devrites 6.10.0 → 7.0.0

package/pack/generated/codex/skills/rite-autocomplete/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[idea] [--ship|--yolo] [--max-slices N] [--parallel N] [--full]
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/one-shot-actions.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/acceptance-preserving-reslice.md","rite-autocomplete/reference/decision-policy.md","rite-autocomplete/reference/loop.md","rite-autocomplete/reference/stop-conditions.md"],"triggers":{"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["state.md","spec.md","plan.md","tasks.md","questions.md","decisions.md","drift.md","evidence.md","test-plan.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/one-shot-actions.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/acceptance-preserving-reslice.md","rite-autocomplete/reference/decision-policy.md","rite-autocomplete/reference/loop.md","rite-autocomplete/reference/stop-conditions.md"],"triggers":{"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["state.md","spec.md","plan.md","tasks.md","questions.md","decisions.md","drift.md","evidence.md","test-plan.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/workflow-artifacts.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --phase autocomplete` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -91,8 +91,9 @@ executable controller/harness/bundle bytes or a missing writer, read
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"lifecycle cursor encounters admitted set or resumable journal","action":"invoke classifier; execute returned route internally","return":"saved phase/action; zero intermediate reply"} -->
    Reconstruct a missing return cursor only from
    the current phase and exact approved action in `test-plan.md`/evidence, never
-   from chat. After compaction or a resumed session, read `.devrites/ACTIVE`, then
-   the `state.md` cursor, `questions.md`, `decisions.md`, and `test-plan.md`/`evidence.md`.
+   from chat. After compaction or a resumed session, always run `devrites-engine
+   handoff <slug> --resume` first (slug from `.devrites/ACTIVE`) and open only the
+   `read_next` artifacts it names, per [`context-hygiene.md`](../devrites-lib/reference/standards/context-hygiene.md) § Compaction fallback.
    Normalize current arguments to idea, `ship_preflight: yes|no`,
    `max_slices: unlimited`, `parallel: N|default`, `profile: standard|full`,
    and `cross_model: yes|no`.
@@ -113,7 +114,7 @@ executable controller/harness/bundle bytes or a missing writer, read
    `$rite-build` batch loop → `$rite-prove` → `$rite-polish` →
    `$rite-review` → `$rite-seal`. Read and execute each skill; durable files, not
    chat, carry state. Apply the mutable post-vet budget before first Build.
-   Build runs the largest eligible path-disjoint batch (cap: this invocation's
+   Build runs the path-disjoint batch `parallel select --from-plan` picks (cap: this invocation's
    `--parallel N`, else sentinel `max_parallel`, else 10) and refills a slot
    per landing until no pending slice remains; a one-slice round is serial for that round only, then
    selection runs again (host isolation still forces serial when concurrent writers

package/pack/generated/codex/skills/rite-build/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[--parallel N] [slice number or name]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/agents.md","rite-build/reference/phase-contract.md","rite-build/reference/one-slice-cycle.md","rite-build/reference/wright-dispatch.md","rite-build/reference/checkpoint.md","rite-build/reference/spec-drift-guard.md","rite-build/reference/output.md","rite-build/reference/anti-patterns.md"],"rootOnly":["rite-build/reference/phase-contract.md","rite-build/reference/wright-dispatch.md","rite-build/reference/checkpoint.md","rite-build/reference/output.md","rite-build/reference/afk-discipline.md","rite-build/reference/checkpoint-protocol.md","rite-build/reference/parallel-batch.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/workflow-artifacts.md"],"triggers":{"afk":["rite-build/reference/afk-discipline.md","devrites-lib/reference/standards/afk-hitl.md","rite-build/reference/checkpoint-protocol.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"coding":["devrites-lib/reference/standards/coding-style.md"],"debug-recovery":["devrites-lib/reference/standards/debug-recovery.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"frontend":["rite-build/reference/frontend-trigger.md"],"parallel":["rite-build/reference/parallel-batch.md"],"patterns":["devrites-lib/reference/standards/patterns.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md"],"tdd":["rite-build/reference/tdd.md","devrites-lib/reference/standards/testing.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","strategy.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"slice-wright":["brief.md","spec.md","architecture.md","plan.md","tasks.md","test-plan.md","state.md","decisions.md","assumptions.md","questions.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/agents.md","rite-build/reference/phase-contract.md","rite-build/reference/one-slice-cycle.md","rite-build/reference/wright-dispatch.md","rite-build/reference/checkpoint.md","rite-build/reference/spec-drift-guard.md","rite-build/reference/output.md","rite-build/reference/anti-patterns.md"],"rootOnly":["devrites-lib/reference/standards/code-index.md","rite-build/reference/phase-contract.md","rite-build/reference/wright-dispatch.md","rite-build/reference/checkpoint.md","rite-build/reference/output.md","rite-build/reference/afk-discipline.md","rite-build/reference/checkpoint-protocol.md","rite-build/reference/parallel-batch.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/workflow-artifacts.md"],"triggers":{"afk":["rite-build/reference/afk-discipline.md","devrites-lib/reference/standards/afk-hitl.md","rite-build/reference/checkpoint-protocol.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"coding":["devrites-lib/reference/standards/coding-style.md"],"debug-recovery":["devrites-lib/reference/standards/debug-recovery.md"],"dod":["devrites-lib/reference/standards/definition-of-done.md"],"errors":["devrites-lib/reference/standards/error-handling.md"],"frontend":["rite-build/reference/frontend-trigger.md"],"parallel":["rite-build/reference/parallel-batch.md"],"patterns":["devrites-lib/reference/standards/patterns.md"],"principles":["devrites-lib/reference/standards/principles.md"],"security":["devrites-lib/reference/standards/security.md"],"tdd":["rite-build/reference/tdd.md","devrites-lib/reference/standards/testing.md"],"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","strategy.md"],"workspaceByRole":{"code-reviewer":["spec.md","plan.md","tasks.md","test-plan.md","architecture.md","decisions.md","state.md"],"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"slice-wright":["brief.md","spec.md","architecture.md","plan.md","tasks.md","test-plan.md","state.md","decisions.md","assumptions.md","questions.md"],"test-analyst":["spec.md","tasks.md","test-plan.md","state.md"]}} -->
 > Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --phase build` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -29,7 +29,8 @@ Execute [`reference/phase-contract.md`](reference/phase-contract.md)
 [`reference/wright-dispatch.md`](reference/wright-dispatch.md).
 Every wright contract names the writer-safe checks the wright runs (syntax/type/lint,
 unit and self-check suites, a narrow local smoke) and never forbids them; only
-artifact-producing, consumptive, or full canonical gates stay root-owned;
+artifact-producing, consumptive, or full canonical gates stay root-owned, and a
+`RUN: writer` gate adds `gates precheck` to them;
 `dispatch open --contract` refuses a contract that breaks this. Prior contracts in `evidence.md` are not a template for this. **Failing case:** the
 contract says "skip tests mid-flight; root runs them after return", and the wright
 returns three unit failures that a 20 s `go test` would have caught in-round.
@@ -80,7 +81,7 @@ Wright applies anti-slop; root verifies returns and never patches source. Refuse
 ## `--parallel N` (opt-in)
 
 Omitted/`1` ≡ serial; `2`–`10` is a **cap** — the root runs the largest eligible
-path-disjoint set it can start now (`N_eff`), takes fewer when the cap cannot be
+path-disjoint set it can start now (`N_eff`, from `parallel select --from-plan`), takes fewer when the cap cannot be
 filled, and refills a slot per landing (serial slice or one sibling) until
 no pending slice remains
 ([`parallel-batch.md` § Dynamic selection](reference/parallel-batch.md#dynamic-selection-and-re-batching)).

package/pack/generated/codex/skills/rite-build/reference/afk-discipline.md

@@ -1,5 +1,7 @@
 # AFK discipline for unattended `$rite-build`
 
+> Root-only: not inlined in --role bundles.
+
 AFK mode is active when `.devrites/AFK` exists. It lets `$rite-build` chain slices
 without per-slice user input. The rules below limit that unattended work.
 

package/pack/generated/codex/skills/rite-build/reference/checkpoint-protocol.md

@@ -1,5 +1,7 @@
 # Checkpoint protocol: what `$rite-build` does when a slice is HITL
 
+> Root-only: not inlined in --role bundles.
+
 HITL slices pause **pre-action** as a ranked **option set** before any code:
 
 - **Interactive:** `AskUserQuestion`; record to `questions.md`/`decisions.md`; clear gate;
@@ -48,8 +50,9 @@ rewrite; do not claim cross-file atomicity):
    options: |                        # the ranked set, recommended first (matches the render)
      1. <recommended> (Recommended) — logic: … · infra: … · business: … · architecture: …
      2. <alternative> — <rationale>
+     3. Something else — describe it
    proposed: <the recommended option restated; matches option 1>
-   raised_at: <iso>
+   raised_at: <full RFC 3339 timestamp, e.g. 2026-10-19T08:17:08Z>
    ```
 
 2. **`state.md` updates:** cursor `status` = `awaiting_human`, `active_slice` =

package/pack/generated/codex/skills/rite-build/reference/checkpoint.md

@@ -1,5 +1,7 @@
 # Checkpoint: land local WIP only after the check loop is green
 
+> Root-only: not inlined in --role bundles.
+
 The wright does not commit onto the control/primary branch. Independent review
 and fail-on-red proof run first; a red or gap finding dispatches another wright.
 Only when that loop is green does the orchestrator land the local unpushed

package/pack/generated/codex/skills/rite-build/reference/one-slice-cycle.md

@@ -14,7 +14,7 @@ The orchestrator (`$rite-build`) gates and records; the **wright** writes. See
 SELECT    → orchestrator: restate slice goal + acceptance + scope boundary; HITL gate (pause pre-code)
 (SHAPE)   → orchestrator: missing UI design-brief.md → shape it, then $rite-vet before dispatch
 DISPATCH  → hand the slice contract to devrites-slice-wright (fresh context). Inside the wright:
-   ORIENT    → load only the files this slice touches; learn the project's idiom; reuse-first
+   ORIENT    → load only the files this slice touches; learn the project's idiom; reuse-first; affected set via `trace_path` (`../../devrites-lib/reference/standards/code-navigation.md`)
    (RED)     → if behavior change: write the failing test first
    IMPLEMENT → smallest complete version; match conventions; devrites-frontend-craft for UI
    VERIFY    → writer-safe tests/types/lint; return code + tests (no control-branch commit)

package/pack/generated/codex/skills/rite-build/reference/output.md

@@ -1,5 +1,7 @@
 # rite-build output
 
+> Root-only: not inlined in --role bundles.
+
 **Slices remain:**
 
 ```text

package/pack/generated/codex/skills/rite-build/reference/parallel-batch.md

@@ -1,5 +1,7 @@
 # Parallel batch (`--parallel N`)
 
+> Root-only: not inlined in --role bundles.
+
 Opt-in only. Default `$rite-build` stays [`one-slice-cycle.md`](one-slice-cycle.md).
 
 ## Entry
@@ -30,15 +32,18 @@ N_eff = min(
 )
 ```
 
-Select **greedily in plan order**: pass every currently dependency-ready pending slice
-(plan order, `Files likely touched`) to
-`devrites-engine parallel select --cap N [--root <dir>]`. `N_eff ≥ 2` → parallel batch;
+Select **greedily in plan order** with
+`devrites-engine parallel select --slug <slug> --cap N --from-plan`: the engine
+reads the ready set (tasks.md dependencies checked `built` in `state.md`, minus
+running-lease slices) and each slice's Writer allowlist (else `Files likely
+touched`), plus its manifest/lockfile when `External dependencies:` is not none;
+in Build, `next` prints the same `eligible_now:`/`batch:`. `N_eff ≥ 2` → parallel batch;
 `N_eff = 1` → one serial round; nothing pending → Prove. A cap that cannot be filled
 is normal: take fewer. Serial is this round's size, not the rest of the run.
 
 **Refill per landing; never wait for the batch.** Each sibling lands alone when
 green ([Lifecycle](#lifecycle) step 6). Then re-read `state.md`, pending slices, and
-the tree and run `parallel select --cap N --slug <slug>`: unlanded siblings hold
+the tree and run `parallel select --slug <slug> --cap N --from-plan`: unlanded siblings hold
 their slots and paths, landed ones count as built, and only new picks print;
 `parallel add` starts each from the control tip and its wright dispatches at once.
 No lease → plain `select` + `create`. AFK/autocomplete is one run; HITL stops after
@@ -66,8 +71,13 @@ Before `parallel select`, add each slice's hidden write surfaces (list owner:
 [repository-topology.md § Ownership rules](../../devrites-lib/reference/standards/repository-topology.md#ownership-rules))
 — lockfile/manifest, the generated target of an edited source, migration chain,
 snapshot directory, formatter sweep — and compare paths case-folded
-(`src/Api.ts` = `src/api.ts`). Slices colliding on either run serially; the rest
-stay eligible. Record `serial: <ids> — <surface>` in `evidence.md`. **Failing
+(`src/Api.ts` = `src/api.ts`); `--from-plan` adds the manifest/lockfile itself.
+Slices colliding on either run serially; the rest
+stay eligible. Record `serial: <ids> — <surface>` in `evidence.md`. Under AFK
+with `max_parallel ≥ 2`, `dispatch open` refuses a first-round build wright wave
+narrower than the from-plan batch (printing batch and command) until the wave
+holds that batch or `serial:` names every skipped pick; repair rounds, lease
+siblings, and HITL runs are never refused. **Failing
 case:** two slices each add a dependency, run in parallel, and integrate fails or
 lands a broken lockfile.
 
@@ -87,12 +97,12 @@ Lease: `batch_id`, `created_at`, `base_sha`, `n`,
 
 1. Orient/gate; parse the cap; compute `N_eff` and select the eligible set
    ([Dynamic selection and re-batching](#dynamic-selection-and-re-batching)) —
-   candidates from `orient` `task_graph.slices` + built list, each candidate's
-   `Files likely touched` via `observe slice`, then
-   `parallel select --cap N` (pairwise disjointness is inside that verb).
+   `parallel select --slug <slug> --cap N --from-plan` (ready set, write paths,
+   and pairwise disjointness are inside that verb).
    Preflight each selected slice with `devrites-engine check slice <slug>
-   <id>`; a malformed contract is dropped from the batch and recorded as a
-   gap, not dispatched.
+   <id>`, plus `check preconditions <slug> --slice <id>` when it has a
+   `pre-dispatch <id>` preflight row; a malformed contract or non-zero
+   precondition is dropped from the batch and recorded as a gap, not dispatched.
 2. Write lease; freeze `B=HEAD`; `parallel create` worktrees.
 3. Dispatch ≤10 wrights in parallel (cwd=worktree; allowlist; prove `HEAD==B`;
    one `--slice` per sibling on the wave).
@@ -196,7 +206,7 @@ Repair rejected work in place; never discard/rebuild while budget remains.
 ## Engine verbs
 
 ```text
-devrites-engine parallel select --cap <1-10> [--root <dir>] [--slug <slug>] [<json-file>|-]
+devrites-engine parallel select --cap <1-10> [--root <dir>] [--slug <slug>] [--from-plan | <json-file>|-]
 devrites-engine parallel create --root <repo> --slug <slug> --batch <id> --base <B> --json <file>|-
 devrites-engine parallel add --root <repo> --slug <slug> --json <file>|-
 devrites-engine parallel record-green --root <repo> --slug <slug> --slice <id> --commit <sha>

package/pack/generated/codex/skills/rite-build/reference/phase-contract.md

@@ -1,5 +1,7 @@
 # rite-build phase contract
 
+> Root-only: not inlined in --role bundles.
+
 Apply [`one-slice-cycle.md`](one-slice-cycle.md) and
 [`candidate-integrity.md`](../../devrites-lib/reference/candidate-integrity.md).
 Opt-in `--parallel N` replaces steps 2–8 with [`parallel-batch.md`](parallel-batch.md);
@@ -30,7 +32,7 @@ Spec Drift Guard still applies.
    paths; wright cannot widen scope; missing profile blocks.
 <!-- workflow-artifact-adapter: {"module":"devrites-lib/reference/standards/workflow-artifacts.md","entry":"Build gate enters or resumes transaction","action":"invoke canonical operation table; reconcile exact result","return":"same slice/checkpoint cursor or Plan/Vet route"} -->
 4. **Inspect.** Wait; run `devrites-engine check diff-scope <slug> --allow
-   <contract-paths>` for the mechanical returned-paths ⊆ contract check **before**
+   <contract-paths> --baseline` (after a pre-dispatch `--snapshot`) for the mechanical returned-paths ⊆ contract check **before**
    any reviewer dispatch — a violation returns through the bounded wright without
    spending review. Then compare returned paths and `git diff --name-only` with the
    contract for semantics diff-scope cannot judge (stale/partial/malformed work;
@@ -78,7 +80,10 @@ without the section, run every row each round.
 
 ## Independent Build review
 
-After inspection, freeze full slice scope and cumulative baseline diff. Initial
+After inspection, freeze full slice scope and cumulative baseline diff with
+`devrites-engine candidate freeze <slug> --wave <w> --slice <SLICE-ID> --base <baseline>`;
+render each reviewer packet with `devrites-engine packet` (never hand-written; a doubt
+reviewer's `--focus` holds its claim, 1-3 rows `- <DEC-ID> decisions.md:<line> <claim>`). Initial
 inventory: one full-diff `devrites-code-reviewer`, one `devrites-test-analyst`,
 and one exact `devrites-doubt-reviewer` per stood decision that meets
 `devrites-doubt` § When to use (boundary, data model, auth, public API, migration,
@@ -86,7 +91,8 @@ user flow, assumption tests cannot prove); other stood decisions are recorded in
 `decisions.md` without dispatch. Bundles take `--slice <SLICE-ID>`. Dispatch fresh,
 read-only under [`parallel-dispatch.md`](../../devrites-lib/reference/parallel-dispatch.md).
 Wait for every required account to become terminal; missing/gap needs a valid result.
-Fold supported in-scope Critical/Important findings by cause into one inventory.
+Fold supported in-scope Critical/Important findings by cause into one inventory; a
+row `check anchors` leaves Unverified or Deferred never enters it.
 Dispatch one repair-all wright instructed to fix every finding, then attack its own
 correction for fix-introduced defects before returning; durable contract defects use Spec
 Drift Guard.
@@ -97,6 +103,10 @@ all open findings owned by that role and affected dependency/regression closure
 in one fresh dispatch. Supply new candidate, inventory, correction diff, tests
 and unchanged-coverage evidence under candidate integrity; include newly triggered
 roles. A changed contract or uncertain impact requires the full inventory.
+A bounded recheck bundle adds `--recheck <inventory-file>` (open `Finding:` rows
+plus correction-diff paths) to its `--slice` bundle, and its `packet` adds `--recheck`: inventory and core inline, every
+other triggered standard by anchor index plus each `<file>.md § <heading>` the
+findings cite. First reviews and full-inventory rechecks keep the plain bundle.
 Collect all required rechecks before another folded correction. Canonical recovery
 owns fingerprints/budget and the
 [late-finding rule](../../devrites-lib/reference/standards/afk-hitl.md#retry-cap-no-progress-loops-and-self-resolve):

package/pack/generated/codex/skills/rite-build/reference/wright-dispatch.md

@@ -1,5 +1,7 @@
 # Slice-wright dispatch
 
+> Root-only: not inlined in --role bundles.
+
 `$rite-build` gives one bounded task to exact `devrites-slice-wright`.
 Root owns scope/artifacts/inspection; never writes source/tests.
 Wright alone writes; no agents.
@@ -54,15 +56,19 @@ worktrees stay forbidden.
 1. Run `devrites-engine check slice <slug> <SLICE-ID>` first — it fails a
    malformed contract (missing goal, empty/invalid Writer allowlist,
    unresolvable `Satisfies` AC ids, empty proof field) before a wright
-   context is spent; a failure is a gap, not a dispatch. Then derive the
+   context is spent; a failure is a gap, not a dispatch. A slice with a
+   `pre-dispatch <SLICE-ID>` preflight row next runs
+   `devrites-engine check preconditions <slug> --slice <SLICE-ID>` before
+   `dispatch open`; non-zero is the same gap. Then derive the
    smallest exact project-relative source/test path list; reject
    directories/globs, traversal, symlink escapes, duplicates, and `.devrites/**`.
    A target composed only of vetted executable workflow artifacts routes to the
    controlling root under
    [`workflow-artifacts.md`](../../devrites-lib/reference/standards/workflow-artifacts.md);
    its rejection here is not a blocker.
-2. Include goal, verbatim acceptance, exclusions, context,
-   `test-plan.md` proof commands, applicable standards, and the exact
+2. Goal, verbatim acceptance, exclusions, context, `test-plan.md` proof
+   commands, and applicable standards reach the wright through the slice bundle
+   its contract names; only a native-worktree pilot contract adds the exact
    `WIP(<slug>):` subject (no slice id). Build the wright's read-set with
    `devrites-engine context --skills-root .agents/skills <slug> --phase build --role slice-wright --slice <SLICE-ID> --trigger <set>`
    and hand it the bundle path (over-budget artifacts arrive as anchor indexes;
@@ -70,41 +76,46 @@ worktrees stay forbidden.
    that fire (TDD slice → `tdd`, AFK run → `afk`, UI work → `frontend`, …).
    The command prints `unselected=[...]`; an omitted applicable trigger is a gap.
    For each triggered
-   topology/data/integration standard, include only the feature-specific owner/invariant,
+   topology/data/integration standard, add as anchored `--focus` rows only the feature-specific owner/invariant,
    failure or partial-state case, recovery rule, and required proof from the vetted plan.
    Do not paste the whole standard or silently omit an applicable risk.
-   Quote every active `decisions.md` carry-forward constraint whose `Files:`
+   Quote, as a `--focus` row, every active `decisions.md` carry-forward constraint whose `Files:`
    overlap the task paths (or that names no files).
    A new path requires a new bounded contract; the wright cannot widen the task.
-   Name the writer-safe commands the wright must run (syntax/type/lint, unit and
+   Name (`--checks` gate IDs) the writer-safe commands the wright must run (syntax/type/lint, unit and
    self-check suites, a narrow local smoke of the changed path) and never forbid
    them: a wright that cannot execute writes blind and its failures surface a
    whole review round later. Only artifact-producing, consumptive, or full
-   canonical feature gates stay root-owned.
-3. Record `git diff --name-only` before dispatch so unrelated work remains
-   distinguishable. For an isolated pilot, also record committed base SHA and exact
+   canonical feature gates stay root-owned; when `gates.md` has a `RUN: writer`
+   gate, the checks include `devrites-engine gates precheck <slug> --worktree <path>`
+   (those gates plus `check windows`; never evidence, root still runs every gate).
+3. Run `devrites-engine check diff-scope <slug> --snapshot` before dispatch so
+   unrelated work remains distinguishable (it fingerprints every dirty path). For an isolated pilot, also record committed base SHA and exact
    baseline status before asking the host for isolation. **Failing case:** paths that
    were dirty at that baseline are listed as slice-owned after dispatch.
 
 ## Run
 
-Same-worktree (non-isolated) dispatch claims before writing: `devrites-engine
-claim add --session <id> <task-paths>`; retain its returned `<claim-id>`, then run
-`devrites-engine claim check --session <id> <task-paths>` — a held claim from a
-live foreign session releases the retained claim and stops the dispatch, per
+Same-worktree (non-isolated) dispatch claims before writing: the `dispatch open`
+below adds `--claim-session <id>`, one `--claim <path>` per task path, and
+`--claim-ttl <minutes>` sized to the write; it runs the
+`claim check --session <id> <task-paths>` test, and a live foreign holder fails the
+open with no wave and no claim and stops the dispatch, per
 [`agents.md`](../../devrites-lib/reference/standards/agents.md). `.devrites/**`
 is never a task path; see [Workflow Artifact admission](../../devrites-lib/reference/standards/workflow-artifacts.md).
-Write the exact contract, with its `Writer-safe checks:` line, to
-`packets/<wave>.contract.md` and hand the wright that text verbatim. Reviewers read
-that file, so it states each defect to fix with its anchor, never a reviewer's verdict,
+Render the contract with `devrites-engine packet <slug> --wave <wave> --phase build
+--role slice-wright --slice <SLICE-ID> --checks <G-ID,...> [--focus <file>]` (it
+writes the linted same-worktree `packets/<wave>.contract.md`; a native-worktree pilot
+writes its own contract with `Isolation`, `worktree_base`, and subject) and hand the wright that text verbatim. Reviewers read
+that file, so `--focus` rows state each defect to fix with its anchor, never a reviewer's verdict,
 count, or pass status ("code review is no-findings" voids the next review). Ask the host
 for the exact writer in fresh context; a repair round on the same slice whose
 returned wright the host can still continue goes to that wright on its existing
 handle instead, so it does not re-read the slice from scratch. Wait, and track it
 through the launch barrier — `devrites-engine dispatch <slug> open --phase build --wave
 <slice-id> --role slice-wright --slice <SLICE-ID> --contract <file>` (it refuses a
-contract that forbids writer-safe checks or names none), then `start` with the host handle, `seal`, and
-`return` on completion (auto-records dispatch/return metrics). Every 5 wright
+contract that forbids writer-safe checks or names none), then `start` with the host handle
+(the last start seals the wave) and `return` on completion (auto-records dispatch/return metrics). Every 5 wright
 rounds on one slice, `open` blocks for a reslice review. First re-admit each
 finding still driving rounds under the Proportionality rule of
 [agents.md § Result admission](../../devrites-lib/reference/standards/agents.md#result-admission): one without a broken anchor or a reachable trigger becomes a
@@ -121,17 +132,23 @@ writers in one worktree, run isolated and same-worktree writers concurrently, or
 substitute a generic agent. Opt-in `$rite-build --parallel N` fans out only under
 [`parallel-batch.md`](parallel-batch.md).
 
-After `claim add`, every terminal path releases the claim with
-`devrites-engine claim release --session <id> --id <claim-id>`: successful
-return, rejected result, stop, or a launch the host refused with no handle. A
+The `return` that completes the wave releases its claim; `dispatch abandon --release`
+releases it on any other host-confirmed terminal path (a stop, a launch refused with no
+handle, or a timed-out child later confirmed terminal). A `claim add` claim releases
+with `devrites-engine claim release --session <id> --id <claim-id>` on every terminal path:
+successful return, rejected result, stop, or a launch the host refused with no handle. A
 timeout or unknown outcome keeps the claim ([`parallel-dispatch.md`](../../devrites-lib/reference/parallel-dispatch.md#cancellation-and-terminal-reconciliation)).
 TTL is crash recovery, not normal cleanup.
+An `unattributed root edit` exit 3 (root-edit tripwire) routes the path through a wright wave naming it in
+`--claim`, or, given evidence (owner work, gate output, a standalone wright, Polish ADR/`DESIGN.md`),
+`dispatch <slug> attribute --reason <evidence> --path <path>`.
 
 ## Inspect and prove
 
 1. Compare the returned file list and `git diff --name-only` with task paths.
-   `devrites-engine check diff-scope <slug> --allow <task-paths>` is the
-   mechanical subset gate — run it before any reviewer dispatch; a violation
+   `devrites-engine check diff-scope <slug> --allow <task-paths> --baseline` is the
+   mechanical subset gate (a step-3 path whose bytes are unchanged is not a
+   violation; a changed one still is) — run it before any reviewer dispatch; a violation
    restores through the bounded wright without spending review, but only for a
    path the wright's `files_changed` or diff trace attributes to it. An
    unattributed extra path that was clean at the step-3 baseline is preserved
@@ -141,8 +158,8 @@ TTL is crash recovery, not normal cleanup.
    whether empty or filled — or adds a path. Root never widens scope or edits
    source.
 2. Run `devrites-engine check windows <slug>` on the wright's diff (`--worktree`
-   in the same tree; `--base <B> --cwd <worktree>` for a parallel transfer
-   commit). Each unwaived hit is repaired through the bounded wright or gets a
+   in the same tree, plus `--since-dispatch <wave>` naming a repair round's wave;
+   `--base <B> --cwd <worktree>` for a parallel transfer commit). Each unwaived hit is repaired through the bounded wright or gets a
    reasoned `windows.md` row before review; never waive to reach green. Then
    inspect the test diff for deletion, skipping, focus markers, or loosened
    assertions. Dedicated test analysis treats weakening as Critical.

package/pack/generated/codex/skills/rite-clarify/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","rite-clarify/reference/decision-coverage.md","rite-clarify/reference/anti-patterns.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md"],"workspaceByRole":{"evidence-scout":["brief.md","spec.md","state.md","questions.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/afk-hitl.md","rite-clarify/reference/decision-coverage.md","rite-clarify/reference/anti-patterns.md"],"triggers":{"agents":["devrites-lib/reference/standards/agents.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md"],"workspaceByRole":{"evidence-scout":["brief.md","spec.md","state.md","questions.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/afk-hitl.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --phase clarify` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 

package/pack/generated/codex/skills/rite-converge/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/spec-grammar.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/tooling.md","devrites-lib/reference/standards/testing.md","rite-converge/reference/convergence-assessment.md","rite-converge/reference/anti-patterns.md","rite-build/reference/spec-drift-guard.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"principles":["devrites-lib/reference/standards/principles.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md"],"workspaceByRole":{"evidence-scout":["spec.md","plan.md","tasks.md","state.md","evidence.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/spec-grammar.md","devrites-lib/reference/standards/agents.md","devrites-lib/reference/standards/tooling.md","devrites-lib/reference/standards/testing.md","rite-converge/reference/convergence-assessment.md","rite-converge/reference/anti-patterns.md","rite-build/reference/spec-drift-guard.md"],"triggers":{"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"principles":["devrites-lib/reference/standards/principles.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","eng-review.md","test-plan.md","gates.md","evidence.md"],"workspaceByRole":{"evidence-scout":["spec.md","plan.md","tasks.md","state.md","evidence.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/tooling.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --phase converge` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -33,8 +33,8 @@ Pull on demand:
 - [`spec-grammar.md`](../devrites-lib/reference/standards/spec-grammar.md): buildable acceptance criteria vs `## Success metrics` (outcome KPIs the
   code can't make true and this pass never enqueues); structured `### Requirement:` /
   `#### Scenario:` blocks, each scenario one behavior to check as built / partial / absent.
-- [`tooling.md`](../devrites-lib/reference/standards/tooling.md): use the primary available code index; cross-check only a named unresolved
-  predicate, then fall back to LSP/file search. Read live code, not artifact claims.
+- [`code-navigation.md`](../devrites-lib/reference/standards/code-navigation.md): find each unit's code with codebase-memory `search_graph`
+  and `get_code_snippet`, check cited paths with `check_index_coverage`, then fall back to LSP/file search. Read live code, not artifact claims.
 - [`testing.md`](../devrites-lib/reference/standards/testing.md): a criterion with code but no covering test is *partial*, not done.
 - [`repository-topology.md`](../devrites-lib/reference/standards/repository-topology.md), [`data-integrity.md`](../devrites-lib/reference/standards/data-integrity.md), [`integration-reliability.md`](../devrites-lib/reference/standards/integration-reliability.md): only for
   triggered applicability rows; missing failure/recovery behavior is partial or absent.
@@ -94,7 +94,7 @@ Pull on demand:
    proof still agrees with its `test-plan.md` row, and the mapped prose preserves the
    requirement's meaning. Record orphaned, invented, duplicate, or contradictory
    mappings as gaps. Then read the live code
-   (code-intelligence index per [`tooling.md`](../devrites-lib/reference/standards/tooling.md)); artifact mappings never prove implementation.
+   (codebase-memory per [`code-navigation.md`](../devrites-lib/reference/standards/code-navigation.md)); artifact mappings never prove implementation.
 4. **Assess each unit as built / partial / absent** against the live code (the rubric is in
    [`reference/convergence-assessment.md`](reference/convergence-assessment.md)): every
    acceptance criterion / scenario, every plan touch-point, and every existing slice's stated

package/pack/generated/codex/skills/rite-converge/reference/convergence-assessment.md

@@ -25,9 +25,9 @@ slice.
 | **partial** | Some of it exists: happy path only, un-wired, untested, a TODO stub, or an edge case from the scenario's WHEN/THEN missing. | Append a slice for the **remainder**, its `Known-Gotchas` naming what's already there so `$rite-build` extends rather than rebuilds. |
 | **absent** | No code implements it. | Append a full slice. |
 
-Read the code to decide: do not infer from the plan. Apply [`tooling.md`](../../devrites-lib/reference/standards/tooling.md): use the
-primary available code index, cross-check only a named unresolved predicate, then use LSP/file
-search so the verdict reflects live code. Read `traceability.md` to see what is mapped; only
+Read the code to decide: do not infer from the plan. Apply [`code-navigation.md`](../../devrites-lib/reference/standards/code-navigation.md): locate
+code with codebase-memory `search_graph`, confirm cited paths with `check_index_coverage`, then use
+LSP/file search so the verdict reflects live code. Read `traceability.md` to see what is mapped; only
 code and tests tell you what is built.
 
 Treat accepted invariants, failure/recovery rows, and triggered applicability obligations as

package/pack/generated/codex/skills/rite-define/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/spec-grammar.md","rite-define/reference/plan-template.md","rite-define/reference/gates.md","rite-define/reference/anti-patterns.md","rite-plan/reference/slicing.md","rite-plan/reference/task-breakdown.md","rite-spec/reference/acceptance-criteria.md","rite-spec/reference/state-workspace.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"agents":["devrites-lib/reference/standards/agents.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"frontend":["devrites-frontend-craft/reference/fullstack.md"],"principles":["devrites-lib/reference/standards/principles.md"],"visual":["devrites-lib/reference/visual-playbooks/index.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","strategy.md","design-brief.md","references.md"],"workspaceByRole":{"plan-drafter":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","architecture.md","strategy.md","design-brief.md","references.md","state.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/spec-grammar.md","rite-define/reference/plan-template.md","rite-define/reference/gates.md","rite-define/reference/anti-patterns.md","rite-plan/reference/slicing.md","rite-plan/reference/task-breakdown.md","rite-spec/reference/acceptance-criteria.md","rite-spec/reference/state-workspace.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"agents":["devrites-lib/reference/standards/agents.md"],"applicability":["devrites-lib/reference/standards/repository-topology.md","devrites-lib/reference/standards/data-integrity.md","devrites-lib/reference/standards/integration-reliability.md"],"documentation":["devrites-lib/reference/standards/documentation.md"],"elicitation":["devrites-lib/reference/standards/elicitation.md"],"frontend":["devrites-frontend-craft/reference/fullstack.md"],"principles":["devrites-lib/reference/standards/principles.md"],"visual":["devrites-lib/reference/visual-playbooks/index.md"],"workflow":["devrites-lib/reference/standards/development-workflow.md"],"workflow-artifacts":["devrites-lib/reference/workspace-artifact-schema.md"]},"workspace":["brief.md","spec.md","state.md","decisions.md","assumptions.md","questions.md","decision-coverage.md","architecture.md","plan.md","tasks.md","traceability.md","strategy.md","design-brief.md","references.md"],"workspaceByRole":{"plan-drafter":["brief.md","spec.md","decision-coverage.md","questions.md","decisions.md","assumptions.md","architecture.md","strategy.md","design-brief.md","references.md","state.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/afk-hitl.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --phase define` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -86,8 +86,8 @@ Pull these via `Read` when shaping the plan:
    never an assumption the build discovers.
 2. **Reconcile architecture + approach** against live seams; root writes at step 6.
    `architecture.md` owns layers/boundaries/integrations/data/dependencies/risks/impact;
-   `plan.md` owns build strategy. Use the code index for structure/impact
-   ([`tooling.md`](../devrites-lib/reference/standards/tooling.md)) and source-check external behavior.
+   `plan.md` owns build strategy. Use codebase-memory-mcp for structure/impact
+   (`get_architecture`, `trace_path`; [`code-navigation.md`](../devrites-lib/reference/standards/code-navigation.md)) and source-check external behavior.
    Record significant options as `DEC-###` only for non-obvious real trade-offs where
    independently built lower units could choose incompatibly; leave other details to convention/
    slice. Compare ≥2 viable approaches for hard-to-reverse boundaries, models, contracts, or
@@ -136,8 +136,13 @@ Pull these via `Read` when shaping the plan:
    ([artifacts.md](../rite-vet/reference/artifacts.md)). Lift covered/backstop `Edge Coverage` rows and resolved `Prohibitions (must-NOT)`
    rows into `traceability.md` and `test-plan.md`; unresolved rows get a gate/owner. Each
    `Existing behavior to preserve` row becomes a regression row whose current evidence is
-   observed green on the unchanged baseline as a prerequisite of the first slice touching that
-   seam, and green again at Prove; a red baseline is recorded pre-existing, never relabelled.
+   observed green on the unchanged baseline at Vet (preflight `Run at` `vet`), again before the
+   first slice touching that seam edits it, and green at Prove; a red baseline is recorded
+   pre-existing, never relabelled. A slice whose `Files likely touched` names a manifest or
+   lockfile also plans a `dependency-dry-run SLICE-###` preflight row ([artifacts.md](../rite-vet/reference/artifacts.md)).
+   Mark a proof row `RUN: writer` only when it is local, needs no network, container or browser,
+   and passes in an uncommitted worktree (an empty-`git diff` check stays root); its `gates.md`
+   gate carries the attribute, the wright pre-runs it via `gates precheck`, and root still runs it.
    Evidence that cannot run takes `characterize-before-modify` or blocks. Each
    cross-slice boundary names producer, consumer, invariant, integration step, and proof.
    Map each applicable topology/data/integration risk to a slice, failure/recovery path,

package/pack/generated/codex/skills/rite-doctor/SKILL.md

@@ -39,6 +39,19 @@ Read-only: never repair files, advance a feature, or diagnose the application.
    missing required profile is `FAIL`. A project or local Claude
    `permissions.defaultMode: plan` blocks the root's `.devrites` writes:
    `FAIL`, remediation: remove it.
+   Host-overhead advisories are report-only, never `FAIL`; read files, spawn
+   nothing. (a) If user, project, or local Claude `permissions.deny` names `Grep`
+   or `Glob` (possibly deliberate), `WARN` and list the installed roles whose
+   `tools:` lacks Bash, which leaves the denied tool as their only search route.
+   Remediation: remove `Grep`/`Glob` from the `permissions.deny` of the settings
+   file that names it, if the deny is not deliberate, or accept whole-file reads.
+   (b) `INFO` each DevRites marker block in `AGENTS.md` with its byte size; for a
+   block whose host is not the one running doctor, name the `--no-<host>` flag
+   to add to the manifest's recorded install flags when re-running
+   `devrites-engine install`, if that host is unused. (c) On omp, `INFO` the count and total `SKILL.md` bytes of
+   non-DevRites skills in omp's user-global agent skills directory and the
+   servers in its user-global agent `mcp.json`, which every subagent inherits; the user may prune
+   them. Never edit or hide them.
 4. **Inspect workspace topology.** Read `.devrites/ACTIVE` if present. An empty
    cursor is `OK` (no active feature). Otherwise require one safe slug, a
    contained regular `.devrites/work/<slug>/state.md`, and no symlink in the
@@ -61,7 +74,8 @@ Read-only: never repair files, advance a feature, or diagnose the application.
    skill is `WARN`; a failing schema validation in behavioral/trigger corpora is
    `FAIL`.
 7. **Report, do not repair.** Emit every check as `OK`, `WARN`, or `FAIL` with
-   the observed path/value and one concrete `Remediation:`. A check that is
+   the observed path/value and one concrete `Remediation:`; step 3 advisories
+   may emit `INFO`. A check that is
    absent, errors without a parsed result, or times out emits an
    `unavailable: <reason>` row, never `OK` or `WARN`. Never install,
    update, delete, chmod, rewrite config, create a workspace, or trust a command
@@ -77,10 +91,11 @@ DevRites doctor: <OK | WARN | FAIL>
 OK: <check — observed evidence>
 WARN: <check — observed evidence>
 FAIL: <check — observed evidence>
+INFO: <advisory — observed evidence>
 unavailable: <check — reason>
 Remediation: <one action for each WARN/FAIL | none>
 ```
 
 Overall status is the worst emitted severity; any `unavailable` row keeps it
-from `OK` (`WARN` when nothing is worse). Omit empty severity rows; never
+from `OK` (`WARN` when nothing is worse); `INFO` never raises it. Omit empty severity rows; never
 label a skipped or unavailable check `OK`.

package/pack/generated/codex/skills/rite-dogfood/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[feature-slug|branch] [--port N]"
 user-invocable: true
 disable-model-invocation: true
 ---
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-frontend-craft/reference/quality-standards.md","devrites-lib/reference/reply-contract.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"testing":["devrites-lib/reference/standards/testing.md"],"tooling":["devrites-lib/reference/standards/tooling.md"]},"workspace":["state.md","questions.md","dogfood.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-frontend-craft/reference/quality-standards.md","devrites-lib/reference/reply-contract.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"testing":["devrites-lib/reference/standards/testing.md"],"tooling":["devrites-lib/reference/standards/tooling.md"]},"workspace":["state.md","questions.md","dogfood.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill rite-dogfood` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # $rite-dogfood: diff-scoped browser QA

package/pack/generated/codex/skills/rite-explain/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[a concept | a diff ref | an idea | \"what did I do this week?\"
 user-invocable: true
 disable-model-invocation: true
 ---
-<!-- loads: {"always":["rite-explain/reference/intake.md"],"triggers":{"repo":["devrites-lib/reference/standards/tooling.md"],"style":["devrites-lib/reference/standards/prose-style.md"],"principles":["devrites-lib/reference/standards/principles.md"]}} -->
+<!-- loads: {"always":["rite-explain/reference/intake.md"],"triggers":{"repo":["devrites-lib/reference/standards/tooling.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md"],"style":["devrites-lib/reference/standards/prose-style.md"],"principles":["devrites-lib/reference/standards/principles.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .agents/skills <slug> --skill rite-explain` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # $rite-explain: the human half of the learning loop

package/pack/generated/codex/skills/rite-explain/reference/intake.md

@@ -8,7 +8,7 @@ source for classification; the SKILL improvises none of it.
 
 | Shape | The input is… | Grounds in | Composes as | Check-in |
 | --- | --- | --- | --- | --- |
-| **concept** | a named idea / pattern / technology ("explain optimistic locking", "how does our gate engine work") | this repo's footprint of the concept (codegraph first) + external sources only if they sharpen it | build the mental model from a known part of *this* codebase outward | **checked exercise** |
+| **concept** | a named idea / pattern / technology ("explain optimistic locking", "how does our gate engine work") | this repo's footprint of the concept (codebase-memory `search_graph` first) + external sources only if they sharpen it | build the mental model from a known part of *this* codebase outward | **checked exercise** |
 | **diff** | a specific change: a ref, a slice, a PR, "this diff" | `git diff` / the hunks + `decisions.md` + `seal.md` for the *why* + `touched-files.md` `Review trail` when present | explainer, or **walkthrough** when the user asks to review/approve/checkpoint the change | **predict-then-reveal** |
 | **idea** | a hypothesis or "what if" with no code yet | the user's framing + prior art (external, date-weighted) | steelman the idea, name its hinge and its failure mode | **checked exercise** |
 | **recap** | a time window of the user's own work ("what did I ship this week") | the shipped archive + `git log`/`git diff` over the window + `evidence.md` | narrate what changed and what was learned, ranked by leverage | **predict-then-reveal** |