its-magic 0.1.2-37 → 0.1.2-39

package/template/.cursor/agents/po.mdc

@@ -115,6 +115,25 @@ Mandatory intake question packs (`US-0068` / `DEC-0050`):
   on failure emit deterministic codes (`INTAKE_REQUIRED_TOPIC_MISSING`,
   `INTAKE_ASSUMPTION_CONFIRMATION_REQUIRED`, umbrella `INTAKE_PERSISTENCE_BLOCKED`) and **abort** writes.
   **`INTAKE_GUIDED_MODE=0`** uses the **same** validation pipeline as guided mode.
+- **US-0083 / DEC-0067**: for explicitly delegated unresolved required topics, set
+  `topic_coverage[].satisfied_by=delegation_ref` with bounded metadata
+  (`delegation_scope`, `delegation_rationale`, `delegation_confidence=low|medium|high`);
+  missing/malformed delegation rows fail closed with
+  `INTAKE_DELEGATION_EVIDENCE_MISSING` / `INTAKE_DELEGATION_EVIDENCE_INVALID`
+  under umbrella `INTAKE_PERSISTENCE_BLOCKED`.
+- **US-0083 AC-1 accounting**: if equivalent evidence was already captured, avoid repetitive
+  re-asking by recording `evidence_source=equivalent_evidence_ref` plus
+  `equivalent_evidence_ref` for that `topic_coverage` row (required-topic accounting stays explicit).
+- **US-0081 / DEC-0064**: for `first-intake-pack` (first/new/broad) persist
+  full-plan coverage contract fields and block persistence unless:
+  - `plan_area_inventory` is normalized and has unique valid `plan_area_id`,
+  - `plan_area_coverage` has exactly one row per `plan_area_id`,
+  - each row uses xor mapping (`story_ids[]` or `deferred_ref` +
+    `deferred_reason`),
+  - `coverage_complete=true` matches derived validator result.
+  Emit deterministic subcodes under umbrella `INTAKE_PERSISTENCE_BLOCKED`:
+  `INTAKE_PLAN_COVERAGE_MISSING`, `INTAKE_PLAN_AREA_ID_INVALID`,
+  `INTAKE_PLAN_COVERAGE_CONTRACT_INVALID`, `INTAKE_PLAN_DEFERRED_REF_MISSING`.
 - **US-0079 / DEC-0061**: for **defect** work use **`INTAKE_WORK_ITEM_KIND=bug`** and/or **`/intake bug`**;
   run **`python scripts/intake_bug_routing_guard.py`** when allocating **`US-xxxx`** for ambiguous prose;
   persist **`BUG-####`** under **`## Bug issues (canonical)`** with required fields and validate with

package/template/.cursor/commands/architecture.md

@@ -86,6 +86,18 @@ description: "its-magic architecture: define approach, risks, and decisions."
      `ARTIFACT_HOT_SURFACE_OVERSIZE`,
    - preserve non-target history in archive packs only (never delete unrelated
      story sections without archival evidence).
+10. Codebase map lifecycle gate (US-0082 / DEC-0065) — before handoff to
+    `/sprint-plan`, from repository root run:
+    `python scripts/materialize_codebase_map.py --trigger architecture`
+    - On success, stdout includes `[CODEBASE_MAP_OK]` (created, noop, or
+      `preserved_existing` when a non-bootstrap map is left untouched).
+    - On `CODEBASE_MAP_BLOCKED:<subreason>` or non-zero exit after a failed
+      materialization policy, stop the phase with that token; remediation is on
+      stdout (run `/map-codebase`; see runbook **Codebase map bootstrap** and
+      `docs/engineering/architecture.md` **# US-0082**).
+    - The script writes only `docs/engineering/codebase-map.md` and
+      `docs/engineering/dependencies.json` (same surfaces as `/map-codebase`);
+      do not use it to bulk-append `state.md`.
 
 ## Cross-phase ownership guard (US-0061 / DEC-0043)
 

package/template/.cursor/commands/ask.md

@@ -35,6 +35,17 @@ Preferred read order:
 - Reference stories (**`US-xxxx`**), bug issues (**`BUG-####`**), decisions (**`DEC-xxxx`**), and tasks (**`T-xxx`**) by ID.
 - Suggest next actions but do not execute them.
 - If the question reveals a bug or feature idea, suggest running `/intake`.
+- For **`docs/engineering/codebase-map.md`** bootstrap vs manual refresh, cite
+  **US-0082 / DEC-0065**: primary lifecycle owner is **`/architecture`**
+  (materializer: `python scripts/materialize_codebase_map.py --trigger architecture`);
+  optional policy-gated refresh at **`/refresh-context`** when
+  `CODEBASE_MAP_REFRESH_ON_ROLLOVER=1`; explicit/manual full pass remains
+  **`/map-codebase`**. Deterministic diagnostics: `CODEBASE_MAP_MISSING`,
+  `CODEBASE_MAP_BLOCKED:<subreason>` (see runbook **Codebase map bootstrap**).
+- For first/new/broad intake policy questions, cite **US-0081 / DEC-0064**:
+  complete-plan mapping (`plan_area_inventory`, `plan_area_coverage`,
+  `coverage_complete`) is required, and persistence blocks on
+  `INTAKE_PLAN_COVERAGE_MISSING` under umbrella `INTAKE_PERSISTENCE_BLOCKED`.
 
 ## Steps
 1. Read minimal targeted sections first (narrow-read policy).

package/template/.cursor/commands/auto.md

@@ -9,12 +9,30 @@ description: "its-magic auto: deterministic continuation orchestrator."
 - tech-lead
 
 ## Execution model
-- `/auto` is an orchestrator only. It must not execute phase work directly.
-- For each phase, spawn a fresh subagent context for that phase role.
+- `/auto` is a **spawn-only orchestrator**: it schedules materialization, spawns
+  fresh **phase-role** subagents, and verifies phase boundaries—it **must not**
+  execute lifecycle phase work, perform phase-role duties, or author **phase
+  deliverables** in the orchestrator context.
+- For each phase, **spawn a fresh subagent** for that phase’s canonical role;
+  phase output must arrive only via artifacts and handoff files (no in-turn
+  orchestrator execution of that phase).
 - Phase context transfer happens only through artifacts and handoff files.
 - Scope is process/workflow orchestration only. Do not claim runtime product
   orchestration changes.
 
+## Spawn-boundary integrity (BUG-0006)
+
+- **Forbidden**: treating the orchestrator turn as the executor of a lifecycle
+  phase (for example running **`architecture`**, **`execute`**, **`qa`**, or any
+  other **`phase_id`** in the orchestrator instead of spawning the required
+  subagent).
+- **Fail fast** with **`AUTO_ORCHESTRATOR_PHASE_EXECUTION`**. **Remediation**:
+  stop; spawn a **fresh** subagent for the canonical **`phase_id`** and **`role`**
+  per the phase→role matrix (**DEC-0051**); do not merge phase output into
+  orchestrator turns. **Distinct from** **`PHASE_CONTEXT_ISOLATION_VIOLATION`**
+  (wrong writer / isolation break) and **`RUNTIME_PROOF_*`** / **`PHASE_ROLE_*`**
+  families—do not overload those codes for a missing-spawn violation.
+
 ## Full specification (US-0080 / DEC-0062)
 
 Long prose, expanded mode semantics, and **Steps 1–13** detail live in

package/template/.cursor/commands/intake.md

@@ -21,6 +21,7 @@ description: "its-magic intake: clarify idea and capture story + acceptance."
 - `docs/product/backlog.md`
 - `docs/product/acceptance.md`
 - `handoffs/po_to_tl.md`
+- `handoffs/resume_brief.md` (required on successful **`/intake bug`** persistence — **DEC-0069** / **BUG-0005**)
 - Optional (when enabled): `docs/engineering/compatibility-report.md`
 - Optional (when enabled): `docs/engineering/component-scope.md`
 
@@ -41,7 +42,7 @@ description: "its-magic intake: clarify idea and capture story + acceptance."
 - For artifact mutations, enforce deterministic single-writer scope:
   - establish writer identity (`writer_id`) and run identity (`intake_run_id`),
   - bind writes to target artifacts (`backlog`, `acceptance`, `vision`,
-    `po_to_tl`) for this run.
+    `po_to_tl`, and when persisting bugs: `resume_brief` per **DEC-0069**) for this run.
 - Drift guard semantics:
   - self-write changes from the same `(writer_id, intake_run_id)` are valid and
     must not trigger concurrent-writer blockers,
@@ -73,6 +74,7 @@ description: "its-magic intake: clarify idea and capture story + acceptance."
   - `INTAKE_REQUIRED_TOPIC_MISSING`
   - `INTAKE_REQUIRED_PACK_INCOMPLETE`
   - `INTAKE_ASSUMPTION_CONFIRMATION_REQUIRED`
+  - `INTAKE_ANSWER_REF_NOT_TOPIC_DISTINCT` (**BUG-0007** / **R-0066** — see **Truthfulness** below)
   - `INTAKE_PERSISTENCE_BLOCKED`
 - Remediation guidance surface (mandatory on block):
   - list `missing_topics`,
@@ -82,6 +84,9 @@ description: "its-magic intake: clarify idea and capture story + acceptance."
   - `asked_topics`
   - `missing_topics`
   - `assumptions_confirmed`
+  - For `first-intake-pack` (first/new/broad): `plan_area_inventory`,
+    `plan_area_coverage`, `coverage_complete=true` (derived), and candidate story
+    set refs used for map validation (**US-0081** / **DEC-0064**).
 
 ## Interactive intake evidence gate (US-0078 / DEC-0060 / R-0055)
 
@@ -92,9 +97,13 @@ and assumption binding. **Do not** mutate `docs/product/backlog.md` or
 
 - Bundle minimum (logical shape — serialize inline in handoff/backlog notes or JSON sidecar):
   - `selected_pack`, `asked_topics`, `missing_topics`, `assumptions_confirmed`
-  - `topic_coverage[]`: `topic_key`, `satisfied_by` (`answer_ref` \| `assumption_confirmation_ref`),
+  - `topic_coverage[]`: `topic_key`, `satisfied_by` (`answer_ref` \| `assumption_confirmation_ref` \| `delegation_ref`),
     `ref` (**`ie:`** per **DEC-0060**), `quoted_user_text`, per-row `intake_run_id` / `turn_index`
     (or bundle-level `intake_run_id` shared by rows)
+  - Delegated required topic rows (`satisfied_by=delegation_ref`) must include:
+    `delegation_scope`, `delegation_rationale`, `delegation_confidence` (`low|medium|high`)
+  - Equivalent-evidence accounting (optional; suppress repetitive ask for already captured evidence):
+    `evidence_source=equivalent_evidence_ref` + `equivalent_evidence_ref` on the row
   - Affirmative / non-placeholder `assumptions_confirmed`: `assumption_confirmation_ref`,
     `assumption_confirmation_intake_run_id`, `assumption_confirmation_turn_index`,
     `assumption_confirmation_quoted`
@@ -103,11 +112,41 @@ and assumption binding. **Do not** mutate `docs/product/backlog.md` or
   - `python scripts/intake_evidence_validate.py --file <bundle.json>` or `--stdin`
 - Deterministic diagnostics (**AC-7**): on block, list `missing_topics`, cite reason codes, and emit
   remediation prompts for unresolved required keys only.
+- Delegation-specific fail-closed diagnostics under umbrella `INTAKE_PERSISTENCE_BLOCKED`:
+  - `INTAKE_DELEGATION_EVIDENCE_MISSING`
+  - `INTAKE_DELEGATION_EVIDENCE_INVALID`
+- **US-0081 complete-plan gate** (first/new/broad only): enforce
+  `plan_area_id -> story_ids[] | deferred_ref` coverage for every
+  `plan_area_inventory` row; emit deterministic subcodes under umbrella
+  `INTAKE_PERSISTENCE_BLOCKED`:
+  - `INTAKE_PLAN_COVERAGE_MISSING`
+  - `INTAKE_PLAN_AREA_ID_INVALID`
+  - `INTAKE_PLAN_COVERAGE_CONTRACT_INVALID`
+  - `INTAKE_PLAN_DEFERRED_REF_MISSING`
 - **Guided vs low-touch parity**: **`INTAKE_GUIDED_MODE=1`** and **`INTAKE_GUIDED_MODE=0`** run the
   **same pre-persistence validation pipeline**; low-touch may skip optional follow-ups but **must not**
-  bypass mandatory pack evidence (**AC-5**, **AC-6**).
+  bypass mandatory pack evidence or first-intake complete-plan mapping
+  (**AC-5**, **AC-6**).
 - **Grandfathering**: legacy intake rows remain valid for read/display; the **next** intake-driven
   mutation must supply full **US-0078** evidence or the write is blocked (**DEC-0060** §5).
+- Truthfulness / anti-echo (**BUG-0007** / **R-0066**): `INTAKE_ANSWER_REF_NOT_TOPIC_DISTINCT` when
+  the same normalized `quoted_user_text` is reused across distinct required `topic_key` rows under
+  `satisfied_by=answer_ref` without an exempt path (`evidence_source=equivalent_evidence_ref` +
+  `equivalent_evidence_ref`, `delegation_ref` per **DEC-0067** / **US-0083**, or
+  `assumption_confirmation_ref` on the row). Canonical **`ie:`** integrity (**DEC-0060**) does not
+  prove a topic was actually elicited.
+
+## Truthfulness: `asked_topics` and `topic_coverage` (BUG-0007 / US-0083 / DEC-0060 / DEC-0067)
+
+- **`asked_topics`** may list a required `topic_key` only when a **user-visible question** was posed
+  **or** a **DEC-0060**-allowed alternate applies: **`delegation_ref`** (**DEC-0067**, **US-0083**),
+  **`evidence_source=equivalent_evidence_ref`** with **`equivalent_evidence_ref`**, or
+  **`assumption_confirmation_ref`** (row-level and/or bundle-level assumption binding per the gate
+  contract above).
+- **Forbidden**: fabricating **`topic_coverage`** by echoing **one** user or bug-report blob into
+  **`quoted_user_text`** on **every** required key as **`answer_ref`** solely to satisfy structure.
+  The validator rejects that pattern under **`INTAKE_ANSWER_REF_NOT_TOPIC_DISTINCT`** (see
+  **`docs/engineering/architecture.md`** **`# BUG-0007`**).
 
 ## Bug issue routing (US-0079 / DEC-0061)
 
@@ -119,6 +158,12 @@ and assumption binding. **Do not** mutate `docs/product/backlog.md` or
   - Append **`### BUG-#### — Title`** under **`## Bug issues (canonical)`** with **Status**, **`environment`**, **`steps_to_reproduce`**, **`expected`**, **`actual`**, **`evidence_refs`**.
   - Add matching **`- [ ]` / `- [x]`** row under **`## Bug acceptance (canonical)`**, sorted by id.
   - Run **`python scripts/bug_issue_validate.py --backlog docs/product/backlog.md --check-acceptance`** before completing the handoff.
+  - **Resume brief refresh (DEC-0069 / BUG-0005)**: immediately after successful bug persistence and backlog/acceptance validation **PASS**, run the atomic writer (temp file + replace — idempotent latest-pointer upsert):
+    - `python scripts/intake_bug_resume_brief_refresh.py --bug-id BUG-#### --backlog docs/product/backlog.md --resume-brief handoffs/resume_brief.md --intake-boundary-utc <RFC3339Z>`  
+    - Optional: `--orchestrator-run-id`, `--intake-evidence handoffs/intake_evidence/....json`, `--sprint-id` when known.  
+    - Exit non-zero → **`INTAKE_RESUME_BRIEF_*`** family — do not claim intake complete; fix backlog/brief contradiction or supply valid boundary UTC.  
+    - Post-condition: **`intended_resume_phase` / `resolved_start_phase` = `discovery`**, **`resolution_source=resume_brief`**, **`bug_id`** matches persisted row, so **`/auto`** without **`start-from`** does not false-trigger **`RESUME_BRIEF_STALE`** for a stale pre-intake **`intake`** target.  
+    - Optional audit: `python scripts/intake_bug_resume_brief_refresh.py --bug-id BUG-#### --backlog docs/product/backlog.md --resume-brief handoffs/resume_brief.md --validate-file` (no write).
 
 ## Steps
 1. Determine intake mode from `.cursor/scratchpad.md`:
@@ -177,12 +222,21 @@ and assumption binding. **Do not** mutate `docs/product/backlog.md` or
    - before writing backlog/acceptance artifacts, run **`python scripts/intake_evidence_validate.py`**
      on the captured bundle (or equivalent in-process validation):
      - if validation **PASS**es, proceed to persistence;
-     - on **FAIL**, emit `INTAKE_REQUIRED_TOPIC_MISSING` /
-       `INTAKE_REQUIRED_PACK_INCOMPLETE` / `INTAKE_ASSUMPTION_CONFIRMATION_REQUIRED`
-       (and umbrella `INTAKE_PERSISTENCE_BLOCKED`) with remediation guidance — **no write**.
+    - on **FAIL**, emit `INTAKE_REQUIRED_TOPIC_MISSING` /
+      `INTAKE_REQUIRED_PACK_INCOMPLETE` / `INTAKE_ASSUMPTION_CONFIRMATION_REQUIRED` /
+      `INTAKE_DELEGATION_EVIDENCE_MISSING` / `INTAKE_DELEGATION_EVIDENCE_INVALID`
+       plus first-intake coverage subcodes (`INTAKE_PLAN_COVERAGE_MISSING`,
+       `INTAKE_PLAN_AREA_ID_INVALID`, `INTAKE_PLAN_COVERAGE_CONTRACT_INVALID`,
+       `INTAKE_PLAN_DEFERRED_REF_MISSING`) under umbrella
+       `INTAKE_PERSISTENCE_BLOCKED` with remediation guidance — **no write**.
+   - for `first-intake-pack` requests, derive a normalized
+     `plan_area_inventory`, require one coverage row per `plan_area_id`, enforce
+     xor mapping (`story_ids` xor `deferred_ref` + `deferred_reason`), and set
+     `coverage_complete=true` only when all areas are fully mapped.
    - persist intake evidence fields (`asked_topics`, `missing_topics`,
-     `assumptions_confirmed`, `topic_coverage`, assumption ref fields per **DEC-0060**)
-     in relevant intake artifacts.
+     `assumptions_confirmed`, `topic_coverage`, assumption ref fields per
+     **DEC-0060**, and first-intake coverage fields (`plan_area_inventory`,
+     `plan_area_coverage`, `coverage_complete`) in relevant intake artifacts.
 6. Optional fresh-project ID namespace bootstrap (US-0052 / DEC-0034):
    - Read `ID_NAMESPACE_BOOTSTRAP` from `.cursor/scratchpad.md` (`0|1`,
      default `0`).
@@ -255,7 +309,8 @@ and assumption binding. **Do not** mutate `docs/product/backlog.md` or
 - Intake mutations must also comply with
   `docs/engineering/artifact-ownership-policy.md`.
 - Intake may mutate only intake-owned scopes (`vision`, `backlog`, `acceptance`,
-  `po_to_tl`) for target story context.
+  `po_to_tl`, and **`handoffs/resume_brief.md`** only via the **DEC-0069** bug-intake
+  completion path / `intake_bug_resume_brief_refresh.py`) for target story context.
 - Any attempted delete/rewrite of non-intake-owned sections fails closed with
   `PHASE_OWNERSHIP_VIOLATION`.
 - If an override-authorized path is configured for an artifact but required

package/template/.cursor/commands/map-codebase.md

@@ -14,7 +14,21 @@ description: "its-magic map codebase: analyze existing project before changes."
 ## Outputs (artifacts)
 - `docs/engineering/codebase-map.md`
 - `docs/engineering/dependencies.json`
-- `docs/engineering/state.md`
+- `docs/engineering/state.md` (append-only checkpoints only when the phase
+  contract already allows bounded map-related notes)
+
+## Lifecycle vs manual (US-0082 / DEC-0065)
+
+- **Auto/bootstrap (primary)**: `/architecture` completion (**tech-lead**) must
+  run `python scripts/materialize_codebase_map.py --trigger architecture` before
+  `/sprint-plan` so a bootstrap map exists or deterministic
+  `CODEBASE_MAP_BLOCKED:*` diagnostics are emitted.
+- **Auto/bootstrap (optional)**: `/refresh-context` (**curator**) may run the
+  same script with `--trigger refresh-context` only when merged scratchpad sets
+  `CODEBASE_MAP_REFRESH_ON_ROLLOVER=1` (default off — limits churn).
+- **Manual (this command)**: `/map-codebase` remains the explicit operator path
+  for a full analysis pass and for refreshing rich maps; it does not replace the
+  lifecycle gate above.
 
 ## Stop conditions
 - Decision gate triggered
@@ -23,3 +37,6 @@ description: "its-magic map codebase: analyze existing project before changes."
 1. Identify stack, structure, and key entry points.
 2. Summarize architecture and conventions.
 3. Capture dependencies and tooling.
+4. Persist outputs to the artifact paths above. When a programmatic bootstrap is
+   needed in tooling or tests, prefer `scripts/materialize_codebase_map.py`
+   (idempotent; preserves non-bootstrap maps).

package/template/.cursor/commands/refresh-context.md

@@ -27,6 +27,13 @@ description: "its-magic refresh context: compact state and decisions."
 1. Compact state and decisions into a short context pack.
 2. Update sprint summary with current status.
 3. Ensure handoffs and state are consistent.
+3a. Optional codebase map refresh (US-0082 / DEC-0065): when merged scratchpad
+    sets `CODEBASE_MAP_REFRESH_ON_ROLLOVER=1`, from repository root run
+    `python scripts/materialize_codebase_map.py --trigger refresh-context`.
+    Default is **skip** (omit this step) to avoid map churn. On
+    `CODEBASE_MAP_BLOCKED:*`, record the token and remediation in the new
+    `state.md` checkpoint; do not rewrite operator-authored maps outside the
+    bootstrap contract.
 4. Enforce **triad** hot-surface rollover when merged scratchpad thresholds are
    exceeded (DEC-0054):
    - read caps from `.cursor/scratchpad.md` + `.cursor/scratchpad.local.md`,

package/template/.cursor/rules/core.mdc

@@ -6,6 +6,11 @@ globs: ["**/*"]
 - Intake backlog/acceptance writes require **US-0078** evidence validation
   (`scripts/intake_evidence_validate.py` / **DEC-0060**) before persistence; see
   `.cursor/commands/intake.md`.
+- For first/new/broad intake, persistence also requires **US-0081** complete-plan
+  coverage contract validation (**DEC-0064**):
+  `plan_area_inventory` + `plan_area_coverage` + `coverage_complete=true`; fail
+  closed under `INTAKE_PERSISTENCE_BLOCKED` with deterministic plan-coverage
+  subcodes.
 - Defect intake uses **`INTAKE_WORK_ITEM_KIND=bug`** and/or **`/intake bug`**; validate bugs with
   `scripts/bug_issue_validate.py` and run `scripts/intake_bug_routing_guard.py` before allocating
   **`US-xxxx`** for defect-shaped prose (**US-0079** / **DEC-0061**).

package/template/docs/engineering/artifact-ownership-policy.md

@@ -23,7 +23,7 @@ artifacts. Ordering policy and ownership policy are complementary:
 | `handoffs/release_queue.md` | target sprint row only | `release` | none |
 | `handoffs/release_notes.md` | latest pointer section | `release`, `refresh-context` | none |
 | `docs/engineering/state.md` | append-bottom checkpoints only | all delivery phases | none |
-| `handoffs/resume_brief.md` | current status/next-actions sections | `pause`, `resume`, `refresh-context`, `release` | none |
+| `handoffs/resume_brief.md` | current status/next-actions sections; latest-pointer upsert on **`/intake bug`** completion (**DEC-0069**) | `intake` (bug persistence path only), `pause`, `resume`, `refresh-context`, `release` | none |
 
 ## Non-destructive mutation rules
 

package/template/docs/engineering/context/installer-owned-paths.manifest

@@ -27,6 +27,8 @@ scripts/intake_evidence_validate.py
 scripts/intake_evidence_lib.py
 scripts/intake_bug_routing_guard.py
 scripts/check_intake_template_parity.py
+scripts/materialize_codebase_map.py
+scripts/enforce-triad-hot-surface.py
 .github/workflows
 README.md
 its_magic
@@ -49,7 +51,22 @@ scripts/intake_evidence_validate.py
 scripts/intake_evidence_lib.py
 scripts/intake_bug_routing_guard.py
 scripts/check_intake_template_parity.py
+scripts/materialize_codebase_map.py
+scripts/enforce-triad-hot-surface.py
 .github/workflows/ci.yml
 .github/workflows/deploy.yml
 its_magic
 .its-magic-version
+
+[required_install_script_paths]
+scripts/validate-and-push.ps1
+scripts/validate-and-push.sh
+scripts/sync_push_gates.py
+scripts/doc_profile_lib.py
+scripts/validate_doc_profile.py
+scripts/intake_evidence_validate.py
+scripts/intake_evidence_lib.py
+scripts/intake_bug_routing_guard.py
+scripts/check_intake_template_parity.py
+scripts/materialize_codebase_map.py
+scripts/enforce-triad-hot-surface.py

package/template/docs/engineering/runbook.md

@@ -60,6 +60,41 @@ Remediation:
 - define `TEST_COMMAND` explicitly in `docs/engineering/runbook.md`, or
 - add detectable stack markers/scripts then rerun installer upgrade.
 
+## Codebase map bootstrap (US-0082 / DEC-0065)
+
+**Goal:** `docs/engineering/codebase-map.md` exists in fresh repos without ad-hoc
+operator memory, while **`/map-codebase`** stays the explicit manual analysis
+command.
+
+### Responsibility
+
+| Path | Owner | Mechanism |
+|------|-------|-----------|
+| Primary | **`/architecture`** (tech-lead) | Before **`/sprint-plan`**, run `python scripts/materialize_codebase_map.py --trigger architecture` from repo root |
+| Optional refresh | **`/refresh-context`** (curator) | Same script with `--trigger refresh-context` only when scratchpad sets **`CODEBASE_MAP_REFRESH_ON_ROLLOVER=1`** (default off) |
+| Manual / deep pass | Operator | **`/map-codebase`** |
+
+### Write surfaces
+
+Same as **`/map-codebase`**: `docs/engineering/codebase-map.md`,
+`docs/engineering/dependencies.json`. The materializer does **not** append
+`docs/engineering/state.md`. Non-bootstrap maps (no bootstrap sentinel in the
+file) are never replaced silently.
+
+### Deterministic diagnostics
+
+- **`CODEBASE_MAP_MISSING`** — use when a lifecycle checkpoint requires the map
+  but it is absent and generation did not run (e.g. custom **`/auto`** profile
+  skipped **`architecture`**).
+- **`CODEBASE_MAP_BLOCKED:<subreason>`** — materializer or policy blocked
+  creation (`policy_skip`, permissions, etc.); stdout includes remediation
+  pointing here and to **`/map-codebase`**.
+
+**Command:** `python scripts/materialize_codebase_map.py --repo .`  
+**Tests:** `python tests/codebase_map_materialize_test.py`
+
+Normative architecture: `docs/engineering/architecture.md` (**# US-0082**).
+
 ## Documentation profile validation (US-0077 / DEC-0059)
 
 **Goal:** keep root `README.md` (user channel) and `docs/developer/README.md`
@@ -240,7 +275,33 @@ Required persisted intake evidence fields:
 - `missing_topics`
 - `assumptions_confirmed`
 
-## Interactive intake evidence validation (US-0078 / DEC-0060)
+## First-intake full-plan coverage gate (US-0081 / DEC-0064)
+
+For first/new/broad intake (`selected_pack=first-intake-pack`), persistence is
+additionally blocked unless complete-plan coverage is machine-verifiable.
+
+Required coverage contract fields:
+
+- `plan_area_inventory[]` with unique stable `plan_area_id` values
+- `plan_area_coverage[]` with exactly one row per `plan_area_id`
+- xor mapping per row: `story_ids[]` or `deferred_ref` + `deferred_reason`
+- `coverage_complete=true` only when derived validation succeeds
+
+Coverage diagnostics (under umbrella `INTAKE_PERSISTENCE_BLOCKED`):
+
+- `INTAKE_PLAN_COVERAGE_MISSING`
+- `INTAKE_PLAN_AREA_ID_INVALID`
+- `INTAKE_PLAN_COVERAGE_CONTRACT_INVALID`
+- `INTAKE_PLAN_DEFERRED_REF_MISSING`
+
+Guided and low-touch parity:
+
+- `INTAKE_GUIDED_MODE=1` and `INTAKE_GUIDED_MODE=0` must run the same
+  first-intake complete-plan validator path.
+- Low-touch may reduce optional prompts but cannot bypass complete-plan coverage
+  validation.
+
+## Interactive intake evidence validation (US-0078 / DEC-0060 / US-0083 / DEC-0067)
 
 **US-0078** adds machine-verifiable **`topic_coverage`** rows, canonical **`ie:`** refs
 (**DEC-0060**), asked-vs-covered enforcement, and **`assumption_confirmation_ref`**
@@ -251,11 +312,24 @@ binding before backlog/acceptance writes.
 - Library: `scripts/intake_evidence_lib.py` (shared rules for tests and tooling).
 - Regression: `tests/intake_evidence_fixtures_test.py` (R-0055 **AC-8** matrix tiers A/B),
   invoked from `tests/run-tests.ps1` / `tests/run-tests.sh` §26k.
-- **Packaged installs (BUG-0001 / DEC-0063)**: `intake_evidence_validate.py`, `intake_evidence_lib.py`, and `intake_bug_routing_guard.py` are mirrored under `template/scripts/` and listed in `docs/engineering/context/installer-owned-paths.manifest` so fresh install and `upgrade` copy them to the consumer’s `scripts/`. Drift guard: `python scripts/check_intake_template_parity.py --repo .` (also §26N in `tests/run-tests.*`).
+- **Packaged installs (BUG-0001 / DEC-0063)**: `intake_evidence_validate.py`, `intake_evidence_lib.py`, and `intake_bug_routing_guard.py` are mirrored under `template/scripts/` and listed in `docs/engineering/context/installer-owned-paths.manifest` so fresh install and `upgrade` copy them to the consumer’s `scripts/`. Drift guard: `python scripts/check_intake_template_parity.py --repo .` (also §26N in `tests/run-tests.*`). **Release (S0060)**: operator notes `handoffs/releases/S0060-release-notes.md` (gate summary + verify steps).
+- **Installer completeness gate (BUG-0003 / DEC-0066)**: post-install invariant checks every path in `[required_install_script_paths]` from `docs/engineering/context/installer-owned-paths.manifest`. Missing paths fail closed with `INSTALL_COMPLETENESS_FAILED` and `INSTALL_REQUIRED_SCRIPT_MISSING:<path>`. Remediation: update manifest parity (active + `template/`), ensure required script exists under `template/scripts/`, keep install/clean ownership paired, then rerun `its-magic --mode missing|upgrade` (or `python installer.py --validate-install-completeness --target <repo>` for direct diagnostics).
 - **Guided** and **low-touch** (`INTAKE_GUIDED_MODE=0`) share the **same** pre-persistence
   validation pipeline; mandatory pack evidence is never skipped.
 - Legacy intake evidence without **`ie:`** refs remains **grandfathered** for display until the
   next intake-driven mutation, which must supply full evidence (**DEC-0060** §5).
+- **Delegated required-topic path (US-0083 / DEC-0067)**:
+  - Allowed: `topic_coverage[].satisfied_by=delegation_ref` with required
+    `delegation_scope`, `delegation_rationale`, `delegation_confidence` (`low|medium|high`).
+  - Missing delegation fields fail closed with `INTAKE_DELEGATION_EVIDENCE_MISSING`.
+  - Malformed delegation values or invalid `ie:` binding fail closed with
+    `INTAKE_DELEGATION_EVIDENCE_INVALID`.
+  - Non-delegated unresolved required topics remain unchanged fail-closed
+    (`INTAKE_REQUIRED_TOPIC_MISSING` path).
+- **Repetitive-ask suppression with accounting (US-0083 AC-1)**:
+  - When equivalent evidence already exists, avoid re-asking by recording row-level
+    `evidence_source=equivalent_evidence_ref` plus `equivalent_evidence_ref`.
+  - Required-topic accounting remains explicit through `topic_coverage` rows.
 
 ## Bug issues (US-0079 / DEC-0061)
 

package/template/scripts/check_intake_template_parity.py

@@ -12,6 +12,7 @@ INTAKE_TEMPLATE_PAIRS: tuple[tuple[str, str], ...] = (
     ("scripts/intake_evidence_validate.py", "template/scripts/intake_evidence_validate.py"),
     ("scripts/intake_evidence_lib.py", "template/scripts/intake_evidence_lib.py"),
     ("scripts/intake_bug_routing_guard.py", "template/scripts/intake_bug_routing_guard.py"),
+    ("scripts/intake_bug_resume_brief_refresh.py", "template/scripts/intake_bug_resume_brief_refresh.py"),
     ("scripts/check_intake_template_parity.py", "template/scripts/check_intake_template_parity.py"),
 )