mustflow 2.115.16 → 2.116.0

package/templates/default/locales/en/.mustflow/skills/routes.toml

@@ -89,6 +89,12 @@ route_type = "primary"
 priority = 80
 applies_to_reasons = ["code_change", "behavior_change"]
 
+[routes."command-pattern".dependencies]
+unlocks_on = [
+  { signal = "budget_reservation", skill = "credit-ledger-integrity-review" },
+  { signal = "reservation_settlement", skill = "transaction-boundary-integrity-review" },
+]
+
 [routes."command-pattern".contexts]
 file_types = ["ts", "tsx", "js", "jsx", "py", "go", "rs"]
 layers = ["application", "service", "workflow", "queue", "mutation"]
@@ -204,6 +210,76 @@ pattern_categories = ["state_transition", "lifecycle_model", "allowed_action"]
 positive_terms = ["allowed", "history", "irreversible", "lifecycle", "phase", "state", "status", "transition", "workflow"]
 negative_terms = ["algorithm", "pricing", "provider", "strategy", "variant", "wrapper"]
 
+[routes."durable-workflow-orchestration"]
+category = "general_code"
+route_type = "primary"
+priority = 85
+applies_to_reasons = ["unknown_change", "code_change", "behavior_change", "test_change", "public_api_change", "performance_change", "security_change", "privacy_change", "data_change", "migration_change", "docs_change", "package_metadata_change", "release_risk"]
+
+[routes."durable-workflow-orchestration".dependencies]
+requires_skills = ["execution-ledger-integrity-review"]
+suggests_adjuncts = ["idempotency-integrity-review", "retry-policy-integrity-review"]
+unlocks_on = [
+  { signal = "commit_publish_split", skill = "dual-write-consistency" },
+  { signal = "child_join_cancel", skill = "structured-concurrency-supervision-review" },
+]
+
+[routes."durable-workflow-orchestration".contexts]
+positive_terms = ["activity", "checkpoint", "compensate", "compensation", "durable", "orchestration", "resume", "saga", "workflow"]
+negative_terms = ["agentic", "llm", "prompt", "tool-call"]
+
+[routes."dual-write-consistency"]
+category = "general_code"
+route_type = "adjunct"
+priority = 82
+applies_to_reasons = ["unknown_change", "code_change", "behavior_change", "test_change", "public_api_change", "performance_change", "security_change", "privacy_change", "data_change", "migration_change", "docs_change", "package_metadata_change", "release_risk"]
+
+[routes."dual-write-consistency".dependencies]
+suggests_adjuncts = ["transaction-boundary-integrity-review", "queue-processing-integrity-review"]
+
+[routes."dual-write-consistency".contexts]
+positive_terms = ["after-commit", "commit-publish", "dual-write", "outbox", "publish", "reconcile", "reconciliation", "transactional-outbox"]
+negative_terms = ["approval", "budget", "child", "credit", "ledger", "llm", "policy", "supervisor", "tool"]
+
+[routes."structured-concurrency-supervision-review"]
+category = "general_code"
+route_type = "adjunct"
+priority = 81
+applies_to_reasons = ["unknown_change", "code_change", "behavior_change", "test_change", "public_api_change", "performance_change", "security_change", "privacy_change", "data_change"]
+
+[routes."structured-concurrency-supervision-review".dependencies]
+suggests_adjuncts = ["concurrency-invariant-review", "async-timing-boundary-review"]
+
+[routes."structured-concurrency-supervision-review".contexts]
+positive_terms = ["cancel", "cancellation", "child", "join", "nursery", "parent", "sibling", "supervisor", "taskgroup"]
+negative_terms = ["distributed", "fencing", "lease", "leased", "outbox", "worker"]
+
+[routes."execution-ledger-integrity-review"]
+category = "general_code"
+route_type = "adjunct"
+priority = 82
+applies_to_reasons = ["unknown_change", "code_change", "behavior_change", "test_change", "public_api_change", "performance_change", "security_change", "privacy_change", "data_change", "migration_change", "docs_change", "package_metadata_change", "release_risk"]
+
+[routes."execution-ledger-integrity-review".dependencies]
+suggests_adjuncts = ["idempotency-integrity-review", "transaction-boundary-integrity-review"]
+
+[routes."execution-ledger-integrity-review".contexts]
+positive_terms = ["attempt", "checkpoint", "effect", "execution", "ledger", "receipt", "replay", "sequence"]
+negative_terms = ["accounting", "balance", "billing", "credit", "points", "settlement", "wallet"]
+
+[routes."policy-decision-integrity-review"]
+category = "security_privacy"
+route_type = "adjunct"
+priority = 82
+applies_to_reasons = ["unknown_change", "code_change", "behavior_change", "test_change", "public_api_change", "security_change", "privacy_change", "data_change", "migration_change", "docs_change", "package_metadata_change", "release_risk"]
+
+[routes."policy-decision-integrity-review".dependencies]
+suggests_adjuncts = ["business-rule-leakage-review", "api-access-control-review"]
+
+[routes."policy-decision-integrity-review".contexts]
+positive_terms = ["allow", "approval", "capability", "decision", "deny", "explain", "obligation", "policy", "reason", "scope", "version"]
+negative_terms = ["discount", "pricing", "provider-selection", "strategy"]
+
 [routes."result-option"]
 category = "architecture_patterns"
 route_type = "primary"
@@ -420,6 +496,12 @@ route_type = "adjunct"
 priority = 71
 applies_to_reasons = ["unknown_change", "code_change", "behavior_change", "test_change", "performance_change", "ui_change", "data_change"]
 
+[routes."parser-engineering-review"]
+category = "general_code"
+route_type = "adjunct"
+priority = 79
+applies_to_reasons = ["unknown_change", "code_change", "behavior_change", "test_change", "public_api_change", "performance_change", "security_change", "data_change"]
+
 [routes."type-state-modeling-review"]
 category = "general_code"
 route_type = "adjunct"
@@ -612,12 +694,23 @@ route_type = "primary"
 priority = 82
 applies_to_reasons = ["code_change", "behavior_change", "public_api_change", "docs_change", "test_change", "data_change", "migration_change", "performance_change", "security_change", "privacy_change"]
 
+[routes."api-contract-change".dependencies]
+unlocks_on = [
+  { signal = "contract_version_migration", skill = "migration-safety-check" },
+  { signal = "contract_version_migration", skill = "contract-sync-check" },
+]
+
 [routes."backend-reliability-change"]
 category = "general_code"
 route_type = "primary"
 priority = 84
 applies_to_reasons = ["code_change", "behavior_change", "public_api_change", "data_change", "migration_change", "performance_change", "security_change", "privacy_change", "docs_change", "test_change", "package_metadata_change", "release_risk"]
 
+[routes."backend-reliability-change".dependencies]
+unlocks_on = [
+  { signal = "commit_publish_split", skill = "dual-write-consistency" },
+]
+
 [routes."http-delivery-streaming"]
 category = "general_code"
 route_type = "primary"
@@ -774,6 +867,16 @@ route_type = "primary"
 priority = 70
 applies_to_reasons = ["unknown_change", "code_change", "behavior_change", "test_change", "docs_change", "public_api_change", "data_change", "performance_change", "security_change", "privacy_change", "package_metadata_change", "release_risk"]
 
+[routes."agent-execution-control-review".dependencies]
+unlocks_on = [
+  { signal = "capability_scoped_tool", skill = "policy-decision-integrity-review" },
+  { signal = "capability_scoped_tool", skill = "security-flow-review" },
+]
+
+[routes."agent-execution-control-review".contexts]
+positive_terms = ["autonomy", "capability", "executor", "guardrail", "handoff", "interrupt", "planner", "resume", "tool-call"]
+negative_terms = ["benchmark", "eval", "grader", "judge", "score", "trajectory"]
+
 [routes."browser-automation-reliability-review"]
 category = "general_code"
 route_type = "primary"
@@ -1026,6 +1129,11 @@ route_type = "primary"
 priority = 85
 applies_to_reasons = ["code_change", "security_change", "privacy_change", "public_api_change"]
 
+[routes."auth-permission-change".dependencies]
+unlocks_on = [
+  { signal = "allow_deny_approval", skill = "policy-decision-integrity-review" },
+]
+
 [routes."api-access-control-review"]
 category = "security_privacy"
 route_type = "adjunct"

package/templates/default/locales/en/.mustflow/skills/state-machine-pattern/SKILL.md

@@ -2,7 +2,7 @@
 mustflow_doc: skill.state-machine-pattern
 locale: en
 canonical: true
-revision: 5
+revision: 6
 lifecycle: mustflow-owned
 authority: procedure
 name: state-machine-pattern
@@ -29,7 +29,7 @@ metadata:
 <!-- mustflow-section: purpose -->
 ## Purpose
 
-Keep lifecycle state changes in one explicit rule system.
+Keep one entity's lifecycle state changes in one explicit rule system.
 
 The state machine pattern applies when an entity moves through meaningful lifecycle states and the allowed actions, errors, follow-up work, or audit expectations depend on the current state. The core artifact is not a class hierarchy. The core artifact is the transition table: current state, event, guard, next state, and effects as data.
 
@@ -59,6 +59,7 @@ Use this skill to prevent scattered `if`, `switch`, direct assignment, silent no
 - State does not affect allowed actions.
 - The code is a pure calculation, formatter, mapper, parser, or local UI-only state update.
 - A simple create, read, update, delete flow only distinguishes active and deleted and has no meaningful transition rules, recovery behavior, retention behavior, or audit need.
+- The lifecycle coordinates multiple independently persisted entities, services, process-loss recovery, callbacks, or compensation; use `durable-workflow-orchestration`. Keep this skill for each entity's local transition rules.
 
 Two states can still require this skill when the lifecycle is meaningful, such as active to suspended to deleted, deleted being irreversible, or suspension requiring audit and authorization.
 
@@ -165,7 +166,7 @@ Two states can still require this skill when the lifecycle is meaningful, such a
 15. Split state machines when one state string explodes.
     - If payment, fulfillment, refund, moderation, or account status change independently, use separate state machines.
     - State-machine splits require explicit cross-machine invariants, such as fulfillment not shipping before payment succeeds.
-    - Put cross-machine coordination in a domain service, command handler, workflow, or pure policy that calls the smaller machines.
+   - Put same-commit cross-machine coordination in a domain service, command handler, or pure policy. Route independently persisted multi-entity coordination, process-loss recovery, callbacks, and compensation to `durable-workflow-orchestration`.
 16. Document only the useful lifecycle contract.
     - For important domains, document state list, event list, transition table, terminal states, guards, effects, concurrency method, duplicate-event handling, and any cross-machine invariants.
     - Diagrams are secondary. The code transition table is the source of truth.
@@ -183,6 +184,7 @@ Two states can still require this skill when the lifecycle is meaningful, such a
 
 - State cannot be changed outside the transition function or dispatch path.
 - Every allowed transition is visible in one transition table.
+- The transition table governs one entity lifecycle; it does not claim durable orchestration across independently persisted entities or services.
 - Impossible transitions return explicit errors instead of being ignored.
 - Guards are pure and external facts are passed through context.
 - External work is represented through pending, success, and failure events, with effects executed after persistence.

package/templates/default/locales/en/.mustflow/skills/structured-concurrency-supervision-review/SKILL.md

@@ -0,0 +1,155 @@
+---
+mustflow_doc: skill.structured-concurrency-supervision-review
+locale: en
+canonical: true
+revision: 1
+lifecycle: mustflow-owned
+authority: procedure
+name: structured-concurrency-supervision-review
+description: Apply this skill when one runtime parent starts concurrent child tasks, workers, coroutines, threads, goroutines, or agent-runtime children and correctness depends on bounded fan-out, ownership, deadline and cancellation propagation, joining, sibling failure policy, cleanup, and rejection of late results.
+metadata:
+  mustflow_schema: "1"
+  mustflow_kind: procedure
+  pack_id: mustflow.core
+  skill_id: mustflow.core.structured-concurrency-supervision-review
+  command_intents:
+    - changes_status
+    - changes_diff_summary
+    - lint
+    - build
+    - test_related
+    - test
+    - test_audit
+    - docs_validate_fast
+    - test_release
+    - mustflow_check
+---
+
+# Structured Concurrency Supervision Review
+
+<!-- mustflow-section: purpose -->
+## Purpose
+
+Keep concurrent children inside an explicit lifetime tree. Make the parent own admission, inherited
+authority, bounded fan-out, failure propagation, cancellation, join, result admission, and cleanup
+so terminal parent state cannot leave invisible work mutating the world.
+
+<!-- mustflow-section: use-when -->
+## Use When
+
+- One request, run, task, worker invocation, or runtime agent dynamically starts child tasks.
+- Code uses task groups, nurseries, supervisors, join sets, futures, goroutines, coroutines, threads,
+  abort controllers, cancellation tokens, or parallel sub-operations.
+- Parent completion can race with orphaned children, late results, sibling failure, cancellation,
+  cleanup, retry, or unbounded fan-out.
+
+<!-- mustflow-section: do-not-use-when -->
+## Do Not Use When
+
+- Several coding agents coordinate files, worktrees, commands, and merges; use
+  `multi-agent-work-coordination`.
+- The main problem is a shared variable, lock, CAS, database row, or transaction invariant with no
+  parent-child task tree; use `race-condition-review` or `concurrency-invariant-review`.
+- The main problem is durable broker redelivery or worker crash recovery; use
+  `queue-processing-integrity-review`.
+- The flow must survive process loss and resume from persisted steps; use
+  `durable-workflow-orchestration`.
+- An independent daemon or service has its own declared lifecycle. It is not a structured child just
+  because another process started it once.
+
+<!-- mustflow-section: required-inputs -->
+## Required Inputs
+
+- Task-tree ledger: parent, children, spawn site, join owner, and terminal owner.
+- Inherited-boundary ledger: deadline, cancellation, tenant, capability, budget, trace, and source
+  version passed to each child.
+- Fan-out ledger: admission rule, concurrency limit, pending limit, queueing, and backpressure.
+- Completion-policy ledger: fail-fast, collect-all, quorum, partial success, ordering, and error shape.
+- Cancellation, cleanup, retry, and non-cancellable finalization ledger.
+- Result-admission ledger: generation or run version, stale-result rule, and aggregation owner.
+
+<!-- mustflow-section: preconditions -->
+## Preconditions
+
+- Read the nearest instructions, command contract, spawn and join sites, task runtime, resource
+  ownership, retry wrappers, cancellation paths, and current concurrency tests.
+- Name the live parent whose lifetime bounds the work. If no parent exists, report detached work
+  explicitly instead of calling it structured concurrency.
+- Treat framework cancellation and task-group semantics as version-sensitive evidence.
+
+<!-- mustflow-section: allowed-edits -->
+## Allowed Edits
+
+- Add or tighten task groups, supervisors, bounded queues, semaphores, cancellation propagation,
+  deadline inheritance, join and aggregation logic, stale-result guards, cleanup, focused tests,
+  metrics, docs, and directly synchronized templates.
+- Move intentionally durable detached work behind a queue or workflow handoff with a named external
+  owner.
+- Do not hide orphaning with fire-and-forget wrappers, background promises, swallowed join errors,
+  unbounded parallel maps, or process-exit cleanup assumptions.
+
+<!-- mustflow-section: procedure -->
+## Procedure
+
+1. Place every spawn site in a task tree and name the parent, child purpose, join owner, and terminal
+   owner. Classify any detached task as an explicit external handoff or a defect.
+2. Propagate the parent deadline and cancellation signal to every child. Clamp child deadlines so a
+   child cannot outlive the parent unless ownership is durably transferred.
+3. Propagate tenant, capability, budget, trace, and source-version context without widening it. A
+   child may receive less authority, never more by accident.
+4. Bound active fan-out and queued work separately. Define rejection, backpressure, batching, or
+   degradation when either limit is reached.
+5. Choose one completion policy: fail-fast, collect-all, quorum, ordered aggregation, or explicit
+   partial success. Define which sibling failures cancel other work and which results remain usable.
+6. Join or durably hand off every child before the parent reports terminal success, failure, or
+   cancellation. A returned promise that only schedules work is not completion evidence.
+7. Make cancellation cooperative and cleanup-safe. Bound grace periods and keep non-cancellable
+   finalization limited to restoring local invariants or releasing owned resources.
+8. Prevent retry multiplication between child code, supervisor restart, parent retry, and outer
+   request retry. Give the whole tree one bounded attempt and elapsed-time story.
+9. Tag child results with parent run or generation identity. Reject completions from a cancelled,
+   superseded, or closed parent before aggregation or side effects.
+10. Release permits, buffers, files, connections, locks, temporary state, and child-owned processes
+    on success, error, cancellation, and partial spawn failure.
+11. Test parent cancellation, child hang, sibling failure, spawn storm, partial spawn, late result,
+    cleanup failure, retry amplification, and terminal reporting before all joins complete.
+
+<!-- mustflow-section: postconditions -->
+## Postconditions
+
+- Every child has one live parent or a named durable external owner.
+- Parent terminal reporting cannot leave an unauthorized child effect running.
+- Active work, queued work, retries, cancellation waits, joins, and cleanup are bounded.
+- Late or superseded results cannot enter a new parent generation or mutate closed state.
+
+<!-- mustflow-section: verification -->
+## Verification
+
+- Use configured `changes_status` and `changes_diff_summary` for scope evidence.
+- Use `lint`, `build`, and `test_related` for runtime changes and controlled interleavings; use `test`
+  or `test_audit` for shared supervisors or broad test claims.
+- Use `docs_validate_fast`, `test_release`, and `mustflow_check` for docs, package, template, or
+  Mustflow changes.
+- Report unavailable scheduler fuzzing, runtime tracing, load, or live cancellation evidence rather
+  than inventing commands.
+
+<!-- mustflow-section: failure-handling -->
+## Failure Handling
+
+- If no parent or join owner can be named, stop the structured-concurrency claim and report detached
+  lifetime risk.
+- If cancellation cannot reach a child, transfer ownership durably or keep the parent non-terminal
+  until the child stops; do not pretend cancellation succeeded.
+- If cleanup or join can wait forever, add a bounded escalation or report the unresolved resource.
+- If verification fails, preserve the task-tree interleaving and use `failure-triage` before changing
+  unrelated concurrency code.
+
+<!-- mustflow-section: output-format -->
+## Output Format
+
+- Parent-child task tree and ownership decisions
+- Deadline, cancellation, capability, budget, trace, and generation inheritance
+- Fan-out, completion, join, retry, cleanup, and late-result policies
+- Controlled interleaving and failure evidence
+- Files changed and compatibility impact
+- Command intents run, skipped checks, and remaining supervision risk

package/templates/default/locales/en/.mustflow/skills/transaction-boundary-integrity-review/SKILL.md

@@ -2,7 +2,7 @@
 mustflow_doc: skill.transaction-boundary-integrity-review
 locale: en
 canonical: true
-revision: 1
+revision: 2
 lifecycle: mustflow-owned
 authority: procedure
 name: transaction-boundary-integrity-review
@@ -50,6 +50,8 @@ The review question is not "is there a transaction?" It is "does the read -> dec
 - The task is primarily retries, queue reliability, provider deadlines, health checks, outbox processing, or operational failure handling; use `backend-reliability-change`.
 - The task is payment, credit, wallet, or ledger specific and the transaction issue is only one part of money-event integrity; use `payment-integrity-review` or `credit-ledger-integrity-review` first.
 - The transaction is a tiny single-row write with no prior decision, no concurrency-sensitive invariant, no external side effect, no retry, and no framework propagation risk.
+- The main problem is convergence after a database, broker, provider, or second database commits independently; use `dual-write-consistency`. This skill owns each local transaction boundary only.
+- The main problem is compensation order or resumable recovery across those commits; use `durable-workflow-orchestration`.
 
 <!-- mustflow-section: required-inputs -->
 ## Required Inputs
@@ -127,13 +129,14 @@ The review question is not "is there a transaction?" It is "does the read -> dec
     - Email, cache eviction, queue publish, HTTP API calls, payment provider calls, object storage writes, file uploads, and search indexing do not roll back with the database.
     - Prefer after-commit hooks for non-critical callbacks and outbox records for durable side effects that must eventually happen.
     - Remember that an after-commit callback failure does not roll back an already committed database transaction.
+    - When the database and external system can commit independently, route convergence to `dual-write-consistency`; keep this review limited to the local transaction's reads, decisions, writes, commit, and after-commit handoff.
 11. Review transaction width and resource pressure.
     - Do not hold locks or connections across HTTP API calls, file uploads, sleeps, large loops, slow calculations, logging sinks, JSON serialization, queue waits, or user-controlled waits.
     - Timeouts do not undo already-sent external effects.
     - `REQUIRES_NEW`, nested service calls, and transaction-per-item loops can exhaust connection pools.
 12. Review multi-database and transaction-manager scope.
     - A transaction annotation or helper may cover only one data source, ORM session, connection, or transaction manager.
-    - Cross-database updates, external services, caches, search indexes, queues, and object storage need outbox, saga, compensation, reconciliation, or manual recovery rather than pretend single-transaction atomicity.
+    - Cross-database, broker, and provider convergence belongs to `dual-write-consistency`; ordered compensation and resumable recovery belong to `durable-workflow-orchestration`. Do not pretend one local transaction owns either protocol.
 13. Review advisory and distributed locks.
     - PostgreSQL session-level advisory locks can survive rollback and require release or session end.
     - Transaction-level advisory locks release at transaction end and are usually safer for short critical sections.

package/templates/default/manifest.toml

@@ -1,6 +1,6 @@
 id = "default"
 name = "default"
-version = "2.115.16"
+version = "2.116.0"
 description = "Minimal workflow for LLM agents to read, edit, and verify their work in a repository."
 common_root = "common"
 locales_root = "locales"
@@ -36,6 +36,11 @@ creates = [
   ".mustflow/skills/business-rule-leakage-review/SKILL.md",
   ".mustflow/skills/payment-integrity-review/SKILL.md",
   ".mustflow/skills/credit-ledger-integrity-review/SKILL.md",
+  ".mustflow/skills/dual-write-consistency/SKILL.md",
+  ".mustflow/skills/durable-workflow-orchestration/SKILL.md",
+  ".mustflow/skills/execution-ledger-integrity-review/SKILL.md",
+  ".mustflow/skills/policy-decision-integrity-review/SKILL.md",
+  ".mustflow/skills/structured-concurrency-supervision-review/SKILL.md",
   ".mustflow/skills/notification-delivery-integrity-review/SKILL.md",
   ".mustflow/skills/admin-control-plane-safety-review/SKILL.md",
   ".mustflow/skills/small-service-platform-architecture-review/SKILL.md",
@@ -72,6 +77,7 @@ creates = [
   ".mustflow/skills/website-task-friction-review/SKILL.md",
   ".mustflow/skills/cache-integrity-review/SKILL.md",
   ".mustflow/skills/quadratic-scan-review/SKILL.md",
+  ".mustflow/skills/parser-engineering-review/SKILL.md",
   ".mustflow/skills/type-state-modeling-review/SKILL.md",
   ".mustflow/skills/race-condition-review/SKILL.md",
   ".mustflow/skills/async-timing-boundary-review/SKILL.md",
@@ -283,6 +289,11 @@ minimal = [
   "business-rule-leakage-review",
   "payment-integrity-review",
   "credit-ledger-integrity-review",
+  "dual-write-consistency",
+  "durable-workflow-orchestration",
+  "execution-ledger-integrity-review",
+  "policy-decision-integrity-review",
+  "structured-concurrency-supervision-review",
   "notification-delivery-integrity-review",
   "admin-control-plane-safety-review",
   "small-service-platform-architecture-review",
@@ -319,6 +330,7 @@ minimal = [
   "website-task-friction-review",
   "cache-integrity-review",
   "quadratic-scan-review",
+  "parser-engineering-review",
   "type-state-modeling-review",
   "race-condition-review",
   "async-timing-boundary-review",
@@ -421,6 +433,7 @@ minimal = [
   "file-path-cross-platform-change",
   "idea-triage",
   "instruction-conflict-scope-check",
+  "migration-safety-check",
   "pattern-scout",
   "provenance-license-gate",
   "proactive-risk-surfacing",
@@ -463,6 +476,11 @@ patterns = [
   "business-rule-leakage-review",
   "payment-integrity-review",
   "credit-ledger-integrity-review",
+  "dual-write-consistency",
+  "durable-workflow-orchestration",
+  "execution-ledger-integrity-review",
+  "policy-decision-integrity-review",
+  "structured-concurrency-supervision-review",
   "notification-delivery-integrity-review",
   "admin-control-plane-safety-review",
   "small-service-platform-architecture-review",
@@ -499,6 +517,7 @@ patterns = [
   "website-task-friction-review",
   "cache-integrity-review",
   "quadratic-scan-review",
+  "parser-engineering-review",
   "type-state-modeling-review",
   "race-condition-review",
   "async-timing-boundary-review",
@@ -605,6 +624,7 @@ patterns = [
   "file-path-cross-platform-change",
   "idea-triage",
   "instruction-conflict-scope-check",
+  "migration-safety-check",
   "null-object-pattern",
   "pattern-scout",
   "pure-core-imperative-shell",
@@ -654,6 +674,11 @@ oss = [
   "business-rule-leakage-review",
   "payment-integrity-review",
   "credit-ledger-integrity-review",
+  "dual-write-consistency",
+  "durable-workflow-orchestration",
+  "execution-ledger-integrity-review",
+  "policy-decision-integrity-review",
+  "structured-concurrency-supervision-review",
   "notification-delivery-integrity-review",
   "admin-control-plane-safety-review",
   "small-service-platform-architecture-review",
@@ -690,6 +715,7 @@ oss = [
   "website-task-friction-review",
   "cache-integrity-review",
   "quadratic-scan-review",
+  "parser-engineering-review",
   "type-state-modeling-review",
   "race-condition-review",
   "async-timing-boundary-review",
@@ -864,6 +890,11 @@ team = [
   "business-rule-leakage-review",
   "payment-integrity-review",
   "credit-ledger-integrity-review",
+  "dual-write-consistency",
+  "durable-workflow-orchestration",
+  "execution-ledger-integrity-review",
+  "policy-decision-integrity-review",
+  "structured-concurrency-supervision-review",
   "notification-delivery-integrity-review",
   "admin-control-plane-safety-review",
   "small-service-platform-architecture-review",
@@ -900,6 +931,7 @@ team = [
   "website-task-friction-review",
   "cache-integrity-review",
   "quadratic-scan-review",
+  "parser-engineering-review",
   "type-state-modeling-review",
   "race-condition-review",
   "async-timing-boundary-review",
@@ -1009,6 +1041,7 @@ team = [
   "idea-triage",
   "complex-decision-analysis",
   "instruction-conflict-scope-check",
+  "migration-safety-check",
   "multi-agent-work-coordination",
   "null-object-pattern",
   "pattern-scout",
@@ -1058,6 +1091,11 @@ product = [
   "business-rule-leakage-review",
   "payment-integrity-review",
   "credit-ledger-integrity-review",
+  "dual-write-consistency",
+  "durable-workflow-orchestration",
+  "execution-ledger-integrity-review",
+  "policy-decision-integrity-review",
+  "structured-concurrency-supervision-review",
   "notification-delivery-integrity-review",
   "admin-control-plane-safety-review",
   "small-service-platform-architecture-review",
@@ -1094,6 +1132,7 @@ product = [
   "website-task-friction-review",
   "cache-integrity-review",
   "quadratic-scan-review",
+  "parser-engineering-review",
   "type-state-modeling-review",
   "race-condition-review",
   "async-timing-boundary-review",
@@ -1203,6 +1242,7 @@ product = [
   "idea-triage",
   "complex-decision-analysis",
   "instruction-conflict-scope-check",
+  "migration-safety-check",
   "llm-service-ux-review",
   "null-object-pattern",
   "pattern-scout",
@@ -1258,6 +1298,11 @@ library = [
   "business-rule-leakage-review",
   "payment-integrity-review",
   "credit-ledger-integrity-review",
+  "dual-write-consistency",
+  "durable-workflow-orchestration",
+  "execution-ledger-integrity-review",
+  "policy-decision-integrity-review",
+  "structured-concurrency-supervision-review",
   "notification-delivery-integrity-review",
   "admin-control-plane-safety-review",
   "small-service-platform-architecture-review",
@@ -1294,6 +1339,7 @@ library = [
   "website-task-friction-review",
   "cache-integrity-review",
   "quadratic-scan-review",
+  "parser-engineering-review",
   "type-state-modeling-review",
   "race-condition-review",
   "async-timing-boundary-review",