mindforge-cc 8.2.0 → 10.0.0

package/docs/registry/HOOKS.md

@@ -1,38 +0,0 @@
-# MindForge — Hook Registry (v6.2.0-alpha)
-
-This registry catalogs the automation and security lifecycle hooks available in the MindForge environment.
-
-## 🛡️ Framework Governance Hooks
-
-| Hook | Trigger Event | Primary Security Protocol |
-| :--- | :--- | :--- |
-| **mindforge-session-init_extended** | `Session Start` | "Enterprise-grade context restoration, workspace mounting, and security baseline verification." |
-| **mindforge-workflow-guard** | `Command Invocation` | "Enforcement of phase-based logic, mandatory plan approval, and verification gating." |
-| **mindforge-prompt-guard** | `Token Input` | "Persona integrity enforcement, safety filtering, and prompt injection prevention." |
-
-## 📊 Operational Visibility & Health
-
-| Hook | Trigger Event | Primary Security Protocol |
-| :--- | :--- | :--- |
-| **mindforge-statusline** | `Terminal Init / Loop` | "Real-time productivity indicators, token counts, and phase status rendering." |
-| **mindforge-check-update** | `Startup / Interval` | "Automatic framework update detection, changelog retrieval, and version sync." |
-| **mindforge-context-monitor** | `Context Shift` | "Dynamic token optimization, context window management, and memory prioritizing." |
-
-## 🔗 Version Control & Git Hooks
-
-| Hook | Trigger Event | Primary Security Protocol |
-| :--- | :--- | :--- |
-| **pre-commit-security** | `git commit` | "Run a `--secrets` scan on staged files before commit." |
-| **post-merge-status** | `git merge` | "Re-verify Sovereign framework integrity after code updates." |
-| **pre-push-validation** | `git push` | "Validate that all active plans have an 'Approved' status." |
-
-## 🧠 Reasoning & Memory Hooks
-
-| Hook | Trigger Event | Primary Security Protocol |
-| :--- | :--- | :--- |
-| **nexus-tracer-init** | `Async Start` | "Inject the ZTAI signing protocol into every reasoning cycle." |
-| **memory-load-check** | `Session Start` | "Verify the knowledge graph's semantic integrity." |
-| **intent-harvest-trigger** | `Idle Threshold` | "Activate the Sovereign Homing engine for idle task-claiming." |
-
----
-*For more details, see the [MIND-FORGE-REFERENCE-V6.md](../MIND-FORGE-REFERENCE-V6.md).*

package/docs/registry/PERSONAS.md

@@ -1,64 +0,0 @@
-# MindForge — Persona Registry (v6.2.0-alpha)
-
-This registry catalogs the specialized agent essences available for direct interaction and autonomous reasoning.
-
-## 🧠 Strategic Reason Enclaves
-
-| Persona | Identifier | Cognitive Focus | Primary Directive |
-| :--- | :--- | :--- | :--- |
-| **mf-planner** | Strategic Planner | Minimalism & Scalability | "Design systems with 10/10 fidelity and 1/1 complexity." |
-| **architect** | Senior Architect | Core System Design | "Build robust, secure, and maintainable foundations." |
-| **roadmapper** | Milestone Specialist | Timeline & Dependencies | "Convert requirements into executable milestones." |
-| **analyst** | Requirements Lead | Scoping & Specs | "Translate ambiguous intent into precise, testable specifications." |
-| **decision-architect** | Governance Lead | Implementation Verdicts | "Synthesize research and audits into actionable roadmap adjustments." |
-| **advisor-researcher** | Trade-off Consultant | Comparative Rationale | "Research single decision points and provide structured comparisons." |
-
-## 🚀 Implementation Pilots
-
-| Persona | Identifier | Cognitive Focus | Primary Directive |
-| :--- | :--- | :--- | :--- |
-| **mf-executor** | Lead Developer | "Enterprise-Grade" Logic & UI | "Ship premium-grade code with 100% test coverage." |
-| **developer** | Code Smith | Clean Code & Patterns | "Implement features according to the approved plan." |
-| **executor** | Pilot Developer | Atomic Multi-Plan | "Executes implementation plans with high fidelity and atomic commits." |
-| **tech-writer** | Documentation Lead | Clarity & Accuracy | "Transform engineering complexity into readable documentation." |
-| **mf-tool** | System Operator | Terminal & File Ops | "Execute complex system transformations safely." |
-
-## 🛡️ Quality & Security Auditors
-
-| Persona | Identifier | Cognitive Focus | Primary Directive |
-| :--- | :--- | :--- | :--- |
-| **mf-reviewer** | Quality Lead | Correctness & Performance | "Find the bugs and antipatterns before they ship." |
-| **security-reviewer** | Threat Hunter | PQAS & OWASP | "Harden the framework against all agentic threats." |
-| **nyquist-auditor** | Requirement Auditor | Gaps & Edge Cases | "Ensure every requirement has a verification plan." |
-| **verifier** | UAT Specialist | Evidence & Validation | "Prove the feature works with visual evidence." |
-| **qa-engineer** | QA Specialist | Adversarial Testing | "Think adversarially to find failure modes and logic gaps." |
-| **ui-auditor** | Visual Specialist | Aesthetic Excellence | "Ensure 10/10 aesthetics and fluid animations." |
-| **ui-checker** | Design Validator | UI-SPEC Compliance | "Verify visual implementation against recorded design contracts." |
-| **integration-checker** | System Integrator | Cross-Component Flow | "Ensure disparate services work as a unified system." |
-| **coverage-specialist** | Testing Analyst | Coverage Gap Index | "Identify untested code paths and logic branches." |
-
-## 🔍 Research & Intelligence Agents
-
-| Persona | Identifier | Cognitive Focus | Primary Directive |
-| :--- | :--- | :--- | :--- |
-| **mf-researcher** | Knowledge Lead | Context & Discovery | "Surface the unknown-unknowns before implementation." |
-| **project-researcher** | Principal Researcher | Ecosystem & Feasibility | "Investigate technical constraints before project or milestone creation." |
-| **research-agent** | Deep-Dive Specialist | Recursive Investigation | "Gather data points from the web and codebase recursively." |
-| **research-synthesizer** | Wisdom Aggregator | Summary Generation | "Synthesize research outputs from multiple agents into a SUMMARY.md." |
-| **phase-researcher** | Tactical Researcher | Implementation Logic | "Analyze approaches and best practices for the current phase." |
-| **ui-researcher** | Design Consultant | Visual Trend Analysis | "Research modern UI patterns and aesthetic benchmarks." |
-
-## 🧠 Specialized Diagnostics & Memory
-
-| Persona | Identifier | Cognitive Focus | Primary Directive |
-| :--- | :--- | :--- | :--- |
-| **mf-memory** | Semantic Clerk | Persistent Context | "Manage long-term memory and knowledge graph synchronization." |
-| **debug-specialist** | RCA Expert | Root Cause Analysis | "Debug systematically with persistent state tracking." |
-| **debugger** | Logic Specialist | Hypothesis Testing | "Solve failures through scientific hypothesis testing." |
-| **user-profiler** | Behavioral Analyst | Dev Experience | "Adapt the framework to the unique needs of the developer." |
-| **assumptions-analyzer** | Logic Auditor | Pre-Planning Verification | "Surface approach assumptions before committing to a plan." |
-| **codebase-mapper** | Ecosystem Explorer | Semantic Indexing | "Generate structured documentation for any repository." |
-| **release-manager** | Pipeline Lead | SemVer & Ship Control | "Ensure every release is traceable and reversible." |
-
----
-*For more details, see the [MIND-FORGE-REFERENCE-V6.md](../MIND-FORGE-REFERENCE-V6.md).*

package/docs/registry/README.md

@@ -1,27 +0,0 @@
-# MindForge — Documentation Registry Hub (v6.2.0-alpha)
-
-Welcome to the central high-fidelity registry for the MindForge framework. This hub provides 100% transparency into the specialized assets, cognitive patterns, and automated guards that power the environment.
-
-## 🗂️ Framework Registries
-
-| Registry | Content Scope | Primary Purpose |
-| :--- | :--- | :--- |
-| **[COMMANDS.md](./COMMANDS.md)** | 64+ Core Operations | Direct terminal interaction reference. |
-| **[SKILLS.md](./SKILLS.md)** | 70+ Atomic Skills | Distributed capability and tool mappings. |
-| **[PERSONAS.md](./PERSONAS.md)** | 35+ Cognitive Egos | Specialized agent reasoning configurations. |
-| **[WORKFLOWS.md](./WORKFLOWS.md)** | 100+ Automations | High-fidelity lifecycle and task flows. |
-| **[HOOKS.md](./HOOKS.md)** | 10+ Framework Guards | Security, visibility, and automation triggers. |
-| **[AGENTS.md](./AGENTS.md)** | 20+ Digital Identities | Invocable personas and internal swarms. |
-
-## 🚀 "Enterprise-Grade" Ready
-
-These registries are synchronized automatically during every `mindforge init` or `update` cycle. They ensure that every framework capability is discoverable, verifiable, and enforceable by both human developers and AI agents.
-
-## 🔍 How to Use This Hub
-
-1.  **Search**: Use `Ctrl+F` across any registry to find specific functional keywords.
-2.  **Invoke**: Use the "Trigger Commands" in [WORKFLOWS.md](./WORKFLOWS.md) for automated task orchestration.
-3.  **Audit**: Cross-reference [HOOKS.md](./HOOKS.md) to understand the security guards active in your session.
-
----
-*MindForge v6.2.0-alpha — Absolute Sovereignty. Absolute Performance. Absolute Transparency.*

package/docs/registry/SKILLS.md

@@ -1,142 +0,0 @@
-# MindForge — Skill Registry (v6.2.0-alpha)
-
-This registry catalogs the high-fidelity SkillStacks available to the MindForge Intelligence Mesh.
-
-## 🧠 Technical Architecture & Engineering
-
-| Skill | Primary Domain | Primary Capability |
-| :--- | :--- | :--- |
-| **agency-senior-developer** | Implementation | "Enterprise-Grade" styling and robust logic. |
-| **agency-software-architect** | System Design | Architectural pattern selection and complexity control. |
-| **agency-backend-architect** | Core Logic | Database schema design and high-performance API logic. |
-| **agency-frontend-developer** | Web Interface | Fluid components and interactive design systems. |
-| **agency-mobile-app-builder** | Native Apps | Multi-platform mobile development (iOS/Android). |
-
-## 🛡️ Security & Compliance
-
-| Skill | Primary Domain | Primary Capability |
-| :--- | :--- | :--- |
-| **agency-security-engineer** | Hardening | Threat detection and post-quantum security modeling. |
-| **agency-blockchain-security** | Smart Contracts | Vulnerability detection and formal verification. |
-| **agency-compliance-auditor** | Regulation | SOC 2 / ISO 27001 readiness and evidence gathering. |
-| **agency-legal-compliance** | Legal | Jurisdiction-aware data handling and licensing review. |
-
-## 🤖 AI & Data Intelligence
-
-| Skill | Primary Domain | Primary Capability |
-| :--- | :--- | :--- |
-| **agency-ai-engineer** | ML Integration | Agentic steering and model optimization. |
-| **agency-data-engineer** | Pipelines | Scalable ETL/ELT and lakehouse architecture. |
-| **agency-database-optimizer** | Performance | Query optimization and indexing strategies. |
-| **agency-analytics-reporter** | Insights | Data-driven storytelling and KPI dashboards. |
-
-## 🎨 Design & Experience
-
-| Skill | Primary Domain | Primary Capability |
-| :--- | :--- | :--- |
-| **agency-ui-designer** | Visual Identity | Pixel-perfect components and consistent branding. |
-| **agency-ux-architect** | Human Interface | Fluid animations and intuitive user flows. |
-| **agency-whimsy-injector** | Personality | Interactive delight and playful brand experiences. |
-
-## 🛠️ MindForge Atomic Skills (Exhaustive)
-
-These atomic skills are the underlying mechanics of the framework, providing specialized capabilities across the entire project lifecycle.
-
-### 🔄 Core & Lifecycle Management
-
-| Skill | Description |
-| :--- | :--- |
-| `mindforge-next` | Automatically advance to the next logical step in the workflow. |
-| `mindforge-progress` | Check project progress, show context, and route to next action. |
-| `mindforge-status` | Display a rich dashboard of active project state and readiness. |
-| `mindforge-help` | Show available commands and comprehensive usage guides. |
-| `mindforge-update` | Update MindForge to the latest version with changelog analysis. |
-| `mindforge-settings` | Configure framework toggles, security gates, and model profiles. |
-| `mindforge-session-report` | Generate post-session summaries and resource consumption analysis. |
-| `mindforge-stats` | Display metrics, git velocity, and project timelines. |
-
-### ♟️ Strategic Planning & Research
-
-| Skill | Description |
-| :--- | :--- |
-| `mindforge-brainstorming` | Must use before creative work to explore requirements and design. |
-| `mindforge-research-phase` | Deep research for technical implementation strategies. |
-| `mindforge-map-codebase` | Parallel codebase mapping and semantic index creation. |
-| `mindforge-milestone-summary` | Comprehensive project onboarding and overview generation. |
-| `mindforge-discuss-phase` | Context gathering via adaptive stakeholder questioning. |
-| `mindforge-plan-phase` | Create detailed documentation (PLAN.md) with verification loops. |
-| `mindforge-plan-phase_extended` | Multi-step planning from specs and complex requirements. |
-| `mindforge-plan-milestone-gaps` | Close roadmap gaps identified during milestone audits. |
-| `mindforge-list-phase-assumptions` | Surface approach assumptions before committing to a plan. |
-
-### 🚀 Implementation & Execution
-
-| Skill | Description |
-| :--- | :--- |
-| `mindforge-execute-phase` | High-velocity implementation with wave-based parallelization. |
-| `mindforge-execute-phase_extended` | Multi-session implementation with state-preservation checkpoints. |
-| `mindforge-swarm-execution` | Execute independent tasks simultaneously within a session. |
-| `mindforge-tdd` | Strict Red-Green-Refactor test-driven development. |
-| `mindforge-tdd_extended` | Advanced TDD for complex features and obscure bugfixes. |
-| `mindforge-fast` | Trivial task execution with zero framework overhead. |
-| `mindforge-do` | Smart natural language dispatcher for automated routing. |
-| `mindforge-manager` | Interactive command center for multi-phase orchestration. |
-| `mindforge-ui-phase` | Generate a high-fidelity UI Design Contract (UI-SPEC.md). |
-
-### ✅ Quality, Verification & Ship
-
-| Skill | Description |
-| :--- | :--- |
-| `mindforge-verify-work` | Validate built features through conversational UAT. |
-| `mindforge-verify-work_extended` | Evidence-first verification (proof before assertions). |
-| `mindforge-ui-review` | Retroactive 6-pillar visual and accessibility audit. |
-| `mindforge-debug` | Systematic debugging with persistent session state. |
-| `mindforge-debug_extended` | Deep root-cause analysis (RCA) for complex failures. |
-| `mindforge-validate-phase` | Fill Nyquist validation gaps for completed work. |
-| `mindforge-audit-milestone` | Verify completion against original strategic intent. |
-| `mindforge-audit-uat` | Cross-phase audit of all outstanding verification items. |
-| `mindforge-review-request` | Verify requirements compliance before branch merge. |
-| `mindforge-review-inbound` | Technical audit of received code review feedback. |
-| `mindforge-pr-branch` | Create clean PR branches (filtering internal framework noise). |
-| `mindforge-ship` | Full release pipeline (PR, review, and merge). |
-| `mindforge-ship_extended` | Integration decision engine for completed implementation. |
-
-### 🛠️ Environment & Workspace
-
-| Skill | Description |
-| :--- | :--- |
-| `mindforge-new-project` | Deep-research project initialization and setup. |
-| `mindforge-new-milestone` | Initialize new milestone cycles and update PROJECT.md. |
-| `mindforge-new-workspace` | Create isolated repositories with independent planning state. |
-| `mindforge-workspace-isolated` | Git worktree creation for clean feature isolation. |
-| `mindforge-list-workspaces` | Display all active MindForge workspaces and their health. |
-| `mindforge-remove-workspace` | Safe cleanup of workspaces and associated worktrees. |
-| `mindforge-resume-work` | Full context restoration from previous session state. |
-| `mindforge-pause-work` | Mid-phase handoff creation for session suspension. |
-| `mindforge-cleanup` | Archive phase directories from completed milestones. |
-| `mindforge-workstreams` | Manage parallel feature tracks with isolated state. |
-| `mindforge-add-backlog` | Park speculative ideas in the "Parking Lot" (999.x). |
-| `mindforge-review-backlog` | Promote backlog items to the active milestone roadmap. |
-| `mindforge-add-phase` | Append new phases to the current milestone. |
-| `mindforge-insert-phase` | Insert urgent decimal phases (e.g. 72.1) dynamically. |
-| `mindforge-remove-phase` | Remove future phases and automatically renumber roadmap. |
-| `mindforge-add-todo` | Capture real-time tasks from the conversation context. |
-| `mindforge-note` | Zero-friction idea capture and observation log. |
-| `mindforge-plant-seed` | Forward-looking idea capture with trigger conditions. |
-
-### 🧠 Intelligence & Memory
-
-| Skill | Description |
-| :--- | :--- |
-| `mindforge-neural-orchestrator` | Automated skill discovery and tool invocation protocol. |
-| `mindforge-thread` | Persistent cross-session context and thread management. |
-| `mindforge-memory` | Semantic clerk for long-term knowledge graph access. |
-| `mindforge-skill-creation` | Learn, validate, and commit new framework capabilities. |
-| `mindforge-forensics` | Post-mortem analysis of failed workflows and state. |
-| `mindforge-system-architecture` | Multi-service design and scaling decision support. |
-| `mindforge-profile-user` | Generate and maintain developer behavioral profiles. |
-| `mindforge-reapply-patches` | Restore local modifications after framework updates. |
-| `mindforge-join-discord` | Direct community integration and support access. |
-
----
-*For more details, see the [MIND-FORGE-REFERENCE-V6.md](../MIND-FORGE-REFERENCE-V6.md).*

package/docs/registry/WORKFLOWS.md

@@ -1,72 +0,0 @@
-# MindForge — Workflow Registry (v6.2.0-alpha)
-
-This registry catalogs the automated interaction flows available in the MindForge environment.
-
-## 🧱 Initialization & Setup
-
-| Workflow | Trigger Command | Logic Summary | Outcome Goal |
-| :--- | :--- | :--- | :--- |
-| **mindforge:init-project** | `/mindforge:init-project` | "Context extraction -> Framework initialization -> Baseline." | New MindForge project. |
-| **mindforge:init-org** | `/mindforge:init-org` | "Organization-level standards -> Shared-configs -> Policies." | Standardized enterprise org. |
-| **mindforge:new-runtime** | `/mindforge:new-runtime` | "Environment detection -> SDK scaffolding -> Test-loop." | Support for new target AI coding runtime. |
-| **forge:init-project** | `/forge:init-project` | "FORGE-framework initialization -> Local deployment." | FORGE-ready workspace. |
-
-## 🧠 Strategic Planning & Discovery
-
-| Workflow | Trigger Command | Logic Summary | Outcome Goal |
-| :--- | :--- | :--- | :--- |
-| **mindforge:brainstorming** | `/mindforge:brainstorming` | "Intent exploration -> Requirement discovery -> Spec-generation." | Approved requirements. |
-| **mindforge:milestone** | `/mindforge:milestone` | "Requirement clustering -> Timeline generation -> Slotting." | Recorded PROJECT.md roadmap. |
-| **mindforge:architecture** | `/mindforge:architecture` | "Domain modeling -> Pattern selection -> Interface contract." | ARCHITECTURE and UI-SPEC docs. |
-| **mindforge:discuss-phase** | `/mindforge:discuss-phase` | "Adaptive context gathering -> Assumption analysis -> Planning." | Approved PLAN.md. |
-| **mindforge:plan-phase** | `/mindforge:plan-phase` | "Multi-phase blueprinting -> Security review -> Dependency check." | Approved implementation plan. |
-| **mindforge:planner** | `/mindforge:planner` | "Invoke mf-planner -> Logic verification -> Minimization." | Strategic planning support. |
-| **mindforge:researcher** | `/mindforge:researcher` | "Invoke mf-researcher -> Deep context search -> Summary." | Contextual research summaries. |
-
-## 🚀 Execution & Implementation
-
-| Workflow | Trigger Command | Logic Summary | Outcome Goal |
-| :--- | :--- | :--- | :--- |
-| **mindforge:execute-phase** | `/mindforge:execute-phase` | "Wave processing -> Parallel execution -> Swarm implementation." | Completed feature phase. |
-| **mindforge:workstreams** | `/mindforge:workstreams` | "Feature track isolation -> Git Worktree sync -> PR-ready." | Parallel feature development. |
-| **mindforge:tdd** | `/mindforge:tdd` | "Test-definition -> Implementation -> Refactor-cycle." | 100% tested feature code. |
-| **mindforge:executor** | `/mindforge:executor` | "Invoke mf-executor -> Logic implementation -> Atomic commits." | High-fidelity execution assistance. |
-| **mindforge:do** | `/mindforge:do` | "NLP intent routing -> Dispatcher -> Command execution." | Smart, intent-based action. |
-| **mindforge:auto** | `/mindforge:auto` | "Autonomous wave execution -> Self-correcting loop -> Sync." | Bulk, unattended execution. |
-| **mindforge:debug** | `/mindforge:debug` | "RCA investigation -> Log analysis -> Systematic repair." | Resolution of complex defects. |
-| **mindforge:quick** | `/mindforge:quick` | "Atomic task execution -> Validation -> Immediate commit." | Ultra-fast trivial changes. |
-| **mindforge:steer** | `/mindforge:steer` | "Engine interception -> Mid-execution guidance -> Adaptation." | Corrected autonomous engine flow. |
-
-## 🛡️ Verification & Quality
-
-| Workflow | Trigger Command | Logic Summary | Outcome Goal |
-| :--- | :--- | :--- | :--- |
-| **mindforge:health** | `/mindforge:health` | "Component diagnostics -> Config-audit -> Self-repair." | Balanced system health state. |
-| **mindforge:validate-phase** | `/mindforge:validate-phase` | "Pillar gap analysis -> Requirement tracing -> Closure." | Validated and archived phase. |
-| **mindforge:pr-review** | `/mindforge:pr-review` | "Diff analysis -> Security check -> Performance-audit." | Quality-assured code review. |
-| **mindforge:security-scan** | `/mindforge:security-scan` | "Threat detection -> Hardcoding check -> OWASP auditing." | Hardened system security. |
-| **mindforge:metrics** | `/mindforge:metrics` | "Quality trends -> Speed index -> Efficiency scores." | Real-time performance insights. |
-| **mindforge:tokens** | `/mindforge:tokens` | "Consumption profile -> Cost analysis -> Optimization paths." | Optimized framework operation. |
-| **mindforge:reviewer** | `/mindforge:reviewer` | "Invoke mf-reviewer -> Independent quality check." | High-confidence code audit. |
-| **mindforge:audit** | `/mindforge:audit` | "Structured log analysis -> Integration query -> History." | Comprehensive event traceability. |
-
-## 📦 Release & Shipping
-
-| Workflow | Trigger Command | Logic Summary | Outcome Goal |
-| :--- | :--- | :--- | :--- |
-| **mindforge:ship** | `/mindforge:ship` | "PR generation -> Documentation sync -> Release tagging." | Merged features and updated docs. |
-| **mindforge:release** | `/mindforge:release` | "Framework sync -> SemVer bump -> Global distribution." | New framework version release. |
-| **mindforge:complete-milestone** | `/mindforge:complete-milestone` | "Verification -> Archival -> Next-milestone setup." | Archived milestone and prep-next. |
-| **publish-release** | `/publish-release` | "Build orchestration -> Registry sync -> Distribution." | Deployed version to distribution hub. |
-
-## 🧠 Knowledge & AI Intelligence
-
-| Workflow | Trigger Command | Logic Summary | Outcome Goal |
-| :--- | :--- | :--- | :--- |
-| **mindforge:learn** | `/mindforge:learn` | "Source ingestion -> Validation -> Reusable skill creation." | New framework capability (SKILL.md). |
-| **mindforge:remember** | `/mindforge:remember` | "Knowledge graph sync -> Semantic association -> Growth." | Evolving framework IQ. |
-| **mindforge:memory** | `/mindforge:memory` | "Invoke mf-memory -> Persistent context retrieval." | Real-time knowledge graph interaction. |
-| **mindforge:research** | `/mindforge:research` | "Deep context ingestion (Gemini) -> Logic synthesis." | Comprehensive research artifacts. |
-
----
-*For more details, see the [MIND-FORGE-REFERENCE-V6.md](../MIND-FORGE-REFERENCE-V6.md).*

package/docs/release-checklist-guide.md

@@ -1,37 +0,0 @@
-# MindForge Release Checklist Guide (v1.0.0)
-
-This guide explains how to complete the production readiness checklist
-in `.mindforge/production/production-checklist.md` and log results in
-`.planning/RELEASE-CHECKLIST.md`.
-
-## How to use
-1. Open `.mindforge/production/production-checklist.md`
-2. For each item, run the **Verification step** exactly
-3. Record results in `.planning/RELEASE-CHECKLIST.md`
-
-## What “✅ verified” means
-An item is only ✅ when:
-- The verification step was executed
-- The result was successful
-- The verifier and date were recorded
-
-## Recommended order
-1. **Section A** — Installation & upgrade (local + global)
-2. **Section B** — Command coverage
-3. **Section C** — Governance gates
-4. **Section D** — Documentation
-5. **Section E** — Test coverage
-6. **Section F** — Release artifacts
-
-## Example entry
-```
-| A03 | ✅ | dev@example.com | 2026-03-22 | Local install verified |
-```
-
-## Common pitfalls
-- Marking ✅ without running the command
-- Skipping CI checks (E09/F03) before tagging
-- Forgetting to update SDK version to match root
-
-## Final release gate
-Do not tag or publish until **all 55 items** are ✅.

package/docs/requirements.md

@@ -1,29 +0,0 @@
-# MindForge Requirements (v1.0.0)
-
-Use this checklist before installation to avoid surprises.
-
-## System requirements
-- **Node.js:** 18+ (20 LTS recommended)
-- **Git:** 2.30+
-- **OS:** macOS, Linux, or Windows (WSL supported)
-- **Disk:** ~200MB free for framework + caches
-
-## Runtime requirements
-- **Claude Code** or **Antigravity** installed and working
-- Network access to npm registry for `npx mindforge-cc@latest`
-
-## Optional (but recommended)
-- `jq` for audit log queries
-- `gh` CLI for GitHub release workflows
-
-## Quick environment check
-```bash
-node -v
-npm -v
-git --version
-```
-
-## If you are in CI
-- Ensure `CI=true`
-- Use a Node 20 image
-- Keep `.planning/` writable

package/docs/security/SECURITY.md

@@ -1,55 +0,0 @@
-# MindForge — Security Policy
-
-## Supported versions
-
-| Version | Security support |
-|---|---|
-| 5.x.x | ✅ Active — patches released for all severity levels |
-| 4.x.x | ⚠️  Limited — critical fixes only |
-| < 4.0.0 | ❌ No support |
-
-## Reporting a vulnerability
-
-**Email:** security@mindforge.dev
-
-**Required information:**
-- Description of the vulnerability
-- Steps to reproduce
-- Potential impact assessment
-- Your name / handle (for acknowledgement, if desired)
-
-**Response timeline:**
-- Acknowledgement: within 24 hours
-- Initial assessment: within 7 days
-- Fix released: within 30 days for HIGH/CRITICAL, 90 days for MEDIUM/LOW
-- Coordinated disclosure: 90 days from initial report
-
-**We commit to:**
-- Not taking legal action against good-faith security researchers
-- Crediting researchers in the security advisory (with their permission)
-- Maintaining confidentiality until a fix is released
-
-## ZTAI & Enclave Security (v5.0.0)
-
-MindForge v5.0.0 enforces **Zero-Trust Agentic Identity (ZTAI)** and **Sovereign Reason Enclaves (SRE)** for all sensitive operations. 
-
-- **Asymmetric Signing**: All high-tier (T1-T3) agent actions are cryptographically signed using Ed25519.
-- **Sovereign Reason Enclaves (SRE)**: Tier 3 principal agents execute reasoning in isolated TEE-simulated enclaves, ensuring that high-value architectural decisions and sensitive IP never leak to the persistent log.
-- **Trace Sanitization**: In-enclave sanitization automatically redacts credentials and PII from reasoning traces before they reach the local filesystem.
-- **Multi-Cloud Resilience**: The **Cloud Broker** provides automated failover and hedging across Vertex AI, Bedrock, and Azure to mitigate provider-side denial-of-service or outages.
-- **Audit Non-Repudiation**: The `AUDIT.jsonl` log is finalized with **Merkle-root integrity manifests** to prevent tampering.
-- **See also:** [ZTAI Overview](file:///Users/sairamugge/Desktop/MindForge/docs/security/ZTAI-OVERVIEW.md)
-
-## Known security model limitations
-
-See `docs/security/threat-model.md` for the full threat model.
-
-Key acknowledged limitations:
-1. Plugin permission model is advisory (not OS-enforced) — see TA7 in threat model.
-2. The SSE event stream is localhost-only but any local process can connect — see TA6.
-3. Cryptographic identity is local-first; remote anchor validation is a planned v4.5 feature.
-4. Agent instruction injection via SKILL.md requires review beyond pattern matching — see TA1.
-
-*Note: The previous limitation on approver identity (TA5) has been mitigated by the ZTAI DID-based signing model in v4.2.*
-
-These are known trade-offs, not bugs. They are documented in ADR-020.

package/docs/security/ZTAI-OVERVIEW.md

@@ -1,37 +0,0 @@
-# Zero-Trust Agentic Identity (ZTAI) Overview
-
-MindForge v4.2 introduces **ZTAI Enterprise Mode**, an enterprise-grade identity layer that ensures every agent action is cryptographically signed and non-repudiable.
-
-## 1. Asymmetric Identity Model
-Every MindForge persona in the 32+ agent library is assigned a unique asymmetric key pair (Ed25519) upon project initialization or agent spawning.
-
-- **Private Key**: Stored securely in the local `.mindforge/identity` vault (never exposed).
-- **Public Key / DID**: Represented as a **Decentralized Identifier (DID)** in the format `did:mf:<key-fingerprint>`.
-
-## 2. Trust Tiers & Signing Requirements
-MindForge enforces tiered signing based on the risk level of the persona's actions.
-
-| Tier | Persona Examples | Signing Tech | Integrity Proof |
-| :--- | :--- | :--- | :--- |
-| **T0** | `mf-researcher`, `mf-query` | None | Audit log entry only. |
-| **T1** | `mf-executor`, `mf-coder` | Ed25519 (Software) | Signed JSON payload. |
-| **T2** | `security-auditor`, `ui-specialist` | Ed25519 (Software) | Signed Block + Peer Review. |
-| **T3** | `mf-planner`, `system-architect` | **Secure Enclave (HSM)** | Enclave-attested signature. |
-
-*Note: T3 agents utilize a simulated hardware-secured enclave (HSM) to ensure principal-level accountability.*
-
-## 3. Non-Repudiable Audit Manifests
-The `ZTAIArchiver` generates high-fidelity integrity proofs for the session history.
-
-- **Merkle-Root Chain**: Every 50 audit entries trigger the generation of a Merkle-root.
-- **Manifest Finalization**: The cumulative root of all audit entries is signed by the **Principal Agent (T3)**.
-- **Tamper Detection**: Any modification to the `AUDIT.jsonl` file will invalidate the Merkle-proof, triggering an immediate security alert.
-
-## 4. Key Provider Abstraction
-The `ZTAIManager` uses a pluggable `KeyProvider` architecture:
-- `FileSystemProvider`: Standard key storage for T1/T2 agents.
-- `SecureEnclaveProvider`: Simulates hardware-backed signing for T3 agents.
-- `KMSProvider` (Future): Integration with AWS/GCP/Azure Key Management Services.
-
-## 5. Governance Integration
-ZTAI identities are verified during the `/mindforge:verify-phase` and `/mindforge:ship` processes. High-tier changes will be BLOCKED if the cryptographic signatures are missing or invalid.

package/docs/security/penetration-test-results.md

@@ -1,31 +0,0 @@
-# MindForge v1.0.0 — Penetration Test Results
-
-**Date:** 2026-03-22
-**Scope:** MindForge v1.0.0 threat model (7 threat actors)
-**Method:** Manual adversarial review + targeted negative tests
-
-## Summary
-- Critical findings: 0
-- High findings: 0
-- Medium findings: 2
-- Low findings: 3
-
-All findings were addressed or documented with explicit mitigations.
-
-## Findings
-| ID | Severity | Area | Description | Status |
-|---|---|---|---|---|
-| PT-01 | MEDIUM | Plugin system | Malicious plugin can request `write_state` permission | Mitigated: allowlist (`ELEVATED_PLUGINS`) + user approval |
-| PT-02 | MEDIUM | Skill registry | Injection patterns could bypass simple string match | Mitigated: injection guard + manual review guidance |
-| PT-03 | LOW | SSE stream | Local process can subscribe to localhost stream | Accepted: localhost-only + no secrets in stream |
-| PT-04 | LOW | Config | User-controlled git email for approvals | Accepted: governance assumption, documented |
-| PT-05 | LOW | CI | Workflow modification could bypass gates | Accepted: branch protection required |
-
-## Retest notes
-- Re-validated installer excludes `.env`, `.key`, `.pem` files
-- Verified migration restores from backup on failure
-- Confirmed plugin loader skips incompatible plugins and logs audit entry
-
-## Conclusion
-MindForge v1.0.0 is fit for public release with known, documented trade-offs.
-See `docs/security/threat-model.md` for full controls and residual risk.