gm-skill 2.0.1198 → 2.0.1199

package/README.md

@@ -35,7 +35,7 @@ An earlier generation fanned out fifteen per-platform downstream repos (gm-cc, g
 
 ## Version
 
-`2.0.1198` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
+`2.0.1199` — auto-bumped from the canonical `gm` repo. Every push to `AnEntrypoint/gm` (or any cascading sibling crate) republishes this package.
 
 ## Source of truth
 

package/bin/plugkit.version

@@ -1 +1 @@
-0.1.438
+0.1.439

package/bin/plugkit.wasm.sha256

@@ -1 +1 @@
-993680a7b6d2c7625c0cfc7627e3135cc6673bb9e3ac55fb241270929ba5b60b  plugkit.wasm
+306dfe2ef8117175fae4c66b15fc14a4505ee76b631d5a0762e00999dbea04d2  plugkit.wasm

package/gm.json

@@ -1,6 +1,6 @@
 {
   "name": "gm",
-  "version": "2.0.1198",
+  "version": "2.0.1199",
   "description": "Spool-dispatch orchestration engine with unified state machine, skills, and automated git enforcement",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -17,5 +17,5 @@
   "publishConfig": {
     "access": "public"
   },
-  "plugkitVersion": "0.1.438"
+  "plugkitVersion": "0.1.439"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gm-skill",
-  "version": "2.0.1198",
+  "version": "2.0.1199",
   "description": "Canonical universal harness — AI-native software engineering via skill-driven orchestration; bootstraps plugkit for task execution and session isolation. Install in any AI coding agent host.",
   "author": "AnEntrypoint",
   "license": "MIT",
@@ -39,7 +39,7 @@
     "gm.json"
   ],
   "dependencies": {
-    "gm-plugkit": "^2.0.1198"
+    "gm-plugkit": "^2.0.1199"
   },
   "engines": {
     "node": ">=16.0.0"

package/skills/gm-skill/SKILL.md

@@ -22,6 +22,6 @@ Now dispatch `instruction` (empty body → `in/instruction/<N>.txt`). Response c
 
 Maturity-first invariant: emit the closure of the destructive transform the request admits, not a scaffold + "Phase 2 next session" IOU. Partial emits are non-monotonic, L3-rejected. If closure exceeds session reach, that's a Maximal Cover decomposition (PRD-DAG enumeration), never a TODO-launder.
 
-Memory writes route through `memorize-fire` only — native memory surfaces are invisible to recall and forbidden. Questions to user fire last, after the three layers, scope-expansion, and a `WebSearch`/`WebFetch` pack all close empty. `AskUserQuestion` mid-iteration to pick between viable approaches IS the L3 violation the filter rejects (low-cost narrative substituting for an audited mutation).
+Memory writes route through `memorize-fire` exclusively — surfaces outside it produce memos the recall index does not see. Questions to the user fire last, after the three layers, scope-expansion, and a `WebSearch`/`WebFetch` pack all close empty. Interactive-question tools admit destructive-irreversible-uncovered decisions only; their use to clarify already-authorized scope IS the L3 violation — narrative substituted for the audit tuple the orchestrator requires.
 
 Only plugkit.