devrites 5.13.1 → 5.14.1

package/pack/generated/pi/skills/rite-pressure-test/SKILL.md

@@ -4,7 +4,7 @@ description: "Pressure-test a rough/vague idea: ideate, explore 3-5 approaches,
 argument-hint: "[rough idea or plan to stress-test]"
 user-invocable: true
 ---
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/intent-map.md"],"workspace":["decisions.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/intent-map.md"],"workspace":["decisions.md","questions.md"]} -->
 > Read-set manifest: `devrites-engine context [slug] --skill rite-pressure-test` bundles every file named below into one deduplicated read.
 
 # /rite-pressure-test: diverge then converge
@@ -37,7 +37,9 @@ If the hinge is an uncertain material fact, freeze at most three questions for
 `unavailable`, never support. Record claim, support, strongest contrary evidence, and
 `supported | assumption | refuted`. Refutation changes the recommendation; an assumption
 advances only when non-decisive with bounded downside. Weak/conflicting decisive evidence
-returns **Hold** with the resolving evidence, never `/rite-spec`. Tie-breaker:
+returns **Hold** with the resolving evidence, never `/rite-spec`. Persist a Hold as an open
+`questions.md` entry (`gate: blocking`, the premise and resolving evidence) in the active or
+provisional-slug workspace before stopping; a reply-only Hold is lost. Tie-breaker:
 see [`intent-map.md`](../devrites-lib/reference/intent-map.md) (`rite-pressure-test`
 vs `rite-spec`). Do not research preferences
 or reversible implementation choices.
@@ -64,6 +66,6 @@ Changed: workspace only
 Evidence: options compared <n>; recommendation <option>; hinge <condition>; premises <supported/assumption/refuted + sources>
 Open: <none | unresolved premise and resolving evidence>
 Next: <when supported: /rite-spec <feature>; when Hold: none — requires <resolving evidence>>
-Record: <investigation-map.md path | not applicable>
+Record: <investigation-map.md path | questions.md id (Hold) | not applicable>
 ↻ Hygiene: /clear before starting the lifecycle
 ```

package/pack/generated/pi/skills/rite-prove/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/standards/testing.md","devrites-lib/reference/standards/spec-grammar.md","devrites-lib/reference/standards/test-proof-checklist.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/gates.md","devrites-lib/reference/standards/verification-methods.md","rite-prove/reference/acceptance-proof.md","rite-prove/reference/proof-ladder.md","rite-prove/reference/failure-triage.md","rite-prove/reference/test-command-discovery.md","rite-prove/reference/anti-patterns.md","rite-build/reference/checkpoint.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"browser":["devrites-lib/reference/standards/browser-proof-checklist.md","rite-prove/reference/browser-proof.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"observability":["devrites-lib/reference/standards/observability.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","browser-evidence.md"],"workspaceByRole":{"proof-runner":["spec.md","test-plan.md","tasks.md","evidence.md","touched-files.md","browser-evidence.md","state.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/standards/testing.md","devrites-lib/reference/standards/spec-grammar.md","devrites-lib/reference/standards/test-proof-checklist.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/gates.md","devrites-lib/reference/standards/verification-methods.md","rite-prove/reference/acceptance-proof.md","rite-prove/reference/proof-ladder.md","rite-prove/reference/failure-triage.md","rite-prove/reference/test-command-discovery.md","rite-prove/reference/anti-patterns.md","rite-build/reference/checkpoint.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"browser":["devrites-lib/reference/standards/browser-proof-checklist.md","rite-prove/reference/browser-proof.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"observability":["devrites-lib/reference/standards/observability.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","browser-evidence.md"],"workspaceByRole":{"proof-runner":["spec.md","test-plan.md","tasks.md","gates.md","evidence.md","touched-files.md","browser-evidence.md","state.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md"]}} -->
 > Read-set manifest: `devrites-engine context <slug> --phase prove` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -72,16 +72,24 @@ test changes.
 4. **Execute a frozen candidate.** Run `devrites-engine check candidate <slug>` and retain its digest.
    The root runs only commands declared by `test-plan.md`, with exact approved
    command, cwd, prerequisites, exit, and sanitized
-   decisive output. Run relevant suite plus build/typecheck/lint. Recheck the
+   decisive output, plus the test selector, runner counts
+   (collected/ran/passed/failed/skipped), and attempt number with first-attempt
+   outcome; output and exit come from one execution. Run relevant suite plus build/typecheck/lint. Recheck the
    candidate and require identical digest/no source mutation. Reject substituted
    commands, malformed manifests, zero-test/skipped/filtered behavioral claims,
-   exit-status-only claims, and source drift. Static gates prove only their named
+   exit-status-only claims, status-masking forms, and source drift. A retry-only
+   pass is `flaky` per [`testing.md`](../devrites-lib/reference/standards/testing.md#determinism-no-flaky-tests),
+   never green. Static gates prove only their named
    static criterion.
    Run the acceptance ledger: `devrites-engine gates run <slug>` executes every
    unmet runnable gate against the same approved preflight rows and records
    definition-bound evidence; `gates reverify <slug>` re-executes all of them
    when any prior pass is in doubt. Attest manual gates with `gates attest
-   <slug> <id> <note>` only against observed judgment; an impossible outcome
+   <slug> <id> <note>` only against observed judgment whose note cites the
+   human's own words or source; placeholder notes are unmet and an AFK run never
+   self-attests. Only gates manual at Vet are attested; runnable-to-manual
+   conversion, EXPECT loosening, or CHECK/CWD/row change here is Plan repair plus
+   re-Vet ([`gates.md`](../devrites-lib/reference/standards/gates.md)). An impossible outcome
    is `gates abandon` plus a handoff, never a deleted row or a false pass.
    `gates status <slug>` must reduce to `all-met` before Prove records green.
 5. **Gate consumptive actions.** Immediately before execution, apply

package/pack/generated/pi/skills/rite-prove/reference/anti-patterns.md

@@ -13,7 +13,7 @@ see [standards/anti-patterns.md](../../devrites-lib/reference/standards/anti-pat
 |---|---|
 | "Tests passed during build; that's enough." | Build = per-slice sanity check. Prove = whole-feature suite + build/typecheck/lint + browser. |
 | "Browser proof is overkill for this UI change." | If it's UI and a browser can run, the ladder applies. If you can't, document which rung and why. |
-| "Failure is in pre-existing code, not in this feature." | Still surfaces as a blocker. Feature scope = fix in scope or record + halt. |
+| "Failure is in pre-existing code, not in this feature." | Still surfaces as a blocker, never green. `pre-existing` needs recorded same-command baseline evidence ([failure triage](failure-triage.md)); without it the result is unresolved. Feature scope = fix in scope or record + halt. |
 | "Some slices are still pending but the rest can be proved." | No: `/rite-prove` runs once, when every slice is built. Otherwise you're proving a partial system. |
 
 ## Red Flags

package/pack/generated/pi/skills/rite-prove/reference/failure-triage.md

@@ -14,7 +14,14 @@ loop to `devrites-debug-recovery`.
    - environment/setup (missing dep, wrong node/ruby) → fix it when agent-owned;
      record a blocker only for human/access ownership, scope overflow, or exhausted
      fingerprint recovery.
-   - flaky (passes on re-run, timing/order) → note it; don't paper over with retries.
+   - pre-existing (fails without this candidate) → only with baseline evidence: the
+     same command/cwd/environment run on the baseline candidate (an earlier
+     `EVID-###`, or a base-ref run in a separate worktree), recorded. It is a named
+     blocker citing that baseline, never green; without the baseline it is unresolved.
+   - flaky (at least one fail and one pass on the unchanged candidate digest;
+     timing/order) → record every attempt and apply
+     [the Determinism standard](../../devrites-lib/reference/standards/testing.md#determinism-no-flaky-tests):
+     the green attempt proves nothing; fix it or record a blocker. Don't paper over with retries.
    - external dependency down → record blocker; don't fake the result.
 3. **Isolate:** minimize to the smallest failing case; bisect the diff if needed.
    If consumptive evidence maps to multiple causal seams, this is a
@@ -23,8 +30,10 @@ loop to `devrites-debug-recovery`.
    the cleaned-away past state terminal.
 4. **Fix within scope:** the current slice/feature only. If the fix reaches outside
    scope, stop and record a blocker in `state.md` (then `/rite-plan unblock`).
-5. **Re-run** the same command when it is repeatable; confirm green and record both
-   attempts in `evidence.md`. A consumptive action needs re-vetted evidence
+5. **Re-run** the same command when it is repeatable, after an admitted
+   correction; confirm green and record both attempts in `evidence.md`. A green
+   rerun with no correction on an unchanged digest is `flaky` (step 2), never a
+   close. A consumptive action needs re-vetted evidence
    completeness and any fresh authorization before a new attempt. Its spent
    action authorization does not stop offline recovery: a retained new fingerprint
    enters caller-owned diagnosis, correction, fixtures, and narrow Vet immediately.

package/pack/generated/pi/skills/rite-quick/SKILL.md

@@ -51,6 +51,8 @@ Load this lane's conditional standards when needed:
    `state.md` directly; `/rite-quick` does **not** require
    a workspace and does **not** create the full tree.
 1. **Significance gate** (above). Fail → STOP, tell the user to run `/rite-spec <feature>`.
+   If the only failing item is size (more than one slice) and no risk item holds, name
+   `/rite-fast <task>` as the lighter option.
 2. **One-line contract.** Restate in 1-3 lines: the change, its **acceptance** (how you'll
    know it works), and the **scope boundary** (what you will NOT touch). This is the entire
    "spec + plan" for a quick change: keep it in the chat; optionally drop a `brief.md` +
@@ -66,6 +68,8 @@ Load this lane's conditional standards when needed:
 4. **Prove (scoped).** Run the **targeted** tests + typecheck / lint for what changed (not
    the whole suite) → green. Record the command + output — resolve the project's real
    typecheck/lint commands with `devrites-engine detect commands` rather than guessing.
+   Engine missing or erroring, or zero detected commands for the changed surface:
+   stop with `unproven: <what could not run>`, never green and never a guessed command.
    A tautological test that can't
    fail is not proof.
 5. **Review-lite + ship.** Self-review the diff for correctness, scope, and idiom. If

package/pack/generated/pi/skills/rite-resolve/SKILL.md

@@ -80,7 +80,13 @@ Pull these via `Read` when shaping the resolve:
      that block and sets `Status: running`;
    - appends a `Log` line to `state.md`.
 
-   On resume, also clear or update the unblocked slice's `Slice mode` in `state.md`: if
+   **Writer failure:** command not found or nonzero exit → STOP. Do not hand-edit
+   `Slice mode`, `questions.md`, or `state.md`; report the exact command, its exit code,
+   and the decisive stderr line, and recommend `/rite-doctor`. Both files stay as the
+   writer left them.
+   **Completion:** zero exit, or the failure reported with no hand edit.
+
+   On resume, and only after a zero exit, also clear or update the unblocked slice's `Slice mode` in `state.md`: if
    the answer lets the slice proceed, drop the pause-time `Slice mode` so `/rite-build`
    re-derives it on the next selection; if the answer re-shapes how the slice should be
    built, set `Slice mode` to match.

package/pack/generated/pi/skills/rite-resolve/reference/answer-protocol.md

@@ -51,7 +51,7 @@ q-2026-05-28-002: clinician sign-off required at runtime, not at plan time
 - Order matters only for `state.md` clearance: the script processes top-to-bottom and
   flushes `Awaiting human` after each match.
 - Errors abort the batch at the first failing line so partial state is small and
-  diagnosable. (Re-run after fixing the offending line; already-applied lines refuse to
+  diagnosable. Report the failing line, exit code, and the qids already applied. (Re-run after fixing the offending line; already-applied lines refuse to
   re-apply because their `status` is no longer `open`.)
 
 ## Never overwrite

package/pack/generated/pi/skills/rite-review/SKILL.md

@@ -87,7 +87,8 @@ Pull these via `Read` when the diff demands them:
    what the spec asked but breaks project conventions (Spec pass, Code-review fail).
    Separate contexts prevent one axis from masking the other. This is the initial
    full pass; a correction uses step 7's bounded recheck:
-   - Freeze that closed digest and give the same digest to **two** read-only reviewers in
+   - Freeze that closed digest and give the same digest to the **two** axis reviewers (three when
+     [engineering lanes](../devrites-lib/reference/parallel-dispatch.md) split the code axis) in
      parallel, each with its own narrow brief and no
      cross-pollination — and evaluate the frontend (step 4), security (step 5),
      and performance (step 6) dispatch conditions from this same diff now,
@@ -104,6 +105,8 @@ Pull these via `Read` when the diff demands them:
        checks. Apply canonical anti-slop and silent-failure lenses; inspect each hunk
        for unrequested deletion. Unexcepted `.devrites/principles.md` violations are
        Critical. Distinguish binding standards from judgment-only baseline smells."
+       Route it through [parallel-dispatch.md § Engineering lanes](../devrites-lib/reference/parallel-dispatch.md#engineering-lanes):
+       a frontend+backend diff gets two lane reviewers in this cohort.
    - **Do NOT merge or re-rank** their findings. Present them under separate
      `## Spec` and `## Code review` sub-sections in `review.md`. Surface contradictions
      between the axes explicitly (e.g. "Spec axis says complete, Code-review axis says

package/pack/generated/pi/skills/rite-review/reference/performance-checklist.md

@@ -37,6 +37,11 @@ Identify the framework first; apply only its idioms.
   handlers, but preserve sensitive-data cache policy: `Cache-Control: no-store`
   eligibility varies by browser and conditions. Never remove a security control
   for a performance score; test account-switch and restored-page behavior.
+- **CLS attribution:** name the initiator (content inserted above, late
+  validation message, font swap), not only the shifted element, and exercise the
+  post-load state; a navigation-only run misses it. A CLS change is layout stability,
+  never reported as speed or latency. **Failing case:** space reserved on the shifted
+  card while the banner inserted above still causes the shift.
 
 ## Backend (every feature, UI or not)
 
@@ -62,7 +67,10 @@ Identify the framework first; apply only its idioms.
 ## AI-codegen perf smells (fold into the area above, not a separate finding category)
 
 - State duplicated instead of lifted; effects with over-broad deps that re-run needlessly.
-- Sequential `await`s where `Promise.all` / parallel fetch fits.
+- Sequential `await`s where `Promise.all` / parallel fetch fits, only after
+  authorization: a reorder never starts a private fetch before the auth check.
+  **Failing case:** after a "waterfall fix" an unauthenticated request reaches the
+  private fetch → Critical.
 - Over-fetching "just in case"; redundant calls a dedup would collapse.
 - Defensive memoization wrapping cheap components: cost with no benefit.
 

package/pack/generated/pi/skills/rite-seal/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug] [--full]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/verification-methods.md","rite-seal/reference/phase-contract.md","rite-seal/reference/final-evidence.md","rite-seal/reference/go-no-go.md","rite-seal/reference/risk-and-rollback.md","rite-seal/reference/seal-template.md","rite-seal/reference/output.md","rite-seal/reference/anti-patterns.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"],"browser":["devrites-lib/reference/standards/browser-proof-checklist.md"],"code-review":["devrites-lib/reference/standards/code-review.md"],"deprecation":["devrites-lib/reference/standards/deprecation.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"observability":["devrites-lib/reference/standards/observability.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","review.md","seal.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md","evidence.md","touched-files.md","review.md"],"devex-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md","review.md"],"frontend-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"proof-runner":["spec.md","test-plan.md","tasks.md","evidence.md","state.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","review.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md","review.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md","evidence.md","review.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/verification-methods.md","rite-seal/reference/phase-contract.md","rite-seal/reference/final-evidence.md","rite-seal/reference/go-no-go.md","rite-seal/reference/risk-and-rollback.md","rite-seal/reference/seal-template.md","rite-seal/reference/output.md","rite-seal/reference/anti-patterns.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"],"browser":["devrites-lib/reference/standards/browser-proof-checklist.md"],"code-review":["devrites-lib/reference/standards/code-review.md"],"deprecation":["devrites-lib/reference/standards/deprecation.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"observability":["devrites-lib/reference/standards/observability.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","review.md","seal.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md","evidence.md","touched-files.md","review.md"],"devex-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md","review.md"],"frontend-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"proof-runner":["spec.md","test-plan.md","tasks.md","gates.md","evidence.md","state.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md","review.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","review.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md","review.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md","evidence.md","review.md"]}} -->
 > Read-set manifest: `devrites-engine context <slug> --phase seal` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -62,9 +62,11 @@ Follow [`reference/phase-contract.md`](reference/phase-contract.md)
 1. read workspace and final diff;
 2. recheck the canonical candidate/bindings and approved repository/CI proof;
 3. admit valid Spec/Code accounts; dispatch remaining required exact roles under
-   `../devrites-lib/reference/parallel-dispatch.md` on the same frozen candidate;
+   `../devrites-lib/reference/parallel-dispatch.md` on the same frozen candidate,
+   code review through its § Engineering lanes;
 4. reconcile their read-only verdicts against source and immutable evidence;
-5. draft GO/NO-GO `seal.md` with acceptance, tests, decisions, and seven accounts;
+5. draft GO/NO-GO `seal.md` with acceptance, tests, decisions, and seven accounts
+   (each engineering lane its own account);
 6. write exactly one candidate binding, then run
    `devrites-engine check seal <slug>` for structure and identity, never semantics,
    and, when that check reports a stale readiness-input binding, run

package/pack/generated/pi/skills/rite-seal/reference/anti-patterns.md

@@ -12,7 +12,7 @@ see [standards/anti-patterns.md](../../devrites-lib/reference/standards/anti-pat
 | Excuse | Rebuttal |
 |---|---|
 | "All Important findings are minor; just GO." | `Important > 0` triggers an interactive y/N: do not bypass the prompt, present it. |
-| "User clearly wants this to ship." | Ship is evidence-driven, not consent-driven. A Critical finding outranks "the user said go". |
+| "User clearly wants this to ship." | Ship is evidence-driven, not consent-driven. With a Critical open the verdict stays NO-GO and `seal.md` records the user's override request; the user may accept named Important risks at the y/N prompt, but no request turns an open Critical or failed gate into GO. |
 | "Drift is small; resolve it inline and seal." | Unresolved drift = NO-GO, no exceptions. Route through `/rite-plan` to repair, then seal. |
 | "Reviewer findings overlap; average them away." | Surface disagreements explicitly. Averaging hides where the reviewers disagree. |
 | "Carry the old reviewer verdicts though the diff changed." | If the diff changed since `/rite-review`, re-run the Spec + Code axes: don't carry stale verdicts forward. |

package/pack/generated/pi/skills/rite-seal/reference/phase-contract.md

@@ -28,7 +28,7 @@
    and the [`review roster`](../../devrites-lib/reference/parallel-dispatch.md) on
    the candidate. Admit each result through
    [`result admission`](../../devrites-lib/reference/standards/agents.md#result-admission).
-   `## Reviewer Accounts` preserves all seven; gap/missing/malformed blocks;
+   `## Reviewer Accounts` preserves all seven roles, each engineering lane as its own account; gap/missing/malformed blocks;
    conditional `Not-applicable` names why.
 7. **Route corrections.** Reconcile cited findings/disagreements, but do not
    edit the candidate or manifest in Seal. Route an accepted correction through

package/pack/generated/pi/skills/rite-spec/SKILL.md

@@ -51,7 +51,12 @@ load a routed standard to discover required behavior, not to prescribe implement
    else echo "greenfield or already onboarded → continue spec"; fi
    ```
 1. **Understand the request** (`$ARGUMENTS`). State outcome and underlying
-   problem in one sentence. **Completion:** it includes both.
+   problem in one sentence. List each distinct explicit ask under `brief.md` `## Asks`,
+   quoted from the user's own words or a cited issue/PRD, never the invocation (`spec this`).
+   Readiness maps every ask to REQ/AC, a reasoned Non-goal, or a blocking question; an ask
+   with two readings that change acceptance is a question, never a silent pick.
+   **Completion:** it includes both, and every ask is listed. **Failing case:** "CSV export
+   and an email digest" yields a CSV-only spec; the digest is neither Non-goal nor question.
 1a. **Dedupe.** Search local issues/PRDs, work, and archive. On a close match ask
    extend/adopt/new, then record the choice; otherwise continue silently.
    A recorded [feature-sequence continuation](../rite-plan/reference/slicing.md#continuation-workspaces)
@@ -138,15 +143,18 @@ load a routed standard to discover required behavior, not to prescribe implement
    complete-block preservation rule.
    `tasks.md` deliberately does not exist yet; cross-artifact traceability starts in
    `/rite-define`. Any grammar or delta failure blocks. The interruption forecast must be resolved, owned, or a justified
-   action-time gate. Then write `Spec gate: passed <iso>`.
+   action-time gate. Run the [`spec-grammar.md`](../devrites-lib/reference/standards/spec-grammar.md) marker sweep; a kept hit blocks. Then write
+   `Spec gate: passed <iso>` with its `marker sweep:` line.
 6a. **Existing-spec delta.** For a pre-existing slug/workspace, compare old/new
    spec and questions, then show `Acceptance delta` (added/removed/reworded IDs)
    and `Open-question delta` (opened/resolved/reworded IDs), using `none` for
    empty categories. Show before proceeding; new workspaces skip.
 6b. **Review-before-code digest.** Before planning, render the compact human review:
    `Intent` (one sentence), `Done means` (top acceptance/scenario IDs), `Scope/risk` (what is in/out
-   plus the hard gates), and `Build exactly this?` (yes → next phase; no → revise now). The digest
-   is a view over `spec.md`, not a new artifact. **Stop** after the digest.
+   plus the hard gates), `Assumed:` (each `assumptions.md` id, one line, or `none`), and
+   `Build exactly this?` (yes → next phase; no → revise now). A "no" on one `Assumed:` line
+   reopens only that line as a human decision under step 4. The digest
+   is a view over `spec.md` and `assumptions.md`, not a new artifact. **Stop** after the digest.
 
 > **Mid-flight discipline.** Do not skip investigation, gap resolution, or placement
 > decisions. See [`anti-patterns`](reference/anti-patterns.md).

package/pack/generated/pi/skills/rite-spec/reference/spec-template.md

@@ -4,7 +4,7 @@ Contract WHAT users get, WHY, success, and scope. HOW belongs in `plan.md`,
 topology in `architecture.md`/`flows.md`, coverage in `traceability.md`.
 
 Use `[NEEDS CLARIFICATION: <question>]` (blocking stops `/rite-clarify`); before readiness
-every surviving marker converts to a gated `Q-###` open question ([`spec-grammar.md`](../../devrites-lib/reference/standards/spec-grammar.md) §
+every surviving marker converts to a gated `q-YYYY-MM-DD-NNN` open question (released `Q-###` kept) ([`spec-grammar.md`](../../devrites-lib/reference/standards/spec-grammar.md) §
 Unresolved-question markers — fail closed). Stable `REQ-001`/`AC-001` IDs; link, never
 duplicate, source artifacts; over-budget requires `Budget override: <reason>`.
 
@@ -135,10 +135,12 @@ status routes Define/Vet/Build/Prove to the named standard without copying it he
 ## Open questions
 | Question ID | Gate | Question | Impact |
 | --- | --- | --- | --- |
-| Q-001 | blocking | [NEEDS CLARIFICATION: <question>] | AC-001 |
+| q-YYYY-MM-DD-NNN | blocking | <question text, no marker> | AC-001 |
 
 ## Readiness gate
 - [ ] No blocking clarification or open `blocking`/`escalating` question; REQ/AC IDs are valid and ACs independently provable.
+- [ ] `marker sweep:` recorded with zero kept hits (spec-grammar § Unresolved-question markers).
+- [ ] Every verbatim ask in `brief.md` `## Asks` maps to REQ/AC, a reasoned Non-goal, or a blocking question.
 - [ ] Stakeholder conflicts/priority rules, constraints, and invariants are explicit;
       implementation preferences are not disguised as requirements.
 - [ ] Existing affected behavior maps to preserving REQ/AC + current evidence, or uses the exact justified greenfield `none`.

package/pack/generated/pi/skills/rite-spec/reference/state-workspace.md

@@ -219,6 +219,9 @@ command.
 ## Success definition
 <One sentence that says what "done" means.>
 
+## Asks
+- "<the user's words, verbatim>" → <REQ/AC-ID | Non-goal: reason | q-YYYY-MM-DD-NNN>
+
 ## Route
 Size: <small | standard | large>
 Profile: <quick | standard | full>

package/pack/generated/pi/skills/rite-status/SKILL.md

@@ -36,7 +36,11 @@ If `state.md` is unreadable/malformed: report a gap with the defect and stop —
    a human; list `gate: escalating` entries separately under **Escalating:**
    with their `route:` specialist tag (do not mix with synchronous blockers);
 7. unresolved drift and material risks;
-8. handoff readiness.
+8. handoff readiness;
+9. tree state: `HEAD`, the `git status --short` path count, and dirty paths absent from
+   `touched-files.md` (unrecorded); when `handoff.md` records `Tree at write`, whether HEAD
+   and count still match it. Unrecorded paths or a mismatch go under `Open:` as
+   reconcile-before-any-writer-command; status never records them itself.
 
 A workspace is handoff-ready when it records one next action, all unresolved
 questions, non-obvious decisions, load-bearing assumptions, current drift
@@ -45,7 +49,10 @@ recommend `/rite-handoff` before the lifecycle command.
 `devrites-engine handoff [slug]` emits the deterministic resume record (cursor,
 `awaiting_human`, blocking question gates, ledger reduction, dead ends,
 read-next order) — cite it for items 3–6 and the handoff-readiness verdict
-rather than re-deriving them. When `metrics.jsonl` exists,
+rather than re-deriving them. If that command is not found or exits nonzero,
+report items 3–6 and `Handoff:` as `unavailable: <command> <not found | exit N>` —
+never re-derive them from other files, never leave them blank — and set `Next:`
+to `/rite-doctor`. When `metrics.jsonl` exists,
 `devrites-engine metrics summary <slug>` rolls up dispatch/return counts and
 bundle bytes per phase — cite it for dispatch accounting rather than
 re-counting the ledger.
@@ -61,6 +68,7 @@ Phase: <phase>; slice: <slice|n/a>; mode: <HITL|AFK>; status: <status>
 Evidence: <fresh/proven summary | gaps>
 Open: <questions/drift/blockers | none>
 Escalating: <qid route:tag … | none>
-Handoff: <ready | missing durable context>
+Handoff: <ready | missing durable context | unavailable: <reason>>
+Tree: HEAD <sha>; dirty <n>; unrecorded <paths | none>; record <matches | differs | none>
 Next: <single persisted command>
 ```

package/pack/generated/pi/skills/rite-upgrade/SKILL.md

@@ -62,7 +62,13 @@ references, and only current phase contracts needed for the observed gap.
    `bulk_files`), and
    hashes of completed-slice fields, candidate gate artifacts, existing answers/decisions,
    and protected history. Inventory every path that could change; absence is evidence,
-   never permission to synthesize history. For a post-Build workspace, also retain the
+   never permission to synthesize history. **Rerun after a mid-run stop:** frozen hashes die
+   with the stopped run, so never re-baseline over bytes its owners may have changed. The
+   durable baseline is `HEAD`: a workspace path that differs from it is recorded
+   `pre-changed` with its diff, not frozen as clean, and step 5 accepts it only as an
+   admitted path of this run's assessment, else `gap`. An untracked workspace has no durable
+   baseline: if its `state.md` cursor shows an owner's HITL/blocked stop, stop for the human
+   to confirm the current bytes as baseline before step 2. For a post-Build workspace, also retain the
    exact result of `devrites-engine check candidate <slug>`; at or after Seal retain the
    exact result of `devrites-engine check seal <slug>`.
 2. **Assess from fresh context.** Dispatch exact `devrites-upgrade-planner` with the named

package/pack/generated/pi/skills/rite-vet/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[slug] [--cross-model] [--full]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/gates.md","rite-vet/reference/review-axes.md","rite-vet/reference/artifacts.md","rite-vet/reference/depth.md","rite-vet/reference/eng-lenses.md","rite-vet/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"cross-model":["rite-vet/reference/cross-model.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"principles":["devrites-lib/reference/standards/principles.md"],"reslice":["devrites-lib/reference/standards/acceptance-preserving-reslice.md"],"testing":["devrites-lib/reference/standards/testing.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md"],"workspaceByRole":{"devex-reviewer":["spec.md","plan.md","tasks.md","state.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","decisions.md","state.md"],"strategy-reviewer":["brief.md","spec.md","plan.md","decisions.md","decision-coverage.md","state.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/gates.md","rite-vet/reference/review-axes.md","rite-vet/reference/artifacts.md","rite-vet/reference/depth.md","rite-vet/reference/eng-lenses.md","rite-vet/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"cross-model":["rite-vet/reference/cross-model.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"principles":["devrites-lib/reference/standards/principles.md"],"reslice":["devrites-lib/reference/standards/acceptance-preserving-reslice.md"],"testing":["devrites-lib/reference/standards/testing.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md"],"workspaceByRole":{"devex-reviewer":["spec.md","plan.md","tasks.md","state.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","decisions.md","state.md"],"strategy-reviewer":["brief.md","spec.md","plan.md","decisions.md","decision-coverage.md","strategy.md","state.md"]}} -->
 > Read-set manifest: `devrites-engine context <slug> --phase vet` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -188,7 +188,9 @@ plan declares a root-authored executable workflow file, read
 
    Write exactly one `Implementation readiness: READY`, `NEEDS CLARIFICATION`,
    or `NEEDS REPLAN`. Root sets READY after every account, checklist,
-   preflight, and sweep is green. Write phase/next step and emit one
+   preflight, and sweep is green, including the
+   [`spec-grammar.md`](../devrites-lib/reference/standards/spec-grammar.md) marker sweep whose
+   `marker sweep:` line is recorded in `eng-review.md`; a kept hit blocks READY. Write phase/next step and emit one
    `Readiness inputs SHA-256` with
    `devrites-engine check readiness --emit-binding <slug>`; normal readiness check
    must pass. Record the per-input drift baseline alongside it:

package/pack/generated/pi/skills/rite-zoom-out/SKILL.md

@@ -69,3 +69,8 @@ Record: not applicable (paths printed only)
 ```
 
 Print the path of any decisions/ADR files referenced so the user can open them.
+
+**Empty or not found.** When the argument resolves to no symbol, file, or area, or maps zero
+modules, never print `Done: mapped` or `modules 0`: print `Done: not mapped — <argument> not
+found` with the searches run (index and file search), `Open:` the nearest candidates or
+`none`, and `Next:` a corrected argument.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devrites",
-  "version": "5.13.1",
+  "version": "5.14.1",
   "description": "DevRites: a disciplined senior-engineer workflow pack for Claude Code, Codex, omp, pi, and Devin CLI",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/ViktorsBaikers/DevRites#readme",
@@ -73,21 +73,24 @@
     "release:dry": "semantic-release --dry-run --no-ci"
   },
   "devDependencies": {
-    "@commitlint/cli": "^21.0.2",
-    "@commitlint/config-conventional": "^21.0.2",
-    "@semantic-release/changelog": "^6.0.3",
+    "@commitlint/cli": "^21.2.3",
+    "@commitlint/config-conventional": "^21.2.3",
+    "@semantic-release/changelog": "^7.0.0",
+    "@semantic-release/commit-analyzer": "14.0.0-beta.4",
     "@semantic-release/exec": "^7.1.0",
-    "@semantic-release/git": "^10.0.1",
-    "@semantic-release/npm": "^13.1.5",
-    "conventional-changelog-conventionalcommits": "^9.3.1",
+    "@semantic-release/git": "^11.0.1",
+    "@semantic-release/npm": "^13.2.0",
+    "@semantic-release/release-notes-generator": "15.0.0-beta.3",
+    "conventional-changelog-conventionalcommits": "^10.4.0",
     "husky": "^9.1.7",
-    "semantic-release": "^25.0.5"
+    "semantic-release": "^25.0.9"
   },
   "overrides": {
+    "@semantic-release/release-notes-generator": "15.0.0-beta.3",
     "@semantic-release/npm": {
-      "npm": "11.19.1"
+      "npm": "11.20.0"
     },
-    "fast-uri": "3.1.6",
+    "fast-uri": "3.1.8",
     "js-yaml": "4.3.2"
   }
 }

package/scripts/build-host-artifacts.sh

@@ -185,11 +185,16 @@ gen_codex_agents_bridge "$OUT_ROOT/codex/AGENTS.md"
 gen_codex_config_toml "$OUT_ROOT/codex/config.toml"
 
 # omp artifacts are generated host-native mirrors (Markdown agents, no TOML).
-mkdir -p "$OUT_ROOT/omp/skills" "$OUT_ROOT/omp/agents"
+mkdir -p "$OUT_ROOT/omp/skills" "$OUT_ROOT/omp/agents" "$OUT_ROOT/omp/commands"
 while IFS= read -r d; do
   name="$(basename "$d")"
   [ "$name" = ".impeccable" ] && continue
   render_omp_skill_tree "$d" "$OUT_ROOT/omp/skills/$name"
+  case "$name" in
+  rite | rite-*)
+    gen_omp_command_stub "$d/SKILL.md" "$name" "$OUT_ROOT/omp/commands/$name.md"
+    ;;
+  esac
 done < <(find "$PACK_SRC/skills" -mindepth 1 -maxdepth 1 -type d)
 
 while IFS= read -r f; do
@@ -247,8 +252,8 @@ This directory is generated by `scripts/build-host-artifacts.sh`.
 - `claude/` contains Claude Code-native skills, agents, read-only workflow adapters, and settings.
 - `codex/` contains Codex-native skill mirrors, custom-agent TOML, the
   read-only-root permission profile, and AGENTS bridge content.
-- `omp/` contains omp-native skill mirrors, Markdown agents, and
-  `.omp-plugin/plugin.json`.
+- `omp/` contains omp-native skill mirrors, Markdown agents, command stubs
+  preserving the `/rite*` commands, and `.omp-plugin/plugin.json`.
 - `pi/` contains pi-native skill mirrors, pi-subagents Markdown agents,
   prompt templates preserving the `/rite*` commands, and an `AGENTS.md`
   bridge block.

package/scripts/codex-generate.sh

@@ -55,7 +55,7 @@ gen_codex_agent() {
   [ -n "$_name" ] || _name="$(basename "$_src" .md)"
   [ -n "$_desc" ] || _desc="DevRites custom agent."
   _permissions=":read-only"
-  [ "$_name" = "devrites-slice-wright" ] && _permissions=":workspace"
+  case "$_name" in devrites-slice-wright | overhaul-* | fast-builder) _permissions=":workspace" ;; esac
   _desc_tmp="$TMP_GEN_DIR/codex-agent-desc-$(basename "$_src").txt"
   _desc_codex="$TMP_GEN_DIR/codex-agent-desc-$(basename "$_src").codex.txt"
   printf '%s' "$_desc" > "$_desc_tmp"
@@ -105,6 +105,8 @@ This project has DevRites installed for both Claude Code and Codex.
 - Dispatch every exact named `devrites-<role>` required by the active workflow in a fresh subagent thread, wait for it, and reconcile its result. If that role is unavailable, stop for HITL; never skip it, never substitute a generic/default child, and never execute the specialist role in the root context.
 - The root uses the workspace-capable `devrites-orchestrator` profile because Codex children cannot elevate above the parent permission ceiling. This permission is for native writer dispatch and exact path-bounded executable workflow artifacts under the active `.devrites/work/<slug>/`; the root must never edit product source or tests itself.
 - Every generated specialist is hook-free. `devrites-slice-wright` alone uses `default_permissions = ":workspace"`; every other specialist uses `default_permissions = ":read-only"`. Exact paths are instruction-enforced: put the project-relative paths in the task, wait for the wright, compare its file list and `git diff --name-only` with that contract, and reject any extra path. Never bypass the wright, widen its contract, or edit source in the root; the root must never recreate an engine dispatch bridge.
+- The explicit `/overhaul` skill ships its own `overhaul-*` agents outside the DevRites lifecycle. They use `default_permissions = ":workspace"`, are dispatched only by that skill, and follow its own approval gate and path contracts instead of the lifecycle writer rules above.
+- The explicit `/rite-fast` skill ships its own `fast-*` agents. Only `fast-builder` uses `default_permissions = ":workspace"`; `fast-planner`, `fast-checker`, and `fast-critic` stay `:read-only`. `/rite-fast` dispatches them itself and applies its own exact-path contracts.
 - A seal GO, AFK mode, or autocomplete flag never authorizes an irreversible action. Disclose the exact commit/push/tag/PR plan and obtain fresh explicit user approval for that attempt; any changed or retried plan needs fresh approval. Native host permission and sandbox prompts remain authoritative and cannot be inferred or bypassed.
 
 ## Workflow contract

package/scripts/devin-generate.sh

@@ -103,7 +103,7 @@ _devin_map_tools() {
   local _raw="$1" _name="$2"
   local _tok _mapped _out="" _sep=""
   if [ -z "$_raw" ]; then
-    if [ "$_name" = "devrites-slice-wright" ]; then
+    if [[ "$_name" == devrites-slice-wright || "$_name" == overhaul-* || "$_name" == fast-builder ]]; then
       printf '%s' "read, edit, write, exec, grep, glob, skill"
     else
       printf '%s' "read, grep, glob, exec"
@@ -130,7 +130,7 @@ _devin_map_tools() {
     _sep=", "
   done < <(printf '%s\n' "$_raw" | tr ',' '\n')
   if [ -z "$_out" ]; then
-    if [ "$_name" = "devrites-slice-wright" ]; then
+    if [[ "$_name" == devrites-slice-wright || "$_name" == overhaul-* || "$_name" == fast-builder ]]; then
       _out="read, edit, write, exec, grep, glob, skill"
     else
       _out="read, grep, glob, exec"
@@ -149,7 +149,7 @@ _devin_csv_has() {
 # Generate a Devin custom subagent profile from a Claude Code markdown agent.
 # Devin loads project profiles from .devin/agents/*.md (YAML frontmatter +
 # body). The allowed-tools allowlist carries the Claude permission boundary:
-# only devrites-slice-wright gets write/edit; reviewers stay read-only.
+# only devrites-slice-wright, the /overhaul agents (overhaul-*), and /rite-fast fast-builder get write/edit; reviewers stay read-only.
 # Claude's permissionMode has no Devin equivalent and is dropped. A canonical
 # `skills:` block grants the agent the `skill` tool so it can invoke that
 # skill inline (Devin has no agent-level skills preload field).
@@ -207,6 +207,8 @@ This project has DevRites installed for Devin CLI.
 - DevRites specialist agents live in `.devin/agents` as custom subagent profiles offered to `run_subagent`. If a required `devrites-<role>` profile is not among the offered profiles, stop for HITL - never skip the role, never substitute `subagent_general`, `subagent_explore`, or another generic profile, never inline the specialist prompt, and never execute the specialist role in the root context.
 - In DevRites guidance, **invoke** means run a skill inline in the current context; **dispatch** means start a fresh agent with `run_subagent` using the exact `profile` name, wait for it with `read_subagent`, and reconcile its result.
 - Only `devrites-slice-wright` may edit source or tests; every other specialist is read-only by `allowed-tools`. Exact paths are instruction-enforced: put the project-relative paths in the task, wait for the wright, compare its file list and `git diff --name-only` with that contract, and reject any extra path.
+- The explicit `/overhaul` skill ships its own `overhaul-*` agents outside the DevRites lifecycle. They carry the full write tool set, are dispatched only by that skill, and follow its own approval gate and path contracts instead of the lifecycle writer rules above.
+- The explicit `/rite-fast` skill ships its own `fast-*` agents. Only `fast-builder` carries write tools; `fast-planner`, `fast-checker`, and `fast-critic` stay read-only. `/rite-fast` dispatches them itself and applies its own exact-path contracts.
 - Custom profiles do not inherit interactive tool grants, and background subagents auto-deny unapproved tools. Dispatch the write-capable wright in the foreground, or make sure its `edit`, `write`, and `exec` tools are approved first. Specialists cannot use `ask_user_question`; the root relays user questions and answers through the task text and returned result.
 - DevRites runtime helpers run through the installed `devrites-engine` binary.
 - Skills and agent profiles are loaded when a session starts. If they were installed while this session was open, restart the session or reopen the project before relying on them.