its-magic 0.1.2-42 → 0.1.2-48

package/README.md

@@ -24,6 +24,28 @@ with pause/resume, decision gates, and persistent artifacts.
 - Built-in benchmarks (live, prompted, headless).
 - Multiplatform distribution (npm, Chocolatey, Homebrew).
 
+<!-- readme-feature-coverage-catalog -->
+
+### Feature coverage catalog (US-0091)
+
+- `/bin` — POSIX npm installer + Linux remote test targets (WSL / SSH / Docker) (`US-0084`).
+- `/choco` — Configurable Multi-Target Release Publish with Confirmation Gate (`US-0054`).
+- `/devops` — First-Class Bug Issue Workflow (Open/Closed) (`US-0079`).
+- `/engineering` — Agent-Driven Codebase Map Bootstrap (`US-0082`).
+- `/engineering` — Remote Runtime Connectivity Contract for QA/Release/Publish (`US-0064`).
+- `/install` — Template/install payload omits intake gate scripts (`BUG-0001`).
+- `/intake` — Optional Caveman-style input compression (safe file scope) (`US-0090`).
+- `/lint` — CI/CD Workflows (`US-0007`).
+- `/or` — Cursor Caveman mode (scratchpad-configurable terse responses) (`US-0089`).
+- `/push` — Multiplatform Distribution (`US-0009`).
+- `/run-tests` — Baseline Regression Cleanup for Installer and Version Sync Checks (`US-0074`).
+- `/template` — End-to-End Lifecycle QA for `its-magic` Install/Upgrade/Clean (`US-0041`).
+- `/upgrade` — Missing scripts still occur on install modes missing/upgrade (`BUG-0003`).
+- `/usr` — Global Linux install fails: empty `install_include_paths` when manifest is CRLF (`BUG-0008`).
+- `/workdir` — installer.sh fails in shell path with `set: Illegal option -` (`BUG-0004`).
+- `MIGRATION` scratchpad flag — Smart Upgrade Mode (`US-0018`).
+- `US-0016` scratchpad flag — Homebrew Version Sync (`US-0016`).
+
 ## Setup
 
 its-magic is an installer you run once per repo. It copies the AI dev team
@@ -947,6 +969,12 @@ Troubleshooting quick guide:
   - Fix JSON syntax and retry.
 - Secret-like inline value detected:
   - Replace literal secret with an env-var reference field.
+- **CI still runs its-magic packaging jobs?** Your project received a pre-fix workflow.
+  Run **`its-magic --target <repo> --mode upgrade`** (or **`--mode clean`** then reinstall)
+  to refresh `.github/workflows/ci.yml` from the corrected template. After upgrade, GitHub
+  Actions should show only **`checks`** and **`auto-fix`** jobs — not `npm-test`,
+  `brew-test`, or `choco-test`. Fix applies to new installs/upgrades; stale repos heal on
+  next upgrade (**US-0018**).
 
 Team/local (recommended in `.cursor/scratchpad.local.md`):
 
@@ -1105,6 +1133,68 @@ push / PR  ──>  checks  ──>  PASS  ──>  done
 Auto-fix commits appear as `ci: auto-fix attempt N/3`. After 3 retries the
 workflow stops and points you to `scripts/validate-and-push` for local fixing.
 
+<!-- readme-feature-coverage-catalog -->
+
+### Feature coverage catalog (US-0091)
+
+- `/acceptance` — Mandatory Intake Question Packs for First and Small Intakes (`US-0068`).
+- `/ask` — /ask Command: Context-Aware Questions Without Workflow (`US-0020`).
+- `/ask` — Context Compaction and Tiered Token-Cost Optimization Mode (`US-0053`).
+- `/auto` — Configurable Auto Phase Selection Policy (`US-0070`).
+- `/auto` — Continuous `/auto` Backlog-Drain Mode with Fine-Tune Switches (`US-0044`).
+- `/auto` — Fresh Subagent Context Per Phase and /auto Orchestration (`US-0023`).
+- `/auto` — Mid-Process `/auto` Continuation with Deterministic Resume Point (`US-0037`).
+- `/auto` — Strict Phase Role Enforcement in /auto Orchestration (`US-0069`).
+- `/auto` — Strict Runtime Proof for Per-Phase Subagent Isolation (`US-0056`).
+- `/auto` — Token-Cost Hardening for Orchestrated Runs (`US-0080`).
+- `/auto` — `/auto` continuous multi-phase loop + quiet drain (close one-phase-stop gap) (`US-0088`).
+- `/auto` — `/auto` executes phases without spawning required subagents (`BUG-0006`).
+- `/auto` — `/auto` explicit bug targeting (fix all OPEN bugs / fix `BUG-####`) (`US-0087`).
+- `/auto` — `/auto` fails with stale resume target after bug intake (`BUG-0005`).
+- `/check` — Optional Documentation Pack (Design Concept, CRS, Technical Spec) (`US-0031`).
+- `/confirmation` — Enforced Interactive Intake Question Evidence (`US-0078`).
+- `/connectivity` — Release Operator Run/Connect/Verify Hints Contract (`US-0067`).
+- `/decision` — Optional Fresh-Project ID Namespace Bootstrap (`US-0052`).
+- `/derived` — Deterministic Status Reconciliation Command (`US-0055`).
+- `/developer-dense` — Documentation Audience Profiles and Dual README Strategy (`US-0077`).
+- `/docs` — Installer-Owned `its_magic/` Folder for Framework Metadata (`US-0062`).
+- `/engineering` — Deterministic Context Slimming and Archive Enforcement Across Core Artifacts (`US-0072`).
+- `/engineering` — Deterministic State Hot-Surface Rollover and Archive Enforcement (`US-0060`).
+- `/engineering` — OS-Aware Runbook Command Auto-Bootstrap with Verified Quality Gates (`US-0063`).
+- `/flag` — Release Gate for Command/Flag Documentation Delta (`US-0030`).
+- `/intake` — Critical Evaluation in Intake and Architecture (`US-0021`).
+- `/intake` — Deterministic Intake Runtime Capability Guard and Single-Writer Drift Safety (`US-0059`).
+- `/intake` — Multi-Repo and Contract Compatibility Observability (`US-0034`).
+- `/intake` — intake evidence records asked questions that were never asked (`BUG-0007`).
+- `/integration` — Generated Test Scaffolding and Auto-Run Contract (`US-0066`).
+- `/managed` — Runtime QA Autopilot for Generated Projects (`US-0065`).
+- `/new` — First-Intake Full-Plan Coverage and Story-Map Gate (`US-0081`).
+- `/order` — Deterministic Artifact Ordering and Write Discipline (`US-0058`).
+- `/phases` — Cross-Phase Artifact Ownership Guard and Deterministic Archive Control (`US-0061`).
+- `/planning` — User-Visible Internal Metadata Sanitization Guard (`US-0071`).
+- `/product` — Backlog Reconciliation Gate for Released Sprints (`US-0043`).
+- `/push` — Phase-Triggered Sync Policy with Guarded Auto-Push (`US-0038`).
+- `/release` — Enforced Per-Phase Subagent Isolation with Audit Gate (`US-0048`).
+- `/release` — Legacy DONE-Story Acceptance/Traceability Backfill Guard (`US-0049`).
+- `/release` — Per-Sprint Release Notes and Release Queue Tracker (`US-0040`).
+- `/release` — Release Findings Artifact and Post-QA Issue Workflow (`US-0042`).
+- `/release` — Release Gate Tightening for Check-In Tests and QA/UAT Completion (`US-0039`).
+- `/remote` — Automation-driven remote execution selection (Docker / SSH / NL container intent) (`US-0086`).
+- `/remote` — Gitignored `.env` for remote and release connectivity (no AI read) (`US-0085`).
+- `/repetitive` — Delegable Intake Clarification Without Hard Blocks (`US-0083`).
+- `/research` — Knowledge Curation & Early Research (`US-0029`).
+- `/risk` — Intelligent Intake Decomposition and Risk-Aware PO Questioning (`US-0051`).
+- `/scratchpad` — Executable Scratchpad-Driven Sync and Auto-Push Wiring (`US-0076`).
+- `/scratchpad` — Scratchpad Delivery Simplification (Example-Only Install Policy) (`US-0073`).
+- `/scratchpad` — Upgrade Scratchpad Example–First Refresh (Fix Example Drift vs Materialized Baseline) (`US-0075`).
+- `/scratchpad` — Upgrade-Safe Scratchpad Example Refresh and Parity (`US-0057`).
+- `/sprint-plan` — Explicit `/sprint-plan --bulk` Mode (`US-0046`).
+- `/sprint-plan` — Sprint Sizing Rules and Configurable Sprint Planning (`US-0022`).
+- `/story` — Optional Feature User Guide Generation (`US-0032`).
+- `/uat` — UAT Artifact Lifecycle and Ownership (`US-0027`).
+- `SKILL` scratchpad flag — Skill and Templates (`US-0004`).
+- `US-0001` scratchpad flag — Core Workflow Commands (`US-0001`).
+
 ## Walkthrough examples
 
 ### Example 1: New feature from idea
@@ -1240,6 +1330,35 @@ Reliable pattern:
 - `decisions/`: decision records.
 - `.github/workflows/`: CI/CD templates.
 
+<!-- readme-feature-coverage-catalog -->
+
+### Feature coverage catalog (US-0091)
+
+- `/evidence` — Backlog-to-Sprint Traceability Contract (`US-0025`).
+- `/exit` — Milestone Lifecycle Definition and Exit Criteria (`US-0026`).
+- `/field` — Official Remote Config Template, Docs, and Fail-Fast Validation (`US-0036`).
+- `/installer` — Runbook Completion (`US-0015`).
+- `/intake` — Component-Scoped Execution Mode with Protection Guards (`US-0035`).
+- `/intake` — Configurable Guided Intake Behavior (`US-0033`).
+- `/map-codebase` — map-codebase does not write codebase-map in fresh repos (`BUG-0002`).
+- `/memory-audit` — Memory Drift Audit Command (`US-0024`).
+- `/product` — Canonical Story Status Source + Global Drift Guard (`US-0045`).
+- `/product` — Clean Install Hygiene and Complete Clean-Repo Coverage (`US-0050`).
+- `/security-review` — Security & Compliance Review Agent (`US-0028`).
+- `/skip` — Explicit Bulk Execute Orchestration Mode (`US-0047`).
+- `/strings` — Clean Placeholder Content from Templates and Active Files (`US-0019`).
+- `/write` — Artifact Templates and Starter Docs (`US-0006`).
+- `AUTO_FLOW_MODE` scratchpad flag — Automation Modes (`US-0011`).
+- `README` scratchpad flag — Voice Input Documentation (`US-0010`).
+- `TEAM_MODE` scratchpad flag — Team Mode (`US-0013`).
+- `US-0002` scratchpad flag — AI Behavior Rules (`US-0002`).
+- `US-0003` scratchpad flag — Subagent Definitions (`US-0003`).
+- `US-0005` scratchpad flag — Hook System (`US-0005`).
+- `US-0008` scratchpad flag — CLI Installer (`US-0008`).
+- `US-0012` scratchpad flag — Benchmark Suite (`US-0012`).
+- `US-0014` scratchpad flag — Quality Chain (3-Layer) (`US-0014`).
+- `US-0017` scratchpad flag — Template Drift Guard (`US-0017`).
+
 ## Developer and release deep-dive
 
 ### CI/CD via runbook

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "its-magic",
-  "version": "0.1.2-42",
+  "version": "0.1.2-48",
   "description": "its-magic - AI dev team workflow for Cursor.",
   "license": "MIT",
   "bin": {

package/scripts/check_intake_template_parity.py

@@ -1,5 +1,14 @@
 #!/usr/bin/env python3
-"""Verify active vs template/scripts/ bytes match for DEC-0063 intake gate modules (BUG-0001)."""
+"""Verify active vs template/scripts/ bytes match for DEC-0063 intake gate modules (BUG-0001).
+
+Scoped modes (DEC-0073 §10 / US-0090):
+  --scope=intake          (default) DEC-0063 intake pair table.
+  --scope=caveman-compress DEC-0073 caveman input-compression pair table.
+  --scope=readme-feature-coverage DEC-0074 README feature-coverage pair table.
+  --scope=downstream-ci-guard   DEC-0075 downstream CI guard script pair table.
+  --scope=us-0092               DEC-0078 full-autonomy outer driver + probe surfaces.
+  --scope=all              union of all tables.
+"""
 
 from __future__ import annotations
 
@@ -7,7 +16,6 @@ import argparse
 import sys
 from pathlib import Path
 
-# Normative pairs: repo scripts/ (canonical dev) → template/scripts/ (packaged ship path).
 INTAKE_TEMPLATE_PAIRS: tuple[tuple[str, str], ...] = (
     ("scripts/intake_evidence_validate.py", "template/scripts/intake_evidence_validate.py"),
     ("scripts/intake_evidence_lib.py", "template/scripts/intake_evidence_lib.py"),
@@ -16,6 +24,86 @@ INTAKE_TEMPLATE_PAIRS: tuple[tuple[str, str], ...] = (
     ("scripts/check_intake_template_parity.py", "template/scripts/check_intake_template_parity.py"),
 )
 
+# DEC-0073 §10 / US-0090 — Caveman input-compression surface pairs. Contents
+# must be byte-identical between active and template paths; installer delivers
+# template copies (BUG-0003 / DEC-0066).
+CAVEMAN_COMPRESS_PAIRS: tuple[tuple[str, str], ...] = (
+    ("scripts/caveman_compress_input.py", "template/scripts/caveman_compress_input.py"),
+    ("docs/engineering/context/installer-owned-paths.manifest",
+     "template/docs/engineering/context/installer-owned-paths.manifest"),
+    ("docs/engineering/runbook.md", "template/docs/engineering/runbook.md"),
+    ("docs/engineering/auto-orchestration-reference.md",
+     "template/docs/engineering/auto-orchestration-reference.md"),
+)
+
+README_FEATURE_COVERAGE_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        "scripts/validate_readme_feature_coverage.py",
+        "template/scripts/validate_readme_feature_coverage.py",
+    ),
+    (
+        "scripts/readme_feature_coverage_lib.py",
+        "template/scripts/readme_feature_coverage_lib.py",
+    ),
+    (
+        "docs/engineering/context/readme-section-affinity.json",
+        "template/docs/engineering/context/readme-section-affinity.json",
+    ),
+    (".cursor/commands/release.md", "template/.cursor/commands/release.md"),
+    ("docs/engineering/runbook.md", "template/docs/engineering/runbook.md"),
+    (
+        "docs/engineering/context/installer-owned-paths.manifest",
+        "template/docs/engineering/context/installer-owned-paths.manifest",
+    ),
+    (
+        "scripts/check_intake_template_parity.py",
+        "template/scripts/check_intake_template_parity.py",
+    ),
+)
+
+US0092_PAIRS: tuple[tuple[str, str], ...] = (
+    ("scripts/auto_outer_driver.py", "template/scripts/auto_outer_driver.py"),
+    ("scripts/uat_probe_lib.py", "template/scripts/uat_probe_lib.py"),
+    (
+        "docs/engineering/context/installer-owned-paths.manifest",
+        "template/docs/engineering/context/installer-owned-paths.manifest",
+    ),
+    (".cursor/commands/auto.md", "template/.cursor/commands/auto.md"),
+    (".cursor/commands/verify-work.md", "template/.cursor/commands/verify-work.md"),
+    (".cursor/commands/qa.md", "template/.cursor/commands/qa.md"),
+    (
+        "docs/engineering/auto-orchestration-reference.md",
+        "template/docs/engineering/auto-orchestration-reference.md",
+    ),
+    ("docs/engineering/runbook.md", "template/docs/engineering/runbook.md"),
+)
+
+DOWNSTREAM_CI_GUARD_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        "scripts/check_downstream_ci_guard.py",
+        "template/scripts/check_downstream_ci_guard.py",
+    ),
+    (
+        "scripts/downstream_ci_guard_lib.py",
+        "template/scripts/downstream_ci_guard_lib.py",
+    ),
+)
+
+SCOPES: dict[str, tuple[tuple[str, str], ...]] = {
+    "intake": INTAKE_TEMPLATE_PAIRS,
+    "caveman-compress": CAVEMAN_COMPRESS_PAIRS,
+    "readme-feature-coverage": README_FEATURE_COVERAGE_PAIRS,
+    "downstream-ci-guard": DOWNSTREAM_CI_GUARD_PAIRS,
+    "us-0092": US0092_PAIRS,
+    "all": (
+        INTAKE_TEMPLATE_PAIRS
+        + CAVEMAN_COMPRESS_PAIRS
+        + README_FEATURE_COVERAGE_PAIRS
+        + DOWNSTREAM_CI_GUARD_PAIRS
+        + US0092_PAIRS
+    ),
+}
+
 
 def main() -> int:
     p = argparse.ArgumentParser(description=__doc__)
@@ -25,10 +113,17 @@ def main() -> int:
         default=Path(__file__).resolve().parent.parent,
         help="Repository root",
     )
+    p.add_argument(
+        "--scope",
+        choices=sorted(SCOPES.keys()),
+        default="intake",
+        help="Parity pair table to verify.",
+    )
     args = p.parse_args()
     root: Path = args.repo
+    pairs = SCOPES[args.scope]
     failed = False
-    for rel_active, rel_tpl in INTAKE_TEMPLATE_PAIRS:
+    for rel_active, rel_tpl in pairs:
         a = root / rel_active
         t = root / rel_tpl
         if not a.is_file() or not t.is_file():
@@ -45,7 +140,7 @@ def main() -> int:
             failed = True
     if failed:
         return 2
-    print("[INTAKE_TEMPLATE_PARITY_OK]")
+    print(f"[INTAKE_TEMPLATE_PARITY_OK] scope={args.scope}")
     return 0
 
 

package/template/.cursor/commands/architecture.md

@@ -78,12 +78,22 @@ description: "its-magic architecture: define approach, risks, and decisions."
    - If `USER_GUIDE_MODE=0`, add no required user-guide steps or blocking checks (zero overhead).
    - If `USER_GUIDE_MODE=1`, reference canonical user-guide path and schema in
      architecture/state for in-scope feature stories; see runbook user-guide section.
-9. Triad hot-surface gate (DEC-0054) when `docs/engineering/architecture.md` is
-   mutated:
-   - run `python scripts/enforce-triad-hot-surface.py --rollover` then `--check`
-     from repository root,
-   - on failure stop with `STATE_ARCHIVE_REQUIRED` or
-     `ARTIFACT_HOT_SURFACE_OVERSIZE`,
+9. Triad hot-surface gate (DEC-0054; heading policy DEC-0076 / BUG-0010) when
+   `docs/engineering/architecture.md` is mutated:
+   - **Authoring mandate**: append new story sections as H1 `# US-xxxx` and new
+     bug sections as H1 `# BUG-xxxx` (not `## US-` / `## BUG-`).
+   - **Before** mutating the file, capture
+     `baseline_h2_count = count_h2_story_headings(architecture.md)` via
+     `python scripts/enforce-triad-hot-surface.py` (legacy `## US-xxxx` sections
+     remain rollover-visible; count must not increase during `/architecture`).
+   - Run `python scripts/enforce-triad-hot-surface.py --rollover` then `--check`
+     from repository root.
+   - Run heading policy check:
+     `python scripts/enforce-triad-hot-surface.py --check-arch-heading-policy
+     --baseline-h2-count <baseline_h2_count>`.
+   - On failure stop with `STATE_ARCHIVE_REQUIRED`, `ARTIFACT_HOT_SURFACE_OVERSIZE`,
+     or **`ARCH_STORY_HEADING_LEVEL_INVALID`** (non-suppressible `blocked` when H2
+     story-heading count increased),
    - preserve non-target history in archive packs only (never delete unrelated
      story sections without archival evidence).
 10. Codebase map lifecycle gate (US-0082 / DEC-0065) — before handoff to

package/template/.cursor/commands/auto.md

@@ -71,6 +71,48 @@ Operators must follow the runbook recipe
 `stop_reason` vocabulary: `completed`, `decision_gate`, `missing_input`,
 `pause_request`, `loop_max`, `error`, `blocked`.
 
+## Full-autonomy mode + outer driver (US-0092 / DEC-0078)
+
+**`AUTO_FLOW_MODE=full_autonomy`** (exact literal, default-off) enables the shipped
+stdlib outer driver **`scripts/auto_outer_driver.py`**. The driver **loops hook
+invocations** — spawn-only preserved (**BUG-0006**); it never performs phase-role work.
+
+Operator recipe: set scratchpad keys → run
+`python scripts/auto_outer_driver.py --repo .` once → interpret exit table in
+**`docs/engineering/runbook.md`** § **Full-autonomy outer driver (US-0092)**.
+
+**Drain-advance-without-pause**: with **`full_autonomy`** + **`AUTO_BACKLOG_DRAIN=1`**
+(or bug-queue policy), segment completion schedules the next OPEN story/bug
+**immediately** without operator re-`/auto`; **`resume_brief`** +
+**`state.md`** refresh per **DEC-0069** at every boundary.
+
+### Full-autonomy stop matrix (US-0092)
+
+**Invariant**: **`full_autonomy`** relaxes recoverable transient stops and operator
+re-invocation, not governance gates. **`RELEASE_PUBLISH_MODE=auto`** remains
+explicit opt-in for publish (unchanged default-off).
+
+| Condition | US-0088 (all modes) | `full_autonomy` delta |
+|-----------|---------------------|------------------------|
+| Next phase, no hard stop | Continue inner `/auto` | Outer driver **re-invokes** when Cursor ends turn early |
+| `decision_gate` | Hard stop | **No change — hard** |
+| Unrecoverable `error` | Hard stop | **No change — hard** |
+| Critical `missing_input` | Hard stop | **No change — hard** |
+| Transient `missing_input` (recoverable) | Hard stop | **Relaxable** — bounded block-retry (`AUTO_BLOCK_RETRY_MAX`) |
+| `pause_request` / `AUTO_PAUSE_REQUEST` | Hard stop | **No change — hard** |
+| `loop_max` / `AUTO_LOOP_MAX_CYCLES` | Hard stop | **No change — hard** |
+| `blocked` — transient/sync | Hard stop | **Relaxable** when ledger classifies recoverable |
+| `blocked` — isolation / strict-proof / ownership | Hard stop | **No change — hard** |
+| UAT/QA fail | Hard stop (operator) | **Relaxable** when `AUTO_IMPLEMENTATION_LOOP=1` |
+| Segment complete + `AUTO_BACKLOG_DRAIN=1` | Advance (may need manual re-`/auto`) | **Drain-without-pause** — immediate next item |
+| `BACKLOG_MAX_STORIES_REACHED` | Hard stop | **No change — hard** |
+| `AUTO_SCHEDULER_CONFLICT` | Hard stop | **No change — hard** |
+| Security deny (`.env`, intake evidence mutation) | Hard deny | **No change — hard** |
+
+Block-retry ledger: append-only **`handoffs/auto_block_retry/<orchestrator_run_id>.jsonl`**
+(names-only; cap exhaustion → exit **6** `BLOCK_RETRY_CAP_EXHAUSTED`). See architecture
+**`# US-0092`** and **`docs/engineering/auto-orchestration-reference.md`**.
+
 ## Full specification (US-0080 / DEC-0062)
 
 Long prose, expanded mode semantics, and **Steps 1–13** detail live in

package/template/.cursor/commands/qa.md

@@ -48,6 +48,14 @@ QA completion evidence is required before `/release` may proceed. Record finding
 `RELEASE_QA_BLOCKERS_OPEN`. When clear, handoff to `/verify-work` so release gate can
 verify no unresolved blockers.
 
+## Self-verify UAT probes (US-0092 / DEC-0078)
+
+Share the **`scripts/uat_probe_lib.py`** resolver with **`/verify-work`**: derive
+acceptance steps, execute probes where stack profile resolves, record evidence in
+**`sprints/Sxxxx/uat.json`** `probe_results[]` and **`sprints/Sxxxx/qa-findings.md`**.
+Fail closed with **`UAT_PROBE_UNRESOLVED`** (not PASS) when no probe maps.
+Forbidden: auto-read **`.env`**, mutate intake evidence — **`UAT_PROBE_FORBIDDEN`**.
+
 ## Steps
 0. If `SECURITY_REVIEW=1`, verify `docs/engineering/security-review.md` exists
    and has no unresolved `critical` findings before proceeding. If unresolved

package/template/.cursor/commands/release.md

@@ -241,6 +241,17 @@ Guardrails:
      target-scoped repair and append entry to `docs/engineering/legacy-drift-audit.md`.
    - Behavior is deterministic and documented in runbook; do not mutate
      unrelated stories.
+3f. README feature coverage gate (US-0091 / DEC-0074):
+   - Read merged scratchpad `README_FEATURE_COVERAGE_ENFORCE` (default `0`).
+   - When `0`: skip with `skipped` evidence in `sprints/Sxxxx/release-findings.md`
+     § doc gates (grandfathering / migration pass).
+   - When `1`: run
+     `python scripts/validate_readme_feature_coverage.py --repo . --enforce`.
+   - On failure: emit `README_FEATURE_COVERAGE_BLOCKED` plus sub-codes on stderr;
+     remediation lists each missing id and target `root_h2` / `dev_h2` from
+     `docs/engineering/context/readme-section-affinity.json`.
+   - Active + `template/.cursor/commands/release.md` byte-identical step **3f**
+     block (full-file parity per US-0017).
 4. Verify UAT completeness (DEC-0009): confirm all sprint UAT artifacts (`uat.json`,
    `uat.md`) are in populated/verified state per DEC-0009. All steps must have
    recorded results. If any UAT is placeholder or incomplete, block release and

package/template/.cursor/commands/verify-work.md

@@ -94,8 +94,23 @@ traceable for generated-project scope:
   `TEST_SCAFFOLD_GENERATION_FAILED` and require `/execute` or `/qa` rerun with
   deterministic evidence capture.
 
+## Self-verify UAT probes (US-0092 / DEC-0078)
+
+When stack profile resolves, derive UAT steps from acceptance and execute probes via
+the shared resolver **`scripts/uat_probe_lib.py`** (active + `template/scripts/` mirror).
+Record evidence in **`sprints/Sxxxx/uat.json`** `probe_results[]` and
+**`sprints/Sxxxx/qa-findings.md`** (path refs for stdout/stderr — no inline secrets).
+**No silent PASS** — unresolvable steps must record fail-closed reason codes:
+
+`UAT_PROBE_UNRESOLVED`, `UAT_STACK_PROFILE_UNKNOWN`, `UAT_PROBE_TIMEOUT`,
+`UAT_PROBE_FAILED`, `UAT_PROBE_FORBIDDEN`, `UAT_PROBE_PASS`.
+
+Probe catalog: **`build`**, **`test`**, **`api_health`**, **`process_health`**,
+**`browser_smoke`**, **`cli_smoke`**, **`manual_operator`**. CLI:
+`python scripts/uat_probe_lib.py --repo . --step "<acceptance step>" --report`.
+
 ## Steps
-1. Convert acceptance criteria into testable UAT steps. Derive steps directly from the story's acceptance criteria in `docs/product/acceptance.md`. Each AC should map to at least one UAT step.
+1. Convert acceptance criteria into testable UAT steps. Derive steps directly from the story's acceptance criteria in `docs/product/acceptance.md`. Each AC should map to at least one UAT step. Run **`scripts/uat_probe_lib.py`** for each step where automation applies; record `probe_results[]` in **`uat.json`**.
 2. Populate UAT artifacts: write derived steps into `uat.json` (with description and result per step, accurate pass/fail counts) and `uat.md` (step list with results, summary section). Ensure UAT artifacts are in **populated** state per DEC-0009 — not placeholder.
 3. Record results and failures.
 4. Update state with pass/fail summary.

package/template/.cursor/rules/caveman.mdc

@@ -0,0 +1,184 @@
+---
+description: "Caveman mode (US-0089) — optional response-side terse voice, default off"
+globs: ["**/*"]
+---
+
+# Caveman mode (US-0089)
+
+This rule composes an optional **response-side** terse / imperative assistant
+voice. It is **default off**. When `CAVEMAN_MODE` is unset or `0`, this rule
+adds **zero** behavioral change and the assistant responds exactly as it did
+pre-US-0089.
+
+Inspired by JuliusBrussee/caveman (MIT). External reference only; not vendored.
+
+## Scratchpad gate (authoritative across subagent spawns)
+
+Read the merged scratchpad (`.cursor/scratchpad.md`, then optional
+`.cursor/scratchpad.local.md` overrides per **DEC-0055**) for these keys:
+
+- `CAVEMAN_MODE=0|1` — default `0`. Absence is equivalent to `0`.
+- `CAVEMAN_LEVEL=lite|full|ultra` — default empty.
+  - With `CAVEMAN_MODE=0`: inert regardless of value.
+  - With `CAVEMAN_MODE=1` and `CAVEMAN_LEVEL` empty: treat as `full`
+    (mid-tier default, matching upstream reference).
+  - With `CAVEMAN_MODE=1` and a listed level: apply that level.
+  - With `CAVEMAN_MODE=1` and any other non-empty value: fail closed with
+    deterministic reason code `CAVEMAN_LEVEL_UNKNOWN` and fall back to
+    pre-US-0089 voice (no terseness applied) while continuing the turn.
+- `CAVEMAN_COMPRESS_INPUT=0|1` — **reserved for US-0090**; inert in US-0089;
+  no behavior until the compression story ships.
+- `CAVEMAN_FILE_SCOPE=` — **reserved for US-0090**; inert in US-0089; no
+  behavior until the compression story ships.
+
+Scratchpad values are **authoritative across subagent spawns**. Session
+toggle phrases (see below) are overlays for the current conversation only
+and do NOT persist across a fresh subagent context.
+
+## Literal-region invariant (9-zone hard MUST)
+
+When `CAVEMAN_MODE=1`, the following output regions remain **byte-literal**
+(no abbreviation, no rewording, no casing change). This rule is phrased as
+**MUST**, not SHOULD:
+
+1. **Fenced code blocks** — both plain triple-backtick blocks and CODE
+   REFERENCE blocks of the form `startLine:endLine:filepath`. Content, line
+   numbers, filepath, language tags, and whitespace preserved.
+2. **File / path strings** — anything matching
+   `` `[\w./-]+\.(md|py|ps1|sh|json|mdc|ts|tsx|js|jsx|yml|yaml|toml|ini|env|example|manifest)` ``
+   or enclosed in backticks that points to a repo path. Preserve extension
+   and case.
+3. **AC checklist items** — bullets of form `- [ ]` or `- [x]` and their
+   entire text (AC-1..AC-N).
+4. **Reason codes** — `ALL_CAPS_WITH_UNDERSCORES` tokens such as
+   `PHASE_CONTEXT_ISOLATION_VIOLATION`, `RUNTIME_PROOF_MISSING`,
+   `AUTO_RESUME_ERROR`, `AUTO_SCHEDULER_CONFLICT`, `REMOTE_TARGET_UNKNOWN`,
+   `CAVEMAN_LEVEL_UNKNOWN`, `INTAKE_PERSISTENCE_BLOCKED`.
+5. **IDs** — `US-xxxx`, `DEC-xxxx`, `R-xxxx`, `BUG-####`, `S0xxx`, `T-xxx`.
+6. **Contract markers** — `[BUG_VALIDATION_OK]`,
+   `[INTAKE_EVIDENCE_VALIDATION_OK]`, `[SCRATCHPAD_PAIR_OK]`,
+   `[ARTIFACT_ORDERING_ANCHOR_AMBIGUOUS]`, `[CODEBASE_MAP_OK]`, and siblings.
+7. **Strict-proof tuple fields** — `orchestrator_run_id`, `runtime_proof_id`,
+   `proof_hash`, `proof_issued_at`, `proof_ttl_seconds`, `phase_id`, `role`
+   (DEC-0038).
+8. **Isolation evidence fields** — `fresh_context_marker`, `evidence_ref`,
+   `timestamp` (DEC-0029).
+9. **Commit / git refs** — quoted `git commit` messages, branch names, SHAs,
+   `HEAD`, tag names.
+
+Forbidden "garbling" examples (never permitted even under `ultra`): dropping
+the `US-` prefix from an ID, lowercasing a reason code, collapsing a fenced
+code block into a bullet, truncating a path mid-filename, abbreviating a
+proof hash.
+
+## Non-suppressible gate vocabulary (inherited from US-0088)
+
+Caveman voice MUST NOT remove or abbreviate the following gate tokens — they
+render byte-literal even under `CAVEMAN_LEVEL=ultra`:
+
+- `decision_gate`
+- `error`
+- `pause`
+- `loop_max`
+- `blocked`
+- `missing input`
+- `[BUG_VALIDATION_OK]`
+- `[INTAKE_EVIDENCE_VALIDATION_OK]`
+- `[SCRATCHPAD_PAIR_OK]`
+
+## Operator toggle phrases (canonical set)
+
+| Phrase | Effect |
+|--------|--------|
+| `caveman on` | Enable Caveman voice for the session (overlay). Effective from the next assistant turn. |
+| `caveman off` | Disable Caveman voice for the session (overlay). Effective from the next assistant turn. |
+| `stop caveman` | Alias for `caveman off`. |
+| `normal mode` | Alias for `caveman off`. |
+| `caveman: lite|full|ultra` | Set level for the session (implies `caveman on`). Effective from the next assistant turn. Accepts the three literal tokens `caveman: lite`, `caveman: full`, `caveman: ultra`. |
+
+Determinism rules:
+
+- Scratchpad `CAVEMAN_MODE` / `CAVEMAN_LEVEL` are **authoritative across
+  subagent spawns**; session toggles are overlays for the current
+  conversation only and do NOT persist across a fresh subagent context.
+- Within a session, the **last explicit toggle wins**.
+- A mid-turn toggle applies **from the next turn onward**; current-turn
+  machine-verifiable artifacts (gate messages, reason codes, strict-proof
+  tuples, isolation-evidence fields) remain literal regardless of the
+  toggle.
+- Ambiguous phrases (`be caveman-lite`, `quiet caveman`, `cave man off`,
+  etc.) are **not recognized** — only the exact literal matches above fire.
+
+## Composition (non-substitution) with TOKEN_PROFILE
+
+`TOKEN_PROFILE` controls context breadth. `CAVEMAN_MODE` controls reply
+voice. Neither substitutes for the other; setting one does not change the
+other. Combine freely.
+
+## Default-off invariant
+
+With `CAVEMAN_MODE=0` or absent, this rule adds zero behavioral change:
+existing command strings, gate ordering, spawn-only phrasing (BUG-0006),
+contract-test token lists, `AUTO_QUIET` non-suppressible vocabulary
+(US-0088), user-visible ID metadata (US-0071), strict-proof tuples
+(DEC-0038), and isolation evidence fields (DEC-0029) all remain unchanged.
+
+## Non-goals (US-0089)
+
+- No input-side file compression. `CAVEMAN_COMPRESS_INPUT` and
+  `CAVEMAN_FILE_SCOPE` are documented no-ops here; US-0090 owns that
+  vertical.
+- No change to `TOKEN_PROFILE` (DEC-0035 / US-0080), context packs, archive
+  policy, or phase-context slimming.
+- No rewrite of canonical artifacts (`docs/product/backlog.md`,
+  `docs/product/acceptance.md`, `docs/engineering/state.md` schema,
+  `docs/engineering/decisions.md`, DEC files).
+- No new npm / Python dependencies. No `package.json` edit.
+- No vendor plugin install. No package-manager install recipe is surfaced;
+  the JuliusBrussee/caveman reference is documentation-only.
+- No change to spawn-only orchestration (US-0048 / DEC-0029 / BUG-0006),
+  strict runtime proof (DEC-0038), `AUTO_QUIET` non-suppressible list
+  (US-0088), or US-0071 visible-metadata rules.
+
+## Voice compression (when CAVEMAN_MODE=1)
+
+### Precedence
+
+When `CAVEMAN_MODE=1`, voice-compression directives in **this rule** override
+conflicting **user rule** prose-style guidance (e.g. "write complete sentences",
+"blog-post quality") for **assistant reply voice only**; does **not** override
+user rules for tool usage, git safety, security, or commit policy.
+
+### Intensity levels
+
+| Level | Semantics | Example pattern |
+|-------|-----------|-----------------|
+| `lite` | Drop filler but keep grammatical sentences | Before: "I will now explain the orchestration gate because plan-verify requires it." After: "Orchestration gate required for plan-verify. Run gate check next." |
+| `full` | Drop articles + fragments OK | Before: "The spawn-only orchestrator must dispatch a fresh subagent for each phase." After: "Spawn-only orchestrator dispatches fresh subagent per phase. Next: run `/execute`." Pattern: `[thing] [action] [reason]. [next step].` |
+| `ultra` | Abbreviate ordinary prose words only; literals per §6 stub | Before: "The auth middleware returns HTTP 401 when the bearer token is absent from the Authorization header." After: "Auth middleware → 401. Bearer token absent. Check header." |
+
+Goal: **token-saving terse/imperative prose** — **not** stereotypical caveman
+roleplay.
+
+### Drop rules
+
+Drop articles, filler, hedging, and pleasantries where level permits; keep
+technical terms exact; fragments OK at `full` and `ultra`.
+
+### Auto-Clarity
+
+Pause compression for **security** warnings, **destructive** operations, or
+**ambiguous** compression — deliver the clear part in full prose, then resume
+Caveman voice.
+
+### Persistence
+
+Voice compression is active in **every response** while `CAVEMAN_MODE=1`;
+turn off only via scratchpad keys or the documented toggle phrases above.
+
+### Ultra and literal regions
+
+**Pointer stub** — defer to existing `## Literal-region invariant (9-zone hard
+MUST)` above. Reason codes, IDs, paths, and proof tuples remain **byte-literal**.
+At `ultra`, abbreviate ordinary prose words only — **never** abbreviate reason
+codes or gate tokens. **No duplicate** 9-zone list here.