oh-my-customcode 2.0.6 → 2.0.8

package/templates/.claude/ontology/graphs/agent-skill.json

@@ -17,7 +17,9 @@
     "lang-typescript-expert": [
       "typescript-best-practices"
     ],
-    "lang-java21-expert": [],
+    "lang-java-expert": [
+      "java-best-practices"
+    ],
     "be-fastapi-expert": [
       "fastapi-best-practices"
     ],
@@ -105,7 +107,32 @@
       "claude-code-bible"
     ],
     "sys-memory-keeper": [],
-    "sys-naggy": []
+    "sys-naggy": [],
+    "agora-runner": [
+      "agora"
+    ],
+    "be-django-expert": [
+      "django-best-practices"
+    ],
+    "db-alembic-expert": [
+      "alembic-best-practices",
+      "postgres-best-practices"
+    ],
+    "fe-design-expert": [
+      "impeccable-design",
+      "web-design-guidelines",
+      "diagram-design"
+    ],
+    "sec-codeql-expert": [
+      "cve-triage",
+      "adversarial-review"
+    ],
+    "slack-cli-expert": [],
+    "tracker-checkpoint": [
+      "dag-orchestration",
+      "pipeline-guards"
+    ],
+    "wiki-curator": []
   },
   "reverse": {
     "go-best-practices": [
@@ -136,7 +163,8 @@
       "fe-vercel-agent"
     ],
     "web-design-guidelines": [
-      "fe-vercel-agent"
+      "fe-vercel-agent",
+      "fe-design-expert"
     ],
     "vercel-deploy": [
       "fe-vercel-agent"
@@ -163,7 +191,8 @@
       "de-pipeline-expert"
     ],
     "postgres-best-practices": [
-      "db-postgres-expert"
+      "db-postgres-expert",
+      "db-alembic-expert"
     ],
     "redis-best-practices": [
       "db-redis-expert"
@@ -225,7 +254,37 @@
     "lists": [],
     "monitoring-setup": [],
     "result-aggregation": [],
-    "status": []
+    "status": [],
+    "java-best-practices": [
+      "lang-java-expert"
+    ],
+    "agora": [
+      "agora-runner"
+    ],
+    "django-best-practices": [
+      "be-django-expert"
+    ],
+    "alembic-best-practices": [
+      "db-alembic-expert"
+    ],
+    "impeccable-design": [
+      "fe-design-expert"
+    ],
+    "diagram-design": [
+      "fe-design-expert"
+    ],
+    "cve-triage": [
+      "sec-codeql-expert"
+    ],
+    "adversarial-review": [
+      "sec-codeql-expert"
+    ],
+    "dag-orchestration": [
+      "tracker-checkpoint"
+    ],
+    "pipeline-guards": [
+      "tracker-checkpoint"
+    ]
   },
   "nodes": [],
   "links": []

package/templates/.claude/ontology/graphs/full-graph.json

@@ -22,7 +22,7 @@
       "type": "Agent",
       "class": "LanguageExpert"
     },
-    "lang-java21-expert": {
+    "lang-java-expert": {
       "type": "Agent",
       "class": "LanguageExpert"
     },
@@ -433,6 +433,66 @@
     "R005": {
       "type": "Rule",
       "class": "MayRule"
+    },
+    "java-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "agora": {
+      "type": "Skill"
+    },
+    "django-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "alembic-best-practices": {
+      "type": "Skill",
+      "class": "BestPracticeSkill"
+    },
+    "impeccable-design": {
+      "type": "Skill"
+    },
+    "diagram-design": {
+      "type": "Skill"
+    },
+    "cve-triage": {
+      "type": "Skill"
+    },
+    "adversarial-review": {
+      "type": "Skill"
+    },
+    "dag-orchestration": {
+      "type": "Skill"
+    },
+    "pipeline-guards": {
+      "type": "Skill"
+    },
+    "agora-runner": {
+      "type": "Agent"
+    },
+    "be-django-expert": {
+      "type": "Agent",
+      "class": "BackendExpert"
+    },
+    "db-alembic-expert": {
+      "type": "Agent",
+      "class": "DatabaseExpert"
+    },
+    "fe-design-expert": {
+      "type": "Agent",
+      "class": "FrontendExpert"
+    },
+    "sec-codeql-expert": {
+      "type": "Agent"
+    },
+    "slack-cli-expert": {
+      "type": "Agent"
+    },
+    "tracker-checkpoint": {
+      "type": "Agent"
+    },
+    "wiki-curator": {
+      "type": "Agent"
     }
   },
   "edges": [
@@ -693,7 +753,7 @@
     },
     {
       "source": "dev-lead-routing",
-      "target": "lang-java21-expert",
+      "target": "lang-java-expert",
       "relation": "routes_to"
     },
     {
@@ -721,6 +781,66 @@
       "target": "flutter-best-practices",
       "relation": "requires"
     },
+    {
+      "source": "lang-java-expert",
+      "target": "java-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "agora-runner",
+      "target": "agora",
+      "relation": "requires"
+    },
+    {
+      "source": "be-django-expert",
+      "target": "django-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "db-alembic-expert",
+      "target": "alembic-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "db-alembic-expert",
+      "target": "postgres-best-practices",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "impeccable-design",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "web-design-guidelines",
+      "relation": "requires"
+    },
+    {
+      "source": "fe-design-expert",
+      "target": "diagram-design",
+      "relation": "requires"
+    },
+    {
+      "source": "sec-codeql-expert",
+      "target": "cve-triage",
+      "relation": "requires"
+    },
+    {
+      "source": "sec-codeql-expert",
+      "target": "adversarial-review",
+      "relation": "requires"
+    },
+    {
+      "source": "tracker-checkpoint",
+      "target": "dag-orchestration",
+      "relation": "requires"
+    },
+    {
+      "source": "tracker-checkpoint",
+      "target": "pipeline-guards",
+      "relation": "requires"
+    },
     {
       "source": "dev-lead-routing",
       "target": "be-fastapi-expert",
@@ -883,8 +1003,10 @@
         "dev-lead-routing"
       ]
     },
-    "lang-java21-expert": {
-      "requires": [],
+    "lang-java-expert": {
+      "requires": [
+        "java-best-practices"
+      ],
       "routed_by": [
         "dev-lead-routing"
       ]
@@ -1219,7 +1341,8 @@
     },
     "web-design-guidelines": {
       "required_by": [
-        "fe-vercel-agent"
+        "fe-vercel-agent",
+        "fe-design-expert"
       ],
       "depends_on": []
     },
@@ -1267,7 +1390,8 @@
     },
     "postgres-best-practices": {
       "required_by": [
-        "db-postgres-expert"
+        "db-postgres-expert",
+        "db-alembic-expert"
       ],
       "depends_on": []
     },
@@ -1389,7 +1513,7 @@
         "lang-rust-expert",
         "lang-kotlin-expert",
         "lang-typescript-expert",
-        "lang-java21-expert",
+        "lang-java-expert",
         "fe-vercel-agent",
         "fe-vuejs-agent",
         "fe-svelte-agent",
@@ -1527,6 +1651,115 @@
     },
     "R018": {
       "referenced_by": []
+    },
+    "java-best-practices": {
+      "required_by": [
+        "lang-java-expert"
+      ],
+      "depends_on": []
+    },
+    "agora": {
+      "required_by": [
+        "agora-runner"
+      ],
+      "depends_on": []
+    },
+    "django-best-practices": {
+      "required_by": [
+        "be-django-expert"
+      ],
+      "depends_on": []
+    },
+    "alembic-best-practices": {
+      "required_by": [
+        "db-alembic-expert"
+      ],
+      "depends_on": []
+    },
+    "impeccable-design": {
+      "required_by": [
+        "fe-design-expert"
+      ],
+      "depends_on": []
+    },
+    "diagram-design": {
+      "required_by": [
+        "fe-design-expert"
+      ],
+      "depends_on": []
+    },
+    "cve-triage": {
+      "required_by": [
+        "sec-codeql-expert"
+      ],
+      "depends_on": []
+    },
+    "adversarial-review": {
+      "required_by": [
+        "sec-codeql-expert"
+      ],
+      "depends_on": []
+    },
+    "dag-orchestration": {
+      "required_by": [
+        "tracker-checkpoint"
+      ],
+      "depends_on": []
+    },
+    "pipeline-guards": {
+      "required_by": [
+        "tracker-checkpoint"
+      ],
+      "depends_on": []
+    },
+    "agora-runner": {
+      "requires": [
+        "agora"
+      ],
+      "routed_by": []
+    },
+    "be-django-expert": {
+      "requires": [
+        "django-best-practices"
+      ],
+      "routed_by": []
+    },
+    "db-alembic-expert": {
+      "requires": [
+        "alembic-best-practices",
+        "postgres-best-practices"
+      ],
+      "routed_by": []
+    },
+    "fe-design-expert": {
+      "requires": [
+        "impeccable-design",
+        "web-design-guidelines",
+        "diagram-design"
+      ],
+      "routed_by": []
+    },
+    "sec-codeql-expert": {
+      "requires": [
+        "cve-triage",
+        "adversarial-review"
+      ],
+      "routed_by": []
+    },
+    "slack-cli-expert": {
+      "requires": [],
+      "routed_by": []
+    },
+    "tracker-checkpoint": {
+      "requires": [
+        "dag-orchestration",
+        "pipeline-guards"
+      ],
+      "routed_by": []
+    },
+    "wiki-curator": {
+      "requires": [],
+      "routed_by": []
     }
   }
 }

package/templates/.claude/ontology/graphs/routing.json

@@ -22,7 +22,7 @@
         "lang-rust-expert",
         "lang-kotlin-expert",
         "lang-typescript-expert",
-        "lang-java21-expert",
+        "lang-java-expert",
         "fe-vercel-agent",
         "fe-vuejs-agent",
         "fe-svelte-agent",
@@ -79,7 +79,7 @@
     "lang-rust-expert": "dev-lead-routing",
     "lang-kotlin-expert": "dev-lead-routing",
     "lang-typescript-expert": "dev-lead-routing",
-    "lang-java21-expert": "dev-lead-routing",
+    "lang-java-expert": "dev-lead-routing",
     "fe-vercel-agent": "dev-lead-routing",
     "fe-vuejs-agent": "dev-lead-routing",
     "fe-svelte-agent": "dev-lead-routing",

package/templates/.claude/ontology/skills.yaml

@@ -17,7 +17,8 @@ classes:
       go-backend-best-practices, docker-best-practices, aws-best-practices,
       postgres-best-practices, redis-best-practices, supabase-postgres-best-practices,
       airflow-best-practices, dbt-best-practices, kafka-best-practices,
-      spark-best-practices, snowflake-best-practices, pipeline-architecture-patterns
+      spark-best-practices, snowflake-best-practices, pipeline-architecture-patterns,
+      java-best-practices, django-best-practices, alembic-best-practices
     ]
     description: "Language/framework best practices and architecture patterns"
 
@@ -533,3 +534,66 @@ skills:
     summary: "UI code review guidelines for accessibility, performance, and UX best practices"
     keywords: [ui, accessibility, ux, performance, design]
     rule_references: []
+
+  java-best-practices:
+    class: BestPracticeSkill
+    description: "Modern Java 25 LTS patterns from Virtual Threads, Pattern Matching, Records, and Sealed Classes"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  agora:
+    description: "Use when a design or decision needs adversarial multi-round scrutiny from several independent model vendors. Runs anonymized A/B/C reviewer rounds with a rotating judge and produces a consensus report."
+    user_invocable: true
+    model_invocable: true
+    scope: core
+
+  django-best-practices:
+    class: BestPracticeSkill
+    description: "Django patterns for production-ready Python web applications"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  alembic-best-practices:
+    class: BestPracticeSkill
+    description: "Alembic migration patterns for naming conventions, safety checks, expand-contract, env.py configuration, and CI integration"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  impeccable-design:
+    description: "AI design language for production-grade UI — 10 commands covering typography, color, motion, layout, and UX writing quality"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  diagram-design:
+    description: "Brand-consistent editorial diagrams — SVG generation for release notes, architecture docs, and marketing materials"
+    user_invocable: true
+    model_invocable: true
+    scope: package
+
+  cve-triage:
+    description: "CVE triage workflow for vulnerability analysis, reproduction assessment, and patch verification"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  adversarial-review:
+    description: "Adversarial code review using attacker mindset — trust boundary, attack surface, business logic, and defense evaluation"
+    user_invocable: true
+    model_invocable: true
+    scope: core
+
+  dag-orchestration:
+    description: "YAML-based DAG workflow engine with topological execution and failure strategies"
+    user_invocable: false
+    model_invocable: true
+    scope: core
+
+  pipeline-guards:
+    description: "Safety constraints and quality gates for pipeline and workflow execution"
+    user_invocable: false
+    model_invocable: true
+    scope: core

package/templates/.claude/rules/MUST-enforcement-policy.md

@@ -16,12 +16,12 @@ oh-my-customcode uses an **advisory-first enforcement model**. Most rules are en
 
 | Tier | Mechanism | Rules | Behavior |
 |------|-----------|-------|----------|
-| Hard Block | PreToolUse hook, exit 2 | stage-blocker, dev-server tmux, rule-deletion-guard | Prevents tool execution |
+| Hard Block | PreToolUse hook, exit 2 | stage-blocker, rule-deletion-guard | Prevents tool execution |
 | Soft Block | Stop hook prompt | R011 session-end saves | Auto-performs then approves |
 | Conversation Block | PostToolUse hook + `continueOnBlock` (CC v2.1.139+), exit 2 | stuck-detector, context-budget-advisor, cost-cap-advisor | Feeds rejection reason into conversation; Claude continues with awareness |
 | Advisory | PostToolUse hooks | R007, R008, R009, R010, R018 | Warns via stderr, never blocks |
-| Advisory (proactive) | UserPromptSubmit + SubagentStop + PostToolUse hooks | R007, R008 (`r007-r008-drift-advisor.sh` — #1229 UserPromptSubmit, #1545 SubagentStop, #1553 PostToolUse) | Reads last assistant turn; emits advisory if header/prefix absent. SubagentStop wiring (#1545) closes the no-user-input autonomous-loop gap (`/fsd`); PostToolUse (#1553) covers the orchestrator-only stretch before the first subagent spawn. Complements retroactive Stop-hook (`session-reflection.sh`, #1190). **v1.1.43부터 실제 발화**(파서 셀렉터 `.role`→`.message.role` 수정 — 상세는 Read 도구로 원문 주석 참조). v1.1.49부터 역방향(announce > tool_use) 신호 포함, 기본 off 옵트인 (#1595 #6). v1.1.73의 narration 채널 분리 옵션(`OMCUSTOM_R008_NARRATION`, #1701 #2)은 실 세션 5건(CC 2.1.233~2.1.274) 실측에서 narration 마커 매칭 0/354·판정 on/off 동일로 전제가 성립하지 않아 v1.1.74에서 은퇴했습니다(#1703) — R008 누락은 채널 오선택이 아니라 마커 미직렬화 형태입니다. **v1.1.62(#1650 D)부터 서브에이전트 세션에서는 침묵**: hook stdin의 `agent_id`(CC 스키마상 서브에이전트 내부 발화에만 존재)가 있으면 exit 0 — 단 `SubagentStart`/`SubagentStop`은 `agent_id`가 대상 식별자라 예외(판정 수행). 중첩 서브에이전트 안의 SubagentStop은 억제 못 함(R010 정책상 도달 불가 경로). 완료 보고가 advisory 응답으로 대체되던 훅 피드백 잠식(R020 8항, #1652 #3)의 advisory 계열 차단. |
-| Advisory (telemetry) | PostToolUseFailure hook | — (계측 전용, 규칙 강제 없음) | `failure-ledger.sh` (#1561, v1.1.44) — 도구 실패를 JSONL 원장에 append. stdout/stderr 무출력이라 모델에 도달하지 않으며 절대 차단하지 않음 |
+| Advisory (proactive) | UserPromptSubmit + SubagentStop + PostToolUse hooks | R007, R008 (`r007-r008-drift-advisor.sh` — #1229 UserPromptSubmit, #1545 SubagentStop, #1553 PostToolUse) | Reads last assistant turn; emits advisory if header/prefix absent. SubagentStop wiring (#1545) covers subagent stops in no-user-input loops (`/fsd`); PostToolUse (#1553) covers the orchestrator-only stretch before the first subagent spawn. Complements retroactive Stop-hook (`session-reflection.sh`, #1190). **v1.1.43부터 실제 발화**(파서 셀렉터 `.role`→`.message.role` 수정 — 상세는 Read 도구로 원문 주석 참조). v1.1.49부터 역방향(announce > tool_use) 신호 포함, 기본 off 옵트인 (#1595 #6). v1.1.73의 narration 채널 분리 옵션(`OMCUSTOM_R008_NARRATION`, #1701 #2)은 실 세션 5건(CC 2.1.233~2.1.274) 실측에서 narration 마커 매칭 0/354·판정 on/off 동일로 전제가 성립하지 않아 v1.1.74에서 은퇴했습니다(#1703) — R008 누락은 채널 오선택이 아니라 마커 미직렬화 형태입니다. **v1.1.62(#1650 D)부터 서브에이전트 세션에서는 침묵**: hook stdin의 `agent_id`(CC 스키마상 서브에이전트 내부 발화에만 존재)가 있으면 exit 0 — 단 `SubagentStart`/`SubagentStop`은 `agent_id`가 대상 식별자라 예외(판정 수행). 중첩 서브에이전트 안의 SubagentStop은 억제 못 함(R010 정책상 도달 불가 경로). 완료 보고가 advisory 응답으로 대체되던 훅 피드백 잠식(R020 8항, #1652 #3)의 advisory 계열 차단. |
+| Advisory (telemetry + advisory) | PostToolUseFailure hook | — (계측+어드바이저리, 규칙 강제 없음) | `failure-ledger.sh` (#1561, v1.1.44) — 실패를 JSONL 원장에 append, 무출력(모델 미도달)·비차단. 같은 이벤트의 `subagent-failure-advisor.sh`(Agent/Task)는 additionalContext advisory 전달 |
 | Advisory (proactive) | UserPromptSubmit hook | R020 (원인 진단) | `fail-axis-cause-advisor.sh` (#1561, v1.1.44) — 원장에 실패 기록이 있는데 원인 진술 없는 재촉 프롬프트가 오면 `hookSpecificOutput.additionalContext`로 "원인 가설 되묻기" advisory 전달. 원장 부재 시 조용히 통과 |
 | Prompt-based | CLAUDE.md + rules/ + `SessionStart` 재주입(matcher `*`; PostCompact 이벤트 배선은 유지되나 효과 미보장[^postcompact]) | All MUST rules | Behavioral guidance in context |
 
@@ -54,7 +54,7 @@ oh-my-customcode uses an **advisory-first enforcement model**. Most rules are en
 <!-- DETAIL: CC version notes (v2.1.211-v2.1.275)
 > **v2.1.211/212/214+**: 훅의 enforcement 결정이 auto/unattended 모드에서 안정적으로 존중되도록 세 건이 수정되었습니다 — (211) auto mode가 unsandboxed Bash에 대한 PreToolUse 훅의 `ask` 결정을 덮어쓰던 문제가 수정되어 훅 `ask`가 최소 prompt로 floor되고, (212) `continue:false` 훅의 halt가 도구 실패·중간 완료 시 누락되던 문제 및 훅 인프라 오류가 user rejection으로 오보고되던 문제가 수정되었으며, (214) 훅 stdout JSON이 스키마 검증에 실패할 때 exit code 2가 문서대로 차단하지 못하던 문제가 수정되었습니다. R021 Enforcement Tiers(Hard Block=exit 2, Conversation Block=continueOnBlock exit 2, Advisory)가 훅의 block/ask 결정 존중에 의존하므로, 세 수정 모두 hard-block·advisory 훅(stage-blocker, rule-deletion-guard, stuck-detector 등)의 강제 신뢰성을 강화합니다 — v2.1.210 훅 timeout phantom-rejection 수정의 연장선.
 
-> **v2.1.222+**: PreToolUse auto-allow 훅이 background agent task(summaries/compaction/renames)에서 tool restriction을 우회하던 문제가 수정되었습니다. 즉 위 Enforcement Tiers 표의 **Hard Block 계층(stage-blocker, dev-server tmux, rule-deletion-guard)이 background agent task 경로에서 우회될 수 있었다**는 뜻이며, background agent를 쓰는 장기 무인 루프에서 hard-block 훅이 실제로는 강제되지 않는 구간이 존재했습니다. v2.1.211/212/214 훅 결정 존중 체인의 연장선입니다.
+> **v2.1.222+**: PreToolUse auto-allow 훅이 background agent task(summaries/compaction/renames)에서 tool restriction을 우회하던 문제가 수정되었습니다. 즉 위 Enforcement Tiers 표의 **Hard Block 계층(stage-blocker, rule-deletion-guard)이 background agent task 경로에서 우회될 수 있었다**는 뜻이며, background agent를 쓰는 장기 무인 루프에서 hard-block 훅이 실제로는 강제되지 않는 구간이 존재했습니다. v2.1.211/212/214 훅 결정 존중 체인의 연장선입니다.
 
 > **v2.1.247+**: 훅 또는 background agent가 수 메가바이트의 error 출력을 찍어 대화를 overflow시켜 세션이 "Prompt is too long"으로 멈추던 결함이 수정되었습니다. 같은 릴리즈에서 hook/background task의 output file을 쓸 수 없을 때 무한 메모리 증가하던 문제도 수정되어, 이제 출력이 소실된 위치를 파일에 남깁니다. 이 저장소는 advisory 훅(`r007-r008-drift-advisor.sh`, `failure-ledger.sh`, `fail-axis-cause-advisor.sh` 등)을 다수 운용하므로, 훅 출력 폭주가 세션 자체를 wedge시키는 이 실패 클래스에 해당합니다 — v2.1.211/212/214/222 훅 신뢰성 계열의 연장선입니다.
 
@@ -80,7 +80,7 @@ oh-my-customcode uses an **advisory-first enforcement model**. Most rules are en
 3. **Composability**: External skills and internal rules can coexist without deadlocks
 4. **Post-compact reinforcement**: R007/R008/R009/R010/R018 are re-injected after context compaction via `SessionStart`(matcher `*`/`compact`) — not via the PostCompact event itself[^postcompact]
 
-## Hard Enforcement Candidates — R010 git-delegation-guard (conditional), R007/R008 advisory **implemented & firing** (#1229 UserPromptSubmit, proactive) + **#1545 SubagentStop** (closes autonomous-loop gap) + **#1553 PostToolUse** + retroactive Stop-hook (#1190); `additionalContext` 전달 경로는 #1547(v1.1.40)에서 구현됐으나 파서 셀렉터 결함으로 v1.1.42까지 **양 계층 모두 미발화**였고, **v1.1.43에서 수정 완료·발화 확인**(#1553); hard-block variant still candidate if advisory insufficient (#1096). Promoted: rule-deletion-guard.sh (2026-04-08). See details via Read tool.
+## Hard Enforcement Candidates — R010 git-delegation-guard (conditional), R007/R008 advisory **implemented & firing** (#1229 UserPromptSubmit, proactive) + **#1545 SubagentStop** (covers subagent stops) + **#1553 PostToolUse** + retroactive Stop-hook (#1190); `additionalContext` 전달 경로는 #1547(v1.1.40)에서 구현됐으나 파서 셀렉터 결함으로 v1.1.42까지 **양 계층 모두 미발화**였고, **v1.1.43에서 수정 완료·발화 확인**(#1553); hard-block variant still candidate if advisory insufficient (#1096). Promoted: rule-deletion-guard.sh (2026-04-08). See details via Read tool.
 
 <!-- DETAIL: Hard Enforcement Candidates (Future)
 If advisory enforcement proves insufficient for specific rules, these are candidates for promotion to hard-block:
@@ -88,7 +88,7 @@ If advisory enforcement proves insufficient for specific rules, these are candid
 | Rule | Candidate Hook | Status | Condition for Promotion |
 |------|---------------|--------|------------------------|
 | R010 | git-delegation-guard.sh | Candidate | If orchestrator-direct-write violations exceed 3/session |
-| R007/R008 | `r007-r008-drift-advisor.sh` (UserPromptSubmit #1229 + SubagentStop #1545 + PostToolUse #1553) | **Advisory implemented and firing** — proactive pre-response check wired to three trigger points; the SubagentStop leg (#1545) closes the no-user-input autonomous-loop gap (`/fsd` etc.), and the PostToolUse leg (#1553) covers the orchestrator-only stretch before the first subagent spawn. Retroactive: `session-reflection.sh` (Stop, #1190). Two-layer drift detection: proactive (#1229/#1545/#1553) + retroactive (#1190). **Historical defect (v1.1.40–v1.1.42): delivery path implemented but never fired** — #1547 (v1.1.40) switched delivery from stderr (never model-visible on exit 0) to `hookSpecificOutput.additionalContext` on JSON stdout, non-blocking (no top-level `decision`/`continue`/`stopReason`), but both scripts short-circuited BEFORE emitting: `jq -r '.role'` read a key absent at transcript top level (it is `.message.role`), so `last_assistant` was always empty and the script exited 0 silently. Measured then: 0 `"additionalContext":` occurrences across 771 transcripts; live probe emitted 0 bytes on both streams. **Resolved in v1.1.43** — parser fix on both layers + `PostToolUse` wiring, first fire confirmed by live probe (#1553). Follow-ups: v1.1.44 turn-level R008 prefix counting (#1563), v1.1.45 Skill-tool exemption (#1569), v1.1.49 reverse signal — announce > tool_use, own anchored regex, fires only when ALL tool_use blocks (Skill included) are 0, opt-in via `OMCUSTOM_R008_REVERSE=on` and NOT replicated into `session-reflection.sh` (#1595 #6). | Promote to hard-block if advisory proves insufficient (#1096) |
+| R007/R008 | `r007-r008-drift-advisor.sh` (UserPromptSubmit #1229 + SubagentStop #1545 + PostToolUse #1553) | **Advisory implemented and firing** — proactive pre-response check wired to three trigger points; the SubagentStop leg (#1545) covers subagent stops in no-user-input loops (`/fsd`), and the PostToolUse leg (#1553) covers the orchestrator-only stretch before the first subagent spawn. Retroactive: `session-reflection.sh` (Stop, #1190). Two-layer drift detection: proactive (#1229/#1545/#1553) + retroactive (#1190). **Historical defect (v1.1.40–v1.1.42): delivery path implemented but never fired** — #1547 (v1.1.40) switched delivery from stderr (never model-visible on exit 0) to `hookSpecificOutput.additionalContext` on JSON stdout, non-blocking (no top-level `decision`/`continue`/`stopReason`), but both scripts short-circuited BEFORE emitting: `jq -r '.role'` read a key absent at transcript top level (it is `.message.role`), so `last_assistant` was always empty and the script exited 0 silently. Measured then: 0 `"additionalContext":` occurrences across 771 transcripts; live probe emitted 0 bytes on both streams. **Resolved in v1.1.43** — parser fix on both layers + `PostToolUse` wiring, first fire confirmed by live probe (#1553). Follow-ups: v1.1.44 turn-level R008 prefix counting (#1563), v1.1.45 Skill-tool exemption (#1569), v1.1.49 reverse signal — announce > tool_use, own anchored regex, fires only when ALL tool_use blocks (Skill included) are 0, opt-in via `OMCUSTOM_R008_REVERSE=on` and NOT replicated into `session-reflection.sh` (#1595 #6). | Promote to hard-block if advisory proves insufficient (#1096) |
 
 Promotion requires: (1) measured violation rate data, (2) user approval, (3) rollback plan.
 

package/templates/.claude/rules/MUST-orchestrator-coordination.md

@@ -209,7 +209,7 @@ When the user explicitly signals full-delegation intent, the orchestrator operat
 - **R001 (Safety)**: All safety rules remain absolute — no exceptions
 - **R007/R008 (Identification)**: Agent/tool identification still required for traceability
 - **File Write/Edit delegation**: Still requires specialist agents — autonomous mode only relaxes git and gate overhead
-- **Hard-block hooks**: stage-blocker, dev-server tmux, .md creation blocker remain active
+- **Hard-block hooks**: stage-blocker, rule-deletion-guard remain active
 - **R009 (Parallel execution)**: Still required for efficiency
 
 ### Scope and Lifetime

package/templates/.claude/rules/SHOULD-memory-integration.md

@@ -549,7 +549,7 @@ References: #1226 (item 3), #1227.
 -->
 
 <!-- DETAIL: v2.1.271/273+ background dedup/resume file-read/blockReadsOutside
-> **v2.1.271/273+**: (271) 대화가 compact된 뒤에도 계속 돌고 있던 백그라운드 명령(watch task, dev server)의 **중복 사본**이 새로 시작되던 결함이 수정되었습니다 — 구버전에서 post-compact 중복 프로세스는 지시가 아니라 compaction 아티팩트였습니다(cross-ref R010 dev-server tmux hard block). (271) `/resume`·`/teleport`가 이전 대화의 파일-읽음 추적을 그대로 유지해, 재개된 대화가 **한 번도 읽지 않은 파일**을 편집할 수 있던 결함이 수정되었습니다(cross-ref R005 v2.1.228 read-before-write 노트). (271) claude.ai에서 동기화된 스킬이 로그아웃 후에도 디스크에 남아있던 결함이 수정되어, `cleanupPeriodDays` 내 갱신되지 않은 사본은 이제 복구 가능한 휴지통으로 이동합니다. (273) `permissions.blockReadsOutsideWorkingDirectories`: 저장소 settings가 지정한 메모리 디렉토리는 더 이상 프롬프트에 로드·회상·색인·memory extraction에 사용되지 않습니다 — 이 규칙의 `autoMemoryDirectory`와 관련됩니다: 이 설정 하에서는 저장소가 지정한 메모리 디렉토리가 제외됩니다.
+> **v2.1.271/273+**: (271) 대화가 compact된 뒤에도 계속 돌고 있던 백그라운드 명령(watch task, dev server)의 **중복 사본**이 새로 시작되던 결함이 수정되었습니다 — 구버전에서 post-compact 중복 프로세스는 지시가 아니라 compaction 아티팩트였습니다(cross-ref #1856: dev-server tmux hook is an advisory). (271) `/resume`·`/teleport`가 이전 대화의 파일-읽음 추적을 그대로 유지해, 재개된 대화가 **한 번도 읽지 않은 파일**을 편집할 수 있던 결함이 수정되었습니다(cross-ref R005 v2.1.228 read-before-write 노트). (271) claude.ai에서 동기화된 스킬이 로그아웃 후에도 디스크에 남아있던 결함이 수정되어, `cleanupPeriodDays` 내 갱신되지 않은 사본은 이제 복구 가능한 휴지통으로 이동합니다. (273) `permissions.blockReadsOutsideWorkingDirectories`: 저장소 settings가 지정한 메모리 디렉토리는 더 이상 프롬프트에 로드·회상·색인·memory extraction에 사용되지 않습니다 — 이 규칙의 `autoMemoryDirectory`와 관련됩니다: 이 설정 하에서는 저장소가 지정한 메모리 디렉토리가 제외됩니다.
 -->
 
 <!-- DETAIL: v2.1.275+ CHANGELOG memory age note/resume malformed block