devrites 6.0.4 → 6.1.1

package/pack/generated/devin/skills/rite-build/reference/checkpoint-protocol.md

@@ -2,7 +2,7 @@
 
 HITL slices pause **pre-action** as a ranked **option set** before any code:
 
-- **Interactive:** `AskUserQuestion`; record to `questions.md`/`decisions.md`; clear gate;
+- **Interactive:** `ask_user_question`; record to `questions.md`/`decisions.md`; clear gate;
   continue in place (no `/rite-resolve` round-trip).
 - **Absent / AFK / notify-only:** persist open question + `Awaiting human`, notify, **stop**.
   Resume via `/rite-resolve` (or `--batch`).
@@ -14,7 +14,7 @@ observer.
 
 ### User-facing render: the option set
 
-Present as `AskUserQuestion` ranked **option set** ([`afk-hitl.md`](../../devrites-lib/reference/standards/afk-hitl.md)): 2–4 options,
+Present as `ask_user_question` ranked **option set** ([`afk-hitl.md`](../../devrites-lib/reference/standards/afk-hitl.md)): 2–4 options,
 recommended first + `(Recommended)`, dimension-tagged trade-offs, plus escape hatch.
 Header names slice + gate:
 

package/pack/generated/devin/skills/rite-build/reference/parallel-batch.md

@@ -182,11 +182,11 @@ Repair rejected work in place; never discard/rebuild while budget remains.
   exhaustion. Use plan path only if inventory proves the approach unsound.
 - Stop under the canonical retry/authority/resource conditions, or when evidence
   proves the approach unsound and no in-scope corrected decomposition exists.
-- Exhaustion is not abort: record one technical blocker (`Status: blocked`;
-  `Next step: none — technical recovery exhausted; requires new evidence or changed failure conditions`), preserve
-  lease/worktrees/branches, STOP — same fingerprint stays blocked on
-  reinvoke; new evidence resumes repair in place. Human-owned decisions use
-  the drift-guard question and wait.
+- A spent strategy is not abort: escalate per the canonical retry contract,
+  preserving lease/worktrees/branches; a fully escalated fingerprint parks and
+  the batch keeps its independent members. Repair resumes in place on
+  escalation or reinvocation. Human-owned decisions use the drift-guard
+  question and wait.
 
 ## Engine verbs
 
@@ -229,6 +229,6 @@ isolation cannot be established.
 
 ## Host
 
-Devin: N concurrent `run_subagent` wrights (`acceptEdits`, cwd=worktree). Codex: require
+Devin: `run_subagent` takes no worktree cwd, so force serial. Codex: require
 host-explicit concurrent worktree writers + native reconcile; else force serial.
 Never two writers in one worktree; never root-emulated concurrency.

package/pack/generated/devin/skills/rite-build/reference/wright-dispatch.md

@@ -11,6 +11,15 @@ Claude grants only the exact wright `acceptEdits`; Codex uses its workspace root
 the exact `:workspace` wright, and read-only specialists. Never bypass/substitute
 the wright or recreate an engine bridge.
 
+## Standalone correction
+
+`/rite-quick`, `/rite-dogfood`, and `/rite-pr-feedback` fixes have no `tasks.md`
+slice, so skip Prepare's `check slice`, `context --slice`, and the build `dispatch`
+wave. Give the wright an inline contract: goal, acceptance check, exact
+project-relative paths, and proof command. With an active workspace, `claim add`
+those paths first. On return, compare its file list and `git diff --name-only`
+with the paths; reject any extra path.
+
 ## Isolated writer-worktree pilot
 
 Use native isolation only when the current host exposes an explicit named-writer
@@ -55,7 +64,7 @@ worktrees stay forbidden.
 2. Include goal, verbatim acceptance, exclusions, context,
    `test-plan.md` proof commands, applicable standards, and the exact
    `WIP(<slug>):` subject (no slice id). Build the wright's read-set with
-   `devrites-engine context <slug> --phase build --role slice-wright --slice <SLICE-ID> --trigger <set>`
+   `devrites-engine context --skills-root .devin/skills <slug> --phase build --role slice-wright --slice <SLICE-ID> --trigger <set>`
    and hand it the bundle path (over-budget artifacts arrive as anchor indexes;
    read owning sections live). Evaluate each trigger condition and pass those
    that fire (TDD slice → `tdd`, AFK run → `afk`, UI work → `frontend`, …).
@@ -64,6 +73,8 @@ worktrees stay forbidden.
    topology/data/integration standard, include only the feature-specific owner/invariant,
    failure or partial-state case, recovery rule, and required proof from the vetted plan.
    Do not paste the whole standard or silently omit an applicable risk.
+   Quote every active `decisions.md` carry-forward constraint whose `Files:`
+   overlap the task paths (or that names no files).
    A new path requires a new bounded contract; the wright cannot widen the task.
 3. Record `git diff --name-only` before dispatch so unrelated work remains
    distinguishable. For an isolated pilot, also record committed base SHA and exact
@@ -141,3 +152,11 @@ TTL is crash recovery, not normal cleanup.
    escalation without the checked-assumption list (verified|falsified) is
    malformed; root sweeps the unchecked remainder per
    [`spec-drift-guard.md`](spec-drift-guard.md) before repair.
+6. **Learning edge.** A correction accepted with a confirmed cause (a review,
+   gate, or proof rejection plus its fix) becomes a carry-forward constraint so
+   later slices start where this one ended: append one line under
+   `decisions.md` `## Carry-forward constraints` —
+   `- <rule> — from <SLICE-ID> (<evidence ref>); Files: <paths>`. Record the
+   derived rule, not the output, at the scope its evidence supports: "this
+   button is blue" never becomes "buttons are blue". Never edit `tasks.md` mid-build (it is a
+   readiness input). **Failing case:** slice 3 repeats a defect slice 2 fixed.

package/pack/generated/devin/skills/rite-clarify/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","rite-clarify/reference/decision-coverage.md","rite-clarify/reference/anti-patterns.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md"],"workspaceByRole":{"evidence-scout":["brief.md","spec.md","state.md","questions.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase clarify` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase clarify` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-clarify: resolve product decisions

package/pack/generated/devin/skills/rite-converge/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/spec-grammar.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/tooling.md","devrites-lib/reference/standards/testing.md","rite-converge/reference/convergence-assessment.md","rite-converge/reference/anti-patterns.md","rite-build/reference/spec-drift-guard.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"principles":["devrites-lib/reference/standards/principles.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md"],"workspaceByRole":{"evidence-scout":["spec.md","plan.md","tasks.md","state.md","evidence.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase converge` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase converge` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-converge: compare live code with intent
@@ -100,9 +100,10 @@ Pull on demand:
    Produces. A principle violated in the current code is its own top-severity gap.
    Dispatch up to three independent inventory partitions to `devrites-evidence-scout` on the
    same live-code snapshot — build each scout's read-set once with
-   `devrites-engine context <slug> --phase converge --role evidence-scout` and hand it the
-   bundle path; run the wave through
-   `devrites-engine dispatch <slug> open|start|seal|return` (per
+   `devrites-engine context --skills-root .devin/skills <slug> --phase converge --role evidence-scout --out
+   ctx/converge-evidence-scout.p<n>.bundle.md` and hand it the bundle path; run the wave
+   through `devrites-engine dispatch <slug> open|start|seal|return` with one lane label
+   per partition (`--role evidence-scout.p1 --role evidence-scout.p2 ...`, per
    [`parallel-dispatch.md`](../devrites-lib/reference/parallel-dispatch.md)), which
    auto-records dispatch/return metrics. Await their
    dossiers, then reconcile the cited facts in the root

package/pack/generated/devin/skills/rite-customize/SKILL.md

@@ -6,7 +6,7 @@ triggers:
   - user
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"triggers":{"security":["devrites-lib/reference/standards/security.md"]},"workspace":[]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-customize` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-customize` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-customize: native project customization
 

package/pack/generated/devin/skills/rite-define/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/spec-grammar.md","rite-define/reference/plan-template.md","rite-define/reference/gates.md","rite-define/reference/anti-patterns.md","rite-plan/reference/slicing.md","rite-plan/reference/task-breakdown.md","rite-spec/reference/acceptance-criteria.md","rite-spec/reference/state-workspace.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"agents":["devrites-lib/reference/standards/agents.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"frontend":["devrites-frontend-craft/reference/fullstack.md"],"principles":["devrites-lib/reference/standards/principles.md"],"visual":["devrites-lib/reference/visual-playbooks/index.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","strategy.md","design-brief.md","references.md"],"workspaceByRole":{"plan-drafter":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","architecture.md","strategy.md","design-brief.md","references.md","state.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase define` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase define` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-define: plan from the spec
@@ -105,6 +105,8 @@ Pull these via `Read` when shaping the plan:
    capability end to end; first is the thinnest useful path, ordered by dependency then
    risk. Apply the slice-count and broad-refactor rules above plus
    [`slicing.md`](../rite-plan/reference/slicing.md) and [`task-breakdown.md`](../rite-plan/reference/task-breakdown.md).
+   Run `devrites-engine recall --paths <files likely touched>`; fold each relevant prior
+   decision, carry-forward constraint, or finding into that slice's `Prior-slice learnings`.
    Mark per slice: **Frontend craft required**
    and **Browser proof required** (UI), and whether it's **fullstack** (FE+BE → contract
    first, see [`fullstack.md`](../devrites-frontend-craft/reference/fullstack.md)). **For UI slices, name which
@@ -168,8 +170,7 @@ Pull these via `Read` when shaping the plan:
    `Plan sanity` (slice count + riskiest boundary/gate), `Expected build interruptions`
    (`none` or only justified action-time gates), and `Build exactly this?` (yes → approve;
    no → `/rite-plan revise`). When the human confirms the plan, write `Plan approved: <iso>` to
-   `state.md` (see [state-workspace](../rite-spec/reference/state-workspace.md)); `/rite-build`
-   checks this exists before building.
+   `state.md` (see [state-workspace](../rite-spec/reference/state-workspace.md)).
 
 ## tasks.md slice format
 

package/pack/generated/devin/skills/rite-doctor/SKILL.md

@@ -4,7 +4,7 @@ description: Check DevRites install, installed pack, or host configuration. Not
 argument-hint: ""
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"workspace":["state.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-doctor` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-doctor` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-doctor: DevRites diagnostics
 
@@ -26,12 +26,18 @@ Read-only: never repair files, advance a feature, or diagnose the application.
    For enabled surfaces, require the canonical Claude skills/settings and the
    generated Codex skills, exact agent profiles, config, and AGENTS bridge.
    Cross-check the loaded/effective host configuration when the host exposes it:
-   Claude root plan mode with only `devrites-slice-wright` writable; Codex root
-   `devrites-orchestrator`, wright `:workspace`, all reviewers `:read-only`.
-   Also allowed as writers: `fast-builder` (`acceptEdits` / `:workspace`) and the
-   `overhaul-*` agents (every tool); the other `fast-*` roles are read-only.
+   Claude read-only roles keep a tools allowlist without Edit/Write plus
+   `permissionMode: plan`, which Claude honors only while the parent is not in
+   acceptEdits/auto/bypass — the guarantee is tools + instructions, the mode is
+   best-effort; only `devrites-slice-wright` (`acceptEdits`) writes in the
+   lifecycle. Codex root `devrites-orchestrator`, wright `:workspace`, all
+   reviewers `:read-only`. Also allowed as writers: `fast-builder` (`acceptEdits`
+   / `:workspace`) and the `overhaul-*` agents (every tool; `overhaul-implementer`
+   `acceptEdits`); the other `fast-*` roles are read-only.
    File presence without effective loading is `WARN`; wrong permissions or a
-   missing required profile is `FAIL`.
+   missing required profile is `FAIL`. A project or local Claude
+   `permissions.defaultMode: plan` blocks the root's `.devrites` writes:
+   `FAIL`, remediation: remove it.
 4. **Inspect workspace topology.** Read `.devrites/ACTIVE` if present. An empty
    cursor is `OK` (no active feature). Otherwise require one safe slug, a
    contained regular `.devrites/work/<slug>/state.md`, and no symlink in the

package/pack/generated/devin/skills/rite-dogfood/SKILL.md

@@ -6,7 +6,7 @@ triggers:
   - user
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-frontend-craft/reference/quality-standards.md","devrites-lib/reference/reply-contract.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"testing":["devrites-lib/reference/standards/testing.md"],"tooling":["devrites-lib/reference/standards/tooling.md"]},"workspace":["state.md","questions.md","dogfood.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-dogfood` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-dogfood` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-dogfood: diff-scoped browser QA
 
@@ -26,7 +26,7 @@ Step 0: Read `.devin/skills/devrites-lib/reference/standards/core.md`, then [`to
 2. **Map changed journeys.** Read the diff and relevant routes/components. Write or update `.devrites/work/<slug>/dogfood.md` with Mermaid flowcharts for each touched user journey. Completion: every user-visible changed surface appears in at least one flow or is marked non-browser-testable.
 3. **Build matrix.** Turn flow nodes and branches into scenarios: happy, error, empty, permission, responsive, accessibility basics, and persona paper cuts. Completion: every flow branch has a scenario row.
 4. **Run browser.** Start/reuse the dev server (honor `--port N` when given), visit each route, capture screenshot/console/network notes, and mark each scenario `Pass`, `Fail`, `Fixed`, `Blocked (human verify)`, or `Blocked (human decision)`.
-5. **Safe fix loop.** For `Fail` or sharp paper cut: fix only if obvious and contained; add a regression test or record why a replay/screenshot is the only meaningful check; re-run the scenario. Otherwise record the decision for a human.
+5. **Safe fix loop.** For `Fail` or sharp paper cut: fix only if obvious and contained; add a regression test or record why a replay/screenshot is the only meaningful check; re-run the scenario. Otherwise record the decision for a human. The root never edits source/tests: each fix goes to exact `devrites-slice-wright` with an exact-path contract per [wright-dispatch.md § Standalone correction](../rite-build/reference/wright-dispatch.md#standalone-correction); reject any returned path outside it.
 6. **Finalize.** Run the relevant test command once, update `dogfood.md`, and add follow-ups to `questions.md` only for real human decisions.
 
 ## Output

package/pack/generated/devin/skills/rite-explain/SKILL.md

@@ -6,7 +6,7 @@ triggers:
   - user
 ---
 <!-- loads: {"always":["rite-explain/reference/intake.md"],"triggers":{"repo":["devrites-lib/reference/standards/tooling.md"],"style":["devrites-lib/reference/standards/prose-style.md"],"principles":["devrites-lib/reference/standards/principles.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-explain` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-explain` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # /rite-explain: the human half of the learning loop
 
@@ -47,7 +47,7 @@ composition. Getting the shape wrong wastes the whole artifact.
 mechanics per shape. Do not improvise classification from this file; the detail lives there so this
 one stays legible, and skipping it means guessing the shape.
 
-**Bare invocation** (no input): ask **one** blocking question (`AskUserQuestion` when the harness
+**Bare invocation** (no input): ask **one** blocking question (`ask_user_question` when the harness
 has it, else the harness's blocking-question tool: `request_user_input` on Codex; no interactive
 question tool → render the ranked options as a plain numbered list and end the turn
 (afk-hitl.md)). "What should I
@@ -116,7 +116,7 @@ Otherwise write one dense artifact at `$RUN_DIR/explainer.md`. It must **teach**
 ### 4. Offer the check-in (optional, active recall)
 
 Retention comes from *retrieving*, not re-reading. After the explainer, offer one check-in via the
-harness's blocking-question tool (`AskUserQuestion`, or `request_user_input` on Codex; no
+harness's blocking-question tool (`ask_user_question`, or `request_user_input` on Codex; no
 interactive question tool → render the ranked options as a plain numbered list and end the turn
 (afk-hitl.md)): the user
 answers **first**, then you confirm or correct. The shape sets the

package/pack/generated/devin/skills/rite-explain/reference/intake.md

@@ -43,7 +43,7 @@ use the diff shape with walkthrough composition.
 ## Check-in mechanics
 
 Retention comes from retrieval. Offer exactly one check-in via the harness's blocking-question tool
-(`AskUserQuestion`, or `request_user_input` on Codex; no interactive question tool → render the
+(`ask_user_question`, or `request_user_input` on Codex; no interactive question tool → render the
 ranked options as a plain numbered list and end the turn (afk-hitl.md)); the user answers **before** any reveal. Grade honestly: a wrong prediction that gets corrected teaches more than a
 confirmed one, so do not lead the witness.
 

package/pack/generated/devin/skills/rite-fast/SKILL.md

@@ -7,7 +7,7 @@ triggers:
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/definition-of-done.md","devrites-lib/reference/standards/elicitation.md","devrites-lib/reference/standards/spec-grammar.md","rite-fast/reference/artifacts.md","rite-fast/reference/check-and-triage.md"],"triggers":{"risk":["devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/security.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":["spec.md","plan.md","evidence.md"]} -->
-> Read-set manifest: `devrites-engine context <slug> --phase fast` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase fast` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # /rite-fast: shortened lane for mid-size work
 
@@ -49,10 +49,10 @@ proof) and drops the per-slice ceremony. It stands outside the engine lifecycle:
 
 | Role | Agent | Mode |
 | --- | --- | --- |
-| Planner: repo facts, draft spec and plan, ranked questions | [`fast-planner`](.devin/agents/fast-planner.md) | read-only |
-| Builder: slices and accepted fixes | [`fast-builder`](.devin/agents/fast-builder.md) | write-capable, exact paths |
-| Completeness checker | [`fast-checker`](.devin/agents/fast-checker.md) | read-only |
-| Critic: review and polish in one pass | [`fast-critic`](.devin/agents/fast-critic.md) | read-only |
+| Planner: repo facts, draft spec and plan, ranked questions | [`fast-planner`](../../agents/fast-planner.md) | read-only |
+| Builder: slices and accepted fixes | [`fast-builder`](../../agents/fast-builder.md) | write-capable, exact paths |
+| Completeness checker | [`fast-checker`](../../agents/fast-checker.md) | read-only |
+| Critic: review and polish in one pass | [`fast-critic`](../../agents/fast-critic.md) | read-only |
 
 Dispatch each role as its named agent in a fresh context with a packet that names
 the slug, the workspace paths, and the exact task. If the host cannot dispatch named
@@ -69,7 +69,9 @@ installed and no fresh context is available, stop with `Stopped: fast-* agents m
    record `unproven: no commands` and continue. PROVE will report it.
 3. Pick a short kebab-case slug from the task. If the argument names an existing
    `.devrites/work/<slug>/plan.md` with `Lane: fast`, **resume**: read the ledger and
-   continue at the first phase or slice that is not complete.
+   continue at the first phase or slice that is not complete. If `.devrites/work/<slug>/`
+   exists without `Lane: fast`, or `.devrites/archive/<slug>/` exists, pick a new slug;
+   if the user named that slug, stop instead — never overwrite another workspace.
 
 ## 1. Shape: spec, plan, questions
 

package/pack/generated/devin/skills/rite-frame/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[task to frame | diff to audit]"
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","rite-frame/reference/failure-modes.md"],"triggers":{"principles":["devrites-lib/reference/standards/principles.md"],"simplify":["devrites-lib/reference/standards/coding-style.md","devrites-lib/reference/standards/patterns.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":[]} -->
-> Read-set manifest: `devrites-engine context <slug> --phase frame` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase frame` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-frame: frame the goal, audit the diff

package/pack/generated/devin/skills/rite-handoff/SKILL.md

@@ -6,7 +6,7 @@ triggers:
   - user
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","rite-handoff/reference/handoff-template.md","devrites-lib/reference/reply-contract.md"],"triggers":{"hygiene":["devrites-lib/reference/standards/context-hygiene.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-handoff` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-handoff` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # /rite-handoff: chat-only context, into a fresh-agent doc
 
@@ -48,8 +48,9 @@ For each of these, write the content into its **canonical home** first, then mer
 - **Assumption** about behaviour / API / user intent → append to `assumptions.md`.
 - **Drift event raised but not fully resolved** → update `drift.md` with the current
   resolution status (open / asked-user / repaired).
-- **Files modified in chat not yet in `touched-files.md`** → append to
-  `touched-files.md`.
+- **Files modified in chat not yet in `touched-files.md`** → no recorded provenance, so
+  record them as drift in `drift.md` (or a `questions.md` entry); never append them to
+  `touched-files.md`, the candidate manifest Ship stages.
 
 The handoff doc itself then says "synced N entries into decisions.md", not the entries
 themselves. The workspace is the canonical store; the handoff is the chat-only delta.

package/pack/generated/devin/skills/rite-learn/SKILL.md

@@ -6,7 +6,7 @@ triggers:
   - user
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/documentation.md","devrites-lib/reference/standards/tooling.md"],"workspace":["state.md","decisions.md","drift.md","evidence.md","review.md","seal.md","questions.md"],"workspaceByRole":{"retrospector":["state.md","decisions.md","drift.md","evidence.md","review.md","seal.md","questions.md"]},"triggers":{"agents":["devrites-lib/reference/standards/agents.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-learn` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-learn` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-learn: review durable lessons
 
@@ -29,7 +29,7 @@ of one authority; it cannot promote a rule alone.
    A missing, failed, timed-out, or malformed result reports `Candidate: NOT-RUN
    (unavailable: <reason>)` as a gap, never `Candidate: none`; an unavailable role stops
    for HITL per [`agents.md`](../devrites-lib/reference/standards/agents.md) (trigger `agents`).
-3. Keep corrections repeated in two features, a judgement call made twice, or a defect class seen twice; drop one-off preferences, task-specific detail, generic advice.
+3. Keep corrections repeated in two features (a `## Carry-forward constraints` rule recurring in two archived `decisions.md` qualifies), a judgement call made twice, or a defect class seen twice; drop one-off preferences, task-specific detail, generic advice.
    Broad mode also proposes **retirements**: a rule found via a `rite-learn: accepted`
    marker whose cited failing case or owner no longer exists in live source, whose
    review-by date passed unverified, or that is a model-default no-op. Zero is valid but

package/pack/generated/devin/skills/rite-plan/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[mode: decompose|reslice|repair|reorder|split|unblock|course-cor
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/acceptance-preserving-reslice.md","devrites-lib/reference/standards/tooling.md","devrites-lib/reference/standards/agents.md","rite-plan/reference/slicing.md","rite-plan/reference/replan-and-repair.md","rite-plan/reference/dependency-graph.md","rite-plan/reference/task-breakdown.md","rite-plan/reference/anti-patterns.md","rite-define/reference/plan-template.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"assumption-delta":["devrites-lib/reference/standards/assumption-checkpoints.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","drift.md"],"workspaceByRole":{"plan-drafter":["brief.md","spec.md","plan.md","tasks.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","architecture.md","state.md","drift.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase plan` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase plan` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-plan: (re)plan an active feature
@@ -176,7 +176,7 @@ Before classifying any Reslice, read `.devin/skills/devrites-lib/reference/stand
 
 When invoked inline by a controlling rite, return the completed Plan checkpoint
 to that caller so it can invoke Vet immediately. The phase boundary is not a
-user-facing stop unless a genuine HITL, safety/access, or exhausted-recovery
+user-facing stop unless a genuine HITL, safety/access, or parked-recovery
 condition was recorded.
 
 When invoked directly with no controlling caller and a planning artifact

package/pack/generated/devin/skills/rite-plan/reference/replan-and-repair.md

@@ -29,6 +29,8 @@ A drift event stopped the build. Steps:
 1. Read the `drift.md` entries and their classifications. Fold EVERY open entry
    and accepted finding for the affected artifacts in ONE pass, never serially.
 2. If the user answered a drift question, encode that decision in `decisions.md`.
+   Fold each `decisions.md` carry-forward constraint into `Prior-slice learnings`
+   of the remaining slices it affects.
 3. Update `spec.md` (only the affected sections) and `plan.md`/`tasks.md` to match
    reality. Adjust acceptance criteria if they were wrong.
    **Write the pointer, not the history.** Name the findings a fold closes by ID, one line

package/pack/generated/devin/skills/rite-plan/reference/slicing.md

@@ -165,4 +165,6 @@ while pivoting is still cheap.
 
 ## Slice independence
 Order by dependency, but minimize coupling. A slice that needs three other slices first
-is a smell: look for a thinner cut that stands alone.
+is a smell: look for a thinner cut that stands alone. An edge exists only when this slice
+reads something the other produces: write it as `SLICE-001 (via <interface>)`. If you
+cannot name what crosses, drop the edge; a shallow, wide graph runs in parallel.

package/pack/generated/devin/skills/rite-polish/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[target | bolder | quieter | distill | harden | normalize-only]"
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/candidate-integrity.md","rite-polish/reference/code.md","rite-polish/reference/anti-patterns.md","rite-polish/reference/anti-ai-slop.md","rite-polish/reference/harden-checklist.md","rite-polish/reference/ledger.md","rite-build/reference/checkpoint.md"],"triggers":{"adr":["rite-polish/reference/adr-promotion.md"],"agents":["devrites-lib/reference/standards/agents.md"],"backend":["rite-polish/reference/backend-polish.md"],"coding":["devrites-lib/reference/standards/coding-style.md","devrites-lib/reference/standards/duplicate-code.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"ui":["rite-polish/reference/ui.md","rite-polish/reference/design-memory.md","rite-polish/reference/design-system-discovery.md","rite-polish/reference/browser-polish-evidence.md","devrites-lib/reference/standards/browser-proof-checklist.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","design-brief.md","browser-evidence.md","polish-report.md"],"workspaceByRole":{"slice-wright":["spec.md","architecture.md","plan.md","tasks.md","test-plan.md","state.md","decisions.md","design-brief.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase polish` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase polish` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-polish: finish before review
@@ -78,7 +78,7 @@ Incomplete comparison is **not** agreement. Record axis deltas in `polish-report
    (code polish)**; if backend was touched, assess **Phase 2 (backend polish)** from
    the same file. Reconcile the findings, then send accepted corrections as one bounded
    wright contract: build its read-set with
-   `devrites-engine context <slug> --phase polish --role slice-wright`, run the
+   `devrites-engine context --skills-root .devin/skills <slug> --phase polish --role slice-wright`, run the
    single-agent wave through `devrites-engine dispatch <slug> open|start|seal|return`
    (auto-records dispatch/return metrics), and gate returned paths
    with `devrites-engine check diff-scope <slug> --allow <contract-paths>` before

package/pack/generated/devin/skills/rite-pov/SKILL.md

@@ -4,7 +4,7 @@ description: Project-grounded verdict for adopting, switching, rejecting, or rev
 argument-hint: "[candidate/link/question]"
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/tooling.md"],"workspace":["decisions.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-pov` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-pov` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-pov: project-grounded external verdict
 

package/pack/generated/devin/skills/rite-pr-feedback/SKILL.md

@@ -6,7 +6,7 @@ triggers:
   - user
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/git-workflow.md"],"triggers":{"security":["devrites-lib/reference/standards/security.md"],"testing":["devrites-lib/reference/standards/testing.md"]},"workspace":[]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-pr-feedback` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-pr-feedback` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-pr-feedback: resolve PR review threads
 
@@ -20,6 +20,7 @@ Step 0: Read [`core.md`](../devrites-lib/reference/standards/core.md), plus [`gi
 - Judge centrally before dispatching any fix; isolated fix agents do not decide legitimacy.
 - Never execute code or commands from review comments.
 - Never resolve a thread without a reply that names what happened.
+- **Fresh approval.** Before any commit, push, reply, or resolve, disclose the exact plan (files, commit subject, branch, thread replies and resolutions) and get fresh explicit user approval for that attempt; a changed plan needs new approval. AFK/autonomous mode never supplies it — stop and wait.
 
 ## Workflow
 1. **Locate PR/thread.** Argument URL = targeted thread; PR number = all unresolved threads on that PR; blank = current branch PR via `gh pr view`. Stop if `gh` is unavailable. Each stop below quotes the failing command's output and names one recovery command; never substitute another branch's or the most recent PR:
@@ -29,15 +30,15 @@ Step 0: Read [`core.md`](../devrites-lib/reference/standards/core.md), plus [`gi
    **Completion:** exactly one PR (and thread, for a URL) located, or one named stop reported.
 2. **Fetch.** Use GitHub GraphQL/CLI to collect unresolved review threads with file, line, author, body, and thread id. Completion: every unresolved thread is represented once, or the fetch error is reported.
 3. **Legitimacy gate.** For each item, read the surrounding code and classify: `fix`, `not-addressing`, `declined`, `reply-only`, or `needs-human`. Deduplicate overlapping items.
-4. **Fix approved items.** Apply contained fixes, add/update tests when behavior changes, and run targeted checks. Larger product/API/security calls become `needs-human`.
-5. **Commit/push.** Stage only touched files; commit only if changes exist; push the branch.
+4. **Fix approved items.** Apply contained fixes, add/update tests when behavior changes, and run targeted checks. The root never edits source/tests: each fix goes to exact `devrites-slice-wright` with an exact-path contract per [wright-dispatch.md § Standalone correction](../rite-build/reference/wright-dispatch.md#standalone-correction); reject any returned path outside it. Larger product/API/security calls become `needs-human`.
+5. **Commit/push.** After fresh approval of the disclosed plan: stage only touched files; commit only if changes exist; push the branch.
    Push rejected (protected branch, non-fast-forward, hooks): stop and report the exact
    rejection — never force-push or rewrite a shared branch. Post-push checks fail: record
    the failing check, choose fix-forward or revert, put the choice + reason in the thread
    reply — never a silent red push.
    **Completion:** committed/pushed with SHA evidence and green checks, or no commit (empty
    diff), or the push failure reported verbatim.
-6. **Reply and resolve.** Reply to every thread with outcome and evidence. Resolve only `fix`, `not-addressing`, `declined`, and `reply-only`; leave `needs-human` open.
+6. **Reply and resolve.** Under the approved plan, reply to every thread with outcome and evidence. Resolve only `fix`, `not-addressing`, `declined`, and `reply-only`; leave `needs-human` open.
    **Completion:** every thread has one recorded outcome and only permitted terminal outcomes are resolved.
 7. **Verify.** Fetch unresolved threads again and report remaining intentional opens.
 

package/pack/generated/devin/skills/rite-pressure-test/SKILL.md

@@ -4,7 +4,7 @@ description: "Pressure-test a rough/vague idea: ideate, explore 3-5 approaches,
 argument-hint: "[rough idea or plan to stress-test]"
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/intent-map.md"],"workspace":["decisions.md","questions.md"]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-pressure-test` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-pressure-test` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-pressure-test: diverge then converge
 
@@ -39,9 +39,11 @@ If the hinge is an uncertain material fact, freeze at most three questions for
 `unavailable`, never support. Record claim, support, strongest contrary evidence, and
 `supported | assumption | refuted`. Refutation changes the recommendation; an assumption
 advances only when non-decisive with bounded downside. Weak/conflicting decisive evidence
-returns **Hold** with the resolving evidence, never `/rite-spec`. Persist a Hold as an open
-`questions.md` entry (`gate: blocking`, the premise and resolving evidence) in the active or
-provisional-slug workspace before stopping; a reply-only Hold is lost. Tie-breaker:
+returns **Hold** with the resolving evidence, never `/rite-spec`. Persist a Hold before
+stopping; a reply-only Hold is lost. In an active workspace (has `state.md`), append an open
+`questions.md` entry (`gate: blocking`, the premise and resolving evidence). Otherwise add a
+`Hold:` line (premise + resolving evidence) under `Not yet specified` in the provisional
+slug's `investigation-map.md`; `/rite-spec` carries it into `questions.md` on adoption. Tie-breaker:
 see [`intent-map.md`](../devrites-lib/reference/intent-map.md) (`rite-pressure-test`
 vs `rite-spec`). Do not research preferences
 or reversible implementation choices.
@@ -68,6 +70,6 @@ Changed: workspace only
 Evidence: options compared <n>; recommendation <option>; hinge <condition>; premises <supported/assumption/refuted + sources>
 Open: <none | unresolved premise and resolving evidence>
 Next: <when supported: /rite-spec <feature>; when Hold: none — requires <resolving evidence>; when Kill: none — not building: <reason>>
-Record: <investigation-map.md path | questions.md id (Hold) | not applicable>
+Record: <investigation-map.md path (incl. provisional Hold) | questions.md id (Hold) | not applicable>
 ↻ Hygiene: /clear before starting the lifecycle
 ```

package/pack/generated/devin/skills/rite-prototype/SKILL.md

@@ -6,7 +6,7 @@ triggers:
   - user
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"workspace":[]} -->
-> Read-set manifest: `devrites-engine context [slug] --skill rite-prototype` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill rite-prototype` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # /rite-prototype: answer one question with throwaway code
 

package/pack/generated/devin/skills/rite-prove/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/candidate-integrity.md","devrites-lib/reference/standards/testing.md","devrites-lib/reference/standards/spec-grammar.md","devrites-lib/reference/standards/test-proof-checklist.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/gates.md","devrites-lib/reference/standards/verification-methods.md","rite-prove/reference/acceptance-proof.md","rite-prove/reference/proof-ladder.md","rite-prove/reference/failure-triage.md","rite-prove/reference/test-command-discovery.md","rite-prove/reference/anti-patterns.md","rite-build/reference/checkpoint.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"browser":["devrites-lib/reference/standards/browser-proof-checklist.md","rite-prove/reference/browser-proof.md"],"devex":["devrites-lib/reference/standards/developer-experience.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"observability":["devrites-lib/reference/standards/observability.md"],"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"performance":["devrites-lib/reference/standards/performance.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md","touched-files.md","browser-evidence.md"],"workspaceByRole":{"proof-runner":["spec.md","test-plan.md","tasks.md","gates.md","evidence.md","touched-files.md","browser-evidence.md","state.md"],"spec-reviewer":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","state.md"]}} -->
-> Read-set manifest: `devrites-engine context <slug> --phase prove` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase prove` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-prove: prove the completed feature
@@ -36,8 +36,10 @@ TTHW, and exact signal-bearing errors; never assert DX (trigger `devex`).
   validates it. Only the bounded wright fixes product source/tests.
 - **Prove remains the controlling caller** during technical backtracking. Save
   its cursor; run Plan repair, Recovery Vet, remediation, and re-proof inline;
-  consume nested boundaries; resume the failed rung. Recovery exhausts after
-  three no-progress attempts on the exact same fingerprint. Closing one or exposing a distinct
+  consume nested boundaries; resume the failed rung. A strategy is spent after
+  three no-progress attempts on the exact same fingerprint; escalate it per the
+  [retry contract](../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve)
+  instead of stopping. Closing one or exposing a distinct
   Critical/Important invariant is progress, not a reason to hand work off.
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"Prove consumes installed Workflow Artifact or CLEANED rerun","action":"VERIFY_EXISTING or admitted proof path ending PROVE_AND_RETURN","return":"saved Prove cursor; stop before real action"} -->
 ## Released-workspace refresh

package/pack/generated/devin/skills/rite-prove/reference/failure-triage.md

@@ -47,6 +47,7 @@ loop to `devrites-debug-recovery`.
 - Three no-progress attempts on the exact same causal fingerprint consume the
   shared recovery cap. A recheck that closes the reproduction is progress; a
   different evidenced Critical/Important invariant gets its own fingerprint.
-  Preserve the reproduction and dead ends, then stop once as a technical blocker.
+  Preserve the reproduction and dead ends, then escalate or park per the
+  [retry contract](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve).
   Ask only when the remaining decision is human-owned.
 - A failure you can't fix in scope is a recorded **blocker**, not a silent skip.

package/pack/generated/devin/skills/rite-quick/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "<what to change>"
 ---
 
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/definition-of-done.md","devrites-lib/reference/orchestration-profiles.md"],"triggers":{"coding":["devrites-lib/reference/standards/coding-style.md"],"testing":["devrites-lib/reference/standards/testing.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"security":["devrites-lib/reference/standards/security.md"],"principles":["devrites-lib/reference/standards/principles.md"],"afk":["devrites-lib/reference/standards/afk-hitl.md"]},"workspace":["state.md"]} -->
-> Read-set manifest: `devrites-engine context <slug> --phase quick` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --phase quick` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
 # /rite-quick: express lane for small changes
@@ -63,7 +63,11 @@ Load this lane's conditional standards when needed:
 3. **Build with TDD.** Failing test first when behavior changes (see it fail for the right
    reason) → smallest complete change in the **project's idiom** (reuse before you write,
    anti-AI-slop) → cover every touched behavior / interactive element with a **real**
-   assertion. UI → check the states + a browser glance.
+   assertion. UI → check the states + a browser glance. The root never edits source/tests:
+   dispatch exact `devrites-slice-wright` with an exact-path contract per
+   [wright-dispatch.md § Standalone correction](../rite-build/reference/wright-dispatch.md#standalone-correction) and the
+   [source-writing boundary](../devrites-lib/reference/standards/agents.md#source-writing-boundary);
+   reject any returned path outside it.
 4. **Prove (scoped).** Run the **targeted** tests + typecheck / lint for what changed (not
    the whole suite) → green. Record the command + output — resolve the project's real
    typecheck/lint commands with `devrites-engine detect commands` rather than guessing.
@@ -73,10 +77,11 @@ Load this lane's conditional standards when needed:
    fail is not proof.
 5. **Review-lite + ship.** Self-review the diff for correctness, scope, and idiom. If
    `.devrites/principles.md` exists, confirm that no declared invariant is broken. This is
-   `/rite-frame`'s AUDIT pass: one pass, no subagent fan-out. Show the diff, then on the user's confirm commit it
-   (Conventional Commits, atomic), or hand to `/rite-ship` only when the change belongs to the active
-   feature's candidate; otherwise commit standalone. **Never push
-   without the user asking.**
+   `/rite-frame`'s AUDIT pass: one pass, no subagent fan-out. Show the diff. A change that belongs to the
+   active feature's candidate is not committed here: append its exact paths to
+   `touched-files.md`, then route to `/rite-prove` →
+   `/rite-review` → `/rite-seal` (`/rite-ship` needs Seal GO). Otherwise, on the
+   user's confirm, commit it standalone (Conventional Commits, atomic). **Never push without the user asking.**
 
 ## Escalation (mid-flight): the Spec Drift Guard still applies
 If the "small" change turns out to be not small: a second slice appears, a real design