mandrel 2.55.0 → 2.57.0

package/.agents/scripts/lib/config/limits.js

@@ -1,28 +1,23 @@
 /**
- * Limits/budgets/signals accessors (Epic #1720 Story #1739 — top-level reshape).
+ * Limits accessors (Epic #1720 Story #1739 — top-level reshape).
  *
  * Pre-reshape, every runtime ceiling lived under the legacy `agentSettings.limits.*` bag.
- * Post-reshape, the surviving operator-configurable keys are split across
- * `planning.*` and `delivery.*`:
+ * Post-reshape, the surviving operator-configurable key is
+ * `delivery.execution.timeoutMs` (per-process execution timeout).
  *
- *   - `delivery.execution.timeoutMs` (per-process execution timeout)
- *   - `delivery.signals.{rework, retry}` (performance-signal detector
- *     thresholds — `hotspot` retired with Epic #4406; `churn`/`idle` dropped)
- *
- * Framework constants (not operator-tunable via `.agentrc.json`):
- *   - `maxTickets` — decomposer reviewability budget (Story #4163)
- *
- * Dropped entirely: `maxInstructionSteps`, `friction.*`, `executionMaxBuffer`,
- * `signals.{churn, idle}`, `delivery.preflight`, `delivery.lease.ttlMs`
- * (Story #5006 deleted the lease TTL: with no heartbeat source every foreign
- * claim read live, so the window decided nothing), `delivery.maxTokenBudget`
- * (planning no longer sizes against a token-budget envelope; session-mass
- * ceilings are absolute in `DEFAULT_MODEL_CAPACITY`), and
- * `planning.context.{maxBytes, summaryMode}` (Story #4541 — the `applyBudget`
- * pass they fed lost its last caller in the v2 cutover, and it bounded a field
- * the envelope builders discarded; the live bound on planner-context size is
- * the fixed `PLAN_CONTEXT_ENVELOPE_BYTE_CEILING` in
- * `lib/orchestration/plan-context.js`).
+ * Dropped entirely: `maxTickets` (Story #5312 — the reviewability budget
+ * never fired on a real plan and duplicated the default-single split policy),
+ * `delivery.signals.{rework, retry}` with `SIGNALS_DEFAULTS` (Story #5313 —
+ * the detector thresholds bounded execution by count, not by risk),
+ * `maxInstructionSteps`, `friction.*`, `executionMaxBuffer`,
+ * `signals.{churn, idle, hotspot}`, `delivery.preflight`,
+ * `delivery.lease.ttlMs` (Story #5006 deleted the lease TTL: with no
+ * heartbeat source every foreign claim read live, so the window decided
+ * nothing), `delivery.maxTokenBudget` (planning no longer sizes against a
+ * token-budget envelope), and `planning.context.{maxBytes, summaryMode}`
+ * (Story #4541 — the `applyBudget` pass they fed lost its last caller in the
+ * v2 cutover; the live bound on planner-context size is the fixed
+ * `PLAN_CONTEXT_ENVELOPE_BYTE_CEILING` in `lib/orchestration/plan-context.js`).
  *
  * The historic combined accessor `getLimits(config)` is preserved as a
  * compatibility surface: it returns a wrapper carrying the surviving
@@ -30,59 +25,19 @@
  * working. New call sites should prefer the specific accessors below.
  */
 
-/**
- * Framework defaults for the performance-signal detector thresholds.
- * `hotspot` was retired with its detector (Epic #4406); `churn` and `idle`
- * were dropped earlier.
- */
-export const SIGNALS_DEFAULTS = Object.freeze({
-  rework: Object.freeze({ editsPerFile: 5 }),
-  retry: Object.freeze({ repeatCount: 3 }),
-});
-
 /**
  * Framework defaults for the surviving limits surface.
  */
 export const LIMITS_DEFAULTS = Object.freeze({
-  maxTickets: 80,
   executionTimeoutMs: 600000,
-  signals: SIGNALS_DEFAULTS,
 });
 
-/**
- * Per-detector merge of an operator-supplied `delivery.signals.*` block
- * with framework defaults. Each detector is shallow-overlaid so an
- * operator can override a single threshold without re-listing the others.
- *
- * @param {object|undefined} userSignals
- * @returns {{ rework: {editsPerFile: number}, retry: {repeatCount: number} }}
- */
-function mergeSignals(userSignals) {
-  const user =
-    userSignals && typeof userSignals === 'object' ? userSignals : {};
-  const merged = {};
-  for (const detector of Object.keys(SIGNALS_DEFAULTS)) {
-    const userDetector =
-      user[detector] && typeof user[detector] === 'object'
-        ? user[detector]
-        : {};
-    merged[detector] = { ...SIGNALS_DEFAULTS[detector], ...userDetector };
-  }
-  return merged;
-}
-
 /**
  * Resolve the surviving limits surface against a `.agentrc.json` shape
- * (post-reshape). `maxTickets` is a framework constant (never read from
- * config); pulls `executionTimeoutMs` from `delivery.*`, pulls signals from
- * `delivery.signals.*`.
+ * (post-reshape): `executionTimeoutMs` from `delivery.execution.*`.
  *
  * @param {object|undefined} config
- * @returns {{
- *   maxTickets: number,
- *   executionTimeoutMs: number,
- *   signals: ReturnType<typeof mergeSignals>,
- * }}
+ * @returns {{ executionTimeoutMs: number }}
  */
 export function resolveLimits(config) {
   const delivery =
@@ -94,10 +49,8 @@ export function resolveLimits(config) {
       ? delivery.execution
       : {};
   return {
-    maxTickets: LIMITS_DEFAULTS.maxTickets,
     executionTimeoutMs:
       execution.timeoutMs ?? LIMITS_DEFAULTS.executionTimeoutMs,
-    signals: mergeSignals(delivery.signals),
   };
 }
 
@@ -111,16 +64,3 @@ export function resolveLimits(config) {
 export function getLimits(config) {
   return resolveLimits(config ?? undefined);
 }
-
-/**
- * Read the merged `delivery.signals` block. Equivalent to
- * `getLimits(config).signals` but exposed as a standalone accessor so
- * detector wiring can import it without dragging the whole limits
- * surface into their bundle.
- *
- * @param {object | null | undefined} config
- * @returns {ReturnType<typeof resolveLimits>['signals']}
- */
-export function getSignals(config) {
-  return getLimits(config).signals;
-}

package/.agents/scripts/lib/config/quality.js

@@ -491,10 +491,15 @@ function resolveCoverageGate(userBlock) {
  * before this value is ever read. `maintainability.tolerance` is the one
  * documented MI-drop control now; see `lib/migrations/index.js` for the
  * consumer-config migration that strips a leftover key on upgrade.
+ *
+ * `cyclomaticMustFix` was retired in Story #5313: the cyclomatic ratchet
+ * (`check-cyclomatic.js`) keeps a fixed ceiling of 12
+ * (`lib/cyclomatic-ceiling.js#CYCLOMATIC_CEILING`), and `cyclomaticFlag` is
+ * the one advisory knob left — `quality-preview.js` reports over-flag
+ * methods without failing on them.
  */
 export const CODING_GUARDRAILS_DEFAULTS = Object.freeze({
   cyclomaticFlag: 8,
-  cyclomaticMustFix: 12,
   requireSiblingTest: false,
 });
 
@@ -512,8 +517,6 @@ export function resolveCodingGuardrails(userBlock) {
   );
   return {
     cyclomaticFlag: userBlock.cyclomaticFlag ?? defaults.cyclomaticFlag,
-    cyclomaticMustFix:
-      userBlock.cyclomaticMustFix ?? defaults.cyclomaticMustFix,
     requireSiblingTest:
       typeof userBlock.requireSiblingTest === 'boolean'
         ? userBlock.requireSiblingTest

package/.agents/scripts/lib/config/runners.js

@@ -49,10 +49,11 @@ const DEFAULT_DELIVER_RUNNER = Object.freeze({
  * Default auto-fix loop ceilings for /mandrel-deliver code-review. Operators
  * override via `delivery.codeReview.*` in `.agentrc.json` (Story #2611,
  * Epic #2586; `autoFixSeverity` default `'medium'` per Story #4399).
+ * `maxFixScopeFiles` was retired in Story #5313 — it bounded a fix by file
+ * count rather than by risk.
  */
 export const DEFAULT_CODE_REVIEW = Object.freeze({
   maxFixAttempts: 3,
-  maxFixScopeFiles: 5,
   autoFixSeverity: 'medium',
 });
 
@@ -62,7 +63,7 @@ export const DEFAULT_CODE_REVIEW = Object.freeze({
  * @param {object | null | undefined} config
  * @returns {{
  *   deliverRunner: { concurrencyCap: number, footprintGuard: 'enforce'|'advisory' },
- *   codeReview: { maxFixAttempts: number, maxFixScopeFiles: number, autoFixSeverity: 'high'|'medium' },
+ *   codeReview: { maxFixAttempts: number, autoFixSeverity: 'high'|'medium' },
  *   decomposer: { concurrencyCap: number },
  * }}
  */

package/.agents/scripts/lib/config-settings-schema-delivery.js

@@ -173,49 +173,6 @@ const WORKTREE_ISOLATION_SCHEMA = {
   ],
 };
 
-/**
- * `delivery.signals` — detector thresholds for the surviving
- * performance-signal categories. `hotspot` was retired with its detector
- * (Epic #4406); `churn` and `idle` were dropped earlier (low signal-to-noise).
- * Each block is shallow-merged by the resolver.
- */
-const SIGNALS_SCHEMA = {
-  type: 'object',
-  description:
-    'Detector thresholds for the surviving performance-signal categories. Each block is shallow-merged by the resolver.',
-  properties: {
-    rework: {
-      type: 'object',
-      description: 'Rework detector — repeated edits to one file in a run.',
-      properties: {
-        editsPerFile: {
-          type: 'integer',
-          minimum: 1,
-          description:
-            'Edits to a single file within one run that trip the rework signal.',
-          default: LIMITS_DEFAULTS.signals.rework.editsPerFile,
-        },
-      },
-      additionalProperties: false,
-    },
-    retry: {
-      type: 'object',
-      description: 'Retry detector — the same command failing repeatedly.',
-      properties: {
-        repeatCount: {
-          type: 'integer',
-          minimum: 1,
-          description:
-            'Repeats of an identical failing command that trip the retry signal.',
-          default: LIMITS_DEFAULTS.signals.retry.repeatCount,
-        },
-      },
-      additionalProperties: false,
-    },
-  },
-  additionalProperties: false,
-};
-
 /**
  * `delivery.mergeWatch` — knobs consumed by the close-and-land merge wait
  * listener (Story #2896, Epic #2880) and by the close-and-land merge wait
@@ -294,19 +251,19 @@ const MERGE_WATCH_SCHEMA = {
  * (`CODE_REVIEW_SCHEMA` imported from the quality schema module).
  */
 
-// Epic #4478 (M7-B) — role-scoped-agent kill-switch + maker-checker floor.
+// Epic #4478 (M7-B) — role-scoped-agent kill-switch.
 // Stage 6 dropped `delivery.routing.singleDelivery` (v1 epic route switch).
 // `delivery.routing.roleScopedAgents` (default true via getDeliveryRouting)
 // flips converted delivery spawns onto their `.claude/agents/<role>.md` boot
 // context; false falls back to `subagent_type: general-purpose` (the instant
 // per-consumer revert + the escape for hosts that ignore `.claude/agents/`).
-// `delivery.routing.freshCriticSampleRate` (default 0.2, clamped [0, 1]) is the
-// maker-checker sampling floor forcing a fraction of low-derived-level
-// acceptance clusters through a fresh critic.
+// Story #5313 retired `delivery.routing.freshCriticSampleRate` (the
+// maker-checker sampling floor): the standard profile now routes purely off
+// the derived change level.
 const ROUTING_SCHEMA = {
   type: 'object',
   description:
-    'v2 delivery-spawn routing: role-scoped boot contexts and maker-checker sampling. The v1 singleDelivery epic-route kill-switch was removed in Stage 6.',
+    'v2 delivery-spawn routing: role-scoped boot contexts and the ceremony profile. The v1 singleDelivery epic-route kill-switch was removed in Stage 6; the freshCriticSampleRate sampling floor was retired in Story #5313.',
   properties: {
     roleScopedAgents: {
       type: 'boolean',
@@ -314,19 +271,11 @@ const ROUTING_SCHEMA = {
         'Epic #4478 (M7-B). Kill-switch for the role-scoped boot contexts. When true (default), a converted delivery spawn (`story-worker`, `acceptance-critic`) boots on its own `.claude/agents/<role>.md` system prompt instead of re-paying the full CLAUDE.md @-import closure. When false, every converted spawn falls back to `subagent_type: general-purpose` — the instant, code-rollback-free per-consumer revert, and the universal escape for hosts that ignore `.claude/agents/`. The fallback is the full-closure agent that ran before M7-B, so flipping it off never drops a gate.',
       default: DELIVERY_ROUTING_DEFAULTS.roleScopedAgents,
     },
-    freshCriticSampleRate: {
-      type: 'number',
-      minimum: 0,
-      maximum: 1,
-      description:
-        'Epic #4478 (M7-B, Part 2). Maker-checker sampling floor. Under the standard profile, a change set touching no sensitive path routes its acceptance clusters down the contract-identical inline critic path, but this fraction of them is still forced through a fresh-context critic so a low derived level never means zero independent checking. Clamped to [0, 1]; 0 disables the floor, 1 forces every cluster fresh. Consumed by resolveCeremonyForRisk (lib/orchestration/ceremony-routing.js).',
-      default: DELIVERY_ROUTING_DEFAULTS.freshCriticSampleRate,
-    },
     ceremonyProfile: {
       type: 'string',
       enum: ['minimal', 'standard', 'strict'],
       description:
-        'Acceptance-ceremony depth. minimal = always inline critic; strict = always fresh-context critic; standard (default) = routed off the change level derived from the Story diff, with the maker-checker sampling floor.',
+        'Acceptance-ceremony depth. minimal = always inline critic; strict = always fresh-context critic; standard (default) = routed off the change level derived from the Story diff: high or underivable → fresh, low → inline.',
       default: DELIVERY_ROUTING_DEFAULTS.ceremonyProfile,
     },
     closeAndLand: {
@@ -458,23 +407,22 @@ const REFACTOR_STAGE_SCHEMA = {
  * re-evaluates — capped at `maxRounds` redraft rounds.
  *
  * `maxRounds` is the operator-tunable redraft ceiling (default 2 via
- * `lib/config/acceptance-eval.js`). It is a soft knob inside an
- * **undisableable** hard cap: `lib/config/acceptance-eval.js` clamps any
- * configured value into `[1, ACCEPTANCE_EVAL_MAX_ROUNDS_CEILING]`, so no
- * configuration can switch the loop off (`maxRounds: 0`) or let it spin
- * unbounded. There is intentionally **no** `enabled` flag — the loop is a
- * hard cutover, always on, per `rules/git-conventions.md`.
+ * `lib/config/acceptance-eval.js`). Story #5313 dropped the hard ceiling and
+ * the floor-of-one clamp: `maxRounds: 0` is valid and means one pass scored
+ * once with no redraft round. There is intentionally **no** `enabled` flag —
+ * the scoring pass is a hard cutover, always on, per
+ * `rules/git-conventions.md`.
  */
 const ACCEPTANCE_EVAL_SCHEMA = {
   type: 'object',
   description:
-    'Story #3819. Bounded per-Story acceptance self-eval loop. After the implementation commits land and before the Story-implementation phase flips to `closing`, an independent (fresh-context) critic pass scores the caller-injected change set against each inline `acceptance[]` item, redrafts the unmet items, and re-evaluates — capped at `maxRounds` redraft rounds, then escalates to `agent::blocked` when criteria remain unmet. There is no `enabled` flag: the loop is a hard cutover (always on).',
+    'Story #3819. Bounded per-Story acceptance self-eval loop. After the implementation commits land and before the Story-implementation phase flips to `closing`, an independent (fresh-context) critic pass scores the caller-injected change set against each inline `acceptance[]` item, redrafts the unmet items, and re-evaluates — capped at `maxRounds` redraft rounds (0 = scored once, no redraft), then escalates to `agent::blocked` when criteria remain unmet. There is no `enabled` flag: the scoring pass is a hard cutover (always on).',
   properties: {
     maxRounds: {
       type: 'integer',
-      minimum: 1,
+      minimum: 0,
       description:
-        'Maximum number of redraft rounds before escalation. Default 2; clamped into [1, hard ceiling] by lib/config/acceptance-eval.js so the cap can never be disabled (maxRounds: 0 clamps up to 1).',
+        'Maximum number of redraft rounds before escalation. Default 2; 0 means the verdict is scored once with no redraft round (Story #5313 dropped the hard ceiling and the floor-of-one clamp).',
       default: ACCEPTANCE_EVAL_DEFAULTS.maxRounds,
     },
   },
@@ -656,14 +604,13 @@ const TEMP_RETENTION_SCHEMA = {
 export const DELIVERY_SCHEMA = {
   type: 'object',
   description:
-    'Everything `/mandrel-deliver` and `single-story-close` consume: execution timeouts, worktree isolation, runner concurrency, docs freshness, signals, quality gates, merge/CI watch, review ceremony, and the feedback loop.',
+    'Everything `/mandrel-deliver` and `single-story-close` consume: execution timeouts, worktree isolation, runner concurrency, docs freshness, quality gates, merge/CI watch, review ceremony, and the feedback loop.',
   properties: {
     execution: EXECUTION_SCHEMA,
     docsFreshness: DOCS_FRESHNESS_SCHEMA,
     tempRetention: TEMP_RETENTION_SCHEMA,
     deliverRunner: DELIVER_RUNNER_SCHEMA,
     worktreeIsolation: WORKTREE_ISOLATION_SCHEMA,
-    signals: SIGNALS_SCHEMA,
     // `quality.gates.crap.incrementalCoverage` (Story #4981) is declared in
     // `config/gates/crap.schema.js` and reaches AJV validation through this
     // property — QUALITY_SCHEMA → GATES_SCHEMA → CRAP_GATE. No separate

package/.agents/scripts/lib/config-settings-schema-quality.js

@@ -40,13 +40,6 @@ const CODING_GUARDRAILS_SCHEMA = {
         'Cyclomatic complexity at which a new or changed method is flagged for a refactor look.',
       default: CODING_GUARDRAILS_DEFAULTS.cyclomaticFlag,
     },
-    cyclomaticMustFix: {
-      type: 'integer',
-      minimum: 1,
-      description:
-        'Cyclomatic complexity at which a new or changed method must be decomposed before the diff closes.',
-      default: CODING_GUARDRAILS_DEFAULTS.cyclomaticMustFix,
-    },
     requireSiblingTest: {
       type: 'boolean',
       description:
@@ -356,13 +349,6 @@ export const CODE_REVIEW_SCHEMA = {
         'Maximum auto-fix retry attempts per finding in /mandrel-deliver Phase 5 (code-review). 0 disables auto-fix. Default 3.',
       default: DEFAULT_CODE_REVIEW.maxFixAttempts,
     },
-    maxFixScopeFiles: {
-      type: 'integer',
-      minimum: 1,
-      description:
-        'Maximum file count a single auto-fix may modify before escalating to agent::blocked. Default 5.',
-      default: DEFAULT_CODE_REVIEW.maxFixScopeFiles,
-    },
     autoFixSeverity: {
       type: 'string',
       enum: ['high', 'medium'],

package/.agents/scripts/lib/config-settings-schema.js

@@ -16,6 +16,7 @@ import { SHELL_INJECTION_PATTERN_STRING } from './config-schema-shared.js';
 // resolved AGENTRC_SCHEMA is unchanged.
 import { DELIVERY_SCHEMA } from './config-settings-schema-delivery.js';
 import compiledAgentrcValidator from './generated/agentrc-validator.js';
+import { DEFAULT_FRAMEWORK_REPO } from './github/framework-repo.js';
 import { SKILL_ID_RE } from './skills/walk-skill-files.js';
 
 /**
@@ -63,22 +64,6 @@ const NULLABLE_NONEMPTY_SAFE_STRING = {
   not: { type: 'string', pattern: SHELL_INJECTION_PATTERN_STRING },
 };
 
-/** A list-valued config key may be a plain array (replace) or an extender
- * object `{ append, prepend }` that deep-merges with framework defaults. */
-const LIST_OR_EXTENDER_OF_STRINGS = {
-  oneOf: [
-    { type: 'array', items: { type: 'string' } },
-    {
-      type: 'object',
-      properties: {
-        append: { type: 'array', items: { type: 'string' } },
-        prepend: { type: 'array', items: { type: 'string' } },
-      },
-      additionalProperties: false,
-    },
-  ],
-};
-
 /**
  * Backwards-compatible export used by a handful of call sites that historically
  * scanned the schema for string-shaped fields. Post-reshape, the only
@@ -386,6 +371,37 @@ const MERGE_METHODS_SCHEMA = {
   additionalProperties: false,
 };
 
+/**
+ * Where follow-up work is filed when the repository that surfaced it does not
+ * own it. Ownership splits three ways — consumer / framework / platform — and
+ * `github.owner`/`github.repo` already carry the consumer bucket, so only the
+ * other two are configured here. Routing itself lives in
+ * `lib/github/framework-repo.js`; an unset bucket is reported as unroutable
+ * rather than silently re-pointed at the consumer's own tracker.
+ */
+const FOLLOW_UP_REPOS_SCHEMA = {
+  type: 'object',
+  description:
+    'Repository slugs for the non-consumer follow-up ownership buckets, used when a CI gap, retro proposal, or audit finding belongs to someone other than the repo that surfaced it.',
+  properties: {
+    framework: {
+      type: 'string',
+      pattern: '^[^/\\s]+/[^/\\s]+$',
+      description:
+        '`<owner>/<repo>` that owns framework-level defects. Defaults to the Mandrel mirror — the one bucket with a knowable default.',
+      default: DEFAULT_FRAMEWORK_REPO,
+    },
+    platform: {
+      type: ['string', 'null'],
+      pattern: '^[^/\\s]+/[^/\\s]+$',
+      description:
+        '`<owner>/<repo>` for a shared platform or infrastructure tracker (a shared base config, a runner fleet, a cross-repo toolchain). No default — nothing can guess a shared repo. Left unset, platform-owned findings file locally and say so.',
+      default: null,
+    },
+  },
+  additionalProperties: false,
+};
+
 const GITHUB_SCHEMA = {
   type: 'object',
   description:
@@ -432,6 +448,7 @@ const GITHUB_SCHEMA = {
         'Default `timeoutMs` applied to every `gh` subprocess the provider facade spawns, so a stalled socket or long-poll cannot hang an orchestration indefinitely. A `GhExecTimeoutError` from a hit ceiling is classified `transient` and retried by `withTransientRetry`. Story #2860.',
       default: 60000,
     },
+    followUpRepos: FOLLOW_UP_REPOS_SCHEMA,
     branchProtection: BRANCH_PROTECTION_SCHEMA,
     mergeMethods: MERGE_METHODS_SCHEMA,
     notifications: NOTIFICATIONS_SCHEMA,
@@ -461,149 +478,38 @@ const GITHUB_SCHEMA = {
 // `planning` carries `additionalProperties: false`, so a resurrected key fails
 // loudly; the 2.20.0 retirement migration strips it on upgrade.
 
+// Story #5312 — the planning diet. `riskHeuristics`, `complexityGate`,
+// `memoryPool.{staleAfterDays, growthDelta}`, `failOnSharedEditors`,
+// `requireExplicitCrossStoryDeps`, `failOnRegistryConflicts`,
+// `failOnLargeFanOut`, `largeFanOutThreshold` and `crossCuttingRegistries`
+// were retired together: every one either never fired on real work, duplicated
+// a judgment the authoring model already makes, or guarded a consumer that no
+// longer exists. The block stays `additionalProperties: false`, so a config
+// still carrying one fails loudly; the 2.57.0 retirement migration strips them
+// on upgrade.
+
 const PLANNING_SCHEMA = {
   type: 'object',
   description:
-    'Inputs to `/mandrel-plan`: risk escalation heuristics, ceremony-lite routing, the memory-hygiene advisory thresholds, and the cross-Story conflict-finding severity gates.',
+    'Inputs to `/mandrel-plan`: the memory-hygiene advisory ceiling and the opt-in navigability reachability gate.',
   properties: {
-    riskHeuristics: {
-      ...LIST_OR_EXTENDER_OF_STRINGS,
-      description:
-        'Prose heuristics the planner escalates a Story against. A plain array replaces the framework list; the `{ append, prepend }` extender form deep-merges with it.',
-      default: [
-        'Destructive or irreversible data mutations (dropping tables, deleting rows without soft-delete or backup, truncating production state).',
-        'Modifications to shared security or auth infrastructure (IAM policies, auth middleware, session or token handling, secret rotation).',
-        'Changes to CI/CD, deployment pipelines, or release gating that could disable safety checks or ship unverified code to production.',
-        'Monorepo-wide AST or text replacements touching overlapping files in parallel (catastrophic merge-conflict risk across concurrent agents).',
-        'Schema migrations that rewrite existing rows or drop columns without a backfill or rollback plan.',
-      ],
-    },
-    // Story #4722 (superseding #4683's word-count gate) — shape-derived
-    // ceremony-lite routing. Complexity routes on the objective shape of the
-    // authored work (changes[] count, acceptance count, creates-vs-refactors
-    // mix, sensitive-path classes), never on seed word count: `maxSeedWords`
-    // was removed in the hard cutover and is rejected as an additional
-    // property. The lite path never relaxes a non-negotiable (Story ticket,
-    // PR-to-main, repo gates, security baseline). Defaults live on
-    // DEFAULT_COMPLEXITY_GATE in `lib/orchestration/complexity-gate.js`;
-    // shape ceilings are the framework constants STORY_SHAPE_CEILINGS.
-    complexityGate: {
-      type: 'object',
-      description:
-        'Shape-derived ceremony-lite complexity routing. A lite claim is validated against the authored Story shape at persist and re-derived from the Story body at dispatch; conservative (full on any doubt). Never relaxes the Story-ticket / PR-to-main / repo-gates / security-baseline non-negotiables.',
-      properties: {
-        enabled: {
-          type: 'boolean',
-          description:
-            'Master switch. When false, lite routing is disabled everywhere: persist refuses lite claims and dispatch always takes the sub-agent path. Default true.',
-        },
-        maxArtifacts: {
-          type: 'integer',
-          minimum: 0,
-          description:
-            'Enumerated-artifact threshold reported by the plan-context complexity signals. An input signal for the planner verdict — carries no routing authority. Default 1.',
-        },
-      },
-      additionalProperties: false,
-    },
-    // Story #5182 — the `/mandrel-plan` Phase 0 memory-hygiene advisory's two
-    // arms. The count arm this replaced was an absolute ceiling, which no
-    // consolidation pass could ever bring a pool back under; `growthDelta`
-    // measures entries written since the last pass instead, which a pass
-    // does reset. Both are advisory thresholds — nothing here gates a plan.
+    // The `/mandrel-plan` Phase 0 memory-hygiene advisory's one surviving
+    // arm (Story #5285; the age and growth arms went with Story #5312).
     memoryPool: {
       type: 'object',
       description:
-        'Thresholds for the memory-hygiene advisory `/mandrel-plan` surfaces at Gate #1. Advisory only: it recommends `/memory-consolidate` and never gates, reroutes, or mutates the memory pool.',
+        'Threshold for the memory-hygiene advisory `/mandrel-plan` surfaces at Gate #1. Advisory only: it recommends `/memory-consolidate` and never gates, reroutes, or mutates the memory pool.',
       properties: {
-        staleAfterDays: {
-          type: 'integer',
-          minimum: 1,
-          description:
-            "Recommend a consolidation pass once the pool's stamp is older than this many days. Default 30.",
-          default: 30,
-        },
-        growthDelta: {
-          type: 'integer',
-          minimum: 1,
-          description:
-            'Recommend a consolidation pass once this many entries have been written since the last one. Measured against the entry count the last pass stamped, so a stamp predating that field leaves growth unmeasured and only the age threshold applies. Default 25.',
-          default: 25,
-        },
         indexByteCeiling: {
           type: 'integer',
           minimum: 1,
           description:
-            "Recommend a consolidation pass once the pool's `MEMORY.md` index exceeds this many bytes. Independent of the age and growth thresholds: the harness truncates the index it loads into each session at its own byte cap, so an oversized index is a loss already happening — every entry listed after the cut is invisible — rather than a hygiene forecast. Default 24576, the harness cap itself.",
+            "Recommend a consolidation pass once the pool's `MEMORY.md` index exceeds this many bytes. The harness truncates the index it loads into each session at its own byte cap, so an oversized index is a loss already happening — every entry listed after the cut is invisible — rather than a hygiene forecast. Default 24576, the harness cap itself.",
           default: 24576,
         },
       },
       additionalProperties: false,
     },
-
-    // Cross-Story conflict-finding severity gates. Off by default so
-    // existing repos keep advisory-only behaviour; flipping either to
-    // `true` upgrades the matching finding class to `'hard'`, which routes
-    // it through the validator's `errors[]` channel and trips the bounded
-    // decompose loop's re-prompt gate.
-    // `planning.modelCapacity` was collapsed to the framework constant
-    // `DEFAULT_MODEL_CAPACITY` in ticket-validator-sizing.js (authored-
-    // tokens-only mass); setting it in a config is rejected as an
-    // additional property.
-    failOnSharedEditors: {
-      type: 'boolean',
-      description:
-        'When true, upgrade shared-editor conflict findings to hard errors (default false — advisory soft findings only).',
-      default: false,
-    },
-    requireExplicitCrossStoryDeps: {
-      type: 'boolean',
-      description:
-        'When true, upgrade implicit cross-Story dependency findings to hard errors (default false — advisory soft findings only).',
-      default: false,
-    },
-    // Cross-cutting registry conflict knobs consumed by
-    // `ticket-validator-conflicts.js` (wired through
-    // `epic-plan-decompose/phases/planning-artifacts.js`).
-    // `crossCuttingRegistries` names the registry paths whose concurrent
-    // edits are flagged; `failOnRegistryConflicts` upgrades that finding to
-    // `'hard'`. `failOnLargeFanOut` / `largeFanOutThreshold` gate the
-    // delete blast-radius finding (call sites of a module a Story marks
-    // `assumption: "deletes"`).
-    crossCuttingRegistries: {
-      ...LIST_OR_EXTENDER_OF_STRINGS,
-      description:
-        'Registry path patterns whose concurrent edits across Stories are flagged as conflicts. Defaults to the framework listener/handler index patterns when omitted.',
-      // Mirrors DEFAULT_REGISTRY_PATTERNS in
-      // `lib/orchestration/ticket-validator-conflicts.js`. Restated rather
-      // than imported: that module pulls in the story-body parser and the
-      // reachability walker, which have no business loading behind a schema
-      // declaration. The rewritten parity suite asserts the two agree.
-      default: [
-        'lib/orchestration/lifecycle/listeners/index.js',
-        '**/listeners/index.js',
-        '**/handlers/index.js',
-      ],
-    },
-    failOnRegistryConflicts: {
-      type: 'boolean',
-      description:
-        'When true, upgrade cross-cutting registry conflict findings to hard errors (default false).',
-      default: false,
-    },
-    failOnLargeFanOut: {
-      type: 'boolean',
-      description:
-        'When true, upgrade fan-out-warning findings (delete blast radius) to hard errors (default false — soft advisory).',
-      default: false,
-    },
-    largeFanOutThreshold: {
-      type: 'integer',
-      minimum: 0,
-      description:
-        'Call-site count above which a Story that deletes a module emits a fan-out-warning. Counts base-branch references to the deleted path basename. Soft by default; does not size or reject Stories. Default 10.',
-      default: 10,
-    },
     // Navigability-reachability config consumed by the plan-persist draft
     // reachability gate (Epic #4131 F7; demoted into persist by #4474 PR6).
     // Opt-in: absent or empty routeGlobs degrades to a silent no-op.
@@ -648,7 +554,7 @@ const PLANNING_SCHEMA = {
  *   - `project`  — identity, paths, commands, docs context.
  *   - `github`   — provider identity, branch protection, merge methods,
  *                  notifications.
- *   - `planning` — risk heuristics, max tickets, planning-context limits.
+ *   - `planning` — the memory-hygiene advisory ceiling, navigability gate.
  *   - `delivery` — execution timeouts, worktree isolation, deliver-runner
  *                  concurrency, docs-freshness, signals, quality.
  *