devrites 6.0.4 → 6.1.1

package/pack/generated/omp/skills/devrites-lib/reference/standards/developer-experience.md

@@ -11,7 +11,7 @@ have to read the source to learn. Un-tested DX is a claim, the same way un-run c
 
 This rule is the developer-facing counterpart to [`performance.md`](performance.md): perf says
 *measure the speed before you assert it*; this says *measure the experience before you assert
-it*. It pairs with the [`devrites-api-interface`](../../../devrites-api-interface/SKILL.md)
+it*. It pairs with the [`devrites-api-interface`](skill://devrites-api-interface/SKILL.md)
 skill (which shapes the contract). This rule **proves** the shape is usable.
 
 ## Scope: when this applies
@@ -28,7 +28,7 @@ It applies when the diff changes a **developer-facing surface**:
 - the **getting-started path**. README, install steps, quickstart, the first-run docs.
 
 Skip it for pure-internal refactors, private helpers, app-only UI (that's
-[`devrites-frontend-craft`](../../../devrites-frontend-craft/SKILL.md) /
+[`devrites-frontend-craft`](skill://devrites-frontend-craft/SKILL.md) /
 `devrites-frontend-reviewer`), docs-only typo fixes, and config that no external consumer
 touches. Don't DX-review a change with no developer-facing surface: the same scope discipline
 as the rest of the conditional rules. End-user UX is a different axis; this rule is about the
@@ -77,6 +77,11 @@ touches:
   carries meaning by colour alone; a status only colour conveys is a finding.
 - **Docs accuracy:** examples are copy-pasteable and correct, the signature in the docs matches
   the code, and changed behavior updated its docs in the same change ([`documentation.md`](documentation.md)).
+- **Agent use:** a coding agent is now a common consumer. Can it complete the flow with no
+  human step: non-interactive flags or env for every prompt, machine-readable output and
+  distinct exit codes where scripts consume results, setup and auth that run headless, and
+  docs that give commands rather than "click here" UI steps? A step only a human can do is
+  friction; name it.
 
 ## Measure, don't assert
 
@@ -87,7 +92,7 @@ The same discipline as `performance.md` "measure first" and `testing.md` "see it
   a clean state, the real CLI `--help`, the real error path) and recording what happened.
 - **Quote the artifact.** Record exact signal-bearing error text with typed security redactions
   (not paraphrase), secret-free command shape, and measured TTHW. For docs, use the
-  [browser-proof ladder](../../../devrites-browser-proof/SKILL.md) and describe the screenshot;
+  [browser-proof ladder](skill://devrites-browser-proof/SKILL.md) and describe the screenshot;
   a path alone is not proof.
 - **No measurement → no DX claim**, and usually no finding above Suggestion. "Feels confusing" is
   a hypothesis to test, not a verdict.

package/pack/generated/omp/skills/devrites-lib/reference/standards/glossary.md

@@ -11,7 +11,7 @@
 | Applicability map | `spec.md` table routing risk families (topology, data, integration, security, delivery) to their owning standard. A routed standard is mandatory, not optional. |
 | Binding | A recorded hash tying evidence or review to one exact candidate; stale binding = unproven. |
 | Bundle (context) | One deduplicated read-set file emitted by `devrites-engine context` into `ctx/`; a dispatch target reads it instead of selecting files. |
-| Candidate | The content-bound project state (digest + file set) reviews and proof run against. [`candidate-integrity.md`](../candidate-integrity.md). |
+| Candidate | The content-bound project state (digest + file set) reviews and proof run against. [`candidate-integrity.md`](skill://devrites-lib/reference/candidate-integrity.md). |
 | Consumptive action | An action whose failed attempt is not safely retryable (spends quota, mutates external state, or deletes its own failure evidence). [`one-shot-actions.md`](one-shot-actions.md). |
 | Controlling caller | The rite that invoked an earlier rite inline for repair; it keeps authority and resumes after the nested stop. |
 | Cursor | The `state.md` key/value table (phase, status, next_action, …) that is the authoritative lifecycle position. |
@@ -20,14 +20,14 @@
 | Diff-scope gate | `devrites-engine check diff-scope`: changed paths ⊆ allowlist, run before reviewer dispatch. |
 | Drift baseline | `readiness-inputs.json`: per-input SHA-256 snapshot recorded by `check drift --record` after Vet's binding; `check drift` attributes later input changes to the exact artifact. Advisory, never a gate. |
 | Dup ignore ledger | `.devrites/dup-ignore`: one `check dup` cluster hash per line with a `#` reason; content-derived hashes resurface on structural edits. [`duplicate-code.md`](duplicate-code.md). |
-| Evidence freshness | The rule that proof must postdate the candidate it claims to cover; [`candidate-integrity.md`](../candidate-integrity.md) § evidence validity. |
+| Evidence freshness | The rule that proof must postdate the candidate it claims to cover; [`candidate-integrity.md`](skill://devrites-lib/reference/candidate-integrity.md) § evidence validity. |
 | Finding shape (C2) | Canonical `Outcome / Finding / Basis` result rows every reviewer must return; [`agents.md`](agents.md) § Result admission. |
 | Gap | Result state naming missing/stale/unreadable input or a skipped required check; a required gap blocks, it is never `no-findings`. |
 | Gates ledger | `gates.md`: machine-checked acceptance rows (scaffold/status/run/reverify/lint/attest/abandon). [`gates.md`](gates.md). |
 | Loads manifest | The `<!-- loads: {...} -->` block in a SKILL.md declaring its exact read-set (`always`, `triggers`, `workspace`) for `devrites-engine context`. |
 | Metrics ledger | Append-only `metrics.jsonl` in a feature workspace recording dispatches, returns, bundle bytes, repair rounds. |
 | Nested phase boundary | A `STOP` inside a caller-invoked repair rite; it returns control to the caller, not the human. |
-| Read next | The per-phase bounded read order for workspace artifacts; [`workspace-artifact-schema.md`](../workspace-artifact-schema.md) § Read next by phase. |
+| Read next | The per-phase bounded read order for workspace artifacts; [`workspace-artifact-schema.md`](skill://devrites-lib/reference/workspace-artifact-schema.md) § Read next by phase. |
 | Regression baseline | `regression-baseline.json`: the durable high-water mark of workspace progress facts; `check regression` compares against it, `--update` ratchets it at a checkpoint. |
 | Seal | Final GO/NO-GO decision phase; a GO never authorizes irreversible mutation by itself. |
 | Slice | One vertical, independently provable unit of the plan (`SLICE-###` in `tasks.md`). |

package/pack/generated/omp/skills/devrites-lib/reference/standards/loop-operations.md

@@ -38,6 +38,9 @@ Every unattended loop must name:
 2. **Objective:** one active workspace or one read-only external observation.
 3. **Cycle:** one documented skill invocation; no hidden command chain.
 4. **Evaluator:** the skill's existing readiness, proof, review, or watcher verdict.
+   A cycle may add proof but never loosens or retargets what judges it (a test, gate,
+   threshold, benchmark, or fixture) to pass; an unattended optimizer overfits whatever
+   it can touch. An objective with no verifiable evaluator is not loopable; it stays HITL.
 5. **Budget:** every applicable `.devrites/AFK` resource cap.
 6. **Checkpoint:** durable workspace/evidence update before the turn ends; a
    `devrites-engine check regression <slug> --update` ratchet after each durable

package/pack/generated/omp/skills/devrites-lib/reference/standards/one-shot-actions.md

@@ -73,8 +73,9 @@ Keep two budgets separate:
 Cold resume does not make that fingerprint old or exhausted. Derive its offline
 no-progress count from `drift.md` and `evidence.md`; while the count is below the
 cap, resume recovery even if a prior writer stored `blocked` / `Next step: none`.
-That terminal cursor is valid only for a human/safety gate, an actually exhausted
-fingerprint, or a proven absence of any safe retention/amplification design.
+A blocked cursor is valid only for a human/safety gate or a parked fingerprint
+with no independent work left; a missing safe retention/amplification design
+escalates to the next correction class.
 
 A new real attempt is normally admissible only after the affected plan and fixtures
 are re-vetted, the failure condition is shown changed, and any required fresh
@@ -98,7 +99,7 @@ claim the runtime failure condition changed: the independently proven change is
 evidence-acquisition invariant, and the attempt's acceptance signal is the promised
 unique retained boundary (or action success).
 
-Terminal `Next: none` is valid only when no safe in-scope diagnostic-amplification
-seam exists, the required change is human/risk/scope owned, or the exact evidence-gap
-fingerprint exhausts bounded recovery. A missing old artifact alone is not terminal,
-and an amplification attempt never inherits authorization from the failed action.
+When no safe in-scope diagnostic-amplification seam exists, escalate or park per
+[`afk-hitl.md`](afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve); only a
+human/risk/scope-owned change stops for a human. A missing old artifact alone is not
+terminal, and an amplification attempt never inherits authorization from the failed action.

package/pack/generated/omp/skills/devrites-lib/reference/standards/performance.md

@@ -15,6 +15,8 @@ Measure first. An optimization without a measurement is a guess that adds comple
 ## Optimize responsibly
 - Fix the **measured** bottleneck, then **re-measure** to prove the win (before/after).
   An optimization that doesn't move the number is just added complexity: revert it.
+  A win counts only while behavior proof stays green on an unchanged workload; tuning
+  the benchmark, fixture, or workload to the candidate games the number and is a finding.
   Keep compact failed and neutral experiment notes in the existing evidence:
   hypothesis, change, comparable measurements, and keep/revert decision. Do not
   create a separate experiment framework or ledger.
@@ -41,7 +43,7 @@ source-labeled scorecard); with no artifact it runs in Source mode and names the
   TBT may appear only as a labeled proxy.
 
 Baseline checks + measurement commands:
-[`rite-review/reference/performance-checklist.md`](../../../rite-review/reference/performance-checklist.md).
+[`rite-review/reference/performance-checklist.md`](skill://rite-review/reference/performance-checklist.md).
 
 ## Scope
 Optimize what the change touches or what a measurement flags. Project-wide performance

package/pack/generated/omp/skills/devrites-lib/reference/standards/prose-style.md

@@ -52,12 +52,12 @@ the same decisions from it.
 | False binary contrast. "It's not X, it's Y", "The question isn't X. It's Y", "not just X but Y" | State Y directly. Drop the negation. |
 | Fake profundity. "Let that sink in", "This is the deepest problem", "make no mistake" | Show the thing; trust the reader to weigh it. |
 | Vague declaratives. "The implications are significant", "the reasons are structural" | Name the specific implication or reason. |
-| Marketing adjectives *selling* the work: "a robust, scalable, seamless, production-ready solution" | Say what it does and what proves it. (Calibrated: "robust"/"scalable"/"comprehensive" are legitimate in a precise technical claim ("robust to a dropped connection, see `evidence.md`"); slop only when they sell. Canonical tiering: [`banned-phrases.md`](../../../devrites-prose-craft/reference/banned-phrases.md) § AI vocabulary.) |
+| Marketing adjectives *selling* the work: "a robust, scalable, seamless, production-ready solution" | Say what it does and what proves it. (Calibrated: "robust"/"scalable"/"comprehensive" are legitimate in a precise technical claim ("robust to a dropped connection, see `evidence.md`"); slop only when they sell. Canonical tiering: [`banned-phrases.md`](skill://devrites-prose-craft/reference/banned-phrases.md) § AI vocabulary.) |
 | Hedging stacks. "It's important to note that, generally, in most cases" | Make the claim, or cut it. |
 | False agency: "the data tells us", "the complaint becomes a fix", "the decision emerges" | Name who did it. "The grader reads X and returns Y." |
 | Meta-narration, "In this section we'll…", "Let me walk you through…", "as we'll see" | Let the text move; delete the announcement. |
 | Reasoning-chain scaffolding. "Let me think step by step", "Breaking this down", "First, let's consider" | State the conclusion, then the evidence. |
-| Assistant leaks. Cutoff disclaimers, unfilled placeholders, chatbot citation markup, `utm_source=chatgpt.com` | Delete the leak; keep the fact. See [`banned-phrases.md`](../../../devrites-prose-craft/reference/banned-phrases.md). |
+| Assistant leaks. Cutoff disclaimers, unfilled placeholders, chatbot citation markup, `utm_source=chatgpt.com` | Delete the leak; keep the fact. See [`banned-phrases.md`](skill://devrites-prose-craft/reference/banned-phrases.md). |
 
 ## Voice (prose register)
 
@@ -67,7 +67,7 @@ the same decisions from it.
   case when you know it.
 - **Vary rhythm.** Don't stack three staccato fragments or three same-length sentences in a row.
 - **Skip em and en dashes** — a repeated AI tell in DevRites prose (product UI copy is
-  only a lead, per [`rite-polish/reference/anti-ai-slop.md`](../../../rite-polish/reference/anti-ai-slop.md));
+  only a lead, per [`rite-polish/reference/anti-ai-slop.md`](skill://rite-polish/reference/anti-ai-slop.md));
   use a comma, period, colon, or parentheses instead.
 - **Trust the reader.** Skip the softening preamble and the recap of what you just said.
 
@@ -86,7 +86,7 @@ the same decisions from it.
 
 Comments and identifiers are prose too; the comment-noise / generic-naming tells live in
 [`coding-style.md`](coding-style.md) and the code section of
-[`rite-polish/reference/anti-ai-slop.md`](../../../rite-polish/reference/anti-ai-slop.md).
+[`rite-polish/reference/anti-ai-slop.md`](skill://rite-polish/reference/anti-ai-slop.md).
 The one-line rule: **a comment must justify its existence in one sentence (intent, trade-off,
 non-obvious constraint, or a dragon warning). If it restates the code, delete it and let the
 name carry the meaning.**

package/pack/generated/omp/skills/devrites-lib/reference/standards/release/ship-checklist.md

@@ -9,4 +9,4 @@
 - Attached or committed artifacts are sanitized: no secrets, personal paths, or machine-local identifiers in logs, captures, or fixtures.
 - Success: archive; clear `ACTIVE`.
 
-[`git-workflow.md`](../git-workflow.md), [`ci-cd.md`](../ci-cd.md), [`git-ship.md`](../../../../rite-ship/reference/git-ship.md).
+[`git-workflow.md`](skill://devrites-lib/reference/standards/git-workflow.md), [`ci-cd.md`](skill://devrites-lib/reference/standards/ci-cd.md), [`git-ship.md`](skill://rite-ship/reference/git-ship.md).

package/pack/generated/omp/skills/devrites-lib/reference/standards/review/README.md

@@ -1,7 +1,7 @@
 # Per-language review checklists
 
 > Applies when: reviewing a diff that touches source files. Companion to
-> [`code-review.md`](../code-review.md) — these are file-level probes, not a
+> [`code-review.md`](skill://devrites-lib/reference/standards/code-review.md) — these are file-level probes, not a
 > second severity scale.
 
 Load `default.md` for every reviewed file, plus the file matching the file's

package/pack/generated/omp/skills/devrites-lib/reference/standards/review/ci-workflows.md

@@ -11,7 +11,7 @@
 - **`pull_request_target` / `issue_comment` triggers running untrusted code.**
   Checking out PR head code or evaluating `${{ github.event.* }}` fields in a
   privileged context (write token, secrets): trace execution, available authority,
-  and reachable effect; assign severity under [`security.md`](../security.md).
+  and reachable effect; assign severity under [`security.md`](skill://devrites-lib/reference/standards/security.md).
 - **Expression injection.** `${{ github.event.issue.title }}`,
   `github.head_ref`, PR body, or any attacker-controlled field interpolated
   into `run:` can turn data into executable syntax. Establish attacker control

package/pack/generated/omp/skills/devrites-lib/reference/standards/review/react.md

@@ -33,7 +33,7 @@ installed version). `(perf)` marks probes the performance reviewer also applies.
   needs profiler evidence; a removal needs a test that effect run counts stay unchanged.
 - `[next app-router]` **`'use server'` exports are public entry points.** Each
   authenticates, authorizes, and validates inside the action — judge under
-  [`security.md`](../security.md). Proof: call it with no session and as another user.
+  [`security.md`](skill://devrites-lib/reference/standards/security.md). Proof: call it with no session and as another user.
 - `[next app-router]` (perf) **Server→client props** carry unused or sensitive fields
   into the serialized page payload.
 - `[next app-router]` **`ssr: false` inside a Server Component** fails the build

package/pack/generated/omp/skills/devrites-lib/reference/standards/review/stack-profile.md

@@ -41,10 +41,10 @@ version is an unknown on the card, not a default.
 
 ## Composition
 
-A card's checks are assembled from: shared review contract ([`code-review.md`](../code-review.md) +
+A card's checks are assembled from: shared review contract ([`code-review.md`](skill://devrites-lib/reference/standards/code-review.md) +
 `default.md`) + lane + language/version + runtime/platform + framework/version +
 storage/transport/trust + project conventions + risk overlays. This is composition,
-not authority: conflicts resolve under [`core.md`](../core.md#precedence) § Precedence.
+not authority: conflicts resolve under [`core.md`](skill://devrites-lib/reference/standards/core.md#precedence) § Precedence.
 A project convention selects form; it never overrides language semantics or excuses a
 proven vulnerability. Add a risk overlay only when the diff shows the boundary it covers.
 
@@ -98,7 +98,7 @@ type/value at compile time only; it proves no serialized value, authorization, o
 ## Tool coverage
 
 A tool row counts only under
-[`verification-methods.md`](../verification-methods.md#tool-coverage-states): its
+[`verification-methods.md`](skill://devrites-lib/reference/standards/verification-methods.md#tool-coverage-states): its
 processed set, not its exit code, bounds what it covers. A tool that does not support
 the component's language, dialect, or version covers nothing there, even on exit 0;
 an embedded region the tool dropped stays unreviewed.
@@ -107,9 +107,9 @@ an embedded region the tool dropped stays unreviewed.
 
 When a card names a serialized crossing, add one contract record: producer, consumer,
 serialized shape, and the round-trip proof the serialized-boundary rule in
-[`testing.md`](../testing.md) requires. A type shared by both sides proves compile-time
+[`testing.md`](skill://devrites-lib/reference/standards/testing.md) requires. A type shared by both sides proves compile-time
 agreement only. Lane ownership of the record follows
-[`parallel-dispatch.md`](../../parallel-dispatch.md) § Engineering lanes.
+[`parallel-dispatch.md`](skill://devrites-lib/reference/parallel-dispatch.md) § Engineering lanes.
 
 ## Where cards live
 

package/pack/generated/omp/skills/devrites-lib/reference/standards/skill-authoring.md

@@ -37,7 +37,7 @@ Description routes; it is not documentation.
 
 ### Activation order
 
-Owned by [`intent-map.md`](../intent-map.md#routing-order) § Routing order (tie ⇒ ask
+Owned by [`intent-map.md`](skill://devrites-lib/reference/intent-map.md#routing-order) § Routing order (tie ⇒ ask
 once, never run two); authority conflicts follow [`core.md` § Precedence](core.md#precedence).
 A wrong-skill fire is evidence for a routing change, not a prompt retry. **Failing
 case:** `/rite-spec` fires on "review the security fix in this PR" and the turn
@@ -80,7 +80,7 @@ continues without recording the mis-route. Optional flags obey `core.md` rule 10
 - A reference file over ~300 lines opens with a table of contents so a partial
   read still sees the file's full scope.
 - A SKILL.md must link every supporting `.md` it may need in one hop.
-  `core.md`, `agents.md`, `README.md`, and [`index.md`](../visual-playbooks/index.md) are indexes and may
+  `core.md`, `agents.md`, `README.md`, and [`index.md`](skill://devrites-lib/reference/visual-playbooks/index.md) are indexes and may
   point onward. Shared `standards/` and `visual-playbooks/` catalogs use
   those indexes. A skill-local reference must not be the only path to
   another non-catalog file in that skill.
@@ -220,12 +220,17 @@ human approval — owned by [`security.md`](security.md) § Prompt-injection and
 Behavior-shaping prose is code:
 
 1. Baseline without guidance; if it passes, add none.
-2. Run ≥5 fresh-context reps/variant; inspect every flagged run.
+2. Run ≥5 fresh-context reps/variant; inspect every flagged run, and ask that agent which
+   instruction or missing context led it there before editing guidance. The corpus holds a control
+   case that must always pass, past-failure cases, and boundary cases whose right answer is
+   stop, ask, or refuse.
 3. Divergent interpretations require rewrite, not averaging.
 4. Pin host/model/build, corpus, grader, and candidate digest or commit+path. Report tasks/trials,
    arms, same-build A/A noise before A/B, sanitized per-trial verdicts/metrics, invalid/null results,
    variance, process versus job outcome, and supported/unproved claims. Never capture raw transcripts;
    lost grading signal is `cannot_verify`.
+5. On each new model generation, re-run step 1 as an ablation: remove the guidance and rerun its
+   eval. Guidance the model no longer needs is a `/rite-learn` retirement candidate, not a keeper.
 
 CI validates only corpora/deterministic artifacts—never paid sessions or lexical claims.
 
@@ -234,6 +239,13 @@ CI validates only corpora/deterministic artifacts—never paid sessions or lexic
 Delete model-default no-ops. Prefer positive targets; reserve prohibitions for hard
 guards. Fill omitted decisions or mark a deliberate branch.
 
+- Instructions add no capability: replace "be careful" or "CRITICAL" with a check, tool,
+  or engine command the agent can run.
+- State both sides of a trade-off. A one-sided cost ("avoid escalating; it is expensive")
+  is overfit: the agent withholds, deflects, or skips the stop it needed.
+- A defensive line added for one model's failure names that failure, so ablation can
+  retire it when a later model no longer fails.
+
 ## Contribution preflight
 
 Record catalog search, owner gap, evals, host parity, and public/internal surface. Public

package/pack/generated/omp/skills/devrites-lib/reference/standards/spec-grammar.md

@@ -53,7 +53,7 @@ The normative rules the root checks:
 ## Behavior first: WHAT, not HOW
 
 A spec requirement describes observable behavior, not the implementation that delivers it
-(the spec stays technology-agnostic: see [`spec-template.md`](../../../rite-spec/reference/spec-template.md)). "**THEN**
+(the spec stays technology-agnostic: see [`spec-template.md`](skill://rite-spec/reference/spec-template.md)). "**THEN**
 respond 401" is behavior; "**THEN** call `AuthGuard.reject()`" leaks the design and locks the
 plan before `/rite-define` has chosen it. Name the input, the observable output, and the state
 change, not the function, class, or library. Implementation belongs in `plan.md`, not the
@@ -147,7 +147,7 @@ Requirement/Scenario rows to inspect.
 The Requirement / Scenario block is the unit the **capability ledger** stores: the living
 `.devrites/specs/<capability>/spec.md` record of *what the system does now*, folded during
 Polish before Review
-([ledger reference](../../../rite-polish/reference/ledger.md)). When a feature changes behavior a
+([ledger reference](skill://rite-polish/reference/ledger.md)). When a feature changes behavior a
 ledger already describes, write its spec as **deltas against the ledger** instead of a flat
 snapshot, so the change (not merely the end state) is explicit and the fold is unambiguous.
 
@@ -180,7 +180,7 @@ above: names are unique and a rename is a remove + add), so the section MUST use
 header text for MODIFIED / REMOVED.
 
 For **MODIFIED**, compare the complete current requirement block with the proposed full
-replacement under the lossless rule in [`ledger.md`](../../../rite-polish/reference/ledger.md). An unexplained
+replacement under the lossless rule in [`ledger.md`](skill://rite-polish/reference/ledger.md). An unexplained
 omission blocks readiness; it is not cleanup.
 
 - **The `— capability: <name>` suffix is the fold target.** Omit it and the fold defaults to the

package/pack/generated/omp/skills/devrites-lib/reference/standards/testing.md

@@ -106,13 +106,18 @@ discriminates the required result.
   any divergence against the external spec — never by majority vote between
   reviewers, and never because the fixture is committed. A golden nobody re-derived
   is a rumor.
+- **A rewrite or port uses the old implementation as its oracle.** Run old and new on the
+  same inputs (the existing suite, a published conformance suite, recorded requests,
+  screenshots) and diff the results;
+  parity claimed only from tests written for the new code is unproven. **Failing case:** a
+  port passes its new unit tests while the old suite fails against it.
 
 ### Safe perturbation
 
 For required mutation or critical-link probes, use a faithful isolated copy of the
 current candidate, including its staged/unstaged content, never the shared proof/reviewer
 tree or HEAD alone. Bind its starting content to the candidate; retain the original
-candidate check before/after per [`candidate-integrity.md`](../candidate-integrity.md).
+candidate check before/after per [`candidate-integrity.md`](skill://devrites-lib/reference/candidate-integrity.md).
 Only an exact path-bounded wright may hand-edit source; an existing mutation runner
 runs under normal approved command authority. Isolation grants no live-service or
 destructive authority. Input fault injection must likewise leave candidate sources intact.
@@ -174,6 +179,10 @@ test exercises; **D**escriptive **A**nd **M**eaningful **P**hrases beat **D**on'
 here. (Deliberately trades against production reuse-first: a fixture that makes the reader
 scroll away to understand the case costs more than the duplication saved.)
 
+Test data is synthetic. A generator or factory builds each named edge case (a user with
+1,000 tickets, an empty tenant); production records never enter tests, fixtures, or agent
+sandboxes ([`security.md`](security.md)).
+
 ## Test doubles: reach for the real thing first
 Prefer, in order: **real > fake > stub > mock**. Use the real collaborator when it's fast and
 deterministic; a **fake** (an in-memory implementation that honors the contract) when it isn't; a
@@ -209,6 +218,10 @@ Select cases from the accepted spec and applicable standards, not a generic coun
   authorization, extra fields, or side effects; run schema-driven fuzzers only against a
   disposable target under external-write approval. **Failing case:** a shared
   `createdAt: Date` compiles on both sides while the client receives a string.
+- A module or layer boundary the plan relies on ("only `clients/` imports the SDK") is
+  enforced by a structural test in the project's existing tooling (an import or
+  dependency rule), not by prose. Its failure message names the allowed route, so the
+  agent fixes the design instead of dodging the rule.
 - Compatibility/delivery work drives both feature-flag states and old/new caller or
   schema combinations. Migration-before-code and code-before-migration order each need a
   declared expected result.

package/pack/generated/omp/skills/devrites-lib/reference/standards/tooling.md

@@ -89,7 +89,7 @@ Let connected watchers settle after edits; if still stale, use the provider's re
 
 ## Library docs: context7
 
-When an external library's current API/version behavior matters, use context7 if available: `resolve-library-id` → `query-docs`. It complements [`devrites-source-driven`](../../../devrites-source-driven/SKILL.md); installed/pinned source still wins for the running version (staleness rule below). A lookup is a cited source recorded in `decisions.md`/`evidence.md`, not a memory.
+When an external library's current API/version behavior matters, use context7 if available: `resolve-library-id` → `query-docs`. It complements [`devrites-source-driven`](skill://devrites-source-driven/SKILL.md); installed/pinned source still wins for the running version (staleness rule below). A lookup is a cited source recorded in `decisions.md`/`evidence.md`, not a memory.
 
 ## Web facts: search
 

package/pack/generated/omp/skills/devrites-lib/reference/standards/verification-methods.md

@@ -70,7 +70,7 @@ A missing check is not a negative result; a failed check is not an unavailable
 tool; freshness alone is not a pass. Only applicable `fresh` or `reused`
 evidence with a supported `pass` satisfies a required row. Reuse keeps the
 original observation and records the new applicability check separately —
-see [`candidate-integrity.md`](../candidate-integrity.md#evidence-validity).
+see [`candidate-integrity.md`](skill://devrites-lib/reference/candidate-integrity.md#evidence-validity).
 When change impact cannot be bounded, recheck the full affected scope.
 
 A tool-cache replay (`(cached)`, replayed output, last-failed-only selection) is

package/pack/generated/omp/skills/devrites-lib/reference/visual-playbooks/index.md

@@ -3,7 +3,7 @@
 Progressive references for DevRites `visual/` HTML + outline pairs.
 Load **only** matching playbooks before writing HTML. Do not preload all seven.
 
-**Spec / schema SSOT:** [`../workspace-artifact-schema.md`](../workspace-artifact-schema.md) (see What each file owns)  
+**Spec / schema SSOT:** [`skill://devrites-lib/reference/workspace-artifact-schema.md`](skill://devrites-lib/reference/workspace-artifact-schema.md) (see What each file owns)  
 **Outline companion:** [`outline-template.md`](outline-template.md)
 
 ## Load rules
@@ -59,7 +59,7 @@ Home: `.devrites/work/<slug>/visual/`. Optional artifact; never a new lifecycle
 When HTML/visual work shows **two or more** of: generic Inter/system font with no
 brief justification, hero-only layout, purple/blue gradient CTA with no brand token,
 lorem or placeholder copy in shipped states, or identical card grid with no product
-hierarchy — load [`rite-polish`](../../../rite-polish/SKILL.md) **ux_coverage** and
+hierarchy — load [`rite-polish`](skill://rite-polish/SKILL.md) **ux_coverage** and
 craft axes before sign-off.
 
 **Failing case:** visual ships with three slop patterns and no axis record → Review

package/pack/generated/omp/skills/devrites-lib/reference/workspace-artifact-schema.md

@@ -2,7 +2,9 @@
 
 Feature truth: `.devrites/work/<slug>/`, discovered by `state.md`; remnants/archives
 are inactive. Spec writes optional `README.md`. Use canonical filenames; both released
-cursor forms remain valid. `/rite-upgrade` audits without path/alias/format migration.
+cursor forms remain readable, but a cursor with no `schema` row needs
+`devrites-engine migrate <slug>` before the engine accepts it. `/rite-upgrade` audits
+without path/alias/format migration.
 
 ## Slug identity
 
@@ -27,7 +29,7 @@ accept safe legacy basenames. Ordinary phases never rename them.
 | vet/build/converge | plan artifacts plus `eng-review.md`, `test-plan.md`, `gates.md`; Build creates and maintains `touched-files.md` after its first green slice |
 | prove/polish/review | vetted plan artifacts plus `evidence.md`, `touched-files.md` |
 | seal/ship/done | proof artifacts plus `review.md`, `seal.md`; Ship writes `ship.md` |
-| conditional | `flows.md` when diagrams clarify; `visual/` HTML+`.outline.md` companions when a richer reviewable visual earns it (optional; never readiness-required); `design-brief.md` and `browser-evidence.md` for UI; `drift.md` for drift; `polish-report.md` for polish; `handoff.md` only when requested; `references.md` + `references/` when references exist; `investigation-map.md` for pressure-test; `dogfood.md` for dogfood; `windows.md` when the diff introduces deferral markers (waiver ledger for `check windows`); `packets/` for by-reference dispatch packets and admitted accounts (≤ 64 KiB each; older closed rounds may be deleted; never transcripts); `history/` for verbatim relocated checkpoint narrative (append-only, never a read-next); `readiness-inputs.json` as the advisory per-input drift baseline written by `check drift --record` after Vet's binding (never a gate input; regenerated, not hand-edited); `notes.md` for anchored notes bound to verbatim code quotes (engine-regraded; non-exact anchors block seal) |
+| conditional | `checklists/<domain>.md` per spec-covered domain (Spec writes; Define gates on it); `flows.md` when diagrams clarify; `visual/` HTML+`.outline.md` companions when a richer reviewable visual earns it (optional; never readiness-required); `design-brief.md` and `browser-evidence.md` for UI; `devex.md` when a developer-facing surface is in scope; `drift.md` for drift; `polish-report.md` for polish; `handoff.md` only when requested; `references.md` + `references/` when references exist; `investigation-map.md` for pressure-test; `dogfood.md` for dogfood; `windows.md` when the diff introduces deferral markers (waiver ledger for `check windows`); `packets/` for by-reference dispatch packets and admitted accounts (≤ 64 KiB each; older closed rounds may be deleted; never transcripts); `history/` for verbatim relocated checkpoint narrative (append-only, never a read-next); `readiness-inputs.json` as the advisory per-input drift baseline written by `check drift --record` after Vet's binding (never a gate input; regenerated, not hand-edited); `notes.md` for anchored notes bound to verbatim code quotes (engine-regraded; non-exact anchors block seal) |
 
 ## What each file owns
 
@@ -43,7 +45,7 @@ accept safe legacy basenames. Ordinary phases never rename them.
 | `visual/<name>.html` | optional portable human-viewable visualization; pair with sibling `.outline.md`; self-contained preferred | 400 lines (advisory; not gate-checked) |
 | `visual/<name>.outline.md` | required machine dual-read companion for the sibling HTML; outline wins on conflict; never a candidate path | 200 lines (advisory; not gate-checked) |
 | `visual/README.md` | optional index of visuals in the workspace | 80 lines (advisory; not gate-checked) |
-| `decisions.md` | ADR-style `DEC-###` log: status, context, options, decision, consequences, related IDs; optional `Files:`/`Tags:` fields make entries queryable by path or theme | 200 lines |
+| `decisions.md` | ADR-style `DEC-###` log: status, context, options, decision, consequences, related IDs; optional `Files:`/`Tags:` fields make entries queryable by path or theme; Build's `## Carry-forward constraints` lines (rule, source slice, evidence, `Files:`) | 200 lines |
 | `assumptions.md` | assumptions with confidence, owner, validation status | 160 lines |
 | `questions.md` | current `q-YYYY-MM-DD-NNN` (or released `Q-###`) open/resolved questions, gate, answer, impact | 180 lines |
 | `plan.md` | technical approach, slice strategy, canonical shared-contract proof, validation strategy, rollback | 220 lines |
@@ -61,7 +63,7 @@ accept safe legacy basenames. Ordinary phases never rename them.
 | `handoff.md` | resume objective/last slice/next action/blockers/read-next; sections hold content or `Nothing yet`; unevidenced recollections: `Not tried yet`, never results | 120 lines |
 | `polish-report.md` | polish axis deltas, re-verification lines, residual subjective preferences | 200 lines |
 | `ship.md` | ship preflight, disclosed Git plan, commit/push/tag/PR record | 120 lines |
-| `review.md` | reconciled Review verdict: `## Spec` and `## Code review` accounts, deferred-finding labels/actions, drift | 240 lines |
+| `review.md` | reconciled Review verdict: `## Spec` and `## Code review` accounts, triggered frontend/security/performance accounts or `Not-applicable` lines, deferred-finding labels/actions, drift | 240 lines |
 | `seal.md` | seal preflight, exact reviewer roster accounts, GO/NO-GO verdict and disclosures | 200 lines |
 | `ai-spec.md` | model/RAG/agent/eval/LLM-output scope for AI surfaces | 160 lines |
 | `windows.md` | deferral/bar-lowering waiver ledger: one `- path | marker | reason` row per introduced marker; `check windows` fails on unwaived hits | 120 lines |
@@ -151,7 +153,7 @@ reports the artifact within budget; completeness for seal is engine-checked
 
 Two reasons are not durable fixes: slice or acceptance-criteria count (an over-budget
 `tasks.md`/`plan.md`/`traceability.md` from decomposition size is a
-[feature-sequence split](../../rite-plan/reference/slicing.md#feature-ceiling-split-an-epic-never-override-the-budget)),
+[feature-sequence split](skill://rite-plan/reference/slicing.md#feature-ceiling-split-an-epic-never-override-the-budget)),
 and history in `state.md` (checkpoint narrative moves verbatim to
 `history/<file>-<YYYYMMDD>.md`, append-only, never a phase read-next, with a one-line
 pointer left behind). A legacy workspace may carry a temporary `Budget override:` line
@@ -206,7 +208,7 @@ Mode: <AFK | HITL>
 Gate: <advisory | validating | blocking | escalating>
 SLA: <15m | 4h | 24h | none>
 Checkpoint: <question + why it needs unavailable pre-code evidence or action-time approval | none>
-Dependencies: <SLICE-### list | none>
+Dependencies: <SLICE-### (via <interface it consumes>) list | none>
 depends_on: [<SLICE-### IDs>]
 Consumes / Produces: <interfaces read and exposed>
 Known-Gotchas: <ordering hazards and framework footguns | none>
@@ -228,7 +230,9 @@ Done condition: <checkable, exhaustive completion criterion>
 <!-- canonical-slice:end -->
 
 `depends_on` is the machine-readable mirror of `Dependencies`; keep the sets
-identical and cycle-free. `Gate`, `SLA`, and `Checkpoint` are required for HITL
+identical and cycle-free. Each dependency names what crosses it (`check task-graph` advises).
+Define and `/rite-plan` repair write `Prior-slice learnings`, folding Build's
+`decisions.md` carry-forward constraints; Build never edits `tasks.md`. `Gate`, `SLA`, and `Checkpoint` are required for HITL
 slices; use `none` when they do not apply. Complexity above 3 triggers reslicing
 unless the stated reason makes the boundary irreducible. A Writer allowlist of 12+
 files prints an engine `ADVISORY size:` line (`check task-graph`, `check slice`;
@@ -239,7 +243,7 @@ the inseparable capability.
 
 Run `devrites-engine next <slug>` at phase entry for the minimal remaining path
 (current phase, open questions, missing artifacts, next `/rite-*` command), then
-read the phase row below — or hand `devrites-engine context <slug> --phase <p>`
+read the phase row below — or hand `devrites-engine context --skills-root .omp/skills <slug> --phase <p>`
 to the engine and read the bundle it emits.
 
 | Phase | Read |

package/pack/generated/omp/skills/devrites-prose-craft/SKILL.md

@@ -4,7 +4,7 @@ description: Rewrite prose to remove AI tells while preserving meaning and voice
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/prose-style.md"],"triggers":{"word-choice":["devrites-prose-craft/reference/banned-phrases.md"],"structure":["devrites-prose-craft/reference/structures.md"],"examples":["devrites-prose-craft/reference/examples.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-prose-craft` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
+> Read-set manifest: `devrites-engine context --skills-root .omp/skills <slug> --skill devrites-prose-craft` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # devrites-prose-craft: prose that reads human
 
@@ -41,13 +41,13 @@ In detect-only, report Tier 1A (figurative filler) separately from Tier 1B (word
    the source text itself. Fall back to flat, direct prose. Done when every section has a
    register and one voice baseline.
 2. **Protect.** Apply the preservation contract in
-   [`prose-style.md`](../devrites-lib/reference/standards/prose-style.md) before changing words.
+   [`prose-style.md`](skill://devrites-lib/reference/standards/prose-style.md) before changing words.
    Leave tables, YAML frontmatter, URLs, and file paths untouched unless the caller asked to
    change them. Scan for clusters of tells; one isolated marker is not a verdict. Done when
    every claim, constraint, identifier, example, quotation, and deliberate uncertainty is
    accounted for. Admitted reviewer rows (`Finding:`/`Basis:`), `Outcome:`/`Verdict:`
    lines, counts, and the candidate binding are technical register: skip them, because
-   [`agents.md`](../devrites-lib/reference/standards/agents.md#return-budget) § Return budget
+   [`agents.md`](skill://devrites-lib/reference/standards/agents.md#return-budget) § Return budget
    (the root never rewrites an admitted row) wins over this skill.
 3. **Rewrite.** Remove P0/P1 tells and P2 when the caller asked for a full pass. Match the
    baseline's vocabulary and cadence without inventing facts, opinions, or quirks. Done when the
@@ -61,7 +61,7 @@ In detect-only, report Tier 1A (figurative filler) separately from Tier 1B (word
 
 ## References
 
-- Always read [`prose-style.md`](../devrites-lib/reference/standards/prose-style.md) for the two
+- Always read [`prose-style.md`](skill://devrites-lib/reference/standards/prose-style.md) for the two
   registers, preservation contract, and core checks.
 - Load [`reference/banned-phrases.md`](reference/banned-phrases.md) when word choice or tone is
   the problem (trigger `word-choice`).

package/pack/generated/omp/skills/devrites-prose-craft/reference/examples.md

@@ -82,7 +82,7 @@ done and the evidence; ended on one runnable next action, not a "Want me to cont
 > Buffering the whole CSV OOM-ed on >100k rows. Stream rows to the response so memory stays
 > flat. Rules out an upfront total-count header; tracked in #123.
 
-Followed [`git-workflow.md`](../../devrites-lib/reference/standards/git-workflow.md): the *why*, wrapped, in plain language.
+Followed [`git-workflow.md`](skill://devrites-lib/reference/standards/git-workflow.md): the *why*, wrapped, in plain language.
 
 ## 7. Fidelity when evidence is incomplete
 

package/pack/generated/omp/skills/devrites-source-driven/SKILL.md

@@ -4,7 +4,7 @@ description: Verify uncertain framework or library behavior in installed source
 user-invocable: false
 ---
 <!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/tooling.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"]},"workspace":["state.md","spec.md","plan.md","decisions.md","evidence.md","references.md"],"workspaceByRole":{"evidence-scout":["state.md","spec.md","plan.md","references.md"]}} -->
-> Read-set manifest: `devrites-engine context [slug] --skill devrites-source-driven` bundles every file named below into one deduplicated read.
+> Read-set manifest: `devrites-engine context --skills-root .omp/skills <slug> --skill devrites-source-driven` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-source-driven: verify, don't guess
 
@@ -21,7 +21,7 @@ authoritative documentation before relying on it.
 ## How
 1. **Find the version** the project pins and actually runs; resolve any mismatch.
 2. **Apply the hierarchy, citation, and currentness contract** in
-   [`tooling.md`](../devrites-lib/reference/standards/tooling.md#research-provenance-staleness-and-cost).
+   [`tooling.md`](skill://devrites-lib/reference/standards/tooling.md#research-provenance-staleness-and-cost).
    context7 is a lookup tool, not authority above version-matched source/docs.
 3. **Confirm the specific fact:** the signature, the default, the edge behavior, not a
    general impression.
@@ -31,7 +31,7 @@ authoritative documentation before relying on it.
 ## Delegate broad research
 When the question is an *area* (a library surface, unfamiliar subsystem, or migration
 guide), the **root orchestrator** uses the fresh-context dispatch contract in
-[`agents.md`](../devrites-lib/reference/standards/agents.md) to give one bounded
+[`agents.md`](skill://devrites-lib/reference/standards/agents.md) to give one bounded
 question to `devrites-evidence-scout`. Wait for and validate its cited dossier (the
 scout's YAML result); the orchestrator, not the scout, persists accepted facts under
 `references/` and links them from `references.md`.