devrites 7.0.0 → 7.0.1

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 All notable changes to DevRites are documented here. The format follows [Keep a Changelog](https://keepachangelog.com/en/1.1.0/) and DevRites adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html). Releases are generated automatically by [semantic-release](https://semantic-release.gitbook.io/) from Conventional Commits on `main`.
 
+## [7.0.1](https://github.com/ViktorsBaikers/DevRites/compare/v7.0.0...v7.0.1) (2026-10-20)
+
+### Added
+
+* **no-release:** plan the next sequence continuation in a second session ([#150](https://github.com/ViktorsBaikers/DevRites/issues/150)) ([d4be5b0](https://github.com/ViktorsBaikers/DevRites/commit/d4be5b01d6e3a074718d4a5cd9a3ba0a5e52e9aa))
+
+### Fixed
+
+* **devrites:** a timing gate pins its protocol before Build ([#151](https://github.com/ViktorsBaikers/DevRites/issues/151)) ([2069caa](https://github.com/ViktorsBaikers/DevRites/commit/2069caa18199d9dd4664854eb3c6c8f599b8fdf2))
+
 ## [7.0.0](https://github.com/ViktorsBaikers/DevRites/compare/v6.10.0...v7.0.0) (2026-10-20)
 
 ### ⚠ BREAKING CHANGES

package/README.md

@@ -31,7 +31,7 @@ history can't lose it. After you clear the conversation, switch hosts, or hand
 the feature to another engineer, the next session reads the same plan,
 decisions, and evidence before it continues.
 
-**Status:** [`v7.0.0`](https://github.com/ViktorsBaikers/DevRites/releases/tag/v7.0.0): see [`CHANGELOG.md`](CHANGELOG.md) for release notes.
+**Status:** [`v7.0.1`](https://github.com/ViktorsBaikers/DevRites/releases/tag/v7.0.1): see [`CHANGELOG.md`](CHANGELOG.md) for release notes.
 
 This is the latest published release; `main` may contain unreleased work.
 

package/docs/command-map.md

@@ -104,7 +104,7 @@ See [`cli.md`](cli.md).
 | [`/rite-review`](../pack/.claude/skills/rite-review/SKILL.md) | review | `[scope: slice N \| feature] [--full]` | Feature-scoped parallel Spec + Standards review of the closed candidate; binds `review.md` to its digest. | workspace + candidate | `review.md`, `evidence.md`, `state.md` |
 | [`/rite-seal`](../pack/.claude/skills/rite-seal/SKILL.md) | seal | `[feature-slug] [--full]` | Candidate-bound GO / NO-GO **decision**. Rechecks exact proof/review bindings and runs no git; on GO sets `Next step: /rite-ship`. | all artifacts + candidate | `seal.md`, `state.md` |
 | [`/rite-ship`](../pack/.claude/skills/rite-ship/SKILL.md) | ship | `[slug]` | Starts with a read-only Seal/candidate check and exact plan disclosure, then requires fresh literal `GO`. Only then may it collapse checkpoints, stage exact candidate paths, validate staged scope/bytes/bindings/secrets, commit and reverify, perform optional separately approved push/tag/PR actions, and archive/close. | `seal.md` + candidate + Git index | `ship.md`, `state.md`, archive |
-| [`/rite-autocomplete`](../pack/.claude/skills/rite-autocomplete/SKILL.md) | (orchestrator) | `[idea] [--ship\|--yolo] [--max-slices N] [--full] [--cross-model]` | Full lifecycle (spec → clarify → … → seal → ship). Spec + clarify form the one interactive window; AFK/checkpoint mode arms only after decision coverage is CLEAR. Pauses for irreversible risk, escalating, unanswered blocking with no recommended option, human-only access, or remaining NO-GO — not recommended-option blocking questions, temper expand, validating gates, `--max-slices`, or default resource caps. Objective red checks use bounded technical recovery. Default stops at Seal GO; `--ship` (`--yolo`) reaches Ship preflight but still requires fresh literal `GO` and native approval; `--full` selects the Full profile and `--cross-model` arms Vet's second opinion. | idea + workspace | whole workspace (drives every phase) |
+| [`/rite-autocomplete`](../pack/.claude/skills/rite-autocomplete/SKILL.md) | (orchestrator) | `[idea] [--ship\|--yolo] [--max-slices N] [--parallel N] [--full] [--cross-model] [--lookahead]` | Full lifecycle (spec → clarify → … → seal → ship). Spec + clarify form the one interactive window; AFK/checkpoint mode arms only after decision coverage is CLEAR. Pauses for irreversible risk, escalating, unanswered blocking with no recommended option, human-only access, or remaining NO-GO — not recommended-option blocking questions, temper expand, validating gates, `--max-slices`, or default resource caps. Objective red checks use bounded technical recovery. Default stops at Seal GO; `--ship` (`--yolo`) reaches Ship preflight but still requires fresh literal `GO` and native approval; `--full` selects the Full profile and `--cross-model` arms Vet's second opinion. | idea + workspace | whole workspace (drives every phase) |
 | [`/rite-quick`](../pack/.claude/skills/rite-quick/SKILL.md) | (express) | `<change>` | Express lane for a **small, reversible, unambiguous** change: one-line contract → TDD build (via `devrites-slice-wright`) → scoped prove → review-lite → standalone commit (a change in the active candidate routes to `/rite-prove` → `/rite-review` → `/rite-seal`), no full artifact tree. **Significance gate first**: auth / migration / public-API / destructive / multi-slice / ambiguous → escalates to `/rite-spec`. Triggers: "quick fix", "small change", "tiny tweak", "just do X". | the change + codebase | code + commit (optional `brief.md` / `evidence.md`) |
 | [`/rite-fast`](../pack/.claude/skills/rite-fast/SKILL.md) | (fast lane) | `<task \| slug>` | **Explicit-only** shortened lane for mid-size work: one SHAPE step (`fast-planner` drafts spec + ≤10 slices, root asks ≤5 ranked questions, 10 when risk is flagged, user approves) → BUILD with `fast-builder` and **no per-slice gate** → one CHECK (`fast-checker` completeness pass, ≤2 gap-fix rounds) → REFINE (`fast-critic` review + polish) → PROVE on the final tree. Outside the engine lifecycle: no `state.md`, no `ACTIVE`, no seal; commits only on confirmation. | the task + codebase | `spec.md`, `plan.md`, `evidence.md` under `.devrites/work/<slug>/` + code |
 | [`/rite-frame`](../pack/.claude/skills/rite-frame/SKILL.md) | lens | `[ask \| diff]` | Pre-flight + self-audit lens for ad-hoc work the lifecycle gates never see: **FRAME** turns an imperative ask into a falsifiable success criterion + verify command before code; **AUDIT** checks a raw diff against the four LLM coding failure modes (silent assumption / overcomplication / out-of-scope edit / unverifiable goal). Top of `/rite-quick` or before a plain "just do X". | the ask / a raw diff | success criterion + verify command (inline) |

package/docs/usage.md

@@ -71,7 +71,7 @@ Project-root sentinel (outside the workspace):
 | `.devrites/AFK` | you (presence = AFK mode active) | optional YAML: `max_slices`, `notify`, `allow_gates`. Empty file = AFK with defaults. See [`pack/.claude/skills/devrites-lib/reference/standards/afk-hitl.md`](../pack/.claude/skills/devrites-lib/reference/standards/afk-hitl.md). |
 | `.devrites/CHECKPOINT` | unused as a gate | reserved path (not a candidate). After Independent Build review and fail-on-red proof are green (not when a wright returns), `/rite-build` / `/rite-prove` / `/rite-polish` / `/rite-review` land a local `WIP(<slug>): <imperative summary>` commit (serial: checkpoint git recipe or no-op if nothing staged; parallel: `devrites-engine parallel integrate`); `/rite-ship` later collapses an eligible WIP run. See [`pack/.claude/skills/rite-build/reference/checkpoint.md`](../pack/.claude/skills/rite-build/reference/checkpoint.md). |
 | `.devrites/dup-ignore` | you (optional) | One `check dup` cluster hash per line with a `#` reason — the dismissal ledger. Content-derived hashes survive line moves but resurface on structural edits. See [`pack/.claude/skills/devrites-lib/reference/standards/duplicate-code.md`](../pack/.claude/skills/devrites-lib/reference/standards/duplicate-code.md). |
-| `.devrites/claims.jsonl` | `devrites-engine claim add` | Append-only advisory file claims: `{id, session, paths, reason, claimed_at, expires_at, host, anchors}` plus release events. Session-scoped and TTL-bounded — per-checkout state, so gitignore it (a committed ledger exports stale claims to every clone). See [`standards/agents.md`](../pack/.claude/skills/devrites-lib/reference/standards/agents.md). |
+| `.devrites/claims.jsonl` | `devrites-engine claim add` | Append-only advisory file claims: `{id, session, paths, reason, claimed_at, expires_at, host, anchors}` plus release events. `--workspace <slug>` leases a whole feature workspace for a lookahead session. Session-scoped and TTL-bounded — per-checkout state, so gitignore it (a committed ledger exports stale claims to every clone). See [`standards/agents.md`](../pack/.claude/skills/devrites-lib/reference/standards/agents.md). |
 
 The shape of this directory is also documented in
 [`flow.md` § Workspace state model](flow.md#7-workspace-state-model).
@@ -390,11 +390,16 @@ Autocomplete discloses the exact Git plan, then still stops for a fresh literal
 gates, unanswered blocking with no recommended option, a remaining NO-GO, or low confidence — not for recommended-option blocking questions, temper expand, validating
 gates, `--max-slices`, or default slice/agent/time/review-queue caps.
 Objective red checks use bounded recovery instead. Args:
-`[idea] [--ship|--yolo] [--max-slices N] [--full] [--cross-model]`.
+`[idea] [--ship|--yolo] [--max-slices N] [--parallel N] [--full] [--cross-model] [--lookahead]`.
 Optional flags are inactive unless their exact token occurs in the invocation;
 `--max-slices` requires one positive base-10 integer and does not cap this run.
 `--full` selects the Full
 execution profile, and `--cross-model` arms Vet's second opinion.
+`--lookahead` runs in a second session you start once the active workspace is
+in Build: it plans the next sequence continuation through Vet under a
+`claim add --workspace` lease, never builds, and leaves `.devrites/ACTIVE`
+alone. The main loop then resumes that workspace instead of specifying it again;
+a predecessor replan since that Vet blocks readiness and sends it back to Vet.
 Autocomplete never rewrites an existing `.devrites/AFK`. After Vet it seeds
 remaining from the pending-slice count and ignores leftover remaining and
 `--max-slices`.

package/engine/internal/gate/gate.go

@@ -62,6 +62,13 @@ func Check(kind Kind, root, slug string) (*Result, error) {
 			result.ReasonID = ResultReasonID(kind, true)
 		}
 	}
+	if kind == Readiness {
+		for _, problem := range predecessorProblems(root, observation) {
+			result.StateProblems = append(result.StateProblems, "predecessor: "+problem)
+			result.Blocked = true
+			result.ReasonID = reason.GateReadinessStale
+		}
+	}
 	for _, problem := range unsanctionedRootFiles(observation) {
 		result.StateProblems = append(result.StateProblems, "placement: "+problem)
 		// Keep a more specific reason (readiness-stale) when the observation

package/engine/internal/gate/predecessor.go

@@ -0,0 +1,67 @@
+package gate
+
+import (
+	"fmt"
+	"regexp"
+	"strings"
+
+	"github.com/devrites/devrites/internal/markdowntext"
+	"github.com/devrites/devrites/internal/state"
+)
+
+// predecessorLabel opens the line a lookahead Vet records in eng-review.md: the
+// predecessor workspace this plan was written against and that predecessor's
+// readiness binding digest at the time.
+const predecessorLabel = "Predecessor readiness: "
+
+// The slug pattern keeps the predecessor a single workspace name; the gate
+// package resolves no workspace path itself.
+var predecessorLineRE = regexp.MustCompile(`^Predecessor readiness: ([A-Za-z0-9][A-Za-z0-9._-]*) ([0-9a-f]{64})$`)
+
+// predecessorProblems blocks readiness when the predecessor a lookahead plan
+// was written against has since changed its planning inputs, so this plan must
+// be re-vetted against them. A workspace without the line is never checked.
+func predecessorProblems(root string, observation *state.WorkspaceObservation) []string {
+	phase, err := observation.DeclaredPhase()
+	if err != nil {
+		return nil
+	}
+	policy, ok := state.PolicyFor(phase)
+	if !ok || !phaseRequiresReadinessBinding(policy) {
+		return nil
+	}
+	fact, ok := observation.Fact("eng-review.md")
+	if !ok || fact.State() != state.ArtifactPresent {
+		return nil
+	}
+	visible, err := markdowntext.Structural(fact.Bytes())
+	if err != nil {
+		return nil
+	}
+	var lines []string
+	for _, raw := range strings.Split(string(visible), "\n") {
+		if line := strings.TrimSuffix(raw, "\r"); strings.Contains(line, predecessorLabel) {
+			lines = append(lines, line)
+		}
+	}
+	switch {
+	case len(lines) == 0:
+		return nil
+	case len(lines) > 1:
+		return []string{"eng-review.md holds more than one Predecessor readiness line; rerun /rite-vet and record exactly one"}
+	}
+	match := predecessorLineRE.FindStringSubmatch(lines[0])
+	if match == nil {
+		return []string{fmt.Sprintf("malformed %q; rerun /rite-vet and record `%s<slug> <64-hex digest>`", lines[0], predecessorLabel)}
+	}
+	slug, recorded := match[1], match[2]
+	current, err := ReadinessBinding(root, slug)
+	if err != nil {
+		return []string{fmt.Sprintf("predecessor %s readiness cannot be computed (%v); rerun /rite-vet against its current plan", slug, err)}
+	}
+	if strings.TrimPrefix(current, readinessBindingLabel) != recorded {
+		return []string{fmt.Sprintf("predecessor %s changed its planning inputs since this plan was vetted; rerun /rite-vet to re-check this plan against them and record `%s%s %s`",
+			slug, predecessorLabel, slug, strings.TrimPrefix(current, readinessBindingLabel))}
+	}
+	return nil
+}

package/engine/internal/lib/claims.go

@@ -15,6 +15,7 @@ import (
 	"strings"
 	"time"
 
+	"github.com/devrites/devrites/internal/devritespaths"
 	"github.com/devrites/devrites/internal/parallel"
 	"github.com/devrites/devrites/internal/state"
 )
@@ -37,10 +38,13 @@ const (
 
 const claimUsage = `usage: devrites-engine claim <add|release|list|check> ...
 
-  claim add --session <id> [--ttl <minutes>] [--reason <s>] <path>...
+  claim add --session <id> [--ttl <minutes>] [--reason <s>] [--workspace <slug>] <path>...
   claim release --session <id> --id <claim-id>
   claim list [--session <id>] [--all]
-  claim check [--session <id>] <path>...
+  claim check [--session <id>] [--workspace <slug>] <path>...
+
+--workspace leases a whole feature workspace, so two root sessions never work
+one workspace at once (sequence lookahead).
 `
 
 type claimRecord struct {
@@ -184,6 +188,42 @@ func normalizeClaimPaths(raw []string) ([]string, error) {
 	return out, nil
 }
 
+// workspaceClaimPath is the lease path for one feature workspace. Only
+// --workspace reaches it; a positional .devrites path stays refused.
+func workspaceClaimPath(slug string) (string, error) {
+	if !devritespaths.ValidSlug(slug) {
+		return "", fmt.Errorf("--workspace expects a feature slug, got %q", slug)
+	}
+	return ".devrites/work/" + slug, nil
+}
+
+// claimTargets normalizes positional paths and adds each --workspace lease.
+func claimTargets(raw, workspaces []string) ([]string, error) {
+	if len(workspaces) == 0 {
+		return normalizeClaimPaths(raw)
+	}
+	var out []string
+	if len(raw) > 0 {
+		paths, err := normalizeClaimPaths(raw)
+		if err != nil {
+			return nil, err
+		}
+		out = paths
+	}
+	for _, slug := range workspaces {
+		p, err := workspaceClaimPath(slug)
+		if err != nil {
+			return nil, err
+		}
+		if slices.Contains(out, p) {
+			return nil, fmt.Errorf("duplicate workspace %q", slug)
+		}
+		out = append(out, p)
+	}
+	sort.Strings(out)
+	return out, nil
+}
+
 func validSession(s string) bool {
 	if s == "" || len(s) > 128 {
 		return false
@@ -247,12 +287,15 @@ func newClaimID() string {
 func claimAdd(root string, args []string, stdout, stderr io.Writer) int {
 	session, reason := "", ""
 	ttl := claimDefaultTTL
-	var raw []string
+	var raw, workspaces []string
 	for i := 0; i < len(args); i++ {
 		switch args[i] {
 		case "--session":
 			session = argAt(args, i+1)
 			i++
+		case "--workspace":
+			workspaces = append(workspaces, argAt(args, i+1))
+			i++
 		case "--reason":
 			reason = argAt(args, i+1)
 			i++
@@ -272,18 +315,22 @@ func claimAdd(root string, args []string, stdout, stderr io.Writer) int {
 			raw = append(raw, args[i])
 		}
 	}
-	_, code := addClaim(root, session, reason, ttl, raw, stdout, stderr)
+	_, code := addClaimTargets(root, session, reason, ttl, raw, workspaces, stdout, stderr)
 	return code
 }
 
 // addClaim records one claim and returns its id. It refuses, writing nothing,
 // while a live foreign session holds an overlapping path.
 func addClaim(root, session, reason string, ttl int, raw []string, stdout, stderr io.Writer) (string, int) {
+	return addClaimTargets(root, session, reason, ttl, raw, nil, stdout, stderr)
+}
+
+func addClaimTargets(root, session, reason string, ttl int, raw, workspaces []string, stdout, stderr io.Writer) (string, int) {
 	if !validSession(session) {
 		fmt.Fprintln(stderr, "claim: --session is required (1-128 chars: letters, digits, - _ . : /)")
 		return "", 2
 	}
-	paths, err := normalizeClaimPaths(raw)
+	paths, err := claimTargets(raw, workspaces)
 	if err != nil {
 		fmt.Fprintf(stderr, "claim: %v\n", err)
 		return "", 2
@@ -454,12 +501,15 @@ func claimList(root string, args []string, stdout, stderr io.Writer) int {
 
 func claimCheck(root string, args []string, stdout, stderr io.Writer) int {
 	session := ""
-	var raw []string
+	var raw, workspaces []string
 	for i := 0; i < len(args); i++ {
 		switch args[i] {
 		case "--session":
 			session = argAt(args, i+1)
 			i++
+		case "--workspace":
+			workspaces = append(workspaces, argAt(args, i+1))
+			i++
 		default:
 			if strings.HasPrefix(args[i], "-") {
 				fmt.Fprintf(stderr, "claim: unknown flag %q\n", args[i])
@@ -468,7 +518,7 @@ func claimCheck(root string, args []string, stdout, stderr io.Writer) int {
 			raw = append(raw, args[i])
 		}
 	}
-	paths, err := normalizeClaimPaths(raw)
+	paths, err := claimTargets(raw, workspaces)
 	if err != nil {
 		fmt.Fprintf(stderr, "claim: %v\n", err)
 		return 2

package/pack/.claude/skills/devrites-lib/reference/standards/performance.md

@@ -28,6 +28,20 @@ Measure first. An optimization without a measurement is a guess that adds comple
   flaking wall-clock test is a flaky test, [`testing.md`](testing.md)). Budget regression:
   re-measure; fix to budget or record the accepted regression with reason and owner.
 
+## Performance gate protocol
+- A gate that judges a timing budget or a regression percentage pins its protocol
+  before Build: the environment (isolated cores, swap state, build flags such as
+  `CGO_ENABLED`), the repetitions and the aggregate (a median of at least five runs,
+  never one sample), and a noise floor measured as an A/A spread on that same
+  environment. Vet blocks READY on a timing gate without one. A threshold at or
+  below the noise floor is a plan defect for the owner, never a Build repair.
+- A timing gate that fails while no code changed (an A/A run, a rerun) is noise or
+  host state, not a code defect. Stop wright rounds on it and fix the protocol or the
+  environment first.
+- **Failing case:** a 10% p99 regression gate runs one sample per run on a shared host;
+  26 wright rounds repair code against noise until the owner reserves cores and asks
+  for a median of five.
+
 ## Frontend: Core Web Vitals
 For UI work, measure-first means LCP / INP / CLS judged against real numbers, each labeled
 by source (`Field (CrUX)`, `Lab (Lighthouse)`, `Trace (DevTools)`): field and lab are not

package/pack/.claude/skills/rite-autocomplete/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: rite-autocomplete
 description: Run the full DevRites lifecycle unattended; --ship continues to the final Git approval boundary. Use for one-shot autonomous work; not for a single phase.
-argument-hint: "[idea] [--ship|--yolo] [--max-slices N] [--parallel N] [--full] [--cross-model]"
+argument-hint: "[idea] [--ship|--yolo] [--max-slices N] [--parallel N] [--full] [--cross-model] [--lookahead]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/one-shot-actions.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/acceptance-preserving-reslice.md","rite-autocomplete/reference/decision-policy.md","rite-autocomplete/reference/loop.md","rite-autocomplete/reference/stop-conditions.md"],"triggers":{"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["state.md","spec.md","plan.md","tasks.md","questions.md","decisions.md","drift.md","evidence.md","test-plan.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/workflow-artifacts.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/one-shot-actions.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/acceptance-preserving-reslice.md","rite-autocomplete/reference/decision-policy.md","rite-autocomplete/reference/loop.md","rite-autocomplete/reference/stop-conditions.md"],"triggers":{"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"lookahead":["rite-autocomplete/reference/lookahead.md"]},"workspace":["state.md","spec.md","plan.md","tasks.md","questions.md","decisions.md","drift.md","evidence.md","test-plan.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/workflow-artifacts.md","rite-autocomplete/reference/lookahead.md"]} -->
 > Read-set manifest: `devrites-engine context <slug> --phase autocomplete` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -67,7 +67,7 @@ executable controller/harness/bundle bytes or a missing writer, read
   not a stop either: follow it in your next tool call, never in a text-only
   acknowledgement.
 - Parse flags only from this invocation. `--ship`, `--yolo`, `--max-slices`,
-  `--parallel`, `--full`, and `--cross-model` activate only as exact standalone
+  `--parallel`, `--full`, `--cross-model`, and `--lookahead` activate only as exact standalone
   tokens in `$ARGUMENTS`; examples or earlier messages can never arm them.
   `--max-slices` must occur once and be followed by a positive base-10 integer;
   `--parallel` must occur once and be followed by a base-10 integer in `1`–`10`.
@@ -80,6 +80,10 @@ executable controller/harness/bundle bytes or a missing writer, read
 
 ## Workflow
 
+With `--lookahead` (trigger `lookahead`), follow
+[`lookahead.md`](reference/lookahead.md) instead of the steps below: plan the
+next sequence continuation through Vet in a second session, then stop.
+
 1. **Orient and parse.** Resolve the explicit or active slug; when a workspace exists,
    require its `state.md` and read its cursor; a fresh idea starts empty at step 2.
    Before honoring `blocked` with terminal `next_action`,

package/pack/.claude/skills/rite-autocomplete/reference/lookahead.md

@@ -0,0 +1,50 @@
+# Sequence lookahead (`--lookahead`)
+
+> Root-only: not inlined in --role bundles.
+
+A second session plans the next sequence continuation while the active
+workspace builds, so the child's Spec → Vet overlaps its predecessor's
+Build → Seal. The main loop later resumes the planned child instead of
+specifying it again.
+
+## Start and target
+
+The operator starts the second host session with `/rite-autocomplete
+--lookahead` once the `.devrites/ACTIVE` workspace is in Build or later. The
+agent never launches a session itself. The target is the next recorded
+continuation after the active workspace: the entry
+[sequence continuation](loop.md#sequence-continuation) would open. Stop with
+nothing to do when the active workspace is before Build, no entry remains,
+`continue_sequence: false`, or the sequence budget is spent.
+
+## Lease
+
+Before any write, take the workspace lease:
+`devrites-engine claim add --session lookahead-<target> --ttl 240 --workspace <target> --reason lookahead`.
+Exit 3 means another session holds the target: stop. Re-add the lease with the
+same session at each phase start, and release it with `devrites-engine claim
+release` on every stop. A crashed session's lease reads `dead` and frees itself.
+
+## Rules
+
+- Never read or write `.devrites/ACTIVE`. Pass the target slug explicitly to every
+  skill and engine command, including `/rite-spec <target> "<objective>"` and
+  `devrites-engine handoff <target> --resume`.
+- After the workspace exists, run `devrites-engine state set <target> sequence_lookahead=yes`.
+- Run Spec → Clarify → Temper → Define → Plan → Vet as the main loop does.
+  Define and Plan read the predecessor's current tree and plan. Record an
+  assumption for each predecessor interface the plan relies on.
+- At Vet, beside the readiness binding, record exactly one line
+  `Predecessor readiness: <active-slug> <digest>` in `eng-review.md`. `<digest>`
+  is the hex that `devrites-engine check readiness --emit-binding <active-slug>`
+  prints. When the predecessor later changes its planning inputs, the child's
+  readiness check blocks with `DRV-GATE-READINESS-STALE` and the main loop
+  re-vets the child before Build.
+- Never Build, never write product source or tests, never commit, and never
+  arm or rewrite `.devrites/AFK`. Owner questions go to the target's
+  `questions.md` and stop the lookahead.
+- Stop at Vet `READY` with `next_action: build after predecessor Seal GO`, at a
+  human gate, or when the target's lease is lost.
+
+**Failing case:** the lookahead passes Vet and starts Build while the
+predecessor is still sealing, so two root sessions write one tree.

package/pack/.claude/skills/rite-autocomplete/reference/loop.md

@@ -91,6 +91,13 @@ step 10 does not end the run: leave the sealed workspace unshipped with its
 (`/rite-spec <parent>-<n> "<objective>"` from the parent's `decisions.md` sequence)
 and re-enter step 1. Spend one workspace per opened continuation.
 
+When that workspace already exists because a [lookahead](lookahead.md) session
+planned it, do not specify it again. Wait while `devrites-engine claim check
+--workspace <child>` exits 3 (a live lookahead holds it), then set
+`.devrites/ACTIVE` to the child and resume from its cursor at step 1. A
+predecessor replan since its Vet blocks the child's readiness with
+`DRV-GATE-READINESS-STALE`; route that to `/rite-vet` before Build.
+
 Spend accounting is durable in `state.md` cursors, not chat. Before invoking the
 continuation, ensure the current workspace's `sequence_workspaces_remaining` is
 set — absent, write `max_workspaces - 1` and `sequence_position: 1` first — and

package/pack/.claude/skills/rite-build/reference/spec-drift-guard.md

@@ -12,6 +12,10 @@ phases. Never silently code against a known-wrong plan.
 - the design system / existing UX pattern contradicts the planned UI;
 - a missing user decision that affects product behavior surfaces.
 
+A timing gate that fails with no code cause is a protocol or environment defect
+([performance.md § Performance gate protocol](../../devrites-lib/reference/standards/performance.md#performance-gate-protocol)),
+never another wright round.
+
 ## Workflow
 ```
 1. STOP coding.

package/pack/.claude/skills/rite-spec/SKILL.md

@@ -124,7 +124,8 @@ load a routed standard to discover required behavior, not to prescribe implement
    owned prerequisites. Keep a build checkpoint only for unavailable pre-code evidence or a
    mandatory action-time approval. **Completion:** no foreseeable human choice is deferred.
 5. **Create or update the workspace** + set `.devrites/ACTIVE` from
-   [state-workspace](reference/state-workspace.md). If the slug already exists,
+   [state-workspace](reference/state-workspace.md); a `--lookahead` run
+   leaves `.devrites/ACTIVE` unchanged. If the slug already exists,
    update the existing workspace rather than overwrite it; preserve history and
    unrelated settled content. Write every required artifact and conditional
    annex exactly from [spec-template](reference/spec-template.md)

package/pack/.claude/skills/rite-vet/SKILL.md

@@ -209,7 +209,9 @@ plan declares a root-authored executable workflow file, read
    `marker sweep:` line is recorded in `eng-review.md`; a kept hit blocks READY. Write phase/next step and emit one
    `Readiness inputs SHA-256` with
    `devrites-engine check readiness --emit-binding <slug>`; normal readiness check
-   must pass. Record the per-input drift baseline alongside it:
+   must pass. A `sequence_lookahead: yes` workspace also records one
+   `Predecessor readiness: <predecessor> <digest>` line from the predecessor's
+   `--emit-binding` hex; readiness re-checks it. Record the per-input drift baseline alongside it:
    `devrites-engine check drift <slug> --record` — a later stale binding then
    names the exact artifact that moved instead of "something changed". An `ADVISORY
    proportion:` line names a slice whose proof outgrew its ACs: move its rows without a

package/pack/generated/claude/skills/devrites-lib/reference/standards/performance.md

@@ -28,6 +28,20 @@ Measure first. An optimization without a measurement is a guess that adds comple
   flaking wall-clock test is a flaky test, [`testing.md`](testing.md)). Budget regression:
   re-measure; fix to budget or record the accepted regression with reason and owner.
 
+## Performance gate protocol
+- A gate that judges a timing budget or a regression percentage pins its protocol
+  before Build: the environment (isolated cores, swap state, build flags such as
+  `CGO_ENABLED`), the repetitions and the aggregate (a median of at least five runs,
+  never one sample), and a noise floor measured as an A/A spread on that same
+  environment. Vet blocks READY on a timing gate without one. A threshold at or
+  below the noise floor is a plan defect for the owner, never a Build repair.
+- A timing gate that fails while no code changed (an A/A run, a rerun) is noise or
+  host state, not a code defect. Stop wright rounds on it and fix the protocol or the
+  environment first.
+- **Failing case:** a 10% p99 regression gate runs one sample per run on a shared host;
+  26 wright rounds repair code against noise until the owner reserves cores and asks
+  for a median of five.
+
 ## Frontend: Core Web Vitals
 For UI work, measure-first means LCP / INP / CLS judged against real numbers, each labeled
 by source (`Field (CrUX)`, `Lab (Lighthouse)`, `Trace (DevTools)`): field and lab are not

package/pack/generated/claude/skills/rite-autocomplete/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: rite-autocomplete
 description: Run the full DevRites lifecycle unattended; --ship continues to the final Git approval boundary. Use for one-shot autonomous work; not for a single phase.
-argument-hint: "[idea] [--ship|--yolo] [--max-slices N] [--parallel N] [--full] [--cross-model]"
+argument-hint: "[idea] [--ship|--yolo] [--max-slices N] [--parallel N] [--full] [--cross-model] [--lookahead]"
 user-invocable: true
 ---
 
-<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/one-shot-actions.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/acceptance-preserving-reslice.md","rite-autocomplete/reference/decision-policy.md","rite-autocomplete/reference/loop.md","rite-autocomplete/reference/stop-conditions.md"],"triggers":{"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"]},"workspace":["state.md","spec.md","plan.md","tasks.md","questions.md","decisions.md","drift.md","evidence.md","test-plan.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/workflow-artifacts.md"]} -->
+<!-- loads: {"always":["devrites-lib/reference/standards/core.md","devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/standards/one-shot-actions.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/acceptance-preserving-reslice.md","rite-autocomplete/reference/decision-policy.md","rite-autocomplete/reference/loop.md","rite-autocomplete/reference/stop-conditions.md"],"triggers":{"workflow-artifacts":["devrites-lib/reference/standards/workflow-artifacts.md"],"lookahead":["rite-autocomplete/reference/lookahead.md"]},"workspace":["state.md","spec.md","plan.md","tasks.md","questions.md","decisions.md","drift.md","evidence.md","test-plan.md"],"rootOnly":["devrites-lib/reference/standards/afk-hitl.md","devrites-lib/reference/orchestration-profiles.md","devrites-lib/reference/standards/workflow-artifacts.md","rite-autocomplete/reference/lookahead.md"]} -->
 > Read-set manifest: `devrites-engine context <slug> --phase autocomplete` bundles every file named below into one deduplicated read. Trigger names map to the conditional rules in the sections that follow.
 
 
@@ -69,7 +69,7 @@ executable controller/harness/bundle bytes or a missing writer, read
   not a stop either: follow it in your next tool call, never in a text-only
   acknowledgement.
 - Parse flags only from this invocation. `--ship`, `--yolo`, `--max-slices`,
-  `--parallel`, `--full`, and `--cross-model` activate only as exact standalone
+  `--parallel`, `--full`, `--cross-model`, and `--lookahead` activate only as exact standalone
   tokens in `$ARGUMENTS`; examples or earlier messages can never arm them.
   `--max-slices` must occur once and be followed by a positive base-10 integer;
   `--parallel` must occur once and be followed by a base-10 integer in `1`–`10`.
@@ -82,6 +82,10 @@ executable controller/harness/bundle bytes or a missing writer, read
 
 ## Workflow
 
+With `--lookahead` (trigger `lookahead`), follow
+[`lookahead.md`](reference/lookahead.md) instead of the steps below: plan the
+next sequence continuation through Vet in a second session, then stop.
+
 1. **Orient and parse.** Resolve the explicit or active slug; when a workspace exists,
    require its `state.md` and read its cursor; a fresh idea starts empty at step 2.
    Before honoring `blocked` with terminal `next_action`,

package/pack/generated/claude/skills/rite-autocomplete/reference/lookahead.md

@@ -0,0 +1,50 @@
+# Sequence lookahead (`--lookahead`)
+
+> Root-only: not inlined in --role bundles.
+
+A second session plans the next sequence continuation while the active
+workspace builds, so the child's Spec → Vet overlaps its predecessor's
+Build → Seal. The main loop later resumes the planned child instead of
+specifying it again.
+
+## Start and target
+
+The operator starts the second host session with `/rite-autocomplete
+--lookahead` once the `.devrites/ACTIVE` workspace is in Build or later. The
+agent never launches a session itself. The target is the next recorded
+continuation after the active workspace: the entry
+[sequence continuation](loop.md#sequence-continuation) would open. Stop with
+nothing to do when the active workspace is before Build, no entry remains,
+`continue_sequence: false`, or the sequence budget is spent.
+
+## Lease
+
+Before any write, take the workspace lease:
+`devrites-engine claim add --session lookahead-<target> --ttl 240 --workspace <target> --reason lookahead`.
+Exit 3 means another session holds the target: stop. Re-add the lease with the
+same session at each phase start, and release it with `devrites-engine claim
+release` on every stop. A crashed session's lease reads `dead` and frees itself.
+
+## Rules
+
+- Never read or write `.devrites/ACTIVE`. Pass the target slug explicitly to every
+  skill and engine command, including `/rite-spec <target> "<objective>"` and
+  `devrites-engine handoff <target> --resume`.
+- After the workspace exists, run `devrites-engine state set <target> sequence_lookahead=yes`.
+- Run Spec → Clarify → Temper → Define → Plan → Vet as the main loop does.
+  Define and Plan read the predecessor's current tree and plan. Record an
+  assumption for each predecessor interface the plan relies on.
+- At Vet, beside the readiness binding, record exactly one line
+  `Predecessor readiness: <active-slug> <digest>` in `eng-review.md`. `<digest>`
+  is the hex that `devrites-engine check readiness --emit-binding <active-slug>`
+  prints. When the predecessor later changes its planning inputs, the child's
+  readiness check blocks with `DRV-GATE-READINESS-STALE` and the main loop
+  re-vets the child before Build.
+- Never Build, never write product source or tests, never commit, and never
+  arm or rewrite `.devrites/AFK`. Owner questions go to the target's
+  `questions.md` and stop the lookahead.
+- Stop at Vet `READY` with `next_action: build after predecessor Seal GO`, at a
+  human gate, or when the target's lease is lost.
+
+**Failing case:** the lookahead passes Vet and starts Build while the
+predecessor is still sealing, so two root sessions write one tree.

package/pack/generated/claude/skills/rite-autocomplete/reference/loop.md

@@ -93,6 +93,13 @@ step 10 does not end the run: leave the sealed workspace unshipped with its
 (`/rite-spec <parent>-<n> "<objective>"` from the parent's `decisions.md` sequence)
 and re-enter step 1. Spend one workspace per opened continuation.
 
+When that workspace already exists because a [lookahead](lookahead.md) session
+planned it, do not specify it again. Wait while `devrites-engine claim check
+--workspace <child>` exits 3 (a live lookahead holds it), then set
+`.devrites/ACTIVE` to the child and resume from its cursor at step 1. A
+predecessor replan since its Vet blocks the child's readiness with
+`DRV-GATE-READINESS-STALE`; route that to `/rite-vet` before Build.
+
 Spend accounting is durable in `state.md` cursors, not chat. Before invoking the
 continuation, ensure the current workspace's `sequence_workspaces_remaining` is
 set — absent, write `max_workspaces - 1` and `sequence_position: 1` first — and

package/pack/generated/claude/skills/rite-build/reference/spec-drift-guard.md

@@ -12,6 +12,10 @@ phases. Never silently code against a known-wrong plan.
 - the design system / existing UX pattern contradicts the planned UI;
 - a missing user decision that affects product behavior surfaces.
 
+A timing gate that fails with no code cause is a protocol or environment defect
+([performance.md § Performance gate protocol](../../devrites-lib/reference/standards/performance.md#performance-gate-protocol)),
+never another wright round.
+
 ## Workflow
 ```
 1. STOP coding.

package/pack/generated/claude/skills/rite-spec/SKILL.md

@@ -124,7 +124,8 @@ load a routed standard to discover required behavior, not to prescribe implement
    owned prerequisites. Keep a build checkpoint only for unavailable pre-code evidence or a
    mandatory action-time approval. **Completion:** no foreseeable human choice is deferred.
 5. **Create or update the workspace** + set `.devrites/ACTIVE` from
-   [state-workspace](reference/state-workspace.md). If the slug already exists,
+   [state-workspace](reference/state-workspace.md); a `--lookahead` run
+   leaves `.devrites/ACTIVE` unchanged. If the slug already exists,
    update the existing workspace rather than overwrite it; preserve history and
    unrelated settled content. Write every required artifact and conditional
    annex exactly from [spec-template](reference/spec-template.md)

package/pack/generated/claude/skills/rite-vet/SKILL.md

@@ -211,7 +211,9 @@ plan declares a root-authored executable workflow file, read
    `marker sweep:` line is recorded in `eng-review.md`; a kept hit blocks READY. Write phase/next step and emit one
    `Readiness inputs SHA-256` with
    `devrites-engine check readiness --emit-binding <slug>`; normal readiness check
-   must pass. Record the per-input drift baseline alongside it:
+   must pass. A `sequence_lookahead: yes` workspace also records one
+   `Predecessor readiness: <predecessor> <digest>` line from the predecessor's
+   `--emit-binding` hex; readiness re-checks it. Record the per-input drift baseline alongside it:
    `devrites-engine check drift <slug> --record` — a later stale binding then
    names the exact artifact that moved instead of "something changed". An `ADVISORY
    proportion:` line names a slice whose proof outgrew its ACs: move its rows without a