geneseed 3.3.0 → 3.4.0

package/src/skills/geneseed.md

@@ -15,15 +15,4 @@
 ## Done when
 - The user's question about the deployed harness is answered from the live install — file paths or CLI output — not from recall.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/git-archaeology.md

@@ -33,15 +33,4 @@ or rewrite, use git-rescue.md; to write a new commit, use commit.md).
 - The question is answered with a specific commit (or commits) and the diff/output that
   proves it, the bisect state is reset, and the working tree is unchanged.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/git-rescue.md

@@ -54,15 +54,4 @@ finding *when/why* something changed without altering history, use git-archaeolo
 - The repository is in the intended state, verified against actual git output, and the
   pre-rescue state is still recoverable from the backup branch or the reflog.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/handoff.md

@@ -15,15 +15,4 @@
 ## Done when
 - A fresh agent can resume from the worklog alone — goal, progress, next step, and blockers are all written down.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/herdr.md

@@ -151,15 +151,4 @@ herdr pane read 1-1 --source recent --lines 100
 
 The task that motivated the side pane is finished, its output has been read (or its result captured), and any pane / tab / workspace you opened just for the task has been closed — unless the user asked you to keep it.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/ingest.md

@@ -36,15 +36,4 @@ must be converted first.
 - The document's content is available as markdown and the slice the task needs has
   been read — without reading the binary or committing a stray conversion.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/migrate.md

@@ -31,15 +31,4 @@ change into the same deploy as the code that depends on it (universal {{LAW}} II
   changelog / lockfile reflect the new state with its docs updated
   ({{DOCTRINE}} craft 3).
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/opencode-theme.md

@@ -39,15 +39,4 @@ them at `--theme` / the setup wizard, not this {{SKILL}}.
 - Both `<name>.json` (and/or `<name>-transparent.json`) exist in the active themes dir,
   the CLI reported the path, and the user knows the `/theme <name>` command to select it.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/parallel-agents.md

@@ -14,15 +14,4 @@
 ## Done when
 - Independent units ran concurrently, each returned a distilled result, and the reconciled outcome is verified.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/pipeline.md

@@ -16,7 +16,7 @@ The minimum roster per task type. The parent may add specialists on top — secu
 |---|---|
 | Development | [explorer](../{{DIR_AGENTS}}/explorer.md) (analyst) → [developer](../{{DIR_AGENTS}}/developer.md) → [tester](../{{DIR_AGENTS}}/tester.md) + lint gate |
 | Documentation | [explorer](../{{DIR_AGENTS}}/explorer.md) (analyst) → [docs](../{{DIR_AGENTS}}/docs.md) |
-| Research / investigation | [explorer](../{{DIR_AGENTS}}/explorer.md) (analyst) alone |
+| Research / investigation | [explorer](../{{DIR_AGENTS}}/explorer.md) (analyst) alone; add [researcher](../{{DIR_AGENTS}}/researcher.md) when the question leaves the repository |
 | Review / audit | [reviewer](../{{DIR_AGENTS}}/reviewer.md) + [skeptic](../{{DIR_AGENTS}}/skeptic.md) |
 
 ## Procedure
@@ -38,15 +38,4 @@ A branch/worktree containing the work **plus** the mechanical proof: test and li
 
 - Green proof: the crew delivered a branch with passing tests and lint, and the parent merged it — or the loop cap was exhausted and the failure was reported with the branch left in place.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/plan.md

@@ -31,15 +31,4 @@
 > place after the window fills, and lets the user correct course early. Consider
 > git-ignoring `WORKLOG.md` if it should stay local to each developer.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/ponytail.md

@@ -15,15 +15,4 @@
 ## Done when
 - The shipped solution sits on the highest ladder rung that works, deliberate shortcuts carry a `ponytail:` comment with their upgrade path, non-trivial logic has one runnable check, and nothing on the never-simplify list was cut.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/profile.md

@@ -44,15 +44,4 @@ as creation, and never discard a section the user wrote by hand.
   `user-rules.md` or {{MEMORY}} instead — or the user declined, and the file is
   untouched.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/prose.md

@@ -28,15 +28,4 @@ person wrote it, not a model.
 - The text says what it means in the fewest honest words, carries no AI tells,
   and would pass as written by a careful human.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/prototype.md

@@ -30,15 +30,4 @@ real implementation.
 - The question has a recorded verdict, the decision lives in the real code,
   and no prototype code remains on the main branch.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/quiz.md

@@ -0,0 +1,43 @@
+# {{SKILL}}: quiz
+
+> {{DESC_QUIZ}}
+
+<!-- invocation: user -->
+
+**Trigger:** the user wants what they know *tested*, not explained — "drill me on X",
+"quiz me until it sticks", "let me explain X to you and catch me", "I think I already
+know X, prove me wrong", "find the holes in what I know". Three shapes, picked from the
+ask: a **drill** (practise until reflex), a **feynman** (explain it back, get caught on
+the stumbles), or a **gap check** (a mastery claim stress-tested). To be taught instead,
+use the [teach {{SKILL}}](teach.md).
+
+## Procedure
+1. Pin the concept and set the contract plainly: you will test, not lecture, and you
+   will not go easy. Do not explain the concept up front.
+2. Pick the shape and run it:
+   - **Drill** — drop the user straight into a realistic situation where they would
+     have to use the concept and would probably slip. On a mistake, withhold the
+     answer; ask the one question that forces them to find where their own reasoning
+     broke. Reveal only after two honest attempts. New situation each cycle, until they
+     get it right without hesitation.
+   - **Feynman** — have them explain the topic as if teaching a ten-year-old.
+     Interrupt the moment they (a) use jargon they cannot themselves unpack, (b) skip
+     a step in the reasoning, or (c) simplify so far the explanation becomes wrong —
+     name which of the three it was each time, and keep them going to the end.
+   - **Gap check** — ask five questions that look simple but separate someone who
+     has gone deep from someone who skimmed: edge cases, the *why*, the assumption
+     under the rule, the case where the standard answer breaks. After each answer say
+     plainly what it reveals is still missing; a shallow answer is named as shallow,
+     with what depth would have looked like.
+3. Close with the honest readout, no flattery: what the stumbles or misses reveal is
+   not yet solid, what to restudy, and — for a drill — the variation most likely to
+   catch them out next. Offer the [teach {{SKILL}}](teach.md) for the gaps that need
+   teaching rather than more testing.
+
+## Done when
+- The user worked the situation correctly without being handed the answer (drill),
+  explained the topic through with every stumble caught and labelled (feynman), or
+  answered all five questions and holds a concrete verdict on the remaining gaps (gap
+  check) — and the run ended with a direct readout, never empty praise.
+
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/refactor.md

@@ -18,15 +18,4 @@
 ## Done when
 - Structure is improved, observable behaviour is unchanged, tests are green, and the refactor is committed by itself.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/release.md

@@ -29,15 +29,4 @@
 - Version, changelog, and tag all name the same number, and the release is pushed
   (or staged for the pipeline) with no unrelated changes bundled in.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/repo-map.md

@@ -22,15 +22,4 @@
 - `ARCHITECTURE.md` reflects the current structure, and a fresh agent could orient
   from it in a single read.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/research.md

@@ -11,7 +11,10 @@ stop and report it ({{LAW}} V); never substitute recall for verified research.
 
 ## Procedure
 1. State the question and what a complete answer must contain. Break a broad question
-   into specific sub-questions.
+   into specific sub-questions. Where the host runs subagents, hand the sub-questions
+   to the [researcher {{AGENT}}](../{{DIR_AGENTS}}/researcher.md) — it runs steps 2–5
+   in its own context and returns only the sourced findings ({{DOCTRINE}} process 3);
+   otherwise carry on here.
 2. Search the web — use the host's web-search tool or a connected search provider
    ({{DOCTRINE}} ops 1). Query from several angles; one search is not research,
    and one empty result is not absence ({{LAW}} III). If the host
@@ -30,15 +33,4 @@ stop and report it ({{LAW}} V); never substitute recall for verified research.
 - The question is answered, every material claim is traceable to a cited,
   cross-checked source, and remaining uncertainties are flagged explicitly.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/review-response.md

@@ -22,15 +22,4 @@ are about to act on it.
 - Every comment has a reasoned response and either an applied change or a justified
   decline, and the resulting changes are verified.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/roast-me.md

@@ -14,15 +14,4 @@
 ## Done when
 - Findings are severity-ranked, every one carries a fix, and the highest-impact change is named.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/rule.md

@@ -86,15 +86,4 @@ adoption.
   {{LAWS}}, consented to explicitly, with any promoted source memory archived. The
   {{ONTOLOGY}}, {{LAWS}} and {{DOCTRINES}} files are untouched either way.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/security-audit.md

@@ -0,0 +1,51 @@
+# {{SKILL}}: security-audit
+
+> {{DESC_SECURITY_AUDIT}}
+
+**Trigger:** a change touches the security surface — authentication, authorisation,
+session or token handling, input from outside the trust boundary, file or shell
+access, cryptography, secrets, a new dependency, a network-facing endpoint — or the
+user asks for a "security review", "threat model", or "is this safe". The
+[geneseed-code-review {{SKILL}}](geneseed-code-review.md) reviews a diff for
+correctness first; this one asks a different question of the same diff: *how would
+this be attacked, and what does it leak*. Run both before shipping anything on the
+surface.
+
+## Procedure
+1. **Draw the surface.** From the diff and the code it lands in, name the trust
+   boundaries the change crosses (user input, another service, the filesystem, a
+   subprocess, the network), what an attacker controls on each, and the assets behind
+   them (data, credentials, the host). No boundary crossed → say so, verdict *not on
+   the surface*, stop.
+2. **Dispatch the [security {{AGENT}}](../{{DIR_AGENTS}}/security.md)** with the surface
+   from step 1 and the diff — read-only, in its own context so the main one stays
+   clean ({{DOCTRINE}} process 3). It runs the passes below; for a small change you may
+   run them yourself.
+3. **Pass 1 — the classic classes**, each checked against the actual code, not
+   assumed: injection (SQL, shell, path, template), broken auth or missing authz on
+   a new route, unsafe deserialisation, SSRF, insecure defaults, missing rate or size
+   limits, error messages that leak internals. Verify by reading the handling at the
+   boundary and, where a test can exercise it, by running one ({{LAW}} III).
+4. **Pass 2 — secrets and data.** Nothing sensitive in code, config, logs, fixtures,
+   or the commit itself ({{LAW}} I); PII handled and logged to the project's policy;
+   tokens scoped and expiring. Grep the diff for key-shaped strings, and check what the
+   new code *logs*.
+5. **Pass 3 — the supply chain.** A new or bumped dependency: who publishes it, how
+   maintained, what it pulls in transitively, any advisory against the pinned version
+   (the [deps-audit {{SKILL}}](deps-audit.md) carries the tooling). A destructive
+   capability exposed to an agent or a tool: its guard is enforced server-side, at the
+   boundary the call crosses, never left to the caller's judgement ({{DOCTRINE}} rigor 5).
+6. **Report, don't fix.** Each finding as `file:line — attack — impact — fix`, ranked
+   critical → high → medium → note, with the evidence that made it a finding. Then the
+   verdict — **ship / fix-then-ship / block** — and, for anything above medium, the
+   test that would pin the fix. Applying fixes is a [develop {{SKILL}}](develop.md)
+   task on its own commit ({{LAW}} II); a review that quietly edits the code it judges
+   has stopped being a review.
+
+## Done when
+- The trust boundaries the change crosses are named, each class was checked against
+  the real code with evidence, no secret or unguarded destructive path rides along,
+  and a ranked findings list ends in a ship / fix-then-ship / block verdict — with no
+  code changed by the review itself.
+
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/ship.md

@@ -35,15 +35,4 @@ request or merge the branch.
 - The PR is open (or the branch is merged) with a body stating what / why / how it
   was tested, and nothing unrelated rides along.
 
-## Self-improvement
-
-Close each run with one beat of reflection on the {{SKILL}} itself:
-- A step misled, a needed step was missing, or the trigger fired wrongly — that
-  is a flaw in this file. Propose the exact edit (trigger, procedure, or
-  done-when) and apply it with the user's assent ({{LAW}} II).
-- A lesson that is *not* a flaw in this file goes to {{MEMORY}} only if it
-  clears {{DOCTRINE}} process 1's bar: it would change how a future session behaves, and a
-  fresh read of the repo would not re-derive it. Update an existing memory over
-  adding one; when in doubt, leave it out.
-- No friction, nothing learned — move on; this loop earns no ceremony. Most
-  runs end here.
+<!-- INCLUDE: skills/_self-improvement.md -->

package/src/skills/skill-forge.md

@@ -0,0 +1,59 @@
+# {{SKILL}}: skill-forge
+
+> {{DESC_SKILL_FORGE}}
+
+**Trigger:** a task has repeated and no {{SKILL}} covers it; a {{SKILL}}'s
+self-improvement loop produced an edit worth making; the user says "make this a
+skill", "write a skill for…", "fix the trigger of…"; or two {{SKILLS}} keep
+disambiguating against each other and should merge. Meta by nature: it edits the
+apparatus, so every step ends in the user's assent ({{LAW}} II, {{LAW}} IV).
+
+## Procedure
+1. **Reuse before authoring** ({{DOCTRINE}} craft 1, craft 4). Read the catalogue — the
+   host's skill list, or AGENT.md §4 — and the nearest existing {{SKILL}} in full. If
+   its domain already covers the need, the change is an *edit* to that file (a step,
+   a trigger phrase, a done-when), not a new file. Name the skill by its domain, not
+   the situation that prompted it.
+2. **Write the trigger first, then the procedure.** Start from
+   `{{DIR_SKILLS}}/_template.md`. The purpose line says *what*; the **Trigger** line
+   says *when*, in the words a user would actually say and the situations the model
+   would actually meet — the emitted `description:` is purpose + trigger, and it is
+   the only text the host matches a task against. Then the numbered procedure (each
+   step an action with a verification), and a **Done when** that a stranger could
+   check. Keep it to one coherent domain; a "Requires:" line only for a hard external
+   prerequisite. When only the user should ever open it (a teaching drill, a tool
+   gated on an environment the model cannot see), put the `invocation: user` HTML
+   comment on the line after the purpose blockquote — the template shows it. Never
+   quote that marker inside another skill's body: the emit matches it anywhere in the
+   text, and the quoting skill silently drops out of the model's catalogue.
+   A name the host already owns as a built-in command (Claude Code ships
+   `security-review`, `code-review`, `simplify`, `init`) is shadowed — pick another.
+3. **Test the trigger against its neighbours.** For three real asks the skill should
+   catch and two it should not, decide from the descriptions alone which skill fires.
+   A wrong pick is a trigger to sharpen — or a sign two skills should be one. A trigger
+   that needs a "not this, use that" clause to be safe is a trigger with a fuzzy edge;
+   fix the edge rather than adding the clause.
+4. **Register it where the host expects.** In an *installed* harness: the file under
+   `{{DIR_SKILLS}}/`, one row in AGENT.md §4's table, then `geneseed doctor` — it fails
+   if the table and the files disagree. In the *Geneseed source repo* the cost is the
+   full satellite set (`docs/extending.md` §3): the file, the §4 row, `DESC_<NAME>` in
+   every theme, `SKILL_CLASS`, a `registry.json` row, the README enumeration, then
+   `doctor --all` and the suites. A skill that bundles a script or several files is a
+   folder skill (`<name>/SKILL.md` + `VENDOR.md`), listed in `VENDORED_SKILL_DIRS`.
+5. **Merge or retire honestly.** When two skills fold into one: keep the best steps of
+   each, rewrite the exit so the survivor routes to what the retired one led to, and
+   remove the retired file and *every* reference to it (table row, sibling links, theme
+   tokens, registry, README) — a dangling link is a build failure, a dangling trigger
+   phrase is a silent miss. Retirement is deletion; get consent ({{LAW}} IV).
+6. **Verify by rendering.** Build or re-emit, open the emitted `SKILL.md`, read the
+   frontmatter description as the host will, and confirm the body carries no
+   unresolved token or dead link (`doctor`, or `geneseed-build --validate-only`).
+   Show the user the diff and the emitted description before it lands ({{LAW}} II).
+
+## Done when
+- The need is met by an edit to an existing {{SKILL}} or by one new file in its own
+  domain; the emitted description names both purpose and trigger and wins its five
+  test asks against the neighbours; every satellite the host or the repo demands is in
+  place, `doctor` is green, and the user saw and accepted the change.
+
+<!-- INCLUDE: skills/_self-improvement.md -->