devrites 4.7.0 → 5.1.0

package/pack/generated/codex/skills/rite-plan/reference/replan-and-repair.md

@@ -11,17 +11,21 @@ Authority: `.agents/skills/devrites-lib/reference/standards/acceptance-preservin
 <!-- END RESLICE ROUTE-TO-ACTION -->
 
 ## decompose
+
 First (or fresh) breakdown into vertical slices. Use `task-breakdown.md` +
 `slicing.md`. Output: a populated `tasks.md` and an ordered `plan.md` graph.
 
 ## reslice
+
 A slice proved too large (couldn't build+prove in one cycle, or its goal has multiple
 "and"s). Split into thinner end-to-end slices, preserving acceptance coverage: split
 **by the sizing rule, not to a target count**. Update `tasks.md`; renumber; fix
 dependency edges.
 
 ## repair (after Spec Drift Guard)
+
 A drift event stopped the build. Steps:
+
 1. Read the `drift.md` entry and its classification.
 2. If the user answered a drift question, encode that decision in `decisions.md`.
 3. Update `spec.md` (only the affected sections) and `plan.md`/`tasks.md` to match
@@ -31,19 +35,39 @@ A drift event stopped the build. Steps:
 Never quietly delete a requirement; use the marked action before contract edits.
 
 ## reorder
+
 Dependency order is wrong or suboptimal. Recompute the graph (`dependency-graph.md`),
 re-sort risk-first within tiers, update `plan.md`'s implementation order.
 
 ## split (backend/frontend contract)
+
 A slice couples two sides too tightly. Define the contract first (shape, status codes,
 errors: `devrites-api-interface`), then split into a backend slice (can land with a
 stub consumer) and a frontend slice (can land against a mock/real contract).
 
 ## unblock
+
 An exhausted fingerprint blocks diagnosis, not symptom. Route around/reslice; escalate
 only for scope change. If proof removed that cause but symptom remains, keep the dead
 end and plan a new diagnosis/proof fingerprint. Never clear/reuse old one.
 
+## course-correct
+
+Mid-build user pivot. Apply the marked action, choose rollback or forward-fix, and
+update permitted artifacts atomically (`MVP cut` is the named retreat). Invalidate
+Vet/readiness when contract or topology changes.
+
+## revise
+
+Artifact-only reconciliation of `spec.md`, `architecture.md`, `plan.md`, `tasks.md`,
+or `traceability.md` — never source. Propose/confirm the file set first. Only explicit
+`$rite-upgrade` with a `repairable` assessment may authorize neutral workspace edits.
+
+Unchanged acceptance/behavior with non-equivalent `proposed_coverage` is a
+contradictory input: the canonical classifier blocks it — there is no fourth
+route (see `acceptance-preserving-reslice.md`).
+
 ## Always
+
 Update `state.md` (phase, next step) and append a dated line to `decisions.md`
 explaining *why* the plan changed. Preserve mapped-action decisions.

package/pack/generated/codex/skills/rite-polish/SKILL.md

@@ -9,7 +9,14 @@ user-invocable: true
 
 Polish code for every feature. When the feature touches UI, normalize and polish the
 UI as well. Complete this self-review before `$rite-review`. The code and UI phases
-live in `reference/code.md` and `reference/ui.md`; read only the phase in scope.
+live in [`reference/code.md`](reference/code.md)
+([`anti-ai-slop.md`](reference/anti-ai-slop.md),
+[`backend-polish.md`](reference/backend-polish.md))
+and [`reference/ui.md`](reference/ui.md)
+([`browser-polish-evidence.md`](reference/browser-polish-evidence.md),
+[`design-system-discovery.md`](reference/design-system-discovery.md),
+[`harden-checklist.md`](reference/harden-checklist.md));
+read only the phase in scope.
 
 ## Operating rules
 
@@ -85,7 +92,7 @@ Incomplete comparison is **not** agreement. Record axis deltas in `polish-report
    validation, refreshed evidence/browser bindings, and an updated candidate
    manifest. Record a **`Re-verification:`** line in `polish-report.md`. Close
    the candidate for Review only after these checks are green.
-7. **Aggregate output:** both phases append to the single `polish-report.md`.
+7. **Aggregate output:** each phase appends to the single `polish-report.md`.
 
 ## Refinement modes
 
@@ -95,7 +102,3 @@ quality bar; they apply after the system is aligned. See `reference/ui.md`.
 > **Mid-flight discipline.** When tempted to polish UI without normalize, cite
 > clean lint as proof of quality, skip Phase 2 on a backend diff, or delete a
 > Chesterton's Fence: see [anti-patterns](reference/anti-patterns.md).
-
-## Output → `polish-report.md`
-
-Write the detailed report to `polish-report.md`.

package/pack/generated/codex/skills/rite-polish/reference/anti-ai-slop.md

@@ -50,6 +50,26 @@ match the neighbors.
   sketchy SVG scenery. Ship a real capture/asset or nothing (quality-standards — Materiality).
 - **Hero prop badges** — version labels (`V0.6`, `BETA`) and decorative pulsing status
   dots as set dressing.
+- **Unstyled UA chrome** — shipping the browser's default blue selection, caret,
+  scrollbar, or focus outline as the look (quality-standards § Browser chrome).
+- **Invented metrics** — precise-looking numbers with no source (`+247% faster`,
+  `99.99% uptime`). **Off-token color** — a hex used inline that the token set doesn't
+  define. Both are realism failures, not styling choices.
+
+### Required remediations (fix the hit, don't just flag it)
+A slop finding names its remediation from this table; a ban without a stated fix is
+an incomplete finding.
+
+| Signature | Required remediation |
+| --- | --- |
+| Default purple/blue gradient; gradient text; glassmorphism default | Re-derive from the scene sentence and colour commitment, then re-run both category-reflex tests |
+| Invented metric | Replace with the state lattice's missing-data placeholder (quality-standards § Focus & states) plus a "metric to confirm" question, or delete the proof slot |
+| Off-token color | Lift into the token set as a named color; replace every inline use |
+| Wrapping CTA / nav overflow | Shorter label, `white-space: nowrap`, or a collapsed nav — never a shrunken tap target |
+| Horizontal scroll in 320–1920 | `minmax(0, 1fr)` on content tracks + `overflow-x: clip` on `html`/`body` (quality-standards § Responsive) |
+| Fake UI-in-a-div screenshot | Ship a real capture/asset or remove the block |
+| Sticky sub-nav hidden by a banner | Offset by the banner's token height; split z-index roles instead of one raised value |
+| Unstyled UA selection / focus ring / caret / scrollbar | Theme from tokens per quality-standards § Browser chrome, or decline in `design-brief.md` |
 
 ### Copy & data realism
 Placeholder content is a tell even when the layout is clean: fake-perfect numbers

package/pack/generated/codex/skills/rite-polish/reference/browser-polish-evidence.md

@@ -5,7 +5,9 @@ ladder (`devrites-browser-proof`) and record it in `browser-evidence.md` (and su
 in `polish-report.md`).
 
 ## Required when a browser can run
-- Screenshots of the polished UI at the target viewports (375 / 768 / 1280 as relevant).
+- Screenshots of the polished UI at the canonical viewport set
+  (`devrites-frontend-craft/reference/quality-standards.md` § Responsive — currently
+  320 / 768 / 1024 / 1440).
   **Open each screenshot and describe what's visible**: a path is not proof.
 - All key interaction states captured or exercised: hover, focus, active, disabled,
   loading, empty, error, success.

package/pack/generated/codex/skills/rite-polish/reference/code.md

@@ -72,25 +72,7 @@ feature only.
 
 See [backend-polish.md](backend-polish.md). For server-side scope (handlers,
 services, routes, models, migrations, queries, jobs, auth). Polish the server
-side to ship-quality:
-
-- **Error responses consistent** + correct status codes + custom error classes
-  + fail closed on auth/permission/transaction errors. No blanket `catch`es.
-- **Logging hygiene:** structured logs with context (request id, user, op);
-  log key events; **never** log secrets / tokens / PII. No leftover
-  `console.log` / debug prints.
-- **Data & queries:** no N+1, no unbounded result sets, parameterized
-  queries, right transaction boundaries, return only what the caller needs.
-- **API contract** matches the spec (and any saved `references/`); idempotency
-  where applicable; consistent pagination/sorting/filtering; validation at the
-  boundary.
-- **Performance:** measure-first; obvious wins applied; no quadratic loops on
-  growing collections (`devrites-audit perf`).
-- **Cleanup:** remove dead routes, unused endpoints + bad naming this feature
-  added.
-- **Code anti-slop:** kill over-defensive layered null/length checks, useless
-  wrappers, generic AI naming, "robust" catches that hide bugs, anything
-  outside the spec ([anti-ai-slop.md](anti-ai-slop.md). Code section).
+side to ship-quality.
 
 ## Output → appends to `polish-report.md`
 

package/pack/generated/codex/skills/rite-polish/reference/harden-checklist.md

@@ -1,7 +1,7 @@
 # Harden checklist: UI against real-world inputs
 
 Designs that only work on the happy path are not production-ready. `$rite-polish`
-Phase 2 (UI polish) uses this list to harden the feature against the inputs, errors,
+Phase 4 (UI polish) uses this list to harden the feature against the inputs, errors,
 languages, and network conditions real users will throw at it.
 
 Feature scope only: don't harden screens this feature doesn't touch.

package/pack/generated/codex/skills/rite-polish/reference/ledger.md

@@ -48,6 +48,9 @@ Run during Polish before Review so ledger edits enter the proved candidate.
    be tracked; surface a needed ignore carve-out. Immediately re-read and refuse
    bytes changed since preview. Touch only `.devrites/specs/`, preserve unrelated
    bytes/order, and apply only previewed replacements or empty-file deletion.
+   **Failing case:** Polish rewrites feature `spec.md` acceptance criteria "to match
+   code." Capability fold is the non-trigger; feature `spec.md` stays sealed
+   (`core.md` rule 4).
 6. **Verify.** Re-read targets; require unrelated blocks byte-identical and the
    same preview empty. Apply the same Native grammar re-read checklist to each
    resulting capability spec.

package/pack/generated/codex/skills/rite-polish/reference/ui.md

@@ -57,8 +57,7 @@ Only after functionality is complete **and** Phase 3 is done. Systematic detail
 pass against the UI quality bar below: zoom in, squint, use the thing. Little
 things add up.
 
-Meet the **2026 quality bar**. CWV (LCP ≤ 2.5s / INP ≤ 200ms / CLS ≤ 0.1) and
-WCAG 2.2 AA. Avoid [anti-ai-slop.md](anti-ai-slop.md). If the spec saved design
+Meet the measurable bar below. Avoid [anti-ai-slop.md](anti-ai-slop.md). If the spec saved design
 references in `references/`, **match them**.
 
 Run the production-hardening sweep before declaring polish done (extreme
@@ -97,7 +96,9 @@ Polish verifies against the frontend quality standards
 (`devrites-frontend-craft/reference/quality-standards.md`), measured not assumed:
 - Core Web Vitals (p75): **LCP ≤ 2.5 s · INP ≤ 200 ms · CLS ≤ 0.1**.
 - WCAG 2.2 AA: semantic HTML, keyboard-operable, visible focus ≥ 3:1, no drag-only.
-- Responsive at **320 / 768 / 1024 / 1440**; survives 200% text zoom; no horizontal scroll.
+- Responsive at the canonical viewport set (quality-standards § Responsive — currently
+  **320 / 768 / 1024 / 1440**, plus the 320–1920 no-horizontal-scroll sweep); survives
+  200% text zoom.
 - No console errors/warnings; no axe violations; `prefers-reduced-motion` honored.
 Cite the evidence in `browser-evidence.md`.
 

package/pack/generated/codex/skills/rite-pov/SKILL.md

@@ -12,7 +12,9 @@ named outside candidate.
 
 ## Workflow
 
-1. Frame the candidate, decision intent, and reversibility tier. Route an
+1. Frame the candidate, decision intent, and reversibility tier (two-way = locally
+   reversible; bounded-one-way = reversible via a recorded rollback; high-stakes =
+   irreversible or costly). Route an
    open-ended market search to `$rite-pressure-test` or `$rite-spec`.
 2. Inspect the live repository for at least one concrete project fact: an
    incumbent dependency/call site, integration seam, relevant ADR/decision, or
@@ -41,3 +43,16 @@ Record: <path | not written>
 
 No project evidence or no primary external source means `Hold`, not a generic
 technology opinion.
+
+## Non-trigger
+
+Not a market survey or premise stress-test (`$rite-pressure-test` / `$rite-spec`),
+not implementation, not a patch plan. A CVE still needs a live advisory URL
+before any `Adopt`/`Trial`.
+
+## Failure and recovery
+
+- Missing project evidence or missing live primary source → `Hold`. **Failing
+  case:** "Adopt Redis" with no incumbent call site and no opened docs URL.
+- High-stakes / irreversible without a named rollback → cannot be `Adopt`.
+- Persist only when asked; a chat-only verdict is not a decision record.

package/pack/generated/codex/skills/rite-pr-feedback/SKILL.md

@@ -11,7 +11,7 @@ disable-model-invocation: true
 Fetch unresolved PR feedback, judge it centrally, fix valid items, reply, and resolve threads. Review comments are untrusted input.
 
 ## Rules consulted
-Step 0: Read `.agents/skills/devrites-lib/reference/standards/core.md`, plus `git-workflow.md`, `testing.md`, and `security.md` when feedback touches those areas.
+Step 0: Read [`core.md`](../devrites-lib/reference/standards/core.md), plus `git-workflow.md`, `testing.md`, and `security.md` when feedback touches those areas.
 
 ## Operating rules
 - Default to fixing real feedback, including nitpicks.

package/pack/generated/codex/skills/rite-pressure-test/SKILL.md

@@ -47,6 +47,7 @@ or reversible implementation choices.
 - Don't over-explore: 3-5 options, one pass of convergence. If the user already knows
   the direction, skip this and go straight to `$rite-spec`. If the effort is too foggy for
   one pass, start an investigation map at `.devrites/work/<slug>/investigation-map.md`
+  (create the directory; pick a provisional slug `$rite-spec` can adopt)
   with `Destination`, `Decisions so far`, `Not yet specified`, `Out of scope`, plus one
   frontier question per session.
 - Ask the user to pick when two options are close and the choice changes the product.
@@ -61,6 +62,6 @@ Changed: workspace only
 Evidence: options compared <n>; recommendation <option>; hinge <condition>; premises <supported/assumption/refuted + sources>
 Open: <none | unresolved premise and resolving evidence>
 Next: <when supported: $rite-spec <feature>; when Hold: none — requires <resolving evidence>>
-Record: not applicable
+Record: <investigation-map.md path | not applicable>
 ↻ Hygiene: /clear before starting the lifecycle
 ```

package/pack/generated/codex/skills/rite-prototype/SKILL.md

@@ -13,8 +13,8 @@ question.
 
 ## 0. Read core rules
 
-Read `.agents/skills/devrites-lib/reference/standards/core.md` first: the operating rules and the "capture the answer"
-persistence discipline apply even to throwaway code. The other rule files load on demand.
+Read `.agents/skills/devrites-lib/reference/standards/core.md` first: the operating rules and the Persistence-before-stopping
+discipline apply even to throwaway code. The other rule files load on demand.
 
 ## 1. Name the question
 

package/pack/generated/codex/skills/rite-prove/SKILL.md

@@ -7,8 +7,8 @@ user-invocable: true
 
 # $rite-prove: prove the completed feature
 
-Read the active workspace and prove the whole assembled feature once. Without
-one, use `/verify` or `/run`; if any task is pending, stop for `$rite-build`.
+Read the active workspace and prove the whole assembled feature once. With no
+active workspace, use `/verify` or `/run` instead; if any task is pending, stop for `$rite-build`.
 Never report an unobserved pass. After Polish/Review code edits, repeat affected
 criteria and bind evidence to the changed candidate digest.
 
@@ -24,7 +24,7 @@ TTHW, and exact signal-bearing errors; never assert DX.
 - Evidence over confidence. Apply positive, discriminating proof to every
   behavioral claim; a green command without executing assertion and decisive
   signal is unproven.
-- Follow `candidate-integrity.md`. Prove owns proof binding, not candidate
+- Follow [`candidate-integrity.md`](../devrites-lib/reference/candidate-integrity.md). Prove owns proof binding, not candidate
   grammar/hashing. Spec Drift Guard owns revealed contract drift.
 - Root executes vetted gates/browser and records evidence. A read-only proof
   runner validates immutable evidence. The sole bounded wright fixes product
@@ -56,14 +56,14 @@ test changes.
    and no-progress corrections before accepting terminal none; a distinct
    fingerprint below cap resumes offline triage without another real action.
 2. **Freeze scope.** Read spec, tasks, state, test plan, and full diff. Require
-   every slice built. Missing `test-plan.md` invokes caller-owned Vet and returns
-   here; it never authorizes ad hoc proof.
+   every slice built. Missing `test-plan.md` returns to Vet inline (Prove stays the controlling
+   caller) and resumes here; it never authorizes ad hoc proof.
 3. **Approve commands.** If absent, use
    [test-command-discovery](reference/test-command-discovery.md) over repository
    manifests/CI. Discovery is evidence only: `test-plan.md` is the sole approved runtime
    command list. A newly found command must return to the current Vet contract,
    refresh readiness, then resume without user handoff.
-4. **Execute a frozen candidate.** Run candidate check and retain its digest.
+4. **Execute a frozen candidate.** Run `devrites-engine check candidate <slug>` and retain its digest.
    The root runs only commands declared by `test-plan.md`, with exact approved
    command, cwd, prerequisites, exit, and sanitized
    decisive output. Run relevant suite plus build/typecheck/lint. Recheck the

package/pack/generated/codex/skills/rite-prove/reference/acceptance-proof.md

@@ -8,11 +8,9 @@ Every structured WHEN/THEN scenario needs a passing asserting test. When
 `test-plan.md` exists, every acceptance/gap requirement, interactive element, and
 user flow needs a passing result. Missing coverage blocks.
 
-Behavioral proof MUST be positive, discriminating, and observed under `testing.md`:
-assertion/output changes when behavior is absent or wrong. Skipped, focused,
-filtered, pending, zero-test, assertion-free, tautological, or unexecuted results
-do not count. Build/compile/typecheck/lint prove only their static criterion;
-discriminating shell assertions and golden/text comparisons may prove text/CLI.
+Apply [`testing.md`'s positive, discriminating proof](../../devrites-lib/reference/standards/testing.md#positive-discriminating-proof),
+including invalid-result exclusions and static/textual criterion boundaries.
+Unsupported behavioral claims are `cannot_verify` and block proof.
 
 ## Silent-failure probe
 
@@ -54,9 +52,10 @@ or a mock that cannot produce the risk.
 
 ## Critical-path assertion strength
 
-For regression-Critical, irreversible, and data-loss paths, inject a small break,
-confirm the covering test turns red, then revert; use the existing mutation tool.
-A green test on broken code is unproven. Pure transforms also get a round-trip or
+For regression-Critical, irreversible, and data-loss paths, require
+[`testing.md`'s safe perturbation](../../devrites-lib/reference/standards/testing.md#safe-perturbation).
+Missing evidence is `cannot_verify`; a green test on broken code is unproven.
+Pure transforms also get a round-trip or
 metamorphic property check when applicable.
 
 ## Runtime observability branch
@@ -77,7 +76,7 @@ Browser-capture docs/quickstarts when applicable. Write the scorecard to
 Exercise/follow every key `plan.md` link in the assembled feature; record each as
 `EVID-###`, or record none declared. An unwired link blocks.
 
-For every critical link, perturb or break the load-bearing input/link and observe the
+For every critical link, apply safe perturbation to the load-bearing input/link and observe the
 promised surface fail. Existence/registration/spy-call evidence is insufficient when a
 different path can coincidentally produce the expected result.
 

package/pack/generated/codex/skills/rite-prove/reference/browser-proof.md

@@ -9,7 +9,7 @@ What `browser-evidence.md` must capture for a UI slice. Delegates to
 ## Browser evidence
 | Evidence ID | Route | State/input | Viewport | Compared with | Tooling | Result | Related IDs | Limitation |
 | --- | --- | --- | --- | --- | --- | --- | --- | --- |
-| EVID-003 | <route> | empty/keyboard | 375 | brief Proof targets + R1 | playwright-mcp | <observed result> | AC-002, SLICE-002 | <none / exact gap> |
+| EVID-003 | <route> | empty/keyboard | 375 | brief Proof targets + target reference 1 | playwright-mcp | <observed result> | AC-002, SLICE-002 | <none / exact gap> |
 
 ## Visual Verdict
 | State | Result | Notes |
@@ -36,8 +36,10 @@ What `browser-evidence.md` must capture for a UI slice. Delegates to
 - Open every screenshot path and describe it: never assert from the filename.
 - Read `design-brief.md` + `references.md` first. Compare fidelity only with references
   classified **target**; check constraints as rules and never pixel-match inspiration.
-- Render every proof target named by the brief/slice. At minimum check a small (375) and a
-  large (1280) viewport for layout slices.
+- Render every proof target named by the brief/slice using the canonical viewport
+  set and state coverage in [quality-standards.md](../../devrites-frontend-craft/reference/quality-standards.md).
+  Apply [capture admissibility](../../devrites-lib/reference/standards/browser-proof-checklist.md)
+  before assigning a visual verdict; invalid captures leave proof `cannot_verify`.
 - Compare structure before decoration: hierarchy/layout → responsive/state behavior →
   type/spacing/color → polish. Record each material delta, fix it, and re-render. A visual
   PASS requires zero unresolved material deltas; an accepted departure needs its reason in

package/pack/generated/codex/skills/rite-prove/reference/test-command-discovery.md

@@ -6,7 +6,6 @@ the sole approved runtime command list.
 
 | Discovery source | Look for |
 |---|---|
-| `spec.md` → "Commands discovered" | previously found candidates |
 | `package.json` `scripts` | `test`, `build`, `typecheck`, `lint`, `dev`, `e2e` |
 | `Makefile` / `Justfile` / `Taskfile` | `test`, `build`, `check`, `lint` targets |
 | `Gemfile` / `Rakefile` | `rake test`, `rspec`, `bin/rails test` |

package/pack/generated/codex/skills/rite-quick/SKILL.md

@@ -19,7 +19,7 @@ executable, not advisory. This lane uses the **Quick** depth profile from
 **Run this first. If ANY of these holds, STOP and route to `$rite-spec`. Do NOT use the
 express lane:**
 - Touches **auth / authz**, a **data migration**, a **public API contract**, or any
-  **destructive / data-loss** path in the irreversible-risk list. See `standards/afk-hitl.md`.
+  **destructive / data-loss** path in the irreversible-risk list. See `../devrites-lib/reference/standards/afk-hitl.md`.
 - Spans **more than one vertical slice**, or more than a couple of files of real logic.
 - **Ambiguous scope:** you'd have to guess what "done" means, or the ask hides a design
   decision (data model, new dependency, second design system).
@@ -32,7 +32,7 @@ If none hold, the change is small + reversible + unambiguous → proceed. **When
 escalate**: the cost of the full lifecycle on a small change is minutes; the cost of the
 express lane on a risky one is the failure mode the lifecycle exists to prevent.
 
-## Rules consulted
+## Rules consulted (read on demand from `.agents/skills/devrites-lib/reference/standards/`)
 Load this lane's conditional standards when needed:
 - `coding-style.md`: naming, guard clauses, reuse-first.
 - `testing.md`: TDD, **completeness** (every touched behavior/element asserted) +
@@ -50,7 +50,8 @@ Load this lane's conditional standards when needed:
 2. **One-line contract.** Restate in 1-3 lines: the change, its **acceptance** (how you'll
    know it works), and the **scope boundary** (what you will NOT touch). This is the entire
    "spec + plan" for a quick change: keep it in the chat; optionally drop a `brief.md` +
-   `evidence.md` under `.devrites/work/<slug>/` if the user wants a record. This is the
+   `evidence.md` under an unused `.devrites/work/<slug>/` (no `state.md`; not a workspace
+   cursor) if the user wants a record. This is the
    `$rite-frame` FRAME move: if the acceptance won't reduce to a check that could be *false*,
    the ask is ambiguous → escalate per the significance gate. Its AUDIT pass is the diff
    self-review in step 5.
@@ -64,7 +65,8 @@ Load this lane's conditional standards when needed:
 5. **Review-lite + ship.** Self-review the diff for correctness, scope, and idiom. If
    `.devrites/principles.md` exists, confirm that no declared invariant is broken. This is
    `$rite-frame`'s AUDIT pass: one pass, no subagent fan-out. Show the diff, then on the user's confirm commit it
-   (Conventional Commits, atomic), or hand to `$rite-ship` if a workspace is active. **Never push
+   (Conventional Commits, atomic), or hand to `$rite-ship` only when the change belongs to the active
+   feature's candidate; otherwise commit standalone. **Never push
    without the user asking.**
 
 ## Escalation (mid-flight): the Spec Drift Guard still applies

package/pack/generated/codex/skills/rite-resolve/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: rite-resolve
 description: User-invoked resume verb for answering, dropping, or batch-resolving open `questions.md` gates.
-argument-hint: "<qid> \"<answer>\"  |  --drop <qid> [\"<reason>\"]  |  --batch <path-to-yaml>"
+argument-hint: "<qid> \"<answer>\"  |  --drop <qid> [\"<reason>\"]  |  --batch <path-to-file>"
 user-invocable: true
 disable-model-invocation: true
 ---
@@ -29,8 +29,9 @@ Pull these via `Read` when shaping the resolve:
 
 ## Operating rules
 
-- **Requires an active workspace.** Read `.devrites/ACTIVE` first; if empty or the slug
-  has no `questions.md`, **STOP** and tell the user to run `$rite-spec <feature>` first.
+- **Requires an active workspace.** Read `.devrites/ACTIVE` first; if empty, **STOP** and
+  tell the user to run `$rite-spec <feature>` first. If the slug has no `questions.md`,
+  report the missing required artifact and stop.
 - **One mutation per call.** A single qid (or `--batch` file) per invocation; never
   silently coalesce multiple human decisions into one log entry.
 - **Never overwrite an answered question.** If the qid's `status` is `answered` or
@@ -60,7 +61,7 @@ Pull these via `Read` when shaping the resolve:
    - `<qid> "<answer>"`: answer the single open question.
    - `--drop <qid>` (optional `"<reason>"`): mark the question `dropped`; record
      the reason inline.
-   - `--batch <path-to-yaml>`: bulk resolve, one entry per qid (see
+   - `--batch <path-to-file>`: bulk resolve, one entry per qid (see
      [`reference/answer-protocol.md`](reference/answer-protocol.md) for the batch
      format).
 2. **Load context.** Read `state.md`, `questions.md`, and the relevant slice from

package/pack/generated/codex/skills/rite-resolve/reference/answer-protocol.md

@@ -84,7 +84,7 @@ writes one block at a time and pauses. When `$rite-resolve` matches the block's
 
 - the entire `Awaiting human` block is removed (header + fields);
 - `- Status: running` is set;
-- a `Log` line is appended: `- <iso> build: resolved <qid>`.
+- a `Log` line is appended: `- <iso> <resuming phase>: resolved <qid>`.
 
 If `state.md`'s `Status` is `awaiting_human` but no `Awaiting human` block matches the
 qid (drift between the two files), `$rite-resolve` flags the inconsistency and refuses

package/pack/generated/codex/skills/rite-review/SKILL.md

@@ -36,9 +36,8 @@ Pull these via `Read` when the diff demands them:
 
 ## Operating rules
 
-- **Feature scope only.** Review touched files + the diff. **NO whole-project refactors,
-  NO drive-by cleanup.** DO NOT delete suspected dead code outside this feature without
-  asking. Spec Drift Guard applies.
+- **Feature scope only** — see
+  [feature-scoped-review](reference/feature-scoped-review.md). Spec Drift Guard applies.
 - **Silent-failure hunt:** when the suite is green, require proof that error paths and
   partial-success branches would fail tests if broken. **Failing case:** tests pass but
   handler returns success on internal error → Critical until an asserting test exists.
@@ -58,7 +57,6 @@ Pull these via `Read` when the diff demands them:
 
 0. Read `.agents/skills/devrites-lib/reference/standards/core.md` first (the always-on operating rules); pull the
    on-demand rules above as the diff demands them.
-   Then read the explicit or active workspace's `state.md` directly.
 1. Read `spec.md`, `tasks.md`, `state.md`, `decisions.md`, `evidence.md`,
    `touched-files.md`, `.devrites/principles.md` (if present: the binding invariants to score
    the diff against), and the `git diff`. For "what would this change break"
@@ -114,18 +112,18 @@ Pull these via `Read` when the diff demands them:
    Add only what the dispatched agents could not, then resolve overlaps and
    contradictions before labeling. ([five-axis-review.md](reference/five-axis-review.md)
    documents the axes the code-review agent applies.)
-   - **UI feature?** Apply the **UX rubric**
+   - **UI feature?** Dispatch `devrites-frontend-reviewer` and apply the **UX rubric**
      ([nielsen-heuristics](reference/nielsen-heuristics.md)) and the
-     **cognitive-load lens** ([cognitive-load](reference/cognitive-load.md)) on the
-     UX axis: surface heuristics scoring ≤ 2 and any cognitive-load findings
-     (extraneous noise, missing progressive disclosure, vocabulary drift) at the
-     appropriate severity.
-5. **Security:** apply `devrites-audit security`
-   ([security-review](reference/security-review.md)) when user input, auth, data
-   storage, external integrations, secrets, or permissions are involved.
-6. **Performance:** apply `devrites-audit perf`
-   ([performance-review](reference/performance-review.md)) only when performance is
-   relevant or a regression risk is visible (measure first).
+     **cognitive-load lens** ([cognitive-load](reference/cognitive-load.md),
+     [performance-checklist](reference/performance-checklist.md)). No UI/route/style
+     paths: record `Not-applicable: no relevant paths in diff`.
+5. **Security:** dispatch `devrites-security-auditor`
+   ([security-review](reference/security-review.md)) when input, auth, data,
+   secrets, or permissions are in the diff; else `Not-applicable: no relevant paths in diff`.
+6. **Performance:** dispatch `devrites-performance-reviewer`
+   ([performance-review](reference/performance-review.md),
+   [performance-checklist](reference/performance-checklist.md)) only on a budget or
+   hot path; else `Not-applicable: no relevant paths in diff`.
 7. Reconcile and accept only in-scope fixes. Consolidate them into one bounded
    wright correction; never edit source in the reviewing context. Any correction
    updates the candidate manifest, returns through affected Prove, and then starts
@@ -145,21 +143,14 @@ Pull these via `Read` when the diff demands them:
 
 **Action tag (separate from severity).** Tag each finding with how to act on it:
 `blocking` (fix before seal), `non-blocking` (fix when convenient), or `if-minor` (fix only if the
-change is already small: a pure noise-economics lever). Only a **`blocking` Critical** gates the
-seal; a `non-blocking` / `if-minor` finding is recorded, not a stop.
+change is already small: a pure noise-economics lever). Every Critical is `blocking` and gates the
+seal; `non-blocking` / `if-minor` findings are recorded, not a stop.
 
-## Confidence and signal-to-noise
+## Confidence and severity
 
 Apply [`agents.md` § Result admission](../devrites-lib/reference/standards/agents.md#result-admission).
-Suppress unverifiable ≤4 hypotheses, require 7+ plus exact proof for
-Critical/Important, and make every silent/unusable account a blocking gap. Roll
-trivia into one line; review finds defects, not a quota.
-
-## Severity orientation (labels, not score)
-
-After labeling, summarize findings as `Critical / Important / Suggestion / Nit /
-FYI` counts. There is no composite number. `$rite-seal` gates on
-`Critical == 0` and on acceptance plus drift. Do not invent a composite score.
+Roll trivia into one line. `$rite-seal` gates on `Critical == 0`,
+`Important == 0` (y/N override), acceptance, and drift. No composite score.
 
 > **Mid-flight discipline.** When tempted to demote a Critical, hide a finding, fix without re-verification, or wander out of scope: see [`anti-patterns`](reference/anti-patterns.md). Load it the moment you reach for the excuse.
 

package/pack/generated/codex/skills/rite-review/reference/cognitive-load.md

@@ -88,5 +88,3 @@ doesn't decide the rewrite strategy.
 - **Code quality:** covered by the simplification audit
   (`devrites-audit simplify`).
 - **Security:** covered by the security audit (`devrites-audit security`).
-
-Cognitive-load findings live on the **UX axis** of the multi-axis review.

package/pack/generated/codex/skills/rite-review/reference/five-axis-review.md

@@ -1,7 +1,7 @@
-# Code-review axes
+# Five-axis review: tests first, then six axes
 
-The dispatched `devrites-code-reviewer` always checks tests first, then applies the remaining
-axes under one severity scale (Critical / Important / Suggestion / Nit / FYI).
+The dispatched `devrites-code-reviewer` checks tests first, then correctness, readability,
+architecture, maintainability, and standards under one severity scale (Critical / Important / Suggestion / Nit / FYI).
 The `$rite-review` inline lead **reconciles** the returned report against the Spec
 axis. It does not re-run these axes itself. This file is the shared definition of
 what "full code-review discipline" covers; use it to judge whether the agent's report

package/pack/generated/codex/skills/rite-review/reference/nielsen-heuristics.md

@@ -8,9 +8,6 @@ multi-axis review and shape the severity labels on UX findings.
 findings". 3 is "good with minor gaps". 2 is "partial: significant gaps". 0-1 is a
 Critical / Important.
 
-Heuristics are Jakob Nielsen's 10 (1994, refreshed 2020): public usability canon,
-referenced by every serious design discipline.
-
 ## 1. Visibility of system status
 Users know what's happening, when, and where.
 - Loading indicators on async operations.
@@ -120,10 +117,9 @@ Users can find what they need without leaving the surface.
 
 ## Reporting
 
-In `$rite-review` output, surface only the heuristics scoring **≤2** as findings,
-plus any 3 with a specific noted gap. Heuristics at 4 are not reported individually.
-They roll up into the UX axis. Heuristics at 3 with no specific gap are not
-reported. Each surfaced finding gets a severity label per `rite-review/SKILL.md`.
+In `$rite-review` output, surface heuristics scoring **≤2**, plus any 3 with a specific
+noted gap, as findings; every score feeds the UX axis. Each surfaced finding gets a
+severity label per `rite-review/SKILL.md`.
 
 The rubric is descriptive, not gating. A score of 2 on aesthetic-minimalist isn't
 an automatic NO-GO; the `rite-seal` gate is `Critical == 0`, not "every heuristic

package/pack/generated/codex/skills/rite-seal/SKILL.md

@@ -13,8 +13,9 @@ authorized irreversible actions and close-out.
 ## Authority
 
 Read [`core.md`](../devrites-lib/reference/standards/core.md) plus only
-final-diff-relevant standards: agents, review, proof,
-browser, security, principles, docs, observability, deprecation, and Done.
+final-diff-relevant standards: agents, code-review, testing, browser-proof-checklist,
+security, principles, documentation, observability, deprecation, and
+definition-of-done.
 Load [`final-evidence.md`](reference/final-evidence.md) and
 [`go-no-go.md`](reference/go-no-go.md) for proof and verdict safety.
 Follow the shared
@@ -44,7 +45,10 @@ and stops.
 
 ## Workflow
 
-Follow [`reference/phase-contract.md`](reference/phase-contract.md):
+Follow [`reference/phase-contract.md`](reference/phase-contract.md)
+([`risk-and-rollback.md`](reference/risk-and-rollback.md),
+[`seal-template.md`](reference/seal-template.md),
+[`anti-patterns.md`](reference/anti-patterns.md)):
 
 1. read workspace and final diff;
 2. recheck the canonical candidate/bindings and approved repository/CI proof;