its-magic 0.1.2-43 → 0.1.2-49

package/README.md

@@ -24,6 +24,28 @@ with pause/resume, decision gates, and persistent artifacts.
 - Built-in benchmarks (live, prompted, headless).
 - Multiplatform distribution (npm, Chocolatey, Homebrew).
 
+<!-- readme-feature-coverage-catalog -->
+
+### Feature coverage catalog (US-0091)
+
+- `/bin` — POSIX npm installer + Linux remote test targets (WSL / SSH / Docker) (`US-0084`).
+- `/choco` — Configurable Multi-Target Release Publish with Confirmation Gate (`US-0054`).
+- `/devops` — First-Class Bug Issue Workflow (Open/Closed) (`US-0079`).
+- `/engineering` — Agent-Driven Codebase Map Bootstrap (`US-0082`).
+- `/engineering` — Remote Runtime Connectivity Contract for QA/Release/Publish (`US-0064`).
+- `/install` — Template/install payload omits intake gate scripts (`BUG-0001`).
+- `/intake` — Optional Caveman-style input compression (safe file scope) (`US-0090`).
+- `/lint` — CI/CD Workflows (`US-0007`).
+- `/or` — Cursor Caveman mode (scratchpad-configurable terse responses) (`US-0089`).
+- `/push` — Multiplatform Distribution (`US-0009`).
+- `/run-tests` — Baseline Regression Cleanup for Installer and Version Sync Checks (`US-0074`).
+- `/template` — End-to-End Lifecycle QA for `its-magic` Install/Upgrade/Clean (`US-0041`).
+- `/upgrade` — Missing scripts still occur on install modes missing/upgrade (`BUG-0003`).
+- `/usr` — Global Linux install fails: empty `install_include_paths` when manifest is CRLF (`BUG-0008`).
+- `/workdir` — installer.sh fails in shell path with `set: Illegal option -` (`BUG-0004`).
+- `MIGRATION` scratchpad flag — Smart Upgrade Mode (`US-0018`).
+- `US-0016` scratchpad flag — Homebrew Version Sync (`US-0016`).
+
 ## Setup
 
 its-magic is an installer you run once per repo. It copies the AI dev team
@@ -947,6 +969,12 @@ Troubleshooting quick guide:
   - Fix JSON syntax and retry.
 - Secret-like inline value detected:
   - Replace literal secret with an env-var reference field.
+- **CI still runs its-magic packaging jobs?** Your project received a pre-fix workflow.
+  Run **`its-magic --target <repo> --mode upgrade`** (or **`--mode clean`** then reinstall)
+  to refresh `.github/workflows/ci.yml` from the corrected template. After upgrade, GitHub
+  Actions should show only **`checks`** and **`auto-fix`** jobs — not `npm-test`,
+  `brew-test`, or `choco-test`. Fix applies to new installs/upgrades; stale repos heal on
+  next upgrade (**US-0018**).
 
 Team/local (recommended in `.cursor/scratchpad.local.md`):
 
@@ -1105,6 +1133,68 @@ push / PR  ──>  checks  ──>  PASS  ──>  done
 Auto-fix commits appear as `ci: auto-fix attempt N/3`. After 3 retries the
 workflow stops and points you to `scripts/validate-and-push` for local fixing.
 
+<!-- readme-feature-coverage-catalog -->
+
+### Feature coverage catalog (US-0091)
+
+- `/acceptance` — Mandatory Intake Question Packs for First and Small Intakes (`US-0068`).
+- `/ask` — /ask Command: Context-Aware Questions Without Workflow (`US-0020`).
+- `/ask` — Context Compaction and Tiered Token-Cost Optimization Mode (`US-0053`).
+- `/auto` — Configurable Auto Phase Selection Policy (`US-0070`).
+- `/auto` — Continuous `/auto` Backlog-Drain Mode with Fine-Tune Switches (`US-0044`).
+- `/auto` — Fresh Subagent Context Per Phase and /auto Orchestration (`US-0023`).
+- `/auto` — Mid-Process `/auto` Continuation with Deterministic Resume Point (`US-0037`).
+- `/auto` — Strict Phase Role Enforcement in /auto Orchestration (`US-0069`).
+- `/auto` — Strict Runtime Proof for Per-Phase Subagent Isolation (`US-0056`).
+- `/auto` — Token-Cost Hardening for Orchestrated Runs (`US-0080`).
+- `/auto` — `/auto` continuous multi-phase loop + quiet drain (close one-phase-stop gap) (`US-0088`).
+- `/auto` — `/auto` executes phases without spawning required subagents (`BUG-0006`).
+- `/auto` — `/auto` explicit bug targeting (fix all OPEN bugs / fix `BUG-####`) (`US-0087`).
+- `/auto` — `/auto` fails with stale resume target after bug intake (`BUG-0005`).
+- `/check` — Optional Documentation Pack (Design Concept, CRS, Technical Spec) (`US-0031`).
+- `/confirmation` — Enforced Interactive Intake Question Evidence (`US-0078`).
+- `/connectivity` — Release Operator Run/Connect/Verify Hints Contract (`US-0067`).
+- `/decision` — Optional Fresh-Project ID Namespace Bootstrap (`US-0052`).
+- `/derived` — Deterministic Status Reconciliation Command (`US-0055`).
+- `/developer-dense` — Documentation Audience Profiles and Dual README Strategy (`US-0077`).
+- `/docs` — Installer-Owned `its_magic/` Folder for Framework Metadata (`US-0062`).
+- `/engineering` — Deterministic Context Slimming and Archive Enforcement Across Core Artifacts (`US-0072`).
+- `/engineering` — Deterministic State Hot-Surface Rollover and Archive Enforcement (`US-0060`).
+- `/engineering` — OS-Aware Runbook Command Auto-Bootstrap with Verified Quality Gates (`US-0063`).
+- `/flag` — Release Gate for Command/Flag Documentation Delta (`US-0030`).
+- `/intake` — Critical Evaluation in Intake and Architecture (`US-0021`).
+- `/intake` — Deterministic Intake Runtime Capability Guard and Single-Writer Drift Safety (`US-0059`).
+- `/intake` — Multi-Repo and Contract Compatibility Observability (`US-0034`).
+- `/intake` — intake evidence records asked questions that were never asked (`BUG-0007`).
+- `/integration` — Generated Test Scaffolding and Auto-Run Contract (`US-0066`).
+- `/managed` — Runtime QA Autopilot for Generated Projects (`US-0065`).
+- `/new` — First-Intake Full-Plan Coverage and Story-Map Gate (`US-0081`).
+- `/order` — Deterministic Artifact Ordering and Write Discipline (`US-0058`).
+- `/phases` — Cross-Phase Artifact Ownership Guard and Deterministic Archive Control (`US-0061`).
+- `/planning` — User-Visible Internal Metadata Sanitization Guard (`US-0071`).
+- `/product` — Backlog Reconciliation Gate for Released Sprints (`US-0043`).
+- `/push` — Phase-Triggered Sync Policy with Guarded Auto-Push (`US-0038`).
+- `/release` — Enforced Per-Phase Subagent Isolation with Audit Gate (`US-0048`).
+- `/release` — Legacy DONE-Story Acceptance/Traceability Backfill Guard (`US-0049`).
+- `/release` — Per-Sprint Release Notes and Release Queue Tracker (`US-0040`).
+- `/release` — Release Findings Artifact and Post-QA Issue Workflow (`US-0042`).
+- `/release` — Release Gate Tightening for Check-In Tests and QA/UAT Completion (`US-0039`).
+- `/remote` — Automation-driven remote execution selection (Docker / SSH / NL container intent) (`US-0086`).
+- `/remote` — Gitignored `.env` for remote and release connectivity (no AI read) (`US-0085`).
+- `/repetitive` — Delegable Intake Clarification Without Hard Blocks (`US-0083`).
+- `/research` — Knowledge Curation & Early Research (`US-0029`).
+- `/risk` — Intelligent Intake Decomposition and Risk-Aware PO Questioning (`US-0051`).
+- `/scratchpad` — Executable Scratchpad-Driven Sync and Auto-Push Wiring (`US-0076`).
+- `/scratchpad` — Scratchpad Delivery Simplification (Example-Only Install Policy) (`US-0073`).
+- `/scratchpad` — Upgrade Scratchpad Example–First Refresh (Fix Example Drift vs Materialized Baseline) (`US-0075`).
+- `/scratchpad` — Upgrade-Safe Scratchpad Example Refresh and Parity (`US-0057`).
+- `/sprint-plan` — Explicit `/sprint-plan --bulk` Mode (`US-0046`).
+- `/sprint-plan` — Sprint Sizing Rules and Configurable Sprint Planning (`US-0022`).
+- `/story` — Optional Feature User Guide Generation (`US-0032`).
+- `/uat` — UAT Artifact Lifecycle and Ownership (`US-0027`).
+- `SKILL` scratchpad flag — Skill and Templates (`US-0004`).
+- `US-0001` scratchpad flag — Core Workflow Commands (`US-0001`).
+
 ## Walkthrough examples
 
 ### Example 1: New feature from idea
@@ -1240,6 +1330,35 @@ Reliable pattern:
 - `decisions/`: decision records.
 - `.github/workflows/`: CI/CD templates.
 
+<!-- readme-feature-coverage-catalog -->
+
+### Feature coverage catalog (US-0091)
+
+- `/evidence` — Backlog-to-Sprint Traceability Contract (`US-0025`).
+- `/exit` — Milestone Lifecycle Definition and Exit Criteria (`US-0026`).
+- `/field` — Official Remote Config Template, Docs, and Fail-Fast Validation (`US-0036`).
+- `/installer` — Runbook Completion (`US-0015`).
+- `/intake` — Component-Scoped Execution Mode with Protection Guards (`US-0035`).
+- `/intake` — Configurable Guided Intake Behavior (`US-0033`).
+- `/map-codebase` — map-codebase does not write codebase-map in fresh repos (`BUG-0002`).
+- `/memory-audit` — Memory Drift Audit Command (`US-0024`).
+- `/product` — Canonical Story Status Source + Global Drift Guard (`US-0045`).
+- `/product` — Clean Install Hygiene and Complete Clean-Repo Coverage (`US-0050`).
+- `/security-review` — Security & Compliance Review Agent (`US-0028`).
+- `/skip` — Explicit Bulk Execute Orchestration Mode (`US-0047`).
+- `/strings` — Clean Placeholder Content from Templates and Active Files (`US-0019`).
+- `/write` — Artifact Templates and Starter Docs (`US-0006`).
+- `AUTO_FLOW_MODE` scratchpad flag — Automation Modes (`US-0011`).
+- `README` scratchpad flag — Voice Input Documentation (`US-0010`).
+- `TEAM_MODE` scratchpad flag — Team Mode (`US-0013`).
+- `US-0002` scratchpad flag — AI Behavior Rules (`US-0002`).
+- `US-0003` scratchpad flag — Subagent Definitions (`US-0003`).
+- `US-0005` scratchpad flag — Hook System (`US-0005`).
+- `US-0008` scratchpad flag — CLI Installer (`US-0008`).
+- `US-0012` scratchpad flag — Benchmark Suite (`US-0012`).
+- `US-0014` scratchpad flag — Quality Chain (3-Layer) (`US-0014`).
+- `US-0017` scratchpad flag — Template Drift Guard (`US-0017`).
+
 ## Developer and release deep-dive
 
 ### CI/CD via runbook

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "its-magic",
-  "version": "0.1.2-43",
+  "version": "0.1.2-49",
   "description": "its-magic - AI dev team workflow for Cursor.",
   "license": "MIT",
   "bin": {

package/scripts/check_intake_template_parity.py

@@ -4,7 +4,11 @@
 Scoped modes (DEC-0073 §10 / US-0090):
   --scope=intake          (default) DEC-0063 intake pair table.
   --scope=caveman-compress DEC-0073 caveman input-compression pair table.
-  --scope=all              union of both tables.
+  --scope=readme-feature-coverage DEC-0074 README feature-coverage pair table.
+  --scope=downstream-ci-guard   DEC-0075 downstream CI guard script pair table.
+  --scope=us-0092               DEC-0078 full-autonomy outer driver + probe surfaces.
+  --scope=us-0093               DEC-0079 browser UAT probe surfaces.
+  --scope=all              union of all tables.
 """
 
 from __future__ import annotations
@@ -33,10 +37,94 @@ CAVEMAN_COMPRESS_PAIRS: tuple[tuple[str, str], ...] = (
      "template/docs/engineering/auto-orchestration-reference.md"),
 )
 
+README_FEATURE_COVERAGE_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        "scripts/validate_readme_feature_coverage.py",
+        "template/scripts/validate_readme_feature_coverage.py",
+    ),
+    (
+        "scripts/readme_feature_coverage_lib.py",
+        "template/scripts/readme_feature_coverage_lib.py",
+    ),
+    (
+        "docs/engineering/context/readme-section-affinity.json",
+        "template/docs/engineering/context/readme-section-affinity.json",
+    ),
+    (".cursor/commands/release.md", "template/.cursor/commands/release.md"),
+    ("docs/engineering/runbook.md", "template/docs/engineering/runbook.md"),
+    (
+        "docs/engineering/context/installer-owned-paths.manifest",
+        "template/docs/engineering/context/installer-owned-paths.manifest",
+    ),
+    (
+        "scripts/check_intake_template_parity.py",
+        "template/scripts/check_intake_template_parity.py",
+    ),
+)
+
+US0092_PAIRS: tuple[tuple[str, str], ...] = (
+    ("scripts/auto_outer_driver.py", "template/scripts/auto_outer_driver.py"),
+    ("scripts/uat_probe_lib.py", "template/scripts/uat_probe_lib.py"),
+    (
+        "docs/engineering/context/installer-owned-paths.manifest",
+        "template/docs/engineering/context/installer-owned-paths.manifest",
+    ),
+    (".cursor/commands/auto.md", "template/.cursor/commands/auto.md"),
+    (".cursor/commands/verify-work.md", "template/.cursor/commands/verify-work.md"),
+    (".cursor/commands/qa.md", "template/.cursor/commands/qa.md"),
+    (
+        "docs/engineering/auto-orchestration-reference.md",
+        "template/docs/engineering/auto-orchestration-reference.md",
+    ),
+    ("docs/engineering/runbook.md", "template/docs/engineering/runbook.md"),
+)
+
+US0093_PAIRS: tuple[tuple[str, str], ...] = (
+    ("scripts/uat_probe_lib.py", "template/scripts/uat_probe_lib.py"),
+    (".cursor/commands/verify-work.md", "template/.cursor/commands/verify-work.md"),
+    (".cursor/commands/qa.md", "template/.cursor/commands/qa.md"),
+    (".cursor/commands/execute.md", "template/.cursor/commands/execute.md"),
+    (
+        ".cursor/scratchpad.local.example.md",
+        "template/.cursor/scratchpad.local.example.md",
+    ),
+    ("docs/engineering/runbook.md", "template/docs/engineering/runbook.md"),
+    (
+        "docs/engineering/auto-orchestration-reference.md",
+        "template/docs/engineering/auto-orchestration-reference.md",
+    ),
+    (
+        "docs/engineering/context/installer-owned-paths.manifest",
+        "template/docs/engineering/context/installer-owned-paths.manifest",
+    ),
+)
+
+DOWNSTREAM_CI_GUARD_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        "scripts/check_downstream_ci_guard.py",
+        "template/scripts/check_downstream_ci_guard.py",
+    ),
+    (
+        "scripts/downstream_ci_guard_lib.py",
+        "template/scripts/downstream_ci_guard_lib.py",
+    ),
+)
+
 SCOPES: dict[str, tuple[tuple[str, str], ...]] = {
     "intake": INTAKE_TEMPLATE_PAIRS,
     "caveman-compress": CAVEMAN_COMPRESS_PAIRS,
-    "all": INTAKE_TEMPLATE_PAIRS + CAVEMAN_COMPRESS_PAIRS,
+    "readme-feature-coverage": README_FEATURE_COVERAGE_PAIRS,
+    "downstream-ci-guard": DOWNSTREAM_CI_GUARD_PAIRS,
+    "us-0092": US0092_PAIRS,
+    "us-0093": US0093_PAIRS,
+    "all": (
+        INTAKE_TEMPLATE_PAIRS
+        + CAVEMAN_COMPRESS_PAIRS
+        + README_FEATURE_COVERAGE_PAIRS
+        + DOWNSTREAM_CI_GUARD_PAIRS
+        + US0092_PAIRS
+        + US0093_PAIRS
+    ),
 }
 
 

package/scripts/guard_installer_publish.py

@@ -1,5 +1,8 @@
 #!/usr/bin/env python3
-"""Prepublish / CI guard: installer.sh LF + POSIX-safe startup tokens (US-0084 / AC-2)."""
+"""Prepublish / CI guard: installer.sh LF + POSIX-safe startup tokens (US-0084 / AC-2).
+
+BUG-0008: reject CR bytes in installer-owned-paths.manifest (CRLF breaks POSIX awk section match).
+"""
 
 from __future__ import annotations
 
@@ -10,6 +13,10 @@ from pathlib import Path
 
 ROOT = Path(__file__).resolve().parents[1]
 INSTALLER_SH = ROOT / "installer.sh"
+INSTALLER_MANIFESTS = (
+    ROOT / "docs" / "engineering" / "context" / "installer-owned-paths.manifest",
+    ROOT / "template" / "docs" / "engineering" / "context" / "installer-owned-paths.manifest",
+)
 
 FORBIDDEN_TOKENS = (
     "set -euo",
@@ -32,6 +39,17 @@ def main() -> int:
             file=sys.stderr,
         )
         return 1
+    for man in INSTALLER_MANIFESTS:
+        if not man.is_file():
+            continue
+        mdata = man.read_bytes()
+        if b"\r" in mdata:
+            print(
+                f"guard_installer_publish: CR/LF (\\r) bytes found in {man.relative_to(ROOT)} — "
+                "use LF only (.gitattributes *.manifest; BUG-0008).",
+                file=sys.stderr,
+            )
+            return 1
     text = data.decode("utf-8", errors="replace")
     for token in FORBIDDEN_TOKENS:
         if token in text:

package/template/.cursor/commands/architecture.md

@@ -78,12 +78,22 @@ description: "its-magic architecture: define approach, risks, and decisions."
    - If `USER_GUIDE_MODE=0`, add no required user-guide steps or blocking checks (zero overhead).
    - If `USER_GUIDE_MODE=1`, reference canonical user-guide path and schema in
      architecture/state for in-scope feature stories; see runbook user-guide section.
-9. Triad hot-surface gate (DEC-0054) when `docs/engineering/architecture.md` is
-   mutated:
-   - run `python scripts/enforce-triad-hot-surface.py --rollover` then `--check`
-     from repository root,
-   - on failure stop with `STATE_ARCHIVE_REQUIRED` or
-     `ARTIFACT_HOT_SURFACE_OVERSIZE`,
+9. Triad hot-surface gate (DEC-0054; heading policy DEC-0076 / BUG-0010) when
+   `docs/engineering/architecture.md` is mutated:
+   - **Authoring mandate**: append new story sections as H1 `# US-xxxx` and new
+     bug sections as H1 `# BUG-xxxx` (not `## US-` / `## BUG-`).
+   - **Before** mutating the file, capture
+     `baseline_h2_count = count_h2_story_headings(architecture.md)` via
+     `python scripts/enforce-triad-hot-surface.py` (legacy `## US-xxxx` sections
+     remain rollover-visible; count must not increase during `/architecture`).
+   - Run `python scripts/enforce-triad-hot-surface.py --rollover` then `--check`
+     from repository root.
+   - Run heading policy check:
+     `python scripts/enforce-triad-hot-surface.py --check-arch-heading-policy
+     --baseline-h2-count <baseline_h2_count>`.
+   - On failure stop with `STATE_ARCHIVE_REQUIRED`, `ARTIFACT_HOT_SURFACE_OVERSIZE`,
+     or **`ARCH_STORY_HEADING_LEVEL_INVALID`** (non-suppressible `blocked` when H2
+     story-heading count increased),
    - preserve non-target history in archive packs only (never delete unrelated
      story sections without archival evidence).
 10. Codebase map lifecycle gate (US-0082 / DEC-0065) — before handoff to

package/template/.cursor/commands/auto.md

@@ -71,6 +71,48 @@ Operators must follow the runbook recipe
 `stop_reason` vocabulary: `completed`, `decision_gate`, `missing_input`,
 `pause_request`, `loop_max`, `error`, `blocked`.
 
+## Full-autonomy mode + outer driver (US-0092 / DEC-0078)
+
+**`AUTO_FLOW_MODE=full_autonomy`** (exact literal, default-off) enables the shipped
+stdlib outer driver **`scripts/auto_outer_driver.py`**. The driver **loops hook
+invocations** — spawn-only preserved (**BUG-0006**); it never performs phase-role work.
+
+Operator recipe: set scratchpad keys → run
+`python scripts/auto_outer_driver.py --repo .` once → interpret exit table in
+**`docs/engineering/runbook.md`** § **Full-autonomy outer driver (US-0092)**.
+
+**Drain-advance-without-pause**: with **`full_autonomy`** + **`AUTO_BACKLOG_DRAIN=1`**
+(or bug-queue policy), segment completion schedules the next OPEN story/bug
+**immediately** without operator re-`/auto`; **`resume_brief`** +
+**`state.md`** refresh per **DEC-0069** at every boundary.
+
+### Full-autonomy stop matrix (US-0092)
+
+**Invariant**: **`full_autonomy`** relaxes recoverable transient stops and operator
+re-invocation, not governance gates. **`RELEASE_PUBLISH_MODE=auto`** remains
+explicit opt-in for publish (unchanged default-off).
+
+| Condition | US-0088 (all modes) | `full_autonomy` delta |
+|-----------|---------------------|------------------------|
+| Next phase, no hard stop | Continue inner `/auto` | Outer driver **re-invokes** when Cursor ends turn early |
+| `decision_gate` | Hard stop | **No change — hard** |
+| Unrecoverable `error` | Hard stop | **No change — hard** |
+| Critical `missing_input` | Hard stop | **No change — hard** |
+| Transient `missing_input` (recoverable) | Hard stop | **Relaxable** — bounded block-retry (`AUTO_BLOCK_RETRY_MAX`) |
+| `pause_request` / `AUTO_PAUSE_REQUEST` | Hard stop | **No change — hard** |
+| `loop_max` / `AUTO_LOOP_MAX_CYCLES` | Hard stop | **No change — hard** |
+| `blocked` — transient/sync | Hard stop | **Relaxable** when ledger classifies recoverable |
+| `blocked` — isolation / strict-proof / ownership | Hard stop | **No change — hard** |
+| UAT/QA fail | Hard stop (operator) | **Relaxable** when `AUTO_IMPLEMENTATION_LOOP=1` |
+| Segment complete + `AUTO_BACKLOG_DRAIN=1` | Advance (may need manual re-`/auto`) | **Drain-without-pause** — immediate next item |
+| `BACKLOG_MAX_STORIES_REACHED` | Hard stop | **No change — hard** |
+| `AUTO_SCHEDULER_CONFLICT` | Hard stop | **No change — hard** |
+| Security deny (`.env`, intake evidence mutation) | Hard deny | **No change — hard** |
+
+Block-retry ledger: append-only **`handoffs/auto_block_retry/<orchestrator_run_id>.jsonl`**
+(names-only; cap exhaustion → exit **6** `BLOCK_RETRY_CAP_EXHAUSTED`). See architecture
+**`# US-0092`** and **`docs/engineering/auto-orchestration-reference.md`**.
+
 ## Full specification (US-0080 / DEC-0062)
 
 Long prose, expanded mode semantics, and **Steps 1–13** detail live in

package/template/.cursor/commands/execute.md

@@ -48,6 +48,32 @@ as stale isolation evidence).
 
 Release gate semantics (US-0039): mandatory gates (check-in test, QA, UAT) and no-bypass/override contract are enforced at `/release`; see `.cursor/commands/release.md` and `.cursor/commands/qa.md`.
 
+### Browser UAT self-test (US-0093)
+
+When **`UAT_BROWSER_PROBE_MODE=cursor`** (default) and acceptance steps classify as **`browser_smoke`**
+(or automatable **`manual_operator`** re-routed per **DEC-0079** §4), execute the **Cursor browser MCP**
+sequence during `/execute` when web UI verification applies (**BUG-0006**: **`scripts/uat_probe_lib.py`**
+never invokes MCP — subagent only):
+
+1. **Resolve target URL** — `docs/engineering/runtime-connectivity.md` first `http(s)://`; else
+   `package.json` dev/start + **`DEV_SERVER_PORT`** scratchpad override.
+2. **`browser_navigate`** — load URL; respect enterprise origin allowlist.
+3. **Step plan** — map automatable verbs to **`browser_click`** / **`browser_type`** / **`browser_scroll`**;
+   **never** fill password/credential fields; **never** read **`.env`** paths.
+4. **`browser_screenshot`** — write to **`sprints/Sxxxx/evidence/browser/<probe_id>-<seq>.png`** (max **5**).
+5. **Console + network evidence** — counts + summary path refs only (no inline secrets).
+6. **Verdict** — set **`passed`**, **`reason_code`**, **`browser_evidence_refs`** on the matching
+   **`probe_results[]`** row in **`uat.json`**. **`passed=true`** in **`cursor`** mode requires
+   non-empty **`navigation_url`** + at least one screenshot or console/network summary path — else
+   downgrade to **`UAT_BROWSER_PROBE_FAILED`**.
+7. **Fallback trigger** — MCP unavailable → record **`UAT_BROWSER_UNAVAILABLE`**; when
+   **`UAT_BROWSER_FALLBACK_CHAIN=1`**, stdlib HTTP/Playwright fallback runs via **`uat_probe_lib.py`**.
+   Both fail → **`UAT_BROWSER_PROBE_FAILED`** (no silent PASS).
+
+Optional validation: **`python scripts/uat_probe_lib.py --merge-result <fragment.json>`** —
+evidence-required-on-PASS in **`cursor`** mode. No auto-read **`.env`**, no credential auto-fill,
+no intake evidence mutation.
+
 ## Intake evidence tooling reference (US-0078 / DEC-0060)
 
 Stories that harden intake persistence ship **`scripts/intake_evidence_lib.py`**,
@@ -77,6 +103,29 @@ parity for listed paths: **`python scripts/check_token_cost_parity.py --repo .`*
 - `/execute` must not start/continue implementation solely based on
   non-canonical status evidence.
 
+## Browser UAT self-test (US-0093)
+
+When acceptance steps classify as **`browser_smoke`** (or automatable **`manual_operator`**
+reclassified per **DEC-0079** §4) and **`UAT_BROWSER_PROBE_MODE=cursor`**, execute the **Cursor
+browser MCP** sequence during execute-phase verification — **lib never calls MCP directly**
+(**BUG-0006**):
+
+1. **Resolve target URL** — `docs/engineering/runtime-connectivity.md` first `http(s)://`; else
+   dev-server port from `package.json` + scratchpad **`DEV_SERVER_PORT`**.
+2. **`browser_navigate`** — respect origin allowlist.
+3. **Step plan** — **`browser_click`** / **`browser_type`** / **`browser_scroll`** when
+   automatable; **never** fill password/credential fields or read **`.env`**.
+4. **`browser_screenshot`** → **`sprints/Sxxxx/evidence/browser/<probe_id>-<seq>.png`** (max **5**).
+5. Console + network summary path refs only (no inline secrets).
+6. Write **`browser_evidence_refs`** to **`uat.json`** `probe_results[]`; mirror
+   **Runtime browser evidence** in **`qa-findings.md`**.
+7. MCP unavailable → **`UAT_BROWSER_UNAVAILABLE`** + stdlib fallback when
+   **`UAT_BROWSER_FALLBACK_CHAIN=1`**; validate with
+   **`python scripts/uat_probe_lib.py --merge-result <fragment.json>`**.
+
+Reason codes: **`UAT_BROWSER_UNAVAILABLE`**, **`UAT_BROWSER_PROBE_FAILED`**,
+**`UAT_BROWSER_PROBE_TIMEOUT`**. **No silent PASS** without agent evidence in **`cursor`** mode.
+
 ## Steps
 1. Implement one task at a time.
 2. Update summary and engineering state.

package/template/.cursor/commands/qa.md

@@ -48,6 +48,43 @@ QA completion evidence is required before `/release` may proceed. Record finding
 `RELEASE_QA_BLOCKERS_OPEN`. When clear, handoff to `/verify-work` so release gate can
 verify no unresolved blockers.
 
+## Self-verify UAT probes (US-0092 / DEC-0078)
+
+Share the **`scripts/uat_probe_lib.py`** resolver with **`/verify-work`**: derive
+acceptance steps, execute probes where stack profile resolves, record evidence in
+**`sprints/Sxxxx/uat.json`** `probe_results[]` and **`sprints/Sxxxx/qa-findings.md`**.
+Fail closed with **`UAT_PROBE_UNRESOLVED`** (not PASS) when no probe maps.
+Forbidden: auto-read **`.env`**, mutate intake evidence — **`UAT_PROBE_FORBIDDEN`**.
+
+Reason codes extend with **`UAT_BROWSER_UNAVAILABLE`**, **`UAT_BROWSER_PROBE_FAILED`**,
+**`UAT_BROWSER_PROBE_TIMEOUT`** (**US-0093** / **DEC-0079**).
+
+### Browser UAT self-test (US-0093)
+
+When **`UAT_BROWSER_PROBE_MODE=cursor`** (default) and step classifies as **`browser_smoke`**
+(or automatable **`manual_operator`** reclassified per **DEC-0079** §4), execute the **Cursor
+browser MCP** sequence — **lib never calls MCP directly** (**BUG-0006**):
+
+1. **Resolve target URL** — `docs/engineering/runtime-connectivity.md` first `http(s)://`; else
+   dev-server port from `package.json` + scratchpad **`DEV_SERVER_PORT`**.
+2. **`browser_navigate`** — load health/app URL; respect enterprise origin allowlist.
+3. **Step plan** — map acceptance verbs to **`browser_click`** / **`browser_type`** /
+   **`browser_scroll`** when automatable; **never** fill password/credential fields or read **`.env`**.
+4. **`browser_screenshot`** — write to **`sprints/Sxxxx/evidence/browser/<probe_id>-<seq>.png`**
+   (max **5** per probe).
+5. **Console + network evidence** — counts + summary path refs only (no inline secrets).
+6. **Verdict** — set **`passed`**, **`reason_code`**, **`browser_evidence_refs`** in
+   **`uat.json`** `probe_results[]`; **`passed=true`** in **`cursor`** mode **requires** non-empty
+   **`navigation_url`** + at least one screenshot or console/network summary path — else
+   **`UAT_BROWSER_PROBE_FAILED`**. Mirror under **`qa-findings.md`** **Runtime browser evidence**.
+7. **Fallback** — MCP unavailable → record **`UAT_BROWSER_UNAVAILABLE`**, run stdlib fallback when
+   **`UAT_BROWSER_FALLBACK_CHAIN=1`**; validate via
+   **`python scripts/uat_probe_lib.py --merge-result <fragment.json>`**.
+
+**No silent PASS** — stdlib alone does **not** PASS **`browser_smoke`** in **`cursor`** mode
+without agent **`browser_evidence_refs`**. Security: no auto-read **`.env`**, no credential
+auto-fill, no intake evidence mutation — **`UAT_PROBE_FORBIDDEN`** unchanged.
+
 ## Steps
 0. If `SECURITY_REVIEW=1`, verify `docs/engineering/security-review.md` exists
    and has no unresolved `critical` findings before proceeding. If unresolved

package/template/.cursor/commands/release.md

@@ -241,6 +241,17 @@ Guardrails:
      target-scoped repair and append entry to `docs/engineering/legacy-drift-audit.md`.
    - Behavior is deterministic and documented in runbook; do not mutate
      unrelated stories.
+3f. README feature coverage gate (US-0091 / DEC-0074):
+   - Read merged scratchpad `README_FEATURE_COVERAGE_ENFORCE` (default `0`).
+   - When `0`: skip with `skipped` evidence in `sprints/Sxxxx/release-findings.md`
+     § doc gates (grandfathering / migration pass).
+   - When `1`: run
+     `python scripts/validate_readme_feature_coverage.py --repo . --enforce`.
+   - On failure: emit `README_FEATURE_COVERAGE_BLOCKED` plus sub-codes on stderr;
+     remediation lists each missing id and target `root_h2` / `dev_h2` from
+     `docs/engineering/context/readme-section-affinity.json`.
+   - Active + `template/.cursor/commands/release.md` byte-identical step **3f**
+     block (full-file parity per US-0017).
 4. Verify UAT completeness (DEC-0009): confirm all sprint UAT artifacts (`uat.json`,
    `uat.md`) are in populated/verified state per DEC-0009. All steps must have
    recorded results. If any UAT is placeholder or incomplete, block release and

package/template/.cursor/commands/verify-work.md

@@ -94,8 +94,50 @@ traceable for generated-project scope:
   `TEST_SCAFFOLD_GENERATION_FAILED` and require `/execute` or `/qa` rerun with
   deterministic evidence capture.
 
+## Self-verify UAT probes (US-0092 / DEC-0078)
+
+When stack profile resolves, derive UAT steps from acceptance and execute probes via
+the shared resolver **`scripts/uat_probe_lib.py`** (active + `template/scripts/` mirror).
+Record evidence in **`sprints/Sxxxx/uat.json`** `probe_results[]` and
+**`sprints/Sxxxx/qa-findings.md`** (path refs for stdout/stderr — no inline secrets).
+**No silent PASS** — unresolvable steps must record fail-closed reason codes:
+
+`UAT_PROBE_UNRESOLVED`, `UAT_STACK_PROFILE_UNKNOWN`, `UAT_PROBE_TIMEOUT`,
+`UAT_PROBE_FAILED`, `UAT_PROBE_FORBIDDEN`, `UAT_PROBE_PASS`,
+`UAT_BROWSER_UNAVAILABLE`, `UAT_BROWSER_PROBE_FAILED`, `UAT_BROWSER_PROBE_TIMEOUT`.
+
+Probe catalog: **`build`**, **`test`**, **`api_health`**, **`process_health`**,
+**`browser_smoke`**, **`cli_smoke`**, **`manual_operator`**. CLI:
+`python scripts/uat_probe_lib.py --repo . --step "<acceptance step>" --report`.
+
+### Browser UAT self-test (US-0093)
+
+When **`UAT_BROWSER_PROBE_MODE=cursor`** (default) and step classifies as **`browser_smoke`**
+(or automatable **`manual_operator`** reclassified per **DEC-0079** §4), execute the **Cursor
+browser MCP** sequence — **lib never calls MCP directly** (**BUG-0006**):
+
+1. **Resolve target URL** — `docs/engineering/runtime-connectivity.md` first `http(s)://`; else
+   dev-server port from `package.json` + scratchpad **`DEV_SERVER_PORT`**.
+2. **`browser_navigate`** — load health/app URL; respect enterprise origin allowlist.
+3. **Step plan** — map acceptance verbs to **`browser_click`** / **`browser_type`** /
+   **`browser_scroll`** when automatable; **never** fill password/credential fields or read **`.env`**.
+4. **`browser_screenshot`** — write to **`sprints/Sxxxx/evidence/browser/<probe_id>-<seq>.png`**
+   (max **5** per probe).
+5. **Console + network evidence** — counts + summary path refs only (no inline secrets).
+6. **Verdict** — set **`passed`**, **`reason_code`**, **`browser_evidence_refs`** in
+   **`uat.json`** `probe_results[]`; **`passed=true`** in **`cursor`** mode **requires** non-empty
+   **`navigation_url`** + at least one screenshot or console/network summary path — else
+   **`UAT_BROWSER_PROBE_FAILED`**. Mirror under **`qa-findings.md`** **Runtime browser evidence**.
+7. **Fallback** — MCP unavailable → record **`UAT_BROWSER_UNAVAILABLE`**, run stdlib fallback when
+   **`UAT_BROWSER_FALLBACK_CHAIN=1`**; validate via
+   **`python scripts/uat_probe_lib.py --merge-result <fragment.json>`**.
+
+**No silent PASS** — stdlib alone does **not** PASS **`browser_smoke`** in **`cursor`** mode
+without agent **`browser_evidence_refs`**. Security: no auto-read **`.env`**, no credential
+auto-fill, no intake evidence mutation — **`UAT_PROBE_FORBIDDEN`** unchanged.
+
 ## Steps
-1. Convert acceptance criteria into testable UAT steps. Derive steps directly from the story's acceptance criteria in `docs/product/acceptance.md`. Each AC should map to at least one UAT step.
+1. Convert acceptance criteria into testable UAT steps. Derive steps directly from the story's acceptance criteria in `docs/product/acceptance.md`. Each AC should map to at least one UAT step. Run **`scripts/uat_probe_lib.py`** for each step where automation applies; record `probe_results[]` in **`uat.json`**.
 2. Populate UAT artifacts: write derived steps into `uat.json` (with description and result per step, accurate pass/fail counts) and `uat.md` (step list with results, summary section). Ensure UAT artifacts are in **populated** state per DEC-0009 — not placeholder.
 3. Record results and failures.
 4. Update state with pass/fail summary.

package/template/.cursor/rules/caveman.mdc

@@ -139,3 +139,46 @@ contract-test token lists, `AUTO_QUIET` non-suppressible vocabulary
 - No change to spawn-only orchestration (US-0048 / DEC-0029 / BUG-0006),
   strict runtime proof (DEC-0038), `AUTO_QUIET` non-suppressible list
   (US-0088), or US-0071 visible-metadata rules.
+
+## Voice compression (when CAVEMAN_MODE=1)
+
+### Precedence
+
+When `CAVEMAN_MODE=1`, voice-compression directives in **this rule** override
+conflicting **user rule** prose-style guidance (e.g. "write complete sentences",
+"blog-post quality") for **assistant reply voice only**; does **not** override
+user rules for tool usage, git safety, security, or commit policy.
+
+### Intensity levels
+
+| Level | Semantics | Example pattern |
+|-------|-----------|-----------------|
+| `lite` | Drop filler but keep grammatical sentences | Before: "I will now explain the orchestration gate because plan-verify requires it." After: "Orchestration gate required for plan-verify. Run gate check next." |
+| `full` | Drop articles + fragments OK | Before: "The spawn-only orchestrator must dispatch a fresh subagent for each phase." After: "Spawn-only orchestrator dispatches fresh subagent per phase. Next: run `/execute`." Pattern: `[thing] [action] [reason]. [next step].` |
+| `ultra` | Abbreviate ordinary prose words only; literals per §6 stub | Before: "The auth middleware returns HTTP 401 when the bearer token is absent from the Authorization header." After: "Auth middleware → 401. Bearer token absent. Check header." |
+
+Goal: **token-saving terse/imperative prose** — **not** stereotypical caveman
+roleplay.
+
+### Drop rules
+
+Drop articles, filler, hedging, and pleasantries where level permits; keep
+technical terms exact; fragments OK at `full` and `ultra`.
+
+### Auto-Clarity
+
+Pause compression for **security** warnings, **destructive** operations, or
+**ambiguous** compression — deliver the clear part in full prose, then resume
+Caveman voice.
+
+### Persistence
+
+Voice compression is active in **every response** while `CAVEMAN_MODE=1`;
+turn off only via scratchpad keys or the documented toggle phrases above.
+
+### Ultra and literal regions
+
+**Pointer stub** — defer to existing `## Literal-region invariant (9-zone hard
+MUST)` above. Reason codes, IDs, paths, and proof tuples remain **byte-literal**.
+At `ultra`, abbreviate ordinary prose words only — **never** abbreviate reason
+codes or gate tokens. **No duplicate** 9-zone list here.