devrites 6.0.4 → 6.1.1

package/pack/generated/codex/agents/devrites-simplifier-reviewer.toml

@@ -81,7 +81,7 @@ hotspot → `no-findings` naming the files measured.
   when the packet asks for a repo-wide pass. Read both units before proposing a
   merge — convergent code is a keep, not a dedupe. Report each actionable
   cluster with its hash per
-  [`duplicate-code.md`](../skills/devrites-lib/reference/standards/duplicate-code.md).
+  [`duplicate-code.md`](.agents/skills/devrites-lib/reference/standards/duplicate-code.md).
 - **Delete dead code:** remove only unreachable code added by this feature.
 
 ## Output

package/pack/generated/codex/agents/devrites-slice-wright.toml

@@ -52,11 +52,11 @@ The orchestrator supplies these inline or by path, relative to **Workspace root*
   `.agents/skills/devrites-lib/reference/standards/context-hygiene.md` dispatch packets, never a
   summary that drops applicable obligations or an unsolicited whole-history dump.
 - **Rules in scope** (`.agents/skills/devrites-lib/reference/standards/`;
-  `.agents/skills/devrites-lib/reference/standards/` mirror on Codex): [`coding-style.md`](../skills/devrites-lib/reference/standards/coding-style.md), [`error-handling.md`](../skills/devrites-lib/reference/standards/error-handling.md), [`testing.md`](../skills/devrites-lib/reference/standards/testing.md),
-  [`patterns.md`](../skills/devrites-lib/reference/standards/patterns.md); [`security.md`](../skills/devrites-lib/reference/standards/security.md) when input/auth/data/integrations are touched; [`performance.md`](../skills/devrites-lib/reference/standards/performance.md)
+  `.agents/skills/devrites-lib/reference/standards/` mirror on Codex): [`coding-style.md`](.agents/skills/devrites-lib/reference/standards/coding-style.md), [`error-handling.md`](.agents/skills/devrites-lib/reference/standards/error-handling.md), [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md),
+  [`patterns.md`](.agents/skills/devrites-lib/reference/standards/patterns.md); [`security.md`](.agents/skills/devrites-lib/reference/standards/security.md) when input/auth/data/integrations are touched; [`performance.md`](.agents/skills/devrites-lib/reference/standards/performance.md)
   when the slice touches a hot path, a query, or a large payload; and only when named by
-  the vetted applicability contract, [`repository-topology.md`](../skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](../skills/devrites-lib/reference/standards/data-integrity.md), or
-  [`integration-reliability.md`](../skills/devrites-lib/reference/standards/integration-reliability.md). These files are authoritative:
+  the vetted applicability contract, [`repository-topology.md`](.agents/skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](.agents/skills/devrites-lib/reference/standards/data-integrity.md), or
+  [`integration-reliability.md`](.agents/skills/devrites-lib/reference/standards/integration-reliability.md). These files are authoritative:
   read the in-scope one rather than guessing the standard.
 
 **Before ORIENT, restate** goal, acceptance, and boundary in one short block. An
@@ -119,7 +119,7 @@ unclear boundary is underspecified: return `Escalation` without proceeding.
    or human-only access; technical failure is a blocker.
    Before handoff, inspect your cumulative slice diff against the contract and
    scenario matrix, including correction-affected adjacent variants, then against
-   the reviewers' own checks: [code review § What to check](../skills/devrites-lib/reference/standards/code-review.md#what-to-check-tests-first)
+   the reviewers' own checks: [code review § What to check](.agents/skills/devrites-lib/reference/standards/code-review.md#what-to-check-tests-first)
    and test analysis (each acceptance criterion has a test that fails without the
    change; no assertion-free, tautological, or mock-asserting test). Fix supported
    in-scope gaps together, rerun affected proof, and report remaining gaps. Self-check

package/pack/generated/codex/agents/devrites-test-analyst.toml

@@ -25,13 +25,13 @@ Nothing counts as tested until you find the test that proves it.
 
 Before assessing, read
 `.agents/skills/devrites-lib/reference/standards/testing.md` and
-[`edge-case-trace.md`](../skills/devrites-lib/reference/standards/edge-case-trace.md). On Codex, use the mirrors under
+[`edge-case-trace.md`](.agents/skills/devrites-lib/reference/standards/edge-case-trace.md). On Codex, use the mirrors under
 `.agents/skills/devrites-lib/reference/standards/`. Apply the current rules for
 assertion strength, tautologies, asserting mocks, mutation and fault injection,
 DAMP over DRY, test size, fixed-set siblings, and deletion contracts. Use the
 current files rather than memory.
 Read `spec.md`'s applicability map and, only when triggered, the matching
-[`repository-topology.md`](../skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](../skills/devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](../skills/devrites-lib/reference/standards/integration-reliability.md) proof cases.
+[`repository-topology.md`](.agents/skills/devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](.agents/skills/devrites-lib/reference/standards/data-integrity.md), or [`integration-reliability.md`](.agents/skills/devrites-lib/reference/standards/integration-reliability.md) proof cases.
 
 ## Inputs
 In workspace `.devrites/work/<slug>/`, read `spec.md` for the acceptance criteria. Read
@@ -51,7 +51,7 @@ paths to inspect the code and tests, then read the test files.
 - **Verification gap:** trace each behavioral change to its consumer and confirm that
   an asserting test drives the **new** behavior. Running the path or asserting the
   old expectation is not enough. If the suite would pass with the change reverted,
-  cite the change and the test that misses it. See [`testing.md`](../skills/devrites-lib/reference/standards/testing.md) § The verification
+  cite the change and the test that misses it. See [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md) § The verification
   gap.
 - **Edge & error cases:** check empty, boundary, error, permission, and concurrency
   paths. For changed branches, run the edge-case trace and confirm that every
@@ -61,13 +61,13 @@ paths to inspect the code and tests, then read the test files.
   "isolation" tests, and one-root results offered as cross-root proof.
 - **Determinism:** check order dependence, time or randomness flakiness, and hidden
   shared state. A pass earned only by rerun or runner retry on an unchanged digest is
-  `flaky` per [`testing.md`](../skills/devrites-lib/reference/standards/testing.md#determinism-no-flaky-tests) § Determinism; a diff adding or raising runner retries, or a
+  `flaky` per [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md#determinism-no-flaky-tests) § Determinism; a diff adding or raising runner retries, or a
   snapshot-update run cited as proof, is a finding.
 - **Evidence honesty:** confirm that `evidence.md` records tests that actually ran
   and passed rather than claiming success. Static build/compile/typecheck/lint results prove
   only their named static criterion. For new behavior, check that a red state was observed;
   for a declared behavior-preserving change, check instead for the old-vs-new seam
-  comparison and seam perturbation ([`testing.md`](../skills/devrites-lib/reference/standards/testing.md) § The verification gap).
+  comparison and seam perturbation ([`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md) § The verification gap).
   Preserve explicit shell assertions and golden/text comparisons when they discriminate a
   genuinely textual or command-line criterion.
 

package/pack/generated/codex/agents/devrites-upgrade-planner.toml

@@ -24,7 +24,7 @@ Cite current rule plus workspace evidence for each applicable axis: cursor/topol
 phase artifacts, decisions, planning/traceability/proof, built-code/intent, protected
 history, artifact budgets/feature ceiling (the supplied `devrites-engine orient`
 `artifact_budgets`/`bulk_files` and `task_graph.slice_count` against
-[`workspace-artifact-schema.md`](../skills/devrites-lib/reference/workspace-artifact-schema.md) and [`slicing.md`](../skills/rite-plan/reference/slicing.md) § Feature ceiling),
+[`workspace-artifact-schema.md`](.agents/skills/devrites-lib/reference/workspace-artifact-schema.md) and [`slicing.md`](.agents/skills/rite-plan/reference/slicing.md) § Feature ceiling),
 and candidate integrity after Build. Candidate integrity uses the cited current
 contracts, workspace artifacts, and supplied current candidate/seal check results.
 Older provenance is not evidence; age, style, missing version metadata, and irrelevant

package/pack/generated/codex/agents/fast-builder.toml

@@ -21,9 +21,9 @@ right the first time.
   `file:line` and the AC it serves.
 - The exact project-relative paths you may touch. Your return cannot widen them.
 - Rules to apply, from `.agents/skills/devrites-lib/reference/standards/`
-  (`.agents/skills/devrites-lib/reference/standards/` on Codex): [`coding-style.md`](../skills/devrites-lib/reference/standards/coding-style.md),
-  [`testing.md`](../skills/devrites-lib/reference/standards/testing.md), [`error-handling.md`](../skills/devrites-lib/reference/standards/error-handling.md); and
-  [`security.md`](../skills/devrites-lib/reference/standards/security.md) when the packet names risk.
+  (`.agents/skills/devrites-lib/reference/standards/` on Codex): [`coding-style.md`](.agents/skills/devrites-lib/reference/standards/coding-style.md),
+  [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md), [`error-handling.md`](.agents/skills/devrites-lib/reference/standards/error-handling.md); and
+  [`security.md`](.agents/skills/devrites-lib/reference/standards/security.md) when the packet names risk.
 
 Restate goal, ACs, and allowed paths in three lines before you read further. An
 unclear boundary is an escalation, not a guess.

package/pack/generated/codex/agents/fast-critic.toml

@@ -13,9 +13,9 @@ check already ran; you judge quality. You do not see the builder's reasoning; ju
 the code as written.
 
 Before reviewing, read the rules in `.agents/skills/devrites-lib/reference/standards/`
-(`.agents/skills/devrites-lib/reference/standards/` on Codex): [`code-review.md`](../skills/devrites-lib/reference/standards/code-review.md),
-[`coding-style.md`](../skills/devrites-lib/reference/standards/coding-style.md), and [`testing.md`](../skills/devrites-lib/reference/standards/testing.md). Read
-[`security.md`](../skills/devrites-lib/reference/standards/security.md) when the spec lists risk flags or the diff touches
+(`.agents/skills/devrites-lib/reference/standards/` on Codex): [`code-review.md`](.agents/skills/devrites-lib/reference/standards/code-review.md),
+[`coding-style.md`](.agents/skills/devrites-lib/reference/standards/coding-style.md), and [`testing.md`](.agents/skills/devrites-lib/reference/standards/testing.md). Read
+[`security.md`](.agents/skills/devrites-lib/reference/standards/security.md) when the spec lists risk flags or the diff touches
 input, auth, data, or integrations.
 
 ## Inputs

package/pack/generated/codex/agents/overhaul-backend-engineer.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-boundary.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-craft.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-frontend-engineer.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-implementer.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-recon.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-specialist.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/agents/overhaul-verifier.toml

@@ -7,6 +7,8 @@ developer_instructions = '''
 
 Do not invoke another agent. You are called by `/overhaul` and return your result to that orchestrator.
 
+Write your receipt (`schema` `overhaul.receipt/1`) to the packet's `receipt_path`, copying `run_id`, `task_id`, `attempt_id`, `lane` and `snapshot` verbatim from the packet and setting `role` to the unprefixed role name (`verifier`, not `overhaul-verifier`); follow `.agents/skills/overhaul/references/orchestration.md` § Receipts, since admission rejects any mismatch.
+
 The `/overhaul` references cited below live under `.agents/skills/overhaul/references/`
 (`.agents/skills/overhaul/references/` on Codex; the host's own skills directory elsewhere).
 

package/pack/generated/codex/skills/devrites-api-interface/SKILL.md

@@ -4,7 +4,7 @@ description: Shape stable API, type, module, or frontend/backend contracts befor
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"deprecation":["devrites-lib/reference/standards/deprecation.md"],"security":["devrites-lib/reference/standards/security.md","rite-review/reference/security-review.md"]},"workspace":["spec.md","plan.md","tasks.md","state.md","decisions.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-api-interface` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-api-interface` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-api-interface: contract before implementation
 

package/pack/generated/codex/skills/devrites-audit/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "<security | perf | simplify>"
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/agents.md"],"triggers":{"audit-coverage":["devrites-lib/reference/standards/audit-coverage.md"],"architecture-health":["devrites-lib/reference/standards/architecture-health.md"]},"workspace":["spec.md","plan.md","tasks.md","touched-files.md","evidence.md","state.md","decisions.md"],"workspaceByRole":{"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-audit` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-audit` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-audit: read-only audit dispatch
 

package/pack/generated/codex/skills/devrites-browser-proof/SKILL.md

@@ -4,7 +4,7 @@ description: Observe and prove working UI behavior in a real browser with screen
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-browser-proof/reference/browser-performance.md","devrites-browser-proof/reference/visual-verdict.md","devrites-frontend-craft/reference/quality-standards.md"],"triggers":{"security":["devrites-lib/reference/standards/security.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-browser-proof` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-browser-proof` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # devrites-browser-proof: runtime evidence for UI
 

package/pack/generated/codex/skills/devrites-debug-recovery/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[<slug>]"
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/code-navigation.md","devrites-debug-recovery/reference/build-the-loop.md","devrites-debug-recovery/reference/cleanup-and-classify.md","devrites-debug-recovery/reference/hypotheses.md","devrites-debug-recovery/reference/instrumentation.md","devrites-debug-recovery/reference/regression-test.md","devrites-debug-recovery/reference/trace.md","devrites-lib/reference/standards/debug-recovery.md"],"triggers":{"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"security":["devrites-lib/reference/standards/security.md"],"workspace":["devrites-lib/reference/standards/workflow-artifacts.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-debug-recovery` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-debug-recovery` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # devrites-debug-recovery: fix the root cause, not the symptom
 
@@ -32,7 +32,8 @@ has no clear next move. Optional slug selects the active workspace; defaults to
    Do not proceed without a reproduction input: the captured error text for
    repeatable actions, or the retained bounded artifact for consumptive ones.
 3. **Ranked hypotheses (3-5, falsifiable):** generate the list before testing
-   any of them. Each must state a prediction.
+   any of them. Each must state a prediction. With a `.devrites/archive/`, first run
+   `devrites-engine recall --paths <failing files>` for prior dead ends and causes.
    **Completion:** 3-5 distinct hypotheses each state an observable prediction.
    See [hypotheses.md](reference/hypotheses.md).
 4. **Trace when ambiguous:** if the cause is unclear, flaky, causal, or one fix
@@ -86,13 +87,14 @@ has no clear next move. Optional slug selects the active workspace; defaults to
   with that fingerprint. Reclassify only on new causal evidence. On cold resume,
   a retained fingerprint with fewer than three such attempts remains runnable
   even if the previous action wrote a terminal cursor.
-- **A maximum of three no-progress attempts per exact causal fingerprint stops the loop.**
+- **A strategy is spent after three no-progress attempts per exact causal fingerprint.**
   Count an attempt only when its recheck preserves the same decisive failure.
   Record attempt number, exact failure, hypothesis, probe, and failed idea after
   each; closure is progress and a different Critical/Important invariant is a new
   fingerprint. There is no JSONL ledger,
   counter command, or reset-on-green operation. Product/acceptance ambiguity, irreversible risk, or
-  human-only access becomes a human gate; otherwise return reproducible `blocked` with
-  `Next: none — technical recovery exhausted for <causal fingerprint>`, never request
-  attempt four. While budget remains, coupled failure requiring behavior change routes
+  human-only access becomes a human gate; otherwise return the spent strategy and
+  reproduction to the caller, which escalates or parks per the
+  [retry contract](../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve);
+  never request attempt four of the same strategy. While budget remains, coupled failure requiring behavior change routes
   `$rite-plan repair` inline; behavior-neutral rerouting uses `unblock` inline.

package/pack/generated/codex/skills/devrites-doubt/SKILL.md

@@ -4,7 +4,7 @@ description: Stress-test one consequential decision independently. Use for uncer
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/agents.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"security":["devrites-lib/reference/standards/security.md"],"tooling":["devrites-lib/reference/standards/tooling.md"]},"workspace":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"workspaceByRole":{"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-doubt` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-doubt` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-doubt: CLAIM → EXTRACT → DOUBT → RECONCILE → STOP
 

package/pack/generated/codex/skills/devrites-frontend-craft/SKILL.md

@@ -4,7 +4,7 @@ description: Build accessible production UI and all states during $rite-build. U
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-frontend-craft/reference/craft.md","devrites-frontend-craft/reference/design-references.md","devrites-frontend-craft/reference/quality-standards.md","devrites-frontend-craft/reference/reuse-first.md","devrites-frontend-craft/reference/shape.md","rite-polish/reference/anti-ai-slop.md"],"triggers":{"fullstack":["devrites-frontend-craft/reference/fullstack.md"],"testing":["devrites-lib/reference/standards/testing.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-frontend-craft` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-frontend-craft` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # devrites-frontend-craft: UI like a senior designer-engineer
 

package/pack/generated/codex/skills/devrites-interview/SKILL.md

@@ -4,7 +4,7 @@ description: Interview the user one question at a time to extract intent. Use wh
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","rite-spec/reference/interview-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"]},"workspace":["spec.md","questions.md","decisions.md","assumptions.md","decision-coverage.md","state.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-interview` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill devrites-interview` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-interview: extract intent
 

package/pack/generated/codex/skills/devrites-lib/reference/intent-map.md

@@ -69,15 +69,15 @@ Wrong-skill fire: stop, admit it, switch rites.
 | Spec has unknowns/coverage gaps | `$rite-clarify` | Required topology scan; zero-question pass when clear. |
 | Derive intent from existing code without an active feature contract | `$rite-adopt` | Establish the brownfield contract. |
 | Reconcile implementation with an active feature contract | `$rite-converge` | Identify gaps and add missing slices. |
-| Older workspace cannot resume | `$rite-upgrade` | Audit cited current-contract defects; age alone is no defect. Route semantic repairs to normal owners; preserve history without synthetic proof. |
+| Older workspace cannot resume (explicit only) | `$rite-upgrade` | Audit cited current-contract defects; age alone is no defect. Route semantic repairs to normal owners; preserve history without synthetic proof. |
 | Turn an approved spec into its first plan | `$rite-define` | No `tasks.md` slices yet; writes architecture, slices, traceability. |
 | Reslice, reorder, or repair an existing plan | `$rite-plan` | Slices exist and evidence invalidates them. |
 | Review plan before code | `$rite-vet` | Every plan; depth scales to risk. |
 | Small safe fix | `$rite-quick` | Escalates auth, migration, public API, destructive, ambiguous, or multi-slice work. |
 | Mid-size work, fast lane (explicit only) | `$rite-fast` | Spec + plan + questions once, ≤10 slices, one completeness check, review, polish, proof; risk deepens questions. |
 | Prove UI/runtime | `$rite-prove` + `devrites-browser-proof` | Capture real evidence. |
-| Stuck/unfamiliar | `$rite-zoom-out` | Map before editing. |
-| Teach me | `$rite-explain` | Human learning loop. |
+| Stuck/unfamiliar (explicit only) | `$rite-zoom-out` | Map before editing. |
+| Teach me (explicit only) | `$rite-explain` | Human learning loop. |
 | Decide ship readiness | `$rite-seal` | Decides; never mutates Git. |
 | Execute ship after GO | `$rite-ship` | Requires GO/type-GO. |
 | Unattended lifecycle | `$rite-autocomplete` | Clean baseline/checkpoints; hard gates stop. |

package/pack/generated/codex/skills/devrites-lib/reference/parallel-dispatch.md

@@ -4,7 +4,7 @@ Host dispatch; DevRites governs.
 
 ## Roster
 
-Review: Spec/Code; Seal: all applicable roles.
+Review: Spec/Code plus triggered frontend/security/performance; Seal: all applicable roles.
 
 | Reviewer | Fires | Trigger |
 |---|---|---|
@@ -34,12 +34,13 @@ If the candidate diff has no matching surfaces, record
    unverified independence is a gap. Do not launch a probe agent per task;
    still validate each result's context and candidate.
 2. Build each reviewer's read-set once with
-   `devrites-engine context <slug> --phase <p> --role <role> --trigger <set>` and
+   `devrites-engine context --skills-root .agents/skills <slug> --phase <p> --role <role> --trigger <set>` and
    hand the bundle path as the packet's source list instead of a file roster.
    Build roles add `--slice <SLICE-ID>` (slice-scoped, slice-named bundle).
    Evaluate the skill's trigger conditions and pass each that fires — a role's
-   Trigger column maps to manifest names: `security-auditor` → `security`,
-   `frontend-reviewer` → `ui`/`frontend`, `performance-reviewer` → `performance`.
+   Trigger column maps to the phase manifest's names: `security-auditor` →
+   `security`; at Review, `frontend-reviewer` → `ui` and `performance-reviewer` →
+   `performance`. Seal declares neither; those roles load their own standards.
    The `agents` dispatch contract needs no flag: `--role` auto-fires it
    (`auto=[agents]` in the output). The command prints `unselected=[...]`; an
    omitted applicable trigger is a gap, not a shortcut.
@@ -97,7 +98,7 @@ in `review.md`/`seal.md`.
   the same wave (`dispatch open ... --role code-reviewer.frontend --role
   code-reviewer.backend`; distinct handles — the sealed wave's handles and start
   stamps are the concurrency receipt). Build each bundle with `devrites-engine
-  context <slug> --phase <p> --role code-reviewer --trigger <set> --out
+  context --skills-root .agents/skills <slug> --phase <p> --role code-reviewer --trigger <set> --out
   ctx/<p>-code-reviewer.<lane>.bundle.md`; the default name collides. Each packet
   names its lane, the lane's path set (the whole diff stays readable for context),
   the triggered profile ([`review/README.md`](standards/review/README.md)), and the

package/pack/generated/codex/skills/devrites-lib/reference/reply-contract.md

@@ -10,7 +10,7 @@ When an active rite is the controlling caller, Intermediate `NEEDS_REPLAN` (the
 token for the workspace's `NEEDS REPLAN` readiness value), a nested phase `STOP`, and a
 routine Plan/Vet `Next step` are not eligible completion states. Autocomplete may
 use the shapes below only after its requested rest point or a shared genuine
-human/safety/access/exhausted-recovery stop is reached.
+human/safety/access/parked-recovery stop is reached.
 
 ```text
 Done: <result in one sentence>
@@ -104,23 +104,20 @@ Record: .devrites/archive/<slug>/ship.md
 Claims such as proved, reviewed, sealed, shipped, or complete must point to real
 output or an artifact. A NOT-RUN verification keeps its marker in `Evidence:` or `Open:`
 per [`core.md`](standards/core.md#gate-contract) § Gate contract.
-Use exactly one recommended next action except for
-terminal agent-owned technical exhaustion, which has no runnable action.
+Use exactly one recommended next action.
 
-Use that terminal case only per [`one-shot-actions.md`](standards/one-shot-actions.md):
-three recorded no-progress corrections of the exact fingerprint, or required evidence
-irretrievably absent with **no safe in-scope diagnostic-amplification seam**. A spent
-consumptive-action authorization plus a retained new fingerprint is not terminal. For a
-true terminal case use:
+Agent-owned recovery never ends with `Next: none`. Per the
+[retry contract](standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve),
+a spent strategy escalates inline and a fully escalated fingerprint parks while
+independent work continues; with **no safe in-scope diagnostic-amplification seam**,
+escalate or park instead of stopping. A spent consumptive-action authorization plus a
+retained new fingerprint keeps recovering. Once nothing runnable remains, use:
 
 ```text
-Stopped: Technical recovery exhausted
+Stopped: Technical recovery parked
 Blocking: <causal fingerprint and invariant>
-Attempts: <three failed approaches and decisive reproduction>
-No runnable recovery command: unchanged reinvocation remains blocked
-Next: none — requires new evidence or changed failure conditions
+Attempts: <each strategy, its class, and decisive reproduction>
+Completed: <independent work finished after parking>
+Next: <invoking command> — reopens parked fingerprints with fresh escalation
 Record: <artifact path>
 ```
-
-The terminal cursor marker is `Next: none` exactly as shown; a stored `Next step: none`
-names the same exhausted state.

package/pack/generated/codex/skills/devrites-lib/reference/standards/afk-hitl.md

@@ -136,9 +136,10 @@ every completed round (serial slice or parallel integrate)
 
 ## Unattended resource envelope
 
-AFK writer admission needs a bounded input queue, effective slice cap, and valid
-`max_agents`, `max_minutes`, and `max_review_queue`. Existing sentinels
-that declare writer admission but miss/malform these fail closed; cold resume keeps the
+Outside `$rite-autocomplete`, AFK writer admission needs a bounded input queue,
+effective slice cap, and valid `max_agents`, `max_minutes`, and `max_review_queue`.
+Existing sentinels that declare writer admission but miss/malform these fail closed
+(Autocomplete's sentinel omits them as unlimited; see below); cold resume keeps the
 state-owned slice counter. A leftover `expires_at` is ignored and never rewritten.
 Read-only watchers use equivalent native caps from [`loop-operations.md`](loop-operations.md).
 
@@ -304,7 +305,7 @@ Three shapes:
 ```
 $rite-resolve <qid> "<answer>"
 $rite-resolve --drop <qid> ["<reason>"]
-$rite-resolve --batch <path-to-yaml>
+$rite-resolve --batch <plain-text-file>
 ```
 
 `$rite-resolve` is the canonical writer for **async** resume: a gate that already paused and
@@ -349,7 +350,7 @@ access, safety and irreversible-action boundaries independently stop work.
   invariant + defect mechanism + minimal reproduction/decisive failure signal.
   DEC/DRIFT IDs, line numbers, wording and splitting one cause create no new budget.
 - **Cap no-progress retries:** three no-progress attempts per exact causal fingerprint
-  across wright/recovery. Only a correction whose narrow recheck leaves that cause
+  and strategy across wright/recovery. Only a correction whose narrow recheck leaves that cause
   open or reproduces its failure consumes an attempt.
   Closing a prior finding with discriminating evidence is progress: resolve it,
   do not charge. A new Critical or Important finding gets its own budget only for
@@ -383,11 +384,30 @@ access, safety and irreversible-action boundaries independently stop work.
 - **Reconcile terminal cursors.** Retained distinct Critical/Important evidence below
   cap resumes despite stale `Next step: none`; age/spent action authority is not exhaustion.
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"unattended root reaches current admitted Workflow Artifact work","action":"invoke classifier; execute returned route without wright/slice charge","return":"saved lifecycle phase/action; no intermediate reply"} -->
-- **Classify exhaustion:** human-owned contract/risk/access gaps open their gate.
-  Otherwise preserve reproduction/dead ends, set `Status: blocked` and
-  `Next step: none — technical recovery exhausted; requires new evidence or changed failure conditions`.
-  Emit no phase command, retry-permission question or `$rite-resolve`.
-  Reinvocation with unchanged cause stays blocked; it never resets the cap.
+- **Escalate a spent strategy; never stop on it.** Three no-progress attempts spend
+  the fingerprint's current *strategy*, not the work. Record that strategy and its
+  attempts under `## Dead ends`, then the controlling caller escalates inline in the
+  same invocation: re-diagnose from the reproduction and dead ends, take the first
+  class below that still has an untried strategy, run `$rite-plan repair` plus
+  narrow Vet for it, and resume with a fresh three-attempt budget. Classes, in order:
+  (1) **shared root cause**: fix the owner every failing path routes through and
+  enforce it across all callers instead of another local guard; (2) **boundary
+  redesign**: acceptance-preserving reslice or redesign of the failing seam;
+  (3) **diagnostic amplification**: add discriminating probes or fixtures, then
+  correct from that evidence. A recorded strategy, or a rewording of one, never
+  repeats. Escalation never weakens tests, validators or acceptance. Each
+  fingerprint gets at most three escalations per activation; record each in
+  `drift.md` with its class and strategy.
+- **Park, finish the rest, then stop once.** Human-owned contract/risk/access gaps
+  open their gate. Otherwise, with every escalation spent, mark the fingerprint
+  `parked` in `drift.md`, keep its reproduction and dead ends, and continue every
+  step that does not depend on it. Only when nothing runnable remains, set
+  `Status: blocked` and
+  `Next step: <invoking command> — technical recovery parked; reinvoke to reopen with fresh escalation`.
+  Emit no retry-permission question or `$rite-resolve`. A genuinely new
+  user-issued activation appends `reopened: <date>` to each parked fingerprint and
+  grants it three fresh escalations, counted from that line; wakes, compaction and
+  nested re-entry of the same run never reset counts.
 - **Resolve agent-owned questions first** from code/docs/decisions. Human communication
   is for blocked environment, handover, inaccessible critical information or missing
   credentials/permission—not writing, testing or review. Blocking/escalating/

package/pack/generated/codex/skills/devrites-lib/reference/standards/agents.md

@@ -41,7 +41,7 @@ Skills name exact fresh roles, omit native fields;
 hosts spawn/wait/deliver. Root MUST NOT advance/claim completion before admitting required results;
 running/orphaned/unavailable = `gap` — no root/generic substitute.
 Where a feature workspace exists, every fresh dispatch to a named `devrites-*`
-role — wave or solo — builds its read-set with `devrites-engine context <slug>
+role — wave or solo — builds its read-set with `devrites-engine context --skills-root .agents/skills <slug>
 --phase <p> --role <role>` and tracks the launch through `devrites-engine
 dispatch <slug> open|start|seal|return` (a solo dispatch is a wave of one;
 start/return auto-record metrics). Without a workspace the plain host dispatch

package/pack/generated/codex/skills/devrites-lib/reference/standards/ci-cd.md

@@ -46,7 +46,8 @@ Keep incomplete or risky behavior disabled behind a flag so deploy and release r
   gates precede exposure.
 - Feature flags separate exposure only when both states are tested, the off path preserves
   current behavior, and disabling the flag stops the risky effect. A flag cannot undo an
-  already destructive schema or data change.
+  already destructive schema or data change. Each flag names its removal trigger (full
+  rollout or kill); a flag past its trigger is dead code ([`deprecation.md`](deprecation.md)).
 
 ## Secrets
 

package/pack/generated/codex/skills/devrites-lib/reference/standards/code-review.md

@@ -33,7 +33,7 @@ If it does not, do not merge it.
    `devrites-engine check windows` flags the mechanical subset (suppressions,
    skip/focus, stubs, empty catch, deleted tests, stripped assertions) against
    `windows.md` waivers; loosened thresholds remain this sweep's judgment.
-3. **Correctness:** logic, edge cases, error paths, race conditions, wrong assumptions. For branching or boundary changes, run the [`edge-case trace`](edge-case-trace.md): relevant probe classes, fixed-set siblings, real wiring, negative intent, and deletion contracts with an evidence disposition.
+3. **Correctness:** logic, edge cases, error paths, race conditions, wrong assumptions. A join, match, upsert, or dedupe keyed on a mutable or non-unique attribute (email, name, title) instead of a stable ID is a finding ([`data-integrity.md`](data-integrity.md)). For branching or boundary changes, run the [`edge-case trace`](edge-case-trace.md): relevant probe classes, fixed-set siblings, real wiring, negative intent, and deletion contracts with an evidence disposition.
 4. **Readability:** names, function size, control flow, intent obvious without the author.
 5. **Architecture:** right seam, coupling/cohesion, fits existing patterns, no premature
    abstraction. Check how it fits the larger system as well as its local behavior.

package/pack/generated/codex/skills/devrites-lib/reference/standards/core.md

@@ -3,7 +3,7 @@
 > Applies when: always; every workspace rite reads it first.
 
 Each workspace rite reads core first. Its `loads:` manifest `always` set is its required
-read-set (`devrites-engine context <slug> --skill <name>` where a workspace exists, else
+read-set (`devrites-engine context --skills-root .agents/skills <slug> --skill <name>` where a workspace exists, else
 read the listed files); a trigger's files load when its named condition holds. Load any
 other rule file from `README.md` on demand.
 
@@ -87,7 +87,7 @@ Verdict discipline — no vacuous verdicts:
 
 ## Caller-owned technical backtracking
 
-When a rite invokes an earlier rite inline to repair an agent-owned technical gap, the original rite stays the controlling caller: a nested `STOP` is a phase boundary, not user-facing. The caller re-reads `state.md`, follows the return cursor/`next_action`, and resumes unless a human-owned, safety, access, budget, or exhausted-recovery stop is active ([Persistence before stopping](#persistence-before-stopping-handoff-discipline)). Derive `exhausted-recovery` from the fingerprint's recorded no-progress attempts, not from a stale `state.md` label; one consumed authorization doesn't exhaust offline recovery from retained new evidence.
+When a rite invokes an earlier rite inline to repair an agent-owned technical gap, the original rite stays the controlling caller: a nested `STOP` is a phase boundary, not user-facing. The caller re-reads `state.md`, follows the return cursor/`next_action`, and resumes unless a human-owned, safety, access, budget, or parked-recovery stop is active ([Persistence before stopping](#persistence-before-stopping-handoff-discipline)). Derive `parked-recovery` from the fingerprint's recorded no-progress attempts and escalations, not from a stale `state.md` label; one consumed authorization doesn't exhaust offline recovery from retained new evidence.
 
 An intermediate `Next step` is cold-resume metadata. Do not ask the human to
 copy routine `$rite-plan repair`, `$rite-vet`, `$rite-build`, or proof-rerun

package/pack/generated/codex/skills/devrites-lib/reference/standards/data-integrity.md

@@ -13,6 +13,10 @@ declared invariants.
 Name before planning implementation:
 
 - the authoritative owner of each fact and every writer;
+- the stable identity key of each record: joins, matches, upserts, and dedupes key on
+  an immutable unique ID, never on a mutable or non-unique attribute (email, name,
+  title, path); **failing case:** two accounts share an email, or a user changes it,
+  and the match merges or orphans their records;
 - uniqueness, referential, ordering, range, and lifecycle invariants;
 - tenant/subject partition keys and authorization boundary;
 - transaction boundary and externally visible commit point;

package/pack/generated/codex/skills/devrites-lib/reference/standards/developer-experience.md

@@ -77,6 +77,11 @@ touches:
   carries meaning by colour alone; a status only colour conveys is a finding.
 - **Docs accuracy:** examples are copy-pasteable and correct, the signature in the docs matches
   the code, and changed behavior updated its docs in the same change ([`documentation.md`](documentation.md)).
+- **Agent use:** a coding agent is now a common consumer. Can it complete the flow with no
+  human step: non-interactive flags or env for every prompt, machine-readable output and
+  distinct exit codes where scripts consume results, setup and auth that run headless, and
+  docs that give commands rather than "click here" UI steps? A step only a human can do is
+  friction; name it.
 
 ## Measure, don't assert
 

package/pack/generated/codex/skills/devrites-lib/reference/standards/loop-operations.md

@@ -38,6 +38,9 @@ Every unattended loop must name:
 2. **Objective:** one active workspace or one read-only external observation.
 3. **Cycle:** one documented skill invocation; no hidden command chain.
 4. **Evaluator:** the skill's existing readiness, proof, review, or watcher verdict.
+   A cycle may add proof but never loosens or retargets what judges it (a test, gate,
+   threshold, benchmark, or fixture) to pass; an unattended optimizer overfits whatever
+   it can touch. An objective with no verifiable evaluator is not loopable; it stays HITL.
 5. **Budget:** every applicable `.devrites/AFK` resource cap.
 6. **Checkpoint:** durable workspace/evidence update before the turn ends; a
    `devrites-engine check regression <slug> --update` ratchet after each durable