devrites 6.0.3 → 6.1.0

package/pack/generated/claude/skills/rite-vet/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[slug] [--cross-model] [--full]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/gates.md","rite-vet/reference/review-axes.md","rite-vet/reference/artifacts.md","rite-vet/reference/depth.md","rite-vet/reference/eng-lenses.md","rite-vet/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"cross-model":["rite-vet/reference/cross-model.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"principles":["devrites-lib/reference/standards/principles.md"],"reslice":["devrites-lib/reference/standards/acceptance-preserving-reslice.md"],"testing":["devrites-lib/reference/standards/testing.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md"],"workspaceByRole":{"devex-reviewer":["spec.md","plan.md","tasks.md","state.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","decisions.md","state.md"],"strategy-reviewer":["brief.md","spec.md","plan.md","decisions.md","decision-coverage.md","strategy.md","state.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/gates.md","rite-vet/reference/review-axes.md","rite-vet/reference/artifacts.md","rite-vet/reference/depth.md","rite-vet/reference/eng-lenses.md","rite-vet/reference/anti-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"cross-model":["rite-vet/reference/cross-model.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"grammar":["devrites-lib/reference/standards/spec-grammar.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"principles":["devrites-lib/reference/standards/principles.md"],"reslice":["devrites-lib/reference/standards/acceptance-preserving-reslice.md"],"testing":["devrites-lib/reference/standards/testing.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"yagni":["devrites-lib/reference/standards/patterns.md","devrites-lib/reference/standards/coding-style.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","strategy.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md"],"workspaceByRole":{"devex-reviewer":["spec.md","plan.md","tasks.md","decisions.md","state.md"],"plan-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","decision-coverage.md","architecture.md","decisions.md","state.md"],"strategy-reviewer":["brief.md","spec.md","plan.md","decisions.md","decision-coverage.md","strategy.md","state.md"]}} -->
 > Read-set manifest: `devrites-engine context <slug> --phase vet` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -160,7 +160,8 @@ plan declares a root-authored executable workflow file, read
    editing intent/decision/assumption/question owners, re-scan affected coverage,
    assumptions, uncertainty, and gates. Keep state non-READY. Every scenario and
    criterion needs positive, discriminating proof; every slice must be one-pass
-   implementable; developer plans need a predicted scorecard. Durable commands
+   implementable; developer plans (trigger `devex`) write the devex reviewer's
+   predicted scorecard to `devex.md`. Durable commands
    are portable repository commands, not host wrappers — resolve them with
    `devrites-engine detect commands` (Makefile/package.json/manifests, no
    execution) and cite the resolved text verbatim; an `unresolved` slot means

package/pack/generated/claude/skills/rite-vet/reference/artifacts.md

@@ -68,7 +68,7 @@ Suppressed (confidence ≤4, unverified): <count — one line each>
 ## 6. Native reviewer accounts
 - `devrites-plan-reviewer`: <findings + resolution | evidence-based No-findings>
 - `devrites-strategy-reviewer`: <current Temper verdict | Not-applicable: low-stakes skip>
-- `devrites-devex-reviewer`: <findings + resolution | No-findings | Not-applicable: no developer surface>
+- `devrites-devex-reviewer`: <findings + resolution | No-findings | Not-applicable: no developer surface>; predicted scorecard → `devex.md`
 - Recheck: <not-needed | one narrow recheck and result>
 - Cross-model (if --cross-model): <overlap / unique findings — informational until approved>
 - Final: floor = <band>; unresolved → <none | blocking qid>

package/pack/generated/claude/skills/rite-watch-pr/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[PR number|PR URL|blank for current branch]"
 user-invocable: true
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/loop-operations.md"],"triggers":{"security":["devrites-lib/reference/standards/security.md"]},"workspace":[]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-watch-pr` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context <slug> --skill rite-watch-pr` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-watch-pr: read-only PR and CI observation
 

package/pack/generated/claude/skills/rite-zoom-out/SKILL.md

@@ -6,7 +6,7 @@ user-invocable: true
 disable-model-invocation: true
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/tooling.md"],"workspace":["spec.md","plan.md","decisions.md","state.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-zoom-out` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context <slug> --skill rite-zoom-out` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-zoom-out: step up one abstraction layer
 

package/pack/generated/codex/agents/devrites-code-reviewer.toml

@@ -33,13 +33,13 @@ test at `file:line`.
 
 **Load the governing rules before reviewing.** Read
 `.agents/skills/devrites-lib/reference/standards/code-review.md`,
-[`coding-style.md`](../skills/devrites-lib/reference/standards/coding-style.md), [`patterns.md`](../skills/devrites-lib/reference/standards/patterns.md), and [`edge-case-trace.md`](../skills/devrites-lib/reference/standards/edge-case-trace.md). On Codex, use the
+[`coding-style.md`](.agents/skills/devrites-lib/reference/standards/coding-style.md), [`patterns.md`](.agents/skills/devrites-lib/reference/standards/patterns.md), and [`edge-case-trace.md`](.agents/skills/devrites-lib/reference/standards/edge-case-trace.md). On Codex, use the
 mirrors under `.agents/skills/devrites-lib/reference/standards/`. Apply the current
 files, not a summary you remember.
-From `spec.md`'s applicability map, load only triggered [`repository-topology.md`](../skills/devrites-lib/reference/standards/repository-topology.md),
-[`data-integrity.md`](../skills/devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](../skills/devrites-lib/reference/standards/integration-reliability.md); their cases remain feature-scoped.
-For per-file defect probes, load [`review/README.md`](../skills/devrites-lib/reference/standards/review/README.md):
-[`review/default.md`](../skills/devrites-lib/reference/standards/review/default.md) applies to every file, plus the language checklist matching
+From `spec.md`'s applicability map, load only triggered [`repository-topology.md`](.agents/skills/devrites-lib/reference/standards/repository-topology.md),
+[`data-integrity.md`](.agents/skills/devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](.agents/skills/devrites-lib/reference/standards/integration-reliability.md); their cases remain feature-scoped.
+For per-file defect probes, load [`review/README.md`](.agents/skills/devrites-lib/reference/standards/review/README.md):
+[`review/default.md`](.agents/skills/devrites-lib/reference/standards/review/default.md) applies to every file, plus the language checklist matching
 each file's extension. A do-not-flag item raised as Critical/Important is a
 review defect — check that list before reporting.
 
@@ -67,7 +67,7 @@ from your side.
     behavioral change to its consumer and confirm that an asserting test drives the
     **new** behavior. Merely running the path or asserting the old expectation is
     insufficient. If no test would catch the regression, cite the changed
-    `file:line` and the test that misses it. See [`testing.md`](../skills/devrites-lib/reference/standards/testing.md) § The verification gap.
+    `file:line` and the test that misses it. See [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md) § The verification gap.
 - **Correctness:** check logic, null, empty, and boundary values, error paths, races,
   and assumptions. For branching or boundary changes, run the edge-case trace over
   relevant probe classes, fixed-set siblings, real wiring, negative intent, and deletion
@@ -91,7 +91,7 @@ from your side.
     mode that matches the packet's diff: `--base <ref>` when the feature's work
     is committed, `--staged`/`--worktree` for uncommitted diffs. Triage each
     reported cluster per
-    [`duplicate-code.md`](../skills/devrites-lib/reference/standards/duplicate-code.md)
+    [`duplicate-code.md`](.agents/skills/devrites-lib/reference/standards/duplicate-code.md)
     — merge, keep-with-reason, or watch. A `*`-marked unit the diff added needs a
     verdict, not suppression.
 - **Maintainability:** dead code, leftover TODOs or logs, and convention drift. Check

package/pack/generated/codex/agents/devrites-devex-reviewer.toml

@@ -71,7 +71,7 @@ consistently:
   prerequisite, wrong command, missing step, or stale/mismatched transcript is a
   finding. Never execute the quickstart yourself.
 - **Error-message quality:** a failure must say what failed, why, and how to
-  recover, include the relevant IDs, and expose **no secrets** under [`security.md`](../skills/devrites-lib/reference/standards/security.md).
+  recover, include the relevant IDs, and expose **no secrets** under [`security.md`](.agents/skills/devrites-lib/reference/standards/security.md).
   A bare trace, silent exit, or "an error occurred" on a developer-facing path is a
   defect.
 - **Ergonomics & consistency:** compare naming, argument order, pagination, and
@@ -80,6 +80,10 @@ consistently:
 - **Docs accuracy:** examples must be correct and ready to copy. The documented
   signature must match the code, and changed behavior must update its docs in the
   same change.
+- **Agent use:** can a coding agent complete the flow with no human step?
+  Check non-interactive flags or env for every prompt, machine-readable output and
+  distinct exit codes where scripts consume results, headless setup and auth, and
+  commands instead of "click here" UI steps. Name each human-only step.
 
 ## Rules
 
@@ -116,6 +120,7 @@ Scorecard:
   error-messages    <actionable? | the unactionable ones, quoted>
   ergonomics        <consistent with project conventions? | the breaks>
   docs              <copy-pasteable + accurate? | the wrong examples>
+  agent-use         <completes headless? | the human-only steps | n/a>
 Boomerang (measure mode): predicted <…> vs measured <…> — gap: <none | the delta + why it matters>
 Overall: blockers? <yes/no — list>
 ```

package/pack/generated/codex/agents/devrites-evidence-scout.toml

@@ -34,6 +34,10 @@ Read only the paths and bounded question supplied by the orchestrator.
 For structural questions, use the repository's code-intelligence index. Use exact
 sources, not recollection, and do not broaden the question.
 
+Report how things are today, not how the intended change should go. When the brief
+names a planned solution, still answer only with current-state facts; a recommendation
+bends the evidence toward the plan.
+
 ## Rules
 
 - Read-only. Do not edit source, tests, `.devrites/**`, Git state, or dependencies.

package/pack/generated/codex/agents/devrites-frontend-reviewer.toml

@@ -57,7 +57,7 @@ draws a revision finding for variety 2.
   components with one-offs, and the information architecture and flow with
   neighboring screens. Name the root cause of any drift.
 - **States:** check the role lattice of control and surface states
-  ([`quality-standards.md`](../skills/devrites-frontend-craft/reference/quality-standards.md) § Focus & states),
+  ([`quality-standards.md`](.agents/skills/devrites-frontend-craft/reference/quality-standards.md) § Focus & states),
   not a shorter local list, and mark each per surface with its markers. The empty
   state needs a welcoming next action, and the error state must support recovery.
   Flag every applicable state that is `missing`; an unobserved one is `unknown`, which is

package/pack/generated/codex/agents/devrites-plan-drafter.toml

@@ -24,10 +24,10 @@ name rollback and failure paths; keep acceptance-changing proposals separate. Du
 proof commands must be portable repository commands, never host-local wrappers,
 user-specific absolute paths, or temporary proof trees.
 Reconcile `spec.md`'s applicability map against live evidence. When triggered, apply
-[`repository-topology.md`](../skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](../skills/devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](../skills/devrites-lib/reference/standards/integration-reliability.md) and include
+[`repository-topology.md`](.agents/skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](.agents/skills/devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](.agents/skills/devrites-lib/reference/standards/integration-reliability.md) and include
 its required plan output with owner, partial-failure/recovery path, deployment order, slice,
 and proof. Do not copy a standard or turn a false `not applicable` into a planning shortcut.
-For every consumptive action, apply [`one-shot-actions.md`](../skills/devrites-lib/reference/standards/one-shot-actions.md): draft a durable bounded
+For every consumptive action, apply [`one-shot-actions.md`](.agents/skills/devrites-lib/reference/standards/one-shot-actions.md): draft a durable bounded
 artifact, a finite injective map from every failure emit seam to a stable non-secret
 boundary ID and offline decision, per-seam fault fixtures, cleanup-survival proof,
 and a collision mutant. If prior retained evidence is missing or ambiguous, draft a
@@ -46,7 +46,7 @@ principle-exception questions. List them for the root.
 
 - Read-only. Do not edit source, tests, `.devrites/**`, Git state, or dependencies.
 - Design executable workflow artifacts completely, but never return implementation bodies
-  or materialize them; the later Vet-ready step follows [`workflow-artifacts.md`](../skills/devrites-lib/reference/standards/workflow-artifacts.md).
+  or materialize them; the later Vet-ready step follows [`workflow-artifacts.md`](.agents/skills/devrites-lib/reference/standards/workflow-artifacts.md).
 - Do not ask the user, approve the plan, set readiness, or advance a phase.
 - Do not invoke another agent.
 - Return candidate content only for requested paths. If unfinished, name the exact

package/pack/generated/codex/agents/devrites-plan-reviewer.toml

@@ -76,7 +76,7 @@ line, and then assign the band. Do not choose a score and justify it afterward:
 7. **Failure-mode coverage:** for each new codepath, find a realistic failure such
    as a timeout, nil value, race, or stale state. A silent failure with **no test AND
    no error handling** is a critical gap. For every consumptive action under
-   [`one-shot-actions.md`](../skills/devrites-lib/reference/standards/one-shot-actions.md), require durable bounded trust-safe evidence for every
+   [`one-shot-actions.md`](.agents/skills/devrites-lib/reference/standards/one-shot-actions.md), require durable bounded trust-safe evidence for every
    terminal path plus unknown-well-formed, malformed/hostile, and cleanup-survival
    fixtures. Require a finite injective map from every failure emit site to one
    stable non-secret boundary ID and one actionable failure seam, per-seam fault
@@ -118,7 +118,9 @@ criterion, slice, or proof.
   planned tests) or `kind: mechanism` (a named test can discriminate the wrong
   implementation; propose that case as the fix, not new plan prose).
 - In a recheck, your verdict covers the listed fingerprints, the correction diff, and
-  the dependents of each changed clause. Anything else you notice on unchanged text
+  the dependents of each changed clause. Return an explicit correction-created
+  regression verdict over the touched invariants and those dependents as
+  `Regression: <none | invariant → finding>`. Anything else you notice on unchanged text
   goes under `Late:` with severity and site; it is recorded, not verdict-bearing.
 - When a dimension has no issue, say "strong: <why>" instead of inventing a
   finding.
@@ -138,6 +140,7 @@ Dimension bands (evidence → band):
   - … (all 7)
 Suppressed (confidence ≤4, unverified): <count + one-line each, appendix>
 Critical failure-mode gaps: <list | none>
+Regression (recheck only): <none | invariant → finding>
 Floor verdict: <weakest band> on <dimension> → PASS | BLOCKED
 ```
 

package/pack/generated/codex/agents/devrites-proof-runner.toml

@@ -24,7 +24,7 @@ and only the orchestrator-supplied changed paths.
 
 1. Match command/cwd/prerequisite/exit/decisive log exactly to `test-plan.md`;
    reject missing, synthesized, or unapproved commands and unexecuted or exit-only evidence.
-   Apply [`testing.md`](../skills/devrites-lib/reference/standards/testing.md) (Preserve producer failure, No manufactured green,
+   Apply [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md) (Preserve producer failure, No manufactured green,
    Determinism): reject a behavioral row whose named test is absent from the
    executed set, whose selector, runner counts, or attempt record is missing or
    contradictory, whose output and exit come from different executions, whose
@@ -52,7 +52,7 @@ and only the orchestrator-supplied changed paths.
    baseline for the same command/cwd/prerequisites/material environment; it stays a
    named blocker, never a pass. Otherwise use `cannot_verify`.
 8. A manual gate whose `gates.md` note lacks the human's own words or source, is a
-   placeholder, or was runnable at Vet is `cannot_verify` ([`gates.md`](../skills/devrites-lib/reference/standards/gates.md)).
+   placeholder, or was runnable at Vet is `cannot_verify` ([`gates.md`](.agents/skills/devrites-lib/reference/standards/gates.md)).
 9. Recheck supplied before/after candidate identities. A mismatch or unexpected
    repository mutation fails the side-effect boundary.
 

package/pack/generated/codex/agents/devrites-security-auditor.toml

@@ -78,7 +78,7 @@ forgery control, unsafe deserialization, and fail-closed environment defaults wh
   validation, authorization, escaping, or an existing guard that already neutralizes
   it. A candidate that survives disproof is a finding; an unresolved fact names the
   exact unknown (no severity claim); a disproved candidate stays visible as rejected
-  with the disproof, per [`agents.md`](../skills/devrites-lib/reference/standards/agents.md) § Result admission.
+  with the disproof, per [`agents.md`](.agents/skills/devrites-lib/reference/standards/agents.md) § Result admission.
 - **Severity is capped at demonstrated impact in this codebase.** A candidate that
   names principal, input, boundary, and observed crossing earns Critical only when it
   states the concrete damage, for example auth bypass, cross-principal or cross-tenant

package/pack/generated/codex/agents/devrites-simplifier-reviewer.toml

@@ -81,7 +81,7 @@ hotspot → `no-findings` naming the files measured.
   when the packet asks for a repo-wide pass. Read both units before proposing a
   merge — convergent code is a keep, not a dedupe. Report each actionable
   cluster with its hash per
-  [`duplicate-code.md`](../skills/devrites-lib/reference/standards/duplicate-code.md).
+  [`duplicate-code.md`](.agents/skills/devrites-lib/reference/standards/duplicate-code.md).
 - **Delete dead code:** remove only unreachable code added by this feature.
 
 ## Output

package/pack/generated/codex/agents/devrites-slice-wright.toml

@@ -52,11 +52,11 @@ The orchestrator supplies these inline or by path, relative to **Workspace root*
   `.agents/skills/devrites-lib/reference/standards/context-hygiene.md` dispatch packets, never a
   summary that drops applicable obligations or an unsolicited whole-history dump.
 - **Rules in scope** (`.agents/skills/devrites-lib/reference/standards/`;
-  `.agents/skills/devrites-lib/reference/standards/` mirror on Codex): [`coding-style.md`](../skills/devrites-lib/reference/standards/coding-style.md), [`error-handling.md`](../skills/devrites-lib/reference/standards/error-handling.md), [`testing.md`](../skills/devrites-lib/reference/standards/testing.md),
-  [`patterns.md`](../skills/devrites-lib/reference/standards/patterns.md); [`security.md`](../skills/devrites-lib/reference/standards/security.md) when input/auth/data/integrations are touched; [`performance.md`](../skills/devrites-lib/reference/standards/performance.md)
+  `.agents/skills/devrites-lib/reference/standards/` mirror on Codex): [`coding-style.md`](.agents/skills/devrites-lib/reference/standards/coding-style.md), [`error-handling.md`](.agents/skills/devrites-lib/reference/standards/error-handling.md), [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md),
+  [`patterns.md`](.agents/skills/devrites-lib/reference/standards/patterns.md); [`security.md`](.agents/skills/devrites-lib/reference/standards/security.md) when input/auth/data/integrations are touched; [`performance.md`](.agents/skills/devrites-lib/reference/standards/performance.md)
   when the slice touches a hot path, a query, or a large payload; and only when named by
-  the vetted applicability contract, [`repository-topology.md`](../skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](../skills/devrites-lib/reference/standards/data-integrity.md), or
-  [`integration-reliability.md`](../skills/devrites-lib/reference/standards/integration-reliability.md). These files are authoritative:
+  the vetted applicability contract, [`repository-topology.md`](.agents/skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](.agents/skills/devrites-lib/reference/standards/data-integrity.md), or
+  [`integration-reliability.md`](.agents/skills/devrites-lib/reference/standards/integration-reliability.md). These files are authoritative:
   read the in-scope one rather than guessing the standard.
 
 **Before ORIENT, restate** goal, acceptance, and boundary in one short block. An
@@ -118,7 +118,10 @@ unclear boundary is underspecified: return `Escalation` without proceeding.
    new fingerprint. At the limit return the gate and repro. `Escalation` is only for product/irreversible choices
    or human-only access; technical failure is a blocker.
    Before handoff, inspect your cumulative slice diff against the contract and
-   scenario matrix, including correction-affected adjacent variants. Fix supported
+   scenario matrix, including correction-affected adjacent variants, then against
+   the reviewers' own checks: [code review § What to check](.agents/skills/devrites-lib/reference/standards/code-review.md#what-to-check-tests-first)
+   and test analysis (each acceptance criterion has a test that fails without the
+   change; no assertion-free, tautological, or mock-asserting test). Fix supported
    in-scope gaps together, rerun affected proof, and report remaining gaps. Self-check
    never replaces independent review; green tests do not prove all possible cases.
 5. **TRANSFER when isolated.** After green writer-safe proof, verify the diff again,

package/pack/generated/codex/agents/devrites-test-analyst.toml

@@ -25,13 +25,13 @@ Nothing counts as tested until you find the test that proves it.
 
 Before assessing, read
 `.agents/skills/devrites-lib/reference/standards/testing.md` and
-[`edge-case-trace.md`](../skills/devrites-lib/reference/standards/edge-case-trace.md). On Codex, use the mirrors under
+[`edge-case-trace.md`](.agents/skills/devrites-lib/reference/standards/edge-case-trace.md). On Codex, use the mirrors under
 `.agents/skills/devrites-lib/reference/standards/`. Apply the current rules for
 assertion strength, tautologies, asserting mocks, mutation and fault injection,
 DAMP over DRY, test size, fixed-set siblings, and deletion contracts. Use the
 current files rather than memory.
 Read `spec.md`'s applicability map and, only when triggered, the matching
-[`repository-topology.md`](../skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](../skills/devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](../skills/devrites-lib/reference/standards/integration-reliability.md) proof cases.
+[`repository-topology.md`](.agents/skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](.agents/skills/devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](.agents/skills/devrites-lib/reference/standards/integration-reliability.md) proof cases.
 
 ## Inputs
 In workspace `.devrites/work/<slug>/`, read `spec.md` for the acceptance criteria. Read
@@ -51,7 +51,7 @@ paths to inspect the code and tests, then read the test files.
 - **Verification gap:** trace each behavioral change to its consumer and confirm that
   an asserting test drives the **new** behavior. Running the path or asserting the
   old expectation is not enough. If the suite would pass with the change reverted,
-  cite the change and the test that misses it. See [`testing.md`](../skills/devrites-lib/reference/standards/testing.md) § The verification
+  cite the change and the test that misses it. See [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md) § The verification
   gap.
 - **Edge & error cases:** check empty, boundary, error, permission, and concurrency
   paths. For changed branches, run the edge-case trace and confirm that every
@@ -61,13 +61,13 @@ paths to inspect the code and tests, then read the test files.
   "isolation" tests, and one-root results offered as cross-root proof.
 - **Determinism:** check order dependence, time or randomness flakiness, and hidden
   shared state. A pass earned only by rerun or runner retry on an unchanged digest is
-  `flaky` per [`testing.md`](../skills/devrites-lib/reference/standards/testing.md#determinism-no-flaky-tests) § Determinism; a diff adding or raising runner retries, or a
+  `flaky` per [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md#determinism-no-flaky-tests) § Determinism; a diff adding or raising runner retries, or a
   snapshot-update run cited as proof, is a finding.
 - **Evidence honesty:** confirm that `evidence.md` records tests that actually ran
   and passed rather than claiming success. Static build/compile/typecheck/lint results prove
   only their named static criterion. For new behavior, check that a red state was observed;
   for a declared behavior-preserving change, check instead for the old-vs-new seam
-  comparison and seam perturbation ([`testing.md`](../skills/devrites-lib/reference/standards/testing.md) § The verification gap).
+  comparison and seam perturbation ([`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md) § The verification gap).
   Preserve explicit shell assertions and golden/text comparisons when they discriminate a
   genuinely textual or command-line criterion.
 

package/pack/generated/codex/agents/devrites-upgrade-planner.toml

@@ -24,7 +24,7 @@ Cite current rule plus workspace evidence for each applicable axis: cursor/topol
 phase artifacts, decisions, planning/traceability/proof, built-code/intent, protected
 history, artifact budgets/feature ceiling (the supplied `devrites-engine orient`
 `artifact_budgets`/`bulk_files` and `task_graph.slice_count` against
-[`workspace-artifact-schema.md`](../skills/devrites-lib/reference/workspace-artifact-schema.md) and [`slicing.md`](../skills/rite-plan/reference/slicing.md) § Feature ceiling),
+[`workspace-artifact-schema.md`](.agents/skills/devrites-lib/reference/workspace-artifact-schema.md) and [`slicing.md`](.agents/skills/rite-plan/reference/slicing.md) § Feature ceiling),
 and candidate integrity after Build. Candidate integrity uses the cited current
 contracts, workspace artifacts, and supplied current candidate/seal check results.
 Older provenance is not evidence; age, style, missing version metadata, and irrelevant

package/pack/generated/codex/agents/fast-builder.toml

@@ -21,9 +21,9 @@ right the first time.
   `file:line` and the AC it serves.
 - The exact project-relative paths you may touch. Your return cannot widen them.
 - Rules to apply, from `.agents/skills/devrites-lib/reference/standards/`
-  (`.agents/skills/devrites-lib/reference/standards/` on Codex): [`coding-style.md`](../skills/devrites-lib/reference/standards/coding-style.md),
-  [`testing.md`](../skills/devrites-lib/reference/standards/testing.md), [`error-handling.md`](../skills/devrites-lib/reference/standards/error-handling.md); and
-  [`security.md`](../skills/devrites-lib/reference/standards/security.md) when the packet names risk.
+  (`.agents/skills/devrites-lib/reference/standards/` on Codex): [`coding-style.md`](.agents/skills/devrites-lib/reference/standards/coding-style.md),
+  [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md), [`error-handling.md`](.agents/skills/devrites-lib/reference/standards/error-handling.md); and
+  [`security.md`](.agents/skills/devrites-lib/reference/standards/security.md) when the packet names risk.
 
 Restate goal, ACs, and allowed paths in three lines before you read further. An
 unclear boundary is an escalation, not a guess.

package/pack/generated/codex/agents/fast-critic.toml

@@ -13,9 +13,9 @@ check already ran; you judge quality. You do not see the builder's reasoning; ju
 the code as written.
 
 Before reviewing, read the rules in `.agents/skills/devrites-lib/reference/standards/`
-(`.agents/skills/devrites-lib/reference/standards/` on Codex): [`code-review.md`](../skills/devrites-lib/reference/standards/code-review.md),
-[`coding-style.md`](../skills/devrites-lib/reference/standards/coding-style.md), and [`testing.md`](../skills/devrites-lib/reference/standards/testing.md). Read
-[`security.md`](../skills/devrites-lib/reference/standards/security.md) when the spec lists risk flags or the diff touches
+(`.agents/skills/devrites-lib/reference/standards/` on Codex): [`code-review.md`](.agents/skills/devrites-lib/reference/standards/code-review.md),
+[`coding-style.md`](.agents/skills/devrites-lib/reference/standards/coding-style.md), and [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md). Read
+[`security.md`](.agents/skills/devrites-lib/reference/standards/security.md) when the spec lists risk flags or the diff touches
 input, auth, data, or integrations.
 
 ## Inputs

package/pack/generated/codex/agents/overhaul-backend-engineer.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-boundary.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-craft.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-frontend-engineer.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-implementer.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-recon.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-specialist.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-verifier.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/skills/devrites-api-interface/SKILL.md

@@ -4,7 +4,7 @@ description: Shape stable API, type, module, or frontend/backend contracts befor
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"deprecation":["devrites-lib/reference/standards/deprecation.md"],"security":["devrites-lib/reference/standards/security.md","rite-review/reference/security-review.md"]},"workspace":["spec.md","plan.md","tasks.md","state.md","decisions.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-api-interface` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-api-interface` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-api-interface: contract before implementation
 

package/pack/generated/codex/skills/devrites-audit/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "<security | perf | simplify>"
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/agents.md"],"triggers":{"audit-coverage":["devrites-lib/reference/standards/audit-coverage.md"],"architecture-health":["devrites-lib/reference/standards/architecture-health.md"]},"workspace":["spec.md","plan.md","tasks.md","touched-files.md","evidence.md","state.md","decisions.md"],"workspaceByRole":{"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-audit` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-audit` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-audit: read-only audit dispatch
 

package/pack/generated/codex/skills/devrites-browser-proof/SKILL.md

@@ -4,7 +4,7 @@ description: Observe and prove working UI behavior in a real browser with screen
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-browser-proof/reference/browser-performance.md","devrites-browser-proof/reference/visual-verdict.md","devrites-frontend-craft/reference/quality-standards.md"],"triggers":{"security":["devrites-lib/reference/standards/security.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-browser-proof` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-browser-proof` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # devrites-browser-proof: runtime evidence for UI
 

package/pack/generated/codex/skills/devrites-debug-recovery/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[<slug>]"
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/code-navigation.md","devrites-debug-recovery/reference/build-the-loop.md","devrites-debug-recovery/reference/cleanup-and-classify.md","devrites-debug-recovery/reference/hypotheses.md","devrites-debug-recovery/reference/instrumentation.md","devrites-debug-recovery/reference/regression-test.md","devrites-debug-recovery/reference/trace.md","devrites-lib/reference/standards/debug-recovery.md"],"triggers":{"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"security":["devrites-lib/reference/standards/security.md"],"workspace":["devrites-lib/reference/standards/workflow-artifacts.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-debug-recovery` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-debug-recovery` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # devrites-debug-recovery: fix the root cause, not the symptom
 
@@ -32,7 +32,8 @@ has no clear next move. Optional slug selects the active workspace; defaults to
    Do not proceed without a reproduction input: the captured error text for
    repeatable actions, or the retained bounded artifact for consumptive ones.
 3. **Ranked hypotheses (3-5, falsifiable):** generate the list before testing
-   any of them. Each must state a prediction.
+   any of them. Each must state a prediction. With a `.devrites/archive/`, first run
+   `devrites-engine recall --paths <failing files>` for prior dead ends and causes.
    **Completion:** 3-5 distinct hypotheses each state an observable prediction.
    See [hypotheses.md](reference/hypotheses.md).
 4. **Trace when ambiguous:** if the cause is unclear, flaky, causal, or one fix

package/pack/generated/codex/skills/devrites-doubt/SKILL.md

@@ -4,7 +4,7 @@ description: Stress-test one consequential decision independently. Use for uncer
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/agents.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"security":["devrites-lib/reference/standards/security.md"],"tooling":["devrites-lib/reference/standards/tooling.md"]},"workspace":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"workspaceByRole":{"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-doubt` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-doubt` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-doubt: CLAIM → EXTRACT → DOUBT → RECONCILE → STOP
 

package/pack/generated/codex/skills/devrites-frontend-craft/SKILL.md

@@ -4,7 +4,7 @@ description: Build accessible production UI and all states during $rite-build. U
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-frontend-craft/reference/craft.md","devrites-frontend-craft/reference/design-references.md","devrites-frontend-craft/reference/quality-standards.md","devrites-frontend-craft/reference/reuse-first.md","devrites-frontend-craft/reference/shape.md","rite-polish/reference/anti-ai-slop.md"],"triggers":{"fullstack":["devrites-frontend-craft/reference/fullstack.md"],"testing":["devrites-lib/reference/standards/testing.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-frontend-craft` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-frontend-craft` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # devrites-frontend-craft: UI like a senior designer-engineer
 

package/pack/generated/codex/skills/devrites-interview/SKILL.md

@@ -4,7 +4,7 @@ description: Interview the user one question at a time to extract intent. Use wh
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","rite-spec/reference/interview-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"]},"workspace":["spec.md","questions.md","decisions.md","assumptions.md","decision-coverage.md","state.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-interview` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-interview` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-interview: extract intent
 

package/pack/generated/codex/skills/devrites-lib/reference/intent-map.md

@@ -69,15 +69,15 @@ Wrong-skill fire: stop, admit it, switch rites.
 | Spec has unknowns/coverage gaps | `$rite-clarify` | Required topology scan; zero-question pass when clear. |
 | Derive intent from existing code without an active feature contract | `$rite-adopt` | Establish the brownfield contract. |
 | Reconcile implementation with an active feature contract | `$rite-converge` | Identify gaps and add missing slices. |
-| Older workspace cannot resume | `$rite-upgrade` | Audit cited current-contract defects; age alone is no defect. Route semantic repairs to normal owners; preserve history without synthetic proof. |
+| Older workspace cannot resume (explicit only) | `$rite-upgrade` | Audit cited current-contract defects; age alone is no defect. Route semantic repairs to normal owners; preserve history without synthetic proof. |
 | Turn an approved spec into its first plan | `$rite-define` | No `tasks.md` slices yet; writes architecture, slices, traceability. |
 | Reslice, reorder, or repair an existing plan | `$rite-plan` | Slices exist and evidence invalidates them. |
 | Review plan before code | `$rite-vet` | Every plan; depth scales to risk. |
 | Small safe fix | `$rite-quick` | Escalates auth, migration, public API, destructive, ambiguous, or multi-slice work. |
 | Mid-size work, fast lane (explicit only) | `$rite-fast` | Spec + plan + questions once, ≤10 slices, one completeness check, review, polish, proof; risk deepens questions. |
 | Prove UI/runtime | `$rite-prove` + `devrites-browser-proof` | Capture real evidence. |
-| Stuck/unfamiliar | `$rite-zoom-out` | Map before editing. |
-| Teach me | `$rite-explain` | Human learning loop. |
+| Stuck/unfamiliar (explicit only) | `$rite-zoom-out` | Map before editing. |
+| Teach me (explicit only) | `$rite-explain` | Human learning loop. |
 | Decide ship readiness | `$rite-seal` | Decides; never mutates Git. |
 | Execute ship after GO | `$rite-ship` | Requires GO/type-GO. |
 | Unattended lifecycle | `$rite-autocomplete` | Clean baseline/checkpoints; hard gates stop. |