its-magic 0.1.3-2 → 0.1.3-4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "its-magic",
-  "version": "0.1.3-2",
+  "version": "0.1.3-4",
   "description": "its-magic - AI dev team workflow for Cursor.",
   "license": "MIT",
   "bin": {

package/scripts/check_intake_template_parity.py

@@ -13,6 +13,11 @@ Scoped modes (DEC-0073 §10 / US-0090):
   --scope=us-0096               DEC-0082 delivery modes surfaces (US-0096).
   --scope=project-readme        DEC-0083 project README bootstrap surfaces (US-0097).
   --scope=dev-environment       DEC-0084 dev auto-launch profile surfaces (US-0098).
+  --scope=sovereign-parallel-dev DEC-0108 parallel instance arbitrage surfaces (US-0108).
+  --scope=sovereign-self-healing-deploy DEC-0109 self-healing deploy loop surfaces (US-0109).
+  --scope=release-trigger-adapter DEC-0111 release trigger adapter surfaces (US-0111).
+  --scope=us-0119               DEC-0119 autonomous-autonomy preset surfaces (US-0119).
+  --scope=us-0120               US-0120 dedicated /closure phase surfaces.
   --scope=all              union of all tables.
 """
 
@@ -297,6 +302,178 @@ DOWNSTREAM_CI_GUARD_PAIRS: tuple[tuple[str, str], ...] = (
     ),
 )
 
+SOVEREIGN_ROLE_MANIFEST_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        ".cursor/sovereign-role-manifest.yaml",
+        "template/.cursor/sovereign-role-manifest.yaml.example",
+    ),
+    (
+        ".cursor/scratchpad.md",
+        "template/.cursor/scratchpad.md",
+    ),
+    (
+        "scripts/sovereign_role_manifest_validate.py",
+        "template/scripts/sovereign_role_manifest_validate.py",
+    ),
+    (
+        "scripts/sovereign_role_manifest_lib.py",
+        "template/scripts/sovereign_role_manifest_lib.py",
+    ),
+    (
+        "docs/engineering/runbook.md",
+        "template/docs/engineering/runbook.md",
+    ),
+    (
+        "docs/engineering/reason_codes.md",
+        "template/docs/engineering/reason_codes.md",
+    ),
+    (
+        "handoffs/sovereign_role_reviews.jsonl",
+        "template/handoffs/sovereign_role_reviews.jsonl",
+    ),
+)
+
+SOVEREIGN_PARALLEL_DEV_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        ".cursor/scratchpad.md",
+        "template/.cursor/scratchpad.md",
+    ),
+    (
+        "scripts/parallel_dev_arbiter.py",
+        "template/scripts/parallel_dev_arbiter.py",
+    ),
+    (
+        "tests/us0108_contract_test.py",
+        "template/tests/us0108_contract_test.py",
+    ),
+    (
+        "docs/engineering/runbook.md",
+        "template/docs/engineering/runbook.md",
+    ),
+    (
+        "docs/engineering/reason_codes.md",
+        "template/docs/engineering/reason_codes.md",
+    ),
+    (
+        "scripts/check_intake_template_parity.py",
+        "template/scripts/check_intake_template_parity.py",
+    ),
+)
+
+SOVEREIGN_SELF_HEALING_DEPLOY_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        ".cursor/scratchpad.md",
+        "template/.cursor/scratchpad.md",
+    ),
+    (
+        "scripts/self_healing_deploy_lib.py",
+        "template/scripts/self_healing_deploy_lib.py",
+    ),
+    (
+        "scripts/self_healing_deploy_validate.py",
+        "template/scripts/self_healing_deploy_validate.py",
+    ),
+    (
+        "tests/us0109_contract_test.py",
+        "template/tests/us0109_contract_test.py",
+    ),
+    (
+        "docs/engineering/runbook.md",
+        "template/docs/engineering/runbook.md",
+    ),
+    (
+        "docs/engineering/reason_codes.md",
+        "template/docs/engineering/reason_codes.md",
+    ),
+)
+
+# US-0111 release trigger adapter parity pairs
+RELEASE_TRIGGER_ADAPTER_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        "scripts/release_trigger_adapters.py",
+        "template/scripts/release_trigger_adapters.py",
+    ),
+    (
+        "tests/us0111_contract_test.py",
+        "template/tests/us0111_contract_test.py",
+    ),
+    (
+        "docs/engineering/runbook.md",
+        "template/docs/engineering/runbook.md",
+    ),
+    (
+        "docs/engineering/reason_codes.md",
+        "template/docs/engineering/reason_codes.md",
+    ),
+    (
+        "scripts/check_intake_template_parity.py",
+        "template/scripts/check_intake_template_parity.py",
+    ),
+)
+
+# DEC-0118 §6 / US-0118 — Work-kind routing surface pairs. Contents must
+# be byte-identical between active and template paths; installer delivers
+# template copies (BUG-0003 / DEC-0066). 6 surface pairs per R-0106 Q6
+# LOCKED. Note: scratchpad key parity is structural (key presence) via
+# BUG-0013 test, NOT byte-parity (active scratchpad carries project-local
+# overrides like DELIVERY_MODE=ultra_lean that must not leak to template).
+WORK_KIND_ROUTING_PAIRS: tuple[tuple[str, str], ...] = (
+    (
+        "scripts/work_kind_classify_lib.py",
+        "template/scripts/work_kind_classify_lib.py",
+    ),
+    (
+        "scripts/work_kind_routing_lib.py",
+        "template/scripts/work_kind_routing_lib.py",
+    ),
+    (
+        "tests/us0118_contract_test.py",
+        "template/tests/us0118_contract_test.py",
+    ),
+    (".cursor/commands/auto.md", "template/.cursor/commands/auto.md"),
+    (".cursor/commands/intake.md", "template/.cursor/commands/intake.md"),
+    (
+        "docs/engineering/runbook.md",
+        "template/docs/engineering/runbook.md",
+    ),
+    (
+        "docs/engineering/context/installer-owned-paths.manifest",
+        "template/docs/engineering/context/installer-owned-paths.manifest",
+    ),
+    (
+        "scripts/check_intake_template_parity.py",
+        "template/scripts/check_intake_template_parity.py",
+    ),
+)
+
+# DEC-0119 §6 / US-0119 — Autonomous-autonomy preset surfaces. Contents must
+# be byte-identical between active and template paths. 8 surface pairs.
+AUTONOMY_PRESET_PAIRS: tuple[tuple[str, str], ...] = (
+    ("scripts/autonomy_preset_lib.py", "template/scripts/autonomy_preset_lib.py"),
+    ("scripts/validate_autonomy_stop_matrix.py", "template/scripts/validate_autonomy_stop_matrix.py"),
+    ("docs/engineering/autonomy-stop-matrix.md", "template/docs/engineering/autonomy-stop-matrix.md"),
+    ("docs/engineering/context/installer-owned-paths.manifest", "template/docs/engineering/context/installer-owned-paths.manifest"),
+    ("docs/engineering/runbook.md", "template/docs/engineering/runbook.md"),
+    (".cursor/commands/auto.md", "template/.cursor/commands/auto.md"),
+    ("tests/us0119_autonomy_preset_test.py", "template/tests/us0119_autonomy_preset_test.py"),
+)
+
+# US-0120 — Dedicated /closure phase surfaces. Contents must be byte-identical
+# between active and template paths.
+CLOSURE_PHASE_PAIRS: tuple[tuple[str, str], ...] = (
+    (".cursor/commands/closure.md", "template/.cursor/commands/closure.md"),
+    (".cursor/commands/release.md", "template/.cursor/commands/release.md"),
+    (".cursor/commands/auto.md", "template/.cursor/commands/auto.md"),
+    (
+        "scripts/validate_closure_verification.py",
+        "template/scripts/validate_closure_verification.py",
+    ),
+    (
+        "scripts/check_intake_template_parity.py",
+        "template/scripts/check_intake_template_parity.py",
+    ),
+)
+
 SCOPES: dict[str, tuple[tuple[str, str], ...]] = {
     "intake": INTAKE_TEMPLATE_PAIRS,
     "caveman-compress": CAVEMAN_COMPRESS_PAIRS,
@@ -312,6 +489,13 @@ SCOPES: dict[str, tuple[tuple[str, str], ...]] = {
     "release-changelog": RELEASE_CHANGELOG_PAIRS,
     "model-tier": MODEL_TIER_PAIRS,
     "model-tier-overrides": MODEL_TIER_OVERRIDES_PAIRS,
+    "sovereign-role-manifest": SOVEREIGN_ROLE_MANIFEST_PAIRS,
+    "sovereign-parallel-dev": SOVEREIGN_PARALLEL_DEV_PAIRS,
+    "sovereign-self-healing-deploy": SOVEREIGN_SELF_HEALING_DEPLOY_PAIRS,
+    "release-trigger-adapter": RELEASE_TRIGGER_ADAPTER_PAIRS,
+    "work-kind-routing": WORK_KIND_ROUTING_PAIRS,
+    "us-0119": AUTONOMY_PRESET_PAIRS,
+    "us-0120": CLOSURE_PHASE_PAIRS,
     "all": (
         INTAKE_TEMPLATE_PAIRS
         + CAVEMAN_COMPRESS_PAIRS
@@ -327,6 +511,12 @@ SCOPES: dict[str, tuple[tuple[str, str], ...]] = {
         + RELEASE_CHANGELOG_PAIRS
         + MODEL_TIER_PAIRS
         + MODEL_TIER_OVERRIDES_PAIRS
+        + SOVEREIGN_ROLE_MANIFEST_PAIRS
+        + SOVEREIGN_SELF_HEALING_DEPLOY_PAIRS
+        + RELEASE_TRIGGER_ADAPTER_PAIRS
+        + WORK_KIND_ROUTING_PAIRS
+        + AUTONOMY_PRESET_PAIRS
+        + CLOSURE_PHASE_PAIRS
     ),
 }
 

package/template/.cursor/commands/auto.md

@@ -271,14 +271,20 @@ override governance is satisfied.
 | `qa` | `qa` | `qa` |
 | `verify-work` | `qa` | `qa` |
 | `release` | `release` | `release` |
+| `closure` | `qe`, `curator` | `qe` |
 | `refresh-context` | `curator`, `po` | `curator` |
 
 Alternate-role keys (merged scratchpad): `AUTO_ROLE_RESEARCH`, `AUTO_ROLE_PLAN_VERIFY`,
-`AUTO_ROLE_REFRESH_CONTEXT` — single-valued resolution per **DEC-0051** (see reference).
+`AUTO_ROLE_REFRESH_CONTEXT`, `AUTO_ROLE_CLOSURE` — single-valued resolution per **DEC-0051** (see reference).
 
 Execute override: requires `AUTO_EXECUTE_ROLE_OVERRIDE=allowed_non_dev_execute` **and**
 parseable `EXECUTE_OVERRIDE_GOVERNANCE_REF`.
 
+Closure role (US-0120): `AUTO_ROLE_CLOSURE` scratchpad key accepts `qe` (default) or
+`curator` override. When empty, default is `qe`. `curator` override must not write
+qa-owned surfaces per DEC-0051 §3 preflight capability gate. Fail-closed:
+`PHASE_CAPABILITY_MISSING` when role cannot perform closure duties.
+
 Role reason codes: `PHASE_ROLE_CAPABILITY_MISSING`, `PHASE_ROLE_MISMATCH`.
 
 ## Mode-scoped delivery resolver — step 0 (US-0096 / DEC-0082)
@@ -287,6 +293,19 @@ Role reason codes: `PHASE_ROLE_CAPABILITY_MISSING`, `PHASE_ROLE_MISMATCH`.
 from precedence: argv `delivery-mode=` → backlog row `delivery_mode` (when
 `AUTO_DELIVERY_ROUTING=backlog_then_scratchpad`) → scratchpad `DELIVERY_MODE` → **`standard`**.
 
+### Work-kind routing hook (US-0118 / DEC-0118) — step 0a
+
+When `WORK_KIND_ROUTING=1` (default `0` — zero overhead when off), step 0
+calls `scripts/work_kind_routing_lib.resolve_delivery_mode_with_work_kind(...)`
+**after** the existing delivery-mode resolver. The hook implements the **L8
+precedence chain**: `start-from` (always wins) > explicit `DELIVERY_MODE` >
+explicit `AUTO_PHASE_*` > `WORK_KIND_ROUTING`-derived > current default.
+When `WORK_KIND_ROUTING=0`, the hook is a no-op (early-return
+`(standard, full_plan, "WORK_KIND_ROUTING_OFF")` — byte-identical to
+pre-US-0118). When both `WORK_KIND_ROUTING=1` and explicit `DELIVERY_MODE`
+are set, explicit wins and `WORK_KIND_DELIVERY_MODE_CONFLICT` is emitted.
+The classifier reuses `scripts/dev_environment_lib.classify_touched_files`
+(tier A/B/C + `TIER_C_SKIP_PREFIXES`) — import, do not reinvent (Q9 LOCKED).
 | `delivery_mode` | `resolved_phase_plan` | `reinstatement_mode` | `memory_layer` |
 |-----------------|----------------------|---------------------|----------------|
 | `standard` | Full **DEC-0052** chain | `dec0052_default` | `standard` |
@@ -311,7 +330,7 @@ Four macro-phases — **no** eleven-phase reinstatement when `delivery_mode=ultr
 | **`spec`** | intake + discovery | **po** |
 | **`plan`** | research + architecture + sprint-plan | **tech-lead** |
 | **`build+verify`** | execute + qa + verify-work | **dev** / **qa** |
-| **`ship`** | release + refresh-context | **release** / **curator** |
+| **`ship`** | release + closure + refresh-context | **release** / **qe** / **curator** |
 
 **`AUTO_IMPLEMENTATION_LOOP`** preserved inside **`build+verify`**. QA merges AC checklist + UAT
 in one spawn.
@@ -340,7 +359,7 @@ Treat **resolved phase plan** as fail-closed schedule from merged scratchpad **b
 resume / `start-from` intersection. Canonical lifecycle:
 
 `intake` → `discovery` → `research` → `architecture` → `sprint-plan` →
-`plan-verify` → `execute` → `qa` → `verify-work` → `release` → `refresh-context`
+`plan-verify` → `execute` → `qa` → `verify-work` → `release` → `closure` → `refresh-context`
 
 Selectors and reinstatement: see reference. Phase-plan reason codes include
 `PHASE_POLICY_CONFLICT`, `PHASE_PLAN_UNKNOWN_PHASE`, `START_FROM_PHASE_PLAN_EMPTY_INTERSECTION`.
@@ -447,7 +466,7 @@ Phase-completion boundary evaluation only. **Guarded auto-push eligibility chain
 ## Canonical `start-from` phase IDs
 
 `intake`, `discovery`, `research`, `architecture`, `sprint-plan`, `plan-verify`,
-`execute`, `qa`, `verify-work`, `release`, `refresh-context` — aliases invalid.
+`execute`, `qa`, `verify-work`, `release`, `closure`, `refresh-context` — aliases invalid.
 
 ## Deterministic resume-source precedence
 
@@ -621,3 +640,34 @@ applies for `/auto` continuation.
 
 Follow `docs/engineering/artifact-ordering-policy.md` (`state.md` append-bottom, etc.);
 `ARTIFACT_ORDERING_ANCHOR_AMBIGUOUS` fail-closed.
+
+## Autonomy presets (US-0119 / DEC-0119)
+
+Default-off autonomy preset expansion + stop-policy dispatch layer.
+
+When `AUTONOMY_PRESET={none|balanced|full}` is set (default `none`), the orchestrator
+calls `scripts/autonomy_preset_lib.expand_autonomy_preset(preset, overrides)` before
+phase dispatch to expand the single preset flag into 8 (balanced) or 12 (full) per-feature
+autonomy flags. Precedence: explicit per-flag override in scratchpad always wins over
+preset expansion. Expansion is deterministic; no LLM, no network, no `.env` reads
+(R-0107 Q3 LOCKED).
+
+When `AUTONOMY_STOP_POLICY={block|auto_repair_then_block|auto_repair_then_skip}` is
+set (default `block`), stop dispatch classifies every fail-closed reason code as
+`security_hard` (never auto-resolved; block immediately — `auto_repair_kind=n/a`; cap=0)
+or `autonomy_resolvable` (bounded auto-repair permitted when policy != `block`; cap per
+(run, reason_code) from `scripts/data/autonomy_stop_matrix.yaml`; default 3 per Q3 LOCKED).
+
+When `AUTONOMY_STOP_POLICY != block`, bounded auto-repair attempts are logged to
+append-only ledger at `handoffs/autonomy_repair_ledger/<orchestrator_run_id>.jsonl`.
+Cap exhaustion emits terminal stop `AUTONOMY_REPAIR_CAP_EXHAUSTED` (distinct from
+`BLOCK_RETRY_CAP_EXHAUSTED`; run-level vs story-level per Q9 LOCKED).
+
+Operator audit breadcrumb: `autonomy_relaxed: <reason_code> -> <auto_repair_kind>`
+emitted in `docs/engineering/state.md` at phase boundary (one line per soft-stop per
+Q10 LOCKED — not aggregated).
+
+Compose do-not-amend guards: `/intake`, `/execute`, `/qa`, `/release` consume US-0119
+flags additively; their pre-existing contract surfaces are NOT rewritten.
+`scripts/validate_autonomy_stop_matrix.py --self-test` enforces matrix invariants.
+Byte-stability surface at `its_magic/README.md` 7th sub-block `### Autonomy preset keys`.

package/template/.cursor/commands/closure.md

@@ -0,0 +1,184 @@
+# /closure — dedicated story closure phase
+
+## Phase role
+
+- **phase_id**: `closure`
+- **role**: `qe`
+- **override**: `AUTO_ROLE_CLOSURE` scratchpad key allows `qe` or `curator`; default `qe` when empty (DEC-0052, §2 override, §3 preflight capability gate).
+
+## Phase responsibility
+
+Story Closure holds exclusive responsibility for:
+
+1. Status flip in `docs/product/backlog.md` (canonical status owner per US-0045): `Status: OPEN` → `Status: DONE`
+2. Acceptance checkbox in `docs/product/acceptance.md`: `- [ ]` → `- [x]`
+3. Closure checkpoint append to `docs/engineering/state.md` (append-bottom per US-0058 / DEC-0040)
+4. Creation of per-sprint closure verification artifact: `sprints/Sxxxx/closure-verification.md`
+
+`/closure` runs AFTER `/release` completes with PASS verdict and BEFORE `/refresh-context`.
+
+## Phase ordering (ship macro per DEC-0082)
+
+| Position | Phase | Role |
+|----------|-------|------|
+| 1 | `/release` | `release` |
+| 2 | `/closure` | `qe` |
+| 3 | `/refresh-context` | `curator` |
+
+`/closure` is now the **second** phase of the `ship` macro. `/release` no longer performs backlog reconciliation (steps 10-12 removed).
+
+## Inputs
+
+The `/closure` phase consumes the following release artifacts as input evidence (all three are FAIL-gated input prerequisites):
+
+| Artifact | Path | Required |
+|----------|------|----------|
+| Release queue row | `handoffs/release_queue.md` (target sprint, `status=released`) | YES |
+| Release notes | `handoffs/releases/Sxxxx-release-notes.md` (with PASS verdict) | YES |
+| QA findings | `sprints/Sxxxx/qa-findings.md` | YES |
+| UAT (optional) | `sprints/Sxxxx/uat.json` / `sprints/Sxxxx/uat.md` | OPTIONAL |
+| Release findings (optional) | `sprints/Sxxxx/release-findings.md` | OPTIONAL |
+
+## Outputs (artifacts)
+
+`/closure` produces the following artifacts:
+
+| Artifact | Path | Responsibility |
+|----------|------|----------------|
+| Closure verification | `sprints/Sxxxx/closure-verification.md` | Per-sprint closure execution record |
+| Backlog status flip | `docs/product/backlog.md` (target story block only) | `Status: OPEN` → `Status: DONE` |
+| Acceptance tick | `docs/product/acceptance.md` (target row only) | `- [ ]` → `- [x]` |
+| Closure checkpoint | `docs/engineering/state.md` (append-bottom) | Phase boundary + isolation evidence + runtime proof |
+
+## Stop conditions
+
+- Release evidence missing for target sprint → `CLOSURE_RELEASE_EVIDENCE_MISSING`
+- Canonical status source contradictory (release evidence vs backlog state) → `CANONICAL_STATUS_CONFLICT`
+- Multiple candidate stories ambiguous for closure → `CLOSURE_AMBIGUOUS_TARGET`
+- Target story not found in backlog.md → `CLOSURE_TARGET_NOT_FOUND`
+
+## Input prerequisites (fail-gated)
+
+The following MUST be true before `/closure` can proceed. Fail closed with `CLOSURE_RELEASE_EVIDENCE_MISSING` if any check fails:
+
+1. `handoffs/release_queue.md` contains a row for the target sprint with `status=released`.
+2. `handoffs/releases/Sxxxx-release-notes.md` EXISTS and contains PASS verdict.
+3. `sprints/Sxxxx/qa-findings.md` EXISTS (QA completion evidence).
+
+If any prerequisite fails:
+- Do not mutate backlog.md, acceptance.md, or state.md.
+- Append `CLOSURE_RELEASE_EVIDENCE_MISSING` with specific missing-prerequisite list to `sprints/Sxxxx/closure-verification.md` (partial artifact — marks the attempt and the gap).
+- Stop and require operator remediation before retry.
+
+## Backlog reconciliation contract (US-0043 / DEC-0021)
+
+`/closure` now holds exclusive responsibility for backlog reconciliation.
+
+Canonical evidence precedence:
+1. `handoffs/release_queue.md` target sprint row (`status=released` required)
+2. `handoffs/releases/Sxxxx-release-notes.md` gate summary
+3. `sprints/Sxxxx/qa-findings.md`
+4. `sprints/Sxxxx/uat.json` and `sprints/Sxxxx/uat.md`
+5. `sprints/Sxxxx/release-findings.md` (if present)
+
+Deterministic reconciliation behavior:
+- Mutate only target sprint story blocks in `docs/product/backlog.md`
+- Set target story `Status: DONE` when mandatory release evidence is PASS
+- Reconcile target story acceptance checkboxes to checked state in `docs/product/acceptance.md`
+- Never mutate unrelated backlog stories
+
+## Canonical status source and global drift guard (US-0045 / DEC-0025)
+
+Canonical ownership:
+- Story status (`OPEN|DONE`) is authoritative in `docs/product/backlog.md`.
+- `docs/product/acceptance.md` and `docs/engineering/state.md` are derived views.
+
+Deterministic reconciliation precedence:
+1. `docs/product/backlog.md` story status (canonical status owner)
+2. Target sprint release evidence
+3. Derived-view updates (`docs/product/acceptance.md`, `docs/engineering/state.md`)
+
+## Orchestrator post-closure verification protocol
+
+After `/closure` subagent returns, the orchestrator runs direct `rg` verification (materialization fidelity check):
+
+1. `rg "^- Status: DONE$" docs/product/backlog.md` constrained to target story block
+2. `rg "^\- \[x\] US-xxxx:" docs/product/acceptance.md` targeted row
+3. State.md: `rg "phase_id=closure" docs/engineering/state.md` combined with `rg "story_id=US-xxxx"`
+4. `rg "story_id.*US-xxxx" sprints/Sxxxx/closure-verification.md`
+
+If ANY check fails → escalate `CLOSURE_VERIFICATION_FAILED` with specific check that failed.
+
+## closure-verification.md schema
+
+Required fields (in `sprints/Sxxxx/closure-verification.md`):
+- `story_id` (US-xxxx)
+- `closure_date` (ISO-8601 UTC)
+- `closure_role` (qe|curator)
+- `pre_closure_status` (OPEN)
+- `post_closure_status` (DONE)
+- `release_evidence_refs[]` (array of paths)
+- `isolation_evidence{}` (object per US-0048 / DEC-0029)
+- `runtime_proof{}` (object per US-0056 / DEC-0038)
+
+Optional fields:
+- `normalization_notes` — edge cases
+- `backward_compat_note` — for in-flight story closure
+
+Validate with: `python scripts/validate_closure_verification.py --file sprints/Sxxxx/closure-verification.md`
+
+## Artifact ordering contract (US-0058 / DEC-0040)
+
+`/closure` mutations follow strict ordering:
+1. `docs/product/backlog.md` (status flip — canonical status owner)
+2. `docs/product/acceptance.md` (checkbox tick — derived view)
+3. `docs/engineering/state.md` (closure checkpoint append — append-bottom only)
+4. `sprints/Sxxxx/closure-verification.md` (new artifact)
+
+## Cross-phase ownership guard (US-0061 / DEC-0043)
+
+`/closure` owns ONLY:
+- Status flip in `docs/product/backlog.md` (target story block)
+- Checkbox tick in `docs/product/acceptance.md` (target row)
+- Closure checkpoint append in `docs/engineering/state.md`
+- `sprints/Sxxxx/closure-verification.md` creation
+
+`/closure` must NOT touch:
+- Release artifacts (`handoffs/releases/Sxxxx-release-notes.md`, `handoffs/release_queue.md`)
+- QA artifacts (`sprints/Sxxxx/qa-findings.md`, `handoffs/qa_to_dev.md`)
+- Execute artifacts (`sprints/Sxxxx/summary.md`, code changes)
+
+## Drain hook backward compatibility (AC-10)
+
+For in-flight stories at US-0120 ship boundary (stories that completed `/release` before `/closure` existed):
+- 3-signal detection: (i) release_queue row `status=released`, (ii) backlog.md `Status: OPEN`, (iii) acceptance.md `[ ]` unchecked → closure SKIPPED → orchestrator spawn `/closure` backfill.
+- For `Status: DONE` stories: SKIP (already closed).
+- Pre-US-0120 stories with all three signals: emit `CLOSURE_LEGACY_DRIFT` + manual reconciliation guidance.
+
+## Fail-safe reason codes and remediation guidance
+
+| Reason code | Condition | Remediation |
+|---|---|---|
+| `CLOSURE_RELEASE_EVIDENCE_MISSING` | Input prerequisite not met | Complete `/release` first |
+| `CLOSURE_VERIFICATION_FAILED` | Orchestrator post-verification rg check failed | Re-run `/closure` |
+| `CANONICAL_STATUS_CONFLICT` | Backlog status contradicts release evidence | Resolve contradiction manually |
+| `BACKLOG_STATUS_DRIFT` | Backlog not reconciled after closure | Re-run `/closure` |
+| `PHASE_OWNERSHIP_VIOLATION` | `/closure` tried to mutate non-owned artifact | Check cross-phase ownership guard |
+| `PHASE_OVERRIDE_EVIDENCE_MISSING` | Override path configured but evidence missing | Provide override evidence or disable override |
+| `CLOSURE_LEGACY_DRIFT` | Pre-US-0120 story with released+OPEN | Manual reconciliation or backfill closure |
+
+## Strict runtime proof (DEC-0038)
+
+Each `/closure` execution must produce own strict runtime proof with unique `runtime_proof_id`:
+- runtime_proof_id (unique per closure run)
+- proof_hash (SHA-256 of canonical payload)
+- proof_ttl_seconds (3600)
+- proof_issued_at (ISO-8601 UTC)
+
+## Isolation evidence (US-0048 / DEC-0029)
+
+Each `/closure` execution must produce own isolation evidence:
+- phase_id=closure, role=qe (or curator)
+- fresh_context_marker (unique per run per BUG-0006)
+- timestamp (ISO-8601 UTC)
+- evidence_ref (sprints/Sxxxx/closure-verification.md)

package/template/.cursor/commands/intake.md

@@ -241,6 +241,32 @@ and assumption binding. **Do not** mutate `docs/product/backlog.md` or
      `assumptions_confirmed`, `topic_coverage`, assumption ref fields per
      **DEC-0060**, and first-intake coverage fields (`plan_area_inventory`,
      `plan_area_coverage`, `coverage_complete`) in relevant intake artifacts.
+
+4b. **Work-kind classifier hook (US-0118 / DEC-0118)** — after the
+    decomposition evaluator (step 4) and before persistence (step 5+):
+    - Read `WORK_KIND_ROUTING` from `.cursor/scratchpad.md` (`0|1`, default
+      `0`). When `0`, skip the classifier proposal entirely (zero overhead —
+      byte-identical to pre-US-0118). When `1`, proceed.
+    - Run `scripts/work_kind_classify_lib.classify_work_kind(story_prose,
+      acceptance_criteria, touched_file_hints, component_scope)` — pure
+      stdlib, no LLM, no network, no `.env` reads (Q3 LOCKED).
+    - Present the proposed `work_kind` (`doc|mini|code`) and
+      `recommended_delivery_mode` (`standard|ultra_lean|mega_quick`) to the
+      operator for accept/override (Q9 LOCKED). Operator decision recorded in
+      the intake evidence bundle.
+    - On `accept`: persist `- work_kind: <value>` and
+      `- recommended_delivery_mode: <value>` rows in the backlog story block
+      + `work_kind`, `recommended_delivery_mode`,
+      `work_kind_operator_decision=accept` in the intake evidence bundle.
+    - On `override`: operator may set a different
+      `work_kind`/`recommended_delivery_mode` (or leave both unset to defer
+      routing to `DELIVERY_MODE`/`AUTO_PHASE_*`); record
+      `work_kind_operator_decision=override` in the evidence bundle.
+    - Absence of `work_kind`/`recommended_delivery_mode` is valid (classifier
+      not run or operator declined) — no forced reclassification.
+    - **US-0078 evidence gate still runs before any backlog/acceptance
+      write** (step 5 — L10 unchanged).
+
 6. Optional fresh-project ID namespace bootstrap (US-0052 / DEC-0034):
    - Read `ID_NAMESPACE_BOOTSTRAP` from `.cursor/scratchpad.md` (`0|1`,
      default `0`).

package/template/.cursor/commands/release.md

@@ -331,31 +331,22 @@ Guardrails:
 9. On successful finalization, transition only target sprint:
    `unreleased -> released`.
    - Update `last_updated`, `release_version` (when available), and gate summary.
-10. Reconcile target story backlog status + acceptance checkboxes in
-    `docs/product/backlog.md` using US-0043 and US-0045 contracts.
-    - Apply only to target sprint-linked stories.
-    - If contradictory states remain after reconciliation attempt, fail closed
-      with `BACKLOG_STATUS_DRIFT` or `CANONICAL_STATUS_CONFLICT`, write
-      remediation guidance, and stop.
-11. Reconcile derived status views from canonical backlog status:
-    - update linked rows/checklists in `docs/product/acceptance.md`,
-    - append deterministic status checkpoint in `docs/engineering/state.md`,
-    - preserve non-target entries unchanged.
-12. If one-time normalization baseline is missing, run the documented
-    normalization pass and write auditable report rows to
-    `docs/engineering/status-normalization-report.md` (story id, prior values,
-    resolved values, evidence refs, timestamp).
-13. Update backward-compatible legacy file `handoffs/release_notes.md` as
+10. Backlog reconciliation is now handled by the dedicated `/closure` phase —
+    see `.cursor/commands/closure.md`. Story Closure holds exclusive responsibility
+    for status flip (OPEN→DONE in `docs/product/backlog.md`), acceptance tick
+    ([ ]→[x] in `docs/product/acceptance.md`), closure checkpoint append to
+    `docs/engineering/state.md`, and creation of `sprints/Sxxxx/closure-verification.md`.
+11. Update backward-compatible legacy file `handoffs/release_notes.md` as
     latest-release pointer and summary:
     - include latest released sprint id,
     - include pointer to canonical sprint-scoped notes file,
     - include visibility section for unreleased queue entries.
-14. Update runbook/state readiness and evidence references for release outcome.
+12. Update runbook/state readiness and evidence references for release outcome.
     - On pass, ensure `sprints/Sxxxx/release-findings.md` records release outcome
       (`PASS`) and references final evidence artifacts.
-15. If `AUTO_RELEASE_NOTES=1` in `.cursor/scratchpad.md`, generation logic must
+13. If `AUTO_RELEASE_NOTES=1` in `.cursor/scratchpad.md`, generation logic must
     still target sprint-scoped notes first and update legacy pointer second.
-16. Optional configurable publish targets (US-0054 / DEC-0036):
+14. Optional configurable publish targets (US-0054 / DEC-0036):
     - Read `.cursor/scratchpad.md`:
       - `RELEASE_PUBLISH_MODE=disabled|confirm|auto`
       - `RELEASE_TARGETS_FILE`
@@ -379,7 +370,7 @@ Guardrails:
       `PUBLISH_TARGET_CONFIG_INVALID`.
     - If target execution fails, emit `PUBLISH_TARGET_EXECUTION_FAILED` with
       target ID and remediation; do not mutate unrelated release artifacts.
-17. Remote runtime connectivity contract (US-0064 / DEC-0044):
+15. Remote runtime connectivity contract (US-0064 / DEC-0044):
     - Extend target interpretation with runtime metadata from
       `RELEASE_TARGETS_FILE`:
       - `runtime.mode` (`local|remote`),
@@ -394,7 +385,7 @@ Guardrails:
       and local vs remote execution context.
     - In release output/handoffs, include operator connection guidance
       (where hosted, how to connect) without exposing secrets.
-18. Release operator Run/Connect/Verify hints contract (US-0067 / DEC-0049):
+16. Release operator Run/Connect/Verify hints contract (US-0067 / DEC-0049):
     - `handoffs/releases/Sxxxx-release-notes.md` must include a deterministic
       operator section order and required fields:
       1) `## Run`:
@@ -425,20 +416,20 @@ Guardrails:
       - `RELEASE_OPERATOR_HINTS_SECRET_EXPOSURE`
     - Remediation: populate required fields in canonical sprint notes with
       sanitized env-ref-only credential guidance, then rerun `/release`.
-19. Version changelog derivation (US-0100 / DEC-0085):
+17. Version changelog derivation (US-0100 / DEC-0085):
     - Runs **only after** step **9** successful finalization (`unreleased → released`)
-      and step **18** operator hints (**US-0067**). Doc writes are **not** publish
+      and step **16** operator hints (**US-0067**). Doc writes are **not** publish
       execution — **`RELEASE_PUBLISH_MODE=disabled`** remains valid (**US-0054**).
-    - **19a — Resolve semver**: read target queue row **`release_version`**; when
+    - **17a — Resolve semver**: read target queue row **`release_version`**; when
       blank, workflow-only release → **`[Unreleased]`** path only (no per-version file).
-    - **19b — Derive work items**: `derive_work_items` for target sprint + coalesce
+    - **17b — Derive work items**: `derive_work_items` for target sprint + coalesce
       peer **`released`** rows sharing normalized semver when semver known
       (`coalesce_sprints_by_semver`).
-    - **19c — Write docs**: when semver known → `build_version_doc` +
+    - **17c — Write docs**: when semver known → `build_version_doc` +
       `promote_unreleased` + `bind_queue_release_version`; else `append_unreleased`
       only. Per-version SOT = `handoffs/releases/{semver}-release-notes.md` (stem
       without leading **`v`**). Never pass `Sxxxx-release-notes.md` to **`gh -F`**.
-    - **19d — Validate (optional enforce)**: when scratchpad
+    - **17d — Validate (optional enforce)**: when scratchpad
       **`RELEASE_CHANGELOG_ENFORCE=1`** (default **`1`** post-bootstrap), run
       `python scripts/release_changelog_validate.py --repo . --enforce`; record
       outcome in `sprints/Sxxxx/release-findings.md` § version-doc gates. When