forgedock 1.8.1 → 1.8.3

package/commands/orchestrate/phase-5-cleanup.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: core
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->
@@ -6,6 +7,8 @@ install: core
 
 # /orchestrate — Phase 5: Post-Batch Cleanup
 
+> **Skill names**: `{FORGE_SKILL_PREFIX}` is `forgedock:` (plugin install) or empty (`install.sh`), resolved once per run by `commands/work-on.md` § Skill Name Resolution. If the skill is not found under either name, STOP and report "skill not found" — never run the phase inline.
+
 ## Phase 5: Post-Batch Cleanup
 
 **This phase is MANDATORY after every orchestration batch.** It prevents the rot that accumulates when multiple agents merge PRs in parallel — stale labels, orphaned worktrees, unclosed issues.
@@ -15,7 +18,7 @@ install: core
 Invoke the `/cleanup` skill with `all` to sweep everything:
 
 ```
-Skill(skill="cleanup", args="all")
+Skill(skill="{FORGE_SKILL_PREFIX}cleanup", args="all")
 ```
 
 This will:
@@ -31,7 +34,7 @@ This will:
 Invoke `/audit-agents` on this session to measure pipeline efficiency:
 
 ```
-Skill(skill="audit-agents", args="latest")
+Skill(skill="{FORGE_SKILL_PREFIX}audit-agents", args="latest")
 ```
 
 Include the audit summary in the final report (Phase 6). Key metrics to surface:

package/commands/orchestrate/phase-6-report.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 
 install: core
 ---
@@ -39,7 +40,10 @@ for NUM in {all_completed_issue_numbers}; do
   if [ -n "$TRAJ_BODY" ]; then
     # Decode via protocol CLI — handles both Base64url form (forge#1727) and gracefully
     # exits 1 (skips) for pre-migration inline-JSON entries.
-    CARD=$(echo "$TRAJ_BODY" | node packages/protocol/src/cli.js parse --type CARD 2>/dev/null || true)
+    # The codec ships with ForgeDock, not with the consumer repo: resolve it from the install root.
+    _l="$(readlink -f "$HOME/.claude/commands/work-on.md" 2>/dev/null || true)"; _l="${_l%/commands/work-on.md}"; CODEC_CLI=""
+    for _c in '${CLAUDE_PLUGIN_ROOT}' "${FORGE_ROOT:-}" "${FORGEDOCK_HOME:-}" "${FORGE_HOME:-}" "$_l"; do case "$_c" in /*) [ -z "$CODEC_CLI" ] && [ -f "$_c/packages/protocol/src/cli.js" ] && CODEC_CLI="$_c/packages/protocol/src/cli.js" ;; esac; done
+    CARD=$( [ -n "$CODEC_CLI" ] && printf '%s\n' "$TRAJ_BODY" | node "$CODEC_CLI" parse --type CARD 2>/dev/null | jq -c '.payload // .' 2>/dev/null || true)
     [ -n "$CARD" ] && CARDS="${CARDS}${CARD}"$'\n'
   fi
 done
@@ -163,7 +167,7 @@ ORCHESTRATION_ENDED_IDLE="${BATCH_FULLY_GATED:-false}"
 IDLE_POLICY_DEFERRED_COUNT=0
 for FINDING_NUM in "${DEFERRED_FINDINGS[@]:-}"; do
   [ -z "$FINDING_NUM" ] && continue
-  echo "${DEFERRED_REASONS[$FINDING_NUM]:-}" | grep -qi "batch fully human-gated" && \
+  echo "${DEFERRED_REASONS[$FINDING_NUM]:-}" | grep -qi "batch fully human-gated" && ! echo "${DEFERRED_REASONS[$FINDING_NUM]:-}" | grep -qi "amplification breaker" && \
     IDLE_POLICY_DEFERRED_COUNT=$((IDLE_POLICY_DEFERRED_COUNT + 1))
 done
 ```
@@ -345,6 +349,7 @@ current session's live wake pick them up automatically if it is still running).
 | **Cascade amplification** | **{FINDINGS_SPAWNED:-0}/{MERGED_UNITS:-0} = {AMPLIFICATION_RATIO:-0} findings per merged unit** |
 | Amplification composition | {#REFINEMENT_FINDINGS[@]:-0} same-lineage refinements; {#NEW_SURFACE_FINDINGS[@]:-0} new-surface findings |
 | Amplification bound | {CASCADE_MAX_AMPLIFICATION:-off}; {#AMPLIFICATION_DEFERRED[@]:-0} same-lineage refinements deferred to completion sweep |
+| Amplification breaker | {AMPLIFICATION_BREAKER:-on}; {tripped|clear}; {#AMPLIFICATION_BREAKER_DEFERRED[@]:-0} P3 findings paused ({#BREAKER_HELD[@]:-0} still held at sweep) for bounded P3 batches (never dispatched individually) |
 | Competing recommendations reconciled (Phase 2.5) | {RECONCILED_COUNT} (investigation plans arbitrated in place + serialized) |
 | Findings validated | {N} |
 | False positives | {N} ({%}) |
@@ -363,7 +368,7 @@ current session's live wake pick them up automatically if it is still running).
 
 `P3 findings clubbed` and `Findings deferred — token budget` are a DIFFERENT mechanism from the `$`-denominated `Budget limit`/`Projected spend`/`Actual spend`/`Issues deferred (budget ceiling)` rows above (forge#1743, opt-in `--budget N` flag, gates the *original* issue dispatch order). The token-budget row reads the always-on, token-denominated ceiling that scopes ONLY to Step 4C's review-finding cascade dispatch (forge#1858); `SURFACE_BATCH_COUNT` and `SURFACE_BATCHED_FINDINGS` are populated by the same Step 4C surface-area-batching block (forge#1818) that clubs P3 findings sharing a file/leaf-directory into one dispatched pipeline. Both degrade gracefully to `0`/`uncapped` when the batch had no review findings or ran with defaults. <!-- Added: forge#1858 -->
 
-**Cascade amplification detail**: render one row per `FINDINGS_BY_SOURCE_PR` entry: `| PR #{source} | {finding count} | {refinement count} | {new-surface count} |`. A ratio at or above 1.0 means the batch is not reducing its open-work count through merges alone; it does **not** mean the findings are low-value. Include any convergence warning and state that the default `max_amplification: off` never defers findings. When an opt-in bound deferred a refinement, list it under Completion Sweep as re-evaluable rather than silently omitting it.
+**Cascade amplification detail**: render one row per `FINDINGS_BY_SOURCE_PR` entry: `| PR #{source} | {finding count} | {refinement count} | {new-surface count} |`. A ratio at or above 1.0 means the batch is not reducing its open-work count through merges alone; it does **not** mean the findings are low-value. Include any convergence warning and state that the default `max_amplification: off` never defers findings. State the amplification breaker (on by default, forge#3060) separately: when it tripped, report the ratio, the number of paused P3 findings, and the operator decision (batch or defer); when opted out via `amplification_breaker: off`, say so. When an opt-in bound deferred a refinement, list it under Completion Sweep as re-evaluable rather than silently omitting it.
 
 For `policy: all`, include the full-repo intake counts and list each automated duplicate with its canonical issue. A sweep measures all new open issues, including CI alerts without `review-finding`; it must not claim that the cascade ratio alone measures total queue growth.
 

package/commands/orchestrate/safety.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: core
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->

package/commands/orchestrate.md

@@ -51,7 +51,7 @@ dispatch a compact plan.
 
 ## Execution Order
 
-Read and execute phases in sequence. Each phase file is self-contained.
+Read and execute phases in sequence. Each phase file is self-contained. Resolve every path from the spec root defined in the Quick Reference below.
 
 | Step | File | Description |
 |------|------|-------------|
@@ -67,15 +67,19 @@ Read and execute phases in sequence. Each phase file is self-contained.
 
 ## Quick Reference
 
+**Spec root (MANDATORY)**: read every file below from `${CLAUDE_PLUGIN_ROOT}` — the install root of the ForgeDock plugin that is running this command (Claude Code fills it in when it loads the spec). Only if that path does not start with `/` (not a Claude Code plugin session: install.sh, Codex, OpenCode) use `$FORGE_HOME` instead. Never read sub-files from `$FORGE_HOME` when the plugin root resolved: an exported `FORGE_HOME` can point at a different, older ForgeDock checkout, and mixing roots runs stale phase specs.
+
+**Raw reads are not substituted (MANDATORY)**: Claude Code fills in the plugin root only in the spec it loads (this file), never in files you open with Read. The phase files contain the placeholder written as `$` immediately followed by `{CLAUDE_PLUGIN_ROOT}`. Before running any bash block taken from a phase file, replace every occurrence of that placeholder with `${CLAUDE_PLUGIN_ROOT}` (the resolved root shown here), exactly as Claude Code would have. Left unreplaced it is rejected as a non-absolute path and resolution falls back to `$FORGE_HOME`, which may be stale.
+
 ```
-Read: $FORGE_HOME/commands/orchestrate/config.md       # ALWAYS READ FIRST
-Read: $FORGE_HOME/commands/orchestrate/phase-1-resolve.md
-Read: $FORGE_HOME/commands/orchestrate/phase-2-triage.md
-Read: $FORGE_HOME/commands/orchestrate/phase-2.5-synthesis.md
-Read: $FORGE_HOME/commands/orchestrate/phase-3-dependency.md
-Read: $FORGE_HOME/commands/orchestrate/phase-4-execution.md
-Read: $FORGE_HOME/commands/orchestrate/phase-5-cleanup.md
-Read: $FORGE_HOME/commands/orchestrate/phase-6-report.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/orchestrate/config.md       # ALWAYS READ FIRST
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/orchestrate/phase-1-resolve.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/orchestrate/phase-2-triage.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/orchestrate/phase-2.5-synthesis.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/orchestrate/phase-3-dependency.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/orchestrate/phase-4-execution.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/orchestrate/phase-5-cleanup.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/orchestrate/phase-6-report.md
 ```
 
 The orchestrator reads only the phase file(s) relevant to the current step rather than

package/commands/pipeline-health/config.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: extras
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->

package/commands/pipeline-health/phase-1-context.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: extras
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->

package/commands/pipeline-health/phase-2-metrics.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: extras
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->

package/commands/pipeline-health/phase-3-analyze.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: extras
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->

package/commands/pipeline-health/phase-4-proposals.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: extras
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->
@@ -6,6 +7,8 @@ install: extras
 
 # /pipeline-health — Phase 4: Generate Improvement Proposals
 
+> **Skill names**: `{FORGE_SKILL_PREFIX}` is `forgedock:` (plugin install) or empty (`install.sh`), resolved once per run by `commands/work-on.md` § Skill Name Resolution. If the skill is not found under either name, STOP and report "skill not found" — never run the phase inline.
+
 ## Phase 4: Generate Improvement Proposals
 
 ### 4A: Pattern recurrence analysis — check-promotion threshold <!-- Added: forge#1331 -->
@@ -40,7 +43,7 @@ while IFS= read -r line; do
 
   # SECURITY: $SLUG is sourced from a <!-- FORGE:PATTERN: ([^\s>]+) --> tag inside
   # a review-finding issue body — untrusted, externally-influenced text. It is
-  # interpolated below into a Skill(skill="issue", args="...") string, and
+  # interpolated below into a Skill(skill="{FORGE_SKILL_PREFIX}issue", args="...") string, and
   # commands/issue.md's Phase 1A resolves that string via `eval "set -- $ARGUMENTS"`.
   # Any shell metacharacter (quote, backtick, $, ;) in $SLUG would break out of the
   # intended --title token and be eval'd as shell. Whitelist-validate at the
@@ -108,7 +111,7 @@ ${SOURCE_FINDINGS}
 <!-- AUTO-CREATED: pipeline-health Phase 4A — pattern recurrence threshold exceeded -->
 CHECK_EOF
 
-  Skill(skill="issue", args="--title \"feat(quality-gate): promote pattern '$SLUG' to deterministic registry check (recurred ${COUNT}x)\" --body-file $CHECK_BODY_FILE --label check-promotion --label priority:P2")
+  Skill(skill="{FORGE_SKILL_PREFIX}issue", args="--title \"feat(quality-gate): promote pattern '$SLUG' to deterministic registry check (recurred ${COUNT}x)\" --body-file $CHECK_BODY_FILE --label check-promotion --label priority:P2")
   rm -f "$CHECK_BODY_FILE"
   echo "Created check-promotion issue for pattern '$SLUG' (recurred ${COUNT}x from: $SOURCE_FINDINGS)"
 done <<< "$PATTERN_LIST"
@@ -170,7 +173,7 @@ echo "$SPEC_CONCENTRATION" | while IFS=' ' read -r count spec_file finding_nums;
 
   # SECURITY (defense-in-depth, consistency with $SLUG above): $spec_file is
   # already constrained by the extraction regex (commands/[a-z0-9_/-]+\.md), but
-  # it is interpolated below into a Skill(skill="issue", args="...") string that
+  # it is interpolated below into a Skill(skill="{FORGE_SKILL_PREFIX}issue", args="...") string that
   # /issue's Phase 1A resolves via eval. Whitelist-validate again at point of use
   # so this call site does not depend solely on the extraction regex staying safe.
   if ! echo "$spec_file" | grep -qE '^commands/[A-Za-z0-9_/-]+\.md$'; then
@@ -235,7 +238,7 @@ This issue was auto-created by \`pipeline-health\` Phase 4A.5.
 <!-- AUTO-CREATED: pipeline-health Phase 4A.5 — spec concentration threshold exceeded -->
 TRIGGER_EOF
 
-  Skill(skill="issue", args="--title \"feat(spec-doctor): queue spec evolution pass for $(basename $spec_file .md) (${count} concentrated findings)\" --body-file $TRIGGER_BODY_FILE --label spec-doctor-trigger --label priority:P2")
+  Skill(skill="{FORGE_SKILL_PREFIX}issue", args="--title \"feat(spec-doctor): queue spec evolution pass for $(basename $spec_file .md) (${count} concentrated findings)\" --body-file $TRIGGER_BODY_FILE --label spec-doctor-trigger --label priority:P2")
   rm -f "$TRIGGER_BODY_FILE"
   echo "Created spec-doctor trigger for '$spec_file' (${count} findings: $finding_nums)"
 done

package/commands/pipeline-health/phase-5-report.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: extras
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->
@@ -6,6 +7,8 @@ install: extras
 
 # /pipeline-health — Phase 5: Report & Track
 
+> **Skill names**: `{FORGE_SKILL_PREFIX}` is `forgedock:` (plugin install) or empty (`install.sh`), resolved once per run by `commands/work-on.md` § Skill Name Resolution. If the skill is not found under either name, STOP and report "skill not found" — never run the phase inline.
+
 ## Phase 5: Report & Track
 
 ### 5A: Post health report
@@ -279,7 +282,7 @@ restore_forge_yaml() {
 trap restore_forge_yaml EXIT
 cp "$FORGE_ISSUE_HOOK_CONFIG" forge.yaml
 
-ISSUE_RESULT=$(Skill(skill="issue", args="--title \"Pipeline Health: $REPO — $(date +%Y-%m-%d) — Score: [SCORE]/100\" --body-file $HEALTH_BODY_FILE --label health-report"))
+ISSUE_RESULT=$(Skill(skill="{FORGE_SKILL_PREFIX}issue", args="--title \"Pipeline Health: $REPO — $(date +%Y-%m-%d) — Score: [SCORE]/100\" --body-file $HEALTH_BODY_FILE --label health-report"))
 echo "$ISSUE_RESULT"
 
 # Restore the original forge.yaml immediately — so a subsequent Bash call in this same
@@ -390,7 +393,7 @@ restore_forge_yaml() {
 trap restore_forge_yaml EXIT
 cp "$FORGE_ISSUE_HOOK_CONFIG" forge.yaml
 
-ISSUE_RESULT=$(Skill(skill="issue", args="--title \"fix([command]): [description]\" --body-file $PROPOSAL_BODY_FILE --label \"[bug|enhancement|feature]\" --label \"[P1|P2|P3]\""))
+ISSUE_RESULT=$(Skill(skill="{FORGE_SKILL_PREFIX}issue", args="--title \"fix([command]): [description]\" --body-file $PROPOSAL_BODY_FILE --label \"[bug|enhancement|feature]\" --label \"[P1|P2|P3]\""))
 echo "$ISSUE_RESULT"
 
 # Restore the original forge.yaml immediately — same rationale as 5A. Clears the EXIT trap

package/commands/pipeline-health/phase-6-summary.md

@@ -1,4 +1,5 @@
 ---
+user-invocable: false
 install: extras
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->

package/commands/pipeline-health.md

@@ -31,14 +31,16 @@ Read and execute phases in sequence. Each phase file is self-contained.
 
 ## Quick Reference
 
+**Spec root (MANDATORY)**: read every file below from `${CLAUDE_PLUGIN_ROOT}` — the install root of the ForgeDock plugin that is running this command (Claude Code fills it in when it loads the spec). Only if that path does not start with `/` (not a Claude Code plugin session: install.sh, Codex, OpenCode) use `$FORGE_HOME` instead. Never read sub-files from `$FORGE_HOME` when the plugin root resolved: an exported `FORGE_HOME` can point at a different, older ForgeDock checkout, and mixing roots runs stale phase specs.
+
 ```
-Read: $FORGE_HOME/commands/pipeline-health/config.md           # ALWAYS READ FIRST
-Read: $FORGE_HOME/commands/pipeline-health/phase-1-context.md
-Read: $FORGE_HOME/commands/pipeline-health/phase-2-metrics.md
-Read: $FORGE_HOME/commands/pipeline-health/phase-3-analyze.md
-Read: $FORGE_HOME/commands/pipeline-health/phase-4-proposals.md
-Read: $FORGE_HOME/commands/pipeline-health/phase-5-report.md
-Read: $FORGE_HOME/commands/pipeline-health/phase-6-summary.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/pipeline-health/config.md           # ALWAYS READ FIRST
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/pipeline-health/phase-1-context.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/pipeline-health/phase-2-metrics.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/pipeline-health/phase-3-analyze.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/pipeline-health/phase-4-proposals.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/pipeline-health/phase-5-report.md
+Read: ${CLAUDE_PLUGIN_ROOT}/commands/pipeline-health/phase-6-summary.md
 ```
 
 The command reads only the phase file(s) relevant to the current step rather than loading

package/commands/pipeline-resume.md

@@ -6,13 +6,15 @@ install: extras
 
 # /pipeline-resume — Context Recovery After Compaction
 
+> **Skill names**: `{FORGE_SKILL_PREFIX}` is `forgedock:` (plugin install) or empty (`install.sh`), resolved once per run by `commands/work-on.md` § Skill Name Resolution. If the skill is not found under either name, STOP and report "skill not found" — never run the phase inline.
+
 **Input**: $ARGUMENTS
 
 You are the context-recovery agent. When a session ends or context is compressed, all working state is lost. Your job is to restore it instantly — find the most recently active issue, read all FORGE annotations, reconstruct the current pipeline phase, and re-enter the pipeline exactly where it left off.
 
 **Agent model policy**: `model: "haiku"`, `effort: low` (mechanical tier — context recovery, annotation reading, state reconstruction). Fallback: `model: "sonnet"` if rate-limited. Feature gate: pass `effort` only on Claude Code >= 2.1.154.
 **NEVER use plan mode (EnterPlanMode).**
-**NEVER use the Agent tool** — pipeline-resume re-enters the pipeline via `Skill(skill="work-on", ...)` only. Using the Agent tool would restart the pipeline in an untracked subprocess rather than resuming the existing tracked session.
+**NEVER use the Agent tool** — pipeline-resume re-enters the pipeline via `Skill(skill="{FORGE_SKILL_PREFIX}work-on", ...)` only. Using the Agent tool would restart the pipeline in an untracked subprocess rather than resuming the existing tracked session.
 
 <!-- FORGE:SPEC_LOADED — pipeline-resume.md loaded and active. Agent is bound by this spec. -->
 
@@ -267,7 +269,7 @@ Emit a structured context block before resuming — this is what anchors the age
 Invoke `/work-on` to re-enter the pipeline. Work-on reads GitHub state independently and routes to the correct phase automatically.
 
 ```
-Skill("work-on", args="{TARGET_NUMBER}")
+Skill("{FORGE_SKILL_PREFIX}work-on", args="{TARGET_NUMBER}")
 ```
 
 **Why delegation works**: `/work-on` Phase 0B already implements "Determine resume point" — it reads issue labels and FORGE annotations to route to the correct phase. `/pipeline-resume` provides the human-readable context summary, then hands off to `/work-on` for execution.

package/commands/qa-sweep.md

@@ -8,6 +8,8 @@ install: extras
 
 # /qa-sweep — Platform-Wide QA Testing
 
+> **Skill names**: `{FORGE_SKILL_PREFIX}` is `forgedock:` (plugin install) or empty (`install.sh`), resolved once per run by `commands/work-on.md` § Skill Name Resolution. If the skill is not found under either name, STOP and report "skill not found" — never run the phase inline.
+
 **Input**: $ARGUMENTS
 
 You are the QA orchestrator. Auto-discover every page across the platform (dashboard, marketing, blog, auth, docs, pricing), then systematically test every UI element, interaction, workflow, and state transition using browser automation. Create GitHub issues for every finding.
@@ -339,7 +341,7 @@ BODY_EOF
 ```
 
 ```
-Skill(skill="issue", args="--title \"{fix|feat}: {title} on {page}\" --body-file \"$QA_BODY_FILE\" --label \"qa\" --label \"{bug_or_enhancement}\" --label \"{priority}\"")
+Skill(skill="{FORGE_SKILL_PREFIX}issue", args="--title \"{fix|feat}: {title} on {page}\" --body-file \"$QA_BODY_FILE\" --label \"qa\" --label \"{bug_or_enhancement}\" --label \"{priority}\"")
 ```
 
 `qa`, `{bug_or_enhancement}`, and `{priority}` are each passed as their own `--label` flag — `/issue`'s programmatic mode does not comma-split a single `--label` value.

package/commands/quality-gate.md

@@ -1,6 +1,7 @@
 ---
 description: Pre-commit quality check — catches defects the review would flag, so the builder can fix them before committing
 argument-hint: (invoked by /work-on, not directly)
+context: fork
 ---
 <!-- SPDX-FileCopyrightText: Copyright (c) RapierCraft Studios -->
 <!-- SPDX-License-Identifier: AGPL-3.0-or-later -->
@@ -1712,13 +1713,13 @@ OR:
 
 Return the findings list directly. Do NOT post to GitHub. Do NOT create issues. The builder will fix the findings and re-run the gate if needed.
 
-**CRITICAL — continuation directive**: Your output is consumed by a calling pipeline agent. You MUST append the continuation block below to your output in ALL cases (both PASS and FINDINGS). Without it, the calling agent treats your output as a terminal signal and stops the pipeline.
+**Result delivery**: This skill runs in an isolated forked context, so your final reply is the only thing the caller sees. The PASS or FINDINGS block below MUST be your final reply, in ALL cases, with nothing after it. The caller (the validate quality-gate loop) decides what happens next.
 
 If 0 findings:
 ```
 QUALITY GATE: PASS — no issues detected.
 
-**YOU MUST NOW continue to sub-phase 3H (Format and verify) in work-on.md — this PASS is intermediate, NOT terminal. Do NOT stop.**
+Return this result to the caller.
 ```
 
 If findings exist:
@@ -1726,5 +1727,5 @@ If findings exist:
 QUALITY GATE FINDINGS: N issues detected.
 {findings list}
 
-**YOU MUST NOW fix each HIGH and MEDIUM finding, then re-run the quality gate — this result is intermediate, NOT terminal. Do NOT stop.**
+Return this result to the caller; the caller fixes each HIGH and MEDIUM finding and re-runs the gate.
 ```