mustflow 2.103.16 → 2.103.20

package/schemas/check-report.schema.json

@@ -0,0 +1,52 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/check-report.schema.json",
+  "title": "mustflow check report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "ok",
+    "strict",
+    "issueCount",
+    "issues",
+    "warningCount",
+    "warnings",
+    "issueDetails"
+  ],
+  "properties": {
+    "ok": { "type": "boolean" },
+    "strict": { "type": "boolean" },
+    "issueCount": { "type": "integer", "minimum": 0 },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "warningCount": { "type": "integer", "minimum": 0 },
+    "warnings": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "issueDetails": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/issueDetail" }
+    }
+  },
+  "$defs": {
+    "issueDetail": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "severity", "mode", "message"],
+      "properties": {
+        "id": {
+          "anyOf": [
+            { "type": "string" },
+            { "type": "null" }
+          ]
+        },
+        "severity": { "enum": ["error", "warning"] },
+        "mode": { "enum": ["base", "strict"] },
+        "message": { "type": "string" }
+      }
+    }
+  }
+}

package/schemas/index-report.schema.json

@@ -0,0 +1,103 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/index-report.schema.json",
+  "title": "mustflow local index report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "ok",
+    "mustflow_root",
+    "database_path",
+    "dry_run",
+    "wrote_files",
+    "index_mode",
+    "reused_existing",
+    "rebuild_reason",
+    "document_count",
+    "skill_count",
+    "skill_route_count",
+    "command_intent_count",
+    "command_effect_count",
+    "verification_evidence_summary_count",
+    "verification_plan_count",
+    "acceptance_criteria_count",
+    "criterion_coverage_count",
+    "verification_receipt_summary_count",
+    "command_receipt_summary_count",
+    "verification_coverage_state_count",
+    "verification_risk_signal_count",
+    "validation_ratchet_signal_count",
+    "completion_verdict_summary_count",
+    "repro_route_count",
+    "repro_observation_count",
+    "failure_fingerprint_count",
+    "source_index_enabled",
+    "source_anchor_count",
+    "source_anchor_risk_signal_count",
+    "search_backend",
+    "search_fts5_available",
+    "content_mode",
+    "store_full_content",
+    "max_snippet_bytes_per_document",
+    "excluded_raw_data_kinds",
+    "indexed_file_count",
+    "indexed_paths"
+  ],
+  "properties": {
+    "schema_version": { "type": "string", "pattern": "^[0-9]+$" },
+    "command": { "const": "index" },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "database_path": { "type": "string" },
+    "dry_run": { "type": "boolean" },
+    "wrote_files": { "type": "boolean" },
+    "index_mode": { "enum": ["full", "incremental"] },
+    "reused_existing": { "type": "boolean" },
+    "rebuild_reason": {
+      "anyOf": [
+        { "type": "string" },
+        { "type": "null" }
+      ]
+    },
+    "document_count": { "$ref": "#/$defs/count" },
+    "skill_count": { "$ref": "#/$defs/count" },
+    "skill_route_count": { "$ref": "#/$defs/count" },
+    "command_intent_count": { "$ref": "#/$defs/count" },
+    "command_effect_count": { "$ref": "#/$defs/count" },
+    "verification_evidence_summary_count": { "$ref": "#/$defs/count" },
+    "verification_plan_count": { "$ref": "#/$defs/count" },
+    "acceptance_criteria_count": { "$ref": "#/$defs/count" },
+    "criterion_coverage_count": { "$ref": "#/$defs/count" },
+    "verification_receipt_summary_count": { "$ref": "#/$defs/count" },
+    "command_receipt_summary_count": { "$ref": "#/$defs/count" },
+    "verification_coverage_state_count": { "$ref": "#/$defs/count" },
+    "verification_risk_signal_count": { "$ref": "#/$defs/count" },
+    "validation_ratchet_signal_count": { "$ref": "#/$defs/count" },
+    "completion_verdict_summary_count": { "$ref": "#/$defs/count" },
+    "repro_route_count": { "$ref": "#/$defs/count" },
+    "repro_observation_count": { "$ref": "#/$defs/count" },
+    "failure_fingerprint_count": { "$ref": "#/$defs/count" },
+    "source_index_enabled": { "type": "boolean" },
+    "source_anchor_count": { "$ref": "#/$defs/count" },
+    "source_anchor_risk_signal_count": { "$ref": "#/$defs/count" },
+    "search_backend": { "enum": ["fts5", "table_scan"] },
+    "search_fts5_available": { "type": "boolean" },
+    "content_mode": { "const": "metadata_and_snippets" },
+    "store_full_content": { "const": false },
+    "max_snippet_bytes_per_document": { "type": "integer", "minimum": 0 },
+    "excluded_raw_data_kinds": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "indexed_file_count": { "$ref": "#/$defs/count" },
+    "indexed_paths": {
+      "type": "array",
+      "items": { "type": "string" }
+    }
+  },
+  "$defs": {
+    "count": { "type": "integer", "minimum": 0 }
+  }
+}

package/schemas/module-boundary-report.schema.json

@@ -0,0 +1,210 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/module-boundary-report.schema.json",
+  "title": "mustflow module-boundary report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "pack_id",
+    "script_id",
+    "script_ref",
+    "action",
+    "status",
+    "ok",
+    "mustflow_root",
+    "policy",
+    "input_hash",
+    "config",
+    "targets",
+    "graph",
+    "rules",
+    "cycles",
+    "shared_metrics",
+    "truncated",
+    "findings",
+    "issues"
+  ],
+  "properties": {
+    "schema_version": { "const": "1" },
+    "command": { "const": "script-pack" },
+    "pack_id": { "const": "code" },
+    "script_id": { "const": "module-boundary" },
+    "script_ref": { "const": "code/module-boundary" },
+    "action": { "const": "check" },
+    "status": { "enum": ["passed", "failed", "error"] },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "policy": { "$ref": "#/$defs/policy" },
+    "input_hash": { "$ref": "#/$defs/sha256" },
+    "config": { "$ref": "#/$defs/config" },
+    "targets": { "type": "array", "items": { "$ref": "#/$defs/target" } },
+    "graph": { "$ref": "#/$defs/graph" },
+    "rules": { "type": "array", "items": { "$ref": "#/$defs/rule" } },
+    "cycles": { "type": "array", "items": { "$ref": "#/$defs/cycle" } },
+    "shared_metrics": { "type": "array", "items": { "$ref": "#/$defs/sharedMetric" } },
+    "truncated": { "type": "boolean" },
+    "findings": { "type": "array", "items": { "$ref": "#/$defs/finding" } },
+    "issues": { "type": "array", "items": { "type": "string" } }
+  },
+  "$defs": {
+    "sha256": { "type": "string", "pattern": "^sha256:[a-f0-9]{64}$" },
+    "stringArray": { "type": "array", "items": { "type": "string" } },
+    "language": {
+      "enum": [
+        "typescript",
+        "tsx",
+        "javascript",
+        "jsx",
+        "javascript-module",
+        "javascript-commonjs",
+        "json",
+        "other"
+      ]
+    },
+    "targetKind": { "enum": ["file", "directory", "missing", "other", "unknown"] },
+    "edgeKind": { "enum": ["static_import", "static_export", "dynamic_import", "require"] },
+    "configStatus": { "enum": ["found", "missing", "invalid"] },
+    "ruleKind": {
+      "enum": ["layer_deny", "public_entrypoint", "feature_direct_import", "shared_budget", "import_cycle"]
+    },
+    "policy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "max_file_bytes",
+        "max_files",
+        "max_depth",
+        "max_nodes",
+        "max_edges",
+        "extensions",
+        "ignored_directories",
+        "config_path",
+        "max_cycles",
+        "max_shared_files"
+      ],
+      "properties": {
+        "max_file_bytes": { "type": "integer", "minimum": 1 },
+        "max_files": { "type": "integer", "minimum": 1 },
+        "max_depth": { "type": "integer", "minimum": 1 },
+        "max_nodes": { "type": "integer", "minimum": 1 },
+        "max_edges": { "type": "integer", "minimum": 1 },
+        "extensions": { "$ref": "#/$defs/stringArray" },
+        "ignored_directories": { "$ref": "#/$defs/stringArray" },
+        "config_path": { "type": "string" },
+        "max_cycles": { "type": "integer", "minimum": 1 },
+        "max_shared_files": { "type": "integer", "minimum": 1 }
+      }
+    },
+    "config": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "path",
+        "status",
+        "layer_rule_count",
+        "public_entrypoint_rule_count",
+        "feature_group_rule_count",
+        "shared_budget_rule_count"
+      ],
+      "properties": {
+        "path": { "type": "string" },
+        "status": { "$ref": "#/$defs/configStatus" },
+        "layer_rule_count": { "type": "integer", "minimum": 0 },
+        "public_entrypoint_rule_count": { "type": "integer", "minimum": 0 },
+        "feature_group_rule_count": { "type": "integer", "minimum": 0 },
+        "shared_budget_rule_count": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "target": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["input", "path", "exists", "kind", "language"],
+      "properties": {
+        "input": { "type": "string" },
+        "path": { "type": "string" },
+        "exists": { "type": ["boolean", "null"] },
+        "kind": { "$ref": "#/$defs/targetKind" },
+        "language": { "$ref": "#/$defs/language" }
+      }
+    },
+    "graph": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["script_ref", "status", "node_count", "edge_count", "cycle_hint_count", "truncated"],
+      "properties": {
+        "script_ref": { "const": "code/dependency-graph" },
+        "status": { "enum": ["passed", "failed", "error"] },
+        "node_count": { "type": "integer", "minimum": 0 },
+        "edge_count": { "type": "integer", "minimum": 0 },
+        "cycle_hint_count": { "type": "integer", "minimum": 0 },
+        "truncated": { "type": "boolean" }
+      }
+    },
+    "rule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["rule_id", "kind", "finding_count"],
+      "properties": {
+        "rule_id": { "type": "string" },
+        "kind": { "$ref": "#/$defs/ruleKind" },
+        "finding_count": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "cycle": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["cycle_id", "path_count", "paths"],
+      "properties": {
+        "cycle_id": { "type": "string", "pattern": "^cycle:[a-f0-9]{12}$" },
+        "path_count": { "type": "integer", "minimum": 0 },
+        "paths": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "sharedMetric": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["rule_id", "path", "file_count", "export_count", "max_files", "max_exports"],
+      "properties": {
+        "rule_id": { "type": "string" },
+        "path": { "type": "string" },
+        "file_count": { "type": "integer", "minimum": 0 },
+        "export_count": { "type": "integer", "minimum": 0 },
+        "max_files": { "type": ["integer", "null"], "minimum": 0 },
+        "max_exports": { "type": ["integer", "null"], "minimum": 0 }
+      }
+    },
+    "finding": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "message", "path"],
+      "properties": {
+        "code": {
+          "enum": [
+            "dependency_graph_path_outside_root",
+            "dependency_graph_unreadable_path",
+            "dependency_graph_max_files_exceeded",
+            "dependency_graph_max_nodes_exceeded",
+            "dependency_graph_max_edges_exceeded",
+            "module_boundary_config_missing",
+            "module_boundary_invalid_config",
+            "module_boundary_forbidden_import",
+            "module_boundary_public_entry_violation",
+            "module_boundary_feature_direct_import",
+            "module_boundary_shared_budget_exceeded",
+            "module_boundary_import_cycle_detected"
+          ]
+        },
+        "severity": { "enum": ["low", "medium", "high", "critical"] },
+        "message": { "type": "string" },
+        "path": { "type": "string" },
+        "rule_id": { "type": "string" },
+        "source_path": { "type": "string" },
+        "target_path": { "type": "string" },
+        "line": { "type": "integer", "minimum": 1 },
+        "cycle_id": { "type": "string", "pattern": "^cycle:[a-f0-9]{12}$" }
+      }
+    }
+  }
+}

package/schemas/search-report.schema.json

@@ -0,0 +1,102 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/search-report.schema.json",
+  "title": "mustflow local search report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema_version",
+    "command",
+    "ok",
+    "mustflow_root",
+    "database_path",
+    "query",
+    "limit",
+    "scope",
+    "index_fresh",
+    "stale_paths",
+    "search_backend",
+    "search_fts5_available",
+    "result_count",
+    "results"
+  ],
+  "properties": {
+    "schema_version": { "type": "string", "pattern": "^[0-9]+$" },
+    "command": { "const": "search" },
+    "ok": { "type": "boolean" },
+    "mustflow_root": { "type": "string" },
+    "database_path": { "type": "string" },
+    "query": { "type": "string" },
+    "limit": { "type": "integer", "minimum": 1, "maximum": 50 },
+    "scope": { "enum": ["workflow", "source", "all"] },
+    "index_fresh": { "type": "boolean" },
+    "stale_paths": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "search_backend": { "enum": ["fts5", "table_scan"] },
+    "search_fts5_available": { "type": "boolean" },
+    "result_count": { "type": "integer", "minimum": 0 },
+    "results": {
+      "type": "array",
+      "items": { "$ref": "#/$defs/searchItem" }
+    }
+  },
+  "$defs": {
+    "searchItem": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "kind",
+        "cache_layer",
+        "volatile",
+        "authority_rank",
+        "authority_label",
+        "source_scope",
+        "navigation_only",
+        "can_instruct_agent",
+        "match",
+        "score"
+      ],
+      "properties": {
+        "kind": { "enum": ["document", "skill", "skill_route", "command_intent", "source_anchor"] },
+        "path": { "type": "string" },
+        "name": { "type": "string" },
+        "title": { "type": "string" },
+        "document_type": { "type": "string" },
+        "anchor_id": { "type": "string" },
+        "line_start": { "type": "integer", "minimum": 1 },
+        "risk": { "type": "string" },
+        "cache_layer": { "enum": ["stable", "task", "volatile"] },
+        "volatile": { "type": "boolean" },
+        "authority_rank": { "type": "integer", "minimum": 0 },
+        "authority_label": { "type": "string" },
+        "source_scope": { "enum": ["workflow", "source"] },
+        "navigation_only": { "type": "boolean" },
+        "can_instruct_agent": { "type": "boolean" },
+        "stale_status": { "type": "string" },
+        "stale_confidence": { "type": "number" },
+        "effect_locks": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "effect_paths": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "effect_modes": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "route_trigger": { "type": "string" },
+        "route_risk": { "type": "string" },
+        "verification_intents": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "match": { "type": "string" },
+        "score": { "type": "number" }
+      }
+    }
+  }
+}

package/schemas/status-report.schema.json

@@ -0,0 +1,50 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://mustflow.github.io/schemas/status-report.schema.json",
+  "title": "mustflow status report",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "installed",
+    "manifestLock",
+    "trackedFiles",
+    "changedFiles",
+    "missingFiles",
+    "issues",
+    "template"
+  ],
+  "properties": {
+    "installed": { "type": "boolean" },
+    "manifestLock": { "enum": ["missing", "invalid", "present"] },
+    "trackedFiles": { "type": "integer", "minimum": 0 },
+    "changedFiles": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "missingFiles": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "issues": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "template": {
+      "anyOf": [
+        { "$ref": "#/$defs/template" },
+        { "type": "null" }
+      ]
+    }
+  },
+  "$defs": {
+    "template": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["id", "version"],
+      "properties": {
+        "id": { "type": "string" },
+        "version": { "type": "string" }
+      }
+    }
+  }
+}

package/templates/default/i18n.toml

@@ -128,7 +128,7 @@ translations = {}
 [documents."skill.module-boundary-review"]
 source = "locales/en/.mustflow/skills/module-boundary-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.change-blast-radius-review"]
@@ -146,7 +146,7 @@ translations = {}
 [documents."skill.payment-integrity-review"]
 source = "locales/en/.mustflow/skills/payment-integrity-review/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.credit-ledger-integrity-review"]
@@ -446,7 +446,7 @@ translations = {}
 [documents."skill.database-migration-change"]
 source = "locales/en/.mustflow/skills/database-migration-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.database-query-bottleneck-review"]

package/templates/default/locales/en/.mustflow/skills/database-migration-change/SKILL.md

@@ -2,11 +2,11 @@
 mustflow_doc: skill.database-migration-change
 locale: en
 canonical: true
-revision: 2
+revision: 3
 lifecycle: mustflow-owned
 authority: procedure
 name: database-migration-change
-description: Apply this skill when database migration files, schema migration history, ORM schema migrations, generated clients, schema dumps, SQL snapshots, online DDL, large indexes, constraints, backfills, rolling deploy compatibility, expand-and-contract changes, destructive database changes, migration rollback or roll-forward claims, cut-over plans, lock or timeout policy, replication lag risk, migration observability, or production database migration procedures are created, changed, reviewed, or reported.
+description: Apply this skill when database migration files, schema migration history, ORM schema migrations, generated clients, schema dumps, SQL snapshots, online DDL, large indexes, constraints, state-dependent CHECK constraints, backfills, rolling deploy compatibility, expand-and-contract changes, destructive database changes, migration rollback or roll-forward claims, cut-over plans, lock or timeout policy, replication lag risk, migration observability, or production database migration procedures are created, changed, reviewed, or reported.
 metadata:
   mustflow_schema: "1"
   mustflow_kind: procedure
@@ -58,6 +58,9 @@ Migration incidents usually happen in the interval where old code, new code, old
 - Deployment shape: single-step deploy, rolling deploy, blue-green, multiple app versions, background workers, read replicas, multiple services, serverless functions, mobile clients, or external integrations.
 - Database engine and operational surface: PostgreSQL, MySQL, SQLite, SQL Server, managed database, migration lock behavior, DDL transaction behavior, online DDL options, table size, write load, long-running transactions, replication or CDC topology, expected lock time, statement timeout, lock timeout, and restore capability when known.
 - Data preservation needs, compatibility window, backfill size, batch strategy, cursor or checkpoint marker, validation query, observability query, rollback or roll-forward type, cut-over control, and whether old code can run after the new schema lands.
+- State and timestamp invariant matrix when a migration introduces lifecycle statuses, terminal
+  timestamps, retry or dead-letter states, delivery states, soft-delete states, approval states, or
+  other columns whose valid nullability depends on status.
 - Relevant command-intent entries for build, generated-output checks, tests, docs, release, and mustflow validation.
 
 <!-- mustflow-section: preconditions -->
@@ -114,6 +117,14 @@ Migration incidents usually happen in the interval where old code, new code, old
 11. For constraints and foreign keys, use staged validation when the database supports it.
     - PostgreSQL `NOT VALID` constraints and later `VALIDATE CONSTRAINT` can avoid validating old rows during the first lock-sensitive change while still protecting new writes.
     - Foreign keys on large or hot tables need separate add, repair/backfill, validate, and fallback planning rather than one heroic migration.
+    - CHECK constraints must reject impossible domain states, not only prove column types. For
+      lifecycle tables, build a status matrix before writing the constraint: each status should name
+      which timestamps or reason fields are required, forbidden, or still pending. For example,
+      a delivered row should not also have a dead-letter timestamp, and a dead-lettered row should
+      not also look delivered unless the domain explicitly has a separate correction state.
+    - When existing rows may already violate the new matrix, split the change into repair, add
+      unvalidated constraint where supported, validate, and then rely on the constraint as the last
+      gate. Do not let application comments or happy-path tests stand in for the database invariant.
 12. For indexes, check table size, write load, lock behavior, concurrent or online index support, uniqueness validation, existing duplicates, and whether generated ORM queries will use the index.
     - PostgreSQL `CREATE INDEX CONCURRENTLY` avoids blocking ordinary writes but still scans more than once, waits for old transactions, consumes I/O, and cannot run inside a transaction block.
     - MySQL online DDL and `ALGORITHM=INSTANT` have version, row-format, index, row-size, and operation limits; specify `ALGORITHM=INSTANT` or `LOCK=NONE` only when unsupported fallback should fail instead of silently rebuilding a table.
@@ -170,6 +181,8 @@ Migration incidents usually happen in the interval where old code, new code, old
 - Expand, backfill, switch, and contract phases are separated or explicitly proven unnecessary.
 - Old-code/new-schema and new-code/expanded-schema compatibility is classified.
 - Backfill and validation behavior is cursor-based or otherwise bounded, restartable, idempotent, observable, and checkable where relevant.
+- State-dependent CHECK constraints, terminal timestamp exclusivity, and valid nullability matrices
+  are explicit where status columns can otherwise contradict timestamp or reason columns.
 - Lock levels, online DDL support, long-running transaction waits, replication lag, cut-over control, timeout policy, and observability queries are explicit where production data may be affected.
 - Rollback claims distinguish schema rollback, data rollback, app rollback, roll-forward, forward-fix, and restore-required cases.
 - Destructive changes and production lock risks are either deferred, measured, guarded, or reported as remaining risk.
@@ -212,6 +225,7 @@ Prefer configured migration dry-run, generated-output, schema-diff, or database
 - Old-code/new-schema and new-code/expanded-schema compatibility
 - Expand/backfill/switch/contract plan and destructive cleanup timing
 - Backfill cursor, idempotency, throttle, pause/resume, validation, lock, timeout, replication, cut-over, and observability classification
+- Status, timestamp, CHECK constraint, and existing-row validation matrix where relevant
 - Rollback, app rollback, roll-forward, forward-fix, and restore-required classification
 - ORM/generated client/schema dump/snapshot surfaces synchronized
 - Dependent surfaces checked

package/templates/default/locales/en/.mustflow/skills/module-boundary-review/SKILL.md

@@ -2,7 +2,7 @@
 mustflow_doc: skill.module-boundary-review
 locale: en
 canonical: true
-revision: 1
+revision: 2
 lifecycle: mustflow-owned
 authority: procedure
 name: module-boundary-review
@@ -76,6 +76,9 @@ who must change, who owns the data, who owns the failure, and who should not nee
   history showing files that usually move together.
 - Module graph evidence: imports, exports, public APIs, call sites, dependency direction, cycles,
   shared helpers, DTO flow, and configuration reads.
+- Configured guardrail evidence when available: `code/module-boundary` results for
+  `.mustflow/config/module-boundaries.toml` layer deny rules, public entrypoints, feature imports,
+  shared budgets, and import cycles.
 - Ownership evidence: source of truth for data, owner of policy decisions, owner of failure handling,
   owner of cache invalidation, owner of time and config interpretation, and owner of authorization.
 - Test evidence: number and kind of mocks, pure-domain tests, integration tests, worker or batch
@@ -131,6 +134,9 @@ who must change, who owns the data, who owns the failure, and who should not nee
    - If A imports B and B imports A, identify the missing concept, ownership decision, event, port, or
      data-flow direction.
    - Do not accept "they need each other" without naming the invariant that forces the cycle.
+   - When the repository declares `.mustflow/config/module-boundaries.toml`, use the read-only
+     `code/module-boundary` script-pack report as executable evidence before relying on prose-only
+     boundary claims.
 5. Trace DTO infection.
    - API response DTOs, request DTOs, ORM rows, provider payloads, and UI view models should not
      become domain, repository, batch, worker, or event models by default.
@@ -250,6 +256,11 @@ Prefer the narrowest configured test, build, docs, release, or mustflow intent t
 module boundary. Use release or docs checks when templates, public docs, package metadata, public APIs,
 schemas, generated clients, or install surfaces change.
 
+When the command contract and script-pack metadata expose it, `code/module-boundary` may provide
+read-only evidence for configured import-boundary rules. A missing module-boundary config is
+non-blocking evidence that no executable boundary rules were enforced, not proof that the module
+design is clean.
+
 <!-- mustflow-section: failure-handling -->
 ## Failure Handling