devrites 5.10.2 → 5.12.0

package/pack/generated/codex/skills/rite-build/SKILL.md

@@ -5,6 +5,10 @@ argument-hint: "[--parallel N] [slice number or name]"
 user-invocable: true
 ---
 
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/agents.md","rite-build/reference/phase-contract.md","rite-build/reference/one-slice-cycle.md","rite-build/reference/wright-dispatch.md","rite-build/reference/checkpoint.md","rite-build/reference/spec-drift-guard.md","rite-build/reference/output.md","rite-build/reference/anti-patterns.md"],"triggers":{"afk":["rite-build/reference/afk-discipline.md","devrites-lib/reference/standards/afk-hitl.md","rite-build/reference/checkpoint-protocol.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"coding":["devrites-lib/reference/standards/coding-style.md"],"debug-recovery":["devrites-lib/reference/standards/debug-recovery.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"frontend":["rite-build/reference/frontend-trigger.md"],"parallel":["rite-build/reference/parallel-batch.md"],"patterns":["devrites-lib/reference/standards/patterns.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md"],"tdd":["rite-build/reference/tdd.md","devrites-lib/reference/standards/testing.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","strategy.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"slice-wright":["brief.md","spec.md","architecture.md","plan.md","tasks.md","test-plan.md","state.md","decisions.md","assumptions.md","questions.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md"]}} -->
+> Read-set manifest: `devrites-engine context <slug> --phase build` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+
+
 # $rite-build: one verified slice
 
 HITL stops; a later user invocation starts the next slice.
@@ -17,7 +21,8 @@ caps and pause rules. Every wright returns after one slice.
 Root owns gates/bookkeeping; fresh
 [`devrites-slice-wright`](.codex/agents/devrites-slice-wright.toml) writes source/tests.
 Workflow Artifacts use
-[`workflow-artifacts.md`](../devrites-lib/reference/standards/workflow-artifacts.md).
+[`workflow-artifacts.md`](../devrites-lib/reference/standards/workflow-artifacts.md)
+(trigger `workflow-artifacts` — only when the plan declares them).
 Execute [`reference/phase-contract.md`](reference/phase-contract.md)
 ([`one-slice-cycle.md`](reference/one-slice-cycle.md),
 [`afk-discipline.md`](reference/afk-discipline.md)); dispatch uses
@@ -32,23 +37,32 @@ Wright applies anti-slop; root verifies returns and never patches source.
 
 ## Invariants
 
-- Default: one slice; writers serial on control. Parallel only via `--parallel N`
-  under [`reference/parallel-batch.md`](reference/parallel-batch.md). Same-worktree
-  multi-writer / root-emulated concurrency forbidden. Native-worktree pilot =
-  single-slice isolation when `wright-dispatch.md` preflight + reconcile hold.
-- Exact feature scope only; reject out-of-allowlist diffs; record adjacent issues.
-- Re-prove affected behavior after edits; reuse observations only under
-  [evidence validity](../devrites-lib/reference/candidate-integrity.md#evidence-validity).
+- Default: one slice; writers serial on control (core.md #5). Parallel only via
+  `--parallel N` under [`reference/parallel-batch.md`](reference/parallel-batch.md).
+  Same-worktree multi-writer / root-emulated concurrency forbidden.
+  Native-worktree pilot = single-slice isolation when `wright-dispatch.md`
+  preflight + reconcile hold.
+- Exact feature scope only (core.md #7); reject out-of-allowlist diffs
+  (`devrites-engine check diff-scope <slug> --allow <contract-paths>`); record
+  adjacent issues. An adjacent issue or non-obvious rationale bound to specific
+  code anchors as a note — `devrites-engine note add <slug> <file> "<verbatim
+  quote>" <title>` — so refactors regrade it instead of losing it
+  ([`notes.md`](../devrites-lib/reference/workspace-artifact-schema.md#anchored-notes)).
+- Re-prove affected behavior after edits (core.md #6); reuse observations only
+  under [evidence validity](../devrites-lib/reference/candidate-integrity.md#evidence-validity).
 - Unplanned dependency/design-system/gap/repair → Vet/Spec Drift Guard batch
   sweep: every contract-assumption violation recorded before one folded
   repair+vet. Ask only for licensing/cost/security/product or explicit
-  architecture-policy decisions.
-- Root never edits product source/tests (`.devrites/` + Workflow Artifact only).
-  Wright is sole product writer; extras in returned paths/`git diff --name-only` hard-stop.
+  architecture-policy decisions (core.md #8).
+- Root never edits product source/tests (`.devrites/` + Workflow Artifact only;
+  [agents.md](../devrites-lib/reference/standards/agents.md) source-writing
+  boundary). Wright is sole product writer; extras in returned paths/`git diff
+  --name-only` hard-stop via `check diff-scope`.
 - Principles bind; irreversible conflict needs human exception or stop.
-- Evidence beats confidence. Never weaken tests, skip TDD, widen writers, or
-  self-approve. Drift → [`spec-drift-guard.md`](reference/spec-drift-guard.md);
-  checkpoint → [`checkpoint.md`](reference/checkpoint.md).
+- Evidence beats confidence (core.md #6). Never weaken tests, skip TDD, widen
+  writers, or self-approve. Drift →
+  [`spec-drift-guard.md`](reference/spec-drift-guard.md); checkpoint →
+  [`checkpoint.md`](reference/checkpoint.md).
 - Async readiness waits during slice work follow
   [`debug-recovery.md`](../devrites-lib/reference/standards/debug-recovery.md)
   (bounded poll + last-signal artifact; no blind sleep as primary strategy).

package/pack/generated/codex/skills/rite-build/reference/checkpoint.md

@@ -42,6 +42,12 @@ BODY
 
 **Local-only:** never push or let scratch work trigger CI.
 
+After the commit lands, run `devrites-engine check regression <slug> --update`
+to ratchet the workspace progress baseline — the landed slice, newly checked
+acceptance criteria, and resolved questions become the new floor that later
+checks compare against. A `BLOCKED` compare before that ratchet means durable
+facts were lost this cycle; restore or route them before landing the commit.
+
 ## Restore
 After a crash, a fresh session may read the last `WIP(<slug>)` body as crash context.
 Authoritative state remains in `.devrites/`: validate the body against that workspace;

package/pack/generated/codex/skills/rite-build/reference/parallel-batch.md

@@ -53,7 +53,11 @@ duplicates, absolutes, `.devrites/**`. Empty pairwise intersection required.
 **SSOT:** `devrites-engine check path-disjoint [--root <dir>] [<json-file>|-]`
 (N≥2 only; pass `--root`). Input is `{"slices":[{"id":"SLICE-002","paths":["src/policy.rs","src/policy/mod.rs"]}]}`
 (or a top-level array) built from each candidate's `Files likely touched`.
-Exit `0` → fan-out; else force serial. Inspect-time
+Exit `0` proves path disjointness only; fan-out also requires independent
+validation. A shared interface change and its implementers that must compile
+together form one validation unit, even in different files. Repair the slice
+contract into one bounded slice or sequence compatible steps before dispatch;
+do not label coupled siblings independently green. Else force serial. Inspect-time
 overlap → sibling **gap** (a shared path is a contract defect). **Failing
 case:** two parallel wrights share a path and fan-out proceeds without that
 check.
@@ -77,6 +81,9 @@ Lease: `batch_id`, `created_at`, `base_sha`, `n`,
    candidates from `orient` `task_graph.slices` + built list, each candidate's
    `Files likely touched` via `observe slice`, then
    `parallel select --cap N` (pairwise disjointness is inside that verb).
+   Preflight each selected slice with `devrites-engine check slice <slug>
+   <id>`; a malformed contract is dropped from the batch and recorded as a
+   gap, not dispatched.
 2. Write lease; freeze `B=HEAD`; `parallel create` worktrees.
 3. Dispatch ≤10 wrights in parallel (cwd=worktree; allowlist; prove `HEAD==B`).
 4. Inspect each returned path list, cumulative diff from `B`, transfer identity,
@@ -141,7 +148,9 @@ Repair rejected work in place; never discard/rebuild while budget remains.
   `devrites/parallel/<slug>/<old-batch>/<slice>` ref. If the inventory proves the accepted
   approach unsound and no corrected decomposition exists, that is exhaustion
   → blocked, preserve, STOP. **Reviewer stall/cancel or missing
-  verdict** → re-dispatch the reviewer, not the wright. **Product/policy/
+  verdict** → reconcile the old host handle under
+  [terminal reconciliation](../../devrites-lib/reference/parallel-dispatch.md#cancellation-and-terminal-reconciliation)
+  before re-dispatching the reviewer, not the wright. **Product/policy/
   irreversible** → stops for the human.
 - Dispatch one fresh repair-all `devrites-slice-wright` (cwd=worktree; step 3
   rules) with the original contract + complete inventory +

package/pack/generated/codex/skills/rite-build/reference/phase-contract.md

@@ -6,7 +6,8 @@ Opt-in `--parallel N` replaces steps 2–8 with [`parallel-batch.md`](parallel-b
 Spec Drift Guard still applies.
 
 1. **Gate.** Read core, `.devrites/ACTIVE`, then `devrites-engine orient <slug>`
-   and the Build read-next in
+   (`devrites-engine next <slug>` prints the minimal remaining path) and the
+   Build read-next in
    [`workspace-artifact-schema.md`](../../devrites-lib/reference/workspace-artifact-schema.md#read-next-by-phase):
    the selected slice via `devrites-engine observe slice <slug> <SLICE-ID>`, not whole
    `tasks.md`; over-budget or `bulk_files` artifacts are read by anchor only. Require
@@ -26,9 +27,12 @@ Spec Drift Guard still applies.
    dispatch the exact `devrites-slice-wright` fresh. Root never writes product
    paths; wright cannot widen scope; missing profile blocks.
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"Build gate enters or resumes transaction","action":"invoke canonical operation table; reconcile exact result","return":"same slice/checkpoint cursor or Plan/Vet route"} -->
-4. **Inspect.** Wait; compare returned paths and `git diff --name-only` with the
-   contract. Reject stale/partial/malformed/out-of-scope work; preserve user work.
-   Restoration uses the bounded wright.
+4. **Inspect.** Wait; run `devrites-engine check diff-scope <slug> --allow
+   <contract-paths>` for the mechanical returned-paths ⊆ contract check **before**
+   any reviewer dispatch — a violation returns through the bounded wright without
+   spending review. Then compare returned paths and `git diff --name-only` with the
+   contract for semantics diff-scope cannot judge (stale/partial/malformed work;
+   preserved user work). Restoration uses the bounded wright.
 5. **Review.** Apply [Independent Build review](#independent-build-review).
    Missing verdicts, principle breaches and open Critical/Important block acceptance.
 6. **Prove.** Against the frozen pre-slice candidate inspect

package/pack/generated/codex/skills/rite-build/reference/wright-dispatch.md

@@ -42,7 +42,11 @@ worktrees stay forbidden.
 
 ## Prepare
 
-1. Derive the smallest exact project-relative source/test path list; reject
+1. Run `devrites-engine check slice <slug> <SLICE-ID>` first — it fails a
+   malformed contract (missing goal, empty/invalid Writer allowlist,
+   unresolvable `Satisfies` AC ids, empty proof field) before a wright
+   context is spent; a failure is a gap, not a dispatch. Then derive the
+   smallest exact project-relative source/test path list; reject
    directories/globs, traversal, symlink escapes, duplicates, and `.devrites/**`.
    A target composed only of vetted executable workflow artifacts routes to the
    controlling root under
@@ -50,7 +54,12 @@ worktrees stay forbidden.
    its rejection here is not a blocker.
 2. Include goal, verbatim acceptance, exclusions, context,
    `test-plan.md` proof commands, applicable standards, and the exact
-   `WIP(<slug>):` subject (no slice id). For each triggered
+   `WIP(<slug>):` subject (no slice id). Build the wright's read-set with
+   `devrites-engine context <slug> --phase build --role slice-wright --trigger <set>`
+   and hand it the bundle path; evaluate each trigger condition and pass those
+   that fire (TDD slice → `tdd`, AFK run → `afk`, UI work → `frontend`, …).
+   The command prints `unselected=[...]`; an omitted applicable trigger is a gap.
+   For each triggered
    topology/data/integration standard, include only the feature-specific owner/invariant,
    failure or partial-state case, recovery rule, and required proof from the vetted plan.
    Do not paste the whole standard or silently omit an applicable risk.
@@ -62,17 +71,34 @@ worktrees stay forbidden.
 
 ## Run
 
-Ask the host for the exact writer in fresh context and wait. Use at most one writer
-across all linked worktrees for this workspace. Never run two writers in one worktree,
-run isolated and same-worktree writers concurrently, or substitute a generic agent.
-Opt-in `$rite-build --parallel N` fans out only under [`parallel-batch.md`](parallel-batch.md).
+Same-worktree (non-isolated) dispatch claims before writing: `devrites-engine
+claim add --session <id> <task-paths>`; retain its returned `<claim-id>`, then run
+`devrites-engine claim check --session <id> <task-paths>` — a held claim from a
+live foreign session releases the retained claim and stops the dispatch, per
+[`agents.md`](../../devrites-lib/reference/standards/agents.md). Ask the host
+for the exact writer in fresh context and wait. Track it through the
+launch barrier — `devrites-engine dispatch <slug> open --phase build --wave
+<slice-id> --role slice-wright`, then `start` with the host handle, `seal`, and
+`return` on completion (auto-records dispatch/return metrics). Use
+at most one writer across all linked worktrees for this workspace. Never run two
+writers in one worktree, run isolated and same-worktree writers concurrently, or
+substitute a generic agent. Opt-in `$rite-build --parallel N` fans out only under
+[`parallel-batch.md`](parallel-batch.md).
+
+After `claim add`, every terminal path releases the claim with
+`devrites-engine claim release --session <id> --id <claim-id>`: successful
+return, rejected result, gap, stop, or launch failure. TTL is crash recovery,
+not normal cleanup.
 
 ## Inspect and prove
 
 1. Compare the returned file list and `git diff --name-only` with task paths.
+   `devrites-engine check diff-scope <slug> --allow <task-paths>` is the
+   mechanical subset gate — run it before any reviewer dispatch; a violation
+   restores through the bounded wright without spending review.
    Reject a result that omits any required key — the bookkeeping arrays count
-   whether empty or filled — or adds a path. Restore only through the same bounded
-   wright; root never widens scope or edits source.
+   whether empty or filled — or adds a path. Root never widens scope or edits
+   source.
 2. Inspect the test diff for deletion, skipping, focus markers, or loosened
    assertions. Dedicated test analysis treats weakening as Critical.
    Confirm a test for a data/integration/topology risk can actually exhibit that risk;

package/pack/generated/codex/skills/rite-clarify/SKILL.md

@@ -5,6 +5,10 @@ argument-hint: "[feature-slug]"
 user-invocable: true
 ---
 
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","rite-clarify/reference/decision-coverage.md","rite-clarify/reference/anti-patterns.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md"],"workspaceByRole":{"evidence-scout":["brief.md","spec.md","state.md","questions.md"]}} -->
+> Read-set manifest: `devrites-engine context <slug> --phase clarify` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+
+
 # $rite-clarify: resolve product decisions
 
 Run this required pass between spec and strategy. If the spec covers every material

package/pack/generated/codex/skills/rite-converge/SKILL.md

@@ -5,6 +5,10 @@ argument-hint: "[feature-slug]"
 user-invocable: true
 ---
 
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/spec-grammar.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/tooling.md","devrites-lib/reference/standards/testing.md","rite-converge/reference/convergence-assessment.md","rite-converge/reference/anti-patterns.md","rite-build/reference/spec-drift-guard.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"principles":["devrites-lib/reference/standards/principles.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md"],"workspaceByRole":{"evidence-scout":["spec.md","plan.md","tasks.md","state.md","evidence.md"]}} -->
+> Read-set manifest: `devrites-engine context <slug> --phase converge` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+
+
 # $rite-converge: compare live code with intent
 
 Read `spec.md`, `plan.md`, and `tasks.md` as the **sole source of intent** (with
@@ -89,7 +93,13 @@ Pull on demand:
    acceptance criterion / scenario, every plan touch-point, and every existing slice's stated
    Produces. A principle violated in the current code is its own top-severity gap.
    Dispatch up to three independent inventory partitions to `devrites-evidence-scout` on the
-   same live-code snapshot, await their dossiers, then reconcile the cited facts in the root
+   same live-code snapshot — build each scout's read-set once with
+   `devrites-engine context <slug> --phase converge --role evidence-scout` and hand it the
+   bundle path; run the wave through
+   `devrites-engine dispatch <slug> open|start|seal|return` (per
+   [`parallel-dispatch.md`](../devrites-lib/reference/parallel-dispatch.md)), which
+   auto-records dispatch/return metrics. Await their
+   dossiers, then reconcile the cited facts in the root
    context. **Completion:** every inventory unit is classified once with live-code evidence.
 5. **Enqueue the remainder as new slices.** For each *partial* or *absent* unit, append a
    `## SLICE-###` (continue the numbering after the highest existing id), each with a `Satisfies:` line tracing to the AC/REQ it closes and a
@@ -102,7 +112,9 @@ Pull on demand:
    update `state.md` to `Phase: plan`, `Next step: $rite-vet`, and set an existing
    `eng-review.md` field to `Implementation readiness: NEEDS REPLAN`. When nothing was unmet,
    leave the plan/vet verdict untouched and set `Next step: $rite-prove`. Append
-   `decisions.md` for any material call.
+   `decisions.md` for any material call. When slices were appended, run
+   `devrites-engine check task-graph <slug>` before invoking Vet; failure stays in
+   Converge for correction and never spends a Vet reviewer context.
 7. **STOP.** Report units assessed, built / partial / absent counts, slices appended, and any
    principle violation found. A direct invocation that appended slices becomes
    the caller for the mandated next step: save a return cursor

package/pack/generated/codex/skills/rite-customize/SKILL.md

@@ -5,6 +5,8 @@ argument-hint: "[instruction | skill <name> | agent <name> | plugin | --import-l
 user-invocable: true
 disable-model-invocation: true
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"triggers":{"security":["devrites-lib/reference/standards/security.md"]},"workspace":[]} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-customize` bundles every file named below into one deduplicated read.
 
 # $rite-customize: native project customization
 

package/pack/generated/codex/skills/rite-define/SKILL.md

@@ -5,6 +5,10 @@ argument-hint: "[feature-slug]"
 user-invocable: true
 ---
 
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/spec-grammar.md","rite-define/reference/plan-template.md","rite-define/reference/gates.md","rite-define/reference/anti-patterns.md","rite-plan/reference/slicing.md","rite-plan/reference/task-breakdown.md","rite-spec/reference/acceptance-criteria.md","rite-spec/reference/state-workspace.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"agents":["devrites-lib/reference/standards/agents.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"frontend":["devrites-frontend-craft/reference/fullstack.md"],"principles":["devrites-lib/reference/standards/principles.md"],"visual":["devrites-lib/reference/visual-playbooks/index.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","strategy.md","design-brief.md","references.md"],"workspaceByRole":{"plan-drafter":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","architecture.md","strategy.md","design-brief.md","references.md","state.md"]}} -->
+> Read-set manifest: `devrites-engine context <slug> --phase define` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+
+
 # $rite-define: plan from the spec
 
 Turn `spec.md` into architecture, vertical slices, traceability, and state. Spec owns
@@ -19,7 +23,7 @@ Pull these via `Read` when shaping the plan:
 - [`documentation.md`](../devrites-lib/reference/standards/documentation.md): record plan-time decisions and rationale.
 - [`repository-topology.md`](../devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](../devrites-lib/reference/standards/data-integrity.md), and [`integration-reliability.md`](../devrites-lib/reference/standards/integration-reliability.md):
   load only for matching `spec.md` applicability rows; each applicable owner is mandatory.
-- `../devrites-lib/reference/workspace-artifact-schema.md`: artifact purposes, budgets, IDs, and read triggers.
+- `../devrites-lib/reference/workspace-artifact-schema.md`: artifact purposes, budgets, IDs, and read triggers (trigger `workflow-artifacts`).
 
 ## Operating rules
 
@@ -145,7 +149,9 @@ Pull these via `Read` when shaping the plan:
 6a. **Cross-artifact gate.** Read spec, tasks, and traceability together: every
    buildable AC/REQ maps to an existing slice/proof, every slice maps to real
    acceptance, and names/prose agree. Missing, duplicate, contradictory, or
-   meaning-changing mappings block.
+   meaning-changing mappings block. Then run
+   `devrites-engine check task-graph <slug>`; a malformed dependency graph blocks
+   before Vet rather than spending a reviewer context on invalid tasks.
 7. **Readiness gate** (`plan-template.md`): require CLEAR coverage; complete acceptance,
    wiring, shared-contract proof, applicable outputs, and rollback; risk-first acyclic order;
    justified deviations; and every horizon item present, with blockers resolved, planning

package/pack/generated/codex/skills/rite-doctor/SKILL.md

@@ -4,6 +4,8 @@ description: Check DevRites install, installed pack, or host configuration. Not
 argument-hint: ""
 user-invocable: true
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"workspace":["state.md"]} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-doctor` bundles every file named below into one deduplicated read.
 
 # $rite-doctor: DevRites diagnostics
 
@@ -34,7 +36,10 @@ Read-only: never repair files, advance a feature, or diagnose the application.
    contained regular `.devrites/work/<slug>/state.md`, and no symlink in the
    `.devrites`, `work`, workspace, or state path. A missing target, unsafe slug,
    archive/work collision, or escape is `FAIL`. Report phase/status/next action
-   from `state.md` without changing them.
+   from `state.md` without changing them. Also report the cursor's `schema` row:
+   absent on a live workspace means it predates the current engine schema — `WARN`
+   with `devrites-engine migrate <slug>` remediation; an engine refusal naming a
+   newer schema than the binary's is `WARN` to upgrade the binary.
 5. **Compare versions.** The manifest version is the installed-pack authority.
    When this repository is the DevRites source (its `package.json` name is
    `devrites`), compare that local package candidate version with the manifest.

package/pack/generated/codex/skills/rite-dogfood/SKILL.md

@@ -5,6 +5,8 @@ argument-hint: "[feature-slug|branch] [--port N]"
 user-invocable: true
 disable-model-invocation: true
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-frontend-craft/reference/quality-standards.md","devrites-lib/reference/reply-contract.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"testing":["devrites-lib/reference/standards/testing.md"],"tooling":["devrites-lib/reference/standards/tooling.md"]},"workspace":["state.md","questions.md","dogfood.md"]} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-dogfood` bundles every file named below into one deduplicated read.
 
 # $rite-dogfood: diff-scoped browser QA
 

package/pack/generated/codex/skills/rite-explain/SKILL.md

@@ -5,6 +5,8 @@ argument-hint: "[a concept | a diff ref | an idea | \"what did I do this week?\"
 user-invocable: true
 disable-model-invocation: true
 ---
+<!-- loads: {"always":["rite-explain/reference/intake.md"],"triggers":{"repo":["devrites-lib/reference/standards/tooling.md"],"style":["devrites-lib/reference/standards/prose-style.md"],"principles":["devrites-lib/reference/standards/principles.md"]}} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-explain` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # $rite-explain: the human half of the learning loop
 

package/pack/generated/codex/skills/rite-frame/SKILL.md

@@ -5,6 +5,10 @@ argument-hint: "[task to frame | diff to audit]"
 user-invocable: true
 ---
 
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","rite-frame/reference/failure-modes.md"],"triggers":{"principles":["devrites-lib/reference/standards/principles.md"],"simplify":["devrites-lib/reference/standards/coding-style.md","devrites-lib/reference/standards/patterns.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":[]} -->
+> Read-set manifest: `devrites-engine context <slug> --phase frame` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+
+
 # $rite-frame: frame the goal, audit the diff
 
 LLMs reliably get four things wrong: they **assume** silently, **overcomplicate**, edit

package/pack/generated/codex/skills/rite-handoff/SKILL.md

@@ -5,6 +5,8 @@ user-invocable: true
 disable-model-invocation: true
 argument-hint: "[what the next session will focus on]"
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","rite-handoff/reference/handoff-template.md","devrites-lib/reference/reply-contract.md"],"triggers":{"hygiene":["devrites-lib/reference/standards/context-hygiene.md"]}} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-handoff` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # $rite-handoff: chat-only context, into a fresh-agent doc
 
@@ -16,7 +18,12 @@ the same user after `/clear`) can pick the work up without re-reading the transc
 Read [`core.md`](../devrites-lib/reference/standards/core.md) first: its "Persistence before stopping" discipline is
 exactly what this skill executes. The other rule files load on demand.
 
-Then read the explicit or active workspace's `state.md` directly.
+Then read the explicit or active workspace's `state.md` directly, and run
+`devrites-engine handoff [slug]` — its resume record (cursor, `awaiting_human`,
+blocking question gates, the `gates.md` reduction, `decisions.md` dead ends,
+read-next order) is the deterministic spine of the handoff doc's **Resume**,
+**Read next**, and **Next action** sections. The chat adds what the workspace
+cannot hold; the engine supplies what the workspace already knows.
 
 ## Where to write
 

package/pack/generated/codex/skills/rite-learn/SKILL.md

@@ -5,6 +5,8 @@ argument-hint: "[\"<lesson or rejected direction>\"]"
 user-invocable: true
 disable-model-invocation: true
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/documentation.md","devrites-lib/reference/standards/tooling.md"],"workspace":["state.md","decisions.md","drift.md","evidence.md","review.md","seal.md","questions.md"],"workspaceByRole":{"retrospector":["state.md","decisions.md","drift.md","evidence.md","review.md","seal.md","questions.md"]},"triggers":{"agents":["devrites-lib/reference/standards/agents.md"]}} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-learn` bundles every file named below into one deduplicated read.
 
 # $rite-learn: review durable lessons
 

package/pack/generated/codex/skills/rite-plan/SKILL.md

@@ -5,6 +5,10 @@ argument-hint: "[mode: decompose|reslice|repair|reorder|split|unblock|course-cor
 user-invocable: true
 ---
 
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/acceptance-preserving-reslice.md","devrites-lib/reference/standards/tooling.md","devrites-lib/reference/standards/agents.md","rite-plan/reference/slicing.md","rite-plan/reference/replan-and-repair.md","rite-plan/reference/dependency-graph.md","rite-plan/reference/task-breakdown.md","rite-plan/reference/anti-patterns.md","rite-define/reference/plan-template.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","drift.md"],"workspaceByRole":{"plan-drafter":["brief.md","spec.md","plan.md","tasks.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","architecture.md","state.md","drift.md"]}} -->
+> Read-set manifest: `devrites-engine context <slug> --phase plan` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+
+
 # $rite-plan: (re)plan an active feature
 
 Update a plan invalidated by evidence, drift, or user decision. **Read the active workspace
@@ -18,6 +22,8 @@ Pull [`development-workflow.md`](../devrites-lib/reference/standards/development
 criteria.
 Load [`repository-topology.md`](../devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](../devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](../devrites-lib/reference/standards/integration-reliability.md)
 when the spec applicability map or observed drift triggers them.
+Load [`assumption-checkpoints.md`](../devrites-lib/reference/standards/assumption-checkpoints.md) (trigger `assumption-delta`)
+when scope introduces a second case, an optional field, or a chosen-over-derived value.
 Before classifying any Reslice, read `.agents/skills/devrites-lib/reference/standards/acceptance-preserving-reslice.md`.
 
 <!-- BEGIN RESLICE ROUTE-TO-ACTION -->

package/pack/generated/codex/skills/rite-plan/reference/task-breakdown.md

@@ -28,7 +28,9 @@ This reference owns decomposition; the shared schema owns field names and meanin
 7. Resolve every foreseeable human-owned checkpoint now. Keep a build-time checkpoint only
    when it needs evidence unavailable before code or mandatory action-time approval, and say why.
 8. Make every `Tests/proof` entry executable: exact command, working directory, prerequisites,
-   expected signal, and mutable inputs whose provenance evidence must bind.
+   expected signal, and mutable inputs whose provenance evidence must bind. Source the command
+   from `devrites-engine detect commands` output where a slot resolves; an `unresolved` slot
+   means the plan names the concrete command explicitly, never an invented one.
 
 ## Keep it honest
 - **Interfaces prevent cross-slice drift.** A slice-wright sees only its own contract; the

package/pack/generated/codex/skills/rite-polish/SKILL.md

@@ -5,6 +5,10 @@ argument-hint: "[target | bolder | quieter | distill | harden | normalize-only]"
 user-invocable: true
 ---
 
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/candidate-integrity.md","rite-polish/reference/code.md","rite-polish/reference/anti-patterns.md","rite-polish/reference/anti-ai-slop.md","rite-polish/reference/harden-checklist.md","rite-polish/reference/ledger.md","rite-build/reference/checkpoint.md"],"triggers":{"adr":["rite-polish/reference/adr-promotion.md"],"agents":["devrites-lib/reference/standards/agents.md"],"backend":["rite-polish/reference/backend-polish.md"],"coding":["devrites-lib/reference/standards/coding-style.md","devrites-lib/reference/standards/duplicate-code.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"ui":["rite-polish/reference/ui.md","rite-polish/reference/design-memory.md","rite-polish/reference/design-system-discovery.md","rite-polish/reference/browser-polish-evidence.md","devrites-lib/reference/standards/browser-proof-checklist.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","design-brief.md","browser-evidence.md","polish-report.md"],"workspaceByRole":{"slice-wright":["spec.md","architecture.md","plan.md","tasks.md","test-plan.md","state.md","decisions.md","design-brief.md"]}} -->
+> Read-set manifest: `devrites-engine context <slug> --phase polish` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+
+
 # $rite-polish: finish before review
 
 Polish code for every feature. When the feature touches UI, normalize and polish the
@@ -68,7 +72,12 @@ Incomplete comparison is **not** agreement. Record axis deltas in `polish-report
 3. **Always** read [`reference/code.md`](reference/code.md) and assess **Phase 1
    (code polish)**; if backend was touched, assess **Phase 2 (backend polish)** from
    the same file. Reconcile the findings, then send accepted corrections as one bounded
-   wright contract.
+   wright contract: build its read-set with
+   `devrites-engine context <slug> --phase polish --role slice-wright`, run the
+   single-agent wave through `devrites-engine dispatch <slug> open|start|seal|return`
+   (auto-records dispatch/return metrics), and gate returned paths
+   with `devrites-engine check diff-scope <slug> --allow <contract-paths>` before
+   proof.
 4. **If UI scope detected** read [`reference/ui.md`](reference/ui.md), and read
    `design-brief.md` if present so the polish follows the direction and states established
    by `devrites-ux-shape` and refined by `devrites-frontend-craft`. **Read the
@@ -87,7 +96,9 @@ Incomplete comparison is **not** agreement. Record axis deltas in `polish-report
    [`ADR promotion`](reference/adr-promotion.md). Add every changed project path
    to the candidate manifest; none of these writes waits for Ship.
 6. **Re-prove and close.** After all accepted code/UI corrections and rollups,
-   run `devrites-engine check candidate <slug>`. Any digest change requires
+   run `devrites-engine check candidate <slug>` and `devrites-engine check
+   windows <slug>` — an unwaived deferral marker surfaces here, not at Seal.
+   Any digest change requires
    affected real re-proof using the approved commands, fresh proof-runner
    validation, refreshed evidence/browser bindings, and an updated candidate
    manifest. Record a **`Re-verification:`** line in `polish-report.md`. Close

package/pack/generated/codex/skills/rite-polish/reference/code.md

@@ -7,6 +7,7 @@ code polish (Phase 1) and, when backend is touched, backend polish (Phase 2).
 
 - [`coding-style.md`](../../devrites-lib/reference/standards/coding-style.md): Phase 1 (simplify, dead code, naming, comments).
 - [`patterns.md`](../../devrites-lib/reference/standards/patterns.md): Phase 1 simplification: avoid over-engineering.
+- [`duplicate-code.md`](../../devrites-lib/reference/standards/duplicate-code.md): Phase 1 dedupe — `check dup` leads, triage verdicts, ignore ledger.
 - [`error-handling.md`](../../devrites-lib/reference/standards/error-handling.md): Phase 2 backend (no silent catches, consistent errors).
 - [`performance.md`](../../devrites-lib/reference/standards/performance.md): Phase 2 backend (N+1s, query bounds).
 - [`documentation.md`](../../devrites-lib/reference/standards/documentation.md): keep touched docs current; record polish-time decisions.
@@ -34,7 +35,11 @@ feature only.
   conditionals (switch/lookup over a long if-else; decompose a complex boolean
   into well-named parts), dedupe, inline single-use indirection, replace
   hand-rolled utils with the stdlib/existing helper, delete dead code this
-  feature added.
+  feature added. Run `devrites-engine check dup <slug>` (mode matching the
+  candidate diff: `--base <ref>` when committed, `--worktree`/`--staged` when
+  not) for near-duplicate leads and give each reported cluster a verdict per
+  [`duplicate-code.md`](../../devrites-lib/reference/standards/duplicate-code.md)
+  (merge / keep-with-reason / watch).
 - **Chesterton's Fence:** understand *why* something exists before removing it.
   If you can't explain a check, branch, or wrapper, you may not remove it:
   many "useless" lines guard a real edge case. A `devrites:keep` / `simplify-ignore`

package/pack/generated/codex/skills/rite-polish/reference/ledger.md

@@ -35,7 +35,9 @@ Run during Polish before Review so ledger edits enter the proved candidate.
 
 1. **Read.** Read the feature spec and only affected ledger specs. Reject a
    capability escaping `.devrites/specs`, symlink/special file, duplicate header,
-   or malformed delta.
+   or malformed delta — an unknown verb, an empty delta section, a REMOVED block
+   carrying scenarios, or a MODIFIED/REMOVED header with no verbatim ledger
+   match (a near-match is a spec typo, not a rename).
 2. **Preview, do not write.** Show exact target paths; every delta with before/after
    header; full requirement order; and changed files. Apply the table to current
    bytes and the preservation rule to MODIFIED and REMOVED. Conflicts stop.

package/pack/generated/codex/skills/rite-pov/SKILL.md

@@ -4,6 +4,8 @@ description: Project-grounded verdict for adopting, switching, rejecting, or rev
 argument-hint: "[candidate/link/question]"
 user-invocable: true
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"workspace":["decisions.md"]} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-pov` bundles every file named below into one deduplicated read.
 
 # $rite-pov: project-grounded external verdict
 

package/pack/generated/codex/skills/rite-pr-feedback/SKILL.md

@@ -5,6 +5,8 @@ argument-hint: "[PR number|thread URL|blank for current branch]"
 user-invocable: true
 disable-model-invocation: true
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/git-workflow.md"],"triggers":{"security":["devrites-lib/reference/standards/security.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":[]} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-pr-feedback` bundles every file named below into one deduplicated read.
 
 # $rite-pr-feedback: resolve PR review threads
 

package/pack/generated/codex/skills/rite-pressure-test/SKILL.md

@@ -4,6 +4,8 @@ description: "Pressure-test a rough/vague idea: ideate, explore 3-5 approaches,
 argument-hint: "[rough idea or plan to stress-test]"
 user-invocable: true
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/intent-map.md"],"workspace":["decisions.md"]} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-pressure-test` bundles every file named below into one deduplicated read.
 
 # $rite-pressure-test: diverge then converge
 

package/pack/generated/codex/skills/rite-prototype/SKILL.md

@@ -5,6 +5,8 @@ user-invocable: true
 disable-model-invocation: true
 argument-hint: "[the question the prototype is answering]"
 ---
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"workspace":[]} -->
+> Read-set manifest: `devrites-engine context [slug] --skill rite-prototype` bundles every file named below into one deduplicated read.
 
 # $rite-prototype: answer one question with throwaway code