mustflow 2.115.5 → 2.115.11

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "mustflow",
-  "version": "2.115.5",
+  "version": "2.115.11",
   "description": "Agent workflow documents and CLI for mustflow repository roots.",
   "type": "module",
   "license": "MIT-0",

package/templates/default/i18n.toml

@@ -10,8 +10,8 @@ status_values = ["current", "stale", "needs_review", "missing"]
 [documents."agents.root"]
 source = "locales/en/AGENTS.md"
 source_locale = "en"
-revision = 22
-translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 22, status = "current" }
+revision = 23
+translations.ko = { path = "locales/ko/AGENTS.md", source_revision = 22, status = "needs_review" }
 translations.zh = { path = "locales/zh/AGENTS.md", source_revision = 22, status = "needs_review" }
 translations.es = { path = "locales/es/AGENTS.md", source_revision = 22, status = "needs_review" }
 translations.fr = { path = "locales/fr/AGENTS.md", source_revision = 22, status = "needs_review" }
@@ -40,7 +40,7 @@ translations.hi = { path = "locales/hi/.mustflow/context/PROJECT.md", source_rev
 [documents."docs.agent-workflow"]
 source = "locales/en/.mustflow/docs/agent-workflow.md"
 source_locale = "en"
-revision = 29
+revision = 30
 translations.ko = { path = "locales/ko/.mustflow/docs/agent-workflow.md", source_revision = 23, status = "needs_review" }
 translations.zh = { path = "locales/zh/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
 translations.es = { path = "locales/es/.mustflow/docs/agent-workflow.md", source_revision = 18, status = "needs_review" }
@@ -62,7 +62,13 @@ translations = {}
 [documents."skills.index"]
 source = "locales/en/.mustflow/skills/INDEX.md"
 source_locale = "en"
-revision = 229
+revision = 239
+translations = {}
+
+[documents."skill.ada-code-change"]
+source = "locales/en/.mustflow/skills/ada-code-change/SKILL.md"
+source_locale = "en"
+revision = 2
 translations = {}
 
 [documents."skill.adapter-boundary"]
@@ -278,7 +284,7 @@ translations = {}
 [documents."skill.core-web-vitals-field-review"]
 source = "locales/en/.mustflow/skills/core-web-vitals-field-review/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.image-delivery-performance-review"]
@@ -595,13 +601,13 @@ translations = {}
 [documents."skill.dependency-upgrade-review"]
 source = "locales/en/.mustflow/skills/dependency-upgrade-review/SKILL.md"
 source_locale = "en"
-revision = 6
+revision = 7
 translations = {}
 
 [documents."skill.version-freshness-check"]
 source = "locales/en/.mustflow/skills/version-freshness-check/SKILL.md"
 source_locale = "en"
-revision = 10
+revision = 11
 translations = {}
 
 [documents."skill.line-ending-hygiene"]
@@ -655,7 +661,7 @@ translations = {}
 [documents."skill.astro-code-change"]
 source = "locales/en/.mustflow/skills/astro-code-change/SKILL.md"
 source_locale = "en"
-revision = 5
+revision = 6
 translations = {}
 
 [documents."skill.axum-code-change"]
@@ -670,6 +676,12 @@ source_locale = "en"
 revision = 1
 translations = {}
 
+[documents."skill.threejs-code-change"]
+source = "locales/en/.mustflow/skills/threejs-code-change/SKILL.md"
+source_locale = "en"
+revision = 1
+translations = {}
+
 [documents."skill.auth-permission-change"]
 source = "locales/en/.mustflow/skills/auth-permission-change/SKILL.md"
 source_locale = "en"
@@ -700,6 +712,12 @@ source_locale = "en"
 revision = 2
 translations = {}
 
+[documents."skill.deno-code-change"]
+source = "locales/en/.mustflow/skills/deno-code-change/SKILL.md"
+source_locale = "en"
+revision = 2
+translations = {}
+
 [documents."skill.cpp-code-change"]
 source = "locales/en/.mustflow/skills/cpp-code-change/SKILL.md"
 source_locale = "en"
@@ -727,7 +745,7 @@ translations = {}
 [documents."skill.elysia-code-change"]
 source = "locales/en/.mustflow/skills/elysia-code-change/SKILL.md"
 source_locale = "en"
-revision = 3
+revision = 4
 translations = {}
 
 [documents."skill.flutter-code-change"]
@@ -751,7 +769,7 @@ translations = {}
 [documents."skill.hono-code-change"]
 source = "locales/en/.mustflow/skills/hono-code-change/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.html-code-change"]
@@ -775,13 +793,13 @@ translations = {}
 [documents."skill.node-code-change"]
 source = "locales/en/.mustflow/skills/node-code-change/SKILL.md"
 source_locale = "en"
-revision = 4
+revision = 5
 translations = {}
 
 [documents."skill.nestjs-code-change"]
 source = "locales/en/.mustflow/skills/nestjs-code-change/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.react-code-change"]
@@ -805,7 +823,19 @@ translations = {}
 [documents."skill.python-code-change"]
 source = "locales/en/.mustflow/skills/python-code-change/SKILL.md"
 source_locale = "en"
-revision = 5
+revision = 6
+translations = {}
+
+[documents."skill.php-code-change"]
+source = "locales/en/.mustflow/skills/php-code-change/SKILL.md"
+source_locale = "en"
+revision = 2
+translations = {}
+
+[documents."skill.pascal-code-change"]
+source = "locales/en/.mustflow/skills/pascal-code-change/SKILL.md"
+source_locale = "en"
+revision = 2
 translations = {}
 
 [documents."skill.powershell-code-change"]
@@ -859,7 +889,7 @@ translations = {}
 [documents."skill.svelte-code-change"]
 source = "locales/en/.mustflow/skills/svelte-code-change/SKILL.md"
 source_locale = "en"
-revision = 3
+revision = 4
 translations = {}
 
 [documents."skill.tailwind-code-change"]
@@ -871,7 +901,7 @@ translations = {}
 [documents."skill.tauri-code-change"]
 source = "locales/en/.mustflow/skills/tauri-code-change/SKILL.md"
 source_locale = "en"
-revision = 4
+revision = 5
 translations = {}
 
 [documents."skill.wails-code-change"]
@@ -883,7 +913,7 @@ translations = {}
 [documents."skill.typescript-code-change"]
 source = "locales/en/.mustflow/skills/typescript-code-change/SKILL.md"
 source_locale = "en"
-revision = 7
+revision = 8
 translations = {}
 
 [documents."skill.unocss-code-change"]
@@ -913,7 +943,7 @@ translations = {}
 [documents."skill.completion-evidence-gate"]
 source = "locales/en/.mustflow/skills/completion-evidence-gate/SKILL.md"
 source_locale = "en"
-revision = 7
+revision = 8
 translations = {}
 
 [documents."skill.next-action-menu"]
@@ -1038,7 +1068,7 @@ translations = {}
 [documents."skill.instruction-conflict-scope-check"]
 source = "locales/en/.mustflow/skills/instruction-conflict-scope-check/SKILL.md"
 source_locale = "en"
-revision = 1
+revision = 2
 translations = {}
 
 [documents."skill.migration-safety-check"]
@@ -1065,6 +1095,12 @@ source_locale = "en"
 revision = 24
 translations = {}
 
+[documents."skill.performance-measurement-integrity-review"]
+source = "locales/en/.mustflow/skills/performance-measurement-integrity-review/SKILL.md"
+source_locale = "en"
+revision = 2
+translations = {}
+
 [documents."skill.pattern-scout"]
 source = "locales/en/.mustflow/skills/pattern-scout/SKILL.md"
 source_locale = "en"
@@ -1128,7 +1164,7 @@ translations = {}
 [documents."skill.source-freshness-check"]
 source = "locales/en/.mustflow/skills/source-freshness-check/SKILL.md"
 source_locale = "en"
-revision = 4
+revision = 5
 translations = {}
 
 [documents."skill.source-anchor-authoring"]
@@ -1188,13 +1224,13 @@ translations = {}
 [documents."skill.skill-refresh"]
 source = "locales/en/.mustflow/skills/skill-refresh/SKILL.md"
 source_locale = "en"
-revision = 2
+revision = 3
 translations = {}
 
 [documents."skill.skill-authoring"]
 source = "locales/en/.mustflow/skills/skill-authoring/SKILL.md"
 source_locale = "en"
-revision = 9
+revision = 11
 translations = {}
 
 [documents."skill.task-instruction-authoring"]

package/templates/default/locales/en/.mustflow/docs/agent-workflow.md

@@ -2,7 +2,7 @@
 mustflow_doc: docs.agent-workflow
 locale: en
 canonical: true
-revision: 29
+revision: 30
 lifecycle: mustflow-owned
 authority: workflow-policy
 ---
@@ -255,6 +255,11 @@ When a version changes, keep package metadata, template manifest versions, docs
 
 Do not infer commands from `package.json`, `Makefile`, `justfile`, `Taskfile.yml`, or source files. Use `.mustflow/config/commands.toml` as the command contract.
 
+For nested-repository work, the current command contract is the selected child repository's
+contract. A parent workspace skill may name useful verification intents, but those names are
+procedure hints only until the child contract declares them. Do not leave the selected child root
+to execute a parent intent as a substitute.
+
 A command intent is eligible for agent use only when all of these are true:
 
 - `status = "configured"`
@@ -311,6 +316,13 @@ Use configured command intents for checks. Typical intent names include:
 
 If an expected intent is missing, disabled, manual-only, or not configured, do not invent a replacement. Report what was skipped and why.
 
+Keep verification ownership local to the selected repository. A child-only change does not inherit
+parent-root verification obligations from shared skills, parent preferences, or a parent final-report
+template. Run or report a parent-root check only when parent-owned files or orchestration changed, or
+when a named parent artifact or contract is an explicit dependency of the child result. Unrelated
+parent worktree changes, active locks, stale receipts, or manifest drift are context, not blockers for
+the child completion claim, and should not be listed as skipped child checks.
+
 ## Verification Selection
 
 Use `.mustflow/config/preferences.toml` `[verification.selection]` to choose verification breadth. These preferences do not grant command execution permission; they only guide which configured command intents to consider.

package/templates/default/locales/en/.mustflow/skills/INDEX.md

@@ -2,7 +2,7 @@
 mustflow_doc: skills.index
 locale: en
 canonical: true
-revision: 229
+revision: 239
 authority: router
 lifecycle: mustflow-owned
 ---
@@ -303,6 +303,9 @@ refer to `AGENTS.md` and `.mustflow/config/commands.toml` to implement the most
   Scene lifecycle, cameras, lights, meshes, materials, textures, shaders, glTF or GLB loading,
   Havok or Physics V2, LOD, instancing, thin instances, picking, render loops, Inspector
   debugging, or Babylon-related tests are created, changed, reviewed, or upgraded.
+- Use `threejs-code-change` as a primary route when Three.js renderer setup, scenes, cameras,
+  meshes, materials, textures, shaders, glTF or GLB assets, animation, picking, Raycaster,
+  WebGL, WebGPU, WebXR, resource disposal, performance, migration, or related tests change.
 - Use `svelte-code-change` as a primary route when Svelte, SvelteKit, route files, universal or
   server load, actions, endpoints, hooks, runes, snippets, bindings, SSR, hydration, streaming,
   invalidation, adapters, Vite, TypeScript, packaging, or Svelte-related tests are created,
@@ -587,14 +590,18 @@ routes. Event routes stay inactive until their event occurs.
 | HTTP delivery, content coding, compression negotiation, CDN or proxy cache behavior, streaming responses, SSE, EventSource, WebTransport, WebSocket fallback, HTTP/2 or HTTP/3 transport behavior, browser transport clients, reverse-proxy buffering, reconnect behavior, or delivery observability is created, changed, reviewed, or reported | `.mustflow/skills/http-delivery-streaming/SKILL.md` | Delivery surface, routes or assets, headers, cache and proxy/CDN path, browser/API clients, fallback behavior, streaming lifecycle, compression or dictionary choice, and observability fields | Route handlers, response headers, CDN/proxy config, browser transport code, streaming adapters, fallback clients, docs, tests, and directly synchronized templates | wrong content decoding, cache poisoning, private data cached publicly, proxy buffering, lost events, reconnect gaps, unsupported transport, unreliable datagram misuse, false compression win, or fallback failure | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `docs_validate_fast`, `test_release`, `mustflow_check` | Delivery ledger, negotiated encodings, cache/proxy behavior, stream/reconnect/fallback behavior, verification, and remaining delivery risk |
 | C++ source, headers, modules, native build metadata, toolchains, package managers, public headers, shared or static libraries, ABI surfaces, generated bindings, FFI, tests, or benchmarks are created or changed | `.mustflow/skills/cpp-code-change/SKILL.md` | Owning target, compilation identity, build front door, changed consumed surface, public API/ABI/FFI/binding surfaces, ownership and lifetime contracts, and command contract entries | C++ source, headers, modules, build metadata, package metadata, generated bindings, FFI code, tests, benchmarks, and directly synchronized docs | target drift, source API break, binary ABI break, undefined behavior, lifetime bug, build-graph drift, generated-binding drift, FFI memory bug, unverified modern C++ feature, or false performance claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Owning target, compilation identity, highest compatibility risk, ownership/lifetime/UB/concurrency notes, public API/ABI/FFI/binding impact, verification, and remaining C++ risk |
 | C source, C-owned headers, native C build metadata, compiler dialect, C standard version, public C headers, shared or static libraries, ABI surfaces, generated C bindings, FFI, memory ownership, pointer lifetime, undefined behavior, sanitizer configuration, performance-sensitive C paths, tests, or benchmarks are created or changed | `.mustflow/skills/c-code-change/SKILL.md` | Owning target, C standard or dialect, compiler, libc, build front door, changed consumed surface, public API/ABI/FFI/binding surfaces, ownership, pointer provenance, sanitizer, and command contract entries | C source, C headers, build metadata, package metadata, generated bindings, FFI code, tests, benchmarks, warning and sanitizer policy, and directly synchronized docs | target drift, C23 support overclaim, source API break, binary ABI break, pointer provenance bug, lifetime bug, allocation overflow, strict-aliasing violation, sanitizer gap, generated-binding drift, FFI memory bug, unverified performance claim, or portable-release flag break | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Owning target, C standard/dialect/compiler/libc identity, highest compatibility risk, ownership/lifetime/provenance/UB/concurrency/performance notes, public API/ABI/FFI/binding impact, verification, and remaining C risk |
+| Ada or SPARK source, GNAT project or Alire metadata, strong domain types, subtypes, predicates, contracts, representation clauses, unchecked or foreign boundaries, tasking, protected objects, rendezvous, Ravenscar or Jorvik profiles, GNATprove evidence, tests, or Ada deployment behavior are created or changed | `.mustflow/skills/ada-code-change/SKILL.md` | Language/compiler/runtime/target identity, project and package metadata, assertion and runtime-check policies, public package surface, type/range/array/contract ledger, SPARK and proof boundary, representation and unsafe ledger, concurrency and resource ledger, and command contract entries | Ada and SPARK source, package specs and bodies, project and Alire metadata, contracts, proof annotations, representation and FFI adapters, tasking code, tests, and directly synchronized docs | standard-extension confusion, compile-time-versus-runtime-check overclaim, subtype semantic leak, arithmetic or array-bound failure, predicate or invariant gap, proof assumption debt, unchecked representation leak, suppressed-check erroneous execution, alias or storage leak, protected-operation blocking, barrier stall, rendezvous deadline mistake, task shutdown hang, priority ceiling error, Ada 2022 feature overclaim, or false certification claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Language/compiler/runtime/target identity, type/range/array/contract/proof/ownership/representation/FFI/tasking decisions, evidence classification, verification, and remaining Ada or SPARK risk |
+| Pascal or Object Pascal source, Delphi or Free Pascal compiler behavior, RAD Studio or Lazarus projects, RTL, VCL, FireMonkey, LCL, generics, managed records, packages, DLLs, threading, synchronization, async I/O, C or C++ interop, tests, or deployment behavior are created or changed | `.mustflow/skills/pascal-code-change/SKILL.md` | Compiler/RTL/IDE/language-mode/target identity, project and package metadata, application model, directive and check policies, public unit and managed-type surface, concurrency ledger, ABI ledger, and command contract entries | Pascal source, project and package metadata, compiler directives, units, forms, managed records, concurrency and async code, native bindings and C wrappers, tests, ABI probes, and directly synchronized docs | Delphi-FPC semantic conflation, stable-development track confusion, directive leak, decorative type identity, disabled range check, enum or set persistence drift, managed-record double release, UI wait deadlock, queued use-after-free, cancellation lifetime bug, worker exception loss, false atomicity, condition signal loss, lock reentrancy, FPC thread-manager ordering, calling-convention or layout mismatch, allocator mismatch, managed ABI leak, callback lifetime bug, COM apartment misuse, or unsafe DLL unload | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Compiler/RTL/IDE/language-mode/target tracks, type/range/enum/set/managed-value/ownership/threading/cancellation/ABI/shutdown decisions, compatibility gates, verification, and remaining Pascal risk |
 | POSIX sh, Bash, shell scripts, shebangs, GitHub Actions `run` blocks, package script shell snippets, grep/sed/awk/find/xargs pipelines, shell quoting, word splitting, globbing, traps, exit-status handling, portability, or shell security behavior are created or changed | `.mustflow/skills/shell-code-change/SKILL.md` | Effective shell, dialect target, invocation path, parser and expansion ledger, dynamic input boundaries, file and stream boundary, cleanup and failure expectations, changed files, and command contract entries | Shell scripts, CI run blocks, package or Make shell snippets, docs examples, shell tests, path-processing pipelines, and directly synchronized docs | sh/Bash dialect drift, hidden CI shell default, word-splitting or globbing bug, newline-unsafe filename flow, `set -e` or pipeline false green, GNU/BSD/BusyBox portability break, GitHub Actions expression injection, secret leak, destructive glob, temp-file race, or CRLF shebang failure | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check`, `line_endings_check` | Shell execution and dialect boundary, parser/expansion utility ledger, POSIX/Bash/GNU/BSD/BusyBox/GitHub Actions decisions, quoting/status/file/temp/security verification, and remaining shell risk |
 | Node.js runtime code, package manager ownership, module format, package entry metadata, native dependencies, Node test runner behavior, TypeScript execution mode, or deployment runtime support is created or changed | `.mustflow/skills/node-code-change/SKILL.md` | Node version signals, package manager and lockfile owner, module/package metadata, TypeScript loader, test runner, native dependency, deployment target, and command contract entries | Node runtime code, package metadata, lockfiles, scripts, CI or Docker runtime declarations, test runner config, native dependency handling, docs examples, and directly synchronized package surfaces | newest-Node assumption, package manager drift, ESM/CJS break, blocked deep import, native dependency break, Node native TypeScript overclaim, test runner migration risk, deployment mismatch, or permission-model overclaim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Runtime and package manager decision, module/package entry notes, TypeScript/test runner notes, native/deployment risks, verification, and remaining Node.js risk |
 | Bun runtime code, `Bun.serve`, Elysia-on-Bun server behavior, Bun package manager behavior, `bun.lock`, `bunfig.toml`, Bun test runner behavior, Bun bundling, Bun compile, Bun TypeScript execution, Docker deployment, or Bun-specific APIs are created or changed | `.mustflow/skills/bun-code-change/SKILL.md` | Bun role signals, `package.json`, Bun and non-Bun lockfiles, `bunfig.toml`, CI/Docker Bun setup, TypeScript config, Bun APIs, server timeout and WebSocket settings, compile target, native dependency signals, and command contract entries | Bun runtime code, server config, package manager metadata, lockfiles, `bunfig.toml`, scripts, tests, bundler or compile config, TypeScript/declaration pipeline, Docker/deploy config, package metadata, and directly synchronized docs | Bun role confusion, lockfile drift, trusted dependency overgrant, runtime/package-manager conflation, Bun TypeScript typecheck overclaim, Bun build declaration gap, server timeout or WebSocket backpressure gap, compile target break, Node compatibility break, shebang mismatch, Docker/PORT drift, observability loss, or native binary break | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Bun role classification, lockfile/trust notes, runtime/type/build/test/deploy notes, Node compatibility risks, verification, and remaining Bun risk |
+| Deno runtime code, `deno.json`, permissions, `deno.lock`, JSR or npm imports, tasks, tests, `Deno.serve`, Workers, WebSockets, compile or desktop output, Node compatibility, Deno Deploy, or related CI and release behavior changes | `.mustflow/skills/deno-code-change/SKILL.md` | Deno runtime and feature tracks, config and lockfile, module ledger, permission ledger, task/test/Worker owners, compile target, Deploy ledger, changed files, and command contract entries | Deno source, config, lockfile, imports, permissions, tasks, tests, servers, Workers, compile/desktop output, Deploy config, CI, docs, and package metadata | run/check confusion, unlocked module graph, package or adapter version mixing, broad permission grant, Worker sandbox illusion, unbounded concurrency, isolate-local correctness state, native addon mismatch, Deploy runtime drift, Classic migration loss, context secret leak, or unverified current-state claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Deno runtime, feature, permission, module, task, test, Worker, compile, deployment, publication, verification, and remaining Deno risk |
 | Dockerfiles, `.dockerignore`, Docker Compose files, BuildKit or buildx behavior, container image metadata, tags, entrypoints, health checks, Docker CI workflows, image security scanning, SBOM or provenance settings, registry publishing, or container runtime validation are created or changed | `.mustflow/skills/docker-code-change/SKILL.md` | Docker surfaces, project image shape, base image and platform signals, build context and cache signals, runtime contract, security and supply-chain contract, and command contract entries | Dockerfiles, `.dockerignore`, Compose files, container CI workflow snippets, image metadata, package tests, docs examples, template metadata, and directly synchronized skill routes | cache breakage, secret leak, root runtime, host access escape, dev dependency in final image, mutable tag drift, untrusted CI publish, missing SBOM/provenance, unverified runtime, or false production-readiness claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Docker surface classification, image/base/cache/stage decisions, secret/user/runtime/Compose/CI supply-chain notes, verification, and remaining Docker risk |
-| TypeScript source, declarations, tsconfig, package exports, module resolution, project references, type-check performance, public API, compiler-version behavior, TypeScript 6-to-7 migration surfaces, TypeScript 7 RC or nightly tooling, runtime data validation, or TypeScript tests are created or changed | `.mustflow/skills/typescript-code-change/SKILL.md` | TypeScript config, compiler track, package entry metadata, target runtime, changed files, declaration, project references, package graph, TS6 API, TS7 RC, and optional TS7 nightly surfaces, and command contract entries | TypeScript source, declarations, compiler config, exports, tests, project-reference and type-graph notes, compiler-track comparison notes, and directly synchronized docs | weakened type safety, module drift, public API drift, DTO/domain drift, runtime validation gap, type-graph bloat, path alias boundary bypass, unverified declaration output, TypeScript 6 deprecation suppression, TS7 RC over-adoption, TS7 nightly over-adoption, or compiler API track drift | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | Runtime, module, type, public API, project-reference, type-performance, compiler-version, RC, nightly, and API-track boundary checked, changes made, verification, and remaining TypeScript risk |
+| TypeScript source, declarations, tsconfig, package exports, module resolution, project references, type-check performance, public API, compiler-version behavior, TypeScript 6-to-7 migration surfaces, TypeScript 7 stable, development, API-compatibility, or native-preview tooling, runtime data validation, or TypeScript tests are created or changed | `.mustflow/skills/typescript-code-change/SKILL.md` | TypeScript config, compiler track, package entry metadata, target runtime, changed files, declaration, project references, package graph, TS7 stable compiler, TS6 API compatibility, optional `typescript@next`, native-preview, and prerelease surfaces, and command contract entries | TypeScript source, declarations, compiler config, exports, tests, project-reference and type-graph notes, compiler-track comparison notes, and directly synchronized docs | weakened type safety, module drift, public API drift, DTO/domain drift, runtime validation gap, type-graph bloat, path alias boundary bypass, unverified declaration output, TypeScript 6 deprecation suppression, development or native-preview over-adoption, stale RC guidance, or compiler API track drift | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | Runtime, module, type, public API, project-reference, type-performance, stable compiler, development, native-preview, prerelease, and API-compatibility boundary checked, changes made, verification, and remaining TypeScript risk |
 | JavaScript source, module format, package entry, browser or Node runtime, dependency usage, Promise handling, bundler config, or JavaScript tests are created or changed | `.mustflow/skills/javascript-code-change/SKILL.md` | Package metadata, module system, runtime target, entrypoints, changed files, and command contract entries | JavaScript source, package exports, bundler config, dependencies, tests, and docs examples | runtime API leakage, ESM/CJS drift, discarded Promise, dependency bloat, or broken package entry | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | Runtime and module boundary checked, async and dependency notes, verification, and remaining JavaScript risk |
 | Java source, Spring Boot or JPA transaction code, Maven or Gradle metadata, JVM toolchains, bytecode targets, binary compatibility surfaces, modules, reflection, serialization, final-field mutation, virtual threads, executors, `ThreadLocal` or `ScopedValue`, structured concurrency, HTTP clients, applets or legacy desktop APIs, GC choice, allocation pressure, JVM flags, JFR, JMH, container memory or CPU behavior, tests, benchmarks, public APIs, or Java/JDK version-gated features are created or changed | `.mustflow/skills/java-code-change/SKILL.md` | Build metadata, Maven or Gradle toolchain, source and target release, runtime matrix, JDK vendor and support policy, public API surface, module/reflection/serialization/SPI surfaces, Spring transaction and security context, concurrency and JVM runtime context, allocation evidence, changed files, and command contract entries | Java source, Spring transaction and security code, build metadata, module descriptors, public APIs, reflection and serialization adapters, SPI files, virtual-thread or scoped-context code, executors, JVM flags, GC or container notes, tests, benchmarks, and docs examples | unsupported JDK feature, GA/LTS confusion, preview or incubator lock-in, bytecode drift, public API break, binary compatibility break, missing test discovery, Spring transaction leak, mass assignment, unprotected matcher path, reflection or final-field failure, module `opens` sprawl, serialization drift, virtual-thread misuse, executor backpressure gap, `ThreadLocal` memory leak, unowned structured task, HTTP/3 overclaim, applet removal break, allocation folklore, GC folklore, container OOM, false benchmark, or JVM flag drift | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | Version/toolchain/runtime boundary, public API and binary compatibility, Spring/JPA/security, module/reflection/serialization/SPI, virtual-thread/scoped-context/structured-concurrency/executor, HTTP, allocation, GC/JVM flag/AOT/container/JFR/JMH boundary checked, verification, and remaining Java risk |
 | Python source, package metadata, runtime version, import layout, architecture boundaries, type checking, async tasks, exception/logging/retry behavior, collection performance, pytest fixtures or mocks, linting, CLI entry points, or tests are created or changed | `.mustflow/skills/python-code-change/SKILL.md` | Python version source, packaging files, build backend or package-manager owner, import layout, architecture boundary, lint/type/test config, async/failure/performance surface, changed files, and command contract entries | Python source, packaging metadata, imports, type hints, adapters, async ownership, exception/logging/retry code, collection hot paths, tests, and docs examples | unsupported syntax, import hacks, packaging drift, framework or ORM leakage into domain code, false type safety, unowned task, swallowed cancellation, retry storm, hidden fallback, copy-heavy hot path, fixture state leak, bare mock lie, or weakened lint/type checks | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | Runtime, packaging, import, architecture, type, async, failure, performance, and test boundary checked, verification, and remaining Python risk |
+| PHP source, Composer packages, Laravel or Symfony applications, Eloquent or Doctrine persistence, PHP-FPM, OPcache, Octane, RoadRunner, Swoole, Messenger or queue workers, authentication, sessions, uploads, database concurrency, tests, or PHP deployment behavior are created or changed | `.mustflow/skills/php-code-change/SKILL.md` | PHP and SAPI tracks, Composer and extension evidence, framework/ORM versions, execution model, state/security/data/runtime ledgers, changed files, and command contract entries | PHP source, Composer metadata, framework and ORM code, auth/session/upload paths, FPM/OPcache/web-server/container config, workers, tests, docs, and deployment metadata | hidden container dependencies, persistent-process state leak, ORM boundary leakage, N+1 or hydration explosion, transaction-side-effect race, loose comparison, unsafe upload or deserialization, session fixation, cache tenant leak, FPM overcommit, stale OPcache, worker reload gap, or unverified performance claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | PHP runtime, Composer, framework, ORM, state, security, data, FPM, worker, deployment, verification, and remaining PHP risk |
 | PowerShell scripts, modules, command examples, `pwsh` invocations, native-command wrappers, quoting, here-strings, splatting, regex, wildcard, replacement strings, or PowerShell argument passing are created or changed | `.mustflow/skills/powershell-code-change/SKILL.md` | PowerShell version and invocation path, parser layers, native-command boundary, dynamic input boundaries, changed files, and command contract entries | PowerShell scripts, modules, package scripts, CI snippets, docs examples, native-command wrappers, tests, and directly synchronized docs | parser-layer confusion, quote loss, variable over-expansion, metacharacter interpretation, native argv drift, command injection, `--%` overuse, or cross-shell `-Command` breakage | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | PowerShell version and invocation boundary, parser ledger, string/here-string/regex/wildcard/replacement/native argv decisions, verification, and remaining PowerShell risk |
 | Go source, modules, workspaces, package APIs, package layout, `internal` boundaries, interfaces, structs, errors, goroutines, channels, context propagation, HTTP clients or servers, Gin engines, router groups, middleware chains, request binding, validation, graceful shutdown, reverse proxies, JSON encoding, filesystem roots, network addresses, runtime limits, profiling, benchmarks, tools, tests, or generated-code boundaries are created or changed | `.mustflow/skills/go-code-change/SKILL.md` | Module files, workspace policy, Go version support, full package files, tests, public API surface, package ownership, concurrency owner, runtime/deployment context, Gin or framework version and route/middleware/binding context, changed files, and command contract entries | Go packages, module and workspace metadata, internal boundaries, interfaces, structs, errors, concurrency code, HTTP/shutdown/proxy code, Gin route, middleware, context, binding and validation code, JSON encoding, filesystem and network helpers, runtime settings, profiling and benchmarks, tests, tools, and docs examples | unnecessary abstraction, module boundary drift, unsupported Go feature, context loss, goroutine leak, missing timeout, unsafe shutdown, Gin context reuse bug, unsafe middleware order, trusted-proxy drift, binding or validation bypass, body-size mistake, JSON contract drift, filesystem traversal, IPv6 host-port bug, runtime tuning drift, performance folklore, error contract drift, or dependency drift | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | Package, API, module/workspace, Go version, context, concurrency, runtime, HTTP/shutdown, Gin route/middleware/context/binding, JSON, filesystem, profiling, tool, and error boundary checked, verification, and remaining Go risk |
 | Rust source, Cargo metadata, features, traits, errors, ownership, borrowing, lifetimes, `Clone`, `Rc`, `Arc`, `Mutex`, `RefCell`, async tasks, channels, cancellation, unsafe code, allocation, zero-copy, tests, examples, benchmarks, release profiles, MSRV, toolchain declarations, standard-library APIs, or public crate APIs are created or changed | `.mustflow/skills/rust-code-change/SKILL.md` | Cargo metadata, feature flags, public exports, ownership map, error convention, async runtime, task and channel policy, unsafe invariants, allocation or benchmark evidence, `rust-version`, edition, toolchain, workspace policy, changed files, and command contract entries | Rust source, Cargo metadata, features, errors, traits, ownership signatures, async task/channel code, tests, examples, benchmarks, profiles, and docs | clone or shared-state aliasing, lifetime debt, error opacity, unsupported Rust feature, feature drift, Cargo resolver drift, async runtime mixing, task or channel leak, zero-copy retention bug, allocation folklore, unsafe invariant loss, release-profile overclaim, or public API breakage | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | Ownership, MSRV, standard-library API, Cargo feature, error, async task/channel/cancellation, allocation, unsafe, release-profile, and public API boundary checked, verification, and remaining Rust risk |
@@ -607,6 +614,7 @@ routes. Event routes stay inactive until their event occurs.
 | Source anchors are added, revised, reviewed, or used to mark a module boundary | `.mustflow/skills/source-anchor-authoring/SKILL.md` | Target files, anchor reason, nearby anchors, source-anchor policy, and validation surface | Source anchors and directly related workflow docs or comments | comment bloat, authority drift, false verification claims, or hidden module pressure | `mustflow_check`, `docs_validate_fast` | Anchor placement decision, field choices, module-boundary handoff, and verification |
 | Changed files need risk classification and verification selection | `.mustflow/skills/diff-risk-review/SKILL.md` | Changed-file list, diff summary, and task goal | Changed surfaces and verification report | under- or over-verification | `changes_status`, `changes_diff_summary`, `test`, `test_related`, `test_audit`, `lint`, `build`, `docs_validate`, `mustflow_check` | Risk level, verification choice, rollback notes |
 | Runtime performance, hot paths, user-perceived latency, p95/p99 tail latency, throughput, infrastructure cost, memory, GC pressure, CPU cache locality, allocation churn, bundle size, payload size, HTTP delivery, compression, streaming latency, media loading, build time, filesystem scanning, process spawning, IPC/RPC/DB/API fan-out, N+1 work, repeated filtering/sorting/parsing/serialization, caching, pagination, queues, virtualization, backpressure, or performance claims are planned, edited, reviewed, or reported | `.mustflow/skills/performance-budget-check/SKILL.md` | Performance surface, hot-path shape, input scale, measurement method, baseline and result when available, correctness boundaries, isolation surface, and command contract entries | Data access, lookup indexes, grouping, projection, batching, scheduling, rendering, cache boundaries, queues, concurrency limits, cancellation, measurements, docs, tests, and directly synchronized templates | invented budgets, stale measurements, hidden O(n²), misleading Big-O or data-structure claims, N+1 queries or RPC, unbounded materialization, repeated serialization, object churn, GC pressure, broad rerender, false compression win, buffered stream latency, cache stampede, key explosion, queue backlog, pool exhaustion, stale async result, or speed-over-correctness tradeoff | `changes_status`, `changes_diff_summary`, `build`, `test_related`, `docs_validate_fast`, `test_release`, `mustflow_check` | Hot path, ROI priority, cost multiplier, measurement or complexity evidence, semantic preservation, optimization applied, verification, and remaining performance risk |
+| Performance counters, timers, histograms, cache ratios, CPU PMU evidence, batch or queue throughput, communication IPC outcomes, cross-process latency, cancellation cost, benchmark results, profiler artifacts, regression gates, or performance logs need review for semantic correctness, concurrency safety, comparable evidence, coordinated-omission resistance, and sensitive-data containment | `.mustflow/skills/performance-measurement-integrity-review/SKILL.md` | Measurement question and decision, event lifecycle, unit and denominator ledger, time and clock-domain model, concurrency and snapshot model, workload and comparison evidence, CPU event and scheduling evidence, cross-layer phase evidence, artifact and telemetry boundary, tests or schemas, and configured command intents | Event definitions, lifecycle counters, units, histograms, operation context, snapshot and reset logic, batch and queue stage metrics, cancellation resource ledgers, CPU counter normalization, PMU grouping checks, communication outcome conservation, cross-layer phase closure, benchmark schemas, comparison rules, budgets, artifact sanitization, canary scans, focused tests, and directly synchronized templates | logical command and attempt collapse, submit counted as start, inconsistent atomic snapshot, thread-local async timer, cross-process monotonic subtraction, wall/CPU/wait collapse, coordinated omission, instrumentation contention, exporter-biased tail, ratio averaging, CPU IPC and communication IPC ambiguity, multiplexed PMU ratio, cache-hit-rate theater, hybrid-core or NUMA drift, request/key/byte cache-rate collapse, batch/item weighting drift, useful/attempted throughput collapse, start/finish cohort mismatch, partial-success collapse, duplicate terminal metric, client/server outcome overwrite, layer-p99 addition, invented presentation boundary, cancellation boolean theater, rerun-until-pass, incomparable benchmark, raw path or remote leakage, unsafe profile artifact, or unverified regression gate | `changes_status`, `changes_diff_summary`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Performance measurement boundary reviewed, event/lifecycle/unit/clock/snapshot/CPU-counter/cache/communication-IPC/cross-layer/batch/queue/cancellation/benchmark/privacy findings, evidence level, verification, and remaining measurement-integrity risk |
 | Installed app startup needs launch-path review for Android, iOS, React Native, Flutter, Tauri mobile, Electron, desktop app shells, cold start, warm start, hot start, splash, first frame, fully usable state, TTID, TTFD, `reportFullyDrawn()`, Android Vitals, Xcode Organizer, Instruments, Application or AppDelegate work, ContentProvider auto-init, AndroidX App Startup, dependency injection graph creation, SDK initialization, static initializers, main-thread disk or network work, cached startup snapshots, auth or config gates, launch migrations, first-screen layout or assets, custom fonts, Baseline Profile, Startup Profile, Macrobenchmark, Perfetto, Hermes, import graphs, deferred components, shader warmup, on-demand modules, and post-first-frame work queues | `.mustflow/skills/app-startup-performance-review/SKILL.md` | Startup scope ledger, measurement ledger, launch critical-path ledger, main-thread blocking ledger, first usable state ledger, first-screen render ledger, deferred work ledger, platform optimization ledger, existing tests, package surfaces, synchronized docs or templates, and configured command intents | Application or AppDelegate cleanup, auto-init control, lazy or scoped DI and SDK setup, static initializer cleanup, main-thread I/O removal, cache snapshot startup, auth or config gate deferral, maintenance-work scheduling, first-screen simplification, asset and font reductions, Android startup profiles, iOS launch tooling, hybrid import or preload cleanup, deferred queue ownership, startup tests, and directly synchronized docs or templates | splash masking, early `reportFullyDrawn()` metric gaming, debug-only measurement, simulator-only or flagship-only startup claims, app delegate warehouse, ContentProvider surprise init, eager DI graph construction, SDK auto-init, static initializer cost, main-thread disk or network, network-first startup dependency, launch migration or cleanup stall, heavy first screen, oversized launch asset, custom font bloat, React Native top-level import bloat, Flutter shader surprise, unowned deferred work, or missing release/device/profiler evidence | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | App startup boundary reviewed, first frame and fully usable state, measurement evidence, critical path findings, lazy-init and defer decisions, platform tooling, verification, and remaining app-startup performance risk |
 | Desktop background process stability needs recovery review for Windows services, SCM failure actions, preshutdown handlers, service SIDs, Session 0 boundaries, scheduled tasks, macOS LaunchDaemons or LaunchAgents, launchd daemon or agent placement, launchd-managed helpers, Linux systemd user or system units, restart policy, start-rate limits, Electron main or utility processes, WebView helpers, tray apps, sync workers, local daemons, auto-start helpers, updaters, crash recovery, durable checkpoints, single-instance locks, data-directory locks, stale locks, OS supervisor configuration, restart backoff, PID-only health checks, progress heartbeats, job leases, idempotent jobs, atomic file writes, shutdown-only persistence, exit-code semantics, UI and worker lifecycle separation, sleep or resume, monotonic time, local IPC authorization, environment and working-directory determinism, least privilege, early logs, crash reporting, update drain, lifecycle tests, or safe mode | `.mustflow/skills/desktop-background-process-stability-review/SKILL.md` | Process ledger, recovery ledger, instance ledger, supervisor ledger, health ledger, lifecycle ledger, security ledger, existing tests, telemetry or crash evidence, package surfaces, synchronized docs or templates, and configured command intents | Durable checkpoints, startup recovery, stale-lock cleanup, data-directory locks, early single-instance lock acquisition, lease states, idempotency keys, atomic write-temp/flush/fsync/rename paths, progress health checks, heartbeats with job and offset fields, supervisor restart backoff and start-rate limits, user-stop versus crash-restart state, UI/worker process split, launchd daemon/agent placement, Session 0 IPC separation, sleep/resume revalidation, monotonic timers, IPC ACLs and schema versions, explicit environment, least-privilege service configuration, early crash/log setup, update drain, safe mode, lifecycle tests, and directly synchronized docs or templates | immortal-process fantasy, memory-only progress, restart that re-enters corruption, late single-instance lock, process lock mistaken for resource lock, one processing boolean, duplicate side effect after lease recovery, half-written local JSON, shutdown-hook-only persistence, hand-rolled mini supervisor, unbounded crash loop, user stop ignored by scheduled restart, PID-as-health, `last_seen_at` heartbeat theater, UI and worker lifecycle tangle, service UI from Session 0, daemon/agent mismatch, daemonizing under launchd, boot-order network assumption, wall-clock lease timer, trusted localhost IPC, inherited PATH or working directory, overprivileged helper, missing early startup logs, crash reporter started too late, one-shot migration, update deletes rollback path too early, untested sleep/resume, or no safe mode | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Desktop background process stability boundary reviewed, process/recovery/instance/supervisor/health/heartbeat/lease/atomic-write/shutdown/platform/power/time/IPC/environment/privilege/logging/crash/update/lifecycle/safe-mode findings, verification, and remaining desktop background stability risk |
 | Desktop automatic update safety needs review for Electron autoUpdater, electron-builder feeds, Squirrel.Windows first-run locks, Sparkle appcasts, Tauri updater, macOS signed or notarized updates, Windows installers, Linux desktop packages, update endpoints, immutable artifacts, `.sig`, `.blockmap`, `latest.yml`, `latest.json`, `appcast.xml`, metadata pointer order, CDN cache policy, staged rollout, deterministic canary buckets, alpha/beta/stable channels, update kill switches, remote disable policy, signatures, hash verification, signing-key custody, key rotation, certificate expiry, notarization gates, single-flight update checks, quit-and-install timing, skipped-version upgrade paths, same-version republish recovery, updater telemetry, crash gates, or installed-app update smoke tests | `.mustflow/skills/desktop-auto-update-safety-review/SKILL.md` | Updater stack ledger, state-machine ledger, artifact ledger, trust ledger, rollout ledger, installed-client ledger, observability ledger, current updater code or release metadata, package surfaces, synchronized docs or templates, and configured command intents | Check/download/verify/stage/apply/relaunch state machines, immutable artifact names, artifact-before-metadata publishing order, latest pointer cache rules, signature and hash verification, signing-key custody, key rotation practice, certificate and notarization gates, physical channel separation, deterministic staged rollout, jitter and backoff, server-side no-update kill switch, single-flight update checks, Squirrel first-run delay, quit-and-install safety, installed old-version upgrade matrix, idempotent local migrations, old artifact retention, update telemetry, crash-free rollout gates, and directly synchronized docs or templates | remote code execution treated as convenience, mutable published artifact, metadata-before-artifact 404 wave, stale CDN latest pointer, hash or signature mismatch, release-server private key, unpracticed key rotation, certificate expiry surprise, stable client reading beta feed, random per-request canary, no kill switch, broken updater requires updater update, duplicate `checkForUpdates()` downloads, first-run installer lock, forced restart data loss, dev-mode updater test, skipped-version migration break, same-version hotfix fantasy, deleted old delta, download-complete-as-success, or missing installed-app smoke evidence | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Desktop auto-update boundary reviewed, updater stack/state/artifact/trust/rollout/installed-client/migration/telemetry/kill-switch findings, verification, skipped updater diagnostics, and remaining desktop auto-update risk |
@@ -670,9 +678,9 @@ routes. Event routes stay inactive until their event occurs.
 | DuckDB-specific embedded OLAP database use, `.duckdb` file ownership, concurrency, language bindings, Appender usage, CSV/Parquet/JSON ingestion, query determinism, timestamp behavior, memory and temp spill settings, profiling, indexes, CTEs, macros, or DuckDB runtime behavior is created, changed, reviewed, or reported | `.mustflow/skills/duckdb-code-change/SKILL.md` | DuckDB role, version or track, binding, extension inventory, file and process ownership, ingest/export shape, query shape, memory and temp spill settings, profiling evidence, changed files, and command contract entries | DuckDB SQL, schemas, query builders, connection setup, binding-specific code, ingest/export code, Appender code, settings, fixtures, tests, docs, and synchronized templates | SQLite-like OLTP assumption, native file multi-process write bug, hidden global connection, thread/process confusion, Appender visibility overclaim, CSV sampling loss, `ignore_errors` data loss, schema-drift memory spike, `SELECT *` Parquet scan, partition file explosion, missing `ORDER BY`, order-sensitive aggregate drift, TIMESTAMPTZ timezone surprise, memory-limit overclaim, temp spill disk-full, overwritten profiling output, ART-index theater, CTE materialization surprise, window memory spike, unsafe macro input, or unverified query-plan claim | `changes_status`, `changes_diff_summary`, `test_related`, `test`, `lint`, `build`, `docs_validate_fast`, `test_release`, `mustflow_check` | DuckDB role/version/binding, file/process ownership, concurrency/Appender/import/export, deterministic SQL, memory/temp/profiling, query-plan evidence, verification, and remaining DuckDB risk |
 | Keyword search, full-text search, Elasticsearch, OpenSearch, Lucene-style indexing, search APIs, indexing pipelines, source maps, metadata taxonomy, negative metadata, exact keyword fields, aliases, bulk indexing, refresh visibility, analyzers, mappings, synonyms, autocomplete, pagination, shard failures, search quality, or search performance are created, changed, reviewed, or failing | `.mustflow/skills/search-index-integrity-review/SKILL.md` | Symptom classification, source-to-search ledger, query contract ledger, index contract ledger with taxonomy/source-map fields, metadata key budget, stable source/doc/chunk ids, lifecycle and effective-date fields, quality ledger, performance ledger, privacy ledger, changed files, and command contract entries | Search canaries, indexing ledgers, bulk item error handling, alias checks, mapping and analyzer fixtures, metadata taxonomy checks, frontmatter schema checks, controlled-vocabulary fixtures, exact-keyword fixtures, negative-metadata filters, filter-only versus LLM-visible metadata checks, exact-versus-full-text tests, tenant and permission filters, golden-set tests, synonym regression tests, pagination guards, query and miss-log metrics, docs, and directly synchronized templates | cluster-green theater, batch-level bulk success, source/index count illusion, write alias drift, partial shard result, direct/API/UI mismatch, wrong keyword/text field, analyzer drift, uncontrolled tag vocabulary, unbounded metadata keys, file path treated as status, synonym regression, negative metadata ignored, missing source map, stale index hash, rank eyeballing, profile misuse, query fingerprint leak, shard fan-out, cache-only benchmark, refresh overuse, segment merge backlog, disk watermark write block, deep pagination, oversized fetch, or private query/document leak | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Search index integrity reviewed, source-to-search/query/index/quality/performance/privacy ledgers, taxonomy/metadata-budget/exact-keyword/source-map/query-log findings, fix or recommendation, evidence level, verification, and remaining search-index risk |
 | Vector search, semantic search, RAG retrieval, embedding generation, preprocessing, chunking, contextual headers, synthetic questions, chunk text variants, vector schema, collection, namespace, tenant, named vector, metadata payload, filter, ANN index, exact-versus-approximate search, hybrid search, reranking, recall, latency, quantization, HNSW, IVF, pgvector, Qdrant, Milvus, Weaviate, OpenSearch kNN, or retrieval golden-set behavior is created, changed, reviewed, or failing | `.mustflow/skills/vector-search-integrity-review/SKILL.md` | Retrieval symptom, query contract ledger, ingestion ledger with stable source/doc/chunk ids, parent document genealogy, text variants and hashes, quality ledger, performance ledger, privacy ledger, changed files, and command contract entries | Embedding, preprocessing, and chunker versioning, vector validation, deterministic ids, contextual retrieval headers, synthetic question fields, original/index/prompt/embedding text separation, namespace and tenant selection, metadata payload field typing, metadata indexes, ACL prefilters, filter construction, exact-search checks, ANN parameters, lexical safeguards for exact identifiers, hybrid score ledgers, RRF or MMR settings, reranker candidates, golden-set tests, synthetic fixtures, metrics, docs, and directly synchronized templates | vector-DB scapegoating, wrong embedding dimension, model revision drift, contextual retrieval text treated as source, synthetic question cited as evidence, unstable source/doc/chunk lineage, tiny chunk subject loss, huge chunk semantic averaging, overlap top-k duplication, filter post-candidate loss, metadata type drift, ACL applied after retrieval, tenant leak, duplicate chunk ids, stale deletes, content hash or embedding hash drift, metric or normalization mismatch, ANN tuning before exact-search proof, quantization recall loss, reranker candidate starvation, hybrid score misuse, exact identifiers smoothed into embedding-only text, deep ANN pagination, raw vector or document leak, or unmeasured p95 latency | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Vector search integrity reviewed, retrieval/query/ingestion/quality/performance/privacy ledgers, exact-versus-ANN/filter/text-variant/contextual-header/lineage/hybrid/rerank findings, fix or recommendation, evidence level, verification, and remaining vector-search risk |
-| Dependency versions, lockfiles, package-manager metadata, workspace constraints, runtime engines, peer dependencies, optional dependencies, security advisory fixes, vulnerability scanner alerts, generated dependency output, framework plugins, dev servers, test runners, TypeScript compiler tracks, CI actions, Docker base images, package manager behavior, or toolchain versions are upgraded, downgraded, pinned, widened, regenerated, reviewed, or reported | `.mustflow/skills/dependency-upgrade-review/SKILL.md` | Dependency name, old and new versions or ranges, direct or transitive path, ecosystem and package manager, declaration files, lockfiles, runtime or toolchain files, advisory or release-note evidence, exploit preconditions, generated outputs, callers, docs, package output, Docker, CI, dev-server or test-UI exposure, protocol role, or TypeScript compiler-track surfaces, and command contract entries | Package declarations, lockfiles, generated outputs, compatibility code, tests, docs, package metadata, Docker or CI files, dev-server/test-runner config notes, TypeScript compiler-track notes, and directly synchronized examples | lockfile churn, hidden transitive replacement, peer or engine break, module-format drift, native or optional package break, framework or generator output drift, devDependency advisory dismissed despite exposure, unsafe broad security update, weakened tests, Docker or CI runtime drift, protocol DoS misclassified, TS7 RC over-adoption, TS7 nightly over-adoption, or unreviewed supply-chain change | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Upgrade reason, ecosystem surface, direct and transitive graph changes, compatibility classification, runtime/peer/engine/module/feature/platform/generated-output/compiler-track risks, advisory exploit preconditions, synchronized surfaces, verification, and remaining dependency-upgrade risk |
+| Dependency versions, lockfiles, package-manager metadata, workspace constraints, runtime engines, peer dependencies, optional dependencies, security advisory fixes, vulnerability scanner alerts, generated dependency output, framework plugins, dev servers, test runners, TypeScript compiler tracks, CI actions, Docker base images, package manager behavior, or toolchain versions are upgraded, downgraded, pinned, widened, regenerated, reviewed, or reported | `.mustflow/skills/dependency-upgrade-review/SKILL.md` | Dependency name, old and new versions or ranges, direct or transitive path, ecosystem and package manager, declaration files, lockfiles, runtime or toolchain files, advisory or release-note evidence, exploit preconditions, generated outputs, callers, docs, package output, Docker, CI, dev-server or test-UI exposure, protocol role, or TypeScript compiler-track surfaces, and command contract entries | Package declarations, lockfiles, generated outputs, compatibility code, tests, docs, package metadata, Docker or CI files, dev-server/test-runner config notes, TypeScript compiler-track notes, and directly synchronized examples | lockfile churn, hidden transitive replacement, peer or engine break, module-format drift, native or optional package break, framework or generator output drift, devDependency advisory dismissed despite exposure, unsafe broad security update, weakened tests, Docker or CI runtime drift, protocol DoS misclassified, TypeScript development or native-preview over-adoption, stale RC guidance, or unreviewed supply-chain change | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Upgrade reason, ecosystem surface, direct and transitive graph changes, compatibility classification, runtime/peer/engine/module/feature/platform/generated-output/compiler-track risks, advisory exploit preconditions, synchronized surfaces, verification, and remaining dependency-upgrade risk |
 | Dependency, package, workspace package contract, `package.json` dependency role, runtime, framework, tool, command, plugin, service, platform capability, package `exports`, package `imports`, public type dependency, peer host contract, optional integration, workspace protocol range, TypeScript path alias, build graph edge, test graph edge, deploy or prune package edge, release graph edge, supported-version policy, security patch path, ecosystem maturity claim, maintainer-risk assumption, runtime portability claim, edge or serverless compatibility claim, critical-path library choice, package script, lifecycle hook, binary download, lockfile, audit result, or supply-chain-sensitive dependency surface is assumed, added, removed, imported, invoked, installed, audited, or documented | `.mustflow/skills/dependency-reality-check/SKILL.md` | Assumed dependency or capability, package role, declaration files, emitted JS imports, public declaration files, `dependencies`/`devDependencies`/`peerDependencies`/optional metadata, workspace ranges, package `exports` and `imports`, `tsconfig.paths`, bundler and test resolver aliases, package manager graph, affected build/test graph evidence, deploy or prune artifact expectations, release graph evidence, version or feature expectation, role criticality, supported-version or end-of-life evidence, patchability expectation, runtime compatibility boundary, maintainer and ecosystem evidence when available, lockfile entry, package script or lifecycle hook, audit or provenance evidence, and relevant command intents | Package metadata, lockfiles, imports, scripts, command contracts, docs, tests, package entrypoints, public declaration files, boundary lint rules, task graph inputs, deploy or prune smoke surfaces, release graph notes, runtime policy notes, portability notes, and reports | unavailable dependency, hallucinated or lookalike package, TypeScript path alias hiding a missing package dependency, source alias bypassing package `exports`, package manager graph mismatch, affected build or test cache false green, pruned or deployed artifact missing a dependency, root-hoisted undeclared dependency, transitive dependency use, runtime import hidden in `devDependencies`, public type dependency hidden from consumers, host singleton installed as a direct dependency, peer missing local dev dependency, optional integration dragging unused hosts, broad package export, workspace range too tight for publish policy, fragile single-maintainer core dependency, experimental technology in a survival path, unsupported runtime, unclear security patch path, runtime-specific API leakage into core logic, stale version claim, lifecycle script risk, audit suppression, lockfile drift, or install guidance mismatch | `changes_status`, `changes_diff_summary`, `build`, `test_release`, `mustflow_check` | Dependency checked, package contract and public API boundary reviewed, resolver/build/test/deploy/release graph alignment reviewed, ecosystem and maintainer-risk boundary reviewed, supported-version, patchability, and runtime-portability boundary reviewed, supply-chain surface reviewed, declarations synchronized, verification, and remaining dependency risk |
-| Generated or edited code, configuration, CI workflows, package metadata, install instructions, examples, Docker images, framework setup, runtime declarations, toolchain declarations, TypeScript compiler-track references, Go release or framework references, Java/JDK GA, LTS, JEP, JVM, GC, or toolchain references, Rust release or MSRV references, or migration-sensitive snippets introduce explicit external version references, action refs, package ranges, runtime versions, framework majors, Docker image tags, or scaffold commands that may be stale | `.mustflow/skills/version-freshness-check/SKILL.md` | Versioned reference, owning files, repository version policy, approved freshness source, compatibility context, migration risk, TypeScript compiler track, Go toolchain/framework track, Java JDK/toolchain/bytecode/JEP track, or Rust MSRV/toolchain track when relevant, and command contract entries | Package metadata, lockfiles, CI workflows, Dockerfiles, runtime files, framework config, docs, examples, templates, tests, and version-decision reports | stale default version, false latest claim, accidental major migration, repository policy mismatch, unsupported generated example, TypeScript RC/nightly/API-track confusion, Java latest-GA/LTS/runtime/JEP/preview/incubator confusion, Rust stable/nightly/MSRV confusion, floating-tag drift, or unverified security/support claim | `changes_status`, `changes_diff_summary`, `build`, `test_related`, `docs_validate_fast`, `test_release`, `mustflow_check` | Versioned surfaces checked, repository policy and freshness source, selected version track, compatibility classification, TypeScript stable/RC/nightly/API-track, Go runtime/framework, Java GA/LTS/runtime/JEP/toolchain, and Rust stable/nightly/MSRV split when relevant, approval need, synchronized surfaces, verification, and remaining version-freshness risk |
+| Generated or edited code, configuration, CI workflows, package metadata, install instructions, examples, Docker images, framework setup, runtime declarations, toolchain declarations, TypeScript compiler-track references, Go release or framework references, Java/JDK GA, LTS, JEP, JVM, GC, or toolchain references, Rust release or MSRV references, or migration-sensitive snippets introduce explicit external version references, action refs, package ranges, runtime versions, framework majors, Docker image tags, or scaffold commands that may be stale | `.mustflow/skills/version-freshness-check/SKILL.md` | Versioned reference, owning files, repository version policy, approved freshness source, compatibility context, migration risk, TypeScript compiler track, Go toolchain/framework track, Java JDK/toolchain/bytecode/JEP track, or Rust MSRV/toolchain track when relevant, and command contract entries | Package metadata, lockfiles, CI workflows, Dockerfiles, runtime files, framework config, docs, examples, templates, tests, and version-decision reports | stale default version, false latest claim, accidental major migration, repository policy mismatch, unsupported generated example, TypeScript stable/development/native-preview/prerelease/API-track confusion, Java latest-GA/LTS/runtime/JEP/preview/incubator confusion, Rust stable/nightly/MSRV confusion, floating-tag drift, or unverified security/support claim | `changes_status`, `changes_diff_summary`, `build`, `test_related`, `docs_validate_fast`, `test_release`, `mustflow_check` | Versioned surfaces checked, repository policy and freshness source, selected version track, compatibility classification, TypeScript stable/development/native-preview/prerelease/API split, Go runtime/framework, Java GA/LTS/runtime/JEP/toolchain, and Rust stable/nightly/MSRV split when relevant, approval need, synchronized surfaces, verification, and remaining version-freshness risk |
 | External systems, protocols, SDKs, databases, webhooks, queues, files, object storage, signed upload or download URLs, caches, API response models, framework requests or responses, server actions, route handlers, edge functions, worker handlers, AI models, browser storage, search engines, analytics tools, email platforms, no-code tools, observability backends, trace or request context, provider data, or volatile component implementations cross the core boundary or need stable port/adapter translation, change isolation, error mapping, timeout, retry, circuit-breaker, bulkhead, idempotency, reconciliation, security, core-state ownership, vendor portability, or observability handling | `.mustflow/skills/adapter-boundary/SKILL.md` | External system or protocol, inbound/outbound direction, delivery boundary, internal use case, local port/adapter patterns, provider risk, provider failure policy, core-state ownership risk, vendor portability risk, observability identifier policy, API contract risk, change-isolation ledger, preserved consumer contract, changed files, and command contract entries | Ports, adapters, mappers, controllers, workers, stores, gateways, response mappers, telemetry mappers, timeout and retry policies, circuit breakers, bulkhead boundaries, tests, fixtures, assembly wiring, and directly synchronized docs or templates | provider leakage, caller churn from adapter-only changes, framework business-rule leakage, telemetry backend leakage, storage-key leakage, screen-shaped API coupling, pass-through wrapper, SaaS dashboard as truth source, search or analytics policy leakage, queue contract leakage, unclassified external failure, duplicate side effect, unsafe retry, missing timeout, missing circuit breaker, missing bulkhead, unresolved unknown provider outcome, broken identifier propagation, secret or personal-data leak, or untested integration drift | `changes_status`, `changes_diff_summary`, `test_related`, `test`, `lint`, `build`, `docs_validate_fast`, `test_release`, `mustflow_check` | Boundary classification, change-isolation ledger, preserved consumer contract, delivery adapter responsibility, internal port, provider containment, core-state ownership, vendor portability, validation and mapping, API response mapping, observability identifier flow, timeout/retry/circuit-breaker/bulkhead/idempotency handling, reconciliation behavior, security notes, verification, and remaining provider risk |
 | Third-party SDK or external API integration, review, debugging, upgrade, webhook handling, auth scope change, sandbox or production setup, provider SDK version change, API version migration, rate-limit handling, retry policy, idempotency key usage, pagination, provider error mapping, request id logging, changelog review, deprecation response, or provider operational-readiness test needs production integration review | `.mustflow/skills/third-party-api-integration-review/SKILL.md` | Provider and SDK/API ledger, source-of-truth docs, auth and scope ledger, operation and side-effect ledger, webhook ledger, error and observability ledger, changelog or migration evidence, existing fakes or sandbox tests, and configured command intents | Provider adapters, wrappers, typed request and response models, error mappers, timeout and retry policies, rate-limit handling, idempotency key handling, pagination handling, webhook signature verification and dedupe, redacted observability, sandbox tests, fixtures, runbooks, migration notes, and directly synchronized docs or templates | demo-only integration, stale provider docs, SDK/API drift, sandbox-production mixup, hardcoded secret, overbroad scope, token refresh gap, missing timeout, infinite retry, retrying permanent errors, mutating retry without idempotency, per-attempt idempotency key, 429 retry storm, ignored Retry-After, offset pagination assumption, raw provider error leak, string-only provider error, missing request id, trusted webhook payload, JSON-parsed signature breakage, duplicate webhook side effect, event-order assumption, success redirect as proof, unhandled unknown provider outcome, dashboard-only setting, untested SDK upgrade, or happy-path-only sandbox test | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `test_audit`, `docs_validate_fast`, `test_release`, `mustflow_check` | Third-party integration reviewed, provider source-of-truth and SDK/API version evidence, auth/environment/scope decisions, timeout/retry/rate-limit/idempotency/pagination decisions, webhook delivery and dedupe checks, error and observability mapping, tests or missing evidence, verification, and remaining provider operational risk |
 | Tauri frontend invokes, Rust commands, capabilities, permissions, scopes, plugins, filesystem, dialog, shell, opener, updater, sidecar, mobile native permissions, Tauri bundling targets, release package formats, or native desktop CI build matrices are created or changed | `.mustflow/skills/tauri-code-change/SKILL.md` | Frontend call sites, Tauri config, Rust commands, capability and permission files, plugin config, bundle targets, release matrix evidence, changed files, and command contract entries | Tauri frontend, Rust commands, capabilities, permissions, scopes, plugins, bundle target narrowing, package target notes, tests, and docs | broad native permission, untrusted IPC input, filesystem escape, shell or updater risk, WebView/native boundary drift, all-target bundling surprise, cold Cargo cache cost, duplicated macOS packaging jobs, or long-retention CI artifacts posing as release assets | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | IPC, permission, scope, filesystem, shell, updater, native boundary, bundle target, release matrix, artifact retention, verification, and remaining Tauri risk |
@@ -715,6 +723,7 @@ routes. Event routes stay inactive until their event occurs.
 | Vue, Nuxt, Pinia, Vue Router, Vue SFCs, Composition API, reactivity, props, emits, slots, `v-model`, SSR, hydration, lazy hydration, Vite/Vue toolchain, or Vue-related tests are created, changed, reviewed, or upgraded | `.mustflow/skills/vue-code-change/SKILL.md` | Vue/Nuxt package evidence, effective Vue support range, Vite/vue-tsc/toolchain evidence, component API evidence, reactivity and watcher evidence, SSR/hydration evidence, Pinia/Router ownership evidence, changed files, and command contract entries | Vue SFCs, composables, Pinia stores, Router routes and guards, Nuxt pages/layouts/components/plugins, Vite/Nuxt config, tests, docs examples, package metadata, and directly synchronized compatibility surfaces | stale Vue or Nuxt version claim, missing SFC typecheck, wide reactive subscription, deep watch bomb, unstable computed identity, raw/proxy identity hazard, nested prop mutation, `defineModel` default desync, undeclared emit fallthrough, slot API drift, Pinia destructuring break, broad route watch, SSR request-state leak, hydration mismatch, ClientOnly misuse, lazy hydration on immediate interaction, or unverified performance claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Vue version, toolchain, SFC typecheck, reactivity, computed, watcher, component API, composable, Pinia, Router, SSR, hydration, lazy-hydration, performance, verification, and compatibility risks checked |
 | Vite config, plugins, Rolldown or Rollup compatibility, dependency optimization, dev server or HMR behavior, SSR, library mode, workers, Environment API usage, package exports, TypeScript transpilation, browser targets, assets, CSS, sourcemaps, package-manager scripts, CI, Docker, preview, or Vite-related tests are created, changed, reviewed, migrated, or upgraded | `.mustflow/skills/vite-code-change/SKILL.md` | Vite package evidence, installed and target Vite major, framework plugin evidence, package manager and Node policy, Vite config, plugin ledger, optimizer ledger, runtime ledger, package export ledger, asset/output ledger, changed files, and command contract entries | Vite config, plugins, package metadata, TypeScript config, CSS config, dependency optimizer settings, dev server and HMR settings, SSR and worker entries, library build config, assets, sourcemaps, preview, CI, Docker, tests, docs, and directly synchronized template surfaces | stale Vite version claim, old Rollup/esbuild option drift, ignored compatibility layer, missing typecheck, optimizer rediscovery loop, HMR boundary hidden behind wrappers, plugin ordering myth, lost import query, virtual module id drift, global plugin cache across environments, CJS default import trap, package exports condition drift, SSR manifest confusion, worker build plugin gap, library-mode asset inline surprise, public sourcemap exposure, base path asset 404, package-manager lock drift, or unverified performance claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Vite version, Rolldown/Rollup/Oxc/CSS, TypeScript, optimizer, HMR, plugin, package-resolution, SSR, worker, library, asset, sourcemap, package-manager, CI, Docker, preview, verification, and compatibility risks checked |
 | Babylon.js, WebGPU or WebGL engine setup, Scene lifecycle, cameras, lights, meshes, materials, textures, shaders, glTF or GLB loading, AssetContainer usage, loaders, Havok or Physics V2, LOD, instancing, thin instances, picking, render loops, Inspector debugging, or Babylon-related tests are created, changed, reviewed, or upgraded | `.mustflow/skills/babylon-code-change/SKILL.md` | Babylon package evidence, engine and fallback ledger, Scene and render loop owners, asset and decoder ledger, material and shader ledger, LOD/instancing/culling ledger, physics ledger, performance counters, changed files, and command contract entries | Babylon engine setup, Scene lifecycle, loaders, assets, materials, shaders, textures, cameras, lights, shadows, render targets, render loops, observers, LOD, culling, instances, thin instances, picking, Physics V2, Havok, tests, docs, and package metadata | stale Babylon version claim, WebGPU async init race, missing WebGL fallback, WebGPU bundle churn, loader or side-effect import drift, `__root__` mesh confusion, decoder hosting gap, material dirty or shader compile stutter, texture VRAM waste, thin-instance bounding failure, picking CPU tax, observer leak, incomplete disposal, overbroad mesh physics, collision callback overload, or unverified performance claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Babylon version, engine/fallback, render loop, Scene lifecycle, asset loading, materials, shaders, textures, LOD/culling/instancing, picking, physics, performance, verification, and remaining Babylon risk |
+| Three.js renderers, scenes, cameras, meshes, materials, textures, shaders, glTF assets, animation, picking, WebGL, WebGPU, WebXR, resource disposal, performance, migration, or related tests are created, changed, reviewed, or upgraded | `.mustflow/skills/threejs-code-change/SKILL.md` | Three.js package and import evidence, renderer and fallback ledger, scene and frame-loop owners, resource ownership ledger, interaction ledger, performance counters, browser/device targets, changed files, and command contract entries | Three.js renderer setup, scene lifecycle, assets, materials, textures, shaders, cameras, controls, render targets, animation, instancing, Raycaster and picking, WebGL/WebGPU/WebXR, disposal, tests, docs, and package metadata | stale release or feature-status claim, async renderer race, missing fallback, resize or pixel-ratio drift, shader compile or upload stall, texture VRAM waste, stale bounds, scene-wide raycasting, domain identity loss, context/device-loss gap, resource leak, or unverified performance claim | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Three.js version and backend tracks, renderer/scene/resource/interaction owners, fallback and recovery, performance evidence, verification, and remaining device risk |
 | Svelte or SvelteKit components, route files, universal or server load functions, form actions, endpoints, hooks, stores, context, runes, props, snippets, bindings, SSR, hydration, streaming, preload, invalidation, server-only imports, env boundaries, adapters, Vite, TypeScript, packaging, accessibility warnings, or tests are created or changed | `.mustflow/skills/svelte-code-change/SKILL.md` | Svelte config, route segment files, route matchers, stores/runes/context, hooks, app types, adapter config, Vite and TypeScript config, package export metadata, changed files, and command contract entries | Svelte components, route files, load/actions, endpoints, stores/runes/context, SSR/client boundaries, adapter and package surfaces, tests, and docs examples | SSR/client leakage, server-only import leak, browser global crash, hydration marker drift, preload side effect, invalidation miss, streaming header/auth bug, request-state leak, state owner drift, effect-as-derived loop, form degradation, adapter output drift, package export break, or ignored accessibility warning | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | SSR, server/client, route/load/action/invalidation/streaming, state/runes/props/snippets/bindings, adapter/toolchain/package, form, and accessibility boundary checked, verification, and remaining Svelte risk |
 | Web image assets are added, converted, resized, or replaced | `.mustflow/skills/web-asset-optimization/SKILL.md` | Image asset request and target path | Web image assets | asset quality and size | `asset_optimize`, `build` | Optimized asset notes |
 
@@ -747,7 +756,7 @@ routes. Event routes stay inactive until their event occurs.
 | Analysis or a decision record is the current deliverable, the problem has both material uncertainty and material consequences, and no narrower primary skill owns the complete problem | `.mustflow/skills/complex-decision-analysis/SKILL.md` | User request, decision horizon, decision owner, repository evidence, existing skill routes, available evidence sources, and limits on freshness, access, authority, verification, or command execution | Evidence-backed decision records, planning artifacts when requested, and exactly one smallest reversible next action before handoff | universal reasoning skill bloat, analysis paralysis, private scratch reasoning, stale evidence, overconfident causal story, hidden high-sensitivity unknown, or implementation without a narrower handoff skill | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `mustflow_check` | Decision state, problem contract, evidence ledger, baseline, causal model, option comparison, counterargument, decision-reversing evidence, recommendation, smallest reversible next action, handoff skill, verification, and residual risk |
 | Repository improvement, audit, prioritization, stabilization, polish, onboarding, contributor-readiness, production-readiness, or iterative improvement is requested without a single predetermined edit | `.mustflow/skills/repo-improvement-loop/SKILL.md` | User goal, improvement mode, repository evidence, candidate risks, current changed files, and command contract entries | Repository diagnosis, ranked candidates, and at most one scoped improvement cycle unless the user explicitly requests analysis-only | idea spam, ungrounded prioritization, autonomous loop drift, broad rewrite, or unverified improvement claim | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `test_release`, `mustflow_check` | Mode, evidence inspected, scored candidates, selected improvement, files changed or analysis-only note, verification, next improvement question, and stop reason |
 | Current repository evidence reveals a scope-adjacent bug, missing test, stale synchronized surface, public-contract drift, security or privacy exposure, data-loss risk, brittle error handling, concurrency risk, operational risk, or UX inconsistency outside the literal request | `.mustflow/skills/proactive-risk-surfacing/SKILL.md` | Literal user request, current evidence, risk relationship, severity, expected edit size, authority boundary, and verification options | Fix-or-report decision, small related fixes, focused tests or synchronized surfaces, and final proactive risk notes | scope creep, speculative cleanup, hidden broad refactor, ignored high-severity risk, or false completion claim | `changes_status`, `changes_diff_summary`, `test_related`, `docs_validate_fast`, `test_release`, `mustflow_check` | Candidate decisions: fix now, report only, ask first, or ignore; files changed, verification, and remaining proactive risks |
-| A final report or completion claim needs current evidence for changed files, requirements, command receipts, skipped checks, synchronized surfaces, or remaining risks | `.mustflow/skills/completion-evidence-gate/SKILL.md` | User goal, changed-file evidence, skills used, verification results, skipped checks, synchronized surfaces, and remaining risks | Final report evidence and the smallest missing in-scope evidence surface only | false completion, stale receipts, hidden skipped checks, unsupported readiness claim, or contract drift | `changes_status`, `changes_diff_summary`, `test_related`, `test`, `test_audit`, `lint`, `build`, `docs_validate_fast`, `docs_validate`, `test_release`, `mustflow_check` | Completion status, requirement evidence map, changed and synchronized surfaces, commands run, skipped checks, and final wording boundary |
+| A final report or completion claim needs current evidence for changed files, requirements, command receipts, skipped checks, synchronized surfaces, repository-local verification boundaries, or remaining risks | `.mustflow/skills/completion-evidence-gate/SKILL.md` | User goal, selected repository and command contract, changed-file evidence, explicit parent dependencies, skills used, verification results, skipped checks, synchronized surfaces, and remaining risks | Final report evidence and the smallest missing in-scope evidence surface only | false completion, stale receipts, hidden skipped checks, cross-root verification bleed, unrelated parent blocker, unsupported readiness claim, or contract drift | `changes_status`, `changes_diff_summary`, `test_related`, `test`, `test_audit`, `lint`, `build`, `docs_validate_fast`, `docs_validate`, `test_release`, `mustflow_check` | Completion status, repository verification boundary, requirement evidence map, changed and synchronized surfaces, commands run, skipped checks, and final wording boundary |
 | A final report, completion note, repository improvement loop, or follow-up workflow should offer a bounded numbered next-action menu that a user can select with a single digit in the next turn | `.mustflow/skills/next-action-menu/SKILL.md` | Completed or paused task evidence, candidate follow-ups, verification status, skipped checks, gates, and active-menu freshness boundary | Final-report next-action menu, digit-selection interpretation, and directly synchronized workflow docs, templates, or tests when menu behavior changes | stale menu selection, approval bypass, fabricated filler work, broad backlog drift, high-risk action laundering, or command-contract bypass | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `test_release`, `mustflow_check` | Menu included or omitted, numbered rows, recommendation scores, gate labels, selected digit handling, verification, and remaining selection risk |
 | A task is incomplete, blocked, paused, resumed, handed off, context-compacted, or needs bounded restart evidence without storing raw logs, secrets, hidden reasoning, transcripts, or authority-changing summaries | `.mustflow/skills/restricted-handoff-resume/SKILL.md` | Current goal, latest controlling instruction, changed files, command intents run or skipped, verification evidence, blocker or next safe action, and handoff or retention policy | Final report handoff evidence or explicitly configured handoff surface only | stale summary treated as authority, hidden reasoning leak, secret leak, raw log storage, unrelated work history, or missing restart point | `changes_status`, `changes_diff_summary`, `mustflow_check` | Task status, files touched, commands run/skipped, stale-summary check, next safe action or blocker, excluded raw content, and remaining resume risk |
 | A Codex or Hermes local session ID needs read-only reference for task evidence, restart context, failure diagnosis, or continuation planning across agent applications | `.mustflow/skills/cross-agent-session-reference/SKILL.md` | Session ID, source app evidence, current repository root, user goal, redaction requirements, available official session tools or read-only local storage evidence | Bounded session evidence summaries, continuation prompts, current-repository follow-up work, and directly synchronized reports only | foreign session mutation, transcript-as-authority drift, secret exposure, unrelated history dump, stale storage schema, or dispatching work into another app | `changes_status`, `changes_diff_summary`, `mustflow_check` | Source application confidence, read-only access method, extracted evidence, redactions, current verification, next safe action or ambiguity, and remaining stale-session or privacy risk |
@@ -763,10 +772,10 @@ routes. Event routes stay inactive until their event occurs.
 | Git reports CRLF/LF warnings, Docker or shell scripts fail with CRLF interpreter errors, `.gitattributes` policy is proposed, or tracked text files may need line-ending normalization | `.mustflow/skills/line-ending-hygiene/SKILL.md` | Warning or runtime error text, changed-file evidence, line-ending policy, requested scope, changed-file status, and command contract entries | Line-ending policy files when explicitly requested, tracked text files when explicitly normalized, command metadata, tests, and reports | silent working-tree rewrite, hidden repository-wide policy change, unrelated renormalization, or policy drift | `line_endings_check`, `changes_status`, `mustflow_check` | Policy found or deferred, drift files, normalization status, verification, and remaining line-ending risk |
 | External `SKILL.md` files, skill packs, awesome lists, GitHub skill repositories, installer recommendations, or third-party skill procedures are reviewed for possible mustflow adoption | `.mustflow/skills/external-skill-intake/SKILL.md` | Source path or URL, license or provenance evidence, external skill files, intended adoption outcome, existing skill overlap, and command contract entries | Skill procedures, skill routes, template metadata, tests, docs, and review notes that adapt the external idea | third-party command bypass, license or provenance gap, unsafe helper script, duplicated skill, stale source claim, or default-profile bloat | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `test_release`, `mustflow_check` | Source review, overlap decision, safety findings, command-intent mapping, adoption decision, synchronized surfaces, verification, and remaining intake risk |
 | GitHub issue, pull request, review thread, or maintainer-facing comment content is drafted, opened, revised, or answered | `.mustflow/skills/github-contribution-quality-gate/SKILL.md` | Target repository, intended GitHub action, repository rules and templates, duplicate search, evidence, verification level, and desired result | Issue, pull request, review reply, or comment draft plus posting gate report | maintainer time waste, duplicate report, unsupported claim, public security leak, unverified AI content, or wrong support channel | `changes_status`, `changes_diff_summary`, `mustflow_check` | Gate decision, repository rules found, duplicate and context check, evidence, missing evidence, draft, and final self-check |
-| Repository, host, user, nested-project, command-contract, preference, or generated instruction sources conflict or make safe scope unclear | `.mustflow/skills/instruction-conflict-scope-check/SKILL.md` | Conflicting instruction sources, affected scope, direct user request, command contract entries, and nearest instruction files | Workflow docs, skills, templates, tests, reports, and selected repository scope | authority drift, unsafe scope expansion, wrong repository edit, or unauthorized command | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `test_release`, `mustflow_check` | Conflicts reviewed, chosen priority rule, narrowed or skipped actions, clarification changes, and remaining authority risk |
+| Repository, host, user, nested-project, command-contract, preference, or generated instruction sources conflict or make safe scope unclear | `.mustflow/skills/instruction-conflict-scope-check/SKILL.md` | Conflicting instruction sources, authority dimensions, affected action, direct user request, command contract entries, and nearest instruction files | Workflow docs, skills, templates, tests, reports, and selected repository scope | flat authority ranking, authority drift, unsafe scope expansion, wrong repository edit, or unauthorized command | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `test_release`, `mustflow_check` | Conflicts reviewed by authority dimension, action-specific constraints, narrowed or skipped actions, clarification changes, and remaining authority risk |
 | `.mustflow/context/PROJECT.md` needs cautious project context | `.mustflow/skills/project-context-authoring/SKILL.md` | Supported project facts | `.mustflow/context/PROJECT.md` | authority drift | `mustflow_check` | Updated cautious context |
 | Existing `SKILL.md` files or skill packages are refreshed from stale, external, vendor, runtime, or version-sensitive guidance while preserving the original behavior contract | `.mustflow/skills/skill-refresh/SKILL.md` | Target skill, current behavior contract, runtime mode, source ledger, package ledger, synchronized template surfaces, and command contract entries | Skill body, helper files, route metadata, template copy, locale metadata, profile membership, package tests, and directly tied docs | trigger drift, stale vendor claim, runtime incompatibility, copied external prose, helper-script mismatch, user-edit overwrite, non-idempotent refresh, or template drift | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `test_release`, `mustflow_check` | Skill refreshed, runtime mode, source freshness, semantic change classification, synchronized surfaces, version impact, verification, and remaining route/source/provenance/runtime risk |
-| Skill procedures or routes are created or maintained | `.mustflow/skills/skill-authoring/SKILL.md` | Repeated task evidence | `.mustflow/skills/**` | overlap and command drift | `mustflow_check`, `docs_validate` | Skill route and procedure changes |
+| Skill procedures or routes are created or maintained, or their conditional, exception-bearing, authority-sensitive, universal, completion, or cross-repository verification claims need logical review | `.mustflow/skills/skill-authoring/SKILL.md` | Repeated task evidence, selected repository boundary, explicit parent dependencies, nearby rules, positive cases, boundary cases, and counterexamples | `.mustflow/skills/**` | overlap, command drift, cross-root verification inheritance, converse inference, unbounded quantifier, contradictory branch, flat authority ranking, unreachable stop state, or unobservable postcondition | `mustflow_check`, `docs_validate` | Skill route and procedure changes, logical consistency and repository-boundary result, counterexamples checked, and claims narrowed |
 | Agent A designs and Agent B implements from a versioned handoff, private `.agent` planning files, local-only ignored design state, manifest/plan/state ledgers, startup gates, allowed-path gates, blocker/deviation ledgers, or completion gates | `.mustflow/skills/design-implementation-handoff/SKILL.md` | Target repository, Agent A and Agent B surfaces, privacy mode, public behavior source, private handoff paths, ownership, allowed and forbidden paths, task dependencies, verification expectations, and remote-agent transfer boundary | `AGENTS.md`, public spec files, private `.agent` handoff files, ignore or exclude guidance, handoff templates, instruction artifacts, tests, docs, and directly synchronized workflow surfaces | hidden-only product contract, private-file leak, remote agent missing local context, plan/state version drift, Agent B editing Agent A-owned files, overly broad allowed paths, unbacked ignored files, or false completion evidence | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `mustflow_check` | Handoff mode, public versus private file split, Agent A/B ownership, startup and task gates, ignore or exclude decision, remote-agent limitation, verification gates, and remaining privacy or handoff risk |
 | Work instructions for coding agents, Codex tasks, work orders, issues, PR requests, automations, implementation briefs, reviews, proofs, cleanup tasks, or operational-readiness tasks are drafted, reviewed, or improved | `.mustflow/skills/task-instruction-authoring/SKILL.md` | Target agent surface, task family, goal, scope, constraints, durable rules, risk class, verification expectations, and required output | Instruction artifacts, work-order bodies, issue bodies, templates, docs, skills, checklists, and directly synchronized workflow surfaces | vague goal, delegated product decision, missing acceptance evidence, unsafe raw command, proof theater, review blade drift, overlong one-off policy, or operational-readiness gap | `changes_status`, `changes_diff_summary`, `docs_validate_fast`, `mustflow_check` | Instruction family, missing decisions, final instruction or rubric, durable guidance decision, verification expectations, and remaining ambiguity or operational risk |