geneseed 3.8.0 → 3.10.0

package/CHANGELOG.md

@@ -8,7 +8,77 @@ label. For the capability ↔ spec map, see [SHIPPED.md](SHIPPED.md).
 
 ## [Unreleased]
 
-_Nothing yet._
+## [3.10.0] — 2026-10-01
+
+**Upgrading:** re-emit after installing (`geneseed rebuild-all`). A Copilot install is no longer
+maintained: `geneseed uninstall` it before upgrading, or leave its files as they are — nothing
+re-emits them any more. Breaking for Copilot users only; every other host gains features.
+
+### Removed
+- **GitHub Copilot is no longer a host** — dropped for lack of support and of cross-tool
+  support. `--emit copilot` / `--emit copilot-global`, the `--host copilot` hook dialect, the
+  Copilot agent dialect, its MCP target, the setup and web-console options and
+  `adapters/copilot/` are gone. Geneseed now emits for OpenCode, Claude Code, Bob and
+  OpenClaude, plus the plain `AGENT.md` bundle (#166).
+
+### Fixed
+- **The session files reach the session.** The root file names `user-rules.md`, `PROFILE.md`,
+  the Memory and Notebook indexes, `wiki.jsonc` and `context.json` for session start, but on a
+  Claude-shaped install (Claude Code, Bob, OpenClaude) the context hook only looked at the repo
+  root — so none of them were ever injected, and the root told the model they sit "beside this
+  file", where they are not. The hook and the OpenCode context plugin now inject them from the
+  install's own folder as a `SESSION FILES` block, skipping any file still at its seed; the root
+  gives each host's real path; Claude-shaped installs now seed `context.json`; and the OpenCode
+  plugin finds `wiki.jsonc` on a project install (#167).
+- **Bob folder skills know where they live.** Bob hands a skill's text without its directory, so
+  a folder skill's `<this-skill-directory>/…` paths were unresolvable; the Bob emit now writes the
+  real path. `daydream` gained its missing frontmatter, `react-view-transitions` is named after
+  its folder, and `doctor` checks every folder skill's `name`/`description` (#164).
+
+### Changed
+- **A lighter lean root.** Restated prose is full-footprint only: the laws, Ethos, doctrine,
+  posture and mode intros, §3's dispatch envelope and council roster (they live in the
+  parallel-agents and council skills), §10 Scripts, and the folder-skill list on hosts that list
+  skills natively. The lean Claude root drops from ~33k to ~29k characters (#165).
+
+## [3.9.0] — 2026-09-30
+
+**Upgrading:** re-emit after installing. Laws IX and XI are gone and Echo the Intent is now
+**Law IX**: a note, memory or commit that says "Law IX" or "Law XI" from before this release
+means the retired External Gate (now a rigor rule) or Absence Is a Claim (folded into Verify
+Before Asserting). Nothing in the harness cites a rule by number any more.
+
+### Changed
+- **Stable rule ids.** Every law and doctrine rule is declared by a permanent id on its heading
+  (`### {{LAW:verify-before-asserting}} Verify Before Asserting`) and cited by it. The number is
+  the rule's position, computed at render time, so removing or reordering a rule rewires no
+  citation. Theme title keys are keyed by id too (`LEX_VERIFY_BEFORE_ASSERTING`,
+  `DOC_CONSENT_BEFORE_PUSH`), so a renumber never touches a theme.
+- **Citations render as principle names.** Every cross-reference in AGENT.md, the laws, the
+  doctrines, skills and agents now reads *Verify Before Asserting* rather than "Rule III" — the
+  same in every voice. The hook and guard-plugin messages name the principle too. Numbers remain
+  only on each rule's own heading.
+- The memory section of AGENT.md (always on, both footprints) tells the agent to cite a rule by
+  its principle, never its number, in anything that outlives the session.
+- **Web console redesign (Slate + Graphite).** New Overview (health, three charts, what needs
+  you), Constitution, Library, Personal and Installs pages; global and per-project installs are
+  shown apart; skill types head the Library as a full-width banner (#162). The console's flavours
+  are cut to Cultivar, Operator, Matrix and Atlas (#161). The Overview view choice now lives only
+  in the Appearance palette, not in the page header.
+
+### Removed
+- Laws IX (External Gate, a rigor rule since 3.x) and XI (Absence Is a Claim, folded into Law III),
+  both retired in place until now. Their ids are recorded in `RETIRED_RULE_IDS` and can never be
+  reused.
+
+### Added
+- **`explain-changes` folder skill — a visual walkthrough of a diff before it is committed**:
+  the agent writes a short brief (intent, risks, logical units) and
+  `scripts/render_changes.mjs` renders one offline HTML page with the exact git diff side by
+  side, then opens it. Offered by the `commit` skill and the git-gate prompt; never a gate.
+- `doctor` refuses a citation by number, an unknown id, a duplicate id, a rule heading with no id,
+  a retired id declared again, a console `LAW_META`/`DOCTRINE_META` row pinned to a different rule
+  than its number now holds, and a hook-gated rule moving away from the address its hook keys.
 
 ## [3.8.0] — 2026-09-30
 

package/DESIGN.md

@@ -44,7 +44,7 @@ vault or a specific tool's hooks.
      and the prose words the docs use: the core nouns `LAW(S)`/`DOCTRINE(S)`/`ONTOLOGY`/
      `AGENT(S)`/`SKILL(S)`/`MEMORY`/`NOTEBOOK`/`VAULT`/`WIKI`, plus `TAGLINE`,
      `LOADED_SIGIL`, `EPI_*`, `BENEDICTION`, `DESC_*`, `ROAST_PERSONA`, the invariant
-     titles `LEX_I`..`LEX_XI`, the 28 doctrine-rule titles `DOC_<PACK>_<n>`, the five pack
+     titles `LEX_<ID>`, the 28 doctrine-rule titles `DOC_<ID>` (keyed by stable rule id), the five pack
      names `PACK_CRAFT`/`PACK_RIGOR`/`PACK_OPS`/`PACK_PROCESS`/`PACK_COMMS`, and the section intros
      `INTRO_*`. Each theme defines its own nouns; **neutral keeps the plain words** (Rule,
      Doctrine, Agent, Skill, Memory, Workspace), so neutral output is unchanged.
@@ -98,11 +98,13 @@ vault or a specific tool's hooks.
      and tier by reversibility; show the real forks), **Conduct** (answer what was asked,
      once). It absorbed the Pact, which is now stated *inside* Telos rather than standing
      as a peer of the rules.
-   - **Invariants** (`src/laws/universal.md`) — *what is never traded*. Eleven numbered
-     Rules, `I`..`XI`, nine in force — IX and XI are retired in place, their numbers kept so
-     existing citations resolve — headed `### {{LAW}} <roman> — {{LEX_<roman>}}`.
+   - **Invariants** (`src/laws/universal.md`) — *what is never traded*. Nine Rules, `I`..`IX`,
+     each declared `### {{LAW:<id>}} <Principle>` with a permanent id; the numeral is its
+     position, computed at render time (the retired IX and XI were removed on 2026-09-30, and
+     Echo the Intent became IX without a single citation changing).
    - **Doctrines** (`src/doctrines/{craft,rigor,ops,process,comms}.md`) — *how work is done
-     here*. Practice rules addressed by pack and number, cited as `Doctrine process 5`.
+     here*. Practice rules addressed by pack and position (`process 5`), declared and cited by
+     id the same way; a citation of any rule renders as its principle's name.
      `PACK_ORDER` (`js/build/source.mjs`) fixes the order craft → rigor → ops → process → comms, which
      is narrative and deliberately not alphabetical.
 
@@ -145,12 +147,12 @@ vault or a specific tool's hooks.
 
    | Satellite | A new invariant | A new doctrine rule | A whole new pack |
    |---|---|---|---|
-   | body | append to `src/laws/universal.md` — never insert; nothing resolves a cross-reference against the canon | append to `src/doctrines/<pack>.md`, `### {{DOCTRINE}} <pack> <n> — {{DOC_<PACK>_<n>}}`; ids must run contiguously from 1 | a new `src/doctrines/<pack>.md` with its `**Name** — lead line` |
-   | themed title | `LEX_<roman>` in all 15 theme files | `DOC_<PACK>_<n>` in all 15 theme files | `PACK_<NAME>` in all 15, plus each rule's `DOC_*` |
+   | body | `### {{LAW:<id>}} <Principle>` in `src/laws/universal.md`; citations resolve by id, so no position rewires one | `### {{DOCTRINE:<id>}} <Principle>` in `src/doctrines/<pack>.md`; the number is its position | a new `src/doctrines/<pack>.md` with its `**Name** — lead line` |
+   | themed title | `LEX_<ID>` in all 15 theme files | `DOC_<ID>` in all 15 theme files | `PACK_<NAME>` in all 15, plus each rule's `DOC_*` |
    | class | `LAW_CLASS` in `js/inspect/inventory.mjs`, one of the six in `LAW_CLASSES` | **none** — a doctrine rule's class *is* its pack, and there is no second taxonomy over it | — |
    | console copy | a `LAW_META` row in `web/src/pages/Laws.jsx` (keyed by arabic number) | a `DOCTRINE_META` row in the same file (keyed `<pack>.<n>`) | one `DOCTRINE_META` row per rule |
    | registration | the numeral is the registration | the number is the registration | the pack name in `PACK_ORDER`, `js/build/source.mjs` |
-   | renumber risk | high — appending is the only safe move | none — packs are numbered independently | none |
+   | renumber risk | none for citations (by id); `LAW_META`/`LAW_CLASS` are number-keyed and doctor-pinned, so append by preference | none for citations; `DOCTRINE_META`, exclusions and hook ledger keys are `<pack>.<n>` — append by preference | none |
    | counts | README badge + the `N universal laws` prose, `SHIPPED.md`'s triple, the web onboarding copy | **none** — the console spends the `N_PACKS` / `N_PACKS_ACTIVE` / `N_DOCTRINE_RULES` count tokens, all computed at request time | none, same reason |
    | changelog | `CHANGELOG.md` | `CHANGELOG.md` | `CHANGELOG.md` |
 
@@ -164,8 +166,9 @@ vault or a specific tool's hooks.
    Almost all of it is gated, across six named checks in `js/inspect/checks-build.mjs` —
    `themeParityProblems` (key parity across the voices), `lawMetaProblems` and
    `doctrineMetaProblems` (the console's Principle column, in both directions),
-   `constitutionProblems` (pack numbering and filing, `LEX_I..LEX_XI` as an *equality*, the
-   `DOC_*` vocabulary, and every `{{DOCTRINE}}` citation in `src/`), and
+   `constitutionProblems` (rule ids declared, unique and never retired, `LEX_*` as an *equality*,
+   the `DOC_*` vocabulary, the hook-gated addresses, and every `{{LAW:…}}`/`{{DOCTRINE:…}}`
+   citation in `src/` — a citation by number is refused), and
    `countTableProblems` / `proseMirrorProblems` (badges and prose). So `geneseed doctor
    --all` is the check; the table above only says what it will ask for. `CHANGELOG.md` has
    no gate and never has.

package/QUICKSTART.md

@@ -43,7 +43,7 @@ or a login item it did not create. Your clone keeps working meanwhile.
 
 ## Everything else
 
-Claude Code, Bob, Copilot, OpenClaude and plain-`AGENT.md` installs, per-repo mode, MCP servers, all
+Claude Code, Bob, OpenClaude and plain-`AGENT.md` installs, per-repo mode, MCP servers, all
 environment knobs, and troubleshooting live in the full **[Setup guide](SETUP.md)**.
 
 Once installed, point the agent at your repo's own docs with a tiny

package/README.md

@@ -10,11 +10,11 @@
 [![Node >= 22.3](https://img.shields.io/badge/node-%3E%3D22.3-5fa04e)](package.json)
 [![zero dependencies](https://img.shields.io/badge/deps-zero-success)](package.json)
 [![Themes](https://img.shields.io/badge/themes-14-9cf)](themes/)
-[![Skills](https://img.shields.io/badge/skills-52-blueviolet)](src/skills/)
+[![Skills](https://img.shields.io/badge/skills-53-blueviolet)](src/skills/)
 [![Agents](https://img.shields.io/badge/agents-18-orange)](src/agents/)
-[![Laws](https://img.shields.io/badge/laws-11-critical)](src/laws/universal.md)
+[![Laws](https://img.shields.io/badge/laws-9-critical)](src/laws/universal.md)
 [![Plugins](https://img.shields.io/badge/plugins-7-teal)](adapters/opencode/plugins/)
-[![OpenCode · Claude Code · Bob · Copilot · OpenClaude · AGENT.md](https://img.shields.io/badge/works%20with-OpenCode%20·%20Claude%20Code%20·%20Bob%20·%20Copilot%20·%20OpenClaude%20·%20AGENT.md-1f6feb)](#-supported-harnesses)
+[![OpenCode · Claude Code · Bob · OpenClaude · AGENT.md](https://img.shields.io/badge/works%20with-OpenCode%20·%20Claude%20Code%20·%20Bob%20·%20OpenClaude%20·%20AGENT.md-1f6feb)](#-supported-harnesses)
 
 [**Why**](#-1--why-geneseed) · [**Setup**](#-2--setup) · [**Web & terminal**](#-3--web--terminal) · [**What you get**](#-4--what-you-get)
 
@@ -24,7 +24,7 @@
 
 <p align="center"><img src="docs/assets/demo.svg" alt="geneseed setup, then two laws catching a force-push and a credential at the tool boundary" width="760"></p>
 
-**Geneseed compiles your agent's rules instead of asking you to write them.** One source in `src/` renders into a ready-made harness for OpenCode, Claude Code, Bob, Copilot, OpenClaude, or any `AGENT.md` tool: a constitution of laws and doctrines, a roster of capability agents, native skills, a memory convention — and, wherever the host has a hook surface, gates that *enforce* the laws at the tool boundary instead of hoping the model remembers them.
+**Geneseed compiles your agent's rules instead of asking you to write them.** One source in `src/` renders into a ready-made harness for OpenCode, Claude Code, Bob, OpenClaude, or any `AGENT.md` tool: a constitution of laws and doctrines, a roster of capability agents, native skills, a memory convention — and, wherever the host has a hook surface, gates that *enforce* the laws at the tool boundary instead of hoping the model remembers them.
 
 ```bash
 npx geneseed setup
@@ -36,8 +36,8 @@ Want to read what it leaves behind before installing anything? [**geneseed-demo*
 
 A hand-written instructions file is prose the model may or may not honour, copied into every repo and drifting in each one. Geneseed is a build, and that changes four things:
 
-- **Laws are enforced, not suggested.** A force-push, a `reset --hard`, or a credential written into a tracked file is caught by a hook *before* the tool runs, in the host's own dialect — a prompt on Claude Code, Copilot and OpenClaude, a hard block on OpenCode, exit 2 on Bob. The gates fail closed, and every catch is one line in a ledger that `geneseed status` counts.
-- **One source, six targets.** Skills are byte-identical on every host; only the wiring differs. Every commit renders all 317 emit configurations, and a second emit into the same tree must change nothing.
+- **Laws are enforced, not suggested.** A force-push, a `reset --hard`, or a credential written into a tracked file is caught by a hook *before* the tool runs, in the host's own dialect — a prompt on Claude Code and OpenClaude, a hard block on OpenCode, exit 2 on Bob. The gates fail closed, and every catch is one line in a ledger that `geneseed status` counts.
+- **One source, five targets.** Skills are byte-identical on every host; only the wiring differs. Every commit renders all 261 emit configurations, and a second emit into the same tree must change nothing.
 - **Costs are measured, not guessed.** Zero runtime dependencies. The hook path loads in about 14 ms per tool call. The default *lean* footprint keeps the always-on context small and puts the full rationale one read away — the numbers are in [docs/token-footprint.md](docs/token-footprint.md).
 - **It follows you.** Install once, globally; every repo inherits it. One `git pull` or `npm install -g geneseed@latest` rebuilds every active install.
 
@@ -163,10 +163,10 @@ The harness ships as a small set of layers, and the web console's rail is the sa
 | Layer | What it is |
 | --- | --- |
 | **🧭 Ethos** (`ontology/`) | the mind the rules govern, in four prose sections — **Telos** (the Pact: three ranked laws — protect the user, serve their intent, keep your own honesty), **Evidence** (every claim graded by how it was obtained), **Decisions** (classify and tier by reversibility, show the real forks), **Conduct** (answer what was asked, once). Always in force, never toggleable |
-| **🛡️ Rules** (`laws/`) | 11 universal laws, nine of them in force — always, never toggleable: sealed-secrets, one-intent-one-act, verify-before-assert, deletion-is-deliberate, surface-failures, data-not-orders, least-privilege, root-cause, echo-the-intent. Laws IX and XI are retired, their numbers kept so old references resolve |
+| **🛡️ Rules** (`laws/`) | 9 universal laws — always in force, never toggleable: sealed-secrets, one-intent-one-act, verify-before-asserting, deletion-is-deliberate, surface-failures, data-not-orders, least-privilege, cure-the-cause, echo-the-intent. Each rule has a permanent id; its number is only its position, and the harness cites rules by name |
 | **📐 Doctrines** (`doctrines/`) | practice packs, chosen per install at build time: **craft** (how code is written), **rigor** (how work is proven), **ops** (how the machine is operated), **process** (how a task is run), **comms** (how answers are presented). A doctrine rule may tighten a Rule, never repeal one, and the user's own `user-rules.md` outranks it. Pick with `geneseed-build --doctrines craft,rigor` (or `none`), a single rule with `--exclude-rules "process 7"`, in the setup wizard, or through the switches on the console's Constitution page; all five pack files ship on disk either way, so a citation into a pack you left out still resolves |
 | **🤖 Agents** (18) | capability specialists: `reviewer`, `tester`, `architect`, `docs`, `security`, `explorer`, `researcher`, `developer` — plus a debate **council** the `council` skill convenes: `advocate`, `skeptic`, `pragmatist`, `steward`, `visionary`, `user-advocate`, `framer`, `empiricist`, `operator`, `historian` |
-| **🛠 Skills** (52) | repeatable workflows: brainstorm · plan · **codebase-design** · **domain-modeling** · **wayfinder** · **tickets** · **develop** · **worktree** · debug · **prototype** · refactor · **ponytail** · **forge-mcp** · **bruno-collection-generator** · **bruno-test-writer** · geneseed-code-review · **fresh-eyes** · **security-audit** · **ci-fix** · **deps-audit** · **review-response** · commit · **ship** · **release** · **migrate** · **git-archaeology** · **git-rescue** · repo-map · document-project · **frontend-design** · **prose** · **ingest** · **research** · **teach** · **quiz** · handoff · roast-me · **council** · parallel-agents · **workflow** · **wiki** · **geneseed** · **rule** · **profile** · **consolidate-memory** · **skill-forge** · **opencode-theme** · **herdr** · **pipeline** · **daydream** · **react-view-transitions** · **token-report** |
+| **🛠 Skills** (53) | repeatable workflows: brainstorm · plan · **codebase-design** · **domain-modeling** · **wayfinder** · **tickets** · **develop** · **worktree** · debug · **prototype** · refactor · **ponytail** · **forge-mcp** · **bruno-collection-generator** · **bruno-test-writer** · geneseed-code-review · **fresh-eyes** · **security-audit** · **ci-fix** · **deps-audit** · **review-response** · commit · **ship** · **release** · **migrate** · **git-archaeology** · **git-rescue** · repo-map · document-project · **frontend-design** · **prose** · **ingest** · **research** · **teach** · **quiz** · handoff · roast-me · **council** · parallel-agents · **workflow** · **wiki** · **geneseed** · **rule** · **profile** · **consolidate-memory** · **skill-forge** · **opencode-theme** · **herdr** · **pipeline** · **daydream** · **react-view-transitions** · **token-report** · **explain-changes** |
 | **🔌 Plugins** (OpenCode) | `geneseed-context` injects project docs *and your machine wiki* every session (and across compaction); `geneseed-learn` distils memory at session end; `geneseed-guard` enforces the safety Laws and protected wiki folders at the tool boundary; `geneseed-workflow` registers the `workflow` tool that runs saved orchestration scripts; `geneseed-notify` sends a native OS notification when a long run finishes; `geneseed-ponytail` holds a minimal-code mode (`/ponytail lite\|full\|ultra\|off`), opt-in, injecting the laziest-that-works ruleset every turn so it doesn't drift; `geneseed-activity` streams what each session is doing to the web console's Activity view |
 | **🧠 Memory** (`memory/`) | one-fact-per-file durable knowledge, indexed by `MEMORY.md` (git-ignored, personal) |
 | **📓 Notebook** (`notebook/`) | the agent's sovereign space — any medium (code, tools, data, notes), self-ruled via a seed-once charter, always git-ignored; only its `.gitignore` is build-asserted |
@@ -212,7 +212,7 @@ A second per-install dial, **footprint**, sets how much of the constitution `AGE
 
 Both footprints put the full text on disk beside `AGENT.md`: `laws/`, `ontology/` and `doctrines/` all ship in the bundle at **full** text whatever the footprint, and **all five pack files ship whether or not the pack was built in** — which is what lets a citation into an inactive pack resolve. So lean is a context/token optimization, **not** a rules cut.
 
-Lean is the default: the rationale is one read away and the context it frees is paid back on every turn. Switch to **full** when token cost is a non-issue or you run a smaller model, which leans harder on always-present rationale. Set it with `--footprint lean|full`, the Settings toggle, the per-harness dropdown in the Harnesses tab, or the setup wizard. It's remembered in a `.geneseed-footprint` marker and preserved across rebuilds, on every host (OpenCode, Claude Code, Bob, Copilot).
+Lean is the default: the rationale is one read away and the context it frees is paid back on every turn. Switch to **full** when token cost is a non-issue or you run a smaller model, which leans harder on always-present rationale. Set it with `--footprint lean|full`, the Settings toggle, the per-harness dropdown in the Harnesses tab, or the setup wizard. It's remembered in a `.geneseed-footprint` marker and preserved across rebuilds, on every host (OpenCode, Claude Code, Bob, OpenClaude).
 
 Either way the harness is otherwise identical — same files, Rules, capabilities, and guards; lean only relocates the *reasoning* to on-demand (and adds the standalone law, ontology and doctrine files to global/Claude/Bob installs). The one behavioural edge: with the rationale always in context, **full** applies a rule's nuance more reliably on subtle edge cases — or with a weaker model that may not reach for the pointer.
 
@@ -222,37 +222,37 @@ Want to check a build before it touches anything real? `geneseed validate --them
 
 ## 🔌 Supported harnesses
 
-One source, six emit targets. Geneseed builds into whichever host you point it
+One source, five emit targets. Geneseed builds into whichever host you point it
 at — each with a per-repo and a global (`-global`) variant — plus a portable
 `files` bundle any `AGENT.md`-aware tool can read. **OpenCode** runs its own
-engine (JS plugins, colour themes, LSP); **Claude Code**, **Bob**, **Copilot**
+engine (JS plugins, colour themes, LSP); **Claude Code**, **Bob**
 and **OpenClaude** share one Claude-shaped engine that diverges only by host dialect.
 
 The harness — its Rules, Agents, Skills, Memory convention, and preamble voice —
 is **identical on every host**. What differs is how much of it the host can
 *automate* for you (via plugins or hooks) versus carry as preamble discipline.
 
-| Capability | OpenCode | Claude Code | Bob | Copilot | OpenClaude |
-| --- | :---: | :---: | :---: | :---: | :---: |
-| **Instructions file** | `AGENT.md` + `opencode.json` | `CLAUDE.md` | `AGENTS.md` + `rules/geneseed.md` | `AGENTS.md` / `copilot-instructions.md` | `CLAUDE.md` (in `.openclaude/` per repo) |
-| **Agents** (capability specialists) | ✅ native | ✅ | ✅ | ✅ `.agent.md` | ✅ |
-| **Skills** (byte-identical) | ✅ | ✅ | ✅ | ✅ | ✅ |
-| **Memory & Notebook** | ✅ | ✅ | ✅ | ✅ | ✅ |
-| **Context injection** | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 🪝 hook³ | 🪝 hook⁴ |
-| **Memory write-back** (learn) | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 🪝 hook³ | 🪝 hook⁴ |
-| **Git-gate consent** (process 5) | ⚙️ plugin | 🪝 hook | 🪝 hook¹ (warn) | 🪝 hook³ | 🪝 hook⁴ |
-| **Rule-gate consent** (process 1) | ⚙️ plugin² | 🪝 hook | 🪝 hook¹ (warn) | 🪝 hook³ | 🪝 hook⁴ |
-| **Laws I / IV at the boundary** | ⚙️ plugin (block) | 🪝 hook (ask) | 🪝 hook¹ (exit 2) | 🪝 hook³ (ask) | 🪝 hook⁴ (ask) |
-| **Sovereign-repo excludes** | ⚙️ plugin | ✅ `claudeMdExcludes` | ✅ rules-shadow | ➖ none | ✅ `claudeMdExcludes` |
-| **MCP server wiring** | ✅ `mcp` | ✅ `mcpServers` | ✅ `mcp.json` | ✅ `mcp-config.json` | ✅ `mcpServers` |
-| **Colour themes** | ✅ full palette | ➖ | ➖ | ➖ | ➖ |
-| **LSP · workflow runner · primary-agent · `/`-commands** | ✅ | ➖ | ➖ | ➖ | ➖ |
-
-<sub>✅ native support · ⚙️ OpenCode plugin · 🪝 `settings.json` hook · 📄 carried by preamble prose only · ➖ no host mechanism (harness discipline still applies) · ¹ Bob's own hook contract: global hooks in `~/.bob/settings/settings.json`, Claude's event names but stdout ignored on `PreToolUse` — a refusal is **exit code 2**. So Laws I/IV exit 2, the consent rules are a stderr line, `SessionStart` context is plain stdout, `Stop` runs learn; `SubagentStop`/`PreCompact` are not Bob events and are not written. Unverified live (no Bob install on the authoring machine); the harness still holds via the rules preamble. · ² OpenCode's `tool.execute.before` can only allow or throw, with no "ask the user" tier, so the rule gate is a one-shot speed bump there rather than a prompt. · ³ Copilot's `~/.copilot/settings.json` hooks (`sessionStart`, `preToolUse`, `agentStop`, `preCompact`) wired by the **global** emit only; `preToolUse` has an ask tier, so every rule asks as on Claude Code. Unverified live (no Copilot CLI on the authoring machine). · ⁴ OpenClaude is a Claude Code fork: Claude's hook groups and verdicts verbatim, in `~/.openclaude/settings.json` (global) or `.openclaude/settings.local.json` (per repo). Unverified live (no OpenClaude install on the authoring machine).</sub>
+| Capability | OpenCode | Claude Code | Bob | OpenClaude |
+| --- | :---: | :---: | :---: | :---: |
+| **Instructions file** | `AGENT.md` + `opencode.json` | `CLAUDE.md` | `AGENTS.md` + `rules/geneseed.md` | `CLAUDE.md` (in `.openclaude/` per repo) |
+| **Agents** (capability specialists) | ✅ native | ✅ | ✅ | ✅ |
+| **Skills** (byte-identical) | ✅ | ✅ | ✅ | ✅ |
+| **Memory & Notebook** | ✅ | ✅ | ✅ | ✅ |
+| **Context injection** | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 🪝 hook³ |
+| **Memory write-back** (learn) | ⚙️ plugin | 🪝 hook | 🪝 hook¹ | 🪝 hook³ |
+| **Git-gate consent** (process 5) | ⚙️ plugin | 🪝 hook | 🪝 hook¹ (warn) | 🪝 hook³ |
+| **Rule-gate consent** (process 1) | ⚙️ plugin² | 🪝 hook | 🪝 hook¹ (warn) | 🪝 hook³ |
+| **Laws I / IV at the boundary** | ⚙️ plugin (block) | 🪝 hook (ask) | 🪝 hook¹ (exit 2) | 🪝 hook³ (ask) |
+| **Sovereign-repo excludes** | ⚙️ plugin | ✅ `claudeMdExcludes` | ✅ rules-shadow | ✅ `claudeMdExcludes` |
+| **MCP server wiring** | ✅ `mcp` | ✅ `mcpServers` | ✅ `mcp.json` | ✅ `mcpServers` |
+| **Colour themes** | ✅ full palette | ➖ | ➖ | ➖ |
+| **LSP · workflow runner · primary-agent · `/`-commands** | ✅ | ➖ | ➖ | ➖ |
+
+<sub>✅ native support · ⚙️ OpenCode plugin · 🪝 `settings.json` hook · 📄 carried by preamble prose only · ➖ no host mechanism (harness discipline still applies) · ¹ Bob's own hook contract: global hooks in `~/.bob/settings/settings.json`, Claude's event names but stdout ignored on `PreToolUse` — a refusal is **exit code 2**. So Laws I/IV exit 2, the consent rules are a stderr line, `SessionStart` context is plain stdout, `Stop` runs learn; `SubagentStop`/`PreCompact` are not Bob events and are not written. Unverified live (no Bob install on the authoring machine); the harness still holds via the rules preamble. · ² OpenCode's `tool.execute.before` can only allow or throw, with no "ask the user" tier, so the rule gate is a one-shot speed bump there rather than a prompt. · ³ OpenClaude is a Claude Code fork: Claude's hook groups and verdicts verbatim, in `~/.openclaude/settings.json` (global) or `.openclaude/settings.local.json` (per repo). Unverified live (no OpenClaude install on the authoring machine).</sub>
 
 **Reading the matrix.** Everything above the divider is at full parity — no host
 drops an Agent, Skill, or the memory convention. The asymmetry is entirely in
-*automation mechanism*: OpenCode's plugin surface and the Claude/Bob/Copilot/OpenClaude hook
+*automation mechanism*: OpenCode's plugin surface and the Claude/Bob/OpenClaude hook
 surfaces enforce a few Rules for you, each in the tier its host offers (a prompt on
 Claude Code, a hard block or a logged warning where the host has no prompt to
 give), and what no host can automate rides the preamble. The OpenCode-only extras (themes, LSP,
@@ -260,7 +260,7 @@ workflow runner, primary-agent) have no analogue on a Claude-shaped host.
 
 Per-host wiring in depth: **[OpenCode](adapters/opencode/README.md)** ·
 **[Claude Code](adapters/claude-code/README.md)** ·
-**[Bob](adapters/bob/README.md)** · **[Copilot](adapters/copilot/README.md)** ·
+**[Bob](adapters/bob/README.md)** ·
 **[OpenClaude](adapters/openclaude/README.md)**.
 Token cost per host: **[docs/token-footprint.md](docs/token-footprint.md)**.
 
@@ -294,7 +294,7 @@ Geneseed/
 ├── tests/                Node test suites, golden.mjs (every emit config) and mutate.mjs
 ├── docs/                 guides (web-ui, wiki, …) + docs/web/ (the console's Docs pages);
 │                         specs/, reviews/, superpowers/ are local working docs — git-ignored
-├── adapters/             per-host glue (opencode/, claude-code/, bob/, copilot/, openclaude/)
+├── adapters/             per-host glue (opencode/, claude-code/, bob/, openclaude/)
 └── .github/workflows/    ci.yml (doctor + tests) · publish.yml (npm, OIDC, manual only)
 ```
 
@@ -345,7 +345,6 @@ Details and precedence rules: [SETUP.md → Upgrade](SETUP.md#upgrade).
 | ⤷ [HOW-OPENCODE-LOADS.md](adapters/opencode/HOW-OPENCODE-LOADS.md) | Why a file shows up twice; plugin loading |
 | **[adapters/claude-code/](adapters/claude-code/README.md)** | The Claude Code hook adapter |
 | **[adapters/bob/](adapters/bob/README.md)** | The IBM Bob adapter — Claude-shaped, rules-file preamble |
-| **[adapters/copilot/](adapters/copilot/README.md)** | The GitHub Copilot adapter — global hooks (`sessionStart`, `preToolUse`, `agentStop`, `preCompact`) |
 | **[adapters/openclaude/](adapters/openclaude/README.md)** | The OpenClaude adapter — the Claude engine under `~/.openclaude` / `.openclaude/` |
 | **[src/memory/README.md](src/memory/README.md)** | The memory convention |
 | **[src/notebook/README.md](src/notebook/README.md)** | The agent's own freeform-space convention |

package/SETUP.md

@@ -22,7 +22,7 @@ that matches your tool, then configure and verify. For the conceptual overview s
 
 - **Node ≥ 22.3** — the only hard requirement. Geneseed ships as an npm package with
   **zero dependencies**; `npx geneseed` needs nothing else.
-- **Your agent tool** — OpenCode (recommended), Claude Code, Bob, Copilot, OpenClaude, or anything
+- **Your agent tool** — OpenCode (recommended), Claude Code, Bob, OpenClaude, or anything
   that reads a root instructions file.
 - *Only for a git checkout:* **git**. Nothing else — a checkout runs the same Node
   entry points the npm package installs.
@@ -93,8 +93,7 @@ hand? Pick a path below.
 | [A — OpenCode, global](#path-a--opencode-global-recommended) | **Recommended.** One install, every repo inherits it, nothing committed into projects. |
 | [B — OpenCode, per-repo](#path-b--opencode-per-repo) | You want a committed `.opencode/` layer in one repository. |
 | [C — Claude Code](#path-c--claude-code) | You drive Claude Code and want the lifecycle hooks. |
-| [C′ — GitHub Copilot](#path-c--github-copilot) | You drive the Copilot CLI, coding agent, or VS Code agent mode. |
-| [C″ — OpenClaude](#path-c--openclaude) | You drive OpenClaude, the any-model Claude Code fork. |
+| [C′ — OpenClaude](#path-c--openclaude) | You drive OpenClaude, the any-model Claude Code fork. |
 | [D — Any `AGENT.md` tool](#path-d--any-agentmd-tool) | Cursor, Aider, or any tool that reads a root instructions file. |
 | [E — No runtime on the target at all](#path-e--no-runtime-on-the-target-at-all) | The machine that *uses* the harness cannot run Node. |
 
@@ -219,45 +218,11 @@ repo's own `.claude/settings.local.json`, and OpenClaude's in `.openclaude/setti
 Bob: the workspace rules shadow stub;
 OpenCode: the plugins stand down). Everything is reversed by `exclude remove`.
 
-Limitations: GitHub Copilot has no per-repo suppression mechanism, so the global
-`copilot-instructions.md` still loads there; and globally installed skills/
-subagents remain listed by the host (no native per-repo disable exists). A
-global install emitted later starts with an empty list — re-run
+Limitation: globally installed skills/subagents remain listed by the host (no
+native per-repo disable exists). A global install emitted later starts with an empty list — re-run
 `harness exclude add` (`exclude list` flags installs that diverge).
 
-### Path C′ — GitHub Copilot
-
-```
-geneseed-build --emit copilot-global           # personal: render into ~/.copilot
-geneseed-build --emit copilot --out . --root .  # per-repo: AGENTS.md + .github/, committed
-```
-
-Copilot is Claude-shaped where it counts: skills are the same `SKILL.md` folders
-(Copilot's Agent Skills — `.github/skills/` in a repo, `~/.copilot/skills/`
-personally), agents render in Copilot's own custom-agent dialect
-(`agents/<name>.agent.md`, a `tools:` allowlist instead of Claude's denylist), and
-the preamble rides a file Copilot auto-loads: the repo-root `AGENTS.md` (CLI, coding
-agent, and VS Code agent mode) or the personal `~/.copilot/copilot-instructions.md`
-(CLI). Two differences from the Claude paths:
-
-- **Hooks at global scope only.** The global emit adds entries to four events in
-  `~/.copilot/settings.json`: `sessionStart` (eager project-context injection),
-  `preToolUse` (both gates behind one command, since entries carry no matcher —
-  every rule **asks**, as on Claude Code), and `agentStop` + `preCompact` (`learn`,
-  from the payload's `transcriptPath`). The per-repo emit wires nothing: a
-  machine-absolute command in a shared `.github/` would fail on every teammate's
-  machine.
-- **The per-repo layer lives in the shared `.github/`** (Copilot's repo config
-  surface). Safe by construction: the ownership manifest + claim-on-create never
-  touch files Geneseed didn't write — your workflows and same-named agents/skills
-  survive every emit and uninstall.
-
-MCP servers go in `~/.copilot/mcp-config.json` (the Settings/MCP screens know the
-shape). `$COPILOT_CONFIG_DIR` relocates the personal dir, mirroring
-`$BOB_CONFIG_DIR`. Note both carriers stack if you install globally *and* per-repo —
-the global emit warns when that's about to happen.
-
-### Path C″ — OpenClaude
+### Path C′ — OpenClaude
 
 ```
 geneseed-build --emit openclaude-global           # render into ~/.openclaude
@@ -453,7 +418,7 @@ you run a smaller model.
 **Same harness, either way.** Footprint changes neither what the harness *is* nor what it
 can *do*: lean and full emit identical files (same agents, skills, plugins, commands, memory,
 notebook, hooks) and every Rule is present and binding. The only structural difference is
-that a lean install on a global / Claude / Bob / Copilot / OpenClaude target also ships the standalone
+that a lean install on a global / Claude / Bob / OpenClaude target also ships the standalone
 `laws/universal.md` and `ontology/` (project bundles already carry them, and `doctrines/`
 ships at both footprints on every target); the only behavioural difference is that the
 reasoning loads on demand instead of every turn. Lean is the default; full, with the rationale
@@ -463,7 +428,7 @@ with a weaker model, and is one flag away.
 Set it with `--footprint lean|full` (alongside any `--emit`), the **Footprint** toggle in
 the web Settings, the per-harness dropdown in the Harnesses tab, or the setup wizard. It is
 remembered in a `.geneseed-footprint` marker and preserved across every rebuild, on every
-host (OpenCode, Claude Code, Bob, Copilot, OpenClaude).
+host (OpenCode, Claude Code, Bob, OpenClaude).
 
 ### Dry-run a build (`validate`)
 

package/SHIPPED.md

@@ -20,7 +20,7 @@ historical references, not files distributed with the repo.
 > **On version numbers.** [`harness.config.json`](harness.config.json)'s `version` is a
 > human-readable label only. The canonical identity of an installed harness is the
 > **source fingerprint** stamped in `.geneseed-version` (see `geneseed version`), not the
-> string. Current label: **3.8.0**.
+> string. Current label: **3.10.0**.
 
 ## Capabilities
 
@@ -29,15 +29,15 @@ Every row below is present in the tree today; "Spec" names the design record.
 | Capability | What it is | Spec |
 | --- | --- | --- |
 | **Themed generator** | One neutral `src/` → 14 themed bundles via `geneseed-build` (zero dependencies); structure stays theme-independent | [DESIGN.md](DESIGN.md) |
-| **Laws / Agents / Skills / Memory / Notebook** | 11 laws, 18 agents, 52 skills, the memory convention, and the agent's sovereign notebook | `2026-06-11-notebook-sovereign-space` · `2026-06-10-notebook-agent-own-space` |
-| **Three-tier constitution** | The governance surface splits into an always-on **Ontology** (Telos, Evidence, Decisions, Conduct — the Pact absorbed into Telos), the eleven always-on **Invariants** (IX and XI retired in place — folded into rigor 5 and Law III, numbers kept), and five toggleable **Doctrine** packs (craft, rigor, ops, process, comms) addressed `<pack> <n>`. Packs are chosen at build time with `--doctrines` or the setup wizard; the whole catalogue ships on disk either way, so a citation into an inactive pack still resolves. Precedence, in order: Ontology + Invariants, then the user's `user-rules.md`, then the active Doctrines, then `PROFILE.md`. `doctor`'s `constitutionProblems` gates pack numbering, the per-rule Principle column, every `{{DOCTRINE}}` citation in `src/`, and the rule that an always-on tier may never cite a toggleable one | `2026-08-19-three-tier-constitution-design` |
+| **Laws / Agents / Skills / Memory / Notebook** | 9 laws, 18 agents, 53 skills, the memory convention, and the agent's sovereign notebook | `2026-06-11-notebook-sovereign-space` · `2026-06-10-notebook-agent-own-space` |
+| **Three-tier constitution** | The governance surface splits into an always-on **Ontology** (Telos, Evidence, Decisions, Conduct — the Pact absorbed into Telos), the nine always-on **Invariants**, and five toggleable **Doctrine** packs (craft, rigor, ops, process, comms) addressed `<pack> <n>`. Every rule carries a permanent id; its number is its position, computed at render time, and a citation renders as the rule's principle name. Packs are chosen at build time with `--doctrines` or the setup wizard; the whole catalogue ships on disk either way, so a citation into an inactive pack still resolves. Precedence, in order: Ontology + Invariants, then the user's `user-rules.md`, then the active Doctrines, then `PROFILE.md`. `doctor`'s `constitutionProblems` gates rule ids (declared, unique, never a retired one), the per-rule Principle column, every `{{LAW:<id>}}` / `{{DOCTRINE:<id>}}` citation in `src/`, and the rule that an always-on tier may never cite a toggleable one | `2026-08-19-three-tier-constitution-design` |
 | **`doctor`** | One check: unresolved tokens, dead/non-hermetic links, theme-key parity, authoring gates, rendered-bundle drift | `2026-06-07-theme-aware-doctor-diff` |
 | **`diff` + improvements export** | Deployed-vs-source drift report; export an `improvements.md` back-port | `2026-06-12-improvements-export` |
 | **`status` / `version`** | Headless dashboard + fingerprint verdict (no TUI needed) | `2026-06-07-status-command` · `2026-06-07-version-and-uninstall` |
 | **Terminal rendering** | There is no full-screen control panel: `tui` and `menu` are verbs that say so and print the command list. The display-width and glyph layer ships on, behind `status` and the install animation | `2026-06-07-tui-refactor-polish` · `2026-06-08-tui-modern-refresh` · `2026-06-11-windows-tui` |
 | **Web console** | Local browser UI (Dashboard; Codex: Constitution, Rules, Profile, Skills, Agents, Library, Docs; Care: Activity, Changes, Doctor; Setup: Harness, Settings), auto-build, in-app docs menu | `2026-06-12-web-ui-v2` · `2026-06-12-web-auto-build` · `2026-06-13-docs-menu` |
 | **OpenCode adapter** | Native agents/skills mapping + plugins (context, learn, guard, workflow, notify, ponytail, activity); global-emit link integrity; JSONC config target | `2026-06-07-opencode-adapter-features` · `2026-06-07-global-emit-link-integrity` · `2026-06-12-opencode-jsonc-target` · `2026-06-16-ponytail-minimal-code-mode` |
-| **Host hooks, per dialect** | Every host gets the hook surface its runtime offers, spoken in that runtime's own verdict dialect via `--host`: Claude Code asks (`permissionDecision`), OpenClaude asks exactly as Claude does (a Claude Code fork, under `~/.openclaude` / `.openclaude/`), Copilot asks as Claude does (`sessionStart`, `preToolUse`, `agentStop`, `preCompact` in `~/.copilot/settings.json`, global scope only), Bob refuses by exit code 2 (five Claude-named events, nested `~/.bob/settings/settings.json`, no subagent event), OpenCode's guard throws. Laws I/IV are the hard tier everywhere; the consent rules ask where a host can ask and warn where it cannot. `tool-gate` fuses the two gates for hosts that run one command per event; `PreCompact` runs `learn` before Claude compacts; every block or ask lands in `notebook/gates.jsonl` on every host | [copilot](adapters/copilot/README.md) · [bob](adapters/bob/README.md) · [claude-code](adapters/claude-code/README.md) · [candidate hosts](docs/candidate-hosts.md) |
+| **Host hooks, per dialect** | Every host gets the hook surface its runtime offers, spoken in that runtime's own verdict dialect via `--host`: Claude Code asks (`permissionDecision`), OpenClaude asks exactly as Claude does (a Claude Code fork, under `~/.openclaude` / `.openclaude/`), Bob refuses by exit code 2 (five Claude-named events, nested `~/.bob/settings/settings.json`, no subagent event), OpenCode's guard throws. Laws I/IV are the hard tier everywhere; the consent rules ask where a host can ask and warn where it cannot. `tool-gate` fuses the two gates for hosts that run one command per event; `PreCompact` runs `learn` before Claude compacts; every block or ask lands in `notebook/gates.jsonl` on every host | [bob](adapters/bob/README.md) · [claude-code](adapters/claude-code/README.md) · [candidate hosts](docs/candidate-hosts.md) |
 | **Workflow primitive** | Saved, code-driven subagent orchestration (`workflow` tool + runtime); shipped scripts include `dispatch` — decompose a goal, route each subtask to its owning agent, converge | `2026-06-09-opencode-workflow-primitive` |
 | **Per-agent memory** | Each capability agent keeps durable lessons in `memory/agents/<name>.md`: read at dispatch, written back mechanically by `learn` on session/subagent end (OpenCode plugin + Claude `SubagentStop`; Bob has no subagent event); `learn --consolidate` rebuilds the index | `2026-07-04-orchestration-memory-upgrade` |
 | **Wiki integration** | Machine-wide knowledge base (`wiki.jsonc`): eager/lazy loading, conventions, protected folders enforced at the tool boundary | `2026-06-11-wiki-knowledge-base` |

package/adapters/bob/README.md

@@ -23,7 +23,8 @@ limitation to be aware of on a shared repo.
   - `agents/<name>.md` — the **Claude subagent dialect** verbatim (`name` +
     `description` + a `disallowedTools:` denylist for read-only agents).
   - `skills/<name>/SKILL.md` — **byte-identical** to every other host; skills
-    are model-invoked via the `skill` tool.
+    are model-invoked via the `skill` tool. The one exception is the folder skills'
+    own directory — see *Bob-ism 3*.
   - `rules/geneseed.md` — a **slim shadow stub** (see *Bob-ism 1* below).
   - `settings.json` — Geneseed's lifecycle hooks (gitignored by the emit's
     `.bob/.gitignore`, see the caveat below).
@@ -64,6 +65,21 @@ never gets one; the `rules/geneseed.md` shadow above covers the same
 project-bypasses-global need. An older Bob install that wrote a stale exclude is
 **self-healed** (the entry is removed) on the next emit.
 
+## Bob-ism 3 — a folder skill is told where it lives
+
+A folder skill (`explain-changes`, `token-report`, `daydream`, …) ships scripts or
+prompts beside its `SKILL.md` and names them `<this-skill-directory>/…`. Claude Code
+answers that placeholder itself — it gives the model each skill's base directory on load.
+Bob gives the skill's text only, so the model was left with a path it could not resolve
+and fell back to searching the filesystem. The Bob emit therefore writes the directory in:
+
+- per repo, relative to the workspace root — `node .bob/skills/token-report/scripts/…` —
+  which is where Bob runs commands, and stays valid in a teammate's checkout;
+- globally, the absolute path under `~/.bob/skills/`.
+
+`doctor` also requires every folder skill's `SKILL.md` to open with a frontmatter whose
+`name` is the folder's and which has a `description` — what any host registers a skill from.
+
 ## Hooks — Bob's own protocol
 
 Bob documents lifecycle hooks (its hooks page and the 2.0.2 changelog; see

package/adapters/openclaude/README.md

@@ -58,7 +58,7 @@ which root file OpenClaude already loads (`AGENTS.md` when present, else
 ## Not supported
 
 - **Workflows.** OpenClaude ships its `WorkflowTool` disabled, so the `workflow`
-  skill falls back to parallel agents, as on Bob and Copilot.
+  skill falls back to parallel agents, as on Bob.
 - **Live verification.** The emit follows OpenClaude's source (`src/utils/envUtils.ts`,
   `src/utils/claudemd.ts`, `src/utils/config.ts`, `src/types/hooks.ts`) as of
   2026-09. It has not been run against an installed OpenClaude yet.

package/adapters/opencode/GLOBAL-HARNESS-SPEC.md

@@ -276,7 +276,7 @@ It is not one now: the invariants are a closed set of nine, and project-context
 discovery is one of the two old laws absorbed into AGENT.md's own **§9 Context**
 section, which every build carries as prose. Nothing an adapter spec writes is
 added to the invariants. The text below survives as the *instruction* tier behind
-the *injection* tier, and `{{DOCTRINE}} process 4` (Read the Docs First) is its
+the *injection* tier, and `{{DOCTRINE:read-the-docs-first}}` (Read the Docs First) is its
 nearest live citation:
 
 > **Rule (Project Context Discovery).** When project context has not already been

package/adapters/opencode/README.md

@@ -384,7 +384,7 @@ behaviour** — nothing changes the machine's current agent/model unless you opt
   `2026-06-17-opencode-color-themes` spec).
 - **Runtime guard plugin** (`geneseed-guard.js`, installed with the others). Enforces
   the safety Laws at the tool boundary: **blocks** writes to private-key/credential
-  files (Law I), catastrophic shell like `rm -rf /` (Law IV), and any mutation under
+  files (Sealed Secrets), catastrophic shell like `rm -rf /` (Deletion Is Deliberate), and any mutation under
   a declared wiki's `protected` folders (AGENT.md §8, from `wiki.jsonc`); **warns** on
   `.env` writes and force-push. `GENESEED_GUARD=off` disables it, `=warn` downgrades
   blocks to warnings. Every **block** appends one line to the install's
@@ -400,7 +400,7 @@ behaviour** — nothing changes the machine's current agent/model unless you opt
 - **Default permissions.** A fresh `opencode.json` gets a minimal policy that **asks**
   before `rm -rf *` and a force-push — those are **Rule IV**'s territory and are in every
   build — and, **on an install that built the `process` pack in**, before every
-  `git commit` and `git push` (the host-level backstop for **Doctrine process 5**: the
+  `git commit` and `git push` (the host-level backstop for **Consent Before Push**: the
   agent never records or shares code unprompted, on any branch). Build with
   `--doctrines` leaving `process` out and those two entries are simply not written.
   The whole block is added only when you have no `permission` key; an existing policy is
@@ -534,7 +534,7 @@ install `jsonc-parser` yourself — you lose OCX's dependency management and
 auto-updates, and you own the upgrade-by-re-copy. Prefer the OCX path.
 
 **Consent note.** `worktree_delete` auto-commits before removal. The harness's
-consent-before-commit rule (**Doctrine process 5**, when the `process` pack is built in)
+consent-before-commit rule (**Consent Before Push**, when the `process` pack is built in)
 is enforced for *shell* `git commit` via `opencode.json`
 permissions, but this plugin commits through its own tool path — so review what it
 will commit before invoking delete, or keep the worktree and commit yourself.