mandrel 2.64.0 → 2.65.0

package/.agents/workflows/helpers/plan-reference.md

@@ -100,19 +100,20 @@ not re-deriving which assumptions were really the agent's to make.
 
 ## Gate #1 → the one advisory line
 
-Gate #1 stops for exactly two things — the sharpened plan intent and any HITL
-unknown — and everything else the envelope surfaced collapses to **one
-advisory line** beneath it. Nothing on that line stops the run,
-reroutes it, or is invoked by `/mandrel-plan`; each item names something the
-operator may prefer to do instead, and the run proceeds either way. Under
+Gate #1 stops only when there is at least one HITL unknown or
+`duplicates[]` is non-empty; otherwise the run announces the sharpened plan
+intent plus the advisory line and continues to authoring. Everything else the
+envelope surfaced collapses to **one advisory line** beneath the gate.
+Nothing on that line reroutes the run or is invoked by `/mandrel-plan`; each
+item names something the operator may prefer to do instead. Under
 `--yes` the line is recorded and planning continues — an unattended run has
 nobody to take an offer.
 
 The line names, in order, whichever of these the envelope carries:
 
 - **`duplicates[]`** — open Stories the seed resembles (never Epics). Name
-  the top one or two by id and title; a plan that duplicates open work is
-  still the operator's call.
+  the top one or two by id and title. A plan that duplicates open work is
+  still the operator's call, so a non-empty list also stops Gate #1.
 - **Open `intake` rows** (`priorFeedback`) — CI-gap intake filings written by
   [`file-ci-gap.js`](../../scripts/file-ci-gap.js) when a delivery reached an
   Option-2 verdict in [`ci-remediation.md`](../../rules/ci-remediation.md).
@@ -339,7 +340,7 @@ On `dispatch: true`, dispatch **one fresh-context, maker-blind sub-agent**.
 When `delivery.routing.roleScopedAgents` is enabled (the **default**), use
 `subagent_type: plan-critic` — it boots on the role-scoped
 [`plan-critic`](../../agents/plan-critic.md) context (its own system prompt,
-no `CLAUDE.md` @-closure) that carries the maker-blind invariant, the
+no entry-doc @-closure) that carries the maker-blind invariant, the
 `pre-mortem` charter, and the output shape standalone. When the kill-switch
 is off (`roleScopedAgents: false`) or the host cannot spawn at this depth,
 fall back to a generic sub-agent and hand it the same charter. Either way the

package/.agents/workflows/mandrel-deliver.md

@@ -76,7 +76,8 @@ to an attended run.
    it cannot read — a missing gate would co-dispatch against an unlanded
    blocker.
 
-2. **Confirm (N>1).** Present the order; wait unless `--yes`.
+2. **Announce (N>1).** Present the resolved order and proceed — do not wait
+   for confirmation; the operator can interject mid-run to change it.
 
 3. **Run the beat.** One command per beat, repeated until the envelope reports
    the run `done`:

package/.agents/workflows/mandrel-plan.md

@@ -71,13 +71,16 @@ assumed; a **HITL** unknown goes to Gate #1. Under `--yes` do not ask free-form
 operator questions — AFK unknowns are still researched; only HITL unknowns land
 in Key Assumptions, each a decision-made-by-default.
 
-**Gate #1** — STOP for exactly two things: confirm the sharpened plan intent,
-and settle any HITL unknown the operator owns. Everything else the envelope
-surfaced — `duplicates[]`, open `intake` rows, a truthy
-`memoryPoolAdvisory.recommend`, a truthy `complexitySignals.uiSurface` naming
-[`/prototype`](prototype.md) (never invoke it here) — collapses to
-**one advisory line** under the gate; none of it stops the run or reroutes
-it ([ref](helpers/plan-reference.md)). Under `--yes`, auto-proceed.
+**Gate #1** — STOP only when a HITL unknown the operator owns exists or
+`duplicates[]` is non-empty (planning a duplicate of open work stays the
+operator's call): confirm the sharpened plan intent and settle it. Otherwise
+announce the sharpened intent and the advisory line, and continue to
+authoring. Everything else the envelope surfaced — `duplicates[]`, open
+`intake` rows, a truthy `memoryPoolAdvisory.recommend`, a truthy
+`complexitySignals.uiSurface` naming [`/prototype`](prototype.md) (never
+invoke it here) — collapses to **one advisory line** under the gate, which
+never reroutes the run ([ref](helpers/plan-reference.md)).
+Under `--yes`, auto-proceed.
 
 ### 2. Author
 

package/.agents/workflows/mandrel-update.md

@@ -200,13 +200,15 @@ non-optional.
 
 ## Step 4 — Review the surfaced changelog and update consumer-side guidance
 
-Framework upgrades change behaviour the consumer's own `AGENTS.md` /
-`CLAUDE.md` and runbooks often encode. Step 1 already printed the changelog
+Framework upgrades change behaviour the consumer's own `AGENTS.md` and
+runbooks often encode. Step 1 already printed the changelog
 for the applied range — that output is your source of truth (re-read the
 transcript or the GitHub Releases page if it scrolled past). For each entry
 between the installed and target versions:
 
-1. **Consumer `AGENTS.md` / `CLAUDE.md`.** Update instructions so a fresh
+1. **Consumer `AGENTS.md`.** It is the entry doc — `mandrel update` folds a
+   root `CLAUDE.md` into it and deletes `CLAUDE.md`, so reconcile the folded
+   content here. Update instructions so a fresh
    agent reading them in isolation produces output that passes the
    framework's new validators; remove or rewrite instructions that
    contradict a tightened rule.

package/docs/CHANGELOG.md

@@ -15,6 +15,37 @@ All notable changes to this project will be documented in this file.
 -->
 <!-- markdownlint-disable-file MD004 MD012 MD037 -->
 
+## [2.65.0](https://github.com/dsj1984/mandrel/compare/mandrel-v2.64.0...mandrel-v2.65.0) (2026-09-24)
+
+
+### ⚠ BREAKING CHANGES
+
+* consumers must run Claude Code >= 2.1.277, which loads a root AGENTS.md; `mandrel update` folds the root CLAUDE.md into AGENTS.md and deletes CLAUDE.md.
+
+### Added
+
+* add a low-effort model bug review to close and pin role-agent effort ([#5426](https://github.com/dsj1984/mandrel/issues/5426)) ([#5431](https://github.com/dsj1984/mandrel/issues/5431)) ([ec39643](https://github.com/dsj1984/mandrel/commit/ec3964390210e140ebaa324bbfe27b67fd470fa4))
+* **audit-quality:** add a property-based coverage dimension (refs [#5425](https://github.com/dsj1984/mandrel/issues/5425)) ([#5428](https://github.com/dsj1984/mandrel/issues/5428)) ([f78fd62](https://github.com/dsj1984/mandrel/commit/f78fd62edda9060580b1cbacaec1cc82875040d1))
+* cut consumers over to AGENTS.md: bootstrap wiring, CLAUDE.md fold migration, uninstall revert, Claude Code version doctor check ([#5410](https://github.com/dsj1984/mandrel/issues/5410)) ([#5411](https://github.com/dsj1984/mandrel/issues/5411)) ([df69d59](https://github.com/dsj1984/mandrel/commit/df69d59e7ced7342f321b8435ab50b317655f7f3))
+* make AGENTS.md mandrel's always-loaded entry doc: host-faithful closure resolver, delete CLAUDE.md, rewrite AGENTS.md ([#5409](https://github.com/dsj1984/mandrel/issues/5409)) ([#5413](https://github.com/dsj1984/mandrel/issues/5413)) ([929e5bb](https://github.com/dsj1984/mandrel/commit/929e5bb6834e1a25152163ac34a87d327034ce05))
+* trim legacy story-author scaffolding and drop two needless workflow stops ([#5427](https://github.com/dsj1984/mandrel/issues/5427)) ([#5429](https://github.com/dsj1984/mandrel/issues/5429)) ([7b39d36](https://github.com/dsj1984/mandrel/commit/7b39d3637b4911ad7122d6cbaef3c19c88704101))
+
+
+### Fixed
+
+* merge wait: fail fast on a red required check without waiting for unrelated jobs ([#5415](https://github.com/dsj1984/mandrel/issues/5415)) ([#5420](https://github.com/dsj1984/mandrel/issues/5420)) ([381d8ff](https://github.com/dsj1984/mandrel/commit/381d8ff4145ec3210d984936904368d51cde426a))
+
+
+### Performance
+
+* close: per-phase timing, faster merge observation, concurrent post-land GitHub steps ([#5417](https://github.com/dsj1984/mandrel/issues/5417)) ([#5423](https://github.com/dsj1984/mandrel/issues/5423)) ([2d3c537](https://github.com/dsj1984/mandrel/commit/2d3c5373402ad0e212951b70ca2880204da3a8f3))
+* epic rollup: stop reading every Epic's sub-issues when a Story has no native parent ([#5414](https://github.com/dsj1984/mandrel/issues/5414)) ([#5419](https://github.com/dsj1984/mandrel/issues/5419)) ([025c650](https://github.com/dsj1984/mandrel/commit/025c650409a757b47be9847a4584e5e45fdef8e8))
+
+
+### Changed
+
+* retire the Story-scope local-lens pass from close ([#5416](https://github.com/dsj1984/mandrel/issues/5416)) ([#5422](https://github.com/dsj1984/mandrel/issues/5422)) ([ecd86da](https://github.com/dsj1984/mandrel/commit/ecd86daa1a9d1ddff7f58e7f832e491a9c58cb68))
+
 ## [2.64.0](https://github.com/dsj1984/mandrel/compare/mandrel-v2.63.0...mandrel-v2.64.0) (2026-09-19)
 
 

package/lib/cli/claude-code-version.js

@@ -0,0 +1,73 @@
+// lib/cli/claude-code-version.js
+/**
+ * `mandrel doctor` check `claude-code-version`: an AGENTS.md-only project
+ * needs a Claude Code host that loads AGENTS.md at all. Below the floor the
+ * framework never hydrates, so the check fails. A missing `claude` binary,
+ * unparseable output, or a project still carrying CLAUDE.md skips with
+ * `ok: true` so headless/CI hosts are never blocked. The `claude --version`
+ * spawn is injected by the registry (fixed argv, never user input); with no
+ * runner the check skips.
+ *
+ * @module cli/claude-code-version
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+
+import { compareVersions } from './version-helpers.js';
+
+/** Oldest Claude Code release that loads a root AGENTS.md. */
+export const CLAUDE_CODE_AGENTS_MD_FLOOR = '2.1.277';
+
+/**
+ * @param {string} text
+ * @returns {string|null} the leading `x.y.z`, or null
+ */
+export function parseClaudeVersion(text) {
+  const match = /^\s*v?(\d+\.\d+\.\d+)/.exec(text ?? '');
+  return match ? match[1] : null;
+}
+
+/**
+ * @param {{
+ *   projectRoot?: string,
+ *   cwd?: () => string,
+ *   existsSync?: (p: string) => boolean,
+ *   runClaude?: () => { status: number|null, stdout: string, error?: NodeJS.ErrnoException },
+ * }} [opts]
+ * @returns {{ ok: boolean, detail: string, remedy?: string }}
+ */
+export function runClaudeCodeVersion({
+  projectRoot,
+  cwd = () => process.cwd(),
+  existsSync = fs.existsSync,
+  runClaude = () => ({ status: null, stdout: '', error: new Error('none') }),
+} = {}) {
+  const root = projectRoot ?? cwd();
+  if (existsSync(path.join(root, 'CLAUDE.md'))) {
+    return { ok: true, detail: 'skipped: CLAUDE.md present' };
+  }
+  if (!existsSync(path.join(root, 'AGENTS.md'))) {
+    return { ok: true, detail: 'skipped: no AGENTS.md' };
+  }
+  const r = runClaude();
+  if (r.error || r.status !== 0) {
+    return { ok: true, detail: 'skipped: claude not found on PATH' };
+  }
+  const version = parseClaudeVersion(r.stdout);
+  if (!version) {
+    return {
+      ok: true,
+      detail: 'skipped: unparseable `claude --version` output',
+    };
+  }
+  const detail = `Claude Code ${version} (required >=${CLAUDE_CODE_AGENTS_MD_FLOOR} to load AGENTS.md)`;
+  if (compareVersions(version, CLAUDE_CODE_AGENTS_MD_FLOOR) >= 0) {
+    return { ok: true, detail };
+  }
+  return {
+    ok: false,
+    detail,
+    remedy: `Upgrade Claude Code to >=${CLAUDE_CODE_AGENTS_MD_FLOOR} (e.g. \`claude update\`) — older hosts do not load AGENTS.md, so the framework never hydrates.`,
+  };
+}

package/lib/cli/doctor.js

@@ -54,7 +54,7 @@ function formatSummary(passed, total) {
 }
 
 /**
- * Informational line for the `CLAUDE.md` always-loaded closure (file count,
+ * Informational line for the host entry doc's always-loaded closure (file count,
  * KB). Never counted toward the verdict; a resolve failure degrades to a
  * neutral line.
  *
@@ -73,7 +73,7 @@ export function formatClosureReport({
     return `ℹ  ${label}  always-loaded closure unavailable\n`;
   }
   if (files.length === 0) {
-    return `ℹ  ${label}  no CLAUDE.md closure found\n`;
+    return `ℹ  ${label}  no entry-doc closure found (CLAUDE.md or AGENTS.md)\n`;
   }
   const kb = (tierTotalBytes(files) / 1024).toFixed(1);
   return `ℹ  ${label}  ${files.length} file(s), ${kb} KB always-loaded\n`;

package/lib/cli/registry.js

@@ -28,6 +28,7 @@ import { isCommandExcluded } from '../../.agents/scripts/lib/command-header.js';
 import { getDeliveryRouting } from '../../.agents/scripts/lib/config/delivery-routing.js';
 import { isResolvable } from '../../.agents/scripts/lib/runtime-deps/dep-resolution.js';
 import { describeParserMajorError } from '../../.agents/scripts/lib/runtime-deps/parser-major.js';
+import { runClaudeCodeVersion } from './claude-code-version.js';
 import {
   defaultResolvePackageRoot,
   listFiles as listPayloadFiles,
@@ -958,6 +959,14 @@ export const registry = [
     name: 'agents-drift',
     run: (opts) => runAgentsDrift(opts),
   },
+  {
+    name: 'claude-code-version',
+    run: (opts) =>
+      runClaudeCodeVersion({
+        runClaude: () => spawn('claude', ['--version'], { timeout: 10_000 }),
+        ...opts,
+      }),
+  },
   {
     name: 'merge-driver',
     run: (opts) => runMergeDriver(opts),

package/lib/cli/uninstall.js

@@ -21,8 +21,8 @@ import {
   BOOTSTRAP_COMMAND,
   GITIGNORE_BLOCKS,
   SYNC_COMMAND,
+  SYSTEM_PROMPT_AGENTS_MD,
   SYSTEM_PROMPT_BLOCK,
-  SYSTEM_PROMPT_CLAUDE_MD,
   SYSTEM_PROMPT_IMPORT,
 } from '../../.agents/scripts/lib/bootstrap/project-bootstrap.js';
 import {
@@ -60,17 +60,17 @@ const FRAMEWORK_NPM_SCRIPTS = Object.freeze({
  */
 
 /**
- * Strip the system-prompt import block from `CLAUDE.md`. The file is deleted
- * only when byte-identical to the install template — a heading-only heuristic
- * would delete an operator's all-headings file.
+ * Strip the system-prompt import block from a root entry doc. The file is
+ * deleted only when byte-identical to the install template — a heading-only
+ * heuristic would delete an operator's all-headings file.
  *
+ * @param {string} rel - `AGENTS.md`, or a legacy un-migrated `CLAUDE.md`.
  * @param {string} projectRoot
  * @param {typeof fs} fsImpl
  * @returns {ReversalOutcome}
  */
-function revertClaudeMd(projectRoot, fsImpl) {
-  const target = path.join(projectRoot, 'CLAUDE.md');
-  const rel = 'CLAUDE.md';
+function revertEntryDoc(rel, projectRoot, fsImpl) {
+  const target = path.join(projectRoot, rel);
   if (!fsImpl.existsSync(target)) {
     return { kind: 'skipped', target: rel, detail: 'file absent' };
   }
@@ -78,12 +78,12 @@ function revertClaudeMd(projectRoot, fsImpl) {
   if (!original.includes(SYSTEM_PROMPT_IMPORT)) {
     return { kind: 'skipped', target: rel, detail: 'import already absent' };
   }
-  if (original.trim() === SYSTEM_PROMPT_CLAUDE_MD.trim()) {
+  if (original.trim() === SYSTEM_PROMPT_AGENTS_MD.trim()) {
     fsImpl.rmSync(target, { force: true });
     return {
       kind: 'reverted',
       target: rel,
-      detail: 'removed install-created CLAUDE.md',
+      detail: `removed install-created ${rel}`,
     };
   }
   // Full block first, then the bare import line for a hand-edited block.
@@ -109,6 +109,33 @@ function revertClaudeMd(projectRoot, fsImpl) {
   };
 }
 
+/**
+ * @param {string} projectRoot
+ * @param {typeof fs} fsImpl
+ * @returns {ReversalOutcome}
+ */
+function revertAgentsMd(projectRoot, fsImpl) {
+  return revertEntryDoc('AGENTS.md', projectRoot, fsImpl);
+}
+
+/**
+ * Pre-2.65 ledgers name CLAUDE.md. An un-migrated CLAUDE.md reverts as
+ * before; once the update migration folded it away, the wiring lives in
+ * AGENTS.md, so that is reverted instead. CLAUDE.md is never recreated.
+ *
+ * @param {string} projectRoot
+ * @param {typeof fs} fsImpl
+ * @returns {ReversalOutcome}
+ */
+function revertClaudeMd(projectRoot, fsImpl) {
+  const legacy = fsImpl.existsSync(path.join(projectRoot, 'CLAUDE.md'));
+  return revertEntryDoc(
+    legacy ? 'CLAUDE.md' : 'AGENTS.md',
+    projectRoot,
+    fsImpl,
+  );
+}
+
 /**
  * Splice the sync hook and any legacy plugin-enablement keys out of
  * `.claude/settings.json`, keeping everything else; delete the file if empty.
@@ -405,6 +432,7 @@ function revertPreCommitHook(projectRoot, fsImpl) {
  * @type {Readonly<Record<string, (root: string, fsImpl: typeof fs, executedAction?: string) => ReversalOutcome>>}
  */
 const REVERSAL_BY_TARGET = Object.freeze({
+  'AGENTS.md': revertAgentsMd,
   'CLAUDE.md': revertClaudeMd,
   '.claude/settings.json': revertClaudeSettings,
   '.claude/plugins/mandrel': revertClaudeCommands,

package/lib/migrations/index.js

@@ -16,6 +16,7 @@ import { retireDeliveryLimitKnobs } from './steps/2.57.0-retire-delivery-limit-k
 import { retirePlanningLimitKnobs } from './steps/2.57.0-retire-planning-limit-knobs.js';
 import { retireAuditResultsAutoFile } from './steps/2.60.0-retire-audit-results-autofile.js';
 import { baselineMergeQueueShape } from './steps/2.63.0-baseline-merge-queue-shape.js';
+import { foldClaudeMdIntoAgentsMdStep } from './steps/2.65.0-fold-claude-md-into-agents-md.js';
 import { stripRemovedAgentrcKeys } from './steps/strip-removed-agentrc-keys.js';
 
 /**
@@ -40,6 +41,7 @@ export const migrations = [
   retireAuditResultsAutoFile,
   stripRemovedAgentrcKeys,
   baselineMergeQueueShape,
+  foldClaudeMdIntoAgentsMdStep,
 ];
 
 export { compareVersions };

package/lib/migrations/steps/2.65.0-fold-claude-md-into-agents-md.js

@@ -0,0 +1,38 @@
+// lib/migrations/steps/2.65.0-fold-claude-md-into-agents-md.js
+/**
+ * Fold a consumer's root CLAUDE.md into AGENTS.md and delete CLAUDE.md.
+ * The host reads CLAUDE.md exclusively whenever it exists, so a surviving one
+ * would shadow the AGENTS.md wiring. Shares the bootstrap fold contract.
+ */
+
+import nodeFs from 'node:fs';
+import path from 'node:path';
+
+import {
+  foldClaudeMdIntoAgentsMd,
+  LEGACY_ENTRY_DOC,
+} from '../../../.agents/scripts/lib/bootstrap/agents-md-fold.js';
+
+export const foldClaudeMdIntoAgentsMdStep = {
+  version: '2.65.0',
+  description:
+    'fold the root CLAUDE.md into AGENTS.md and delete it — AGENTS.md is ' +
+    'now the entry doc (Story #5410)',
+  /**
+   * @param {{ projectRoot?: string, fs?: typeof nodeFs }} [ctx]
+   * @param {typeof nodeFs} [fsImpl]
+   * @returns {boolean}
+   */
+  detect(ctx, fsImpl = ctx?.fs ?? nodeFs) {
+    const root = ctx?.projectRoot ?? process.cwd();
+    return fsImpl.existsSync(path.join(root, LEGACY_ENTRY_DOC));
+  },
+  /**
+   * @param {{ projectRoot?: string, fs?: typeof nodeFs }} [ctx]
+   * @param {typeof nodeFs} [fsImpl]
+   * @returns {void}
+   */
+  apply(ctx, fsImpl = ctx?.fs ?? nodeFs) {
+    foldClaudeMdIntoAgentsMd(ctx?.projectRoot ?? process.cwd(), fsImpl);
+  },
+};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mandrel",
-  "version": "2.64.0",
+  "version": "2.65.0",
   "description": "Claude Code-first opinionated workflow framework: instructions, skills, rules, and SDLC workflows that govern AI coding assistants.",
   "files": [
     ".agents/",
@@ -102,6 +102,7 @@
     "@cucumber/gherkin": "^42.0.1",
     "c8": "^11.0.0",
     "chokidar": "^5.0.0",
+    "fast-check": "^4.10.2",
     "husky": "^9.1.7",
     "jscpd": "^4.2.5",
     "knip": "^6.17.1",

package/.agents/scripts/lib/audit-suite/lens-diff-floor.js

@@ -1,99 +0,0 @@
-/**
- * Close-scope lens diff-floor: a diff under the changed-line floor that
- * touches no sensitive path skips lens materialization. Fail-open — every
- * degraded input (unknown count, unreadable manifest, floor `0`) means "do
- * not skip". Sensitive classes come from the same selector as review depth,
- * so the two never disagree. Total; no I/O beyond the injected git spawn.
- */
-
-import { gitSpawn } from '../git-utils.js';
-import { readNumstatRows } from '../orchestration/diff-magnitude.js';
-import { selectSensitivePathClasses } from './selector.js';
-
-/** Measured: zero-yield closes clustered well under this size. */
-export const DEFAULT_LENS_DIFF_FLOOR = 40;
-
-/**
- * Whole-diff additions + deletions (no companion exemption: the question is
- * "is this diff small"). Shares the numstat parse with the light path's
- * backstop. `null` on any git failure; binary rows count 0.
- *
- * @param {{
- *   baseRef: string,
- *   headRef: string,
- *   cwd?: string,
- *   gitSpawnFn?: typeof gitSpawn,
- * }} args
- * @returns {number|null}
- */
-export function countChangedLines({
-  baseRef,
-  headRef,
-  cwd = process.cwd(),
-  gitSpawnFn = gitSpawn,
-} = {}) {
-  const rows = readNumstatRows({ baseRef, headRef, cwd, gitSpawnFn });
-  if (rows === null) return null;
-  return rows.reduce((total, row) => total + row.additions + row.deletions, 0);
-}
-
-/**
- * Skip only when the floor is enabled, the count is known and below it, and
- * no sensitive-path class matches; every other state names its reason.
- *
- * @param {{
- *   changedFiles?: string[]|null,
- *   changedLineCount?: number|null,
- *   floor?: number,
- *   injectedRules?: object,
- *   selectSensitivePathClassesFn?: typeof selectSensitivePathClasses,
- * }} [input]
- * @returns {{
- *   skip: boolean,
- *   reason: 'floor-disabled'|'line-count-unknown'|'at-or-above-floor'|'sensitive-classes-unknown'|'sensitive-path-hit'|'below-floor',
- *   floor: number,
- *   changedLineCount: number|null,
- *   sensitiveClasses: string[],
- * }}
- */
-export function evaluateLensDiffFloor(input = {}) {
-  const floorRaw = input.floor;
-  const floor =
-    typeof floorRaw === 'number' && Number.isInteger(floorRaw) && floorRaw >= 0
-      ? floorRaw
-      : DEFAULT_LENS_DIFF_FLOOR;
-  const count =
-    typeof input.changedLineCount === 'number' &&
-    Number.isFinite(input.changedLineCount) &&
-    input.changedLineCount >= 0
-      ? Math.floor(input.changedLineCount)
-      : null;
-  const verdict = (skip, reason, sensitiveClasses = []) => ({
-    skip,
-    reason,
-    floor,
-    changedLineCount: count,
-    sensitiveClasses,
-  });
-
-  if (floor <= 0) return verdict(false, 'floor-disabled');
-  if (count === null) return verdict(false, 'line-count-unknown');
-  if (count >= floor) return verdict(false, 'at-or-above-floor');
-
-  const select =
-    input.selectSensitivePathClassesFn ?? selectSensitivePathClasses;
-  let classes;
-  try {
-    classes = select({
-      changedFiles: Array.isArray(input.changedFiles) ? input.changedFiles : [],
-      injectedRules: input.injectedRules,
-    });
-  } catch {
-    return verdict(false, 'sensitive-classes-unknown');
-  }
-  const matched = Array.isArray(classes) ? classes : [];
-  if (matched.length > 0) {
-    return verdict(false, 'sensitive-path-hit', matched);
-  }
-  return verdict(true, 'below-floor');
-}