oh-my-customcode 1.1.101 → 1.1.103

package/templates/.claude/skills/deep-plan/SKILL.md

@@ -81,14 +81,14 @@ When a plan's Phase 1/2 measures a search or retrieval experiment (a new lane, r
 
 Phase 3 verification report path: `.claude/outputs/sessions/{YYYY-MM-DD}/deep-plan-{HHmmss}.md`
 
-Under `mode: "bypassPermissions"`, subagents write directly to `.claude/outputs/` with Write/Edit — no temp-script wrapping is needed (CC v2.1.121+, #1101). When spawning the final synthesis agent to write this artifact, include verbatim in the agent prompt:
+Under the `bypassPermissions` permission mode, subagents write directly to `.claude/outputs/` with Write/Edit — no temp-script wrapping is needed (CC v2.1.121+, #1101). When spawning the final synthesis agent to write this artifact, include verbatim in the agent prompt:
 
 ```
 **Artifact output (for this task)**
 
 Write the verification report to `.claude/outputs/sessions/<date>/deep-plan-<HHmmss>.md`
-using the Write tool directly (create the directory if needed). Your Agent tool call
-runs under `mode: "bypassPermissions"`, so direct Write/Edit on `.claude/` is permitted.
+using the Write tool directly (create the directory if needed). If your session runs under the
+`bypassPermissions` permission mode, direct Write/Edit on `.claude/` is permitted.
 ```
 
 See R006 "Sensitive Path Handling" (CC v2.1.121+ direct-write convention).
@@ -113,4 +113,4 @@ After PASS verdict:
 
 ## Permission Mode
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/deep-verify/SKILL.md

@@ -84,9 +84,9 @@ Run these checks before declaring release READY. Any match is a release blocker.
 
 | Guard | Detection Command | Severity | Remediation |
 |-------|-------------------|----------|-------------|
-| Residual deprecated `/tmp` sensitive-path bypass narrative | `grep -rnE -e 'regardless of[[:space:]]+.?bypassPermissions' -e '(MUST|MANDATORY|Mandatory)[^\n]{0,80}/tmp/\*\.sh' -e '/tmp/\*\.sh[^\n]{0,80}(MANDATORY|MUST be used|bypass script)' .claude/skills/ templates/.claude/skills/ .claude/agents/ templates/.claude/agents/ 2>/dev/null` | **BLOCK** | Remove the deprecated temp-script bypass narrative — it was retired in CC v2.1.121 (#1101). Under `mode: "bypassPermissions"`, write directly to `.claude/` with Write/Edit. See R006 "Sensitive Path Handling" |
+| Residual deprecated `/tmp` sensitive-path bypass narrative | `grep -rnE -e 'regardless of[[:space:]]+.?bypassPermissions' -e '(MUST|MANDATORY|Mandatory)[^\n]{0,80}/tmp/\*\.sh' -e '/tmp/\*\.sh[^\n]{0,80}(MANDATORY|MUST be used|bypass script)' .claude/skills/ templates/.claude/skills/ .claude/agents/ templates/.claude/agents/ 2>/dev/null` | **BLOCK** | Remove the deprecated temp-script bypass narrative — it was retired in CC v2.1.121 (#1101). Under the `bypassPermissions` permission mode, write directly to `.claude/` with Write/Edit. See R006 "Sensitive Path Handling" |
 
-> **Why**: The temp-script sensitive-path bypass for `.claude/` paths was deprecated in CC v2.1.121 (2026-04-28, #1101). Direct Write/Edit/Bash on `.claude/**` works under `mode: "bypassPermissions"`; only catastrophic shell operations (`rm -rf /`) remain independently blocked. Residual bypass procedures or false "guard blocks bypassPermissions" claims in skills/agents are now defects — this guard catches them with a cheap deterministic grep (R023 shift-left: catch stale platform procedures before they reach expensive review).
+> **Why**: The temp-script sensitive-path bypass for `.claude/` paths was deprecated in CC v2.1.121 (2026-04-28, #1101). Direct Write/Edit/Bash on `.claude/**` works under the `bypassPermissions` permission mode; only catastrophic shell operations (`rm -rf /`) remain independently blocked. Residual bypass procedures or false "guard blocks bypassPermissions" claims in skills/agents are now defects — this guard catches them with a cheap deterministic grep (R023 shift-left: catch stale platform procedures before they reach expensive review).
 
 ## Output Format
 
@@ -122,4 +122,4 @@ Run these checks before declaring release READY. Any match is a release blocker.
 
 ## Permission Mode
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/design-shotgun/SKILL.md

@@ -97,7 +97,7 @@ User selects preferred variation(s). Selected design can be:
 
 ## Permission Mode
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".
 
 ## Source
 

package/templates/.claude/skills/dev-lead-routing/SKILL.md

@@ -9,7 +9,7 @@ context: fork
 
 When this skill spawns a subagent via the Agent tool, the spawned prompt MUST include this directive verbatim (or equivalent):
 
-> 이 스킬이 Agent tool로 서브에이전트를 스폰할 때 mode: "bypassPermissions"를 반드시 포함한다. 서브에이전트는 .claude/ 경로에 직접 Write/Edit/Bash를 사용한다(/tmp 우회 불필요, CC v2.1.121+). See R010.
+> 호환을 위해 Agent 호출에 `mode: "bypassPermissions"`를 전달하십시오. CC 2.1.212 미만에서는 필수이며(호출별 기본값 `acceptEdits`가 에이전트 frontmatter `permissionMode`를 덮어씁니다), 2.1.212+에서는 무시되고 서브에이전트가 부모 세션의 권한 모드를 상속합니다(에이전트 frontmatter `permissionMode`로 조정 가능). 무인 실행 전 유효 모드 확인은 R010 「Universal bypassPermissions」 참조. bypassPermissions 세션에서 서브에이전트는 .claude/ 경로에 직접 Write/Edit/Bash를 사용합니다(/tmp 우회 불필요, CC v2.1.121+).
 
 This directive is preserved inline because Agent-tool prompt synthesis can drop SKILL.md notes; inline mandatory directives survive (#1046 lesson).
 
@@ -114,7 +114,7 @@ When Detection resolves to **No**, skip this step — route via the Agent tool u
 ### Step 2: Expert Agent Selection
 Route to appropriate language/framework expert based on file extension and keyword mapping.
 
-> **Permission Mode**: When spawning agents via Agent tool, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+> **Permission Mode**: Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".
 
 ### Step 4: Ontology-RAG Enrichment (R019)
 

package/templates/.claude/skills/dev-review/SKILL.md

@@ -116,11 +116,11 @@ If only PASS/INFO: proceed automatically.
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths is permitted (CC v2.1.121+, #1101) — no `/tmp/*.sh` wrapping is needed.
+Under the `bypassPermissions` permission mode, direct Write/Edit/Bash on `.claude/**` paths is permitted (CC v2.1.121+, #1101) — no `/tmp/*.sh` wrapping is needed.
 
 To write dev-review results under `.claude/outputs/sessions/`:
 
-1. Write the artifact body directly to `.claude/outputs/sessions/$(date +%Y-%m-%d)/dev-review-$(date +%H%M%S).md` with the Write tool (every Agent tool call includes `mode: "bypassPermissions"`, R010)
+1. Write the artifact body directly to `.claude/outputs/sessions/$(date +%Y-%m-%d)/dev-review-$(date +%H%M%S).md` with the Write tool (under the `bypassPermissions` permission mode, R010)
 2. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification
 
 Reference: R006/R010 sensitive-path handling (CC v2.1.121+), #1101.

package/templates/.claude/skills/evaluator-optimizer/SKILL.md

@@ -420,7 +420,7 @@ Integration: Works with [impeccable-design](/skills/impeccable-design) skill for
 
 The `harness-eval` skill provides a structured 15-task SE benchmark rubric that can be used as a preset for the evaluator-optimizer pipeline. When invoked via `/harness-eval`, the harness rubric dimensions (Test Coverage 30%, Architecture 25%, Error Handling 25%, Extensibility 20%) are loaded as the sprint contract criteria.
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".
 
 ## Efficiency Gate (added v0.113.0, #1025)
 

package/templates/.claude/skills/fsd/SKILL.md

@@ -236,11 +236,10 @@ If any of those underlying skills evolve, FSD automatically benefits — its onl
 
 ## Permission Mode Note
 
-When this skill delegates work via Agent tool calls, ALL Agent tool calls MUST include `mode: "bypassPermissions"` per R010 Universal bypassPermissions.
+호환을 위해 Agent 호출에 `mode: "bypassPermissions"`를 전달하십시오. CC 2.1.212 미만에서는 필수이며(호출별 기본값 `acceptEdits`가 에이전트 frontmatter `permissionMode`를 덮어씁니다), 2.1.212+에서는 무시되고 서브에이전트가 부모 세션의 권한 모드를 상속합니다(에이전트 frontmatter `permissionMode`로 조정 가능). 무인 실행 전 유효 모드 확인은 R010 「Universal bypassPermissions」 참조.
 
-⚠ **그 파라미터는 CC v2.1.212+ 에서 무시되며, 프로젝트 scope `permissions.defaultMode` 역시
-CC v2.1.257+ 에서 무시된다(#1644).** 즉 위 지시를 지켰다는 사실은 **무인 실행의 증거가 아니다**.
-자율 루프 진입 전에 유효 모드를 실측한다:
+⚠ 프로젝트 scope `permissions.defaultMode` 역시 CC v2.1.257+ 에서 무시됩니다(#1644). 즉 `mode` 파라미터를 넘겼다는 사실은 **무인 실행의 증거가 아닙니다**.
+자율 루프 진입 전에 유효 모드를 실측합니다:
 
 ```bash
 jq -r '.permissions.defaultMode // "unset"' ~/.claude/settings.json 2>/dev/null || echo unset

package/templates/.claude/skills/harness-eval/SKILL.md

@@ -92,7 +92,7 @@ Results saved to `.claude/outputs/sessions/{YYYY-MM-DD}/harness-eval-{HHmmss}.md
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths (including `.claude/outputs/sessions/`) is permitted (CC v2.1.121+, #1101) — no `/tmp` wrapping is needed.
+Under the `bypassPermissions` permission mode, direct Write/Edit/Bash on `.claude/**` paths (including `.claude/outputs/sessions/`) is permitted (CC v2.1.121+, #1101) — no `/tmp` wrapping is needed.
 
 Write harness-eval results directly to `.claude/outputs/sessions/$(date +%Y-%m-%d)/harness-eval-$(date +%H%M%S).md`. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification. Catastrophic shell operations (e.g., `rm -rf /`) remain blocked by independent safety guards. For CC < v2.1.121, see git history for the legacy `/tmp/*.sh` bypass pattern.
 

package/templates/.claude/skills/harness-synthesizer/SKILL.md

@@ -96,7 +96,7 @@ harness:
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-Under `mode: "bypassPermissions"`, direct Write/Edit/Bash on `.claude/**` paths (including `.claude/outputs/sessions/`) is permitted (CC v2.1.121+, #1101) — no `/tmp` wrapping is needed.
+Under the `bypassPermissions` permission mode, direct Write/Edit/Bash on `.claude/**` paths (including `.claude/outputs/sessions/`) is permitted (CC v2.1.121+, #1101) — no `/tmp` wrapping is needed.
 
 Write harness-synthesizer results directly to `.claude/outputs/sessions/$(date +%Y-%m-%d)/harness-synthesizer-$(date +%H%M%S).md`. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification. Catastrophic shell operations (e.g., `rm -rf /`) remain blocked by independent safety guards. For CC < v2.1.121, see git history for the legacy `/tmp/*.sh` bypass pattern.
 

package/templates/.claude/skills/homework/SKILL.md

@@ -101,7 +101,7 @@ Categorize each finding with the following structure (mirror #1266 format):
 |-------|----------|---------|
 | Critical | Safety classifier trip, credential exposure, scope-creep into privileged domains, working-tree loss | R001 violation, secret dump, unauthorized infra action |
 | High | Rule violation with downstream impact, hallucinated fact acted upon, premature hypothesis causing permanent change | R020 Parallel Read+Change, wrong root cause → wrong fix |
-| Medium | Process gap, missed convention, advisory rule ignored | R007 header missing, bypassPermissions omitted, count sync missed |
+| Medium | Process gap, missed convention, advisory rule ignored | R007 header missing, effective permission mode not verified before unattended run, count sync missed |
 | Low | Minor style drift, non-impactful oversight | honorific regression, ecomode token waste |
 
 **Mistake categories to look for:**
@@ -112,7 +112,7 @@ Categorize each finding with the following structure (mirror #1266 format):
 | Scope-creep | Subagent task expanding beyond its named scope (R010 Subagent Scope-Creep STOP Protocol) |
 | Hallucinated facts | External UI fields stated as fact (R003 Unverifiable External Product UI), in-cluster hostnames, unverified URLs |
 | Premature hypotheses | Diagnosis before reading evidence (R020 Read-Before-Characterize), parallel Read+permanent-change dispatch (R020 Variant) |
-| Missed conventions | Count sync drift (3-way sync), template mirror omitted, bypassPermissions missing |
+| Missed conventions | Count sync drift (3-way sync), template mirror omitted, effective permission mode not verified before unattended run |
 | Over-claim completion | [Done] without verification (R020), test-skip masking failures |
 
 **Do NOT over-claim.** If evidence for a finding is weak or based on recall only, mark it `[recall, low-confidence]` and note what would be needed to confirm it. R020 read-before-characterize applies to this analysis itself.
@@ -224,7 +224,7 @@ If Phase 5 is skipped (`--dry-run`), the draft issue body is written to this art
 
 ## Permission Mode Note
 
-This skill does not spawn subagents directly. If future versions delegate analysis to subagents, ALL Agent tool calls MUST include `mode: "bypassPermissions"` per R010 Universal bypassPermissions.
+This skill does not spawn subagents directly, but future versions may delegate analysis to subagents. Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".
 
 ## Context Fork Note
 

package/templates/.claude/skills/idea/SKILL.md

@@ -32,7 +32,9 @@ Extract the core intent from the natural language input.
 
 ### Phase 3: Feasibility Analysis
 
-Analyze using a sonnet agent (always spawn with `mode: "bypassPermissions"`):
+Analyze using a sonnet agent:
+
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".
 
 - **Scope**: Which modules/files would be affected
 - **Complexity**: XS/S/M/L effort estimate
@@ -73,7 +75,7 @@ The JSON block MUST be wrapped in triple backtick json fence for parsing.
 | Rule | How |
 |------|-----|
 | R009 | Single agent for analysis |
-| R010 | Orchestrator manages phases; analysis delegated to agent with `mode: "bypassPermissions"` |
+| R010 | Orchestrator manages phases; analysis delegated to an agent (permission mode per R010 "Universal bypassPermissions") |
 
 ## Output Format
 

package/templates/.claude/skills/instinct-extractor/SKILL.md

@@ -72,10 +72,10 @@ find ~/.claude/projects -name "session-*.jsonl" \
 추출된 이벤트를 `(domain, action_verb, error_class)` 튜플로 그룹화:
 
 ```
-Cluster: (agent-design, write, missing-frontmatter)
+Cluster: (agent-delegation, spawn, unverified-permission-mode)
   → sessions: [s1, s3, s7], count: 4
   → first_seen: 2026-05-01, last_seen: 2026-05-15
-  → example_corrections: ["bypassPermissions 누락", "name 필드 없음"]
+  → example_corrections: ["무인 실행 전 유효 권한 모드 미확인", "per-call mode 값을 무인 실행 증거로 간주"]
 ```
 
 필터링 기준:
@@ -88,9 +88,9 @@ Cluster: (agent-design, write, missing-frontmatter)
 각 클러스터를 "instinct 후보"로 명명:
 
 ```
-instinct: prevent-missing-bypassPermissions
-  근거: 4회 반복 (2주), agent spawn 시 mode 누락
-  대응 패턴: spawn 전 bypassPermissions 자가 체크
+instinct: verify-permission-mode-before-unattended
+  근거: 4회 반복 (2주), 무인 실행 전 유효 권한 모드 미확인
+  대응 패턴: 무인 실행 전 유효 권한 모드 실측(R010 Self-Check 1)
   제안 자산: 기존 R010 강화 OR 신규 guard skill
 ```
 
@@ -111,9 +111,9 @@ context fork cap (12개) 확인: 신규 skill이 `context: fork` 필요 시 현
 ```
 [instinct-extractor] {N}개 instinct 후보 발견 (최근 {DAYS}일, {M}개 세션)
 
-  1. [high] prevent-missing-bypassPermissions
-     반복: 4회 | 마지막: 2026-05-15 | 도메인: agent-design
-     대응 본능: spawn 전 mode 체크 → skill 후보: bypassPermissions-guard
+  1. [high] verify-permission-mode-before-unattended
+     반복: 4회 | 마지막: 2026-05-15 | 도메인: agent-delegation
+     대응 본능: 무인 실행 전 유효 모드 실측 → skill 후보: permission-mode-guard
 
   2. [medium] transcript-scan-format-mismatch
      반복: 3회 | 마지막: 2026-05-10 | 도메인: memory

package/templates/.claude/skills/intent-detection/SKILL.md

@@ -301,4 +301,4 @@ Use Claude's WebFetch/WebSearch
 └── Reason: {explanation}
 ```
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/multi-model-verification/SKILL.md

@@ -58,7 +58,7 @@ TeamCreate("verification-team")
 └── style-reviewer (haiku) → Style review
 ```
 
-Members communicate findings via SendMessage for cross-cutting concerns.
+Members communicate findings via SendMessage for cross-cutting concerns when their tool set includes it; otherwise they write findings to artifact files whose paths the orchestrator relays (R018 "멤버 도구 부재 시 대체 규약", #1817).
 
 ### Agent Tool Fallback
 
@@ -129,4 +129,4 @@ Multi-model verification uses 3x the tokens of a single review. Reserve for:
 - Architecture decisions
 - Pre-release verification
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/omcustom-release-notes/SKILL.md

@@ -210,4 +210,4 @@ mgr-gitnerd: gh release create           ->  create release with notes
 
 ## Permission Mode
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/pipeline/SKILL.md

@@ -64,7 +64,7 @@ Execute these steps to display available pipelines:
    - **Prompt steps** (`prompt: text`): Execute the described action using appropriate agents/tools
    - **Foreach steps** (`foreach: collection`): Iterate over collection from previous step output
    - **Parallel steps** (`parallel: [step1, step2]`): Execute contained steps concurrently using Agent tool. Each parallel step runs as an independent Agent. Max 4 concurrent per R009. Steps within a parallel block MUST be independent (no shared state, no sequential dependencies). Dependencies between parallel and non-parallel steps use `depends_on:` field.
-   - **Agent mode**: When spawning agents via Agent tool, always pass `mode: "bypassPermissions"` to match agent frontmatter. The Agent tool default (`acceptEdits`) overrides frontmatter `permissionMode`, causing permission prompts during unattended execution.
+   - **Agent mode**: Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".
 5. Report completion or failure
 
 ### Resume Mode (/pipeline resume)

package/templates/.claude/skills/pipeline/workflows/auto-dev.yaml

@@ -171,8 +171,28 @@ steps:
          - Otherwise: highest-priority open tier (bug → chore → feature)
       2. Apply Step 1 filter (label-based exclusion and preference)
       3. Sort by dependency: prerequisites before dependents
-      4. Cap at 7 issues; if priority issues < 7, stop at that priority (don't mix tiers)
+      4. Cap at 7 issues; if priority issues < 7, stop at that priority (don't mix tiers) —
+         EXCEPT the batch-size fill in rule 6, which takes precedence when the top tier has < 3.
       5. Minimum 1 issue; if 0 eligible, halt with "no eligible issues for auto-dev run"
+      6. Batch-size norm (fill exception to "don't mix tiers"): if the top tier has fewer than
+         3 eligible issues, fill from the next tiers in order (bug → chore → feature, then
+         preferred-label / retrospective-proposal issues) until the scope is 3-7 issues. Tier
+         mixing is allowed ONLY for this fill. A 1-2 issue release is permitted ONLY when the
+         eligible total across ALL tiers is < 3. Issues split off or deferred pending approval
+         or a decision (`.claude/hooks/**` unattended split in Step 3, decision-needed, etc.)
+         do NOT count toward the eligible total. Because the Step 3 split happens AFTER this
+         step, re-evaluate this fill after the Step 3 split: if the remaining scope is below 3
+         and eligible issues remain, fill again from the next tiers, then re-run the Step 3 path
+         pre-check on any newly added issue. When the scope has multiple issues, issue
+         implementation delegations in parallel (R009) unless their target files overlap, or one
+         delegation depends on another's in-release implementation choice (see the implement
+         step's R009 「File-Disjoint ≠ Independent」 document-implementation variant); local git
+         state changes (per-issue lifecycle commits via mgr-gitnerd) remain serialized, one at a
+         time (R009 「File-Disjoint ≠ Independent (Local Git State)」).
+         Rationale: the fixed per-release cost (review rounds, CI, release.yml) must not be
+         carried by 1-2 issues; consecutive top-tier-only runs also starve lower tiers.
+         Origin: user feedback 2026-10-05 ("이슈를 너무 조금씩 해결한다"); #1814 harness proposal R3
+         (lower-tier starvation).
 
       ## Step 3 — Approval-required path pre-check (R010)
 
@@ -211,6 +231,9 @@ steps:
 
       Output approval_required_paths (list, empty if none) as pipeline state.
 
+      After an unattended split, re-evaluate the Step 2 rule 6 batch-size fill against the
+      remaining scope (split-off issues do not count) before assigning the milestone.
+
       Assign scoped issues to milestone.
       Output markdown release manifest:
         | order | # | title | prerequisite | effort | labels |
@@ -469,7 +492,7 @@ steps:
       - Parallel execution per R009 (max 4 concurrent, respect dependencies)
       - Issues whose prerequisites failed in-run MUST be skipped (log reason)
       - No direct orchestrator writes (R010)
-      - All Agent tool calls MUST pass mode: "bypassPermissions" to prevent permission prompts during unattended execution
+      - On CC < 2.1.212 Agent tool calls need `mode: "bypassPermissions"` (the per-call default acceptEdits overrides frontmatter `permissionMode`), so pass it for compatibility. On CC >= 2.1.212 `mode` is ignored and subagents inherit the parent session's permission mode (frontmatter `permissionMode` may adjust it). Verify the effective mode before unattended execution per R010 「Universal bypassPermissions」 (pre-triage)
       - Mid-run scope additions (a new issue added via user interrupt AFTER implement began) MUST re-enter the verify-build gate before release — do NOT let a late-added scope item ride to release on a prior verify-build pass. Critical for code changes; benign for docs-only (#1301).
       - When an implement-stage delegation edits rule/skill/guide TEXT, the orchestrator MUST NOT author the final committed wording — the subagent writes it directly from the issue body (`gh issue view <N> --json body`); the delegation prompt supplies pointers, insertion anchors, constraints, verbatim tool-output quotations, and measured facts only
         (R010 「출처 인용과 인접 문구 점검도 같은 규율」 보강 2항목, #1698 #1). The orchestrator's own requirement/scope summary counts as final wording too — copy the issue's proposal sentence from `gh issue view` output verbatim, and tag any orchestrator paraphrase "[요약 — 원문 우선]"
@@ -780,7 +803,7 @@ steps:
 
       ## Sensitive Path Handling (CC v2.1.121+)
 
-      Direct Write/Edit/Bash on `.claude/**` is permitted under `mode: "bypassPermissions"` as of CC v2.1.121 (#1101). The legacy `/tmp/*.sh` bypass is no longer required. Structural changes (new agents/skills) still go through mgr-creator with R017 verification.
+      Direct Write/Edit/Bash on `.claude/**` is permitted under the `bypassPermissions` permission mode as of CC v2.1.121 (#1101). The legacy `/tmp/*.sh` bypass is no longer required. Structural changes (new agents/skills) still go through mgr-creator with R017 verification.
 
       For CC < v2.1.121 see git history for the legacy bypass pattern.
 

package/templates/.claude/skills/post-release-followup/SKILL.md

@@ -27,7 +27,7 @@ Gather unfinished work from multiple sources:
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-Under `mode: "bypassPermissions"`, subagents write directly to `.claude/outputs/sessions/` with the Write tool — direct `.claude/**` writes are permitted (CC v2.1.121+, #1101). No `/tmp` staging or script wrapping is needed. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification.
+Under the `bypassPermissions` permission mode, subagents write directly to `.claude/outputs/sessions/` with the Write tool — direct `.claude/**` writes are permitted (CC v2.1.121+, #1101). No `/tmp` staging or script wrapping is needed. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification.
 
 Reference: R006/R010 sensitive-path handling (direct `.claude/**` write under bypassPermissions), #1101.
 
@@ -180,4 +180,4 @@ Add priority label (`P1`, `P2`, `P3`) based on categorization. Default for auto-
 
 ## Permission Mode
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/professor-triage/SKILL.md

@@ -50,13 +50,13 @@ When lightweight mode is used, the triage output (Phase 4E artifact and/or Phase
 
 | Phase | Agent | Mode |
 |-------|-------|------|
-| Phase 2 codebase search | Explore (haiku) | bypassPermissions |
-| Phase 4A Senior Architect | general-purpose (sonnet) | bypassPermissions |
-| Phase 4B Project Colleague | general-purpose (sonnet) | bypassPermissions |
-| Phase 4C Professor Synthesis | general-purpose (opus) | bypassPermissions |
-| Phase 4D triage comment | mgr-gitnerd | bypassPermissions |
-| Phase 4E artifact report | general-purpose | bypassPermissions |
-| Phase 5 GitHub actions | mgr-gitnerd | bypassPermissions |
+| Phase 2 codebase search | Explore (haiku) | pass `bypassPermissions` (required on CC < 2.1.212; ignored on 2.1.212+, where the parent session mode applies unless agent frontmatter `permissionMode` overrides it) |
+| Phase 4A Senior Architect | general-purpose (sonnet) | pass `bypassPermissions` (required on CC < 2.1.212; ignored on 2.1.212+, where the parent session mode applies unless agent frontmatter `permissionMode` overrides it) |
+| Phase 4B Project Colleague | general-purpose (sonnet) | pass `bypassPermissions` (required on CC < 2.1.212; ignored on 2.1.212+, where the parent session mode applies unless agent frontmatter `permissionMode` overrides it) |
+| Phase 4C Professor Synthesis | general-purpose (opus) | pass `bypassPermissions` (required on CC < 2.1.212; ignored on 2.1.212+, where the parent session mode applies unless agent frontmatter `permissionMode` overrides it) |
+| Phase 4D triage comment | mgr-gitnerd | pass `bypassPermissions` (required on CC < 2.1.212; ignored on 2.1.212+, where the parent session mode applies unless agent frontmatter `permissionMode` overrides it) |
+| Phase 4E artifact report | general-purpose | pass `bypassPermissions` (required on CC < 2.1.212; ignored on 2.1.212+, where the parent session mode applies unless agent frontmatter `permissionMode` overrides it) |
+| Phase 5 GitHub actions | mgr-gitnerd | pass `bypassPermissions` (required on CC < 2.1.212; ignored on 2.1.212+, where the parent session mode applies unless agent frontmatter `permissionMode` overrides it) |
 
 **Agent selection constraint**: Phases 4A, 4B, 4C, 4E MUST use `general-purpose` (NOT `arch-documenter`). `arch-documenter` has `disallowedTools: [Bash]` — cannot run the `gh`/shell commands these phases require. See #1043.
 
@@ -69,14 +69,14 @@ When lightweight mode is used, the triage output (Phase 4E artifact and/or Phase
 
 ## Artifact Output (R006/R010)
 
-Under `mode: "bypassPermissions"`, agents write directly to `.claude/outputs/` with Write/Edit — no temp-script wrapping is needed (CC v2.1.121+, #1101). When spawning Phase 4A/4B/4C/4E agents, include verbatim in each agent prompt:
+Under the `bypassPermissions` permission mode, agents write directly to `.claude/outputs/` with Write/Edit — no temp-script wrapping is needed (CC v2.1.121+, #1101). When spawning Phase 4A/4B/4C/4E agents, include verbatim in each agent prompt:
 
 ```
 **Artifact output (for this task)**
 
 If your task involves writing artifacts under `.claude/outputs/`, write the file to
 `.claude/outputs/sessions/<date>/<artifact>.md` using the Write tool directly (create the
-directory if needed). Your Agent tool call runs under `mode: "bypassPermissions"`, so direct
+directory if needed). If your session runs under the `bypassPermissions` permission mode, direct
 Write/Edit on `.claude/` is permitted.
 ```
 
@@ -98,4 +98,4 @@ See R006 "Sensitive Path Handling" (CC v2.1.121+ direct-write convention).
 
 ## Permission Mode
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/profile/SKILL.md

@@ -23,7 +23,7 @@ Switch the active plugin set to match a workflow profile, reducing per-spawn ski
 ## Implementation rules
 
 > **.claude/ path handling (CC v2.1.121+)**
-> Direct Write/Edit on `.claude/profiles/.active` and `~/.claude/settings.json` is permitted under `mode: "bypassPermissions"` (CC v2.1.121+, #1101). The legacy `/tmp/*.sh` bypass is deprecated. For CC < v2.1.121, see git history for the legacy pattern.
+> Direct Write/Edit on `.claude/profiles/.active` and `~/.claude/settings.json` is permitted under the `bypassPermissions` permission mode (CC v2.1.121+, #1101). The legacy `/tmp/*.sh` bypass is deprecated. For CC < v2.1.121, see git history for the legacy pattern.
 
 ## Profiles directory
 
@@ -70,10 +70,10 @@ Profile: web-app
   Disable: codex, ralph-wiggum, agent-sdk-dev, ...
 ```
 
-6. Apply changes via direct Edit on `~/.claude/settings.json` (`mode: "bypassPermissions"`, CC v2.1.121+):
+6. Apply changes via direct Edit on `~/.claude/settings.json` (under `bypassPermissions` permission mode, CC v2.1.121+):
    - Read `~/.claude/settings.json`, merge the computed diff into `enabledPlugins` (set enabled plugins to `true`, disabled plugins to `false`), then Write the updated JSON back.
 
-7. Write active marker via direct Write on `.claude/profiles/.active` (`mode: "bypassPermissions"`):
+7. Write active marker via direct Write on `.claude/profiles/.active` (under `bypassPermissions` permission mode):
    - Write the profile `<name>` as plain text content to `.claude/profiles/.active`.
 
 8. Confirm:
@@ -86,7 +86,7 @@ IMPORTANT: Restart this Claude Code session for plugin changes to take effect.
 
 ## Workflow: `/profile reset`
 
-1. Remove `.claude/profiles/.active` marker via direct `Bash: /bin/rm .claude/profiles/.active` (`mode: "bypassPermissions"`)
+1. Remove `.claude/profiles/.active` marker via direct `Bash: /bin/rm .claude/profiles/.active` (under `bypassPermissions` permission mode)
 2. Print: `[Done] Profile marker removed. Full plugin set will be active after restart.`
 3. Note: does NOT revert `~/.claude/settings.json` — user should re-run `/profile load <other>` or manually restore
 

package/templates/.claude/skills/qa-lead-routing/SKILL.md

@@ -9,7 +9,7 @@ context: fork
 
 When this skill spawns a subagent via the Agent tool, the spawned prompt MUST include this directive verbatim (or equivalent):
 
-> 이 스킬이 Agent tool로 서브에이전트를 스폰할 때 mode: "bypassPermissions"를 반드시 포함한다. 서브에이전트는 .claude/ 경로에 직접 Write/Edit/Bash를 사용한다(/tmp 우회 불필요, CC v2.1.121+). See R010.
+> 호환을 위해 Agent 호출에 `mode: "bypassPermissions"`를 전달하십시오. CC 2.1.212 미만에서는 필수이며(호출별 기본값 `acceptEdits`가 에이전트 frontmatter `permissionMode`를 덮어씁니다), 2.1.212+에서는 무시되고 서브에이전트가 부모 세션의 권한 모드를 상속합니다(에이전트 frontmatter `permissionMode`로 조정 가능). 무인 실행 전 유효 모드 확인은 R010 「Universal bypassPermissions」 참조. bypassPermissions 세션에서 서브에이전트는 .claude/ 경로에 직접 Write/Edit/Bash를 사용합니다(/tmp 우회 불필요, CC v2.1.121+).
 
 This directive is preserved inline because Agent-tool prompt synthesis can drop SKILL.md notes; inline mandatory directives survive (#1046 lesson).
 
@@ -54,7 +54,7 @@ quality_analysis   → qa-planner + qa-engineer (parallel)
 full_qa_cycle      → all agents (sequential)
 ```
 
-> **Permission Mode**: When spawning agents via Agent tool, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+> **Permission Mode**: Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".
 
 ### Ontology-RAG Enrichment (R019)
 

package/templates/.claude/skills/release-plan/SKILL.md

@@ -208,4 +208,4 @@ File header format:
 
 ## Permission Mode
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/research/SKILL.md

@@ -194,7 +194,7 @@ Convergence expected by round 3. Hard stop at round 30.
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-Under `mode: "bypassPermissions"`, subagents write directly to `.claude/outputs/sessions/` with the Write tool — direct `.claude/**` writes are permitted (CC v2.1.121+, #1101). No `/tmp` staging or script wrapping is needed. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification.
+Under the `bypassPermissions` permission mode, subagents write directly to `.claude/outputs/sessions/` with the Write tool — direct `.claude/**` writes are permitted (CC v2.1.121+, #1101). No `/tmp` staging or script wrapping is needed. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification.
 
 Reference: R006/R010 sensitive-path handling (direct `.claude/**` write under bypassPermissions), #1101.
 
@@ -427,9 +427,9 @@ When running inside an Agent Teams member (not via Skill tool), the research wor
 
 The orchestrator reads this SKILL.md and includes the research instructions directly in the Teams member's prompt. The member then:
 
-1. Executes Phase 1-4 autonomously using its own Agent tool access
-2. Spawns research teams as sub-agents (Teams members CAN spawn sub-agents)
-3. Delivers results via `SendMessage` to the team lead instead of returning to orchestrator
+1. Executes Phase 1-4 autonomously, using its own Agent tool access when its tool set includes Agent (see item 2 otherwise)
+2. Spawns research teams as sub-agents (Teams members can spawn sub-agents only if their tool set includes Agent; otherwise fall back to file-channel handoff relayed by the orchestrator, #1817)
+3. Delivers results via `SendMessage` to the team lead instead of returning to orchestrator when its tool set includes SendMessage; otherwise writes the results to an artifact file and reports the path, which the orchestrator relays (R018 "멤버 도구 부재 시 대체 규약", #1817)
 
 ### Prompt Embedding Pattern
 
@@ -444,6 +444,8 @@ Agent(
 
   Topic: {user's research topic}
   Deliver results via SendMessage to team lead when complete.
+  If SendMessage is not in your tool set, write the results to an artifact
+  file and report its path for the orchestrator to relay.
   """
 )
 ```
@@ -453,7 +455,7 @@ Agent(
 | Aspect | Orchestrator Mode | Teams Mode |
 |--------|------------------|------------|
 | Invocation | `Skill(research)` | Prompt embedding |
-| Result delivery | Return to main conversation | `SendMessage` to team lead |
+| Result delivery | Return to main conversation | `SendMessage` to team lead (if absent: artifact file relayed by orchestrator) |
 | Artifact persistence | Teams member writes artifact | Same |
 | GitHub issue creation | Orchestrator handles | Teams member handles directly |
 | Phase management | Orchestrator manages phases | Member manages phases autonomously |
@@ -478,4 +480,4 @@ Agent(
 | result-aggregation | Team results formatted per aggregation skill |
 | multi-model-verification | Phase 2 uses multi-model verification pattern |
 
-When spawning agents via the Agent tool during this skill's execution, always pass `mode: "bypassPermissions"`. The Agent tool default (`acceptEdits`) overrides agent frontmatter `permissionMode`, causing permission prompts during unattended execution.
+Pass `mode: "bypassPermissions"` on Agent calls for compatibility: it is required on CC < 2.1.212 (the per-call default, `acceptEdits`, overrides agent frontmatter `permissionMode`) and ignored on 2.1.212+, where subagents inherit the parent session's permission mode (adjustable via agent frontmatter `permissionMode`). Verify the effective mode before unattended runs: see R010 "Universal bypassPermissions".

package/templates/.claude/skills/result-aggregation/SKILL.md

@@ -170,7 +170,7 @@ R006 Artifact Channel Protocol을 소비하는 표준 패턴. 병렬 에이전
 
 ### Tool: Writing artifacts under .claude/outputs/
 
-Under `mode: "bypassPermissions"`, subagents write directly to `.claude/outputs/sessions/` with the Write tool — direct `.claude/**` writes are permitted (CC v2.1.121+, #1101). No `/tmp` staging or script wrapping is needed. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification.
+Under the `bypassPermissions` permission mode, subagents write directly to `.claude/outputs/sessions/` with the Write tool — direct `.claude/**` writes are permitted (CC v2.1.121+, #1101). No `/tmp` staging or script wrapping is needed. Read-only Bash on `.claude/outputs/` (e.g., `cat`, `head`, `wc`) is allowed for verification.
 
 Reference: R006/R010 sensitive-path handling (direct `.claude/**` write under bypassPermissions), #1101.
 

package/templates/.claude/skills/roundtable-debate/SKILL.md

@@ -54,13 +54,13 @@ TeamCreate("roundtable-{topic}")
 
 If your task involves writing artifacts under `.claude/outputs/`, write the file to
 `.claude/outputs/sessions/<date>/<artifact>.md` using the Write tool directly (create the
-directory if needed). Your Agent tool call runs under `mode: "bypassPermissions"`, so direct
+directory if needed). If your session runs under the `bypassPermissions` permission mode, direct
 Write/Edit on `.claude/` is permitted (CC v2.1.121+).
 ```
 
 ### Phase 1: Round 1 — Discussion
 
-모든 독립 분석 공개 후 라운드 1 토론. SendMessage로 peer 의견 교환.
+모든 독립 분석 공개 후 라운드 1 토론. SendMessage로 peer 의견 교환 (멤버 도구에 SendMessage가 없으면 의견을 아티팩트 파일에 쓰고 오케스트레이터가 경로를 중계 — R018 「멤버 도구 부재 시 대체 규약」, #1817).
 
 규칙:
 1. 다른 의견을 기각할 때 명시적 정당화 (3개 근거) 필수

package/templates/.claude/skills/scout/SKILL.md

@@ -105,14 +105,9 @@ Before execution, show the plan:
 
 ### Phase 3: Fit Analysis
 
-> **MUST**: Agent tool 호출 시 반드시 `mode: "bypassPermissions"` 파라미터를 포함해야 한다 (R010 Universal bypassPermissions). CC Agent tool의 기본값은 `acceptEdits`이며, 이는 agent frontmatter의 `permissionMode`를 덮어쓴다. `mode` 누락 시 Bash/WebFetch 권한 프롬프트가 발생하여 비대화형 실행이 중단된다.
->
-> ```
-> ❌ Agent(subagent_type: "general-purpose", prompt: "...")
-> ✓  Agent(subagent_type: "general-purpose", mode: "bypassPermissions", prompt: "...")
-> ```
+> 호환을 위해 Agent 호출에 `mode: "bypassPermissions"`를 전달하십시오. CC 2.1.212 미만에서는 필수이며(호출별 기본값 `acceptEdits`가 에이전트 frontmatter `permissionMode`를 덮어씁니다), 2.1.212+에서는 무시되고 서브에이전트가 부모 세션의 권한 모드를 상속합니다(에이전트 frontmatter `permissionMode`로 조정 가능). 무인 실행 전 유효 모드 확인은 R010 「Universal bypassPermissions」 참조.
 
-Spawn 1 sonnet agent with `mode: "bypassPermissions"` and the following analysis prompt.
+Spawn 1 sonnet agent with the following analysis prompt.
 
 **Inputs**:
 - Fetched content summary (Phase 1)
@@ -163,7 +158,7 @@ Return a structured verdict:
 
 ### Phase 4: Issue Creation
 
-> **NOTE**: Phase 4는 orchestrator가 직접 `gh issue create` (Bash)로 처리한다. 만약 이슈 생성을 Agent(mgr-gitnerd 등)에 위임할 경우, 해당 Agent tool 호출에도 반드시 `mode: "bypassPermissions"`를 포함해야 한다 (R010).
+> **NOTE**: Phase 4는 orchestrator가 직접 `gh issue create` (Bash)로 처리한다. 만약 이슈 생성을 Agent(mgr-gitnerd 등)에 위임할 경우, 권한 모드는 R010 「Universal bypassPermissions」를 따른다.
 
 1. Ensure scout labels exist (defensive, idempotent):
 ```bash

package/templates/.claude/skills/sec-agentshield-wrapper/SKILL.md

@@ -171,4 +171,4 @@ CRG 미연결 시 Grep + Read 조합으로 fallback.
 
 ## Permission Mode
 
-이 스킬에서 Agent 도구를 사용하여 에이전트를 스폰할 경우, 항상 `mode: "bypassPermissions"` 를 전달해야 한다. Agent 도구의 기본값(`acceptEdits`)은 에이전트 frontmatter `permissionMode` 를 덮어쓰므로 무인 실행 중 권한 프롬프트가 발생할 수 있다.
+호환을 위해 Agent 호출에 `mode: "bypassPermissions"`를 전달하십시오. CC 2.1.212 미만에서는 필수이며(호출별 기본값 `acceptEdits`가 에이전트 frontmatter `permissionMode`를 덮어씁니다), 2.1.212+에서는 무시되고 서브에이전트가 부모 세션의 권한 모드를 상속합니다(에이전트 frontmatter `permissionMode`로 조정 가능). 무인 실행 전 유효 모드 확인은 R010 「Universal bypassPermissions」 참조.