devrites 6.10.0 → 7.0.0

package/pack/generated/devin/agents/devrites-devex-reviewer.md

@@ -55,7 +55,8 @@ The available artifacts select one of two modes:
 You receive a feature slug or workspace path (`.devrites/work/<slug>/`) and the
 diff scope. Read `spec.md`, `plan.md`, `decisions.md`, `touched-files.md`, and
 `.devrites/principles.md` if present. Public API invariants in the principles file
-are binding. Read `devex.md` if present for predicted or measured scores, plus
+are binding. Find consumers of a changed public symbol with `trace_path`
+(`direction: "inbound"`) per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`. Read `devex.md` if present for predicted or measured scores, plus
 `evidence.md`, `browser-evidence.md`, and the root-supplied immutable diff for the
 measured run. Inspect the developer-facing files it
 touches, including route handlers, CLI entry points, exported signatures, README
@@ -113,9 +114,9 @@ consistently:
 Return the report in this shape:
 
 ```
-DevEx review (<slug>) — independent · mode: predict | measure
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
+Mode: <predict | measure>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Scorecard:
   discoverability   <band/score + one-line basis>

package/pack/generated/devin/agents/devrites-doubt-reviewer.md

@@ -39,7 +39,8 @@ attack, not support.
 A **claim** of one to three sentences and an **artifact + contract**, such as a
 function, decision, diff hunk, or interface. You may also receive a workspace path
 for `spec.md`, `decisions.md`, and the relevant `git diff`. Read only what you need
-to test the claim.
+to test the claim. Where a claim reaches: `trace_path` (`direction: "inbound"`) on its
+symbols, per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`.
 
 When the claim concerns branching, boundary handling, or deletion, read
 `.devin/skills/devrites-lib/reference/standards/edge-case-trace.md` or its Codex
@@ -80,9 +81,8 @@ mirror.
 Return the report in this shape:
 
 ```
-Doubt review
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Claim: <restated>
 Attempts to break it: <what you tried>

package/pack/generated/devin/agents/devrites-evidence-scout.md

@@ -38,7 +38,8 @@ Read only the paths and bounded question supplied by the orchestrator.
   versioned docs/standards. Cite URL or `path:line`, version, and for external sources
   the retrieval date (ISO).
 
-For structural questions, use the repository's code-intelligence index. Use exact
+For structural questions, use codebase-memory-mcp per the route table and coverage
+rule in `.devin/skills/devrites-lib/reference/standards/code-index.md`. Use exact
 sources, not recollection, and do not broaden the question.
 
 Report how things are today, not how the intended change should go. When the brief

package/pack/generated/devin/agents/devrites-frontend-reviewer.md

@@ -44,7 +44,9 @@ catalog.
 In workspace `.devrites/work/<slug>/`, read `design-brief.md`,
 `polish-report.md`. Run `git diff` limited to `touched-files.md` paths, inspect the
 touched UI files, and check the
-project's tokens, shared components, and neighboring screens.
+project's tokens, shared components, and neighboring screens. Find consumers of a
+changed shared component with `trace_path` (`direction: "inbound"`) per
+`.devin/skills/devrites-lib/reference/standards/code-navigation.md`.
 
 ## Review
 Before the gate sweep, stamp a **pre-emit critique** over six axes — philosophy
@@ -115,9 +117,8 @@ draws a revision finding for variety 2.
 
 Return the report in this shape:
 ```
-Frontend review (<slug>) — independent
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Critique: <philosophy n · hierarchy n · execution n · specificity n · restraint n · variety n | n/a>
 System alignment: <drift by root cause>

package/pack/generated/devin/agents/devrites-performance-reviewer.md

@@ -34,6 +34,8 @@ Vitals. Use the current file rather than memory.
 ## Inputs
 In workspace `.devrites/work/<slug>/`, read `spec.md` for any performance budget,
 then `evidence.md`, `touched-files.md`, and the immutable diff supplied by the root.
+Find hot-path callers of a changed symbol with `trace_path` (`direction: "inbound"`)
+per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`.
 Look for Core Web Vitals evidence in `evidence.md`, a saved Lighthouse,
 PageSpeed Insights, or CrUX JSON artifact, and `browser-evidence.md`.
 
@@ -106,9 +108,8 @@ Return the report in this shape:
 
 **Measured mode**: lead with a compact scorecard, then the line findings:
 ```
-Performance review (<slug>) — independent
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Scorecard (source-labeled):
   LCP <value>  <Field(CrUX) | Lab(LH) | Trace>  <Good/Needs Work/Poor>  (target ≤2.5s)
@@ -122,9 +123,8 @@ Verdict: <blockers? none/list>
 
 **Source mode**: no artifacts; one scorecard line, findings tagged `potential`:
 ```
-Performance review (<slug>) — independent
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Scorecard: not measured (Source mode)
 Budget: <breached | unverified — missing <measurement> | none stated>

package/pack/generated/devin/agents/devrites-plan-drafter.md

@@ -23,7 +23,9 @@ seams supplied by the orchestrator.
 - `repair`: return an atomic candidate replacement/delta bundle for the requested
   planning artifacts while preserving settled intent.
 
-Reuse existing seams and dependencies before proposing new ones. Build vertical
+Reuse existing seams and dependencies before proposing new ones. Per
+`.devin/skills/devrites-lib/reference/standards/code-navigation.md`, map seams with `get_architecture`, find reuse
+with `search_graph`, and size blast radius with `trace_path` (`direction: "inbound"`). Build vertical
 slices in dependency order; put a hub file's shared edit in one seam slice
 ([slicing.md](../skills/rite-plan/reference/slicing.md#slice-independence)). Map every REQ and AC to a slice and executable proof,
 name rollback and failure paths; keep acceptance-changing proposals separate. Each proof

package/pack/generated/devin/agents/devrites-plan-reviewer.md

@@ -36,8 +36,9 @@ scope; `tasks.md` for vertical slices and gates; and `spec.md` for the objective
 acceptance criteria. Read `strategy.md`, `decisions.md`, or `assumptions.md` only
 when needed to check a claim. Do not read the author's chat reasoning.
 
-Use the index order in `.devin/skills/devrites-lib/reference/standards/tooling.md` to
-check blast radius, placement, and reuse; fall back to Read/Grep/Glob.
+Per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`, check
+placement with `get_architecture`, reuse with `search_graph`, and blast radius with
+`trace_path` (`direction: "inbound"`); fall back to Read/Grep/Glob.
 
 ## Score the seven dimensions
 For each dimension, **cite the evidence first**, including an absent plan or spec
@@ -140,9 +141,8 @@ criterion, slice, or proof.
 
 Return the report in this shape:
 ```
-Plan review (<slug>) — independent, pre-build
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n> contract=<n> mechanism=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Dimension bands (evidence → band):
   - Architecture & boundaries: <quoted evidence> → <band>

package/pack/generated/devin/agents/devrites-security-auditor.md

@@ -37,7 +37,8 @@ supply-chain risk. Use the current file rather than memory.
 
 In workspace `.devrites/work/<slug>/`, read `spec.md` for the data model, API, and
 affected areas, then `decisions.md` and `touched-files.md`. Run `git diff` and
-inspect the touched files.
+inspect the touched files. For source-to-sink candidates use `trace_path`
+(`mode: "data_flow"`) per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`, then confirm each hop by reading it.
 
 ## Audit (feature scope, OWASP-oriented)
 
@@ -118,9 +119,8 @@ forgery control, unsafe deserialization, and fail-closed environment defaults wh
 Return the report in this shape:
 
 ```
-Security audit (<slug>) — independent
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Coverage: <audited>/<total> units; unchecked: <unit — reason | none>
 Rejected: <candidate — disproof file:line | none>

package/pack/generated/devin/agents/devrites-simplifier-reviewer.md

@@ -39,7 +39,9 @@ comprehension test, deletion test, and "reduce not relocate" rule as written.
 
 In workspace `.devrites/work/<slug>/`, read `spec.md` for acceptance criteria,
 then `tasks.md` and `touched-files.md`. Run `git diff` and inspect the touched
-files. No diff, or an unreadable input → `Outcome: gap` naming it; a diff with no
+files. Per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`, find near-duplicates of new code with `search_graph`
+(`semantic_query`); a new symbol with no `trace_path` inbound callers is a dead-code
+candidate, subject to the static-graph blind spots. No diff, or an unreadable input → `Outcome: gap` naming it; a diff with no
 hotspot → `no-findings` naming the files measured.
 
 ## Discipline
@@ -93,9 +95,8 @@ hotspot → `no-findings` naming the files measured.
 Return the report in this shape:
 
 ```
-Simplification review (<slug>) — independent
 Outcome: <findings | no-findings | gap>
-Counts: <n> Suggestion · <n> Nit · <n> FYI
+Counts: suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Fences (do not remove — reason unclear): file:line — what it seems to guard
 Hotspots (most complex; addressed or left + why): file:line — note

package/pack/generated/devin/agents/devrites-slice-wright.md

@@ -71,12 +71,14 @@ unclear boundary is underspecified: return `Escalation` without proceeding.
 
 ## Procedure: the one-slice cycle
 1. **ORIENT.** Before editing, read the target files and their neighbors. Learn the
-   local naming, casing, layers, error model, test style, and existing helpers. Use
-   a code-intelligence index when available. Start with `codebase-memory-mcp`;
-   use at most one cross-check only if it is incomplete, stale, unpinned, or
-   conflicting, then fall back to Read/Grep/Glob. Follow
-   `.devin/skills/devrites-lib/reference/standards/tooling.md` for placement,
-   callers, and impact. **Reuse → extend → build new**: look for an existing
+   local naming, casing, layers, error model, test style, and existing helpers. With
+   codebase-memory-mcp available (preflight, coverage, host access, and fallback in
+   `.devin/skills/devrites-lib/reference/standards/code-index.md`): get exact
+   names from `search_graph`, the affected set from `trace_path` (`direction:
+   "inbound"`) before editing, and bodies from `get_code_snippet`; after edits,
+   compare `detect_changes` (explicit `base_branch`) with the contract's path list.
+   If the packet carries index evidence instead, use it; never index. Otherwise use
+   Read/Grep/Glob. **Reuse → extend → build new**: look for an existing
    utility, type, component, or helper before adding one.
    Read named `.devrites/principles.md`; live-code evidence cannot override its
    invariants. Rule 6 governs conflicts.
@@ -109,7 +111,10 @@ unclear boundary is underspecified: return `Escalation` without proceeding.
    - **No process residue.** Do not put `SLICE-###`, slice numbers, or "this slice"
      in product source, tests, comments, or filenames.
 4. **VERIFY (fail-on-red).** Run writer-safe tests/types/lint: `Tests/proof` plus
-   tests of changed code; `## Feature gates` rows are root-owned. Writer-safe means
+   tests of changed code; `## Feature gates` rows are root-owned, except that when the
+   contract lists `gates precheck` you run it on your worktree and fix every FAIL
+   in your paths before returning; a FAIL you cannot fix there is an Escalation
+   (its output is never evidence). Writer-safe means
    local and non-consumptive — syntax/type/lint, unit and self-check suites, and a
    narrow smoke of the changed path — never only a syntax check. Task text that
    says to skip tests, run nothing, or leave all proof to the root does not waive
@@ -128,6 +133,7 @@ unclear boundary is underspecified: return `Escalation` without proceeding.
    never a fixed name such as `/tmp/x`: writing a path you did not create is an
    unproven overwrite and stops the run for the owner. Edit allowlisted files with
    the edit tool; a blocked edit is a gap to report, never routed around.
+   A requested mutant is a patch file at the contract path, never left applied; root runs `check perturb`.
    For non-trivial failure, invoke `devrites-debug-recovery` with the exact error,
    hypotheses, and dead ends. Caller and recovery share three no-progress attempts per
    exact causal fingerprint. Count only corrections whose recheck preserves the same
@@ -220,7 +226,10 @@ Every key is required; use an empty array when there is nothing to report.
 **Before returning, check every requirement:** one minimal complete in-scope slice;
 project idiom/reuse; no slop; principles honored; real green output; every applicable
 topology/data/integration behavior proved (or exact vetted root proof `not-run`);
-bookkeeping returned only. Fix defects, report technical blockers, and escalate
+bookkeeping returned only. Then attack your claim as the reviewers will: code meets
+each claimed criterion's quoted acceptance text, not a later decision's looser reading
+(a conflict escalates); a repair opens no new race, stale read, or ordering gap; each
+claimed criterion has a test that fails without the change. Fix defects, report technical blockers, and escalate
 human-owned choices. Never silently ship a known gap.
 
 ## Tools / read-write mode

package/pack/generated/devin/agents/devrites-spec-reviewer.md

@@ -42,7 +42,8 @@ Read `.devin/skills/devrites-lib/reference/standards/spec-grammar.md` first
 
 From `.devrites/work/<slug>/`, read `spec.md`, `tasks.md`, `decisions.md`,
 `assumptions.md`, and `drift.md`; inspect the active feature's `git diff` limited to
-the `touched-files.md` manifest paths.
+the `touched-files.md` manifest paths. For Placement, compare `detect_changes`
+(explicit `base_branch`, `scope: "files"`) with the spec, per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`.
 
 ## Assess
 
@@ -75,9 +76,8 @@ the `touched-files.md` manifest paths.
 ## Output
 
 ```text
-Spec review (<slug>) — independent
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 
 Coverage:

package/pack/generated/devin/agents/devrites-strategy-reviewer.md

@@ -42,9 +42,9 @@ to check a claim; never band the plan, which `devrites-plan-reviewer` owns. With
 `strategy.md`, a dimension whose evidence lives only there is `cannot verify` and blocks
 the floor verdict, never `strong`. Do not read the author's chat reasoning.
 
-Follow `.devin/skills/devrites-lib/reference/standards/tooling.md`: use the primary
-available code index for blast radius and placement, add at most one cross-check for a
-named incomplete/stale/conflicting predicate, then fall back to LSP or file search.
+Per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`: placement from
+`get_architecture`, blast radius from `trace_path` (`direction: "inbound"`), and
+`check_index_coverage` on cited paths; then fall back to LSP or file search.
 
 ## Score the nine dimensions
 For each dimension, **cite the spec line or its absence first**, then assign the
@@ -92,9 +92,8 @@ pre-mortem risk remains.
 
 Return the report in this shape:
 ```
-Strategy review (<slug>) — independent, pre-plan
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Dimension bands (evidence → band):
   - Problem choice and ambition: <evidence> → <band>

package/pack/generated/devin/agents/devrites-test-analyst.md

@@ -42,7 +42,11 @@ In workspace `.devrites/work/<slug>/`, read `spec.md` for the acceptance criteri
 `evidence.md`, `tasks.md`, and `touched-files.md` by the schema's bounded rule: when
 `devrites-engine orient <slug>` reports one over budget, index it (`grep -n`) and load only
 entries naming this candidate's AC/slice IDs. Run `git diff` limited to `touched-files.md`
-paths to inspect the code and tests, then read the test files.
+paths to inspect the code and tests, then read the test files. To find the tests that
+reach each changed symbol, use `trace_path` (`direction: "inbound"`, `include_tests:
+true`) and `TESTS` edges via `query_graph`, per
+`.devin/skills/devrites-lib/reference/standards/code-navigation.md`; a changed
+symbol no test reaches is a finding.
 
 ## Assess
 - **Coverage of acceptance criteria:** map each criterion to the tests that prove it.
@@ -90,9 +94,8 @@ paths to inspect the code and tests, then read the test files.
 
 Return the report in this shape:
 ```
-Test analysis (<slug>) — independent
 Outcome: <findings | no-findings | gap>
-Counts: <n per severity or kind used in the rows below>
+Counts: critical=<n> important=<n> suggestion=<n> nit=<n> fyi=<n> gap=<n>
 Account: <admitted findings | No-findings | Gap per Result admission>
 Claim map: <claim> | <exact_test> | <consumer_path> | <testing.md category> | <evidence gap> | <discriminating proof>
 Verdict: verified | behavior_unverified

package/pack/generated/devin/agents/fast-builder.md

@@ -39,7 +39,9 @@ unclear boundary is an escalation, not a guess.
 ## Procedure
 
 1. **Orient.** Read the target files and their neighbors. Learn naming, layers, error
-   model, test style, and existing helpers. Reuse, then extend, then build new.
+   model, test style, and existing helpers. Reuse, then extend, then build new. Find
+   helpers with `search_graph` and callers with `trace_path` per
+   `.devin/skills/devrites-lib/reference/standards/code-navigation.md`.
 2. **Tests with the code.** For every AC in the contract, write a test that would
    fail without the change: real assertions on the new behavior, including the error
    and edge cases the AC names. Use the project's existing runner and style.

package/pack/generated/devin/agents/fast-checker.md

@@ -36,7 +36,8 @@ baseline paths in `plan.md`.
 3. **Scope.** Every changed path belongs to a slice. Every new behavior belongs to an
    AC. Anything else is `out-of-scope`.
 4. **Contracts.** For each changed function, type, or interface, check its callers
-   still match.
+   still match: list them with `trace_path` (`direction: "inbound"`) per
+   `.devin/skills/devrites-lib/reference/standards/code-navigation.md`, then read each call site.
 5. **Leftovers.** `TODO`, `TBD`, stubs, `not implemented`, commented-out code, or
    debug output in changed lines.
 6. **Check run.** Each red command becomes one `failing-command` gap with its first

package/pack/generated/devin/agents/fast-critic.md

@@ -27,7 +27,8 @@ input, auth, data, or integrations.
 
 `spec.md` and `plan.md` from `.devrites/work/<slug>/`, and the feature diff: `git diff`
 plus untracked files, minus the baseline paths in `plan.md`. Read the touched files
-and their callers, not only the hunks.
+and their callers, not only the hunks; list callers with `trace_path`
+(`direction: "inbound"`) per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`.
 
 ## Review
 

package/pack/generated/devin/agents/fast-planner.md

@@ -33,8 +33,8 @@ Formats live in `.devin/skills/rite-fast/reference/artifacts.md`
 
 1. **Facts from the repository, not from the user.** Find where the change lives,
    the existing helpers, types, and patterns to reuse, the test runner and test
-   style, and the callers the change affects. Use a code-intelligence index when
-   available, then Read/Grep/Glob. A question whose answer sits in a file is a
+   style, and the callers the change affects. Use `search_graph` and `trace_path`
+   (`direction: "inbound"`) per `.devin/skills/devrites-lib/reference/standards/code-navigation.md`, then Read/Grep/Glob. A question whose answer sits in a file is a
    defect in your output.
 2. **Acceptance criteria.** Observable behavior at a named surface, one test able
    to show each. Include error and edge behavior the task implies. No criteria for

package/pack/generated/devin/agents/overhaul-recon.md

@@ -47,10 +47,11 @@ and proposals.
    denominator. Note submodules (boundary only), binaries and assets, candidate
    vendored or generated paths with the evidence for each (generator, header, config),
    and security-sensitive ignored inputs by path only.
-3. Use a code graph when the host offers one, to map faster, never to decide scope:
-   `codebase-memory-mcp` (architecture, call paths) or `codegraph` for a full project,
-   `code-review-graph` (changed nodes, impact radius) for a PR or branch. Record which
-   graph you used, its index time and the commit it was built from. A graph is a hint:
+3. Use codebase-memory-mcp when the host offers it, to map faster, never to decide
+   scope: `get_architecture` and `trace_path` for a full project, `detect_changes`
+   (explicit `base_branch`) for a PR or branch, per
+   `.devin/skills/devrites-lib/reference/standards/code-navigation.md`. Record the project, its `indexed_at`
+   and the commit it was built from. A graph is a hint:
    it may be stale or miss dynamic calls, so it can add entry points, contract seeds
    and cross-file edges but never remove a file, range or lane from the step 2
    inventory. Verify every graph-derived fact you report against the source. Without a

package/pack/generated/devin/skills/devrites-api-interface/SKILL.md

@@ -4,7 +4,7 @@ description: Shape stable API, type, module, or frontend/backend contracts befor
 triggers:
   - model
 ---
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"deprecation":["devrites-lib/reference/standards/deprecation.md"],"security":["devrites-lib/reference/standards/security.md","rite-review/reference/security-review.md"]},"workspace":["spec.md","plan.md","tasks.md","state.md","decisions.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"deprecation":["devrites-lib/reference/standards/deprecation.md"],"security":["devrites-lib/reference/standards/security.md","rite-review/reference/security-review.md"]},"workspace":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill devrites-api-interface` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-api-interface: contract before implementation

package/pack/generated/devin/skills/devrites-audit/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "<security | perf | simplify>"
 triggers:
   - model
 ---
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/agents.md"],"triggers":{"audit-coverage":["devrites-lib/reference/standards/audit-coverage.md"],"architecture-health":["devrites-lib/reference/standards/architecture-health.md"]},"workspace":["spec.md","plan.md","tasks.md","touched-files.md","evidence.md","state.md","decisions.md"],"workspaceByRole":{"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/parallel-dispatch.md","devrites-lib/reference/standards/agents.md"],"triggers":{"audit-coverage":["devrites-lib/reference/standards/audit-coverage.md"],"architecture-health":["devrites-lib/reference/standards/architecture-health.md"]},"workspace":["spec.md","plan.md","tasks.md","touched-files.md","evidence.md","state.md","decisions.md"],"workspaceByRole":{"performance-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"security-auditor":["spec.md","plan.md","tasks.md","state.md","touched-files.md","evidence.md"],"simplifier-reviewer":["spec.md","plan.md","tasks.md","state.md","touched-files.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/parallel-dispatch.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill devrites-audit` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-audit: read-only audit dispatch

package/pack/generated/devin/skills/devrites-debug-recovery/SKILL.md

@@ -5,7 +5,7 @@ argument-hint: "[<slug>]"
 triggers:
   - model
 ---
-<!-- loads: {"always":["devrites-lib/reference/standards/code-navigation.md","devrites-debug-recovery/reference/build-the-loop.md","devrites-debug-recovery/reference/cleanup-and-classify.md","devrites-debug-recovery/reference/hypotheses.md","devrites-debug-recovery/reference/instrumentation.md","devrites-debug-recovery/reference/regression-test.md","devrites-debug-recovery/reference/trace.md","devrites-lib/reference/standards/debug-recovery.md"],"triggers":{"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"security":["devrites-lib/reference/standards/security.md"],"workspace":["devrites-lib/reference/standards/workflow-artifacts.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md","devrites-debug-recovery/reference/build-the-loop.md","devrites-debug-recovery/reference/cleanup-and-classify.md","devrites-debug-recovery/reference/hypotheses.md","devrites-debug-recovery/reference/instrumentation.md","devrites-debug-recovery/reference/regression-test.md","devrites-debug-recovery/reference/trace.md","devrites-lib/reference/standards/debug-recovery.md"],"triggers":{"one-shot":["devrites-lib/reference/standards/one-shot-actions.md"],"security":["devrites-lib/reference/standards/security.md"],"workspace":["devrites-lib/reference/standards/workflow-artifacts.md"]},"rootOnly":["devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/workflow-artifacts.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill devrites-debug-recovery` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 # devrites-debug-recovery: fix the root cause, not the symptom

package/pack/generated/devin/skills/devrites-doubt/SKILL.md

@@ -4,7 +4,7 @@ description: Stress-test one consequential decision independently. Use for uncer
 triggers:
   - model
 ---
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/agents.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"security":["devrites-lib/reference/standards/security.md"],"tooling":["devrites-lib/reference/standards/tooling.md"]},"workspace":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"workspaceByRole":{"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"]}} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/agents.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"],"security":["devrites-lib/reference/standards/security.md"],"tooling":["devrites-lib/reference/standards/tooling.md","devrites-lib/reference/standards/code-navigation.md","devrites-lib/reference/standards/code-index.md"]},"workspace":["spec.md","plan.md","tasks.md","state.md","decisions.md"],"workspaceByRole":{"doubt-reviewer":["spec.md","plan.md","tasks.md","state.md","decisions.md"]},"rootOnly":["devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/code-index.md","devrites-lib/reference/standards/tooling.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill devrites-doubt` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-doubt: CLAIM → EXTRACT → DOUBT → RECONCILE → STOP
@@ -43,10 +43,10 @@ complexity reappears across N callers, the abstraction concentrates real complex
 Wait for a second real caller before keeping a pass-through that fails this test.
 
 ## Rules
-- For "where does this claim reach / what would change with it" questions, prefer a
-  code-intelligence index under [`tooling.md`](../devrites-lib/reference/standards/tooling.md): use the primary available index,
-  add at most one cross-check for a named incomplete/stale/conflicting predicate, then fall
-  back to LSP or file search. Do not query several indexes for reassurance.
+- For "where does this claim reach / what would change with it" questions (trigger
+  `tooling`), use codebase-memory `trace_path` (`direction: "inbound"`) per
+  [`code-navigation.md`](../devrites-lib/reference/standards/code-navigation.md),
+  then fall back to LSP or file search. Do not repeat a query for reassurance.
 - The reviewer prompt must be adversarial: its job is to break the claim, not to agree.
 - Strip your own justification before review; reasoning anchors the reviewer toward
   agreement.

package/pack/generated/devin/skills/devrites-frontend-craft/reference/reuse-first.md

@@ -9,9 +9,9 @@ This applies to UI **and** non-UI code: utilities, helpers, types, validators, s
 formatters, hooks, query helpers: anything that might already exist.
 
 ## The decision (in order)
-1. **Search first.** Apply `../../devrites-lib/reference/standards/tooling.md`: use the
-   primary available code index to find similar definitions, cross-check only a named
-   unresolved predicate, then fall back to grep/glob over `components/`, design tokens, hooks/,
+1. **Search first.** Apply `../../devrites-lib/reference/standards/code-navigation.md`: find
+   similar definitions with codebase-memory `search_graph` (`semantic_query` plus
+   `name_pattern` variants), then fall back to grep/glob over `components/`, design tokens, hooks/,
    utils/, lib/. Look for things doing the *same job*, not just the same name.
 2. **Exact fit → REUSE.** Compose / import the existing thing. No copy, no fork.
 3. **Close fit → EXTEND.** Add a variant/prop/option that the existing component or util

package/pack/generated/devin/skills/devrites-interview/SKILL.md

@@ -4,7 +4,7 @@ description: Interview the user one question at a time to extract intent. Use wh
 triggers:
   - model
 ---
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","rite-spec/reference/interview-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"]},"workspace":["spec.md","questions.md","decisions.md","assumptions.md","decision-coverage.md","state.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","rite-spec/reference/interview-patterns.md"],"triggers":{"afk":["devrites-lib/reference/standards/afk-hitl.md"]},"workspace":["spec.md","questions.md","decisions.md","assumptions.md","decision-coverage.md","state.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md"]} -->
 > Read-set manifest: `devrites-engine context --skills-root .devin/skills <slug> --skill devrites-interview` (no workspace: `--out <path>`) bundles every file named below into one deduplicated read.
 
 # devrites-interview: extract intent

package/pack/generated/devin/skills/devrites-lib/SKILL.md

@@ -44,14 +44,16 @@ lifecycle state from chat or optional `README.md`.
 The engine is limited to:
 
 - Checks: `check candidate` (content-bound identity), `check readiness`
-  (structure; `--emit-binding` emits the Build-input binding), `check seal` (structure
+  (structure; `--emit-binding` emits the Build-input binding), `check
+  preconditions` (Vet preflight rows), `check seal` (structure
   plus exact artifact bindings and evidence freshness), `check slice` (slice
   contract preflight before wright dispatch), `check task-graph`, `check
   diff-scope` (mechanical changed-paths ⊆ allowlist before reviewer dispatch),
   `check path-disjoint`, `check skill-trust`, `check indexes`, `check
   regression` (progress high-water mark), `check drift` (readiness-input
   attribution), `check windows` (deferral-marker waivers), `check dup`
-  (advisory near-duplicates), `detect commands` (repository test/lint wiring).
+  (advisory near-duplicates), `check anchors` (Critical/Important quote
+  anchoring), `check perturb` (safe-perturbation probe), `detect commands` (repository test/lint wiring).
 - Observation: `observe summary` (`orient` alias), `observe slice`, `next`
   (minimal remaining lifecycle path), `handoff` (deterministic resume record).
 - Coordination: `context` emits one deduplicated read-set bundle from each
@@ -70,17 +72,20 @@ The engine is limited to:
   principles presence); confirm them rather than re-deriving conditions. Repeat
   calls with unchanged inputs print `unchanged` and reuse the existing bundle.
   `dispatch` owns the launch-wave barrier — seal needs a distinct handle per
-  role, return needs seal, and start/return auto-record into the `metrics`
-  ledger. `claim` owns the advisory session-scoped `claims.jsonl` ledger;
+  role (the last start seals), return needs seal, open --claim-session/--claim
+  takes the wave's file claim (released by the completing return or abandon
+  --release), and start/return auto-record into the `metrics` ledger;
+  `candidate freeze` and `packet` write a wave's frozen diff and packets. `claim` owns the advisory session-scoped `claims.jsonl` ledger;
   `note` owns anchored `notes.md` entries (`check seal` refuses non-exact
   anchors); `parallel` owns deterministic worktree lease/create/integrate/
   cleanup for parallel slices.
 - `gates` owns the machine-checked acceptance ledger (`gates.md`): `scaffold`,
-  `status`, `run`, `reverify`, `lint`, `attest`, `abandon` — grammar and
+  `status`, `run`, `reverify`, `lint`, `precheck`, `attest`, `abandon` — grammar and
   authoring rules in
   [`reference/standards/gates.md`](reference/standards/gates.md).
 - Atomic state: `state resolve` for answer/drop/batch, `state merge-manifest`
-  for the predecessor-chain union, transactional `state close`, and `migrate`
+  for the predecessor-chain union, `state set`/`state append` for cursor fields and
+  ledger sections, transactional `state close`, and `migrate`
   for fail-closed workspace-schema normalization.
 - `secret-scan`, `open-visual`, and `version` remain read-only helpers.
 - Offline, local `install`, `update`, and `uninstall`; their shell/npm callers

package/pack/generated/devin/skills/devrites-lib/reference/orchestration-profiles.md

@@ -1,5 +1,7 @@
 # Native execution profiles
 
+> Root-only: not inlined in --role bundles.
+
 Profiles scale **change depth**, not orchestration machinery. The host discovers
 the exact project specialist named by a workflow, dispatches it in fresh context,
 waits for the result, validates the result shape, and reconciles the evidence.