private window:
+   Once every gate and doubt verdict is accepted, a forged slice records successful
+   verification and runs manifest-only cleanup per [`forge.md`](forge.md). Then close the
+   private window:
    ```bash
    devrites-engine reconcile close
    ```

package/pack/.claude/skills/rite-build/reference/wright-dispatch.md

@@ -66,15 +66,12 @@ and exact changed-file set. Before the root writes any canonical record, run:
 ```bash
 devrites-engine reconcile check; echo "reconcile rc=$?"
 devrites-engine test-integrity; echo "test-integrity rc=$?"
-devrites-engine package-existence; echo "package-existence rc=$?"
 ```
 
 - Reconcile `5`: reject the result. Preserve pre-snapshot user work; restore only the
   unauthorized slice delta; never widen scope from the writer's self-report.
 - Test integrity `3`: a test was deleted, muted, focused, or de-asserted. Treat it as a
   Critical protocol failure and correct it through the wright.
-- Package existence `3`: verify the exact package/version and fix the bounded workflow
-  or dependency defect through recovery. It is not a reason to ask for retry approval.
 - A setup/corrupt-baseline error blocks acceptance; never fall back silently to `HEAD`.
 
 The clean reconcile check records that source has not changed since inspection. The
@@ -105,13 +102,13 @@ Before every retry:
 
 That refresh requires the prior clean check, re-fingerprints root-owned state, and keeps
 the original source baseline. Re-dispatch with the exact output, attempt count, and dead
-ends. Then repeat reconcile and both integrity gates from zero. Clear recovery only after
+ends. Then repeat reconcile and `test-integrity` from zero. Clear recovery only after
 green with `recovery clear --class <class> "<root cause>" <slug>`. An exhausted objective
 failure becomes a technical blocker with its reproduction, not a `rite-resolve` question.
 
 ## Close and record
 
-When reconciliation, integrity, package, proof, and doubt gates all pass:
+When reconciliation, integrity, proof, and doubt gates all pass:
 
 ```bash
 devrites-engine reconcile close

package/pack/.claude/skills/rite-prove/reference/acceptance-proof.md

@@ -21,7 +21,6 @@ mutation tool when present. Run:
 ```bash
 devrites-engine test-integrity
 devrites-engine mutation-gate
-devrites-engine package-existence
 ```
 
 A test that stays green on broken code is unproven. Pure transforms also get a

package/pack/.claude/skills/rite-seal/reference/final-evidence.md

@@ -53,7 +53,6 @@ gates:
 ```bash
 devrites-engine test-integrity; echo "test-integrity rc=$?"   # exit 3 = a test deleted/skipped/loosened → Critical NO-GO
 devrites-engine mutation-gate   # changed-files mutation score — band the verdict; survivors are unproven behaviours
-devrites-engine package-existence; echo "package-existence rc=$?"   # exit 3 = a new import isn't declared in any manifest (hallucinated/typo-squatted dep) → Critical NO-GO
 ```
 A test weakened since the slice base is a **Critical NO-GO**: the suite went green by lowering the
 bar, not by the code being right. Record the mutation score in `seal.md`; under

package/pack/generated/claude/skills/rite-build/reference/forge.md

@@ -166,8 +166,8 @@ decision.
 
 Hand the winner's structured artifact to the normal cycle. Run immediate
 reconciliation, doubt every stood decision, and complete test-integrity,
-package-existence, targeted, browser, and other slice proof. Only after every
-required gate is green:
+targeted, browser, and other slice proof. Only after every required gate is
+green:
 
 ```bash
 devrites-engine forge record "$RUN_ID" verification verified \

package/pack/generated/claude/skills/rite-build/reference/phase-contract.md

@@ -73,14 +73,13 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    (reported in its `Principles` field, or that you detect against `.devrites/principles.md`) is
    handled here like an irreversible-risk item: block, route to a human-approved scoped
    exception in the register or stop; never doubt-and-accept a principle violation into the slice.
-5. **Run retained-baseline integrity gates, then recover any objective red.**
+5. **Run the retained-baseline integrity gate, then recover any objective red.**
    ```bash
    devrites-engine test-integrity; echo "test-integrity rc=$?"
-   devrites-engine package-existence; echo "package-existence rc=$?"
    ```
-   If the wright's `Gates` were red (targeted tests / types / lint), either integrity gate
-   failed, or it
-   couldn't verify: do **not** mark the slice `built`, and **do not fix the code yourself**.
+   If the wright's `Gates` were red (targeted tests / types / lint), `test-integrity`
+   failed, or proof could not be verified: do **not** mark the slice `built`, and **do not
+   fix the code yourself**.
    Classify each causal fingerprint through
    [`cleanup-and-classify.md`](../../devrites-debug-recovery/reference/cleanup-and-classify.md),
    run `devrites-engine recovery route <class>`, and follow the `recovery-route/v1`
@@ -95,9 +94,9 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    `recovery clear --class <class> "<root cause>" <slug>` only after green. Before every
    re-dispatch, update the root-owned allowlist only for an accepted in-slice path and run
    `reconcile snapshot`: after a clean check this refreshes canonical-state scope while
-   retaining the original source baseline. Repeat reconcile and both integrity gates on every
-   return. This owns red
-   gates, missing coverage, browser/runtime failures, and workflow-tool defects.
+   retaining the original source baseline. Repeat reconcile and the integrity gate on every
+   return. This owns red gates, missing coverage, browser/runtime failures, and
+   workflow-tool defects.
    After recovery:
    - green → continue to record;
    - product-contract/acceptance ambiguity or irreversible risk → open the genuine human gate
@@ -106,22 +105,14 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    - exhausted objective failure → preserve reproduction/dead ends, set `Status: blocked` and
      `Next step: /rite-plan unblock`, then STOP without a question or `/rite-resolve`.
 6. **Close the retained baseline, then record. You are the canonical writer.**
-   Reconciliation ran immediately on return and the two integrity gates ran in step 5.
+   Reconciliation ran immediately on return and `test-integrity` ran in step 5.
    **Exit 3 → hard STOP:** a test was deleted, skipped, or de-asserted since the slice base: the
    slice went green by weakening its tests, a Critical protocol violation. Revert the weakening and
    re-dispatch the wright; do **not** mark the slice `built`.
 
-   The package-existence gate (anti-hallucination) requires every new third-party import
-   to appear in a project manifest:
-   **Exit 3 → STOP:** an imported package is not declared in any manifest (`package.json`, `go.mod`,
-   `requirements.txt`, `pyproject.toml`, `Pipfile`, `Cargo.toml`): the classic shape of a
-   hallucinated or typo-squatted dependency. Confirm the name on the registry and declare it via the
-   package manager, or remove the import; do **not** mark the slice `built`. The gate is deterministic
-   and fail-open (not a git repo / no manifest / stdlib-only import → rc 0). If the nearest
-   manifest declares the package, treat the mismatch as a workflow-tool defect under bounded
-   recovery, not a plan repair or retry-authorization question. Once every gate and doubt
-   verdict is accepted, a forged slice records successful verification and runs
-   manifest-only cleanup per [`forge.md`](forge.md). Then close the private window:
+   Once every gate and doubt verdict is accepted, a forged slice records successful
+   verification and runs manifest-only cleanup per [`forge.md`](forge.md). Then close the
+   private window:
    ```bash
    devrites-engine reconcile close
    ```

package/pack/generated/claude/skills/rite-build/reference/wright-dispatch.md

@@ -66,15 +66,12 @@ and exact changed-file set. Before the root writes any canonical record, run:
 ```bash
 devrites-engine reconcile check; echo "reconcile rc=$?"
 devrites-engine test-integrity; echo "test-integrity rc=$?"
-devrites-engine package-existence; echo "package-existence rc=$?"
 ```
 
 - Reconcile `5`: reject the result. Preserve pre-snapshot user work; restore only the
   unauthorized slice delta; never widen scope from the writer's self-report.
 - Test integrity `3`: a test was deleted, muted, focused, or de-asserted. Treat it as a
   Critical protocol failure and correct it through the wright.
-- Package existence `3`: verify the exact package/version and fix the bounded workflow
-  or dependency defect through recovery. It is not a reason to ask for retry approval.
 - A setup/corrupt-baseline error blocks acceptance; never fall back silently to `HEAD`.
 
 The clean reconcile check records that source has not changed since inspection. The
@@ -105,13 +102,13 @@ Before every retry:
 
 That refresh requires the prior clean check, re-fingerprints root-owned state, and keeps
 the original source baseline. Re-dispatch with the exact output, attempt count, and dead
-ends. Then repeat reconcile and both integrity gates from zero. Clear recovery only after
+ends. Then repeat reconcile and `test-integrity` from zero. Clear recovery only after
 green with `recovery clear --class <class> "<root cause>" <slug>`. An exhausted objective
 failure becomes a technical blocker with its reproduction, not a `rite-resolve` question.
 
 ## Close and record
 
-When reconciliation, integrity, package, proof, and doubt gates all pass:
+When reconciliation, integrity, proof, and doubt gates all pass:
 
 ```bash
 devrites-engine reconcile close

package/pack/generated/claude/skills/rite-prove/reference/acceptance-proof.md

@@ -21,7 +21,6 @@ mutation tool when present. Run:
 ```bash
 devrites-engine test-integrity
 devrites-engine mutation-gate
-devrites-engine package-existence
 ```
 
 A test that stays green on broken code is unproven. Pure transforms also get a

package/pack/generated/claude/skills/rite-seal/reference/final-evidence.md

@@ -53,7 +53,6 @@ gates:
 ```bash
 devrites-engine test-integrity; echo "test-integrity rc=$?"   # exit 3 = a test deleted/skipped/loosened → Critical NO-GO
 devrites-engine mutation-gate   # changed-files mutation score — band the verdict; survivors are unproven behaviours
-devrites-engine package-existence; echo "package-existence rc=$?"   # exit 3 = a new import isn't declared in any manifest (hallucinated/typo-squatted dep) → Critical NO-GO
 ```
 A test weakened since the slice base is a **Critical NO-GO**: the suite went green by lowering the
 bar, not by the code being right. Record the mutation score in `seal.md`; under

package/pack/generated/codex/skills/rite-build/reference/forge.md

@@ -166,8 +166,8 @@ decision.
 
 Hand the winner's structured artifact to the normal cycle. Run immediate
 reconciliation, doubt every stood decision, and complete test-integrity,
-package-existence, targeted, browser, and other slice proof. Only after every
-required gate is green:
+targeted, browser, and other slice proof. Only after every required gate is
+green:
 
 ```bash
 devrites-engine forge record "$RUN_ID" verification verified \

package/pack/generated/codex/skills/rite-build/reference/phase-contract.md

@@ -73,14 +73,13 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    (reported in its `Principles` field, or that you detect against `.devrites/principles.md`) is
    handled here like an irreversible-risk item: block, route to a human-approved scoped
    exception in the register or stop; never doubt-and-accept a principle violation into the slice.
-5. **Run retained-baseline integrity gates, then recover any objective red.**
+5. **Run the retained-baseline integrity gate, then recover any objective red.**
    ```bash
    devrites-engine test-integrity; echo "test-integrity rc=$?"
-   devrites-engine package-existence; echo "package-existence rc=$?"
    ```
-   If the wright's `Gates` were red (targeted tests / types / lint), either integrity gate
-   failed, or it
-   couldn't verify: do **not** mark the slice `built`, and **do not fix the code yourself**.
+   If the wright's `Gates` were red (targeted tests / types / lint), `test-integrity`
+   failed, or proof could not be verified: do **not** mark the slice `built`, and **do not
+   fix the code yourself**.
    Classify each causal fingerprint through
    [`cleanup-and-classify.md`](../../devrites-debug-recovery/reference/cleanup-and-classify.md),
    run `devrites-engine recovery route <class>`, and follow the `recovery-route/v1`
@@ -95,9 +94,9 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    `recovery clear --class <class> "<root cause>" <slug>` only after green. Before every
    re-dispatch, update the root-owned allowlist only for an accepted in-slice path and run
    `reconcile snapshot`: after a clean check this refreshes canonical-state scope while
-   retaining the original source baseline. Repeat reconcile and both integrity gates on every
-   return. This owns red
-   gates, missing coverage, browser/runtime failures, and workflow-tool defects.
+   retaining the original source baseline. Repeat reconcile and the integrity gate on every
+   return. This owns red gates, missing coverage, browser/runtime failures, and
+   workflow-tool defects.
    After recovery:
    - green → continue to record;
    - product-contract/acceptance ambiguity or irreversible risk → open the genuine human gate
@@ -106,22 +105,14 @@ See also [`one-slice-cycle.md`](one-slice-cycle.md).
    - exhausted objective failure → preserve reproduction/dead ends, set `Status: blocked` and
      `Next step: $rite-plan unblock`, then STOP without a question or `$rite-resolve`.
 6. **Close the retained baseline, then record. You are the canonical writer.**
-   Reconciliation ran immediately on return and the two integrity gates ran in step 5.
+   Reconciliation ran immediately on return and `test-integrity` ran in step 5.
    **Exit 3 → hard STOP:** a test was deleted, skipped, or de-asserted since the slice base: the
    slice went green by weakening its tests, a Critical protocol violation. Revert the weakening and
    re-dispatch the wright; do **not** mark the slice `built`.
 
-   The package-existence gate (anti-hallucination) requires every new third-party import
-   to appear in a project manifest:
-   **Exit 3 → STOP:** an imported package is not declared in any manifest (`package.json`, `go.mod`,
-   `requirements.txt`, `pyproject.toml`, `Pipfile`, `Cargo.toml`): the classic shape of a
-   hallucinated or typo-squatted dependency. Confirm the name on the registry and declare it via the
-   package manager, or remove the import; do **not** mark the slice `built`. The gate is deterministic
-   and fail-open (not a git repo / no manifest / stdlib-only import → rc 0). If the nearest
-   manifest declares the package, treat the mismatch as a workflow-tool defect under bounded
-   recovery, not a plan repair or retry-authorization question. Once every gate and doubt
-   verdict is accepted, a forged slice records successful verification and runs
-   manifest-only cleanup per [`forge.md`](forge.md). Then close the private window:
+   Once every gate and doubt verdict is accepted, a forged slice records successful
+   verification and runs manifest-only cleanup per [`forge.md`](forge.md). Then close the
+   private window:
    ```bash
    devrites-engine reconcile close
    ```

package/pack/generated/codex/skills/rite-build/reference/wright-dispatch.md

@@ -66,15 +66,12 @@ and exact changed-file set. Before the root writes any canonical record, run:
 ```bash
 devrites-engine reconcile check; echo "reconcile rc=$?"
 devrites-engine test-integrity; echo "test-integrity rc=$?"
-devrites-engine package-existence; echo "package-existence rc=$?"
 ```
 
 - Reconcile `5`: reject the result. Preserve pre-snapshot user work; restore only the
   unauthorized slice delta; never widen scope from the writer's self-report.
 - Test integrity `3`: a test was deleted, muted, focused, or de-asserted. Treat it as a
   Critical protocol failure and correct it through the wright.
-- Package existence `3`: verify the exact package/version and fix the bounded workflow
-  or dependency defect through recovery. It is not a reason to ask for retry approval.
 - A setup/corrupt-baseline error blocks acceptance; never fall back silently to `HEAD`.
 
 The clean reconcile check records that source has not changed since inspection. The
@@ -105,13 +102,13 @@ Before every retry:
 
 That refresh requires the prior clean check, re-fingerprints root-owned state, and keeps
 the original source baseline. Re-dispatch with the exact output, attempt count, and dead
-ends. Then repeat reconcile and both integrity gates from zero. Clear recovery only after
+ends. Then repeat reconcile and `test-integrity` from zero. Clear recovery only after
 green with `recovery clear --class <class> "<root cause>" <slug>`. An exhausted objective
 failure becomes a technical blocker with its reproduction, not a `rite-resolve` question.
 
 ## Close and record
 
-When reconciliation, integrity, package, proof, and doubt gates all pass:
+When reconciliation, integrity, proof, and doubt gates all pass:
 
 ```bash
 devrites-engine reconcile close

package/pack/generated/codex/skills/rite-prove/reference/acceptance-proof.md

@@ -21,7 +21,6 @@ mutation tool when present. Run:
 ```bash
 devrites-engine test-integrity
 devrites-engine mutation-gate
-devrites-engine package-existence
 ```
 
 A test that stays green on broken code is unproven. Pure transforms also get a

package/pack/generated/codex/skills/rite-seal/reference/final-evidence.md

@@ -53,7 +53,6 @@ gates:
 ```bash
 devrites-engine test-integrity; echo "test-integrity rc=$?"   # exit 3 = a test deleted/skipped/loosened → Critical NO-GO
 devrites-engine mutation-gate   # changed-files mutation score — band the verdict; survivors are unproven behaviours
-devrites-engine package-existence; echo "package-existence rc=$?"   # exit 3 = a new import isn't declared in any manifest (hallucinated/typo-squatted dep) → Critical NO-GO
 ```
 A test weakened since the slice base is a **Critical NO-GO**: the suite went green by lowering the
 bar, not by the code being right. Record the mutation score in `seal.md`; under

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devrites",
-  "version": "3.2.5",
+  "version": "3.2.7",
   "description": "DevRites: a disciplined senior-engineer workflow pack for Claude Code and Codex",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/ViktorsBaikers/DevRites#readme",

package/scripts/build-release-tarball.sh

@@ -59,6 +59,7 @@ for item in "${PAYLOAD[@]}"; do
   if [[ -e "$item" ]]; then
     if [[ "$item" == "engine" ]] && git rev-parse --is-inside-work-tree >/dev/null 2>&1; then
       while IFS= read -r -d '' path; do
+        [[ -e "$path" ]] || continue
         if [[ "$path" == engine/testdata/golden/* ]]; then
           continue
         fi