great-cto 3.29.1 → 3.31.0

package/board/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "great-cto",
   "description": "You already have the agent. This is everything around it. great_cto runs Claude Code as a pipeline of 70 specialist agents \u2014 an independent model checks each stage before the next builds on it, spending caps refuse rather than warn, and three decisions stay yours: what gets built, how, and whether it ships.",
-  "version": "3.29.1",
+  "version": "3.31.0",
   "author": {
     "name": "Alexander Velikiy",
     "url": "https://hashnode.com/@Greatcto"
@@ -61,7 +61,7 @@
           },
           {
             "type": "command",
-            "command": "export PATH=\"/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\"; PLUGIN_DIR=${CLAUDE_PLUGIN_ROOT:-$(ls -d ~/.claude/plugins/cache/*/great_cto/*/ 2>/dev/null | sort -V | tail -1 | sed 's|/$||')}; if [ -z \"$PLUGIN_DIR\" ]; then echo 'GREAT_CTO: plugin dir not found \u2014 run /update'; else mkdir -p ~/.great_cto .great_cto; node \"${PLUGIN_DIR}/scripts/lib/sync-managed.mjs\" --plugin-dir \"${PLUGIN_DIR}\" 2>/dev/null || true; cp \"${PLUGIN_DIR}/skills/great_cto/ARCHETYPES.md\" .great_cto/ARCHETYPES.md 2>/dev/null || true; cp \"${PLUGIN_DIR}/skills/great_cto/SKILL.md\" .great_cto/SKILL.md 2>/dev/null || true; { printf \"export PATH=/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\\nexport ARCHETYPES_MD=.great_cto/ARCHETYPES.md\\n\"; } > .great_cto/env.sh; fi; if [ ! -d ~/.great_cto/catalog ]; then git clone --depth=1 https://github.com/davila7/claude-code-templates.git ~/.great_cto/catalog 2>/dev/null & fi; if [ ! -d ~/.great_cto/anthropic-skills ]; then git clone --depth=1 https://github.com/anthropics/skills.git ~/.great_cto/anthropic-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/anthropic-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/anthropic-skills/.git 2>/dev/null || echo 0))) -gt 604800 ]; then (cd ~/.great_cto/anthropic-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -d ~/.great_cto/personal-skills ]; then git clone --depth=1 https://github.com/avelikiy/ai-agent-skills.git ~/.great_cto/personal-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/personal-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/personal-skills/.git 2>/dev/null || echo 0))) -gt 86400 ]; then (cd ~/.great_cto/personal-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -f ~/.great_cto/skills-registry.json ] || [ $(($(date +%s) - $(stat -f %m ~/.great_cto/skills-registry.json 2>/dev/null || stat -c %Y ~/.great_cto/skills-registry.json 2>/dev/null || echo 0))) -gt 86400 ]; then [ -x \"${PLUGIN_DIR}/scripts/skill-discover.sh\" ] && bash \"${PLUGIN_DIR}/scripts/skill-discover.sh\" >/dev/null 2>&1 & fi; [ -x \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" ] && bash \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" 2>/dev/null || true; bash \"${PLUGIN_DIR}/scripts/apply-model-override.sh\" 2>/dev/null || true; bd prime 2>/dev/null || true; echo '=== PREFERENCES ==='; node \"${PLUGIN_DIR}/scripts/hooks/read-global-memory.mjs\" 2>&1 || true; echo '=== PROJECT ==='; cat .great_cto/PROJECT.md 2>/dev/null || echo 'GREAT_CTO: No PROJECT.md \u2014 run /start'; PHASE=$(grep '^phase:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' || echo implementation); echo '=== PHASE ==='; echo \"$PHASE\"; { [ \"$PHASE\" != review ] && [ \"$PHASE\" != release ]; } && { echo '=== BRAIN ==='; head -30 .great_cto/brain.md 2>/dev/null; } || true; [ \"$PHASE\" = implementation ] && { echo '=== CODEBASE ==='; head -20 .great_cto/CODEBASE.md 2>/dev/null; } || true; echo '=== LOCAL ==='; cat .great_cto/local.md 2>/dev/null || true; [ \"$PHASE\" != planning ] && { echo '=== HANDOFF ==='; cat .great_cto/HANDOFF.md 2>/dev/null || echo 'No handoff state \u2014 fresh session'; } || true; [ \"$PHASE\" = review ] && { echo '=== LATEST QA ==='; ls docs/qa-reports/QA-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; echo '=== LATEST CSO ==='; ls docs/security/CSO-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; } || true; [ \"$PHASE\" = release ] && { echo '=== PERF BASELINE ==='; tail -10 .great_cto/perf-baseline.log 2>/dev/null; } || true; echo '=== STATUS ==='; OPEN_GATES=$(bd list --label gate --status open 2>/dev/null | wc -l | tr -d ' '); OPEN_TASKS=$(bd list --status open 2>/dev/null | wc -l | tr -d ' '); BRANCH=$(git branch --show-current 2>/dev/null || echo '?'); LAST_AGENT=$(ls -t .great_cto/verdicts/*.log 2>/dev/null | head -1 | xargs tail -1 2>/dev/null | awk '{print $2}' || echo 'none'); printf 'branch=%s | gates=%s | tasks=%s | last_agent=%s\\n' \"$BRANCH\" \"${OPEN_GATES:-0}\" \"${OPEN_TASKS:-0}\" \"${LAST_AGENT:-none}\"; [ \"${OPEN_GATES:-0}\" -gt 0 ] && echo '\u2192 run /inbox to see pending decisions' || true; P0_OPEN=$(bd list --status open 2>/dev/null | grep -c 'P0'); P0_OPEN=${P0_OPEN:-0}; if [ \"$P0_OPEN\" -gt 0 ]; then echo ''; printf '\\033[41;97m \ud83d\udea8 P0 OPEN: %s \u2014 run /inbox NOW \\033[0m\\n' \"$P0_OPEN\"; bd list --status open 2>/dev/null | grep 'P0' | head -3 | sed 's/^/    /'; fi; NOW_EPOCH=$(date +%s); LAST_AUDIT_FILE=$(find docs/audit -maxdepth 1 -name 'AUDIT-*.md' 2>/dev/null | sort | tail -1); if [ -n \"$LAST_AUDIT_FILE\" ]; then AUD_M=$(stat -f %m \"$LAST_AUDIT_FILE\" 2>/dev/null || stat -c %Y \"$LAST_AUDIT_FILE\" 2>/dev/null || echo $NOW_EPOCH); AUD_AGE=$(( (NOW_EPOCH - AUD_M) / 86400 )); [ \"$AUD_AGE\" -gt 30 ] && echo \"\u26a0 audit $AUD_AGE days old \u2014 run /audit\"; else echo '\u26a0 no audit artefact \u2014 run /audit or /doctor'; fi; if [ -f .great_cto/digest-latest.md ]; then DIG_M=$(stat -f %m .great_cto/digest-latest.md 2>/dev/null || stat -c %Y .great_cto/digest-latest.md 2>/dev/null || echo $NOW_EPOCH); DIG_AGE=$(( (NOW_EPOCH - DIG_M) / 86400 )); [ \"$DIG_AGE\" -gt 8 ] && echo \"\u26a0 digest $DIG_AGE days old \u2014 run /digest 7\"; fi; [ \"$PHASE\" != implementation ] && cat .great_cto/digest-latest.md 2>/dev/null | head -5 || true; [ -f \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" ] && node \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" 2>/dev/null; [ -n \"$PLUGIN_DIR\" ] && [ -f .great_cto/PROJECT.md ] && [ ! -f .great_cto/CODEBASE.md ] && node \"${PLUGIN_DIR}/scripts/first-run-codebase.mjs\" >/dev/null 2>&1 & node \"${PLUGIN_DIR}/scripts/hooks/quota-check.mjs\" 2>/dev/null || true; echo '=== PATTERNS ==='; GP_DIR=\"$HOME/.great_cto/global-patterns\"; ARCH=$(grep '^primary:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' | head -1); if [ -d \"$GP_DIR\" ] && ls \"$GP_DIR\"/GP-*.md >/dev/null 2>&1; then ACTIVE_COUNT=$(grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | wc -l | tr -d ' '); echo \"Active patterns: ${ACTIVE_COUNT:-0}\"; if [ -n \"$ARCH\" ] && [ \"${ACTIVE_COUNT:-0}\" -gt 0 ]; then grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | xargs grep -lE \"applies_to:.*$ARCH\" 2>/dev/null | sort -V | tail -5 | while read f; do SLUG=$(basename \"$f\" .md); SYMPT=$(grep -m1 '^symptom:' \"$f\" 2>/dev/null | sed 's/symptom: //'); DETECT=$(grep -A 2 '^detection_order:' \"$f\" 2>/dev/null | grep '^  - ' | head -1 | sed 's/^  - //'); HITS=$(grep -m1 '^hits:' \"$f\" 2>/dev/null | awk '{print $2}'); printf '  %s (hits=%s): %s\\n  \\u2192 Check first: %s\\n' \"$SLUG\" \"${HITS:-0}\" \"$SYMPT\" \"$DETECT\"; done || echo \"  no patterns match archetype=$ARCH yet \u2014 /crystallize builds the library\"; fi; else echo 'no global patterns yet \u2014 run /crystallize after first incident'; fi; [ -x \"${PLUGIN_DIR}/scripts/check-update.sh\" ] && bash \"${PLUGIN_DIR}/scripts/check-update.sh\" \"${PLUGIN_DIR}/.claude-plugin/plugin.json\" 2>/dev/null || true ; # great_cto-cache-cleanup v2.5.8: keep only 3 most recent cached versions to prevent disk bloat. ls -d \"$HOME\"/.claude/plugins/cache/*/great_cto/*/ 2>/dev/null | sort -V | awk -v k=3 '{a[NR]=$0} END {for (i=1; i<=NR-k; i++) print a[i]}' | xargs -I{} rm -rf {} 2>/dev/null || true",
+            "command": "export PATH=\"/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\"; PLUGIN_DIR=${CLAUDE_PLUGIN_ROOT:-$(ls -d ~/.claude/plugins/cache/*/great_cto/*/ 2>/dev/null | sort -V | tail -1 | sed 's|/$||')}; if [ -z \"$PLUGIN_DIR\" ]; then echo 'GREAT_CTO: plugin dir not found \u2014 run /update'; else mkdir -p ~/.great_cto .great_cto; node \"${PLUGIN_DIR}/scripts/lib/sync-managed.mjs\" --plugin-dir \"${PLUGIN_DIR}\" 2>/dev/null || true; cp \"${PLUGIN_DIR}/skills/great_cto/ARCHETYPES.md\" .great_cto/ARCHETYPES.md 2>/dev/null || true; cp \"${PLUGIN_DIR}/skills/great_cto/SKILL.md\" .great_cto/SKILL.md 2>/dev/null || true; { printf \"export PATH=/opt/homebrew/bin:$HOME/.local/bin:/usr/local/bin:$PATH\\nexport ARCHETYPES_MD=.great_cto/ARCHETYPES.md\\n\"; } > .great_cto/env.sh; fi; if [ ! -d ~/.great_cto/catalog ]; then git clone --depth=1 https://github.com/davila7/claude-code-templates.git ~/.great_cto/catalog 2>/dev/null & fi; if [ ! -d ~/.great_cto/anthropic-skills ]; then git clone --depth=1 https://github.com/anthropics/skills.git ~/.great_cto/anthropic-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/anthropic-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/anthropic-skills/.git 2>/dev/null || echo 0))) -gt 604800 ]; then (cd ~/.great_cto/anthropic-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -d ~/.great_cto/personal-skills ]; then git clone --depth=1 https://github.com/avelikiy/ai-agent-skills.git ~/.great_cto/personal-skills 2>/dev/null & elif [ $(($(date +%s) - $(stat -f %m ~/.great_cto/personal-skills/.git 2>/dev/null || stat -c %Y ~/.great_cto/personal-skills/.git 2>/dev/null || echo 0))) -gt 86400 ]; then (cd ~/.great_cto/personal-skills && git pull --quiet 2>/dev/null) & fi; if [ ! -f ~/.great_cto/skills-registry.json ] || [ $(($(date +%s) - $(stat -f %m ~/.great_cto/skills-registry.json 2>/dev/null || stat -c %Y ~/.great_cto/skills-registry.json 2>/dev/null || echo 0))) -gt 86400 ]; then [ -x \"${PLUGIN_DIR}/scripts/skill-discover.sh\" ] && bash \"${PLUGIN_DIR}/scripts/skill-discover.sh\" >/dev/null 2>&1 & fi; [ -x \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" ] && bash \"${PLUGIN_DIR}/scripts/hooks/welcome.sh\" 2>/dev/null || true; bash \"${PLUGIN_DIR}/scripts/apply-model-override.sh\" 2>/dev/null || true; bd prime 2>/dev/null || true; cat \"${PLUGIN_DIR}/scripts/hooks/operating-rules.md\" 2>/dev/null || true; echo '=== PREFERENCES ==='; node \"${PLUGIN_DIR}/scripts/hooks/read-global-memory.mjs\" 2>&1 || true; echo '=== PROJECT ==='; cat .great_cto/PROJECT.md 2>/dev/null || echo 'GREAT_CTO: No PROJECT.md \u2014 run /start'; PHASE=$(grep '^phase:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' || echo implementation); echo '=== PHASE ==='; echo \"$PHASE\"; { [ \"$PHASE\" != review ] && [ \"$PHASE\" != release ]; } && { echo '=== BRAIN ==='; head -30 .great_cto/brain.md 2>/dev/null; } || true; [ \"$PHASE\" = implementation ] && { echo '=== CODEBASE ==='; head -20 .great_cto/CODEBASE.md 2>/dev/null; } || true; echo '=== LOCAL ==='; cat .great_cto/local.md 2>/dev/null || true; [ \"$PHASE\" != planning ] && { echo '=== HANDOFF ==='; cat .great_cto/HANDOFF.md 2>/dev/null || echo 'No handoff state \u2014 fresh session'; } || true; [ \"$PHASE\" = review ] && { echo '=== LATEST QA ==='; ls docs/qa-reports/QA-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; echo '=== LATEST CSO ==='; ls docs/security/CSO-*.md 2>/dev/null | sort -V | tail -1 | xargs head -20 2>/dev/null; } || true; [ \"$PHASE\" = release ] && { echo '=== PERF BASELINE ==='; tail -10 .great_cto/perf-baseline.log 2>/dev/null; } || true; echo '=== STATUS ==='; OPEN_GATES=$(bd list --label gate --status open 2>/dev/null | wc -l | tr -d ' '); OPEN_TASKS=$(bd list --status open 2>/dev/null | wc -l | tr -d ' '); BRANCH=$(git branch --show-current 2>/dev/null || echo '?'); LAST_AGENT=$(ls -t .great_cto/verdicts/*.log 2>/dev/null | head -1 | xargs tail -1 2>/dev/null | awk '{print $2}' || echo 'none'); printf 'branch=%s | gates=%s | tasks=%s | last_agent=%s\\n' \"$BRANCH\" \"${OPEN_GATES:-0}\" \"${OPEN_TASKS:-0}\" \"${LAST_AGENT:-none}\"; [ \"${OPEN_GATES:-0}\" -gt 0 ] && echo '\u2192 run /inbox to see pending decisions' || true; P0_OPEN=$(bd list --status open 2>/dev/null | grep -c 'P0'); P0_OPEN=${P0_OPEN:-0}; if [ \"$P0_OPEN\" -gt 0 ]; then echo ''; printf '\\033[41;97m \ud83d\udea8 P0 OPEN: %s \u2014 run /inbox NOW \\033[0m\\n' \"$P0_OPEN\"; bd list --status open 2>/dev/null | grep 'P0' | head -3 | sed 's/^/    /'; fi; NOW_EPOCH=$(date +%s); LAST_AUDIT_FILE=$(find docs/audit -maxdepth 1 -name 'AUDIT-*.md' 2>/dev/null | sort | tail -1); if [ -n \"$LAST_AUDIT_FILE\" ]; then AUD_M=$(stat -f %m \"$LAST_AUDIT_FILE\" 2>/dev/null || stat -c %Y \"$LAST_AUDIT_FILE\" 2>/dev/null || echo $NOW_EPOCH); AUD_AGE=$(( (NOW_EPOCH - AUD_M) / 86400 )); [ \"$AUD_AGE\" -gt 30 ] && echo \"\u26a0 audit $AUD_AGE days old \u2014 run /audit\"; else echo '\u26a0 no audit artefact \u2014 run /audit or /doctor'; fi; if [ -f .great_cto/digest-latest.md ]; then DIG_M=$(stat -f %m .great_cto/digest-latest.md 2>/dev/null || stat -c %Y .great_cto/digest-latest.md 2>/dev/null || echo $NOW_EPOCH); DIG_AGE=$(( (NOW_EPOCH - DIG_M) / 86400 )); [ \"$DIG_AGE\" -gt 8 ] && echo \"\u26a0 digest $DIG_AGE days old \u2014 run /digest 7\"; fi; [ \"$PHASE\" != implementation ] && cat .great_cto/digest-latest.md 2>/dev/null | head -5 || true; [ -f \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" ] && node \"${PLUGIN_DIR}/scripts/hooks/auto-attach-reviewers.mjs\" 2>/dev/null; [ -n \"$PLUGIN_DIR\" ] && [ -f .great_cto/PROJECT.md ] && [ ! -f .great_cto/CODEBASE.md ] && node \"${PLUGIN_DIR}/scripts/first-run-codebase.mjs\" >/dev/null 2>&1 & node \"${PLUGIN_DIR}/scripts/hooks/quota-check.mjs\" 2>/dev/null || true; echo '=== PATTERNS ==='; GP_DIR=\"$HOME/.great_cto/global-patterns\"; ARCH=$(grep '^primary:' .great_cto/PROJECT.md 2>/dev/null | awk '{print $2}' | head -1); if [ -d \"$GP_DIR\" ] && ls \"$GP_DIR\"/GP-*.md >/dev/null 2>&1; then ACTIVE_COUNT=$(grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | wc -l | tr -d ' '); echo \"Active patterns: ${ACTIVE_COUNT:-0}\"; if [ -n \"$ARCH\" ] && [ \"${ACTIVE_COUNT:-0}\" -gt 0 ]; then grep -rl 'status: active' \"$GP_DIR\" 2>/dev/null | xargs grep -lE \"applies_to:.*$ARCH\" 2>/dev/null | sort -V | tail -5 | while read f; do SLUG=$(basename \"$f\" .md); SYMPT=$(grep -m1 '^symptom:' \"$f\" 2>/dev/null | sed 's/symptom: //'); DETECT=$(grep -A 2 '^detection_order:' \"$f\" 2>/dev/null | grep '^  - ' | head -1 | sed 's/^  - //'); HITS=$(grep -m1 '^hits:' \"$f\" 2>/dev/null | awk '{print $2}'); printf '  %s (hits=%s): %s\\n  \\u2192 Check first: %s\\n' \"$SLUG\" \"${HITS:-0}\" \"$SYMPT\" \"$DETECT\"; done || echo \"  no patterns match archetype=$ARCH yet \u2014 /crystallize builds the library\"; fi; else echo 'no global patterns yet \u2014 run /crystallize after first incident'; fi; [ -x \"${PLUGIN_DIR}/scripts/check-update.sh\" ] && bash \"${PLUGIN_DIR}/scripts/check-update.sh\" \"${PLUGIN_DIR}/.claude-plugin/plugin.json\" 2>/dev/null || true ; # great_cto-cache-cleanup: keep the newest 3 cached versions, and never one a live session runs from (prune-versions; the check install-local --prune got after 2026-09-11). for CR in \"$HOME\"/.claude/plugins/cache/*/great_cto; do [ -d \"$CR\" ] || continue; node \"${PLUGIN_DIR}/scripts/lib/prune-versions.mjs\" --cache-root \"$CR\" --keep \"${PLUGIN_DIR:-$CR/none}\" --keep-newest 3 2>/dev/null | while IFS= read -r d; do case \"$d\" in \"$CR\"/*) rm -rf \"$d\" ;; esac; done; done 2>/dev/null || true",
             "timeout": 30,
             "statusMessage": "Loading Great CTO context..."
           },
@@ -315,5 +315,77 @@
     ]
   },
   "homepage": "https://greatcto.systems",
-  "repository": "https://github.com/avelikiy/great_cto"
+  "repository": "https://github.com/avelikiy/great_cto",
+  "agents": [
+    "./agents-full/accounting-reviewer.md",
+    "./agents-full/adtech-privacy-reviewer.md",
+    "./agents-full/ai-eval-engineer.md",
+    "./agents-full/ai-prompt-architect.md",
+    "./agents-full/ai-security-reviewer.md",
+    "./agents-full/api-platform-reviewer.md",
+    "./agents-full/app-scaffolder.md",
+    "./agents-full/architect.md",
+    "./agents-full/auth-engineer.md",
+    "./agents-full/cli-reviewer.md",
+    "./agents-full/cmmc-reviewer.md",
+    "./agents-full/cms-reviewer.md",
+    "./agents-full/code-reviewer.md",
+    "./agents-full/connector-builder.md",
+    "./agents-full/continuous-learner.md",
+    "./agents-full/coordinator.md",
+    "./agents-full/data-platform-reviewer.md",
+    "./agents-full/db-migration-reviewer.md",
+    "./agents-full/decision-scorer.md",
+    "./agents-full/design-advisor.md",
+    "./agents-full/devops.md",
+    "./agents-full/devtools-reviewer.md",
+    "./agents-full/dpdpa-reviewer.md",
+    "./agents-full/e2e-test-engineer.md",
+    "./agents-full/edtech-reviewer.md",
+    "./agents-full/enterprise-saas-reviewer.md",
+    "./agents-full/firmware-reviewer.md",
+    "./agents-full/game-reviewer.md",
+    "./agents-full/gdpr-reviewer.md",
+    "./agents-full/geo-routing-engineer.md",
+    "./agents-full/gov-reviewer.md",
+    "./agents-full/growth-engineer.md",
+    "./agents-full/healthcare-reviewer.md",
+    "./agents-full/hr-ai-reviewer.md",
+    "./agents-full/infra-provisioner.md",
+    "./agents-full/infra-reviewer.md",
+    "./agents-full/insurance-reviewer.md",
+    "./agents-full/integrations-engineer.md",
+    "./agents-full/knowledge-extractor.md",
+    "./agents-full/l3-support.md",
+    "./agents-full/legal-reviewer.md",
+    "./agents-full/library-reviewer.md",
+    "./agents-full/marketplace-reviewer.md",
+    "./agents-full/mcp-server-reviewer.md",
+    "./agents-full/media-pipeline-engineer.md",
+    "./agents-full/migration-import-engineer.md",
+    "./agents-full/mlops-reviewer.md",
+    "./agents-full/mobile-app-builder.md",
+    "./agents-full/mobile-store-reviewer.md",
+    "./agents-full/msp-reviewer.md",
+    "./agents-full/oracle-reviewer.md",
+    "./agents-full/pci-reviewer.md",
+    "./agents-full/performance-engineer.md",
+    "./agents-full/pm.md",
+    "./agents-full/procurement-reviewer.md",
+    "./agents-full/product-owner.md",
+    "./agents-full/project-auditor.md",
+    "./agents-full/qa-engineer.md",
+    "./agents-full/quant-researcher.md",
+    "./agents-full/rcm-reviewer.md",
+    "./agents-full/regulated-reviewer.md",
+    "./agents-full/security-officer.md",
+    "./agents-full/senior-dev.md",
+    "./agents-full/streaming-reviewer.md",
+    "./agents-full/subscription-billing-engineer.md",
+    "./agents-full/tax-reviewer.md",
+    "./agents-full/us-ai-reviewer.md",
+    "./agents-full/us-privacy-reviewer.md",
+    "./agents-full/voice-ai-reviewer.md",
+    "./agents-full/web-store-reviewer.md"
+  ]
 }

package/board/packages/board/lib/routes.mjs

@@ -12,6 +12,8 @@ import { eventSurface, readFileSafe, originAllowed } from './util.mjs';
 import { sseClients, notifHistory } from './state.mjs';
 import { autoRegisterProject, listProjects, resolveProjectCwd, resolveProjectInfo, getChangeTier, readProjectsRegistry, getRegistryDegradation } from './projects.mjs';
 import { readVerdictsWithHealth } from './verdicts.mjs';
+import { agentUsage, usageSnapshot } from '../../../scripts/lib/agent-usage.mjs';
+import { reviewerStatus } from '../../../scripts/lib/required-reviewers.mjs';
 import { readScores, summarizeScores } from '../../../scripts/lib/scores.mjs';
 import { status as routerKeyStatus, writeKey as writeRouterKey, verifyKey as verifyRouterKey } from '../../../scripts/lib/router-key.mjs';
 
@@ -1455,6 +1457,26 @@ async function dispatch(req, res, url, cwd) {
     return true;
   }
 
+  // Real dispatches per agent, read from Claude Code's session logs on this
+  // machine (scripts/lib/agent-usage.mjs). Machine-wide, not per project: the logs
+  // are one history. The first pass over a large history takes about a minute, so
+  // the snapshot answers at once — `computing`, then the last result — and never
+  // makes a request wait for the scan.
+  if (pathname === '/api/agent-usage') {
+    res.writeHead(200, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' });
+    res.end(JSON.stringify(boardUsage().get()));
+    return true;
+  }
+
+  // Domain reviewers this project's PROJECT.md requires (archetype, packs,
+  // compliance), each with whether a verdict exists — the list gate:ship refuses on.
+  if (pathname === '/api/required-reviewers') {
+    const c = url.searchParams.get('project') ? resolveProjectCwd(url.searchParams.get('project')) : cwd;
+    res.writeHead(200, { 'Content-Type': 'application/json', 'Cache-Control': 'no-store' });
+    res.end(JSON.stringify(c ? reviewerStatus(c) : { state: 'no-project', reviewers: [] }));
+    return true;
+  }
+
   // Installed agents — fleet view (DESIGN-agents-fleet-view §3.1).
   //
   // Extended in 2026-05-15 from a flat list to a faceted-fleet payload:
@@ -2084,4 +2106,16 @@ async function dispatch(req, res, url, cwd) {
  * the inbox.
  */
 
+
+let _usageSnap = null;
+function boardUsage() {
+  if (!_usageSnap) {
+    const agentsDir = path.join(path.dirname(new URL(import.meta.url).pathname), '..', '..', '..', 'agents');
+    let agents = [];
+    try { agents = fs.readdirSync(agentsDir).filter((f) => f.endsWith('.md')).map((f) => f.slice(0, -3)); } catch { /* none: every count is unavailable-by-omission */ }
+    _usageSnap = usageSnapshot({ compute: () => agentUsage({ agents }) });
+  }
+  return _usageSnap;
+}
+
 export { dispatch, secondOpinionForTree };

package/board/packages/board/public/index.html

@@ -8668,9 +8668,42 @@ const fleetState = {
   search: '',
   sort: 'runs_30d',
   drawerSlug: null,
+  // Real dispatches from the session logs (/api/agent-usage). Machine-wide, and
+  // null until the first answer; `computing` while the first scan runs.
+  usage: null,
+  // Reviewers this project requires (/api/required-reviewers) — gate:ship refuses
+  // while one has no verdict.
+  required: null,
 };
+function requiredOf(slug) {
+  const r = fleetState.required;
+  return r && r.state === 'read' ? (r.reviewers || []).find((x) => x.agent === slug) || null : null;
+}
+async function refreshRequiredReviewers() {
+  const r = await api(`/api/required-reviewers${pqs()}`);
+  if (!r) return;
+  fleetState.required = r;
+  renderFleetList();
+}
+
+// Dispatches for one agent, or null when the logs were not counted. Null is not
+// zero: a zero means the logs were read and never named this agent.
+function usageOf(slug) {
+  const u = fleetState.usage;
+  return u && u.state === 'counted' && u.agents ? (u.agents[slug] || { dispatches: 0, lastRun: null, projects: 0 }) : null;
+}
+async function refreshAgentUsage() {
+  const u = await api('/api/agent-usage');
+  if (!u) return;
+  fleetState.usage = u;
+  renderFleetList();
+  // The first scan of a large history takes about a minute; ask again until it lands.
+  if (u.state === 'computing' || u.refreshing) setTimeout(refreshAgentUsage, 15000);
+}
 
 async function refreshAgentsInstalled() {
+  refreshAgentUsage();
+  refreshRequiredReviewers();
   const data = await api(`/api/agents-installed${pqs()}`);
   if (!data) return;
   fleetState.agents = data.agents || [];
@@ -8703,7 +8736,8 @@ const FLEET_VIEWS = [
 // brief refuses an inferred idle/retired status in v1.
 function agentNeedsAttention(a) {
   const p = a.posture || {};
-  return a.health === 'failing'
+  const req = requiredOf(a.slug);
+  return (req && !req.verdict) || a.health === 'failing'
     || p.state === 'unclassified' || p.state === 'unreadable'
     || (Array.isArray(p.scopedInNameOnly) && p.scopedInNameOnly.length > 0)
     || String(a.budget?.state || '').startsWith('over');
@@ -8713,7 +8747,9 @@ function inFleetView(a, view) {
   if (a.retired) return false;
   if (view === 'needs') return agentNeedsAttention(a);
   if (view === 'expensive') return a.posture?.state === 'expensive';
-  if (view === 'never') return !(a.runs_total > 0);
+  // Never observed: no verdict line, and — when the logs were counted — no
+  // dispatch either. An agent that ran without reporting is not "never".
+  if (view === 'never') return !(a.runs_total > 0) && !((usageOf(a.slug)?.dispatches || 0) > 0);
   return true;
 }
 function setFleetView(view) {
@@ -8809,7 +8845,12 @@ function renderFleetList() {
   const order = [...DOMAINS, ...Object.keys(byDomain).filter((d) => !DOMAINS.includes(d))];
   const expanded = order.filter((d) => (byDomain[d] || []).length);
   const collapsed = order.filter((d) => !(byDomain[d] || []).length && totals[d]);
-  const head = `<li class="fleet-head" aria-hidden="true"><span></span><span>Agent</span><span>Posture</span><span>Last verdict</span><span class="tab">Runs</span><span class="tab">Pass</span><span class="tab">30d $</span><span></span></li>`;
+  const uu = fleetState.usage;
+  const usageLine = !uu ? ''
+    : uu.state === 'counted'
+      ? `<li class="fleet-group-collapsed" title="read from Claude Code session logs on this machine; they keep about 30 days"><span>dispatched in session logs: ${Object.values(uu.agents || {}).filter((x) => x.dispatches > 0).length} of ${Object.keys(uu.agents || {}).length} agents · ${esc((uu.window?.from || '?').slice(0, 10))} → ${esc((uu.window?.to || '?').slice(0, 10))}</span></li>`
+      : `<li class="fleet-group-collapsed"><span class="abs">${esc(uu.state === 'computing' ? 'counting dispatches in the session logs…' : (uu.why || 'dispatches not counted'))}</span></li>`;
+  const head = usageLine + `<li class="fleet-head" aria-hidden="true"><span></span><span>Agent</span><span>Posture</span><span>Last verdict</span><span class="tab">Runs</span><span class="tab">Pass</span><span class="tab">30d $</span><span></span></li>`;
   const rows = head + expanded.map((d) => `
     <li class="fleet-group-head"><span>${esc(d)} · ${byDomain[d].length} of ${totals[d] || 0}</span></li>
     ${byDomain[d].map(agentRowHtml).join('')}`).join('');
@@ -8843,13 +8884,27 @@ function postureChips(a) {
   }
   return out.join('');
 }
+// Required by this project's PROJECT.md: the chip says why, and whether it has run.
+function requiredChip(a) {
+  const r = requiredOf(a.slug);
+  if (!r) return '';
+  return r.verdict
+    ? `<span class="pos rou" title="required by ${esc(r.why)} — has a verdict in this project">✓ required</span>`
+    : `<span class="pos warn" title="required by ${esc(r.why)} — no verdict in this project yet; gate:ship refuses until it runs or a signed exception names it">⚠ required · not run</span>`;
+}
 function agentRowHtml(a) {
   const rate = a.success_rate;
   const runs = a.runs_30d ?? 0;
   const observed = a.runs_total > 0 || !!a.last_run;
+  const u = usageOf(a.slug);
+  const dispatchNote = u ? `dispatched ${u.dispatches}× in the session logs${u.lastRun ? `, last ${agoStr(u.lastRun)}` : ''}${u.projects ? `, ${u.projects} project${u.projects === 1 ? '' : 's'}` : ''}` : 'dispatches not counted';
   const last = observed
-    ? (a.health === 'failing' ? `<span style="color:var(--status-blocked)">failing</span> ${esc(agoStr(a.last_run))}` : `<span style="color:var(--status-done)">ok</span> ${esc(agoStr(a.last_run))}`)
-    : '<span class="abs" title="no verdict line names this agent — absence of a log is not absence of a run">never observed</span>';
+    ? `<span title="${esc(dispatchNote)}">${a.health === 'failing' ? `<span style="color:var(--status-blocked)">failing</span>` : `<span style="color:var(--status-done)">ok</span>`} ${esc(agoStr(a.last_run))}</span>`
+    : u && u.dispatches > 0
+      ? `<span class="abs" title="${esc(dispatchNote)} — but no verdict line names it: it ran and did not report">dispatched ${u.dispatches}× · no verdict</span>`
+      : u
+        ? '<span class="abs" title="no verdict line names this agent, and the session logs on this machine never dispatched it">never dispatched</span>'
+        : '<span class="abs" title="no verdict line names this agent — absence of a log is not absence of a run">never observed</span>';
   const pass = !observed ? '<span class="abs" title="never observed">—</span>'
     : runs === 0 ? '<span class="abs" title="no run in this window — measured, none">—</span>'
     : rate != null ? `${rate}%` : '<span class="abs" title="runs exist but no verdict carried a result yet">·</span>';
@@ -8867,7 +8922,7 @@ function agentRowHtml(a) {
               onkeydown="if(event.key==='Enter'){event.preventDefault();openAgentDrawer('${esc(a.slug)}')}">
         <span class="ar-status" aria-hidden="true"></span>
         <span class="ar-name">${esc(a.slug)} <span class="mono cap muted" style="font-weight:400">${model}</span>${a.retired ? ' <span class="cap" style="color:var(--agent-retired)">retired</span>' : ''}</span>
-        <span class="ar-posture">${postureChips(a)}</span>
+        <span class="ar-posture">${requiredChip(a)}${postureChips(a)}</span>
         <span class="mono cap ar-last">${last}</span>
         <span class="mono cap tab" title="runs in the last 30 days">${runs}</span>
         <span class="mono cap tab" title="pass rate over those runs">${pass}</span>

package/board/scripts/lib/agent-usage.mjs

@@ -0,0 +1,195 @@
+/**
+ * agent-usage — how often each great_cto agent is really dispatched, read from
+ * Claude Code's own session logs (`~/.claude/projects/**\/*.jsonl`).
+ *
+ * The board's Fleet screen said "never observed" when no verdict line named an
+ * agent. A verdict line is written at the end of a run, so a run that wrote none
+ * was invisible, and nothing said how often an agent is dispatched at all. On
+ * 2026-09-21 the logs of one machine showed 26 of 70 agents dispatched at least
+ * once in the retained window, and 44 never. Idea from migsilva89/loadout (MIT),
+ * which reads assistant session logs for the same reason.
+ *
+ * Rules:
+ *  - Read-only on the logs. They belong to Claude Code; the index this keeps lives
+ *    in ~/.great_cto, never next to them.
+ *  - `unavailable` when the logs directory cannot be read — never a zero, which
+ *    would read as disuse. A zero is reported only for an agent the logs were read
+ *    for and did not name.
+ *  - Paths never leave this module. Projects are counted as distinct `cwd` values,
+ *    kept in the index only as short hashes.
+ *  - The logs are gigabytes; an unchanged file (same size and mtime) is taken from
+ *    the index, and only lines that mention `subagent_type` are parsed.
+ */
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+import readline from 'node:readline';
+import { createHash } from 'node:crypto';
+
+const INDEX_VERSION = 1;
+
+export const DEFAULT_LOGS_DIR = path.join(os.homedir(), '.claude', 'projects');
+export const DEFAULT_CACHE_FILE = path.join(os.homedir(), '.great_cto', 'usage-index.json');
+
+const short = (s) => createHash('sha1').update(String(s)).digest('hex').slice(0, 12);
+
+function listTranscripts(dir) {
+  const out = [];
+  const walk = (d, depth) => {
+    let entries;
+    try { entries = fs.readdirSync(d, { withFileTypes: true }); } catch { return; }
+    for (const e of entries) {
+      const p = path.join(d, e.name);
+      if (e.isDirectory()) { if (depth < 5) walk(p, depth + 1); }
+      else if (e.isFile() && e.name.endsWith('.jsonl')) out.push(p);
+    }
+  };
+  walk(dir, 0);
+  return out;
+}
+
+/** Dispatches in one transcript: { [rawName]: { n, last, cwds:[hash] } } plus its time span. */
+async function readTranscript(file) {
+  const perName = {};
+  let from = null;
+  let to = null;
+  const stream = fs.createReadStream(file, { encoding: 'utf8' });
+  const rl = readline.createInterface({ input: stream, crlfDelay: Infinity });
+  for await (const line of rl) {
+    if (!line.includes('"subagent_type"')) continue;
+    let d;
+    try { d = JSON.parse(line); } catch { continue; }
+    const content = d?.message?.content;
+    if (!Array.isArray(content)) continue;
+    for (const c of content) {
+      if (c?.type !== 'tool_use' || (c?.name !== 'Agent' && c?.name !== 'Task')) continue;
+      const raw = c?.input?.subagent_type;
+      if (typeof raw !== 'string' || !raw) continue;
+      const ts = typeof d.timestamp === 'string' ? d.timestamp : null;
+      const slot = perName[raw] || (perName[raw] = { n: 0, last: null, cwds: [] });
+      slot.n++;
+      if (ts && (!slot.last || ts > slot.last)) slot.last = ts;
+      const h = d.cwd ? short(d.cwd) : null;
+      if (h && !slot.cwds.includes(h)) slot.cwds.push(h);
+      if (ts) { if (!from || ts < from) from = ts; if (!to || ts > to) to = ts; }
+    }
+  }
+  return { perName, from, to };
+}
+
+function loadIndex(cacheFile) {
+  try {
+    const x = JSON.parse(fs.readFileSync(cacheFile, 'utf8'));
+    if (x && x.version === INDEX_VERSION && x.files && typeof x.files === 'object') return x;
+  } catch { /* missing or corrupt: rebuilt below, never trusted */ }
+  return { version: INDEX_VERSION, files: {} };
+}
+
+function saveIndex(cacheFile, index) {
+  try {
+    fs.mkdirSync(path.dirname(cacheFile), { recursive: true });
+    const tmp = `${cacheFile}.${process.pid}.tmp`;
+    fs.writeFileSync(tmp, JSON.stringify(index));
+    fs.renameSync(tmp, cacheFile);
+  } catch { /* an index that cannot be saved costs a re-read next time, nothing else */ }
+}
+
+/** `great-cto:senior-dev` and `senior-dev` are the same agent. */
+const agentOf = (raw, known) => {
+  const name = raw.includes(':') ? raw.slice(raw.lastIndexOf(':') + 1) : raw;
+  return known.has(name) ? name : null;
+};
+
+/**
+ * @param {{logsDir?:string, cacheFile?:string, agents:string[]}} opts
+ * @returns {Promise<{state:'counted'|'unavailable', why?:string, transcripts:number, read:number,
+ *   window:{from:string|null,to:string|null}, agents:Record<string,{dispatches:number,lastRun:string|null,projects:number}>}>}
+ */
+export async function agentUsage({ logsDir = DEFAULT_LOGS_DIR, cacheFile = DEFAULT_CACHE_FILE, agents = [] } = {}) {
+  let isDir = false;
+  try { isDir = fs.statSync(logsDir).isDirectory(); } catch { /* absent */ }
+  if (!isDir) {
+    return { state: 'unavailable', why: 'no Claude Code session logs on this machine', transcripts: 0, read: 0, window: { from: null, to: null }, agents: {} };
+  }
+
+  const known = new Set(agents);
+  const index = loadIndex(cacheFile);
+  const next = { version: INDEX_VERSION, files: {} };
+  let read = 0;
+
+  for (const file of listTranscripts(logsDir)) {
+    let st;
+    try { st = fs.statSync(file); } catch { continue; }
+    const key = short(file);
+    const prev = index.files[key];
+    if (prev && prev.size === st.size && prev.mtimeMs === st.mtimeMs) { next.files[key] = prev; continue; }
+    try {
+      const r = await readTranscript(file);
+      next.files[key] = { size: st.size, mtimeMs: st.mtimeMs, ...r };
+      read++;
+    } catch { /* an unreadable transcript is skipped, not counted as empty */ }
+  }
+  saveIndex(cacheFile, next);
+
+  const out = {};
+  for (const a of agents) out[a] = { dispatches: 0, lastRun: null, projects: 0 };
+  const cwds = {};
+  let from = null;
+  let to = null;
+  for (const f of Object.values(next.files)) {
+    if (f.from && (!from || f.from < from)) from = f.from;
+    if (f.to && (!to || f.to > to)) to = f.to;
+    for (const [raw, slot] of Object.entries(f.perName || {})) {
+      const a = agentOf(raw, known);
+      if (!a) continue;
+      out[a].dispatches += slot.n;
+      if (slot.last && (!out[a].lastRun || slot.last > out[a].lastRun)) out[a].lastRun = slot.last;
+      const seen = cwds[a] || (cwds[a] = new Set());
+      for (const h of slot.cwds) seen.add(h);
+    }
+  }
+  for (const [a, s] of Object.entries(cwds)) out[a].projects = s.size;
+
+  return { state: 'counted', transcripts: Object.keys(next.files).length, read, window: { from, to }, agents: out };
+}
+
+// CLI: node scripts/lib/agent-usage.mjs [--json]
+const isMain = process.argv[1] && path.resolve(process.argv[1]) === path.resolve(new URL(import.meta.url).pathname);
+if (isMain) {
+  const root = path.resolve(path.dirname(new URL(import.meta.url).pathname), '..', '..');
+  const agents = fs.readdirSync(path.join(root, 'agents')).filter((f) => f.endsWith('.md')).map((f) => f.slice(0, -3));
+  const u = await agentUsage({ agents });
+  if (process.argv.includes('--json')) { console.log(JSON.stringify(u, null, 2)); process.exit(0); }
+  if (u.state !== 'counted') { console.log(`agent-usage: ${u.why}`); process.exit(0); }
+  const rows = Object.entries(u.agents).sort((x, y) => y[1].dispatches - x[1].dispatches);
+  const used = rows.filter(([, v]) => v.dispatches > 0).length;
+  console.log(`agent-usage: ${used} of ${rows.length} agents dispatched · ${u.transcripts} transcripts · window ${u.window.from?.slice(0, 10) ?? '?'} → ${u.window.to?.slice(0, 10) ?? '?'}`);
+  for (const [a, v] of rows) console.log(`  ${String(v.dispatches).padStart(5)}  ${a.padEnd(30)} ${v.lastRun ? v.lastRun.slice(0, 10) : 'never'}  projects=${v.projects}`);
+}
+
+/**
+ * A request-safe view of agentUsage: `get()` answers at once — `computing` before
+ * the first pass finishes, then the last result — and starts at most one refresh
+ * in the background when the result is older than `ttlMs`. The first pass over
+ * real logs took 47 s; a board request cannot wait for that.
+ */
+export function usageSnapshot({ compute, ttlMs = 10 * 60 * 1000, now = () => Date.now() }) {
+  let last = null;
+  let at = 0;
+  let running = null;
+  const start = () => {
+    if (running) return;
+    let pass;
+    try { pass = Promise.resolve(compute()); } catch (e) { pass = Promise.reject(e); }
+    running = pass
+      .then((r) => { last = r; }, (e) => { last = { state: 'unavailable', why: `usage could not be read: ${e?.message || e}` }; })
+      .finally(() => { at = now(); running = null; });
+  };
+  return {
+    get() {
+      if (!last) { start(); return { state: 'computing', why: 'counting agent dispatches in the session logs — the first pass over a large history takes a minute' }; }
+      if (now() - at > ttlMs) { start(); return { ...last, refreshing: true }; }
+      return last;
+    },
+  };
+}

package/board/scripts/lib/required-reviewers.mjs

@@ -0,0 +1,137 @@
+/**
+ * required-reviewers — which domain reviewers a project must have run, read from its
+ * `.great_cto/PROJECT.md`.
+ *
+ * The product says it wires the right reviewers for a project's archetype and
+ * compliance. Against this machine's session logs (30.06–21.09) and 22 registered
+ * projects, it did not: pci-reviewer was needed by 7 projects and dispatched once;
+ * enterprise-saas, us-privacy and voice-ai reviewers were needed by 3–5 and never ran.
+ * Nothing required them — `pipeline-state` made only QA and security mandatory, and
+ * the auto-attach hook matched file paths, never the archetype.
+ *
+ * The registry below is the CLI's (packages/cli/src/archetypes.ts REVIEWERS_BY_ARCHETYPE,
+ * packs.ts PACK_REVIEWERS), which plugin scripts cannot import from TypeScript;
+ * tests/lib/required-reviewers.test.mjs fails when the two drift.
+ */
+import { readFileSync, existsSync } from 'node:fs';
+import { join } from 'node:path';
+
+export const REVIEWERS_BY_ARCHETYPE = {
+  "web-service": ["security-officer"],
+  "mobile-app": ["mobile-store-reviewer", "security-officer"],
+  "ai-system": ["ai-security-reviewer", "ai-prompt-architect", "ai-eval-engineer"],
+  "agent-product": ["ai-security-reviewer", "ai-prompt-architect", "ai-eval-engineer"],
+  "mlops": ["mlops-reviewer", "ai-security-reviewer"],
+  "data-platform": ["data-platform-reviewer"],
+  "streaming": ["streaming-reviewer"],
+  "infra": ["infra-reviewer"],
+  "library": ["library-reviewer"],
+  "cli-tool": ["cli-reviewer"],
+  "commerce": ["pci-reviewer", "security-officer"],
+  "marketplace": ["marketplace-reviewer", "pci-reviewer"],
+  "fintech": ["pci-reviewer", "regulated-reviewer"],
+  "healthcare": ["healthcare-reviewer", "security-officer"],
+  "web3": ["oracle-reviewer"],
+  "iot-embedded": ["firmware-reviewer"],
+  "regulated": ["regulated-reviewer"],
+  "devtools": ["devtools-reviewer"],
+  "browser-extension": ["web-store-reviewer"],
+  "game": ["game-reviewer"],
+  "cms": ["cms-reviewer"],
+  "enterprise-saas": ["enterprise-saas-reviewer"],
+  "edtech": ["edtech-reviewer"],
+  "gov-public": ["gov-reviewer", "security-officer"],
+  "insurance": ["insurance-reviewer", "regulated-reviewer"],
+  "legal": ["legal-reviewer", "security-officer"],
+  "defense-govcon": ["cmmc-reviewer", "gov-reviewer", "security-officer"],
+  "vertical-saas": ["security-officer"],
+  "booking": ["pci-reviewer", "security-officer"],
+  "crm": ["security-officer"],
+  "dashboard": ["security-officer"],
+  "content-platform": ["pci-reviewer", "security-officer"],
+  "marketplace-lite": ["pci-reviewer", "security-officer"],
+  "greenfield": [],
+};
+
+export const PACK_REVIEWERS = {
+  "voice-pack": [
+    "voice-ai-reviewer"
+  ],
+  "hr-ai-pack": [
+    "hr-ai-reviewer"
+  ],
+  "api-platform-pack": [
+    "api-platform-reviewer"
+  ],
+  "adtech-privacy-pack": [
+    "adtech-privacy-reviewer",
+    "us-privacy-reviewer"
+  ],
+  "us-ai-pack": [
+    "us-ai-reviewer"
+  ]
+};
+
+/** A compliance token in PROJECT.md → the reviewer that owns it. Matched as whole tokens. */
+export const COMPLIANCE_REVIEWERS = [
+  { token: /\bpci(?:-dss)?\b/i, reviewer: 'pci-reviewer' },
+  { token: /\bhipaa\b/i, reviewer: 'healthcare-reviewer' },
+  { token: /\btcpa\b/i, reviewer: 'voice-ai-reviewer' },
+  { token: /\bgdpr\b/i, reviewer: 'gdpr-reviewer' },
+  { token: /\b(?:ccpa|cpra|us-privacy)\b/i, reviewer: 'us-privacy-reviewer' },
+  { token: /\bdpdpa\b/i, reviewer: 'dpdpa-reviewer' },
+  { token: /\bcmmc\b/i, reviewer: 'cmmc-reviewer' },
+];
+
+// QA and security are already mandatory for every build (pipeline-state MANDATORY);
+// this module is about the domain reviewers the project's own declaration implies.
+const ALWAYS_MANDATORY = new Set(['security-officer', 'qa-engineer']);
+
+const field = (text, key) => {
+  const m = String(text).match(new RegExp(`^${key}:\\s*(.*)$`, 'm'));
+  return m ? m[1].trim() : null;
+};
+const listOf = (v) => (v ? v.replace(/^\[|\]$/g, '').split(',').map((s) => s.trim().replace(/^["']|["']$/g, '')).filter(Boolean) : []);
+
+/**
+ * @param {string} projectMd  the text of .great_cto/PROJECT.md
+ * @returns {{agent:string, why:string}[]}  each required reviewer once, with every reason
+ */
+export function requiredReviewers(projectMd) {
+  const out = new Map();
+  const add = (agent, why) => {
+    if (ALWAYS_MANDATORY.has(agent)) return;
+    const prev = out.get(agent);
+    out.set(agent, prev ? `${prev}; ${why}` : why);
+  };
+  // `primary:` is sometimes a display label (`developer-tools`) beside a registry key in
+  // `archetype:` (`devtools`); the first value the registry knows decides.
+  const archetypeName = ['primary', 'archetype']
+    .map((k) => (field(projectMd, k) || '').split(/\s|#/)[0])
+    .find((v) => v && REVIEWERS_BY_ARCHETYPE[v]) || null;
+  for (const r of REVIEWERS_BY_ARCHETYPE[archetypeName] || []) add(r, `archetype ${archetypeName}`);
+  for (const p of listOf(field(projectMd, 'packs'))) for (const r of PACK_REVIEWERS[p] || []) add(r, `pack ${p}`);
+  const compliance = field(projectMd, 'compliance') || '';
+  for (const { token, reviewer } of COMPLIANCE_REVIEWERS) {
+    const m = compliance.match(token);
+    if (m) add(reviewer, `compliance ${m[0]}`);
+  }
+  return [...out].map(([agent, why]) => ({ agent, why }));
+}
+
+/**
+ * Required reviewers for a project directory, each with whether a verdict exists.
+ * A verdict is a non-empty line in .great_cto/verdicts/<agent>.log — evidence the
+ * reviewer ran for this project, not for which feature.
+ * @returns {{state:'read'|'no-project', reviewers:{agent:string, why:string, verdict:boolean}[]}}
+ */
+export function reviewerStatus(projectDir) {
+  const pm = join(projectDir, '.great_cto', 'PROJECT.md');
+  if (!existsSync(pm)) return { state: 'no-project', reviewers: [] };
+  const reviewers = requiredReviewers(readFileSync(pm, 'utf8')).map((r) => {
+    let verdict = false;
+    try { verdict = /\S/.test(readFileSync(join(projectDir, '.great_cto', 'verdicts', `${r.agent}.log`), 'utf8')); } catch { /* no log: never ran here */ }
+    return { ...r, verdict };
+  });
+  return { state: 'read', reviewers };
+}

package/board/scripts/lib/verdict-record.mjs

@@ -202,6 +202,12 @@ export function parseVerdictLine(line) {
     // is a verdict this system knows. Neither position matching leaves the
     // original reading in place rather than guessing a different wrong one.
     const parts = raw.split(/\s+/);
+    // `2026-07-12 15:47:00 PASS …` — a date and a time written with a space, as
+    // one project's QA log was. Read as two tokens, the time became the verdict
+    // and a passing QA read as no verdict at all.
+    if (/^\d{4}-\d{2}-\d{2}$/.test(parts[0] || '') && /^\d{2}:\d{2}(:\d{2}(\.\d+)?)?(Z|[+-]\d{2}:?\d{2})?$/.test(parts[1] || '')) {
+      parts.splice(0, 2, `${parts[0]}T${parts[1]}`);
+    }
     ts = parts[0] || '';
     const known = (t) => KNOWN_VERDICTS.includes(String(t || '').toUpperCase());
     if (!known(parts[1]) && known(parts[2])) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "great-cto",
-  "version": "3.29.1",
+  "version": "3.31.0",
   "description": "One command install for the great_cto Claude Code plugin. Auto-detects your stack, picks the right archetype, bootstraps PROJECT.md.",
   "keywords": [
     "claude-code",