devrites 5.14.4 → 6.0.1

package/pack/generated/pi/skills/rite-explain/reference/intake.md

@@ -10,7 +10,7 @@ source for classification; the SKILL improvises none of it.
 | --- | --- | --- | --- | --- |
 | **concept** | a named idea / pattern / technology ("explain optimistic locking", "how does our gate engine work") | this repo's footprint of the concept (codegraph first) + external sources only if they sharpen it | build the mental model from a known part of *this* codebase outward | **checked exercise** |
 | **diff** | a specific change: a ref, a slice, a PR, "this diff" | `git diff` / the hunks + `decisions.md` + `seal.md` for the *why* + `touched-files.md` `Review trail` when present | explainer, or **walkthrough** when the user asks to review/approve/checkpoint the change | **predict-then-reveal** |
-| **idea** | a hypothesis or "what if" with no code yet | the user's framing + prior art (external, date-weighted; year is 2026) | steelman the idea, name its hinge and its failure mode | **checked exercise** |
+| **idea** | a hypothesis or "what if" with no code yet | the user's framing + prior art (external, date-weighted) | steelman the idea, name its hinge and its failure mode | **checked exercise** |
 | **recap** | a time window of the user's own work ("what did I ship this week") | the shipped archive + `git log`/`git diff` over the window + `evidence.md` | narrate what changed and what was learned, ranked by leverage | **predict-then-reveal** |
 
 ## Token overrides: explicit beats inferred

package/pack/generated/pi/skills/rite-fast/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: rite-fast
-description: Fast lane for mid-size work: one spec-and-plan step with clarifying questions, up to ten slices built without per-slice gates, one completeness check with gap fixes, review, polish, proof.
+description: "Fast lane for mid-size work: one spec-and-plan step with clarifying questions, up to ten slices built without per-slice gates, one completeness check with gap fixes, review, polish, proof."
 argument-hint: "<task | slug>"
 user-invocable: true
 disable-model-invocation: true

package/pack/generated/pi/skills/rite-plan/SKILL.md

@@ -73,8 +73,9 @@ Before classifying any Reslice, read `.pi/skills/devrites-lib/reference/standard
    - **course-correct:** mid-build user pivot; apply the marked action, choose
      rollback/forward-fix, and update permitted artifacts atomically (`MVP cut` is the named retreat).
    - **revise:** reconcile a requested artifact revision; propose/confirm its file set and
-     **never edit source**. Only explicit `/rite-upgrade` with a `repairable` assessment naming
-     rule, evidence, gate, paths, and delta can authorize its neutral workspace edit—not source/history.
+     **never edit source**. A neutral workspace edit is authorized by explicit `/rite-upgrade` with a
+     `repairable` assessment naming rule, evidence, gate, paths, and delta, or, for budget relocation
+     only, by the phase owner when `orient` reports `over: true`—never source or history rewording.
      **Revise or new?** Same intent? >50% scope survives? Original not completable without it?
      Two “no” answers mean new work: seal/ship current scope (`MVP cut` if named), then
      `/rite-spec`, and stop.
@@ -160,7 +161,7 @@ Before classifying any Reslice, read `.pi/skills/devrites-lib/reference/standard
    mark the `drift.md` entry resolved. Never remove or overwrite a valid caller
    return cursor while writing the Plan checkpoint.
 6. After editing `brief.md`, `spec.md`, `decisions.md`, `assumptions.md`, or `questions.md`,
-   re-scan affected coverage, assumptions, uncertainty, and gates. Partial/Missing, unowned
+   re-scan affected coverage, assumptions, uncertainty, and gates. `open` rows, unowned
    material assumption, or open blocking/escalating question routes `/rite-clarify`/HITL.
    Restore `CLEAR` only from current evidence.
 7. **Done when:** every slice is sized (builds + proves in one cycle; no slice scoring >3

package/pack/generated/pi/skills/rite-plan/reference/replan-and-repair.md

@@ -84,15 +84,15 @@ Record the sequence once in `decisions.md`.
 ## revise
 
 Artifact-only reconciliation of `spec.md`, `architecture.md`, `plan.md`, `tasks.md`,
-or `traceability.md` — never source. Propose/confirm the file set first. Only explicit
-`/rite-upgrade` with a `repairable` assessment may authorize neutral workspace edits.
+or `traceability.md` — never source. Propose/confirm the file set first. A neutral workspace
+edit is authorized by explicit `/rite-upgrade` with a `repairable` assessment, or, for budget
+relocation only, by the phase owner when `orient` reports `over: true`.
 
 Unchanged acceptance/behavior with non-equivalent `proposed_coverage` is a
 contradictory input: the canonical classifier blocks it — there is no fourth
 route (see [`acceptance-preserving-reslice.md`](../../devrites-lib/reference/standards/acceptance-preserving-reslice.md)).
 
-**Budget relocation** (admitted by `/rite-upgrade`, or by the phase owner when
-`orient` reports `over: true`): move checkpoint narrative, historical fold text and
+**Budget relocation** (authorized as above): move checkpoint narrative, historical fold text and
 closed-round accounts verbatim from `state.md`/`tasks.md`/`plan.md`/`architecture.md`/
 `eng-review.md` into `history/<file>-<YYYYMMDD>.md`, packets/accounts from the root
 into `packets/`, leaving a one-line pointer. Cursor, live slices, open findings, IDs,

package/pack/generated/pi/skills/rite-polish/reference/anti-ai-slop.md

@@ -18,7 +18,7 @@ Build avoids every UI entry; review and polish admit a hit only by this rule. Cl
 a declared token, brief line or nearest neighbour (cite both locations), or it has a
 measured user consequence (contrast ratio, overflow, CLS, lost or hidden focus). Otherwise
 it is an AES proposal under "Proposals (non-blocking)": never a Visual Verdict FAIL, never
-scored, capped at Suggestion/Minor, never blocking unless `design-brief.md` adopts it (then
+scored, capped at Suggestion, never blocking unless `design-brief.md` adopts it (then
 DS). Act on clusters per [`prose-style.md`](../../devrites-lib/reference/standards/prose-style.md).
 A broken task, data loss or misleading state is reported and fixed before any AES item.
 **Failing case:** `tokens.css` declares Inter and a 20 px card radius, yet review files

package/pack/generated/pi/skills/rite-prove/reference/browser-proof.md

@@ -12,11 +12,9 @@ What `browser-evidence.md` must capture for a UI slice. Delegates to
 | EVID-003 | <route> | empty/keyboard | 375 | brief Proof targets + target reference 1 | playwright-mcp | <observed result> | AC-002, SLICE-002 | <none / exact gap> |
 
 ## Visual Verdict
-| State | Result | Notes |
-| --- | --- | --- |
-| default | PASS / FAIL | <what is visible> |
-| loading | PASS / FAIL | <what is visible> |
-| error | PASS / FAIL | <what is visible> |
+| Criterion (source, class) | Expected | Observed (screenshot) | Verdict | Severity |
+|---|---|---|---|---|
+| <state / delta / anti-slop criterion> (<brief / reference / anti-slop / acceptance>, <ENG / A11Y / DS / AES>) | <expected> | <what is visible> | PASS / PARTIAL / FAIL / n/a | <Critical / Important / Suggestion> |
 
 ## Comparison deltas
 | State / viewport | Target | Material delta observed | Disposition | Result |
@@ -33,6 +31,8 @@ What `browser-evidence.md` must capture for a UI slice. Delegates to
 ```
 
 ## Rules
+- The `## Visual Verdict` table follows [visual-verdict.md](../../devrites-browser-proof/reference/visual-verdict.md),
+  which owns its rows, verdict values and severity mapping.
 - Open every screenshot path and describe it: never assert from the filename.
 - Read `design-brief.md` + `references.md` first. Compare fidelity only with references
   classified **target**; check constraints as rules and never pixel-match inspiration.

package/pack/generated/pi/skills/rite-resolve/SKILL.md

@@ -74,8 +74,8 @@ Pull these via `Read` when shaping the resolve:
    user's explicit consent for this local workspace mutation. Echo the qid, answer/drop,
    and slice being unblocked, then continue immediately; do not ask the user to confirm the
    command they just typed.
-4. **Mutate.** Run `devrites-engine state resolve` with those arguments. It:
-   - flips the qid's `status` to `answered` / `dropped` and stamps `answered_at` + `answer`;
+4. **Mutate.** Run `devrites-engine state resolve --human` with those arguments (a human is resolving). It:
+   - flips the qid's `status` to `answered` / `dropped` and stamps `answered_at` + `answer` + `answered_by: human`;
    - if the qid is in `state.md`'s `Awaiting human` block (single-question pause), clears
      that block and sets `Status: running`;
    - appends a `Log` line to `state.md`.
@@ -96,7 +96,7 @@ Pull these via `Read` when shaping the resolve:
    **Completion:** the resolved state contains exactly one next command.
 6. **STOP.** User-invoked `/rite-resolve` does not run `/rite-build` itself: the
    user re-enters the workflow explicitly. A controlling `/rite-autocomplete`
-   caller invokes the same `devrites-engine state resolve` writer internally and
+   caller invokes the same `devrites-engine state resolve` writer internally (never with `--human`) and
    continues; it must not emit this skill as a user handoff for a question that
    already names a ranked recommended option.
 

package/pack/generated/pi/skills/rite-seal/SKILL.md

@@ -65,7 +65,7 @@ Follow [`reference/phase-contract.md`](reference/phase-contract.md)
    `../devrites-lib/reference/parallel-dispatch.md` on the same frozen candidate,
    code review through its § Engineering lanes;
 4. reconcile their read-only verdicts against source and immutable evidence;
-5. draft GO/NO-GO `seal.md` with acceptance, tests, decisions, and seven accounts
+5. draft GO/NO-GO `seal.md` with acceptance, tests, decisions, and seven roster accounts plus proof-runner and doubt-reviewer
    (each engineering lane its own account);
 6. write exactly one candidate binding, then run
    `devrites-engine check seal <slug>` for structure and identity, never semantics,
@@ -74,8 +74,9 @@ Follow [`reference/phase-contract.md`](reference/phase-contract.md)
    starts at the named changed, missing, or added input,
    and `devrites-engine check regression <slug>` to confirm no recorded progress
    fact was lost since the last checkpoint — `BLOCKED` is NO-GO; `unproven`
-   (no baseline) does not block — plus `devrites-engine check windows <slug>
-   --base <release-base>` so each deferral marker the feature diff introduced
+   (no baseline) does not block — plus two separate runs of `devrites-engine check windows <slug>`,
+   one with `--base <release-base>` and one with `--worktree` (the only mode that scans
+   untracked files; never pass both flags in one command, the last one wins) so each deferral marker the feature diff introduced
    carries a `windows.md` waiver row ([`windows.md`](../devrites-lib/reference/standards/windows.md));
    unwaived hits are NO-GO. The engine already refuses a `gates.md` ledger
    that is malformed, unmet,

package/pack/generated/pi/skills/rite-seal/reference/phase-contract.md

@@ -28,7 +28,8 @@
    and the [`review roster`](../../devrites-lib/reference/parallel-dispatch.md) on
    the candidate. Admit each result through
    [`result admission`](../../devrites-lib/reference/standards/agents.md#result-admission).
-   `## Reviewer Accounts` preserves all seven roles, each engineering lane as its own account; gap/missing/malformed blocks;
+   `## Reviewer Accounts` preserves the seven roster roles, each engineering lane as its own account, plus
+   `devrites-proof-runner` and, when any decision stood, `devrites-doubt-reviewer`; gap/missing/malformed blocks;
    conditional `Not-applicable` names why.
 7. **Route corrections.** Reconcile cited findings/disagreements, but do not
    edit the candidate or manifest in Seal. Route an accepted correction through
@@ -36,7 +37,7 @@
    Review under evidence validity, then restart Seal on the new digest.
 8. **Draft/check.** Write `seal.md` from
    [`seal-template.md`](seal-template.md) with the GO/NO-GO rationale, acceptance map,
-   test-analysis account, stood-decision verdicts, all seven reviewer accounts,
+   test-analysis account, stood-decision verdicts, all seven roster reviewer accounts plus proof-runner and doubt-reviewer,
    and exactly one `Candidate SHA-256: <64 lowercase hex>` line. Then run:
    ```bash
    devrites-engine check seal "<slug>"

package/pack/generated/pi/skills/rite-seal/reference/seal-template.md

@@ -16,6 +16,8 @@ Candidate SHA-256: <64 lowercase hex>
 - devrites-security-auditor: <outcome>
 - devrites-performance-reviewer: <outcome>
 - devrites-devex-reviewer: <outcome>
+- devrites-proof-runner: <outcome>
+- devrites-doubt-reviewer: <outcome, or Not-applicable: no decision stood>
 ## Risks / Rollback
 <risks/recovery>
 ## Stood Decisions

package/pack/generated/pi/skills/rite-ship/SKILL.md

@@ -72,8 +72,10 @@ if absent, route to `/rite-spec <feature>`. Ship only with current **GO** in `se
    stops. Any command/scope/branch/message/tag/PR change or retry needs a fresh prompt;
    native approval is still required.
 4. On GO, commit; verify committed state/path set and exact candidate digest; then push →
-   tag/PR as applicable via `git-ship.md`. Capture SHA(s), branch, tag/PR URL. Mismatch
-   stops before push/tag; retry needs fresh approval.
+   tag/PR as applicable via `git-ship.md`. Record SHA and push state in `ship.md` before
+   push (git-ship 7a); a push/tag/PR failure stops, and a rerun resumes at push under
+   fresh type-GO. Capture branch, tag/PR URL. Mismatch stops before push/tag; retry
+   needs fresh approval.
 4a. **PR only:** render [`git-ship.md`](reference/git-ship.md#pull-request-body)'s
    structured body; omit empty sections.
 5. Re-scan the four residual sources; any new/missing/changed item blocks archive.

package/pack/generated/pi/skills/rite-ship/reference/git-ship.md

@@ -52,7 +52,8 @@ Pre-GO is read-only. Do not run the disclosed collapse or staging commands.
    sequence whose workspace is sealed in this run
    ([afk-hitl.md § Sequence continuation](../../devrites-lib/reference/standards/afk-hitl.md#sequence-continuation-continue_sequence-max_workspaces));
    disclose the exact slug set. A different slug, missing colon, broad `WIP(` match,
-   ordinary commit, or mixed history blocks; never reinterpret the range.
+   ordinary commit, or mixed history blocks; never reinterpret the range. The recorded
+   ship commit of a resumed ship (step 7a) is not an ordinary commit for that rerun.
 2. **Verify the candidate.** Rerun `devrites-engine check candidate <slug>` and
    `devrites-engine check seal <slug>`, compare every binding, require the
    candidate worktree paths to be unchanged, and inspect the existing staged
@@ -98,6 +99,11 @@ Pre-GO is read-only. Do not run the disclosed collapse or staging commands.
    paths still match `HEAD`, then rerun `devrites-engine check candidate <slug>`
    and `devrites-engine check seal <slug>` and compare the exact digest again.
    Any mismatch stops; do not reinterpret it.
+7a. **Record before push.** Write `ship.md` `Commit(s)` and `Push: pending`. A failed
+    push/tag/PR records `failed`, an unanswered or timed-out one `unknown`; stop. Check
+    the remote ref (`git ls-remote`) before any retry. A rerun whose HEAD equals the
+    recorded commit and whose candidate digest is unchanged skips steps 1-7 and
+    prompts a fresh type-GO for only the remaining push/tag/PR commands.
 8. **Push** to the project-conventional target branch.
 9. **Tag / PR** only when project convention requires it; otherwise skip.
 10. **Close sealed predecessors** only when the prompt disclosed them: run the
@@ -105,7 +111,7 @@ Pre-GO is read-only. Do not run the disclosed collapse or staging commands.
     because `ACTIVE` names the release workspace; a nonzero exit stops the rest and
     is reported, never retried against an unverified destination.
 
-Record SHA(s), branch, and tag/PR URL in `ship.md`.
+Update `Push:` to `pushed` and record branch and tag/PR URL in `ship.md`.
 
 ## Pull request body
 

package/pack/generated/pi/skills/rite-ship/reference/ship-template.md

@@ -1,6 +1,6 @@
 # `ship.md` template
 
-Write before close-out; it moves to `.devrites/archive/<slug>/ship.md`.
+Write Commit(s)/Push at git-ship step 7a; complete before close-out; it moves to `.devrites/archive/<slug>/ship.md`.
 
 ```markdown
 # Ship: <slug>
@@ -10,6 +10,7 @@ Write before close-out; it moves to `.devrites/archive/<slug>/ship.md`.
 - Branch: <branch>
 - Commit(s): <sha> [<sha> …]
 - Tag/PR: <value|none>
+- Push: <pushed|pending|failed|unknown>
 
 ## What shipped
 <project-vocabulary paragraph>

package/pack/generated/pi/skills/rite-spec/SKILL.md

@@ -143,8 +143,8 @@ load a routed standard to discover required behavior, not to prescribe implement
    complete-block preservation rule.
    `tasks.md` deliberately does not exist yet; cross-artifact traceability starts in
    `/rite-define`. Any grammar or delta failure blocks. The interruption forecast must be resolved, owned, or a justified
-   action-time gate. Run the [`spec-grammar.md`](../devrites-lib/reference/standards/spec-grammar.md) marker sweep; a kept hit blocks. Then write
-   `Spec gate: passed <iso>` with its `marker sweep:` line.
+   action-time gate. Run the [`spec-grammar.md`](../devrites-lib/reference/standards/spec-grammar.md) marker sweep; a kept hit blocks. Then record
+   `passed <iso>; marker sweep: …` in the `state.md` `spec_gate` row, never in `spec.md`.
 6a. **Existing-spec delta.** For a pre-existing slug/workspace, compare old/new
    spec and questions, then show `Acceptance delta` (added/removed/reworded IDs)
    and `Open-question delta` (opened/resolved/reworded IDs), using `none` for

package/pack/generated/pi/skills/rite-spec/reference/spec-checklists.md

@@ -77,7 +77,7 @@ Each question checks one requirement-prose failure mode:
 The spec **Readiness gate** at the bottom of
 [`spec-template.md`](spec-template.md) requires every
 emitted `checklists/<domain>.md` to reach `Verdict: pass` (zero CRITICAL fails) before the gate
-passes. Minor fails are logged, not blocking. A single open CRITICAL keeps the spec `Status: Draft`.
+passes. Minor fails are logged, not blocking. A single open CRITICAL blocks `spec_gate: passed`.
 `/rite-define` reads the checklists at step 0 and **hard-blocks while any CRITICAL is
 unchecked**. A spec without checklists is not yet checked, so define stops and routes
 back here.

package/pack/generated/pi/skills/rite-spec/reference/spec-template.md

@@ -6,12 +6,13 @@ topology in `architecture.md`/`flows.md`, coverage in `traceability.md`.
 Use `[NEEDS CLARIFICATION: <question>]` (blocking stops `/rite-clarify`); before readiness
 every surviving marker converts to a gated `q-YYYY-MM-DD-NNN` open question (released `Q-###` kept) ([`spec-grammar.md`](../../devrites-lib/reference/standards/spec-grammar.md) §
 Unresolved-question markers — fail closed). Stable `REQ-001`/`AC-001` IDs; link, never
-duplicate, source artifacts; over-budget requires `Budget override: <reason>`.
+duplicate, source artifacts; over-budget requires `Budget override: <reason>`. `spec.md`
+is the product contract only: the phase verdict goes in the `state.md` `spec_gate` row,
+never in this file (every reviewer read-set includes `spec.md`).
 
 ```markdown
 # Spec: <Feature>
 Slug: <kebab-case>
-Status: Draft | Ready
 Created: <date>
 
 ## Problem
@@ -136,8 +137,11 @@ status routes Define/Vet/Build/Prove to the named standard without copying it he
 | Question ID | Gate | Question | Impact |
 | --- | --- | --- | --- |
 | q-YYYY-MM-DD-NNN | blocking | <question text, no marker> | AC-001 |
+```
 
 ## Readiness gate
+Run before stamping `spec_gate`; it is an authoring check, never written into `spec.md`.
+
 - [ ] No blocking clarification or open `blocking`/`escalating` question; REQ/AC IDs are valid and ACs independently provable.
 - [ ] `marker sweep:` recorded with zero kept hits (spec-grammar § Unresolved-question markers).
 - [ ] Every verbatim ask in `brief.md` `## Asks` maps to REQ/AC, a reasoned Non-goal, or a blocking question.
@@ -151,6 +155,6 @@ status routes Define/Vet/Build/Prove to the named standard without copying it he
 - [ ] Every applicability row is `applies` with affected IDs or has a specific
       evidence-backed `not applicable` reason.
 - [ ] AI has `ai-spec.md` and UI has `design-brief.md`; out-of-scope work states not applicable.
+- [ ] Every emitted `checklists/<domain>.md` has `Verdict: pass` (zero CRITICAL fails); minor fails are logged.
 - [ ] Non-goals/scope are explicit; capability impact is singular/specific and matches ledger deltas.
 - [ ] Architecture/flows/decisions are linked, not duplicated; Coverage seed names Clarify surfaces.
-```

package/pack/generated/pi/skills/rite-spec/reference/state-workspace.md

@@ -130,6 +130,7 @@ None.
 | active_slice | none |
 | slice_mode | none |
 | risk | none |
+| spec_gate | <passed <iso>; marker sweep: <n> files, <k> hits, <d> discarded — absent until /rite-spec passes> |
 | next_action | <single command + reason, or terminal: none — technical recovery exhausted for an unchanged causal fingerprint> |
 | return_phase | <originating later phase; clarification or agent-owned technical backtracking only> |
 | return_next_action | <saved originating command> |
@@ -195,6 +196,7 @@ proposed: <best current answer>
 raised_at: <iso>
 answered_at:
 answer:
+answered_by:        # human, only when resolved with `state resolve --human`
 impact: <affected AC/REQ/slice IDs>
 ```
 

package/pack/generated/pi/skills/rite-temper/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: rite-temper
 description: Temper a readied spec before planning. Use when the user says "temper this", "strategy review", "pre-mortem the spec", or asks if we are over/under-building. Not for code review or final seal.
-argument-hint: "[feature-slug] [--mode expand|selective|hold|reduce]"
+argument-hint: "[feature-slug] [--mode expand|selective|hold-rigor|reduce-to-MVP]"
 user-invocable: true
 ---
 
@@ -31,8 +31,9 @@ the spec applicability map triggers that risk family.
 - **Raise outcome ambition without expanding the solution unnecessarily.** Solve the
   underlying problem without adding speculative capability or abstraction.
 - **Route every scope change through the Spec Drift Guard.** A scope change takes effect
-  only when `spec.md` records the confirmed decision. HITL confirms expand;
-  autocomplete auto-applies it. Irreversible-risk still pauses.
+  only when `spec.md` records the confirmed decision. Growth (`expand`, extra
+  acceptance) needs a resolved human `questions.md` qid, so an unattended run holds it
+  open. Irreversible-risk still pauses.
 - **Apply maximum caution to hard-to-reverse changes.** Auth, migration, public API, and
   data-model changes always pause under the irreversible-risk list.
 - **Honest verdict.** Never round "needs work" up to "ready"; record every scope call's *why*.
@@ -50,7 +51,7 @@ the spec applicability map triggers that risk family.
 0. **Read `.pi/skills/devrites-lib/reference/standards/core.md`**, then
    resolve the active slug, require its `state.md`, and read the cursor directly.
    Then read the workspace: `spec.md`, `decision-coverage.md` (+ `decisions.md`,
-   `assumptions.md`, `design-brief.md` if UI), `state.md`. Require `Spec gate: passed`: else
+   `assumptions.md`, `design-brief.md` if UI), `state.md`. Require `state.md` `spec_gate: passed` (legacy `Spec gate:` accepted): else
    STOP → `/rite-spec`. Require `Decision coverage: CLEAR`: else STOP →
    `/rite-clarify`. If a plan already exists, scope changes route through `/rite-plan
    repair` (record in `drift.md`), not a blind spec edit.
@@ -91,10 +92,12 @@ the spec applicability map triggers that risk family.
 5. **Review human-owned findings with the human; do not batch them.** `strategy.md`
    records the interactive review but does not replace it. Present each material scope decision through
    `AskUserQuestion`, one at a time, best-guess + **why**. Each material scope call ends as a
-   **recorded decision**: a resolved `questions.md` qid (HITL) or a `decisions.md` ADR (AFK):
+   **recorded decision**: a resolved `questions.md` qid (HITL) or a `decisions.md` ADR (AFK;
+   never for `expand` or extra acceptance, which need a human-resolved qid):
    so the review leaves an auditable record outside chat. (AFK gate policy —
    [`reference/significance.md`](reference/significance.md) — autocomplete applies
-   the recommended mode including `expand`; irreversible-risk always pauses.)
+   `hold-rigor`, `reduce-to-MVP` and a skip, but holds `expand` and extra acceptance for a human
+   qid; irreversible-risk always pauses.)
    Apply objective clarity, mitigation, and assumption fixes directly.
 6. **Write `strategy.md` + fold back:** [`reference/strategy-template.md`](reference/strategy-template.md).
    **Choose the drift path based on whether a plan exists:** *no `plan.md` yet* (the normal pre-define
@@ -110,12 +113,12 @@ the spec applicability map triggers that risk family.
    any folded scope delta lacks its decision or leaves a foreseeable human build choice).
    After any edit to `brief.md`, `spec.md`, `decisions.md`, `assumptions.md`, or
    `questions.md`, re-scan the affected coverage rows, assumption audit, residual uncertainty,
-   and closed gates. Partial/Missing, an unowned material assumption, or an open
+   and closed gates. `open` rows, an unowned material assumption, or an open
    blocking/escalating question routes `/rite-clarify`/HITL. Only after the
    matrix is re-closed may the phase advance.
    Set `Phase: temper`; `Next step: /rite-define` only after verification.
-   Unapproved irreversible choices set `Awaiting human`. Autocomplete expand does
-   not. Objective below-bar findings continue correction.
+   Unapproved irreversible choices and unresolved growth qids set `Awaiting human`.
+   Objective below-bar findings continue correction.
 7. **Adversarial verification loop:** ask the exact
    [`devrites-strategy-reviewer`](.pi/agents/devrites-strategy-reviewer.md)
    through the native fresh-context contract in

package/pack/generated/pi/skills/rite-temper/reference/scope-modes.md

@@ -35,7 +35,7 @@ Mode selection is the first convergence move. Record the chosen mode + rationale
 
 | Mode | When | What it does | YAGNI / Drift Guard |
 |---|---|---|---|
-| **EXPAND** *(opt-in, default OFF)* | Under-reaching on the outcome is the real risk | Raise the success bar / reframe to the deeper problem; thinner-but-more-complete path to a bigger target | Expands the *problem + acceptance*, not machinery. Each added criterion is a Drift-Guard-recorded, human-confirmed (HITL) decision: never auto-grown |
+| **EXPAND** *(opt-in, default OFF)* | Under-reaching on the outcome is the real risk | Raise the success bar / reframe to the deeper problem; thinner-but-more-complete path to a bigger target | Expands the *problem + acceptance*, not machinery. Each added criterion is a Drift-Guard-recorded, human-confirmed (HITL) decision: never auto-grown. Under AFK it escalates via `AskUserQuestion` and the fold **holds** until the human answers; an unattended run never auto-applies it |
 | **SELECTIVE** | One or two high-leverage dimensions deserve more; the rest is right | Expand only the high-upside dimension; hold the rest at spec scope | Each selected expansion routes through the Guard; everything not selected is parked in Non-goals so it's neither dropped nor re-injected mid-build |
 | **HOLD-RIGOR** | The spec is right-sized (default for irreversible-risk-heavy or already-tight specs) | No scope change: pure hardening: pre-mortem, risk mitigations, acceptance sharpening, cross-cutting coverage | Adds zero surface; trivially Drift-Guard-clean (no acceptance change) |
 | **REDUCE-TO-MVP** | Over-scoped: second-system bloat, ~all must-haves, gold-plating | Hammer scope to the Minimum Usable Subset; move the rest to Non-goals with one-line reasons + revisit notes | Strongest YAGNI alignment. Cutting acceptance is **still a spec change**: record it via the Guard, never a silent trim |

package/pack/generated/pi/skills/rite-temper/reference/significance.md

@@ -41,6 +41,13 @@ seal can see the call was made deliberately.
 
 ## In `/rite-autocomplete`
 Autocomplete runs the significance test every feature. On skip → straight to `/rite-define`
-(no pause). On fire → run the full review and auto-apply the recommended mode, including
-`expand` and extra acceptance (record the ADR; fold via Spec Drift Guard).
-Irreversible-risk findings always pause.
+(no pause). On fire → run the full review, then apply the mode under the AFK rule in
+[`scope-modes.md`](scope-modes.md): `hold-rigor`, `reduce-to-MVP`, and a skip apply unattended.
+`expand` and any extra acceptance **do not** apply unattended — acceptance is never auto-grown.
+When the review lands on `expand` or any acceptance growth, the agent presents the scope call as a
+ranked `AskUserQuestion` option set per the HITL rule, records the open `questions.md` qid, and
+**holds the fold**: do not write *Success metrics* or *Acceptance criteria* rows, do not fold via
+Spec Drift Guard, and do not recommend `/rite-define` until a human answers the qid. A self-written
+`decisions.md` ADR is not that human answer (see [`strategy-template.md`](strategy-template.md)
+§ Write discipline); the growth stays blocked until the qid resolves. Irreversible-risk findings
+always pause.

package/pack/generated/pi/skills/rite-temper/reference/strategy-template.md

@@ -74,8 +74,15 @@ already exists, record in `drift.md` and route via `/rite-plan repair` instead o
     mitigations go to *Failure and recovery behavior* rows.
   - *Open questions* table: one row per scope call (options offered → decision → owner).
   - **Re-run the Readiness gate** at the bottom of the spec after edits; it must still pass, and
-    **every folded scope delta must trace to a recorded decision** (a `questions.md` qid or a
-    `decisions.md` ADR): an untraceable change is the batch-dump failure.
+    **every folded scope delta must trace to a recorded decision**: a reduction or non-growth
+    delta traces to a `questions.md` qid **or** a `decisions.md` ADR, but an **acceptance-growth**
+    delta (`expand` or any added *Success metrics* / *Acceptance criteria* row) traces **only** to a
+    **resolved human `questions.md` qid** (`status: answered` plus an unindented, lowercase `answered_by: human` line; a qid without exactly
+    that line, including every qid written before the field existed, does not satisfy growth traceability).
+    A `decisions.md` ADR written by the same run is **not**
+    the human approval that growth requires, so an ADR-only growth fold is untraceable and the
+    Readiness gate fails closed — `/rite-define` step 0 hard-blocks while it is unresolved. An
+    untraceable change is the batch-dump failure.
 - **`decisions.md`:** one ADR-style entry per scope call and accepted trade-off:
   `context · decision · why-not-the-alternative · what-would-change-it`.
 - **`assumptions.md`:** every "we'll probably need X" demoted to an explicit
@@ -86,5 +93,9 @@ already exists, record in `drift.md` and route via `/rite-plan repair` instead o
   `devrites-strategy-reviewer` agent is **read-only** and only returns findings + bands.
 - **No silent scope.** An expansion that the human didn't opt into, or a reduction that drops an
   acceptance criterion without a recorded decision, is a defect, not a convenience.
+- **An ADR is not its own approval.** A `decisions.md` ADR the run writes about its own scope call
+  records *why* it chose that mode; it never stands in for the human's answer. Acceptance growth
+  stays blocked until a resolved human `questions.md` qid lands, so an unattended run cannot fold
+  an expansion by citing its own record.
 - Add `strategy.md` to the workspace between `spec.md` and `plan.md`; `/rite-define` and
   `/rite-ship` read it.

package/pack/generated/pi/skills/rite-vet/SKILL.md

@@ -20,11 +20,11 @@ Vet owns implementation; current `$ARGUMENTS` (`--full`) feeds the depth trigger
 ## Rules
 
 Read the active standard from: [`principles.md`](../devrites-lib/reference/standards/principles.md), [`patterns.md`](../devrites-lib/reference/standards/patterns.md) + [`coding-style.md`](../devrites-lib/reference/standards/coding-style.md) (over-engineering / YAGNI rubric, trigger `yagni`),
-[`testing.md`](../devrites-lib/reference/standards/testing.md), [`spec-grammar.md`](../devrites-lib/reference/standards/spec-grammar.md), [`performance.md`](../devrites-lib/reference/standards/performance.md), [`error-handling.md`](../devrites-lib/reference/standards/error-handling.md),
+[`testing.md`](../devrites-lib/reference/standards/testing.md), [`spec-grammar.md`](../devrites-lib/reference/standards/spec-grammar.md), [`performance.md`](../devrites-lib/reference/standards/performance.md), [`error-handling.md`](../devrites-lib/reference/standards/error-handling.md) (trigger `errors`),
 [`development-workflow.md`](../devrites-lib/reference/standards/development-workflow.md), [`afk-hitl.md`](../devrites-lib/reference/standards/afk-hitl.md), [`one-shot-actions.md`](../devrites-lib/reference/standards/one-shot-actions.md),
-[`developer-experience.md`](../devrites-lib/reference/standards/developer-experience.md), [`elicitation.md`](../devrites-lib/reference/standards/elicitation.md), and [`definition-of-done.md`](../devrites-lib/reference/standards/definition-of-done.md). Load
+[`developer-experience.md`](../devrites-lib/reference/standards/developer-experience.md), [`elicitation.md`](../devrites-lib/reference/standards/elicitation.md), and [`definition-of-done.md`](../devrites-lib/reference/standards/definition-of-done.md) (trigger `dod`). Load
 repository topology, data integrity, and integration reliability only when
-triggered. When the plan's scope generalizes an existing boundary — a second
+triggered (trigger `applicability`). When the plan's scope generalizes an existing boundary — a second
 platform/tenant/source of truth, a newly optional field, a constant turned parameter —
 confirm the [`assumption-checkpoints.md`](../devrites-lib/reference/standards/assumption-checkpoints.md) question (trigger `assumption-delta`)
 was answered and recorded, not skipped-as-negative.
@@ -67,6 +67,7 @@ plan declares a root-authored executable workflow file, read
   repeat unaffected axes/reviewers. One dispatch covers every open fingerprint
   of the fold — each checked individually — with a mandatory correction-created
   regression audit.
+- Refuse the rationalizations in [`anti-patterns`](reference/anti-patterns.md).
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"plan declares root-authored executable workflow file","action":"emit exact admission; stale/missing authority uses PLAN_VET_REPAIR","return":"Vet READY cursor or exact technical replan"} -->
 ## Workflow
 

package/pack/generated/pi/skills/rite-vet/reference/artifacts.md

@@ -211,7 +211,7 @@ Vet hardens the plan. Use the marked action before fold-back.
 - Finish `test-plan.md`, fold-back, and rechecks first. Changes to `brief.md`, `spec.md`,
   `decisions.md`, `assumptions.md`, or `questions.md` require revalidating the
   affected decision-coverage rows, assumption audit, residual uncertainty, and closed gates.
-  Partial/Missing, an unowned material assumption, or an open blocking/escalating question routes
+  `open` rows, an unowned material assumption, or an open blocking/escalating question routes
   `/rite-clarify`/HITL. Re-read affected rows with current evidence; repeat the exact
   plan-reviewer and applicable strategy/DevEx after edits. Root writes READY only after
   the checklist. Normal readiness rejects missing/stale bindings; empty tables,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "devrites",
-  "version": "5.14.4",
+  "version": "6.0.1",
   "description": "DevRites: a disciplined senior-engineer workflow pack for Claude Code, Codex, omp, pi, and Devin CLI",
   "license": "SEE LICENSE IN LICENSE",
   "homepage": "https://github.com/ViktorsBaikers/DevRites#readme",
@@ -31,14 +31,15 @@
   "files": [
     "bin/",
     "engine/",
-    "!engine/devrites-engine",
-    "!engine/devrites-engine.exe",
+    "!engine/tests/",
+    "!engine/testdata/",
     "pack/",
     "scripts/build-host-artifacts.sh",
     "scripts/codex-generate.sh",
     "scripts/omp-generate.sh",
     "scripts/pi-generate.sh",
     "scripts/devin-generate.sh",
+    "scripts/expand-includes.py",
     "scripts/install-lib.sh",
     "install.sh",
     "uninstall.sh",
@@ -60,7 +61,6 @@
   },
   "scripts": {
     "prepare": "husky || true",
-    "prepack": "bash scripts/build-host-artifacts.sh",
     "commitlint": "commitlint --edit",
     "validate": "bash scripts/validate.sh",
     "test": "node scripts/run-tests.mjs",
@@ -86,6 +86,7 @@
     "semantic-release": "^25.0.9"
   },
   "overrides": {
+    "@semantic-release/commit-analyzer": "14.0.0-beta.4",
     "@semantic-release/release-notes-generator": "15.0.0-beta.3",
     "@semantic-release/npm": {
       "npm": "11.20.0"

package/scripts/build-host-artifacts.sh

@@ -23,6 +23,21 @@ OUT_ROOT="${DEVRITES_HOST_ARTIFACT_DIR:-$ROOT/pack/generated}"
   exit 1
 }
 
+command -v python3 >/dev/null 2>&1 || {
+  echo "build-host-artifacts: python3 is required" >&2
+  exit 1
+}
+[ -f "$ROOT/scripts/expand-includes.py" ] || {
+  echo "build-host-artifacts: missing $ROOT/scripts/expand-includes.py" >&2
+  exit 1
+}
+
+_out_parent="$(dirname "$OUT_ROOT")"
+[ "$OUT_ROOT" = . ] || { mkdir -p "$_out_parent" 2>/dev/null && [ -d "$_out_parent" ] && [ -w "$_out_parent" ]; } || {
+  echo "build-host-artifacts: output parent of $OUT_ROOT is not a writable directory (DEVRITES_HOST_ARTIFACT_DIR)" >&2
+  exit 1
+}
+
 TMP_GEN_DIR="$(mktemp -d)"
 cleanup() { rm -rf "$TMP_GEN_DIR"; }
 trap cleanup EXIT

package/scripts/codex-generate.sh

@@ -104,7 +104,7 @@ This project has DevRites installed for both Claude Code and Codex.
 - In DevRites guidance, **invoke** means run a skill inline in the current context; **dispatch** means start a fresh agent with `spawn_agent`, wait for it, and reconcile its result.
 - Dispatch every exact named `devrites-<role>` required by the active workflow in a fresh subagent thread, wait for it, and reconcile its result. If that role is unavailable, stop for HITL; never skip it, never substitute a generic/default child, and never execute the specialist role in the root context.
 - The root uses the workspace-capable `devrites-orchestrator` profile because Codex children cannot elevate above the parent permission ceiling. This permission is for native writer dispatch and exact path-bounded executable workflow artifacts under the active `.devrites/work/<slug>/`; the root must never edit product source or tests itself.
-- Every generated specialist is hook-free. `devrites-slice-wright` alone uses `default_permissions = ":workspace"`; every other specialist uses `default_permissions = ":read-only"`. Exact paths are instruction-enforced: put the project-relative paths in the task, wait for the wright, compare its file list and `git diff --name-only` with that contract, and reject any extra path. Never bypass the wright, widen its contract, or edit source in the root; the root must never recreate an engine dispatch bridge.
+- Every generated specialist is hook-free. Among the lifecycle `devrites-*` specialists, `devrites-slice-wright` alone uses `default_permissions = ":workspace"` and every other specialist in that family uses `default_permissions = ":read-only"`. The shipped profiles are the full role-to-permission map; `/rite-doctor` step 3 checks them. Exact paths are instruction-enforced: put the project-relative paths in the task, wait for the wright, compare its file list and `git diff --name-only` with that contract, and reject any extra path. Never bypass the wright, widen its contract, or edit source in the root; the root must never recreate an engine dispatch bridge.
 - The explicit `/overhaul` skill ships its own `overhaul-*` agents outside the DevRites lifecycle. They use `default_permissions = ":workspace"`, are dispatched only by that skill, and follow its own approval gate and path contracts instead of the lifecycle writer rules above.
 - The explicit `/rite-fast` skill ships its own `fast-*` agents. Only `fast-builder` uses `default_permissions = ":workspace"`; `fast-planner`, `fast-checker`, and `fast-critic` stay `:read-only`. `/rite-fast` dispatches them itself and applies its own exact-path contracts.
 - A seal GO, AFK mode, or autocomplete flag never authorizes an irreversible action. Disclose the exact commit/push/tag/PR plan and obtain fresh explicit user approval for that attempt; any changed or retried plan needs fresh approval. Native host permission and sandbox prompts remain authoritative and cannot be inferred or bypassed.

package/scripts/devin-generate.sh

@@ -206,7 +206,7 @@ This project has DevRites installed for Devin CLI.
 - Before using any DevRites workflow skill, read `.devin/skills/devrites-lib/reference/standards/core.md`. Load other `.devin/skills/devrites-lib/reference/standards/*.md` files when the skill or rule index asks for them.
 - DevRites specialist agents live in `.devin/agents` as custom subagent profiles offered to `run_subagent`. If a required `devrites-<role>` profile is not among the offered profiles, stop for HITL - never skip the role, never substitute `subagent_general`, `subagent_explore`, or another generic profile, never inline the specialist prompt, and never execute the specialist role in the root context.
 - In DevRites guidance, **invoke** means run a skill inline in the current context; **dispatch** means start a fresh agent with `run_subagent` using the exact `profile` name, wait for it with `read_subagent`, and reconcile its result.
-- Only `devrites-slice-wright` may edit source or tests; every other specialist is read-only by `allowed-tools`. Exact paths are instruction-enforced: put the project-relative paths in the task, wait for the wright, compare its file list and `git diff --name-only` with that contract, and reject any extra path.
+- Among the lifecycle `devrites-*` specialists, only `devrites-slice-wright` may edit source or tests; every other specialist in that family is read-only by `allowed-tools`. The shipped profiles are the full role-to-permission map; `/rite-doctor` step 3 checks them. Exact paths are instruction-enforced: put the project-relative paths in the task, wait for the wright, compare its file list and `git diff --name-only` with that contract, and reject any extra path.
 - The explicit `/overhaul` skill ships its own `overhaul-*` agents outside the DevRites lifecycle. They carry the full write tool set, are dispatched only by that skill, and follow its own approval gate and path contracts instead of the lifecycle writer rules above.
 - The explicit `/rite-fast` skill ships its own `fast-*` agents. Only `fast-builder` carries write tools; `fast-planner`, `fast-checker`, and `fast-critic` stay read-only. `/rite-fast` dispatches them itself and applies its own exact-path contracts.
 - Custom profiles do not inherit interactive tool grants, and background subagents auto-deny unapproved tools. Dispatch the write-capable wright in the foreground, or make sure its `edit`, `write`, and `exec` tools are approved first. Specialists cannot use `ask_user_question`; the root relays user questions and answers through the task text and returned result.

package/scripts/expand-includes.py

@@ -0,0 +1,46 @@
+#!/usr/bin/env python3
+"""Expand <!-- include:REL/PATH.md --> markers in-place under a directory.
+
+Paths resolve relative to the file containing the marker. Used by
+build-host-artifacts.sh on a scratch copy of pack/.claude so every host
+receives identical expanded text while canonical sources deduplicate
+shared blocks into pack/.claude/**/_shared/.
+"""
+from __future__ import annotations
+
+import re
+import sys
+from pathlib import Path
+
+MARKER = re.compile(r"<!--\s*include:([^\s>]+)\s*-->")
+
+
+def expand_file(path: Path, errors: list[str]) -> str:
+    text = path.read_text(encoding="utf-8")
+
+    def repl(m: re.Match) -> str:
+        target = (path.parent / m.group(1)).resolve()
+        if not target.is_file():
+            errors.append(f"{path}: include not found: {m.group(1)}")
+            return m.group(0)
+        return target.read_text(encoding="utf-8").rstrip("\n")
+
+    return MARKER.sub(repl, text)
+
+
+def main() -> int:
+    root = Path(sys.argv[1])
+    errors: list[str] = []
+    for f in sorted(root.rglob("*.md")):
+        if "include:" not in f.read_text(encoding="utf-8"):
+            continue
+        new = expand_file(f, errors)
+        if new != f.read_text(encoding="utf-8"):
+            f.write_text(new, encoding="utf-8")
+    for e in errors:
+        print(e, file=sys.stderr)
+    return 1 if errors else 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())