gsdd-cli 0.16.1 → 0.18.1

package/distilled/EVIDENCE-INDEX.md

@@ -286,7 +286,172 @@
 - `distilled/workflows/map-codebase.md` (completion offers `/gsdd-quick` as the brownfield lane)
 - `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`
 
----
+## D40 — Three-Layer Continuity Boundary
+- Phase 7 continuity review across all 14 workflow files: durable artifacts and live-state artifacts were present, but compressed judgment was not explicitly modeled
+- D12 and D26: artifact/state continuity existed already, but without a named three-layer boundary
+- `.planning/SPEC.md` (Continuity Layers constraint, Key Decisions row)
+- `distilled/workflows/resume.md` (first workflow adopting the boundary directly)
+
+## D41 — Compressed Judgment Persistence Surface
+- Phase 8 review of `plan.md`, `execute.md`, `verify.md`, and `resume.md` as the four judgment-recovery entry points
+- `distilled/workflows/pause.md` (checkpoint `<judgment>` write)
+- `distilled/workflows/execute.md` (`SUMMARY.md` `<judgment>` write and prior-summary read)
+- `distilled/workflows/plan.md`, `distilled/workflows/verify.md`, `distilled/workflows/resume.md` (judgment reads)
+- `.planning/SPEC.md` (Key Decisions row)
+
+## D42 — Session-Boundary Safety
+- `distilled/workflows/resume.md` (`.continue-here.bak` retained across dispatch)
+- `distilled/workflows/plan.md`, `distilled/workflows/execute.md`, `distilled/workflows/verify.md`, `distilled/workflows/quick.md` (fallback `.bak` judgment reads)
+- `distilled/workflows/pause.md` (stale `.bak` crash-cleanup path)
+- `tests/gsdd.guards.test.cjs`, `tests/gsdd.invariants.test.cjs`
+
+## D43 — Resume Provenance Truth Split
+- `.internal-research/gaps.md` (`I29`, `I30`)
+- `.internal-research/TODO.md` (stale checkpoint/worktree drift notes)
+- `.internal-research/consumer-audits/worktree-provenance-and-checkpoint-drift-2026-04-12.md`
+- `distilled/workflows/pause.md`, `distilled/workflows/resume.md`
+- `bin/lib/provenance.mjs`
+- `tests/phase.test.cjs`, `tests/gsdd.guards.test.cjs`, `tests/gsdd.invariants.test.cjs`
+
+## D44 — Warning-First Transition Safety And Fail-Closed Terminal Writes
+- `.planning/SPEC.md` (`LAUNCH-12`, `LAUNCH-13`)
+- `.planning/ROADMAP.md` (Phase 20 and Phase 22 scope notes)
+- `distilled/workflows/plan.md`, `execute.md`, `quick.md`, `new-milestone.md`, `complete-milestone.md`
+- `distilled/workflows/verify.md`, `distilled/workflows/audit-milestone.md`
+- `bin/lib/provenance.mjs`
+- `tests/gsdd.guards.test.cjs`, `tests/gsdd.invariants.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+
+## D45 — Fork-Honest Launch Posture Before Identity Migration
+- `.planning/SPEC.md` (v1.2.0 active requirements and posture)
+- `.planning/ROADMAP.md` (Phase 23-27 ownership)
+- `.internal-research/TODO.md`, `.internal-research/gaps.md` (`I39`), `.internal-research/lessons-learned.md`
+- `.internal-research/release-jury-verdict-2026-04-15.md`
+- `.internal-research/release-jury-public-truth-drift-2026-04-15.md`
+- `.internal-research/public-release-two-layer-brief-2026-04-15.md`
+- `get-shit-done/workflows/progress.md`
+
+## D46 — Archived Milestone Routing With Retained ROADMAP
+- `.internal-research/gaps.md` (`I39`)
+- `.planning/MILESTONES.md`
+- `.planning/v1.1-MILESTONE-AUDIT.md`
+- `distilled/workflows/progress.md`
+- `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`, `tests/gsdd.health.test.cjs`
+- `get-shit-done/workflows/progress.md`
+
+## D47 — Brownfield Quick-Win Repair
+- `.planning/SPEC.md` (`DX-03`, `BROWNFIELD-01`)
+- `distilled/workflows/quick.md`, `distilled/workflows/progress.md`
+- `distilled/workflows/new-project.md`, `distilled/workflows/map-codebase.md`
+- `README.md`, `docs/USER-GUIDE.md`, `distilled/README.md`
+- `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`, `tests/gsdd.invariants.test.cjs`
+
+## D48 — Shared Lifecycle Evaluator And Dual-Canonical Runtime Boundary
+- `.planning/SPEC.md` (`ENGINE-01`, `ENGINE-02`, `ENGINE-05`)
+- `.planning/ROADMAP.md` (Phases 29 and 32)
+- `.internal-research/TODO.md`, `.internal-research/gaps.md` (`I42`)
+- `bin/lib/lifecycle-state.mjs`, `bin/lib/health.mjs`, `bin/lib/health-truth.mjs`
+- `tests/phase.test.cjs`, `tests/gsdd.health.test.cjs`, `tests/gsdd.guards.test.cjs`
+- `get-shit-done/workflows/progress.md`
+
+## D49 — Deterministic Lifecycle Preflight Gates
+- `.planning/SPEC.md` (`ENGINE-01`, `ENGINE-02`, `ENGINE-03`)
+- `.planning/ROADMAP.md` (Phase 30)
+- `bin/lib/lifecycle-preflight.mjs`, `bin/lib/lifecycle-state.mjs`
+- `bin/gsdd.mjs`, `bin/lib/init.mjs`
+- `distilled/workflows/execute.md`, `distilled/workflows/verify.md`
+- `distilled/workflows/audit-milestone.md`, `distilled/workflows/complete-milestone.md`
+- `distilled/workflows/new-milestone.md`, `distilled/workflows/resume.md`, `distilled/workflows/progress.md`
+- `tests/phase.test.cjs`, `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+- `get-shit-done/workflows/progress.md`
+
+## D50 — Evidence-Gated Closure Matrix
+- `.planning/SPEC.md` (`ENGINE-04`, `VERIFY-01`)
+- `.planning/ROADMAP.md` (Phase 31)
+- `bin/lib/evidence-contract.mjs`, `bin/lib/lifecycle-preflight.mjs`
+- `distilled/workflows/verify.md`, `distilled/workflows/audit-milestone.md`, `distilled/workflows/complete-milestone.md`
+- `tests/phase.test.cjs`, `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+- `agents/_archive/gsd-verifier.md`, `agents/_archive/gsd-integration-checker.md`
+
+## D51 — Deterministic Runtime Surface Freshness
+- `.planning/SPEC.md` (`ENGINE-05`)
+- `.planning/ROADMAP.md` (Phase 32)
+- `.internal-research/gaps.md` (`I42`)
+- `bin/lib/runtime-freshness.mjs`, `bin/lib/health.mjs`, `bin/lib/health-truth.mjs`, `bin/lib/rendering.mjs`
+- `bin/adapters/claude.mjs`, `bin/adapters/opencode.mjs`, `bin/adapters/codex.mjs`
+- `README.md`, `docs/RUNTIME-SUPPORT.md`, `distilled/README.md`
+- `tests/phase.test.cjs`, `tests/gsdd.health.test.cjs`, `tests/gsdd.plan.adapters.test.cjs`, `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+- `get-shit-done/workflows/progress.md`
+
+## D52 — Generic Checkpoint Routing Ownership
+- `.planning/SPEC.md` (`ENGINE-01`, `ENGINE-03`)
+- `.internal-research/gaps.md` (`I45`)
+- `bin/lib/provenance.mjs`
+- `distilled/workflows/resume.md`, `distilled/workflows/progress.md`
+- `.agents/skills/gsdd-resume/SKILL.md`, `.agents/skills/gsdd-progress/SKILL.md`
+- `tests/phase.test.cjs`, `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+- `get-shit-done/workflows/progress.md`
+
+## D53 — Fail-Closed Milestone And Phase Contracts
+- `.planning/SPEC.md` (`PLAN-03`, v1.5.0 Current State, key decision on anti-drift milestone/phase contracts)
+- `.planning/ROADMAP.md` (v1.5.0 Phases 39-43 with requirement assignments, success criteria, out-of-scope, and stop/replan conditions)
+- `.internal-research/TODO.md` (active milestone reconciliation and next-step truth)
+- `.internal-research/lessons-learned.md` (`LL-PLANS-MUST-CARRY-THE-ANTI-DRIFT-CONTRACT`, `LL-ACTIVE-MILESTONE-TRUTH-MUST-STAY-SYNCHRONIZED`, `LL-AMBIGUITY-ABOUT-INTENT-MUST-STOP-EXECUTION`)
+- `.agents/skills/gsdd-new-milestone/SKILL.md`, `.agents/skills/gsdd-plan/SKILL.md`, `.agents/skills/gsdd-execute/SKILL.md`, `.agents/skills/gsdd-verify/SKILL.md`
+- `get-shit-done/workflows/new-milestone.md`, `get-shit-done/workflows/plan.md`
+- OpenSpec concepts/workflows, LeanSpec guide/limits, OpenAI practical guide to building agents, Anthropic effective/trustworthy agents, GitHub Copilot task best practices
+
+## D54 — Bounded Brownfield Change Folder Contract
+- `.planning/SPEC.md` (`BROWNFIELD-01` through `BROWNFIELD-05`, v1.5.0 Current State, key decision row)
+- `.planning/ROADMAP.md` (Phase 40 success criteria plus follow-on Phases 41-43)
+- `.planning/templates/brownfield-change/CHANGE.md`
+- `.planning/templates/brownfield-change/HANDOFF.md`
+- `.planning/templates/brownfield-change/VERIFICATION.md`
+- `.internal-research/TODO.md` (Phase 40 execution handoff and Phase 41 next-step ordering)
+- `.internal-research/gaps.md` (`I43`, `I46`)
+- `SPEC.md` (bounded brownfield lane product contract)
+- `tests/gsdd.guards.test.cjs`
+- `get-shit-done/workflows/quick.md`, `get-shit-done/workflows/new-project.md`
+- OpenSpec concepts/getting-started docs, Task Master docs, BMAD workflow map, GitHub Copilot coding-agent best practices
+
+## D55 — Brownfield Continuity Anchor And Mismatch Split
+- `.planning/SPEC.md` (`BROWNFIELD-02`, `BROWNFIELD-05`, Current State, key decision row)
+- `.planning/phases/41-brownfield-continuity-and-resume/41-PLAN.md`
+- `.planning/templates/brownfield-change/CHANGE.md`
+- `.planning/templates/brownfield-change/HANDOFF.md`
+- `bin/lib/lifecycle-state.mjs`
+- `bin/lib/provenance.mjs`
+- `distilled/workflows/progress.md`, `distilled/workflows/resume.md`
+- `tests/phase.test.cjs`, `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+- `get-shit-done/workflows/resume.md`, `get-shit-done/workflows/progress.md`
+
+## D56 — Executable Brownfield Routing And Widen-Only Escalation
+- `.planning/SPEC.md` (`BROWNFIELD-03`, Current State, key decision row)
+- `.planning/phases/42-executable-brownfield-routing/42-PLAN.md`
+- `bin/lib/provenance.mjs`
+- `distilled/workflows/progress.md`, `distilled/workflows/resume.md`, `distilled/workflows/quick.md`, `distilled/workflows/map-codebase.md`, `distilled/workflows/new-project.md`
+- `.internal-research/TODO.md`, `.internal-research/gaps.md`
+- `tests/phase.test.cjs`, `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+- `get-shit-done/workflows/progress.md`, `get-shit-done/workflows/resume.md`, `get-shit-done/workflows/quick.md`, `get-shit-done/workflows/new-project.md`
+
+## D57 — Bounded Brownfield Growth And Context-Preserving Milestone Handoff
+- `.planning/SPEC.md` (`BROWNFIELD-04`, Current State, key decision row)
+- `.planning/phases/43-bounded-growth-and-milestone-handoff/43-PLAN.md`
+- `.planning/templates/brownfield-change/CHANGE.md`
+- `.planning/templates/brownfield-change/HANDOFF.md`
+- `.planning/templates/brownfield-change/VERIFICATION.md`
+- `distilled/workflows/progress.md`, `distilled/workflows/resume.md`, `distilled/workflows/new-project.md`, `distilled/workflows/new-milestone.md`
+- `.internal-research/TODO.md`, `.internal-research/gaps.md`, `.internal-research/lessons-learned.md`
+- `tests/phase.test.cjs`, `tests/gsdd.guards.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+- `get-shit-done/workflows/new-project.md`, `get-shit-done/workflows/quick.md`
+
+## D58 — Local Workflow Helper Launcher
+- `bin/lib/rendering.mjs` (`renderPlanningCliLauncher` for a machine-independent local helper launcher)
+- `bin/lib/init-flow.mjs` (`gsdd init` / `gsdd update` generation of `.planning/bin/gsdd.mjs`)
+- `bin/lib/runtime-freshness.mjs`, `bin/lib/manifest.mjs`, `bin/lib/health.mjs`, `bin/lib/health-truth.mjs`
+- `distilled/workflows/execute.md`, `distilled/workflows/verify.md`, `distilled/workflows/resume.md`, `distilled/workflows/progress.md`
+- `tests/gsdd.init.test.cjs`, `tests/gsdd.health.test.cjs`, `tests/gsdd.manifest.test.cjs`, `tests/gsdd.scenarios.test.cjs`
+
+---
 
 ## Maintenance
 

package/distilled/README.md

@@ -1,21 +1,27 @@
-# Northline
+# Workspine
 
-A repo-native workflow kernel for long-horizon AI software delivery.
+A repo-native delivery spine for planning, checking, execution, verification, and handoff of long-horizon AI-assisted work.
 
-Northline gives long-horizon AI-assisted software work a durable repo spine for planning, execution, verification, and handoff. The package and CLI remain `gsdd-cli` / `gsdd`.
+Workspine keeps planning, execution, verification, handoff, and progress state in the repo so work survives cold starts, runtime switches, and session loss. The retained package and CLI contracts remain `gsdd-cli` / `gsdd`.
 
 ## What This Is
 
-Northline is a small set of workflow sources plus a CLI (`gsdd`) that:
+Workspine is a small set of workflow sources plus a CLI (`gsdd`) that:
 - scaffolds a project planning workspace (`.planning/`)
 - generates portable workflow entrypoints as skills (`.agents/skills/gsdd-*/SKILL.md`)
 - optionally generates tool-specific adapters for runtimes that need extra native surfaces (root `AGENTS.md`, Claude skills + plan-command alias + native agents, OpenCode commands + native agents)
 
-It gives serious AI-assisted software work one durable repo workflow spine for planning, execution, verification, and handoff without pretending to be a hosted orchestration layer.
+It gives serious AI-assisted work one durable repo workflow spine for planning, checking, execution, verification, and handoff without pretending to be a hosted orchestration layer.
 
-Launch proof posture:
-- Directly validated in repo truth: Claude Code, Codex CLI, OpenCode
-- Qualified support only: Cursor, Copilot, Gemini CLI via the shared `.agents/skills/` surface plus optional governance
+Workspine is the product name. The package, CLI commands, workflow prefixes, and workspace directory remain `gsdd-cli`, `gsdd`, `gsdd-*`, and `.planning/` — these are retained technical contracts, not rename residue.
+
+Workspine began as a fork of Get Shit Done, whose long-horizon delivery spine proved the problem was real. Since the fork, upstream GSD has continued evolving into a broad multi-runtime framework. Workspine took a different path: a smaller repo-native delivery spine with fewer public workflow surfaces, generated runtime surfaces from a portable core, evidence-gated closure, and provenance-aware continuity.
+
+Launch proof posture:
+- Directly validated in repo truth: Claude Code, Codex CLI, OpenCode
+- Qualified support only: Cursor, Copilot, Gemini CLI support the same core workflow via the shared `.agents/skills/` surface plus optional governance; proof and ergonomics differ from the directly validated runtimes
+- Installed generated runtime surfaces are renderer-checked locally through `gsdd health`, with deterministic repair through `gsdd update`
+- Public proof entrypoints: `docs/BROWNFIELD-PROOF.md`, `docs/proof/consumer-node-cli/README.md`, `docs/RUNTIME-SUPPORT.md`, `docs/VERIFICATION-DISCIPLINE.md`
 
 ## Quick Start
 
@@ -63,32 +69,41 @@ gsdd init                  -> bootstrap (create .planning/, copy templates, gene
 /gsdd-progress             -> show status, route to next action
 ```
 
-## Current Status (updated 2026-04-10)
-
-| Workflow | Status | Notes |
-|----------|--------|-------|
-| `new-project.md` | [OK] Defined, source-audited | Covers greenfield + brownfield + milestone context |
-| `plan.md` | [OK] Defined, source-audited | Portable workflow defines the planner contract and supports independent plan checking through generated native adapters |
-| `execute.md` | [OK] Source-audited | Mandatory read enforcement, auth-gate routing, deviation-rule examples, and substantive summary quality gate |
-| `verify.md` | [OK] Source-audited | 5 gap closures against hardened verifier role contract: grouped-gap guidance, orphan detection, frontmatter enforcement, verification basis emphasis, requirements coverage chain |
-| `audit-milestone.md` | [OK] Defined, source-audited | Aggregates phase verification, cross-phase integration audit, auth protection checks, requirement reconciliation, and orphan detection into `MILESTONE-AUDIT.md` |
-| `complete-milestone.md` | [OK] Defined | Archives milestone, evolves SPEC.md, collapses ROADMAP.md — no gsd-tools.cjs dependency |
-| `new-milestone.md` | [OK] Defined | Brownfield milestone continuation: goals, SPEC.md requirements, ROADMAP.md phases |
-| `plan-milestone-gaps.md` | [OK] Defined (unvalidated) | Gap closure phases from MILESTONE-AUDIT.md results |
-| `quick.md` | [OK] | Quick-work lane for sub-hour tasks outside the phase cycle (D11) |
-| `pause.md` | [OK] Source-audited | Session checkpoint writer with conversational handoff (D12) |
-| `resume.md` | [OK] Source-audited | Session context restorer with priority-ordered routing (D12) |
-| `progress.md` | [OK] Source-audited | Read-only status reporter with 6 named route branches, recent work, between-milestones detection (D12) |
-| `map-codebase.md` | [OK] Defined, source-audited | Standalone codebase mapping/refresh |
-| `verify-work.md` | [OK] Defined | Conversational UAT validation with structured gap tracking |
+## Brownfield Entry Contract
+
+Use the same three-way routing everywhere:
+
+- `gsdd-new-project` is the full initializer for greenfield work, fuzzy brownfield scope, or milestone-shaped work. Users do not need to pre-run `map-codebase`; `new-project` does that internally when needed.
+- `gsdd-quick` is the bounded brownfield lane when the change is already concrete. It uses existing codebase maps when present and otherwise builds a just-enough inline baseline.
+- `gsdd-map-codebase` is the deeper orientation pass for unfamiliar or higher-risk repos before choosing between `quick` and `new-project`.
+
+## Current Status (updated 2026-04-21)
+
+| Workflow | What ships |
+|----------|------------|
+| `new-project.md` | Greenfield + brownfield + milestone initialization |
+| `plan.md` | Portable planner contract with independent plan checking through generated native adapters |
+| `execute.md` | Mandatory reads, auth-gate routing, deviation rules, and substantive summary quality gate |
+| `verify.md` | Phase verification with orphan detection, frontmatter enforcement, and requirements coverage chain |
+| `audit-milestone.md` | Cross-phase integration audit, auth protection checks, requirement reconciliation, and orphan detection into `MILESTONE-AUDIT.md` |
+| `complete-milestone.md` | Milestone archive, spec evolution, and roadmap collapse |
+| `new-milestone.md` | Brownfield milestone continuation: goals, requirements, and roadmap phases |
+| `plan-milestone-gaps.md` | Gap-closure phases from `MILESTONE-AUDIT.md` results |
+| `quick.md` | Quick-work lane for sub-hour tasks outside the phase cycle |
+| `pause.md` | Session checkpoint writer with conversational handoff |
+| `resume.md` | Session context restorer with priority-ordered routing |
+| `progress.md` | Read-only status reporter with recent work, archived-milestone detection, and non-phase brownfield routing |
+| `map-codebase.md` | Standalone codebase mapping/refresh and deeper brownfield orientation |
+| `verify-work.md` | Conversational UAT validation with structured gap tracking |
 
 Architecture notes:
 - `bin/gsdd.mjs` remains the thin generator entrypoint, while vendor-specific rendering lives in adapter modules.
 - Codex CLI uses the always-generated `.agents/skills/gsdd-*` surface as its entry path and can add a native `.codex/agents/gsdd-plan-checker.toml` checker agent.
+- `gsdd health` now compares any installed generated runtime surfaces against current render output and routes repairs back through `gsdd update`.
 - Portable lifecycle contracts now align to the roadmap template status grammar: `[ ]`, `[-]`, `[x]`.
 - Phase verification and milestone integration audit are treated as separate concerns.
 - Canonical role contracts use bounded sections, typed output examples, and checklist-driven completion where those structures materially improve downstream reliability.
-- Public launch wording is conservative by design: direct proof is claimed only for runtimes with recorded lifecycle evidence in `.planning/research/09-RESEARCH.md`.
+- Public launch wording is conservative by design: direct proof is claimed only for runtimes with recorded lifecycle evidence in the repo.
 
 ## Init Workflow Agent Count (by config)
 
@@ -149,7 +164,7 @@ Note: `parallelization: false` keeps the same mapper/researcher set but runs the
 
 ```
 distilled/
-  DESIGN.md                # design decisions and rationale (39 decisions, evidence-backed)
+  DESIGN.md                # design decisions and rationale (58 decisions, evidence-backed)
   EVIDENCE-INDEX.md        # source-to-decision index for durable research-backed claims
   SKILL.md                 # primary entry point (plain markdown)
   workflows/
@@ -178,6 +193,7 @@ distilled/
       mapper-quality.md
       mapper-concerns.md
       plan-checker.md
+      approach-explorer.md
       researcher-stack.md
       researcher-features.md
       researcher-architecture.md

package/distilled/SKILL.md

@@ -1,10 +1,10 @@
 ---
-name: GSDD (Spec-Driven Development)
-description: Disciplined, lightweight workflow for AI-assisted development. Spec first, then build, then verify.
+name: Workspine (published as gsdd-cli)
+description: Disciplined repo-native workflow for AI-assisted development. Spec first, then build, then verify.
 ---
 
 <role>
-You are an AI agent following the GSDD workflow. You are a disciplined engineer, not a code generator.
+You are an AI agent following the Workspine workflow. You are a disciplined engineer, not a code generator.
 Your mandate: understand the problem deeply, specify what "done" looks like, implement with precision, and verify with rigor.
 </role>
 
@@ -45,7 +45,7 @@ Mandatory:
 </governance>
 
 <project_structure>
-GSDD uses `.planning/` as the durable workspace:
+Workspine uses `.planning/` as the durable workspace:
 
 ```
 .planning/

package/distilled/templates/agents.block.md

@@ -7,7 +7,7 @@ Lifecycle: `new-project -> plan -> execute -> verify -> audit-milestone`.
 Core skills: `gsdd-new-project`, `gsdd-plan`, `gsdd-execute`, `gsdd-verify`, `gsdd-progress`.
 Planning state: `.planning/`. Portable workflows: `.agents/skills/gsdd-*/SKILL.md`.
 
-Invoke: `/gsdd-plan` (Claude, OpenCode, Cursor, Copilot, Gemini) · `$gsdd-plan` (Codex) · open SKILL.md directly elsewhere.
+Invoke: `/gsdd-plan` (Claude, OpenCode, Cursor, Copilot, Gemini) · `$gsdd-plan` (Codex, plan-only until `$gsdd-execute`) · open SKILL.md directly elsewhere.
 
 Rules:
 1. Read before writing roadmap work: `.planning/SPEC.md`, `.planning/ROADMAP.md`, `.planning/config.json`, and the relevant phase plan when one exists.

package/distilled/workflows/audit-milestone.md

@@ -13,6 +13,45 @@ Before starting, read these files:
 5. `.planning/AUTH_MATRIX.md` (if it exists) — authorization matrix for matrix-driven auth verification
 </load_context>
 
+<lifecycle_preflight>
+Before determining milestone scope or spawning the integration checker, run:
+
+- `node .planning/bin/gsdd.mjs lifecycle-preflight audit-milestone`
+
+If the preflight result is `blocked`, STOP and report the blocker instead of inferring milestone eligibility from workflow-local prose.
+
+Treat the preflight as an authorization seam over shared repo truth only:
+- it may authorize or reject milestone audit
+- it does not archive or mutate milestone state
+- the owned write for this workflow remains `.planning/v{version}-MILESTONE-AUDIT.md`
+</lifecycle_preflight>
+
+<evidence_contract>
+Use the same fixed closure evidence kinds as verification:
+- `code`
+- `test`
+- `runtime`
+- `delivery`
+- `human`
+
+Determine milestone `delivery_posture` before grading requirements or flows:
+- `repo_only` — the milestone claim is still repo-local and does not depend on shipped runtime or release proof
+- `delivery_sensitive` — the milestone claims shipped UX, release/install behavior, published proof, or other externally consumed runtime outcomes
+
+Apply the shared `audit-milestone` matrix:
+
+| delivery_posture     | required evidence                | recommended evidence | cannot carry closure alone |
+| -------------------- | -------------------------------- | -------------------- | -------------------------- |
+| `repo_only`          | `code`, `test`                   | `runtime`, `human`   | `human`, `delivery`        |
+| `delivery_sensitive` | `code`, `test`, `runtime`, `delivery` | `human`              | `code`, `human`            |
+
+Rules:
+- repo-only milestones must not invent `runtime` or `delivery` proof just because the audit template mentions them
+- delivery-sensitive audits must not pass on phase prose, code inspection, or tests alone; required `runtime` and `delivery` evidence must be explicitly present
+- `human` evidence is supportive only at audit level unless the audit is already otherwise satisfied
+- record the selected `delivery_posture`, `required_kinds`, `observed_kinds`, and `missing_kinds` in audit frontmatter so completion inherits the same closure contract
+</evidence_contract>
+
 <process>
 
 ## 1. Determine Milestone Scope
@@ -70,6 +109,7 @@ Either way, the integration check happens. The quality level is documented.
 Combine:
 - Phase-level gaps and tech debt (from step 2)
 - Integration checker's report (wiring gaps, auth gaps, broken flows, requirements integration map)
+- Evidence observations by kind (`code`, `test`, `runtime`, `delivery`, `human`) from phase verifications, summaries, integration findings, and delivery metadata
 
 ## 5. 3-Source Cross-Reference
 
@@ -125,6 +165,11 @@ milestone: v{version}
 audited: {ISO-8601 timestamp}
 status: passed | gaps_found | tech_debt
 reduced_assurance: false
+delivery_posture: repo_only | delivery_sensitive
+evidence_contract:
+  required_kinds: [code, test]
+  observed_kinds: [code, test]
+  missing_kinds: []
 scores:
   requirements: N/M
   phases: N/M
@@ -160,6 +205,11 @@ Plus full markdown report body with tables for requirements, phases, integration
 - `gaps_found` - critical blockers exist (unsatisfied requirements, unprotected sensitive flows, broken flows, or missing verifications)
 - `tech_debt` - no blockers but accumulated deferred items need review
 
+Evidence gate:
+- a `passed` audit must have no `missing_kinds` for the selected `delivery_posture`
+- `delivery_sensitive` audits cannot pass without explicit `runtime` and `delivery` evidence
+- `repo_only` audits cannot be downgraded merely because `runtime` or `delivery` evidence was never relevant
+
 **MANDATORY: The milestone audit report must exist at `.planning/v{version}-MILESTONE-AUDIT.md` on disk before presenting results. If the file was not written, STOP and report the write failure. Do NOT present audit results from conversation context alone — this is the highest-cost artifact to regenerate. Do NOT downgrade a write failure into "results shown inline anyway."**
 
 ## 7. Present Results

package/distilled/workflows/complete-milestone.md

@@ -25,6 +25,41 @@ Before starting, read these files:
 6. Most recent `.planning/v*-MILESTONE-AUDIT.md` — audit status (passed / gaps_found)
 </load_context>
 
+<lifecycle_preflight>
+Before verifying readiness or gathering archive stats, run:
+
+- `node .planning/bin/gsdd.mjs lifecycle-preflight complete-milestone`
+
+If the preflight result is `blocked`, STOP and report the blocker instead of inferring milestone-close eligibility from workflow-local prose.
+
+Treat the preflight as an authorization seam over shared repo truth only:
+- it may authorize or reject milestone completion
+- it does not mutate lifecycle state by itself
+- owned writes remain the archive artifacts, `MILESTONES.md`, `.planning/SPEC.md`, and the retained `ROADMAP.md` collapse
+</lifecycle_preflight>
+
+<evidence_contract>
+Milestone completion inherits the closure posture proven by the passed milestone audit.
+
+Stable evidence kinds carried forward from audit:
+- `code`
+- `test`
+- `runtime`
+- `delivery`
+- `human`
+
+Read the audit frontmatter and preserve:
+- `delivery_posture`
+- `evidence_contract.required_kinds`
+- `evidence_contract.observed_kinds`
+- `evidence_contract.missing_kinds`
+
+Shared closure rules:
+- `repo_only` completion may proceed with repo-local closure evidence only; do not invent `runtime` or `delivery` proof
+- `delivery_sensitive` completion must not proceed on code/prose-only evidence; the audit must already show required `code`, `test`, `runtime`, and `delivery` evidence with no missing required kinds
+- if the audit omits the evidence contract or still has missing required kinds, STOP and route back to `/gsdd-audit-milestone` or `/gsdd-plan-milestone-gaps` instead of silently closing the milestone
+</evidence_contract>
+
 <process>
 
 ## 1. Verify Readiness
@@ -32,10 +67,11 @@ Before starting, read these files:
 Check:
 - **Phase completion**: Are all ROADMAP.md phases for this milestone marked `[x]`? List any that are not.
 - **Audit status**: Does a MILESTONE-AUDIT.md exist and have status `passed`? If it has status `gaps_found`, the milestone has open gaps.
+- **Audit evidence posture**: Does the passed audit frontmatter include `delivery_posture` and an `evidence_contract` block with no missing required kinds?
 - **Spent-branch guard**: Run `git branch --merged origin/main` (substitute `master` or the configured default branch from `config.json → gitProtocol.branch` if different) and verify HEAD is not a spent/already-merged branch. If the current branch already backs a merged PR, STOP - do not instruct any commit or tag operations. Prompt the user to check out a fresh active branch before continuing.
 - **Integration-surface warning pass**: Inspect staged, unstaged, untracked, unpushed, and PR-less local truth separately from the milestone artifacts. Warn if the archive is being attempted from a mixed-scope or stale branch even when the milestone documents themselves look complete.
 
-**If phases incomplete or audit not passed:**
+**If phases incomplete, audit not passed, or the audit evidence contract is missing/insufficient:**
 
 Present options:
 1. **Proceed anyway** — archive with known gaps noted in MILESTONES.md
@@ -47,7 +83,7 @@ Present options:
 
 Exception: if `config.json -> mode` is `yolo`, skip the stop gate and proceed with a note about any gaps.
 
-**If all phases complete and audit passed:** Proceed.
+**If all phases complete, audit passed, and the audit evidence contract is satisfied:** Proceed.
 
 ## 2. Determine Version
 

package/distilled/workflows/execute.md

@@ -14,9 +14,22 @@ CRITICAL: Read every file below before performing any other actions. This is you
 4. Previous phase summaries beyond the immediately prior completed phase, if they are genuinely relevant
 5. Relevant source files listed in the plan's `<files>` sections
 6. `.planning/phases/*-SUMMARY.md` for the immediately prior completed phase - if a `<judgment>` section is present, read all four sub-sections. Honor `<anti_regression>` rules as execution constraints. Use `<active_constraints>` and `<decision_posture>` to calibrate deviation decisions.
-7. **Session-boundary fallback:** If no prior completed phase SUMMARY.md with a `<judgment>` section was found in step 6, check whether `.planning/.continue-here.bak` exists. If it does, read its `<judgment>` section. Honor `<anti_regression>` rules as execution constraints and use `<active_constraints>` and `<decision_posture>` to calibrate deviation decisions. After reading, run `gsdd file-op delete .planning/.continue-here.bak --missing ok` (auto-clean).
+7. **Session-boundary fallback:** If no prior completed phase SUMMARY.md with a `<judgment>` section was found in step 6, check whether `.planning/.continue-here.bak` exists. If it does, read its `<judgment>` section. Honor `<anti_regression>` rules as execution constraints and use `<active_constraints>` and `<decision_posture>` to calibrate deviation decisions. After reading, run `node .planning/bin/gsdd.mjs file-op delete .planning/.continue-here.bak --missing ok` (auto-clean).
 </load_context>
 
+<lifecycle_preflight>
+Before implementing or mutating any lifecycle artifact, run:
+
+- `node .planning/bin/gsdd.mjs lifecycle-preflight execute {phase_num} --expects-mutation phase-status`
+
+If the preflight result is `blocked`, STOP and surface the blocker instead of inferring eligibility from workflow-local prose.
+
+Treat the preflight as an authorization seam over shared repo truth only:
+- it may authorize or reject execution
+- it does not mutate `.planning/ROADMAP.md` by itself
+- owned writes remain execution artifacts, and ROADMAP mutation stays explicit in `<state_updates>` via `node .planning/bin/gsdd.mjs phase-status`
+</lifecycle_preflight>
+
 <runtime_contract>
 Execution uses the same `Runtime` and `Assurance` types as planning and verification.
 Infer runtime from the launching surface when obvious: `.claude/` -> `claude-code`, `.codex/` or Codex portable skill -> `codex-cli`, `.opencode/` -> `opencode`, otherwise `other`.
@@ -273,8 +286,8 @@ Keep the update factual and compact:
 ### 2. Update ROADMAP.md Phase Status
 Do not hand-edit the ROADMAP checkbox line. Use the status-aware helper instead:
 
-- Run `gsdd phase-status {N} done` when this plan completes the phase.
-- Run `gsdd phase-status {N} in_progress` when this plan completes but more plans remain in the phase.
+- Run `node .planning/bin/gsdd.mjs phase-status {N} done` when this plan completes the phase.
+- Run `node .planning/bin/gsdd.mjs phase-status {N} in_progress` when this plan completes but more plans remain in the phase.
 
 The helper owns the `[ ]` / `[-]` / `[x]` mutation for `.planning/ROADMAP.md`.
 

package/distilled/workflows/map-codebase.md

@@ -1,5 +1,5 @@
 <role>
-You are a Codebase Mapper Orchestrator. You analyze an existing codebase using 4 specialized mapper delegates, each focused on one dimension. The delegates write their documents directly -- you only coordinate, validate, and summarize.
+You are a Codebase Mapper Orchestrator. You analyze an existing codebase using 4 specialized mapper delegates, each focused on one dimension. The delegates write their documents directly -- you only coordinate, validate, and synthesize a bounded brownfield routing summary from their results.
 
 Output: `.planning/codebase/` with 4 structured documents about the codebase state.
 </role>
@@ -9,11 +9,13 @@ Use this workflow when:
 - Starting work on a brownfield (existing) codebase for the first time
 - Codebase maps are missing or stale (major refactors, dependency upgrades, new modules)
 - Explicitly requested as a standalone re-mapping
+- You want a deeper brownfield orientation pass before choosing between bounded `quick` work and full `new-project` setup
 
 Do NOT use when:
 - Greenfield project with no existing code
 - Maps already exist and are fresh (use Skip)
 - You are in the middle of a plan/execute/verify cycle (use existing maps)
+- You only need a small bounded brownfield change and the repo is already familiar enough for `quick` to build an inline baseline safely
 </when_to_use>
 
 <load_context>
@@ -146,6 +148,7 @@ These 4 documents are consumed by downstream GSDD workflows:
 | `plan` (future) | ARCHITECTURE + CONVENTIONS for implementation planning |
 | `execute` (future) | CONVENTIONS for code style, ARCHITECTURE for file placement |
 | `verify` (future) | CONCERNS for regression awareness |
+| `/gsdd-quick` | All 4 -- bounded brownfield context for safe feature work |
 
 **What this means for mapper output quality:**
 
@@ -230,9 +233,17 @@ Report to the user what was accomplished, then present the next step:
 ---
 **Completed:** Codebase mapping — 4 documents written to `.planning/codebase/` (STACK.md, ARCHITECTURE.md, CONVENTIONS.md, CONCERNS.md).
 
-**Next step:** Choose based on what you need:
-- `/gsdd-new-project` — full project initialization (spec, roadmap, phased delivery)
-- `/gsdd-quick` — brownfield feature work without full ceremony (bug fixes, small features, one-off tasks)
+**Brownfield routing summary:** Synthesize this directly from the 4 generated documents before recommending the next workflow.
+- Safest next change lane — which module or surface looks cheapest and safest to modify first
+- Highest-risk zones — areas to avoid or isolate unless the task explicitly needs them
+- Must-know traps — convention, dependency, or architecture constraints likely to cause mistakes
+- Recommended next workflow — choose `/gsdd-quick` for bounded brownfield work or `/gsdd-new-project` only when the user intentionally wants to widen into full lifecycle setup, and say why
+
+Use only the 4 generated documents for this synthesis. Do NOT create a fifth persistent artifact or write an additional routing-summary file.
+
+**Next step:** Choose based on what you need:
+- `/gsdd-new-project` — full project initialization (spec, roadmap, phased delivery), especially when you intentionally want to widen beyond the current bounded brownfield lane
+- `/gsdd-quick` — bounded brownfield feature work without full ceremony (bug fixes, small features, one-off tasks)
 
 Also available:
 - `/gsdd-map-codebase` — re-map if results need refinement