mustflow 2.70.0 → 2.74.0

package/schemas/verify-report.schema.json

@@ -40,14 +40,22 @@
     },
     "execution_status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "status": { "enum": ["passed", "partial", "failed", "blocked"] },
+    "risk_assessment": { "$ref": "#/$defs/riskAssessment" },
     "completion_verdict": { "$ref": "#/$defs/completionVerdict" },
     "evidence_model": { "$ref": "#/$defs/evidenceModel" },
+    "conflict_ledger": { "$ref": "#/$defs/conflictLedger" },
     "failure_fingerprint": {
       "anyOf": [
         { "$ref": "#/$defs/failureFingerprint" },
         { "type": "null" }
       ]
     },
+    "failure_replay_capsule": {
+      "anyOf": [
+        { "$ref": "#/$defs/failureReplayCapsule" },
+        { "type": "null" }
+      ]
+    },
     "repeated_failure_summary": {
       "anyOf": [
         { "$ref": "#/$defs/repeatedFailureSummary" },
@@ -118,6 +126,146 @@
     }
   },
   "$defs": {
+    "stringArray": {
+      "type": "array",
+      "items": { "type": "string" }
+    },
+    "conflictLedger": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "status",
+        "item_count",
+        "blocking_count",
+        "contradiction_count",
+        "items"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "verification_evidence_model" },
+        "status": { "enum": ["clear", "open"] },
+        "item_count": { "type": "integer", "minimum": 0 },
+        "blocking_count": { "type": "integer", "minimum": 0 },
+        "contradiction_count": { "type": "integer", "minimum": 0 },
+        "items": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/conflictLedgerItem" }
+        }
+      }
+    },
+    "conflictLedgerItem": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "kind",
+        "status",
+        "severity",
+        "summary",
+        "detail",
+        "sources",
+        "affected_paths",
+        "affected_surfaces",
+        "blocks_completion",
+        "resolution",
+        "owner",
+        "expires_at"
+      ],
+      "properties": {
+        "id": { "type": "string", "pattern": "^conflict:[0-9a-f]{16}$" },
+        "kind": { "enum": ["blocker", "contradiction", "verification_gap", "remaining_risk"] },
+        "status": { "const": "open" },
+        "severity": { "enum": ["info", "warning", "error", "critical"] },
+        "summary": { "type": "string" },
+        "detail": { "type": "string" },
+        "sources": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/conflictLedgerSource" }
+        },
+        "affected_paths": { "$ref": "#/$defs/stringArray" },
+        "affected_surfaces": { "$ref": "#/$defs/stringArray" },
+        "blocks_completion": { "type": "boolean" },
+        "resolution": { "type": "string" },
+        "owner": { "const": "user_or_maintainer" },
+        "expires_at": { "type": "null" }
+      }
+    },
+    "conflictLedgerSource": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["kind", "authority", "key", "paths", "surfaces"],
+      "properties": {
+        "kind": { "enum": ["completion_verdict", "verification_gap", "remaining_risk"] },
+        "authority": { "enum": ["verdict", "verification_plan", "evidence_model"] },
+        "key": { "type": ["string", "null"] },
+        "paths": { "$ref": "#/$defs/stringArray" },
+        "surfaces": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "complexityBudget": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "status",
+        "score",
+        "budget",
+        "metrics",
+        "risks",
+        "review_prompts"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "change_classification" },
+        "status": { "enum": ["within_budget", "review_required"] },
+        "score": { "type": "integer", "minimum": 0 },
+        "budget": { "type": "integer", "minimum": 0 },
+        "metrics": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/complexityBudgetMetric" }
+        },
+        "risks": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/complexityBudgetRisk" }
+        },
+        "review_prompts": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "complexityBudgetMetric": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["name", "value", "weight", "weighted_score"],
+      "properties": {
+        "name": { "type": "string" },
+        "value": { "type": "integer", "minimum": 0 },
+        "weight": { "type": "integer", "minimum": 0 },
+        "weighted_score": { "type": "integer", "minimum": 0 }
+      }
+    },
+    "complexityBudgetRisk": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["code", "severity", "detail", "count", "limit", "paths"],
+      "properties": {
+        "code": {
+          "enum": [
+            "complexity_score_budget_exceeded",
+            "dependency_surface_requires_justification",
+            "helper_container_requires_justification",
+            "configuration_surface_budget_exceeded",
+            "schema_surface_budget_exceeded"
+          ]
+        },
+        "severity": { "const": "warning" },
+        "detail": { "type": "string" },
+        "count": { "type": "integer", "minimum": 0 },
+        "limit": { "type": "integer", "minimum": 0 },
+        "paths": { "$ref": "#/$defs/stringArray" }
+      }
+    },
     "parallelism": {
       "type": "object",
       "additionalProperties": false,
@@ -267,6 +415,7 @@
             "receipt_binding_risk_count": { "type": "integer" },
             "stale_receipt_count": { "type": "integer" },
             "plan_mismatch_count": { "type": "integer" },
+            "risk_priced_evidence_risk_count": { "type": "integer" },
             "risks": { "$ref": "#/$defs/completionVerdictRisks" },
             "receipt_binding": { "$ref": "#/$defs/completionVerdictReceiptBinding" },
             "latest_run_status": { "type": ["string", "null"] }
@@ -324,7 +473,8 @@
         "write_drift": { "type": "integer" },
         "receipt_binding": { "type": "integer" },
         "stale_receipt": { "type": "integer" },
-        "plan_mismatch": { "type": "integer" }
+        "plan_mismatch": { "type": "integer" },
+        "risk_priced_evidence": { "type": "integer" }
       }
     },
     "completionVerdictReceiptBinding": {
@@ -393,6 +543,10 @@
           "type": "array",
           "items": { "$ref": "#/$defs/evidenceGap" }
         },
+        "complexity_budget": { "$ref": "#/$defs/complexityBudget" },
+        "risk_assessment": { "$ref": "#/$defs/riskAssessment" },
+        "failure_replay_capsule": { "$ref": "#/$defs/failureReplayCapsule" },
+        "conflict_ledger": { "$ref": "#/$defs/conflictLedger" },
         "remaining_risks": {
           "type": "array",
           "items": { "$ref": "#/$defs/evidenceRemainingRisk" }
@@ -538,6 +692,211 @@
         "detail": { "type": "string" }
       }
     },
+    "riskAssessment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "level",
+        "reasons",
+        "required_evidence",
+        "blocking_gaps",
+        "rollback_required",
+        "human_approval_required",
+        "manual_review_required"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "change_classification_and_command_contract" },
+        "level": { "enum": ["low", "medium", "high", "critical"] },
+        "reasons": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "required_evidence": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "blocking_gaps": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "rollback_required": { "type": "boolean" },
+        "human_approval_required": { "type": "boolean" },
+        "manual_review_required": { "type": "boolean" }
+      }
+    },
+    "failureReplayCapsule": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "authority",
+        "created_at",
+        "verification_plan_id",
+        "failure_fingerprint",
+        "reasons",
+        "status",
+        "replay_commands",
+        "failed_results",
+        "affected_files",
+        "affected_surfaces",
+        "risk_codes",
+        "environment",
+        "privacy",
+        "hashes"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "mf_verify_failure" },
+        "authority": { "const": "replay_supporting_evidence" },
+        "created_at": { "type": "string", "format": "date-time" },
+        "verification_plan_id": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+        "failure_fingerprint": {
+          "type": ["string", "null"],
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "reasons": { "$ref": "#/$defs/stringArray" },
+        "status": { "type": "string" },
+        "replay_commands": { "$ref": "#/$defs/stringArray" },
+        "failed_results": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/failureReplayResult" }
+        },
+        "affected_files": {
+          "type": "array",
+          "items": { "$ref": "#/$defs/failureReplayFile" }
+        },
+        "affected_surfaces": { "$ref": "#/$defs/stringArray" },
+        "risk_codes": { "$ref": "#/$defs/stringArray" },
+        "environment": { "$ref": "#/$defs/failureReplayEnvironment" },
+        "privacy": { "$ref": "#/$defs/failureReplayPrivacy" },
+        "hashes": { "$ref": "#/$defs/failureReplayHashes" }
+      }
+    },
+    "failureReplayResult": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "intent",
+        "status",
+        "exit_code",
+        "exit_code_class",
+        "error_kind",
+        "timed_out",
+        "receipt_path",
+        "receipt_sha256",
+        "command_fingerprint",
+        "contract_fingerprint",
+        "stdout_tail_hash",
+        "stderr_tail_hash",
+        "output_truncated",
+        "replay_command"
+      ],
+      "properties": {
+        "intent": { "type": "string" },
+        "status": { "type": "string" },
+        "exit_code": { "type": ["integer", "null"] },
+        "exit_code_class": { "type": ["string", "null"] },
+        "error_kind": { "type": ["string", "null"] },
+        "timed_out": { "type": "boolean" },
+        "receipt_path": { "type": ["string", "null"] },
+        "receipt_sha256": {
+          "type": ["string", "null"],
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "command_fingerprint": {
+          "type": ["string", "null"],
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "contract_fingerprint": {
+          "type": ["string", "null"],
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "stdout_tail_hash": {
+          "type": ["string", "null"],
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "stderr_tail_hash": {
+          "type": ["string", "null"],
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "output_truncated": { "type": "boolean" },
+        "replay_command": { "type": "string" }
+      }
+    },
+    "failureReplayFile": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "status", "sha256", "bytes"],
+      "properties": {
+        "path": { "type": "string" },
+        "status": { "enum": ["present", "missing", "unreadable", "outside_root"] },
+        "sha256": {
+          "type": ["string", "null"],
+          "pattern": "^sha256:[0-9a-f]{64}$"
+        },
+        "bytes": { "type": ["integer", "null"], "minimum": 0 }
+      }
+    },
+    "failureReplayEnvironment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["platform_family", "arch_family", "runtimes", "env_policies", "env_allowlist", "timeout_seconds"],
+      "properties": {
+        "platform_family": { "type": ["string", "null"] },
+        "arch_family": { "type": ["string", "null"] },
+        "runtimes": { "$ref": "#/$defs/stringArray" },
+        "env_policies": { "$ref": "#/$defs/stringArray" },
+        "env_allowlist": { "$ref": "#/$defs/stringArray" },
+        "timeout_seconds": {
+          "type": "array",
+          "items": { "type": "integer", "minimum": 0 }
+        }
+      }
+    },
+    "failureReplayPrivacy": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "raw_output_included",
+        "env_values_included",
+        "receipt_paths_only",
+        "redacted",
+        "redaction_count",
+        "redaction_kinds",
+        "redaction_fields"
+      ],
+      "properties": {
+        "raw_output_included": { "const": false },
+        "env_values_included": { "const": false },
+        "receipt_paths_only": { "const": true },
+        "redacted": { "type": "boolean" },
+        "redaction_count": { "type": "integer", "minimum": 0 },
+        "redaction_kinds": { "$ref": "#/$defs/stringArray" },
+        "redaction_fields": { "$ref": "#/$defs/stringArray" }
+      }
+    },
+    "failureReplayHashes": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "capsule_fingerprint",
+        "changed_files_hash",
+        "failed_results_hash",
+        "command_fingerprints_hash",
+        "output_tails_hash"
+      ],
+      "properties": {
+        "capsule_fingerprint": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+        "changed_files_hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+        "failed_results_hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+        "command_fingerprints_hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" },
+        "output_tails_hash": { "type": "string", "pattern": "^sha256:[0-9a-f]{64}$" }
+      }
+    },
     "reproEvidence": {
       "type": "object",
       "additionalProperties": false,

package/schemas/verify-run-manifest.schema.json

@@ -36,14 +36,22 @@
     },
     "execution_status": { "enum": ["passed", "partial", "failed", "blocked"] },
     "status": { "enum": ["passed", "partial", "failed", "blocked"] },
+    "risk_assessment": { "$ref": "#/$defs/riskAssessment" },
     "completion_verdict": { "$ref": "#/$defs/completionVerdict" },
     "evidence_model": { "$ref": "#/$defs/evidenceModel" },
+    "conflict_ledger": { "$ref": "verify-report.schema.json#/$defs/conflictLedger" },
     "failure_fingerprint": {
       "anyOf": [
         { "$ref": "#/$defs/failureFingerprint" },
         { "type": "null" }
       ]
     },
+    "failure_replay_capsule": {
+      "anyOf": [
+        { "$ref": "verify-report.schema.json#/$defs/failureReplayCapsule" },
+        { "type": "null" }
+      ]
+    },
     "repeated_failure_summary": {
       "anyOf": [
         { "$ref": "#/$defs/repeatedFailureSummary" },
@@ -184,6 +192,7 @@
             "receipt_binding_risk_count": { "type": "integer" },
             "stale_receipt_count": { "type": "integer" },
             "plan_mismatch_count": { "type": "integer" },
+            "risk_priced_evidence_risk_count": { "type": "integer" },
             "risks": { "$ref": "#/$defs/completionVerdictRisks" },
             "receipt_binding": { "$ref": "#/$defs/completionVerdictReceiptBinding" },
             "latest_run_status": { "type": ["string", "null"] }
@@ -241,7 +250,8 @@
         "write_drift": { "type": "integer" },
         "receipt_binding": { "type": "integer" },
         "stale_receipt": { "type": "integer" },
-        "plan_mismatch": { "type": "integer" }
+        "plan_mismatch": { "type": "integer" },
+        "risk_priced_evidence": { "type": "integer" }
       }
     },
     "summary": {
@@ -348,6 +358,10 @@
           "type": "array",
           "items": { "$ref": "#/$defs/evidenceGap" }
         },
+        "complexity_budget": { "$ref": "verify-report.schema.json#/$defs/complexityBudget" },
+        "risk_assessment": { "$ref": "#/$defs/riskAssessment" },
+        "failure_replay_capsule": { "$ref": "verify-report.schema.json#/$defs/failureReplayCapsule" },
+        "conflict_ledger": { "$ref": "verify-report.schema.json#/$defs/conflictLedger" },
         "remaining_risks": {
           "type": "array",
           "items": { "$ref": "#/$defs/evidenceRemainingRisk" }
@@ -493,6 +507,41 @@
         "detail": { "type": "string" }
       }
     },
+    "riskAssessment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "level",
+        "reasons",
+        "required_evidence",
+        "blocking_gaps",
+        "rollback_required",
+        "human_approval_required",
+        "manual_review_required"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "change_classification_and_command_contract" },
+        "level": { "enum": ["low", "medium", "high", "critical"] },
+        "reasons": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "required_evidence": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "blocking_gaps": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "rollback_required": { "type": "boolean" },
+        "human_approval_required": { "type": "boolean" },
+        "manual_review_required": { "type": "boolean" }
+      }
+    },
     "reproEvidence": {
       "type": "object",
       "additionalProperties": false,

package/schemas/workspace-verification-plan.schema.json

@@ -147,6 +147,12 @@
           "type": ["string", "null"],
           "pattern": "^sha256:[0-9a-f]{64}$"
         },
+        "risk_assessment": {
+          "anyOf": [
+            { "type": "null" },
+            { "$ref": "#/$defs/riskAssessment" }
+          ]
+        },
         "requirement_count": { "type": "integer", "minimum": 0 },
         "candidate_count": { "type": "integer", "minimum": 0 },
         "selected_intent_count": { "type": "integer", "minimum": 0 },
@@ -190,6 +196,32 @@
         "surfaces": { "$ref": "#/$defs/stringArray" },
         "detail": { "type": "string" }
       }
+    },
+    "riskAssessment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "schema_version",
+        "source",
+        "level",
+        "reasons",
+        "required_evidence",
+        "blocking_gaps",
+        "rollback_required",
+        "human_approval_required",
+        "manual_review_required"
+      ],
+      "properties": {
+        "schema_version": { "const": "1" },
+        "source": { "const": "change_classification_and_command_contract" },
+        "level": { "enum": ["low", "medium", "high", "critical"] },
+        "reasons": { "$ref": "#/$defs/stringArray" },
+        "required_evidence": { "$ref": "#/$defs/stringArray" },
+        "blocking_gaps": { "$ref": "#/$defs/stringArray" },
+        "rollback_required": { "type": "boolean" },
+        "human_approval_required": { "type": "boolean" },
+        "manual_review_required": { "type": "boolean" }
+      }
     }
   }
 }

package/templates/default/i18n.toml

@@ -62,13 +62,13 @@ translations = {}
 [documents."skills.index"]
 source = "locales/en/.mustflow/skills/INDEX.md"
 source_locale = "en"
-revision = 171
+revision = 172
 translations = {}
 
 [documents."skill.adapter-boundary"]
 source = "locales/en/.mustflow/skills/adapter-boundary/SKILL.md"
 source_locale = "en"
-revision = 12
+revision = 13
 translations = {}
 
 [documents."skill.artifact-integrity-check"]

package/templates/default/locales/en/.mustflow/skills/INDEX.md

@@ -2,7 +2,7 @@
 mustflow_doc: skills.index
 locale: en
 canonical: true
-revision: 171
+revision: 172
 authority: router
 lifecycle: mustflow-owned
 ---
@@ -486,7 +486,7 @@ routes. Event routes stay inactive until their event occurs.
 | Dependency versions, lockfiles, package-manager metadata, workspace constraints, runtime engines, peer dependencies, optional dependencies, security advisory fixes, generated dependency output, framework plugins, TypeScript compiler tracks, CI actions, Docker base images, package manager behavior, or toolchain versions are upgraded, downgraded, pinned, widened, regenerated, reviewed, or reported | `.mustflow/skills/dependency-upgrade-review/SKILL.md` | Dependency name, old and new versions or ranges, direct or transitive path, ecosystem and package manager, declaration files, lockfiles, runtime or toolchain files, advisory or release-note evidence, generated outputs, callers, docs, package output, Docker, CI, or TypeScript compiler-track surfaces, and command contract entries | Package declarations, lockfiles, generated outputs, compatibility code, tests, docs, package metadata, Docker or CI files, TypeScript compiler-track notes, and directly synchronized examples | lockfile churn, hidden transitive replacement, peer or engine break, module-format drift, native or optional package break, framework or generator output drift, unsafe broad security update, weakened tests, Docker or CI runtime drift, native-preview over-adoption, or unreviewed supply-chain change | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Upgrade reason, ecosystem surface, direct and transitive graph changes, compatibility classification, runtime/peer/engine/module/feature/platform/generated-output/compiler-track risks, synchronized surfaces, verification, and remaining dependency-upgrade risk |
 | Dependency, package, runtime, framework, tool, command, plugin, service, platform capability, supported-version policy, security patch path, ecosystem maturity claim, maintainer-risk assumption, runtime portability claim, edge or serverless compatibility claim, critical-path library choice, package script, lifecycle hook, binary download, lockfile, audit result, or supply-chain-sensitive dependency surface is assumed, added, removed, imported, invoked, installed, audited, or documented | `.mustflow/skills/dependency-reality-check/SKILL.md` | Assumed dependency or capability, declaration files, version or feature expectation, role criticality, supported-version or end-of-life evidence, patchability expectation, runtime compatibility boundary, maintainer and ecosystem evidence when available, lockfile entry, package script or lifecycle hook, audit or provenance evidence, and relevant command intents | Package metadata, lockfiles, imports, scripts, command contracts, docs, tests, runtime policy notes, portability notes, and reports | unavailable dependency, hallucinated or lookalike package, fragile single-maintainer core dependency, experimental technology in a survival path, unsupported runtime, unclear security patch path, runtime-specific API leakage into core logic, stale version claim, lifecycle script risk, audit suppression, lockfile drift, or install guidance mismatch | `changes_status`, `changes_diff_summary`, `build`, `test_release`, `mustflow_check` | Dependency checked, ecosystem and maintainer-risk boundary reviewed, supported-version, patchability, and runtime-portability boundary reviewed, supply-chain surface reviewed, declarations synchronized, verification, and remaining dependency risk |
 | Generated or edited code, configuration, CI workflows, package metadata, install instructions, examples, Docker images, framework setup, runtime declarations, toolchain declarations, TypeScript compiler-track references, Rust release or MSRV references, or migration-sensitive snippets introduce explicit external version references, action refs, package ranges, runtime versions, framework majors, Docker image tags, or scaffold commands that may be stale | `.mustflow/skills/version-freshness-check/SKILL.md` | Versioned reference, owning files, repository version policy, approved freshness source, compatibility context, migration risk, TypeScript compiler track or Rust MSRV/toolchain track when relevant, and command contract entries | Package metadata, lockfiles, CI workflows, Dockerfiles, runtime files, framework config, docs, examples, templates, tests, and version-decision reports | stale default version, false latest claim, accidental major migration, repository policy mismatch, unsupported generated example, TypeScript beta/native-preview track confusion, Rust stable/nightly/MSRV confusion, floating-tag drift, or unverified security/support claim | `changes_status`, `changes_diff_summary`, `build`, `test_related`, `docs_validate_fast`, `test_release`, `mustflow_check` | Versioned surfaces checked, repository policy and freshness source, selected version track, compatibility classification, TypeScript stable/beta/native-preview and Rust stable/nightly/MSRV split when relevant, approval need, synchronized surfaces, verification, and remaining version-freshness risk |
-| External systems, protocols, SDKs, databases, webhooks, queues, files, object storage, signed upload or download URLs, caches, API response models, framework requests or responses, server actions, route handlers, edge functions, worker handlers, AI models, browser storage, search engines, analytics tools, email platforms, no-code tools, observability backends, trace or request context, or provider data cross the core boundary or need port/adapter translation, error mapping, timeout, retry, circuit-breaker, bulkhead, idempotency, reconciliation, security, core-state ownership, vendor portability, or observability handling | `.mustflow/skills/adapter-boundary/SKILL.md` | External system or protocol, inbound/outbound direction, delivery boundary, internal use case, local port/adapter patterns, provider risk, provider failure policy, core-state ownership risk, vendor portability risk, observability identifier policy, API contract risk, changed files, and command contract entries | Ports, adapters, mappers, controllers, workers, stores, gateways, response mappers, telemetry mappers, timeout and retry policies, circuit breakers, bulkhead boundaries, tests, fixtures, assembly wiring, and directly synchronized docs or templates | provider leakage, framework business-rule leakage, telemetry backend leakage, storage-key leakage, screen-shaped API coupling, pass-through wrapper, SaaS dashboard as truth source, search or analytics policy leakage, queue contract leakage, unclassified external failure, duplicate side effect, unsafe retry, missing timeout, missing circuit breaker, missing bulkhead, unresolved unknown provider outcome, broken identifier propagation, secret or personal-data leak, or untested integration drift | `changes_status`, `changes_diff_summary`, `test_related`, `test`, `lint`, `build`, `docs_validate_fast`, `test_release`, `mustflow_check` | Boundary classification, delivery adapter responsibility, internal port, provider containment, core-state ownership, vendor portability, validation and mapping, API response mapping, observability identifier flow, timeout/retry/circuit-breaker/bulkhead/idempotency handling, reconciliation behavior, security notes, verification, and remaining provider risk |
+| External systems, protocols, SDKs, databases, webhooks, queues, files, object storage, signed upload or download URLs, caches, API response models, framework requests or responses, server actions, route handlers, edge functions, worker handlers, AI models, browser storage, search engines, analytics tools, email platforms, no-code tools, observability backends, trace or request context, provider data, or volatile component implementations cross the core boundary or need stable port/adapter translation, change isolation, error mapping, timeout, retry, circuit-breaker, bulkhead, idempotency, reconciliation, security, core-state ownership, vendor portability, or observability handling | `.mustflow/skills/adapter-boundary/SKILL.md` | External system or protocol, inbound/outbound direction, delivery boundary, internal use case, local port/adapter patterns, provider risk, provider failure policy, core-state ownership risk, vendor portability risk, observability identifier policy, API contract risk, change-isolation ledger, preserved consumer contract, changed files, and command contract entries | Ports, adapters, mappers, controllers, workers, stores, gateways, response mappers, telemetry mappers, timeout and retry policies, circuit breakers, bulkhead boundaries, tests, fixtures, assembly wiring, and directly synchronized docs or templates | provider leakage, caller churn from adapter-only changes, framework business-rule leakage, telemetry backend leakage, storage-key leakage, screen-shaped API coupling, pass-through wrapper, SaaS dashboard as truth source, search or analytics policy leakage, queue contract leakage, unclassified external failure, duplicate side effect, unsafe retry, missing timeout, missing circuit breaker, missing bulkhead, unresolved unknown provider outcome, broken identifier propagation, secret or personal-data leak, or untested integration drift | `changes_status`, `changes_diff_summary`, `test_related`, `test`, `lint`, `build`, `docs_validate_fast`, `test_release`, `mustflow_check` | Boundary classification, change-isolation ledger, preserved consumer contract, delivery adapter responsibility, internal port, provider containment, core-state ownership, vendor portability, validation and mapping, API response mapping, observability identifier flow, timeout/retry/circuit-breaker/bulkhead/idempotency handling, reconciliation behavior, security notes, verification, and remaining provider risk |
 | Tauri frontend invokes, Rust commands, capabilities, permissions, scopes, plugins, filesystem, dialog, shell, opener, updater, sidecar, or mobile native permissions are created or changed | `.mustflow/skills/tauri-code-change/SKILL.md` | Frontend call sites, Tauri config, Rust commands, capability and permission files, plugin config, changed files, and command contract entries | Tauri frontend, Rust commands, capabilities, permissions, scopes, plugins, tests, and docs | broad native permission, untrusted IPC input, filesystem escape, shell or updater risk, or WebView/native boundary drift | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `mustflow_check` | IPC, permission, scope, filesystem, shell, updater, and native boundary checked, verification, and remaining Tauri risk |
 | File path handling, cross-platform path behavior, path helpers, safe filesystem wrappers, clone or checkout destinations, scaffold roots, temp or cache paths, atomic writes, locks, archive extraction, uploads, downloads, scanners, CLI/API/schema path contracts, snapshots, generated outputs, or package artifact paths are created, changed, reviewed, or reported | `.mustflow/skills/file-path-cross-platform-change/SKILL.md` | Path ledger, trust classes, accepted path representation, base root, path helpers, safe filesystem wrappers, clone/checkout/scaffold/install/extract outputs, staging and promotion policy, temp/cache helpers, lock policy, archive policy, upload/download policy, scanner policy, CLI/API/schema/snapshot/generated/package surfaces, platform expectations, failure taxonomy, and command contract entries | Path validators, helpers, wrappers, schemas, CLI/API parsing, snapshots, fixtures, docs, tests, generated-output paths, package artifact paths, clone or scaffold destinations, archive extraction, scanner bounds, temp/cache handling, locks, and cleanup code | path traversal, base containment bypass, drive-relative path bug, reserved-name bug, case-collision bug, Unicode-collision bug, Git checkout path-length failure misreported as network or auth, unsafe archive extraction, non-atomic write claim, stale lock, scanner loop, partial-output cleanup data loss, user-selected destination deletion, path contract drift, or package artifact path drift | `changes_status`, `changes_diff_summary`, `lint`, `build`, `test_related`, `test`, `docs_validate_fast`, `test_release`, `mustflow_check` | Path contract, path ledger, trust classes, root policy, preflight/staging/promotion decisions, Windows/macOS/Linux/archive/upload/download/scanner/lock/temp/cache/atomic/cleanup decisions, failure taxonomy, synchronized contract surfaces, verification, and remaining path risk |
 | File paths, directories, symlinks, real paths, traversal, atomic writes, file copies, generated outputs, temporary files, clone or checkout materialization, cleanup, or Windows/POSIX filesystem behavior are created, changed, reviewed, or reported | `.mustflow/skills/cross-platform-filesystem-safety/SKILL.md` | Path inputs, base directory, trust boundary, symlink policy, write or cleanup strategy, clone/checkout/scaffold/install/extract path budget, app-owned staging boundary, platform expectations, failure taxonomy, and command contract entries | Path validation, file helpers, copy/update/delete code, clone/scaffold/archive cleanup code, scan bounds, fixtures, tests, docs, and templates | path traversal, symlink escape, unsafe overwrite, platform-only behavior, stale output, path-length or filename-length misclassification, watcher/resource misclassification, or cleanup data loss | `changes_status`, `changes_diff_summary`, `test_related`, `docs_validate_fast`, `test_release`, `mustflow_check` | Path trust classes, root boundary, symlink/write/delete/scan decisions, preflight and staging boundaries, clone/scaffold/extract classification, platform assumptions, verification, and remaining filesystem risk |