fdeops 3.15.2 → 3.17.0

package/bin/fde.js

@@ -408,6 +408,8 @@ const SECRET_PATTERNS = [
   { name: 'Slack token', re: /\bxox[baprs]-[A-Za-z0-9-]{10,}\b/ },
   { name: 'PEM private key', re: /-----BEGIN (?:RSA |EC |OPENSSH )?PRIVATE KEY-----/ },
   { name: 'Bearer token', re: /\bBearer\s+[A-Za-z0-9._\-]{20,}\b/ },
+  { name: 'database URL', re: /\b[a-z][a-z0-9+.-]*:\/\/[^/\s:]+:[^/\s@]+@/i },
+  { name: 'api key assignment', re: /\b(?:api[_-]?key|secret|password)\s*=\s*\S{8,}/i },
 ]
 
 function findSecretHit(text) {
@@ -769,6 +771,89 @@ function firstLine(md, maxLen) {
   return ''
 }
 
+// reality.md is the one panel whose job is "not the brief". If the file does
+// not carry Working theory / Evidence / Differs from brief, do not scrape a
+// first line that might be the inherited brief and label it truth.
+function parseReality(md, maxLen) {
+  const theory = (md.match(/\*\*Working theory:\*\*\s*(.*)/i) || [])[1]
+  const hasSchema = /\*\*(Working theory|Evidence|Differs from brief how):\*\*/i.test(md)
+  const theoryText = (theory || '').trim()
+  if (theoryText) {
+    const line = theoryText.length > maxLen ? theoryText.slice(0, maxLen - 1).trim() + '…' : theoryText
+    return { line, missing: '' }
+  }
+  if (hasSchema) return { line: '', missing: '' }
+  const prose = firstLine(md, maxLen)
+  if (prose) {
+    return {
+      line: '',
+      missing: 'UNREADABLE - reality.md does not match the schema (Working theory / Evidence / Differs from brief). Not showing the brief as truth.',
+    }
+  }
+  return { line: '', missing: '' }
+}
+
+function appendValueLedgerRow(eng, cells) {
+  ensureMemoryGit(eng)
+  const p = path.join(eng, 'delivery.md')
+  let md = readEng(eng, 'delivery.md')
+  if (!md) md = '# Delivery log\n\n## Value ledger\n\n'
+  const date = new Date().toISOString().slice(0, 10)
+  const cols = []
+  for (let i = 0; i < 7; i++) cols.push((cells[i] || '').replace(/\|/g, '\\|').trim() || ' ')
+  const row = `| ${date} | ${cols.join(' | ')} |`
+  const lines = md.split('\n')
+  let inLedger = false
+  let lastTableLine = -1
+  for (let i = 0; i < lines.length; i++) {
+    if (/^##\s+Value ledger\b/i.test(lines[i])) { inLedger = true; continue }
+    if (inLedger && /^##\s+/.test(lines[i])) break
+    if (inLedger && /^\|/.test(lines[i].trim())) lastTableLine = i
+  }
+  if (lastTableLine === -1) md = appendUnderSection(md, 'Value ledger', row)
+  else {
+    lines.splice(lastTableLine + 1, 0, row)
+    md = lines.join('\n')
+  }
+  withFileLock(p, () => { atomicWriteFile(p, md.endsWith('\n') ? md : md + '\n') })
+  recordLastWrite(eng, 'delivery.md', row)
+  commitMemory(eng, 'log delivery', { files: ['delivery.md'] })
+}
+
+function retireOpenRisks(eng, needle) {
+  const n = String(needle || '').toLowerCase()
+  if (!n) return 0
+  const p = path.join(eng, 'risks.md')
+  const md = readEng(eng, 'risks.md')
+  if (!md) return 0
+  const retired = []
+  const kept = []
+  let inRetired = false
+  for (const raw of md.split('\n')) {
+    const t = raw.trim()
+    if (/^#{1,6}\s+Retired\b/i.test(t)) { inRetired = true; kept.push(raw); continue }
+    if (!inRetired) {
+      const m = t.match(/^-\s*\[\d{4}-\d{2}-\d{2}\]\s*(?:\[@[^\]]+\]\s*)?(.*)$/)
+      if (m && m[1].toLowerCase().includes(n)) {
+        retired.push(raw)
+        continue
+      }
+    }
+    kept.push(raw)
+  }
+  if (!retired.length) return 0
+  let out = kept.join('\n')
+  if (!/^#{1,6}\s+Retired\b/im.test(out)) out = out.replace(/\n*$/, '\n\n## Retired\n')
+  const stamp = new Date().toISOString().slice(0, 10)
+  const block = retired.map(l => {
+    const body = l.trim().replace(/^-\s*/, '')
+    return `- [${stamp}] (retired) ${body}`
+  }).join('\n')
+  out = appendUnderSection(out, 'Retired', block)
+  withFileLock(p, () => { atomicWriteFile(p, out.endsWith('\n') ? out : out + '\n') })
+  return retired.length
+}
+
 // Engagement age from the .fde/ directory's own birth time - hidden (not
 // fabricated as 0) on filesystems that do not report birthtime.
 function daysElapsed(eng) {
@@ -817,6 +902,7 @@ function parseMdTable(md) {
 function colIndex(headers, rx) { return headers.findIndex(h => rx.test(h)) }
 
 const {
+  personFromSignalText,
   signalSubjectKey,
   nextActionLine,
   computeSignals,
@@ -856,6 +942,8 @@ function parseSignalHistoryEntries(eng) {
 }
 
 function displayNameFromSignalText(text) {
+  const person = personFromSignalText(text)
+  if (person) return person
   const t = String(text).trim()
   const proper = t.match(/^([A-Z][a-z]+(?:\s+[A-Z][a-z]+)?)/)
   if (proper) return proper[1]
@@ -885,11 +973,11 @@ function extractStakeholders(eng) {
         const stance = stanceIdx !== -1 ? (cs[stanceIdx] || '').trim() : ''
         const note = notesIdx !== -1 ? (cs[notesIdx] || '').trim() : ''
         const words = name.replace(/\([^)]*\)/g, '').split(/\s+/).filter(w => w && !/^(dr|mr|mrs|ms)\.?$/i.test(w))
-        const frag = (words[0] || '').replace(/[^a-z0-9]/gi, '')
+        const nameKey = signalSubjectKey(name)
         let signal = null, matchedDate = null
-        if (frag.length >= 3) {
+        if (nameKey) {
           for (const h of history) {
-            if (h.text.trim().toLowerCase().startsWith(frag.toLowerCase()) && (!matchedDate || h.date >= matchedDate)) {
+            if (signalSubjectKey(h.text) === nameKey && (!matchedDate || h.date >= matchedDate)) {
               signal = h.signal; matchedDate = h.date
             }
           }
@@ -1317,6 +1405,9 @@ function cmdLog(args) {
     if (!['red', 'amber', 'green'].includes(signal)) { console.error('usage: fde log contact <text> --signal red|amber|green'); process.exit(1) }
     args.splice(sigIdx, 2)
   }
+  let retire = false
+  const retireIdx = args.indexOf('--retire')
+  if (retireIdx !== -1) { retire = true; args.splice(retireIdx, 1) }
   const type = args[0]; const text = args.slice(1).join(' ')
   const eng = resolveEngagement({ forWrite: true })
   if (!eng) { console.error('no engagement - run: fde resume --init <name>'); process.exit(2) }
@@ -1333,11 +1424,26 @@ function cmdLog(args) {
     return
   }
 
-  if (!LOG_FILES[type] || !text) { console.error(`usage: fde log <decision|risk|delivery|contact> <text> [--signal red|amber|green] [--force]\n       fde log phase <${PHASES.join('|')}>\n       fde log --undo`); process.exit(1) }
+  if (!LOG_FILES[type] || !text) { console.error(`usage: fde log <decision|risk|delivery|contact> <text> [--signal red|amber|green] [--force]\n       fde log risk --retire <text>\n       fde log phase <${PHASES.join('|')}>\n       fde log --undo`); process.exit(1) }
   if (signal && type !== 'contact') { console.error('--signal only applies to: fde log contact'); process.exit(1) }
+  if (retire && type !== 'risk') { console.error('--retire only applies to: fde log risk'); process.exit(1) }
   const hit = findSecretHit(text)
   if (hit && !force) { refuseSecret('log text', hit); process.exit(1) }
   if (hit && force) console.error(`warning: logging possible ${hit} (--force)`)
+  if (retire) {
+    const n = retireOpenRisks(eng, text)
+    if (!n) { console.error(`no open risk matched ${JSON.stringify(text)}`); process.exit(1) }
+    const hash = commitMemory(eng, 'retire risk', { files: ['risks.md'] })
+    console.log(`retired ${n} risk(s) → risks.md${hash ? ` @${hash}` : ''}`)
+    return
+  }
+  if (type === 'delivery' && text.includes('|')) {
+    const cells = text.split('|').map(s => s.trim())
+    appendValueLedgerRow(eng, cells)
+    const hash = memoryHead(eng)
+    console.log(`logged → delivery.md (value ledger)${hash ? ` @${hash}` : ''}`)
+    return
+  }
   const date = new Date().toISOString().slice(0, 10)
   const entry = datedEntry(eng, date, text, signal || '')
   appendLogEntry(eng, type, entry)
@@ -1651,9 +1757,11 @@ function cmdDebrief(args) {
     input = readDebriefInput(args)
   }
 
-  if (smart) {
+    if (smart) {
     const { proposePath, clean, blocks } = writeProposal(eng, smartProposeText(input))
     console.log('SMART PROPOSE (heuristic - review before apply; no new facts invented beyond line rewrites)\n')
+    console.log('Prefix vocabulary (lines that route): decision:  risk:  delivery:  contact:  next:')
+    console.log('Everything else → context.md. Keep the prefixes; the preview gate stays.\n')
     routeDebriefInput(eng, clean, { dry: true, force, sealed: blocks })
     if (!apply) {
       console.log(`\nproposal saved → ${proposePath}`)
@@ -2182,6 +2290,8 @@ function collectDoctorIssues(eng) {
       `${aliases.length} stakeholder identity cluster(s) (e.g. "${sample}") - same person under different names? consolidate in stakeholders.md`
     )
   }
+  const reality = parseReality(readClean(eng, 'reality.md'), 220)
+  if (reality.missing) issues.push(reality.missing)
   return issues
 }
 
@@ -2484,7 +2594,7 @@ function cmdRedact(args) {
     console.log('nothing changed')
     return
   }
-  const hash = commitMemory(eng, `redact ${term.slice(0, 40)}`, { files: touched })
+  const hash = commitMemory(eng, `redact ${hits.length} line(s)`, { files: touched })
   console.log(`redacted ${hits.length} line(s) in ${touched.join(', ')}${hash ? ` @${hash}` : ''}`)
   console.log('rotate the real credential if this was a secret - history may still contain it')
 }
@@ -2585,6 +2695,15 @@ function cmdGarden(args) {
       sessionBlocks,
     })
   }
+  const dirty = memoryDirtyManual(eng)
+  if (dirty.length) {
+    proposals.push({
+      id: 'bless-manual',
+      kind: 'apply',
+      text: `Bless ${dirty.length} hand-written file(s) into the ledger: ${dirty.slice(0, 5).join(', ')}${dirty.length > 5 ? '…' : ''}`,
+      files: dirty,
+    })
+  }
   if (!proposals.length) {
     console.log('\nNothing to tidy.')
     return
@@ -2613,6 +2732,12 @@ function cmdGarden(args) {
       }
       continue
     }
+    if (p.id === 'bless-manual') {
+      applied++
+      for (const f of p.files) touched.add(f)
+      console.log(`applied: bless ${p.files.join(', ')}`)
+      continue
+    }
     if (p.id !== 'archive-sessions') continue
     const cutDates = new Set(p.sessionBlocks.map(b => b.date))
     const keep = []
@@ -2744,6 +2869,10 @@ function cmdStatus(args) {
     }
   }
   if (!all) console.log('\n(current engagement only - pass --all for the full portfolio)')
+  if (!all) {
+    const current = resolveEngagement()
+    if (current) for (const line of hygieneTriageLines(current)) console.log(line)
+  }
   console.log('\ntrust: worst active [signal:x] across stakeholders (latest per person) - a green from B cannot clear an amber/red on A; keyword heuristic only when none exists.')
 }
 
@@ -2801,7 +2930,9 @@ function cmdDashboard(args) {
     // line instead of sharing one, a shorter cap just meant more sentences
     // cut off mid-thought for no reason.
     e.brief = firstLine(readClean(e.dir, 'brief.md'), 220)
-    e.reality = firstLine(readClean(e.dir, 'reality.md'), 220)
+    const reality = parseReality(readClean(e.dir, 'reality.md'), 220)
+    e.reality = reality.line
+    e.realityMissing = reality.missing
     e.overlay = detectOverlay(e.dir)
     e.days = daysElapsed(e.dir)
     e.phaseLabel = phaseLabel(e.signals.phase)
@@ -2839,6 +2970,10 @@ function cmdDashboard(args) {
   }
   console.log(`fieldbook → ${outPath}`)
   console.log(`${engagements.length} engagement(s) rendered · ${counts.RED} red / ${counts.amber} amber / ${counts.green} green · 0 tokens (pure render)`)
+  if (!all) {
+    const current = resolveEngagement()
+    if (current) for (const line of hygieneTriageLines(current)) console.log(line)
+  }
   if (args.includes('--open')) {
     // arg-array form: the path is never interpolated into a shell string.
     const [bin, pre] = process.platform === 'darwin' ? ['open', []]
@@ -2985,7 +3120,8 @@ function cmdVault(args) {
     const ctx = readClean(e.dir, 'context.md')
     e.next = (sectionBody(ctx, 'Next action', { lastNonEmpty: true }).split('\n').find(l => l.trim()) || '').trim()
     e.brief = firstLine(readClean(e.dir, 'brief.md'), 400)
-    e.reality = firstLine(readClean(e.dir, 'reality.md'), 400)
+    const reality = parseReality(readClean(e.dir, 'reality.md'), 400)
+    e.reality = reality.line || reality.missing
     e.overlay = detectOverlay(e.dir)
     e.days = daysElapsed(e.dir)
     e.stakeholders = extractStakeholders(e.dir)
@@ -3186,19 +3322,20 @@ function printUsage() {
   fde resume --init <name> create + bind engagement for this workspace (rebind replaces)
   fde resume --bind        show what this workspace is bound to, and what resolves
   fde triage               TRIAGE block only (hooks / Cursor session entry)
-  fde log <type> <text>    append decision|risk|delivery|contact (contact takes --signal red|amber|green; --force to allow secret-like text)
+  fde log <type> <text>    append decision|risk|delivery|contact (contact takes --signal red|amber|green; delivery "a|b|c" writes the value ledger; --force to allow secret-like text)
+  fde log risk --retire    move matching open-risk bullets to ## Retired
   fde log phase <phase>    set engagement phase (land|discover|plan|ship|prove|close)
   fde log --undo           remove the last CLI log/debrief entry from memory
   fde debrief [file]       meeting notes → memory (prefixed lines; --dry-run; --force)
-  fde debrief --smart      heuristic propose (prefix + light keywords); agent routes, CLI gates → --apply
+  fde debrief --smart      heuristic propose (prints decision:/risk:/delivery:/contact:/next:); --apply after confirm
   fde ingest stage …       stage raw pull into <engagement>/.inbox/ (not .fde/)
   fde ingest list          list staged inbox items
   fde ingest propose <id>  smart-propose a staged item → .debrief-propose (confirm before apply)
   fde ingest apply         same as: fde debrief --apply
   fde prep [label]         grounded walk-in brief from existing .fde/ only
-  fde doctor               lint engagement memory (stale signals, gaps)
-  fde redact <term>        preview/remove lines containing a buried term (pass --apply to commit)
-  fde tidy [--apply]       propose safe consolidations (contract: no new facts; git-reversible)
+  fde doctor               lint engagement memory (stale signals, gaps). status/dashboard/resume print the same issues
+  fde redact <term>        preview/remove lines containing a buried term (pass --apply to commit; subject never repeats the term)
+  fde tidy [--apply]       propose consolidations; blesses hand-written dirty files when you apply
   fde owner [set email]    who keeps this engagement record
   fde receipts <term>      "what did we agree?" with dates
   fde status [--all]       value ledger, then trust (pass --all for full portfolio)

package/bin/lib/render.js

@@ -467,10 +467,10 @@ ${e.lastSession ? `<div class="fb-now-session">${inlineMd(e.lastSession)}</div>`
   // needed vs what's actually true. Squeezed onto one truncated line, that
   // contrast disappears. Each gets its own line, its own room to finish a
   // thought, not a race to fit before an ellipsis.
-  const whyBlock = (e.brief || e.reality) ? `<div class="fb-block">
+  const whyBlock = (e.brief || e.reality || e.realityMissing) ? `<div class="fb-block">
 <div class="fb-sec">Why</div>
 ${e.brief ? `<p class="fb-why"><span class="t-faint">What they asked for:</span> ${inlineMd(e.brief)}</p>` : ''}
-${e.reality ? `<p class="fb-why fb-why-reality"><span class="fb-accent-label">What's actually true:</span> ${inlineMd(e.reality)}</p>` : ''}
+${e.realityMissing ? `<p class="fb-why fb-why-missing"><span class="fb-accent-label">What's actually true:</span> ${escapeHtml(e.realityMissing)}</p>` : e.reality ? `<p class="fb-why fb-why-reality"><span class="fb-accent-label">What's actually true:</span> ${inlineMd(e.reality)}</p>` : ''}
 </div>` : ''
 
   // Vitals: a fixed field-facing gut-check panel, not a Movement block that

package/bin/lib/trust.js

@@ -48,12 +48,46 @@ function createTrustApi(deps) {
     return { ok: true, warn: '' }
   }
 
-  // Subject key for a signal-history line - first real name word (same spirit as
-  // extractStakeholders). A green about Randy must not clear an amber about Denise.
+  // Event labels are not people. "INCIDENT: … Marcus escalated" must key on
+  // Marcus, or a recovered engagement stays RED in front of the sponsor.
+  const SIGNAL_EVENT_KEYS = new Set([
+    'incident', 'recovery', 'alert', 'update', 'note', 'status', 'escalation',
+    'blocker', 'outage', 'fire', 'issue', 'sev', 'sev1', 'sev2', 'p1', 'p2', 'p3',
+    'resolved', 'risk', 'decision', 'delivery', 'contact',
+  ])
+
+  function personFromSignalText(text) {
+    let cleaned = String(text || '')
+      .replace(/\[@[^\]]+\]/g, '')
+      .replace(/\([^)]*\)/g, '')
+      .replace(/\[signal:[^\]]+\]/gi, '')
+      .replace(/\[\d{4}-\d{2}-\d{2}\]/g, '')
+      .replace(/^([A-Z]{2,}[A-Z0-9_-]*):?\s+/, '')
+      .trim()
+    const names = cleaned.match(/\b[A-Z][a-z]{1,20}(?:\s+[A-Z][a-z]{1,20})?\b/g) || []
+    for (const name of names) {
+      const first = name.split(/\s+/)[0].toLowerCase()
+      if (SIGNAL_EVENT_KEYS.has(first)) continue
+      return name
+    }
+    return ''
+  }
+
+  // Subject key for a signal-history line. Prefer a proper name in the bullet.
+  // A green about Randy must not clear an amber about Denise.
   // Strip author tags [@email-local] so attribution never becomes the subject key.
   function signalSubjectKey(text) {
+    const person = personFromSignalText(text)
+    if (person) {
+      const frag = person.split(/\s+/)[0].replace(/[^a-z0-9]/gi, '').toLowerCase()
+      if (frag.length >= 3) return frag
+    }
     const cleaned = String(text).replace(/\[@[^\]]+\]/g, '').replace(/\([^)]*\)/g, '')
-    const words = cleaned.split(/\s+/).filter(w => w && !/^(dr|mr|mrs|ms)\.?$/i.test(w))
+      .replace(/^([A-Z]{2,}[A-Z0-9_-]*):?\s+/, '')
+    const words = cleaned.split(/\s+/).filter(w => {
+      const n = w.replace(/[^a-z0-9]/gi, '').toLowerCase()
+      return n.length >= 3 && !SIGNAL_EVENT_KEYS.has(n) && !/^(dr|mr|mrs|ms)$/i.test(w)
+    })
     const frag = (words[0] || '').replace(/[^a-z0-9]/gi, '').toLowerCase()
     return frag.length >= 3 ? frag : ('anon:' + cleaned.slice(0, 48).toLowerCase())
   }
@@ -196,6 +230,7 @@ function createTrustApi(deps) {
 
   return {
     stakeholdersMemoryHealth,
+    personFromSignalText,
     signalSubjectKey,
     parsePhase,
     countOpenRisks,

package/mcp/README.md

@@ -38,7 +38,7 @@ Source MCP(s)          fdeops-ingest MCP           fde CLI
 
 ## Recipes (copy-paste connect)
 
-See [`recipes/`](./recipes/) for file, Granola-shaped, and Notion-shaped setup. In chat: `@fde I want to connect Granola` → skill `ingest-connect` walks the FDE through config + reload + verify.
+See [`recipes/`](./recipes/) for file, Granola-shaped, and Notion-shaped setup. In chat: `@fde I want to connect Granola` → skill `connect` walks the FDE through config + reload + verify.
 
 ## Adding a source MCP
 

package/mcp/fdeops-ingest/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops-ingest-mcp",
-  "version": "3.15.2",
+  "version": "3.17.0",
   "private": true,
   "description": "Thin stdio MCP sink for FDEOps ingest (stage → propose → apply). Zero runtime dependencies.",
   "bin": {

package/mcp/recipes/README.md

@@ -13,4 +13,4 @@ FDEOps does **not** bundle Granola / Slack / Notion OAuth and does **not** push
 | [slack.md](./slack.md) | Pull a thread/channel as text - never post |
 | [notion.md](./notion.md) | Read a Notion page (or export markdown) |
 
-**Natural language:** `@fde I want to connect Granola` (or Slack / Notion) → `skills/fde/references/ingest-connect.md`.
+**Natural language:** `@fde I want to connect Granola` (or Slack / Notion) → `skills/fde/references/connect.md`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fdeops",
-  "version": "3.15.2",
+  "version": "3.17.0",
   "description": "Forward deployed engineering skills for AI coding agents. Your agent forgets the client every morning - the sponsor, the promise, who signed off. FDEOps keeps that as dated markdown on your laptop: one @fde skill, a deterministic local CLI, and hooks that make it automatic. Claude Code plugin and any agent that loads skills.",
   "bin": {
     "fdeops": "bin/install.js",

package/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
   "name": "fdeops",
-  "version": "3.15.2",
+  "version": "3.17.0",
   "description": "Forward deployed engineering skills for AI coding agents: per-client memory in local .fde/ files, one @fde skill. Local-only, no network.",
   "author": {
     "name": "Subash Natarajan",

package/skills/fde/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: fde
-description: Keeps the engagement record for client work. Use when they name a client or stakeholder. Use when they debrief a meeting or paste notes. Use when they ask what was agreed. Use when they run a POC, slice a feature on the client's codebase, prove it on their staging, or need evals before a model acts. Use when they prep a readout, when trust shifts, or they say @fde. Route and run the local fde CLI (or npx --yes fdeops). Never ask them to type commands. Not for ordinary code edits in an unbound repo.
+description: Keeps the engagement record for client work. Use when they name a client or stakeholder. Use when they debrief a meeting or paste notes. Use when they ask what was agreed. Use when they run a POC, change the client's codebase, prove it on their staging, go live, or need evals before a model acts. Use when they prep a readout, when trust shifts, or they say @fde. Route and run the local fde CLI (or npx --yes fdeops). Never ask them to type commands. Not for ordinary code edits in an unbound repo.
 ---
 
 # @fde
@@ -17,7 +17,7 @@ The **engagement record** for one client, from first meeting to signed outcome.
 
 ## When NOT to use
 
-A one-line typo or compile error in a file that will not ship. On a bound client: stay here for POC, slice, characterisation, eval, go-live, rollback, and acceptance.
+A one-line typo or compile error in a file that will not ship. On a bound client: stay here for POC, characterisation, the change on their repo, eval, go-live, rollback, and acceptance.
 
 ## Use these first
 
@@ -26,25 +26,25 @@ A one-line typo or compile error in a file that will not ship. On a bound client
 | **The brief is wrong** | "If this works, who in their company would have to agree that it worked?" | `fde resume` then discover | `references/discover.md` |
 | **They went quiet** | "Is this a process gap, or a trust problem?" | `fde log contact "…" --signal amber\|red\|green` | `references/rescue.md` |
 | **When did we agree?** | Don't argue from memory. Search the record. | `fde receipts <term>` | - |
-| **What's the outcome?** | A number nobody signed is claimed, not delivered. | `fde status` | `references/status.md` |
+| **What's the outcome?** | A number nobody signed is claimed, not delivered. | `fde status` | `references/readout.md` |
 
 After a meeting: `fde debrief --smart` → confirm → `--apply`. Walk-in: `fde prep`. Friday: `fde status`.
 
 ## Ground loop
 
-On someone else's site the work is not "write code, remember later." Every slice stays on `@fde`:
+On someone else's site the work is not "write code, remember later." Every change on a bound client stays on `@fde`:
 
-1. **Name it** in `decisions.md` (plan) or kill it in a day (sketch).
-2. **Characterise their code** before you change it (incremental-build). Their tests, their runner.
-3. **Prove it where they live.** Staging they operate, a screen the signer in `success.md` can reject.
-4. **If a model judges:** `evals.md` Verdict SHIP before the slice is done (eval-pack).
-5. **Log delivery.** Outcome is promised → measured → accepted, not a green CI.
+1. **Name it** in `decisions.md` (plan) or kill it in a day (poc).
+2. **Characterise their code** before you change it. Brownfield: their tests, their runner. Greenfield: the empty tree, first path they can click.
+3. **Prove it on their staging.** Staging they operate, a screen the signer in `success.md` can reject.
+4. **If a model judges:** `evals.md` Verdict SHIP before that change is done (eval-pack).
+5. **Log delivery.** Outcome is promised → measured → accepted, not a green CI. Then go live with a rollback you have run (`ship`).
 
-A throwaway file can skip the loop. A client slice cannot.
+A throwaway file can skip the loop. Bound client work cannot.
 
 ## Human surface vs agent plumbing
 
-**FDE (human):** `@fde` + English, or `/brief` `/discover` `/plan` `/ship` `/outcome` `/close` `/debrief` `/prep` `/quiet` `/agreed` `/status`. Never a skill catalog.
+**FDE (human):** `@fde` + English, or `/brief` `/discover` `/plan` `/ship` `/outcome` `/close` `/debrief` `/prep` `/trust` `/receipts` `/readout`. Never a skill catalog.
 
 **You (agent):** run the CLI. **Never tell the FDE to type** `fde …`. If unbound, you run `fde resume --init` after one question. Never ask them to run the CLI.
 
@@ -72,7 +72,7 @@ Writes need a bind (`FDEOPS_ENGAGEMENT` or registry). Never install fdeops on in
 | clean up the fieldbook | `fde doctor` - never auto-rewrite |
 | scrub a secret | `fde redact <term>` then `--apply` after confirm |
 | pull Granola/Slack/transcript | capability check → `fde ingest stage` → confirm → apply. Never auto-apply. `references/ingest.md` |
-| connect an MCP | `references/ingest-connect.md` |
+| connect an MCP | `references/connect.md` |
 | Obsidian / one window | `fde vault` (`--redacted` for a shared screen) |
 
 ## The memory contract
@@ -121,18 +121,18 @@ Read **one** reference and follow it. Do not improvise from memory.
 |----------|-------|-----------|
 | Starting fresh, new customer, first meeting, just got the brief | land | `references/land.md` |
 | Taking over, previous consultant left, joining mid-project | audit | `references/audit.md` |
-| Need to understand who matters, who decides, who blocks quietly | stakeholder-radar | `references/stakeholder-radar.md` |
-| Need to earn access, navigate AI policy, build credibility | trust-engineering | `references/trust-engineering.md` |
-| "Also can you…", scope expanding, timeline unchanged | scope-defense | `references/scope-defense.md` |
+| Need to understand who matters, who decides, who blocks quietly | who-decides | `references/who-decides.md` |
+| Need to earn access, navigate AI policy, build credibility | earn-trust | `references/earn-trust.md` |
+| "Also can you…", scope expanding, timeline unchanged | hold-scope | `references/hold-scope.md` |
 
 ### Discover
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
 | Don't know the real problem, brief feels wrong, shadow processes | discover | `references/discover.md` |
-| The brief feels too neat, assumptions untested, "we just need…" | assumption-audit | `references/assumption-audit.md` |
-| Multiple use cases competing, "we want to do everything" | use-case-scoring | `references/use-case-scoring.md` |
-| Need to validate a direction, prototype, demo to de-risk, **POC**, spike, killer assumption | sketch | `references/sketch.md` |
+| The brief feels too neat, assumptions untested, "we just need…" | test-assumptions | `references/test-assumptions.md` |
+| Multiple use cases competing, "we want to do everything" | score-use-cases | `references/score-use-cases.md` |
+| Need to validate a direction, prototype, demo to de-risk, **POC**, spike, killer assumption | poc | `references/poc.md` |
 
 ### Plan
 
@@ -140,43 +140,42 @@ Read **one** reference and follow it. Do not improvise from memory.
 |----------|-------|-----------|
 | Break this down, what order, sequence the build | plan | `references/plan.md` |
 | Sponsor needs justification, need to defend budget or timeline | business-case | `references/business-case.md` |
-| Significant decision, multiple approaches, "what should we do?" | options-analysis | `references/options-analysis.md` |
-| 20 things are "urgent," need to pick the 3 that matter | initiative-triage | `references/initiative-triage.md` |
+| Significant decision, multiple approaches, "what should we do?" | three-options | `references/three-options.md` |
+| 20 things are "urgent," need to pick the 3 that matter | pick-three | `references/pick-three.md` |
 
 ### Ship
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Large feature, need visible progress every 2-3 days, slice it, characterise their tests, POC follow-through | incremental-build | `references/incremental-build.md` |
-| What could go wrong, touching shared infrastructure, need to assess impact | blast-radius | `references/blast-radius.md` |
+| What could go wrong, touching shared infrastructure, need to assess impact | what-breaks | `references/what-breaks.md` |
 | Production down, urgent - OR stakeholder gone quiet, trust slipping | rescue | `references/rescue.md` |
-| Ready to deploy, going live, pre-flight check | ship | `references/ship.md` |
+| Start building, update their checkout, first module, visible progress, their tests, POC follow-through, ready to deploy, going live, pre-flight | ship | `references/ship.md` |
 | Review this change, is it safe, does it match what we agreed | review | `references/review.md` |
 | Diff grew / scope creep in the PR / "did we only build what we said" / KEEP JUSTIFY SPLIT DROP | review (+ ship if going live) | `references/review.md` Stage 1 · `references/ship.md` Intent vs diff |
 | Wrap the session / share the thinking / catch teammates up / before I open the PR | (memory contract - session digest) | SKILL.md **On exit** - write TL;DR + decisions/why into `.fde/`; no transcript sync |
-| "We can always revert" - need to actually test the escape route | rollback-drill | `references/rollback-drill.md` |
+| "We can always revert" - need to actually test the escape route | rollback | `references/rollback.md` |
 
 ### Prove
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Weekly update due, "need to send the sponsor something" | status | `references/status.md` |
+| Weekly update due, "need to send the sponsor something" | readout | `references/readout.md` |
 | Demo coming up, show-and-tell, exec walkthrough | demo-prep | `references/demo-prep.md` |
 | Just out of a meeting, raw notes, "they said…", "debrief" | debrief | the debrief verb (above) + `references/debrief.md` |
 | Make sure we're up to date, pull what's relevant, fetch from Granola/Slack/Gmail/transcript | ingest | `references/ingest.md` (capability check → stage → propose → confirm → apply) |
-| Connect a new MCP / connect Granola Slack or Notion / what can you pull | ingest-connect | `references/ingest-connect.md` (+ `mcp/recipes/`) |
+| Connect a new MCP / connect Granola Slack or Notion / what can you pull | connect | `references/connect.md` (+ `mcp/recipes/`) |
 | Prep me for a meeting / walk-in brief / "what should I know before I talk to…" | - | run `fde prep "<label>"`, present in plain language |
-| Sponsor's boss needs a summary, board update, justify continued investment | exec-narrative | `references/exec-narrative.md` |
+| Sponsor's boss needs a summary, board update, justify continued investment | board-memo | `references/board-memo.md` |
 | Status across all my customers | dashboard | `references/dashboard.md` |
 
 ### Close
 
 | You hear | Skill | Reference |
 |----------|-------|-----------|
-| Juggling 2+ customers, losing track, context-switching | multi-customer-ops | `references/multi-customer-ops.md` |
+| Juggling 2+ customers, losing track, context-switching | switch-clients | `references/switch-clients.md` |
 | Wrapping up, handoff, making yourself replaceable | close | `references/close.md` |
-| Engagement ending, team needs to operate without you | handoff-engineering | `references/handoff-engineering.md` |
-| Something worked well and will apply to future engagements | pattern-extract | `references/pattern-extract.md` |
+| Engagement ending, team needs to operate without you | runbook | `references/runbook.md` |
+| Something worked well and will apply to future engagements | encode-pattern | `references/encode-pattern.md` |
 | "Red-team this," "stress-test my plan," poke holes, what am I missing | red-team | `references/red-team.md` |
 | "What did we agree about X?", scope dispute, receipts | - | run `fde receipts <term>`, answer with dates |
 
@@ -196,7 +195,7 @@ Ready to build with no `terrain.md` / plan: discover or plan first. Takeover wit
 ## Principles
 
 - Never ask the FDE to pick a phase. That's your job.
-- Ground loop on a bound client: name → characterise → prove where they live → log. Do not hand the slice to a generic coding pack.
+- Ground loop on a bound client: name → characterise → prove on their staging → go live → log. Do not hand their repo to a generic coding pack.
 - Read `context.md` before speaking. One sharp question - never a barrage.
 - Never invent people, meetings, or numbers - `unknown - ask:` beats a polished lie.
 - Every phase ends with its artifact written. No artifact, no "done."

package/skills/fde/references/ai.md

@@ -47,7 +47,7 @@ When any slice touches a model, embeddings, RAG, or an agent: create or update `
 4. **Pass/fail** - dated run; Verdict **SHIP** or **NO-SHIP**; critical fails must be 0.
 5. **HITL gate** - which decisions need human review before action (align with `trust-profile.md`). Empty when policy requires review → NO-SHIP.
 
-**When to write:** plan seeds the pack; sketch/build grows goldens; ship requires Verdict SHIP and a receipt in `delivery.md` → `## Ship receipts`. Non-AI work skips this file entirely.
+**When to write:** plan seeds the pack; poc/build grows goldens; ship requires Verdict SHIP and a receipt in `delivery.md` → `## Ship receipts`. Non-AI work skips this file entirely.
 
 ## RAG architecture (retrieval-augmented generation)
 

package/skills/fde/references/{exec-narrative.md → board-memo.md}

@@ -1,4 +1,4 @@
-# exec-narrative - the story that gets the next phase funded
+# board-memo - the story that gets the next phase funded
 
 **Enter when:** the sponsor's boss needs a summary, a board update mentions the engagement, the FDE needs to justify continued investment, or a quarterly review is approaching.
 

package/skills/fde/references/business-case.md

@@ -1,8 +1,8 @@
 # business-case - the economics that get the sponsor to say yes
 
-**Enter when:** the sponsor needs justification for the next phase, the FDE needs to defend budget or timeline, a feature decision needs cost/benefit evidence, or sketch produced a direction that needs funding.
+**Enter when:** the sponsor needs justification for the next phase, the FDE needs to defend budget or timeline, a feature decision needs cost/benefit evidence, or poc produced a direction that needs funding.
 
-**Read first:** `reality.md`, `success.md`, `delivery.md`, `context.md`. Load `business-case.md` from sketch if it exists - extend it, don't restart.
+**Read first:** `reality.md`, `success.md`, `delivery.md`, `context.md`. Load `business-case.md` from poc if it exists - extend it, don't restart.
 
 Technical FDEs lose engagements by shipping good code without business justification. The sponsor's boss doesn't ask "is the code clean?" - they ask "what did we get for the money?" A business case translates technical work into the language that keeps the engagement alive.
 

package/skills/fde/references/{ingest-connect.md → connect.md}

@@ -1,4 +1,4 @@
-# ingest-connect - wire a source MCP in plain language
+# connect - wire a source MCP in plain language
 
 **Enter when:** the FDE says "I want to connect a new MCP", "connect Granola / Slack / Notion", "how do I pull from …", or a pull request fails because no source tools exist.