mandrel 2.24.0 → 2.26.0

package/.agents/workflows/plan.md

@@ -7,47 +7,43 @@ description:
 
 # /plan
 
-> **Lean spine.** Happy path + gate list; edge-case detail lives in on-demand
+> **Lean spine.** Happy path + gate list; edge-case detail lives on demand in
 > [`helpers/plan-reference.md`](helpers/plan-reference.md).
 
 ## Inputs
 
 Single planning path — there is no Epic/Story router, no scope-triage
 `epic|story` verdict. **Derive the mode from what the operator typed, announce
-it, then act**:
+it, act**:
 
 | Invocation | Mode | Behavior |
 | --- | --- | --- |
 | `/plan` | ask | Ask what to plan; nothing runs first. |
-| `/plan add a --json flag to doctor` | seed | Ideation from the prose: interrogate → author **one Story by default** → persist. |
-| `/plan temp/notes/idea.md` | seed-file | Same, from notes. An argument resolving to an existing file is a path, never prose. |
+| `/plan add a --json flag to doctor` | seed | Ideation from prose: interrogate → author **one Story by default** → persist. |
+| `/plan temp/notes/idea.md` | seed-file | Same, from notes. An existing file is a path, not prose. |
 | `/plan 4712[,4713…]` | tickets | Fetch issue(s), analyze into proper Stories (prefer N=1 rewrite). |
 | `/plan 4712`, already delivered | amends | Amend a shipped Story from a **delta envelope**, not a re-interrogation. |
 
 **Resolving a bare id.** Read live state rather than asking: `agent::done` can
 only be amended, an open unplanned issue can only be planned. **Announce the
-derivation** — "4712 is `agent::done` → amending" — so a wrong read costs one
-correction. Ask **only** for an open Story already at `agent::ready`.
-
-`--body` is **not** a `/plan` entry; persist goes through `plan-persist.js`.
+derivation** — "4712 is `agent::done` → amending". Ask **only** for an open
+Story already at `agent::ready`.
 
 ## Saying what you want
 
-No flags to remember — state intent and the workflow fills in the CLI
-([reference](helpers/plan-reference.md)). Run any script with `--help` rather
-than copying its surface here.
+No flags to remember — state intent; the workflow fills in the CLI
+([reference](helpers/plan-reference.md)). Run scripts with `--help`.
 
 `--yes` is **runner-set, never operator-typed** — cron, `/loop`, and headless
-dispatch set it to mean *nobody is at the keyboard*, which is what auto-proceeds
-the gates below. Never offer it to an operator or add it to an attended run.
+dispatch set it to mean *nobody is at the keyboard*, which auto-proceeds the
+gates below (#1 and #2). Never offer it to an operator or an attended run.
 
 ## Default-single split policy
 
 Author **one Story** unless the pieces have **near-zero overlap** or sit across
-an **architectural seam** (different deployables, migration vs consumer).
-Coupled work stays one Story — `## Slicing` checkpoints, not sibling tickets;
-when N>1 every acceptance criterion belongs to exactly one Story
-(`assertAcceptancePartition` refuses coupled splits). **N=1 is the lean path.**
+an **architectural seam**. Coupled work stays one Story — `## Slicing`
+checkpoints, not sibling tickets
+([detail](helpers/plan-reference.md)). **N=1 is lean.**
 
 ## Procedure
 
@@ -63,54 +59,49 @@ node .agents/scripts/plan-context.js --seed "<seed>" \
 and derives source ids from its `sourceTickets[]`; the CLI also writes
 **`stories.template.json`**, step 2's skeleton.
 
-The envelope carries docs context, the story-author
-prompt, `sourceTickets[]`, `duplicates[]` (open **Stories**, never Epics), and
-advisory `complexitySignals` (**no routing authority**). A trivial scope earns
-`--route-downgrade-reason "<why>"` at persist — shape-validated, failing closed
-to `full` ([detail](helpers/plan-reference.md)).
-
-**Triage each unknown by resolver**
-([detail](helpers/plan-reference.md)): an **AFK** unknown (research settles
-it) is resolved before authoring, never assumed; a **HITL** unknown (an
-operator call) goes to Gate #1 as "needs your decision". Under `--yes`, do
-not ask free-form operator questions — AFK unknowns are still researched;
-only HITL unknowns land in Key Assumptions, each marked a
+The envelope carries docs context, the story-author prompt, `sourceTickets[]`,
+`duplicates[]` (open **Stories**, never Epics) and advisory `complexitySignals`
+(**no routing authority**). A trivial scope can claim the lite route at
+persist — shape-validated, failing closed to `full`
+([detail](helpers/plan-reference.md)).
+
+**Triage each unknown by resolver** ([detail](helpers/plan-reference.md)): an
+**AFK** unknown (research settles it) is resolved before authoring, never
+assumed; a **HITL** unknown (an operator call) goes to Gate #1 as "needs your
+decision". Under `--yes` do not ask free-form operator questions — AFK unknowns
+are still researched; only HITL unknowns land in Key Assumptions, each marked a
 decision-made-by-default.
 
 **Gate #1** — STOP to confirm the sharpened plan intent and any
 duplicate-candidate review. Under `--yes`, auto-proceed.
 
-On a truthy `deliverLightSuggestion.suggested`, offer —
-**advisory, never an automatic reroute** — to deliver the seed instead of
-planning it. On confirm, route **in this session** into
-[`helpers/deliver-light.md`](helpers/deliver-light.md), filling its gate from
-this envelope, not the raw seed; an `ask-operator` verdict returns here to
-step 2 with the interrogation intact. Under `--yes` it is recorded and planning
-proceeds — never auto-downgraded to light.
+On a truthy `memoryPoolAdvisory.recommend`, name [`/memory-consolidate`](memory-consolidate.md)
+as an operator option, quoting its `reasons[]` — advisory, never invoked here.
 
-A truthy `complexitySignals.uiSurface` marks a UI-touching plan: name
-[`/prototype`](prototype.md) as an operator option — never invoke it here.
+On a truthy `deliverLightSuggestion.suggested`, offer — advisory, never an
+automatic reroute — to deliver the seed instead; on confirm, route **in this
+session** into [`helpers/deliver-light.md`](helpers/deliver-light.md), its gate
+filled from this envelope. A truthy `complexitySignals.uiSurface` marks a
+UI-touching plan: name [`/prototype`](prototype.md) as an operator option,
+never invoke it here. [Both offers](helpers/plan-reference.md).
 
 ### 2. Author
 
 **One-shot authoring.** Start from `stories.template.json`; author
-`stories.json` in one pass. `body` is a markdown string **or** a structured
-object; persist parses either, serializes the canonical markdown, and syncs
-top-level `acceptance[]` /
-`verify[]` into it — never dual-author those lists.
-
-**Grounding = your reads + Phase 8.** Nothing inventories the repo for you:
-read each file you cite, then persist's file-assumption gate hard-errors on
-every `{path, assumption}` that misses the real tree.
+`stories.json` in one pass. `body` is markdown **or** a structured object;
+persist parses either, serializes canonical markdown and syncs top-level
+`acceptance[]` / `verify[]` into it — never dual-author those lists.
 
-Entry fields (the `stories.template.json` shape):
+**Grounding = your reads + Phase 8.** Nothing inventories the repo: read each
+file you cite; persist's file-assumption gate hard-errors on any
+`{path, assumption}` absent from the tree. Entry fields:
 [reference](helpers/plan-reference.md).
 
 Artifacts under `temp/plan-<slug>/`: `stories.json` (**length 1 by default**;
-over-budget Specs fail closed — split or tighten, never under `docs/`);
-optional `techspec.md` (**N===1 only** — folded into `## Spec`); optional
-`acceptance-manifest.json` (N>1 partition list — `--plan-acceptance`). For N=1
-use the envelope `systemPrompts.story`; split only under the policy above.
+over-budget Specs fail closed — split or tighten, never under `docs/`); optional
+`techspec.md` (**N===1 only** — folded into `## Spec`); optional
+`acceptance-manifest.json` (N>1 partition — `--plan-acceptance`). For N=1 use
+the envelope `systemPrompts.story`; split only under the policy above.
 
 **Tickets mode:** every Story authors a top-level `supersedes[]`; persist
 refuses a partial map ([shape](helpers/plan-reference.md)).
@@ -123,28 +114,27 @@ node .agents/scripts/plan-critics.js \
   [--tech-spec temp/plan-<slug>/techspec.md]
 ```
 
-Run **before** persist — the last point a finding folds into a re-author round.
+Run **before** persist — the last point a finding folds into a re-author.
 It exits 0 on **any** verdict (verdicts route work, they do not gate) and exits
 **1** only on a usage/IO error — no critic ran, no skip ledgered: **do not
-proceed to Persist**; fix and re-run.
+proceed to Persist**, fix and re-run.
 
 - **Both `dispatch: false`** — proceed to Persist (each skip is ledgered).
 - **Either `dispatch: true`** — dispatch **one fresh-context, maker-blind
   sub-agent per firing critic** (hand it only the draft artifacts, never the
   authoring transcript), fold findings into Gate #2 or a re-author round, re-run
   this step. Pre-mortem triggers (incl. the external-dependency probe), the
-  advisory-only `textHygiene.findings[]` lints, and the dispatch shape:
-  [`helpers/plan-reference.md` § Critic dispatch detail](helpers/plan-reference.md).
+  advisory-only `textHygiene.findings[]` lints and dispatch shape:
+  [reference § Critic dispatch detail](helpers/plan-reference.md).
 
 ### 3. Persist
 
 **Gate #2** — STOP for approval before persist **only** when the operator asked
 to review (`--force-review`). Under `--yes`, auto-proceed.
 
-Run persist with `--dry-run` **first** — same command, GitHub writes suppressed;
-every gate (validator, body parse, DAG, capacity, budget, reachability,
-split/supersede partitions, Spec fold) runs before the first `createIssue`.
-Then:
+Run persist with `--dry-run` **first** — same command, writes suppressed;
+every gate runs before the first `createIssue`
+([the list](helpers/plan-reference.md)):
 
 ```bash
 node .agents/scripts/plan-persist.js \
@@ -155,28 +145,25 @@ node .agents/scripts/plan-persist.js \
   [--source-tickets 123,456]
 ```
 
-At lite shape, `--chain-on-clean` chains a clean dry-run into the real persist
-in one round-trip; a full plan keeps its review round-trip.
-
-Persist creates `type::story` issue(s) plus a `plan-run::<id>` grouping label
-(**metadata only**); N>1 `depends_on` edges become `blocked by #<id>` footers.
-`agent::ready` is the **terminal** flip after all receipts land. stdout is pure
-JSON.
+At lite shape, `--chain-on-clean` folds a clean dry-run into the real persist;
+a full plan keeps its review trip.
 
-In tickets mode persist resolves source ids **envelope-first** and closes each
-as `not_planned` with a comment (default on;
-[detail](helpers/plan-reference.md)).
+Persist creates `type::story` issue(s), a **metadata-only** `plan-run::<id>`
+label, and `blocked by #<id>` footers for N>1 `depends_on` edges.
+`agent::ready` is the **terminal** flip after receipts land; stdout is pure
+JSON. Tickets mode also comments on and closes each source id
+([detail](helpers/plan-reference.md)).
 
 ## Constraints
 
 - `/plan` starts delivery **only** through a confirmed Gate #1 light route —
   never off its own authored Stories, which land via [`/deliver`](deliver.md).
-- Duplicate search targets open Stories (`type::story`), not Epics.
-- Deterministic gates still fail closed under `--yes`.
+- Duplicate search targets open Stories (`type::story`), not Epics; and
+  deterministic gates still fail closed under `--yes`.
 
 ## See also
 
-- [`/deliver`](deliver.md), [`/audit-to-stories`](audit-to-stories.md),
-  [`helpers/plan-reference.md`](helpers/plan-reference.md) — on-demand detail.
-- [`core/scope-triage`](../skills/core/scope-triage/SKILL.md) — optional
-  split-advisory notes only (no routing verdict).
+[`/deliver`](deliver.md), [`/audit-to-stories`](audit-to-stories.md),
+[`helpers/plan-reference.md`](helpers/plan-reference.md) (on-demand detail),
+[`core/scope-triage`](../skills/core/scope-triage/SKILL.md) — optional
+split-advisory notes only (no routing verdict).

package/README.md

@@ -182,7 +182,9 @@ dimensions, run model, and how to benchmark a new version.
 ## Contributors
 
 The published `mandrel` package ships three directories — `.agents/`, `bin/`,
-and `lib/` (see the `files` array in [`package.json`](package.json)).
+and `lib/` — plus the single file `docs/CHANGELOG.md`, and excludes the
+`__tests__` subtrees under `.agents/` and `lib/` (see the `files` array in
+[`package.json`](package.json)).
 `.agents/` is the payload `mandrel sync` materializes into a consumer's
 `./.agents/` directory; `bin/mandrel.js` and its `lib/` implementation stay
 inside `node_modules/mandrel/` and back the `npx mandrel …` CLI used
@@ -193,8 +195,8 @@ tooling and is not published.
 Common commands while developing the framework itself:
 
 ```bash
-npm run lint           # markdown + biome
-npm run format         # auto-format
+npm run lint           # biome + markdownlint + repo ratchets + generated-doc drift
+npm run format         # biome format — JavaScript/JSON only, not markdown
 npm test               # framework tests
 npm run test:coverage  # tests with coverage gate
 ```
@@ -226,9 +228,14 @@ against malicious lifecycle scripts in compromised transitive packages
 install scripts for a specific install, run
 `npm install --ignore-scripts=false` for that invocation only.
 
-CRAP and Maintainability gates fire at three sites — close-validation
-(story close), `.husky/pre-push`, and CI (`ci.yml`, push + PR) — against
-the same thresholds from `delivery.quality.*` in `.agentrc.json`.
+CRAP and Maintainability gates fire at four sites — `.husky/pre-commit`
+(`quality-preview.js --staged`, scored on the staged index), `.husky/pre-push`
+(diff-scoped against `origin/main`), close-validation (story close), and CI
+(`ci.yml`, push + PR) — against the same thresholds from
+`delivery.quality.*` in `.agentrc.json`. All four are **blocking**: the
+pre-commit hook fires earliest and refuses the commit on a threshold
+violation, and a green `npm run lint` / `npm test` / `check-baselines.js`
+run does not predict it.
 
 ## License
 

package/docs/CHANGELOG.md

@@ -2,6 +2,99 @@
 
 All notable changes to this project will be documented in this file.
 
+<!--
+  Machine-generated by release-please (`changelog-path` in
+  `release-please-config.json`); only the header above is hand-owned — every
+  release prepends a section beneath it. The three rules below are properties
+  of conventional-changelog-writer's output, not of this repository's prose
+  style: `*` list markers (MD004), a double blank line before each `###`
+  section (MD012), and `*`-wrapped commit subjects that read as unbalanced
+  emphasis (MD037). They would be reintroduced on every release cut, failing
+  lint on release-please's own PR, so they are exempted file-wide rather than
+  hand-repaired. Do not extend this list to cover hand-written prose defects.
+-->
+<!-- markdownlint-disable-file MD004 MD012 MD037 -->
+
+## [2.26.0](https://github.com/dsj1984/mandrel/compare/mandrel-v2.25.0...mandrel-v2.26.0) (2026-08-03)
+
+
+### Added
+
+* /audit-baselines lens: ratchet-tightening audit workflow over the committed baseline surface ([#4903](https://github.com/dsj1984/mandrel/issues/4903)) ([#4913](https://github.com/dsj1984/mandrel/issues/4913)) ([420fb09](https://github.com/dsj1984/mandrel/commit/420fb09df605edfd8ace86e6b2295c7bd6909c3f))
+* **acceptance-eval:** merge parallel cluster verdicts into one gate call per round (refs [#4951](https://github.com/dsj1984/mandrel/issues/4951)) ([#4954](https://github.com/dsj1984/mandrel/issues/4954)) ([56b69dd](https://github.com/dsj1984/mandrel/commit/56b69dde0a5faee418d5f49f4b0c3eab5f682245))
+* **audit:** add the read-only baseline hotspot engine (refs [#4902](https://github.com/dsj1984/mandrel/issues/4902)) ([#4910](https://github.com/dsj1984/mandrel/issues/4910)) ([22a2245](https://github.com/dsj1984/mandrel/commit/22a22458645823705a2cfcf94ea6d1a7acb4546e))
+* **deliver:** accept dash ranges in delivery Story-id lists (refs [#4927](https://github.com/dsj1984/mandrel/issues/4927)) ([#4928](https://github.com/dsj1984/mandrel/issues/4928)) ([9000044](https://github.com/dsj1984/mandrel/commit/90000442d5f578a4895b5950784e2fb8493d316a))
+* **deliver:** add --merge-watch-mode and mandate one-turn fan-out dispatch (refs [#4949](https://github.com/dsj1984/mandrel/issues/4949)) ([#4957](https://github.com/dsj1984/mandrel/issues/4957)) ([fa1c426](https://github.com/dsj1984/mandrel/commit/fa1c426c181cb3696b4ea34166c99719cea877c2))
+* make the coverage instrument measure: widen CI's run to every test tier, configure the gate, and reseed the baseline ([#4922](https://github.com/dsj1984/mandrel/issues/4922)) ([#4931](https://github.com/dsj1984/mandrel/issues/4931)) ([bc94fbf](https://github.com/dsj1984/mandrel/commit/bc94fbf65b41d53098606aff7f7b58dc1679ea5d))
+* repair the inert quality instruments and tighten the ratchets behind the reclaimed slack ([#4923](https://github.com/dsj1984/mandrel/issues/4923)) ([#4933](https://github.com/dsj1984/mandrel/issues/4933)) ([3cc3a30](https://github.com/dsj1984/mandrel/commit/3cc3a30b5e54b3dac78649dd9536ad617086ee0c))
+* retire friction-event.schema.json or wire it, and stop four docs citing a schema nothing compiles ([#4938](https://github.com/dsj1984/mandrel/issues/4938)) ([#4941](https://github.com/dsj1984/mandrel/issues/4941)) ([259f6e6](https://github.com/dsj1984/mandrel/commit/259f6e6cc47db88434b0612aa9327638afb73911))
+* retire the memory-freshness scanner and ship the visible memory-hygiene loop ([#4919](https://github.com/dsj1984/mandrel/issues/4919)) ([#4921](https://github.com/dsj1984/mandrel/issues/4921)) ([54cf87c](https://github.com/dsj1984/mandrel/commit/54cf87c1a4e929681f194fc899decb24636bd5f2))
+
+
+### Fixed
+
+* **baselines:** settle the exit through runAsCli so a piped report is not truncated ([#4932](https://github.com/dsj1984/mandrel/issues/4932)) ([d3670de](https://github.com/dsj1984/mandrel/commit/d3670dec493c2ba60a60e365c1ab809bde58ce43)), closes [#4783](https://github.com/dsj1984/mandrel/issues/4783)
+* close three harness gaps: unbounded CI jobs, divergent runner flags, and inert pretest hooks ([#4936](https://github.com/dsj1984/mandrel/issues/4936)) ([#4942](https://github.com/dsj1984/mandrel/issues/4942)) ([d71040d](https://github.com/dsj1984/mandrel/commit/d71040dc0b558906a42327dcd9bd88ccfc26694c))
+* exclude transpiled-coordinate rows from the 0%-coverage fill, and refuse a baseline that predates provenance stamping ([#4901](https://github.com/dsj1984/mandrel/issues/4901)) ([#4905](https://github.com/dsj1984/mandrel/issues/4905)) ([adc135b](https://github.com/dsj1984/mandrel/commit/adc135b3338550e2911e7139d638be8670eb5bab))
+* **friction:** refuse a quoted --cmd as a usage error and split ENOBUFS from timeout (refs [#4915](https://github.com/dsj1984/mandrel/issues/4915)) ([#4918](https://github.com/dsj1984/mandrel/issues/4918)) ([64989aa](https://github.com/dsj1984/mandrel/commit/64989aa4a5cf746d959b649e760bf93f96f2ead0))
+* **git:** give the git runners an explicit 64 MB stdout ceiling, unblocking Story close ([#4953](https://github.com/dsj1984/mandrel/issues/4953)) ([75160a4](https://github.com/dsj1984/mandrel/commit/75160a491704acc2de127d9135bcfcbc846bdfee))
+* give the raised GitHub write fan-outs transient-retry backoff and single-source their concurrency bound ([#4961](https://github.com/dsj1984/mandrel/issues/4961)) ([#4964](https://github.com/dsj1984/mandrel/issues/4964)) ([459a3f1](https://github.com/dsj1984/mandrel/commit/459a3f12da0280881b757c0855d33d0a89221320))
+* let a dangling-citation anchor count inside a code span (refs [#4906](https://github.com/dsj1984/mandrel/issues/4906)) ([#4911](https://github.com/dsj1984/mandrel/issues/4911)) ([a96ae9f](https://github.com/dsj1984/mandrel/commit/a96ae9fbed4b701ff45d13e268d91e960ebbe595))
+* **lint:** lint docs/ so the gate matches the code-review lens ([#4971](https://github.com/dsj1984/mandrel/issues/4971)) ([b1f4e65](https://github.com/dsj1984/mandrel/commit/b1f4e6551670f145fa6f6e688a16130e8da644d7))
+* make git hooks fire in linked worktrees and stop bypassing pre-push at close ([#4943](https://github.com/dsj1984/mandrel/issues/4943)) ([#4946](https://github.com/dsj1984/mandrel/issues/4946)) ([2ac0597](https://github.com/dsj1984/mandrel/commit/2ac05979241ca2ad061e14fbeda2b71c1b299da7))
+* make the ratchet trend roll-up count what it measures and baseline staleness commit-aware ([#4962](https://github.com/dsj1984/mandrel/issues/4962)) ([#4967](https://github.com/dsj1984/mandrel/issues/4967)) ([fff36bf](https://github.com/dsj1984/mandrel/commit/fff36bf79ab4c75a2f4274c60228ab0942ded65a))
+* **observability:** attribute terminal friction to the emitting CLI ([#4966](https://github.com/dsj1984/mandrel/issues/4966)) ([5aa986a](https://github.com/dsj1984/mandrel/commit/5aa986aaee97e858329ab8f948a1a59db8aeb1c4))
+* **observability:** classify a bare framework-script basename as framework (refs [#4916](https://github.com/dsj1984/mandrel/issues/4916)) ([#4920](https://github.com/dsj1984/mandrel/issues/4920)) ([a8e0bbc](https://github.com/dsj1984/mandrel/commit/a8e0bbc22ad1cc8e0ab3ce117e597c537be96d7c))
+* **plan-persist:** re-carry audit provenance onto dependent Stories (refs [#4935](https://github.com/dsj1984/mandrel/issues/4935)) ([#4939](https://github.com/dsj1984/mandrel/issues/4939)) ([6866b0c](https://github.com/dsj1984/mandrel/commit/6866b0c368de0ff438b565d5049a38273b56ef8c))
+* **quality:** key anonymous CRAP methods by enclosing scope, not escomplex ordinal (refs [#4969](https://github.com/dsj1984/mandrel/issues/4969)) ([#4970](https://github.com/dsj1984/mandrel/issues/4970)) ([ca5da99](https://github.com/dsj1984/mandrel/commit/ca5da9940da57aaf20d34844afa835f6a8b127f0))
+* read prior baseline rows per kind so duplication's diff-scope preservation and epsilon damping actually work ([#4937](https://github.com/dsj1984/mandrel/issues/4937)) ([#4940](https://github.com/dsj1984/mandrel/issues/4940)) ([e7d13b5](https://github.com/dsj1984/mandrel/commit/e7d13b551fb958c38833a7946785929dd17907a3))
+* retune the advisory Spec word budget to 350 and repair its report channel (refs [#4907](https://github.com/dsj1984/mandrel/issues/4907)) ([#4909](https://github.com/dsj1984/mandrel/issues/4909)) ([3c914ba](https://github.com/dsj1984/mandrel/commit/3c914ba9430743f2e5399ded6ac74aee4c4148d1))
+* **scripts:** make --help short-circuit before check-test-temp-hygiene does work ([#4968](https://github.com/dsj1984/mandrel/issues/4968)) ([5e873ac](https://github.com/dsj1984/mandrel/commit/5e873acbc316a37e5a173a94bb2fe52090614493))
+* stop check-baselines silently disabling its compare arm when the base baseline cannot be read ([#4914](https://github.com/dsj1984/mandrel/issues/4914)) ([#4917](https://github.com/dsj1984/mandrel/issues/4917)) ([d62a334](https://github.com/dsj1984/mandrel/commit/d62a334555bccd605bd37bd9d8a544fdcc4e3710))
+* stop the git-cleanup branches phase announcing a DRY RUN before it deletes ([#4898](https://github.com/dsj1984/mandrel/issues/4898)) ([3edad1e](https://github.com/dsj1984/mandrel/commit/3edad1e8c9a8906c1abc5f02e79e7ee4792775b2))
+* **wave-runner:** exempt glob footprints from cross-beat reservation (refs [#4960](https://github.com/dsj1984/mandrel/issues/4960)) ([#4963](https://github.com/dsj1984/mandrel/issues/4963)) ([ca935e2](https://github.com/dsj1984/mandrel/commit/ca935e223f211340c671668a53738de634c12c04))
+* **wave-runner:** reserve in-flight Story footprints in the ready-set guard (refs [#4950](https://github.com/dsj1984/mandrel/issues/4950)) ([#4955](https://github.com/dsj1984/mandrel/issues/4955)) ([7f8ffb3](https://github.com/dsj1984/mandrel/commit/7f8ffb31c523dba01fb9cffe376a5149d92d7c08))
+
+
+### Performance
+
+* **plan:** run the /plan path's independent gathers and write loops concurrently (refs [#4952](https://github.com/dsj1984/mandrel/issues/4952)) ([#4956](https://github.com/dsj1984/mandrel/issues/4956)) ([8c8ec6c](https://github.com/dsj1984/mandrel/commit/8c8ec6c1134f23fbf8214d138438b3febc6014c8))
+
+
+### Changed
+
+* **baselines:** migrate the duplication CLI onto refreshBaseline (refs [#4944](https://github.com/dsj1984/mandrel/issues/4944)) ([#4945](https://github.com/dsj1984/mandrel/issues/4945)) ([38e43d2](https://github.com/dsj1984/mandrel/commit/38e43d2362031cfaebbfeeaa8bec75c3c5ecf56b))
+* burn down the cross-gate hotspot clusters and remove the shipped seams nothing calls ([#4926](https://github.com/dsj1984/mandrel/issues/4926)) ([#4934](https://github.com/dsj1984/mandrel/issues/4934)) ([970c7f8](https://github.com/dsj1984/mandrel/commit/970c7f88f5d198b685f90ede5358beea5b2896ce))
+
+## [2.25.0](https://github.com/dsj1984/mandrel/compare/mandrel-v2.24.0...mandrel-v2.25.0) (2026-08-01)
+
+
+### Added
+
+* enforce the no-rerun verifier: disarm auto-merge on the first red and gate re-arming on the head SHA moving ([#4865](https://github.com/dsj1984/mandrel/issues/4865)) ([#4867](https://github.com/dsj1984/mandrel/issues/4867)) ([b95267f](https://github.com/dsj1984/mandrel/commit/b95267fe49cd27ca7cd42bb3bc7ae0c6ceaa5a3a))
+
+
+### Fixed
+
+* **crap:** measure coordinate mixing, not ordinary drift, in the preview gate (refs [#4871](https://github.com/dsj1984/mandrel/issues/4871)) ([#4881](https://github.com/dsj1984/mandrel/issues/4881)) ([63bcb66](https://github.com/dsj1984/mandrel/commit/63bcb66ab46471cfc1b8ad957d60dd1526d0f679))
+* escape the remaining raw NUL delimiters so these diffs are reviewable ([#4896](https://github.com/dsj1984/mandrel/issues/4896)) ([992fc46](https://github.com/dsj1984/mandrel/commit/992fc46b7675736c8fc7af546600cc59ef5ec96d))
+* make the sanctioned CI watch survive a late-arriving required context, and pass --repo through as a real gh flag ([#4890](https://github.com/dsj1984/mandrel/issues/4890)) ([#4893](https://github.com/dsj1984/mandrel/issues/4893)) ([00c23f4](https://github.com/dsj1984/mandrel/commit/00c23f45f57f6b9d11c7314b92f337a31dda4c2b))
+* normalize audit severity and labels without re-minting fingerprints, carry dedupe provenance, and give the lenses a built-but-not-wired mandate ([#4877](https://github.com/dsj1984/mandrel/issues/4877)) ([#4888](https://github.com/dsj1984/mandrel/issues/4888)) ([04f8937](https://github.com/dsj1984/mandrel/commit/04f89373e4dcaa0a47d5501381fb02b5e29bcef6))
+* pin the run's base branch at init and fail closed when config changed mid-run (refs [#4891](https://github.com/dsj1984/mandrel/issues/4891)) ([#4894](https://github.com/dsj1984/mandrel/issues/4894)) ([8099020](https://github.com/dsj1984/mandrel/commit/8099020a9ea2e662c19a1c8a3d9e32d6269df863))
+* **plan:** reconcile the persist body contract and stop acceptance-eval burning a round on every read (refs [#4874](https://github.com/dsj1984/mandrel/issues/4874)) ([#4882](https://github.com/dsj1984/mandrel/issues/4882)) ([33512b4](https://github.com/dsj1984/mandrel/commit/33512b48702e50d9ebaf98dffc396a9ce0091290))
+* ratchet context-budget shrinkage and stop the baseline updaters writing on --help (refs [#4872](https://github.com/dsj1984/mandrel/issues/4872)) ([#4879](https://github.com/dsj1984/mandrel/issues/4879)) ([8d445a4](https://github.com/dsj1984/mandrel/commit/8d445a45e8a4c57b65573213042fb4aec557af08))
+* stamp the version cache with the real clock and end unquoted env values at an unescaped comment marker (refs [#4878](https://github.com/dsj1984/mandrel/issues/4878)) ([#4883](https://github.com/dsj1984/mandrel/issues/4883)) ([d73ee10](https://github.com/dsj1984/mandrel/commit/d73ee10c2f15c3698705281a5979c7394eb03fa4))
+* stop close-resume opening duplicate empty PRs and stop the PR watcher reporting green on a blocked PR ([#4873](https://github.com/dsj1984/mandrel/issues/4873)) ([#4884](https://github.com/dsj1984/mandrel/issues/4884)) ([9d12f8d](https://github.com/dsj1984/mandrel/commit/9d12f8dcd4badbe3b657f1526c284f7689bf04ee))
+* stop the CRAP row builder silently mixing transpiled and original line coordinates, and refuse to compare on an unsound basis ([#4866](https://github.com/dsj1984/mandrel/issues/4866)) ([#4868](https://github.com/dsj1984/mandrel/issues/4868)) ([a6c8c88](https://github.com/dsj1984/mandrel/commit/a6c8c8866c72b1372eb5fd5b7232fb3833e33f93))
+* stop the test suite writing fixture friction signals into the real ledger, and stop unresolvable Story ids reaching an auto-filed ticket ([#4892](https://github.com/dsj1984/mandrel/issues/4892)) ([#4895](https://github.com/dsj1984/mandrel/issues/4895)) ([a607de4](https://github.com/dsj1984/mandrel/commit/a607de49a09c778c1fbefe68d4c57d6a75f0b648))
+* warn about the un-waivable light-path verdict up front, de-conflict on actual footprints, and reconcile the concurrency override ([#4875](https://github.com/dsj1984/mandrel/issues/4875)) ([#4880](https://github.com/dsj1984/mandrel/issues/4880)) ([16d4958](https://github.com/dsj1984/mandrel/commit/16d49584227d783695bb36043e29c64a58aaab39))
+
+
+### Changed
+
+* reclaim workflow-spine byte headroom and move the close-and-land tail to the orchestrator (refs [#4876](https://github.com/dsj1984/mandrel/issues/4876)) ([#4885](https://github.com/dsj1984/mandrel/issues/4885)) ([7d981cd](https://github.com/dsj1984/mandrel/commit/7d981cde4f8c3d1047a09e64d1f193b85fbfd4b6))
+* widen workflow-spine and agent-boot headroom to a real editing margin (refs [#4876](https://github.com/dsj1984/mandrel/issues/4876)) ([#4889](https://github.com/dsj1984/mandrel/issues/4889)) ([45f5482](https://github.com/dsj1984/mandrel/commit/45f548238c9c82a1e36df11320b73c8f9dea27f5))
+
 ## [2.24.0](https://github.com/dsj1984/mandrel/compare/mandrel-v2.23.0...mandrel-v2.24.0) (2026-07-31)
 
 

package/lib/cli/update.js

@@ -247,10 +247,15 @@ function resolveProjectRoot() {
  * `mandrel` version via the daily freshness cache (`version-check.js`).
  *
  * When `bypassCache` is `true` (the default for an explicit `mandrel update`
- * call — Story #4046 A1b), the cache freshness window is effectively zeroed by
- * passing `now` as far in the future, which makes `isStale` treat any existing
- * cache as stale and always issue exactly one network probe. The cache is still
- * written so the post-update `version-current` advisory has a fresh baseline.
+ * call — Story #4046 A1b), `isStale` is asked to skip its freshness read via
+ * `forceRefresh`, so any existing cache is ignored and exactly one network
+ * probe is issued. The cache is still written so the post-update
+ * `version-current` advisory has a fresh baseline.
+ *
+ * The bypass deliberately does **not** shift `now`: the same clock is stamped
+ * into the refreshed `checkedAt`, so a shifted clock would persist a
+ * ~48h-future timestamp and defeat the 24h window for every later passive
+ * check until real time caught up (Story #4878).
  *
  * When `bypassCache` is `false` (passive staleness checks only), the normal
  * 24h-cache semantics apply: a fresh cache returns the cached version with
@@ -281,16 +286,14 @@ async function defaultResolveTargetVersion({
   bypassCache = false,
   log = () => {},
 } = {}) {
-  // When bypassCache is true, push `now` far enough into the future that any
-  // cached checkedAt value is guaranteed to be older than the STALE_AFTER_MS
-  // window, forcing a fresh network probe (Story #4046 A1b).
-  const effectiveNow = bypassCache
-    ? new Date(now.getTime() + 48 * 60 * 60 * 1000)
-    : now;
+  // Bypass the cache by telling isStale to skip its freshness read — never by
+  // shifting `now`, which is also the clock persisted as `checkedAt`
+  // (Story #4046 A1b forcing the probe; Story #4878 keeping the stamp honest).
   const result = await isStale({
     cachePath,
-    now: effectiveNow,
+    now,
     runner,
+    forceRefresh: bypassCache,
     fs,
     log,
   });

package/lib/cli/version-check.js

@@ -142,10 +142,17 @@ export function refreshCache({
  * The freshness comparison uses `>=` so an exactly-24h-old cache counts as
  * stale (the boundary is treated as "due for refresh").
  *
+ * `forceRefresh` skips the freshness read entirely and always probes. It is
+ * the supported way to bypass the cache: callers must **not** fake staleness
+ * by shifting `now` forward, because `now` is also the clock stamped into the
+ * refreshed `checkedAt` — a shifted clock persists a future timestamp and
+ * defeats the freshness window for every later reader (Story #4878).
+ *
  * @param {{
  *   cachePath: string,
  *   now?: Date,
  *   runner: () => (string | Promise<string>),
+ *   forceRefresh?: boolean,
  *   fs?: typeof import('node:fs'),
  *   log?: (msg: string) => void,
  * }} opts
@@ -160,10 +167,11 @@ export async function isStale({
   cachePath,
   now = new Date(),
   runner,
+  forceRefresh = false,
   fs = nodeFs,
   log = () => {},
 }) {
-  const cached = readCache({ cachePath, fs });
+  const cached = forceRefresh ? null : readCache({ cachePath, fs });
 
   if (cached) {
     const ageMs = now.getTime() - new Date(cached.checkedAt).getTime();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mandrel",
-  "version": "2.24.0",
+  "version": "2.26.0",
   "description": "Claude Code-first opinionated workflow framework: instructions, skills, rules, and SDLC workflows that govern AI coding assistants.",
   "files": [
     ".agents/",
@@ -15,9 +15,7 @@
     "provenance": true
   },
   "scripts": {
-    "pretest": "node .agents/scripts/test-wrapper.js && node .agents/scripts/validate-skills.js",
-    "pretest:quick": "node .agents/scripts/test-wrapper.js",
-    "pretest:integration": "node .agents/scripts/test-wrapper.js",
+    "//test-preflight": "There are deliberately NO pretest* scripts (Story #4936). .npmrc sets ignore-scripts=true as supply-chain defence (CWE-1357), and that suppresses every pre*/post* lifecycle script for `npm run` too — so a pretest entry here would look like a gate and never execute. Each tier's preflight is declared once in .agents/scripts/lib/test-runner-contract.js and invoked by the runners themselves, which is why it fires for `npm test`, `npm run test:coverage` and a bare `node .agents/scripts/run-tests.js` alike.",
     "test": "node .agents/scripts/run-tests.js",
     "test:quick": "node .agents/scripts/run-tests.js --tier quick",
     "test:integration": "node .agents/scripts/run-tests.js --tier integration",
@@ -28,6 +26,7 @@
     "test:coverage": "node .agents/scripts/run-coverage.js",
     "coverage:check": "node .agents/scripts/check-baselines.js --gate coverage",
     "coverage:update": "node .agents/scripts/update-coverage-baseline.js",
+    "coverage:reanchor": "node .agents/scripts/update-coverage-baseline.js --full-scope",
     "baseline:agents-loc": "node baselines/agents-loc-baseline.mjs",
     "lint:md": "markdownlint-cli2 \".agents/**/*.md\" \"*.md\" \"!node_modules/**\" \"!.worktrees/**\"",
     "lint": "node .agents/scripts/run-lint.js && npm run docs:check",
@@ -39,13 +38,19 @@
     "format:check": "biome ci .",
     "maintainability:check": "node .agents/scripts/check-baselines.js --gate maintainability",
     "maintainability:update": "node .agents/scripts/update-maintainability-baseline.js",
+    "maintainability:reanchor": "node .agents/scripts/update-maintainability-baseline.js --full-scope",
     "check:arch": "node .agents/scripts/check-arch-cycles.js",
     "check:context-budget": "node .agents/scripts/check-context-budget.js",
+    "check:cyclomatic": "node .agents/scripts/check-cyclomatic.js",
+    "cyclomatic:update": "node .agents/scripts/check-cyclomatic.js --update",
+    "check:schema-refs": "node .agents/scripts/check-schema-references.js",
     "check:workflow-citations": "node .agents/scripts/check-workflow-citations.js",
     "crap:check": "node .agents/scripts/check-baselines.js --gate crap",
     "crap:update": "node .agents/scripts/update-crap-baseline.js",
+    "crap:reanchor": "node .agents/scripts/update-crap-baseline.js --full-scope",
     "duplication:check": "node .agents/scripts/check-baselines.js --gate duplication",
     "duplication:update": "node .agents/scripts/update-duplication-baseline.js",
+    "duplication:reanchor": "node .agents/scripts/update-duplication-baseline.js --full-scope",
     "quality:preview": "node .agents/scripts/check-dead-exports.js && node .agents/scripts/quality-preview.js",
     "quality:watch": "node .agents/scripts/quality-watch.js",
     "sync:commands": "node bin/mandrel.js sync-commands",

package/.agents/schemas/friction-event.schema.json

@@ -1,56 +0,0 @@
-{
-  "$schema": "http://json-schema.org/draft-07/schema#",
-  "title": "FrictionEvent",
-  "type": "object",
-  "additionalProperties": false,
-  "properties": {
-    "eventId": {
-      "type": "string",
-      "format": "uuid"
-    },
-    "timestamp": {
-      "type": "string",
-      "format": "date-time"
-    },
-    "sprintId": {
-      "type": "string"
-    },
-    "category": {
-      "type": "string",
-      "enum": [
-        "Prompt Ambiguity",
-        "Missing Skill",
-        "Incorrect Persona",
-        "Tool Limitation",
-        "Execution Error"
-      ]
-    },
-    "source": {
-      "type": "object",
-      "additionalProperties": false,
-      "properties": {
-        "tool": {
-          "type": "string"
-        },
-        "command": {
-          "type": "string"
-        }
-      }
-    },
-    "details": {
-      "type": "string",
-      "description": "Specific error message or observation."
-    },
-    "context": {
-      "type": "object",
-      "additionalProperties": false,
-      "properties": {
-        "protocolFile": {
-          "type": "string",
-          "description": "Path to relevant protocol file, e.g., '.agents/skills/core/tdd.md'"
-        }
-      }
-    }
-  },
-  "required": ["eventId", "timestamp", "sprintId", "category", "details"]
-}