rdap-q 1.2.1 → 1.2.5

package/lib/installer.js

@@ -37,7 +37,6 @@ function readVersion(pkgRoot) {
 
 function resolveLayout(env) {
   const home = env.HOME || env.USERPROFILE || require('os').homedir();
-  const roaming = env.APPDATA || path.join(home, 'AppData', 'Roaming');
   return {
     rdapq: env.RDAPQ_HOME || path.join(home, '.rdapq'),
     gemini: env.GEMINI_HOME || path.join(home, '.gemini'),
@@ -47,16 +46,15 @@ function resolveLayout(env) {
     cline: env.CLINE_HOME || path.join(home, '.cline'),
     codex: env.CODEX_HOME || path.join(home, '.codex'),
     grok: env.GROK_HOME || path.join(home, '.grok'),
-    copilot: env.COPILOT_HOME || (process.platform === 'win32'
-      ? path.join(roaming, 'github-copilot')
-      : path.join(home, '.config', 'github-copilot')),
+    copilot: env.COPILOT_HOME || path.join(home, '.copilot'),
+    agents: env.AGENTS_HOME || path.join(home, '.agents'),
   };
 }
 
 function skillSource(pkgRoot) {
   const src = path.join(pkgRoot, 'rdap-q-skill');
   if (!exists(path.join(src, 'SKILL.md'))) {
-    throw new Error(`RDAP-Q skill source is missing (${src}). Install from a full checkout or via npx --yes github:coldcanuk/rdapq.`);
+    throw new Error(`RDAP-Q skill source is missing (${src}). Install from a full checkout or via npx rdap-q.`);
   }
   return src;
 }
@@ -188,14 +186,16 @@ function harnessFiles(id, layout, pkgRoot) {
     case 'claude':
       return [[path.join(pkgRoot, '.claude', 'commands', 'rdapq.md'), path.join(layout.claude, 'commands', 'rdapq.md')]];
     case 'cline':
-      return [[path.join(pkgRoot, '.clinerules'), path.join(layout.cline, 'rdapq.rules.md')]];
+      return [[path.join(pkgRoot, '.clinerules'), path.join(layout.cline, 'rules', 'rdapq.md')]];
     case 'copilot':
-      return [[path.join(pkgRoot, '.github', 'copilot-instructions.md'), path.join(layout.copilot, 'rdapq-instructions.md')]];
+      return [[path.join(pkgRoot, '.github', 'copilot-instructions.md'), path.join(layout.copilot, 'copilot-instructions.md')]];
     case 'codex':
       return [[path.join(pkgRoot, 'AGENTS.md'), path.join(layout.codex, 'AGENTS.md')]];
+    case 'goose':
+      return [[path.join(pkgRoot, '.goosehints'), path.join(layout.goose, '.goosehints')]];
     case 'grok':
-      return [[path.join(pkgRoot, '.grok', 'rules.md'), path.join(layout.grok, 'rules.md')]];
     case 'cursor':
+    case 'antigravity':
       return [];
     default:
       return [];
@@ -215,18 +215,27 @@ function harnessLabel(id) {
   }[id];
 }
 
-function harnessTreeDest(id, layout) {
-  if (id === 'antigravity') return path.join(layout.gemini, 'antigravity-cli', 'skills', 'rdap-q');
-  if (id === 'goose') return path.join(layout.goose, 'toolkits', 'rdap-q');
-  if (id === 'cursor') return path.join(layout.cursor, 'skills', 'rdap-q');
-  return null;
+function harnessTreeDests(id, layout) {
+  if (id === 'antigravity') {
+    return [
+      path.join(layout.gemini, 'antigravity-cli', 'skills', 'rdap-q'),
+      path.join(layout.gemini, 'config', 'skills', 'rdap-q'),
+    ];
+  }
+  if (id === 'goose') return [];
+  if (id === 'cursor') return [path.join(layout.cursor, 'skills', 'rdap-q')];
+  if (id === 'grok') return [path.join(layout.grok, 'skills', 'rdap-q')];
+  if (id === 'claude') return [path.join(layout.claude, 'skills', 'rdap-q')];
+  if (id === 'copilot') return [path.join(layout.copilot, 'skills', 'rdap-q')];
+  if (id === 'codex') return [path.join(layout.agents, 'skills', 'rdap-q')];
+  return [];
 }
 
 const REPO_BRIDGES = [
   ['AGENTS.md', 'AGENTS.md'],
   ['CLAUDE.md', 'CLAUDE.md'],
   ['GEMINI.md', 'GEMINI.md'],
-  ['.clinerules', '.clinerules'],
+  ['.clinerules', path.join('.clinerules', 'rdapq.md')],
   ['.goosehints', '.goosehints'],
   [path.join('.grok', 'rules.md'), path.join('.grok', 'rules.md')],
   [path.join('.github', 'copilot-instructions.md'), path.join('.github', 'copilot-instructions.md')],
@@ -237,12 +246,12 @@ function statusRows(layout) {
   return [
     ['Core Protocol ($RDAPQ_HOME)', path.join(layout.rdapq, 'skills', 'rdap-q', 'SKILL.md')],
     ['Google Antigravity', path.join(layout.gemini, 'antigravity-cli', 'skills', 'rdap-q', 'SKILL.md')],
-    ['Anthropic Claude Code', path.join(layout.claude, 'commands', 'rdapq.md')],
-    ['Cline / Roo Code', path.join(layout.cline, 'rdapq.rules.md')],
-    ['GitHub Copilot', path.join(layout.copilot, 'rdapq-instructions.md')],
+    ['Anthropic Claude Code', path.join(layout.claude, 'skills', 'rdap-q', 'SKILL.md')],
+    ['Cline / Roo Code', path.join(layout.cline, 'rules', 'rdapq.md')],
+    ['GitHub Copilot', path.join(layout.copilot, 'copilot-instructions.md')],
     ['OpenAI Codex', path.join(layout.codex, 'AGENTS.md')],
-    ['xAI Grok', path.join(layout.grok, 'rules.md')],
-    ['Block Goose', path.join(layout.goose, 'toolkits', 'rdap-q', 'SKILL.md')],
+    ['xAI Grok', path.join(layout.grok, 'skills', 'rdap-q', 'SKILL.md')],
+    ['Block Goose', path.join(layout.goose, '.goosehints')],
     ['Cursor', path.join(layout.cursor, 'skills', 'rdap-q', 'SKILL.md')],
   ];
 }
@@ -290,7 +299,7 @@ function parseArgs(argv) {
 
 function helpText(version) {
   return `Usage: rdapq [COMMAND] [OPTIONS]
-       npx --yes github:coldcanuk/rdapq [COMMAND] [OPTIONS]
+       npx rdap-q [COMMAND] [OPTIONS]
 
 Research-Driven Adaptive Planning with Quality Gates (v${version})
 
@@ -317,12 +326,12 @@ Options:
 
 There is no separate update command. Run install again with the same flags.
 Skill trees are replaced after the new copy verifies. Edited harness files
-are kept unless you pass --force. The npm name rdap-q is not published yet.
+are kept unless you pass --force.
 
 Examples:
-  npx --yes github:coldcanuk/rdapq install --claude
-  npx --yes github:coldcanuk/rdapq install --cursor
-  npx --yes github:coldcanuk/rdapq#v${version} install --all
+  npx rdap-q install --claude
+  npx rdap-q install --cursor
+  npx rdap-q@${version} install --all
   rdapq init
   rdapq init --force
   rdapq status
@@ -355,8 +364,7 @@ function installCore(pkgRoot, layout, log) {
 
 function installHarness(id, pkgRoot, layout, force, log) {
   log(`==> Configuring for ${harnessLabel(id)}...`);
-  const treeDest = harnessTreeDest(id, layout);
-  if (treeDest) {
+  for (const treeDest of harnessTreeDests(id, layout)) {
     publishTree(skillSource(pkgRoot), treeDest);
     log(`    ✓ skill tree installed to ${treeDest}`);
   }
@@ -379,13 +387,21 @@ function installRepo(pkgRoot, repoArg, cwd, force, log) {
   const skillDest = path.join(abs, '.agents', 'skills', 'rdap-q');
   publishTree(skillSource(pkgRoot), skillDest);
   log(`    ✓ skill tree installed to ${skillDest}`);
+  const claudeSkill = path.join(abs, '.claude', 'skills', 'rdap-q');
+  publishTree(skillSource(pkgRoot), claudeSkill);
+  log(`    ✓ skill tree installed to ${claudeSkill}`);
   log('    ✓ Workspace bridges processed for Codex, Grok, Copilot, Antigravity, Goose, Claude, and Cline.');
 }
 
 function printStatus(layout, log) {
   log('==> Inspecting RDAP-Q Multi-Harness Status:');
   for (const [name, target] of statusRows(layout)) {
-    const installed = exists(target) && fs.statSync(target).isFile();
+    let installed = false;
+    try {
+      installed = fs.lstatSync(target).isFile();
+    } catch {
+      installed = false;
+    }
     const icon = installed ? '✓' : '✗';
     const detail = installed ? `Installed (${target})` : 'Not installed';
     log(`  [${icon}] ${name.padEnd(28)}: ${detail}`);

package/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "rdap-q",
-  "version": "1.2.1",
+  "version": "1.2.5",
   "protocol_name": "RDAP-Q Agent Engineering Protocol",
   "entrypoint": "rdap-q-skill/SKILL.md",
   "invocation": "/rdapq",

package/marketplace.json

@@ -2,7 +2,7 @@
   "$schema": "https://raw.githubusercontent.com/agent-skills/spec/main/marketplace.schema.json",
   "name": "rdap-q",
   "displayName": "RDAP-Q: Adaptive Planning with Quality Gates",
-  "version": "1.2.1",
+  "version": "1.2.5",
   "protocol": "RDAP-Q Agent Engineering Protocol",
   "summary": "Universal AI agent engineering protocol for evidence-first software development, calibrated scoring, and quality gates across Codex, Grok, Copilot, Antigravity, Goose, Claude, Cline, and Cursor.",
   "description": "Vendor-neutral Research-Driven Adaptive Planning with Quality Gates (RDAP-Q) enables autonomous AI coding agents to execute non-trivial software tasks with disciplined evidence collection, deterministic phase execution, persistent project state, calibrated quality scoring (0-10 scale), and diminishing-return exit logic. Native support for OpenAI Codex, xAI Grok, GitHub Copilot, Google Antigravity, Block Goose, Anthropic Claude, Cline, and Cursor.",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rdap-q",
-  "version": "1.2.1",
+  "version": "1.2.5",
   "description": "Research-Driven Adaptive Planning with Quality Gates (RDAP-Q) — Vendor-neutral AI agent engineering protocol & skill for Codex, Grok, Copilot, Antigravity, Goose, Claude, Cline, and Cursor. Evidence-first software engineering, persistent memory, and calibrated quality gates.",
   "main": "rdap-q-skill/SKILL.md",
   "bin": {
@@ -68,7 +68,8 @@
     "install:codex": "node bin/rdapq.js install --codex",
     "install:grok": "node bin/rdapq.js install --grok",
     "install:goose": "node bin/rdapq.js install --goose",
-    "install:cursor": "node bin/rdapq.js install --cursor"
+    "install:cursor": "node bin/rdapq.js install --cursor",
+    "audit:harnesses": "python3 scripts/harness-audit/check.py"
   },
   "engines": {
     "node": ">=18.0.0"

package/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rdap-q",
-  "version": "1.2.1",
+  "version": "1.2.5",
   "description": "Research-Driven Adaptive Planning with Quality Gates protocol plugin for Google Antigravity & AI agents.",
   "rules": [
     "GEMINI.md",

package/plugins/rdap-q/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "rdap-q",
-  "version": "1.2.1",
+  "version": "1.2.5",
   "description": "Research-Driven Adaptive Planning with Quality Gates protocol for evidence-first software engineering and diminishing-return exit gates.",
   "author": {
     "name": "coldcanuk"

package/plugins/rdap-q/skills/rdap-q/README.md

@@ -1,4 +1,4 @@
-# RDAP-Q Skill v1.2.1
+# RDAP-Q Skill v1.2.5
 
 `SKILL.md` is the instruction source. This README is not a second copy of the protocol.
 

package/plugins/rdap-q/skills/rdap-q/SKILL.md

@@ -4,14 +4,26 @@ description: Run the RDAP-Q evidence-first engineering protocol. Invoke with /rd
 disable-model-invocation: true
 ---
 name: rdap-q
-version: "1.2.1"
+version: "1.2.5"
 description: Evidence-first engineering protocol. Load this file, then the current phase playbook only.
 invocation: /rdapq
 home_env: RDAPQ_HOME
 home: RDAPQ_HOME else ~/.rdapq (Windows %USERPROFILE%\.rdapq)
 state: .rdapq/state
 memory: $RDAPQ_HOME/memory
+memory_index: $RDAPQ_HOME/memory/index.md
 facts: [OBSERVED, USER_SPECIFIED, VERIFIED_EXTERNAL, INFERRED, UNKNOWN]
+memory_caps:
+  load_full_records: 12
+  load_index_rows: 80
+  fact_chars: 240
+  evidence_chars: 160
+  file_bytes: 24576
+  global_active: 80
+  project_active: 40
+  state_evidence_records: 80
+  state_iteration_rounds: 20
+  state_file_bytes: 49152
 rules:
   - evidence before inference; never invent paths, APIs, versions, flags, tests, env, or architecture
   - INFERRED or UNKNOWN cannot decide implementation when verification is possible
@@ -21,12 +33,14 @@ rules:
   - task state stays in .rdapq/state; memory is reusable only; current evidence beats memory
   - never store secret values; a source plus an identifier is allowed
   - do not load manifest.json, other playbooks, diagrams, or bulk memory
+  - load memory/index.md first, then at most 12 matching full records; compact before work if over cap
+  - never bulk-read memory/ or projects/; never gzip, base64, or one-line-tarball memory
 commands:
   status: phase, quality, confidence, gates, blockers, iteration
   score: evidence-linked scorecard
   audit: adversarial final audit
-  resume: reload memory and state, then check drift
-  memory: relevant memories and status; never print secrets
+  resume: compact if over cap, reload index and hits plus state, then check drift
+  memory: relevant ACTIVE memories and status; never print secrets; never dump the store
   research: discovery
   explain: why this phase or exit
 weights: {correctness: 25, coverage: 15, verification: 15, integration: 10, security: 10, maintainability: 10, architecture: 8, operability: 7}

package/plugins/rdap-q/skills/rdap-q/core/controller.md

@@ -1,14 +1,14 @@
 when: whole_loop_or_ambiguous_next_state
 order:
   - resolve home; if unwritable, record it and use repo state
-  - load SKILL.md, repo root, relevant memory, then .rdapq/state if present
+  - load SKILL.md, repo root, memory index, compact if over cap, then at most 12 hits, then .rdapq/state if present
   - load the current playbook only; observe before acting
   - update facts, assumptions, evidence, risks, decisions
   - milestone: verify, review, score, gate, decide, persist
   - invalid plan -> PLAN; worthwhile fix -> iterate
   - gates pass and diminishing -> audit, then COMPLETE
   - else emit the accurate non-complete terminal state
-  - promote only durable lessons
+  - promote only durable lessons that pass write_forbid and caps
 precedence: [user_intent, direct_evidence, repo_state, project_memory, global_memory, external_for_this_version, inference]
 replan_if_changes: [scope, architecture, dependencies, sequencing, risk, verification, success_criteria]
-context: targeted reads; do not replay chat or load the whole skill tree
+context: targeted reads; do not replay chat or load the whole skill tree; never bulk-read memory/

package/plugins/rdap-q/skills/rdap-q/core/gates.md

@@ -8,5 +8,5 @@ gates:
   regression: [existing_tests_pass, no_known_material_regression]
   security: [no_new_material_issue, no_secrets_stored, destructive_safeguards, risk_proportional_checks]
   repository: [diff_reviewed, no_unintended_files, no_conflicts, state_understood, unrelated_work_kept]
-  memory: [no_secrets, promotion_test, stale_handled, state_not_promoted_as_global]
+  memory: [no_secrets, promotion_test, stale_handled, state_not_promoted_as_global, under_cap, index_current]
   quality: target_met_or_diminishing_returns_and_other_gates_pass

package/plugins/rdap-q/skills/rdap-q/core/memory.md

@@ -2,10 +2,44 @@ scopes:
   global: "$RDAPQ_HOME/memory/{engineering-preferences,tooling,lessons,patterns,constraints}.md"
   project: "$RDAPQ_HOME/projects/<id>/{project,architecture,lessons,decisions}.md"
   task: .rdapq/state
+index: "$RDAPQ_HOME/memory/index.md"
+load: index_then_hits
 promote_if_all: [durable, reusable, material, safe, grounded]
 record: {id: M-<id>, scope: "global|project:<id>", status: [ACTIVE, STALE, SUPERSEDED, INVALID], class: [USER_SPECIFIED, OBSERVED, VERIFIED_EXTERNAL, INFERRED], confidence: "0-10", verified: YYYY-MM-DD, supersedes: "id|none", superseded_by: "id|none", fact: str, evidence: str}
+index_row: {id: M-<id>, kind: str, scope: "global|project:<id>", status: str, class: str, one_line: str}
 secrets: never values; source plus identifier only
 on_conflict: trust direct evidence; mark STALE, SUPERSEDED, or INVALID; link ids; do not silent-delete
-load: relevant project, then relevant global
-memory_cmd: relevant entries, status, conflicts; never print secrets
-resume: home, project memory, repo state, last phase, inspect drift, continue at first unverified step
+load_order: relevant index rows, then matching full records, project before global
+memory_cmd: relevant ACTIVE entries, status, conflicts; never print secrets; never dump the store
+resume: home, index, compact if over cap, load hits, repo state, last phase, inspect drift, continue at first unverified step
+caps:
+  load_full_records: 12
+  load_index_rows: 80
+  fact_chars: 240
+  evidence_chars: 160
+  file_bytes: 24576
+  global_active: 80
+  project_active: 40
+  state_evidence_records: 80
+  state_iteration_rounds: 20
+  state_file_bytes: 49152
+refuse:
+  - bulk_read of memory/ or projects/
+  - diagrams (.mmd)
+  - manifest.json
+  - playbooks other than current phase
+  - gzip, base64, or one-line tarball encodings
+write_forbid:
+  - secret values
+  - command output, diffs, logs, chat
+  - INFERRED when verification was possible
+  - duplicate of an ACTIVE one_line
+  - fact longer than fact_chars
+  - evidence longer than evidence_chars
+  - promoting .rdapq/state into global memory
+on_cap:
+  stop_append: true
+  compact: [STALE, SUPERSEDED, INVALID]
+  overflow: archive to memory/archive/YYYY-MM.md
+  say: "MEMORY_CAP — compacted, not loaded"
+over_cap_without_safe_compact: stop promoting; emit MEMORY_CAP; do not keep appending

package/plugins/rdap-q/skills/rdap-q/install/install-unix.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env sh
 # Install the skill tree into $RDAPQ_HOME. Stage first, swap only after SKILL.md
 # is present, so a failed copy cannot delete a working install.
-# Prefer the repo installer (./install.sh or npx --yes github:coldcanuk/rdapq) when you have the full checkout.
+# Prefer the repo installer (./install.sh or npx rdap-q) when you have the full checkout.
 set -eu
 
 SOURCE_DIR="$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)"

package/plugins/rdap-q/skills/rdap-q/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "rdap-q",
-  "version": "1.2.1",
+  "version": "1.2.5",
   "protocol_name": "RDAP-Q Agent Engineering Protocol",
   "entrypoint": "SKILL.md",
   "invocation": "/rdapq",

package/plugins/rdap-q/skills/rdap-q/memory/README.md

@@ -1,4 +1,7 @@
 role: durable memory
 path: $RDAPQ_HOME/memory
+index: $RDAPQ_HOME/memory/index.md
 schema: core/memory.md
+load: index_then_hits
 promote_if: [durable, reusable, material, safe, grounded]
+caps: SKILL.md memory_caps

package/plugins/rdap-q/skills/rdap-q/memory/index.md

@@ -0,0 +1,3 @@
+schema: core/memory.md
+load: index_then_hits
+records: []

package/plugins/rdap-q/skills/rdap-q/playbooks/00-bootstrap.md

@@ -1,7 +1,10 @@
 phase: BOOTSTRAP
 do:
   - resolve home from SKILL.md; if unwritable, record that and use repo state only
-  - read task-relevant project memory, then global memory; do not bulk-load
+  - read memory/index.md; do not bulk-load memory/ or projects/
+  - if any memory or state file exceeds SKILL.md memory_caps, compact first: archive overflow, mark STALE/SUPERSEDED out of the load set, rewrite the index
+  - if compact would require guessing, emit MEMORY_CAP, stop promoting, continue with repo state only
+  - load at most 12 matching full records (project before global, ACTIVE only)
   - inspect root, status, branch, remotes, worktrees, languages, manifests, lockfiles, test, CI
   - do not assume main, a remote, or a package manager
   - create .rdapq/state files on first write; do not preload every template
@@ -14,4 +17,4 @@ inspect:
 git_mutation: playbooks/07-git-worktree.md # worktree, commit, push, or audit cleanup only
 out: [scope, assumptions, evidence, risks, iteration-log]
 next: DISCOVERY
-forbid: [imagined_repo, destroying_unrelated_work]
+forbid: [imagined_repo, destroying_unrelated_work, bulk_memory, diagrams, gzip_memory]

package/plugins/rdap-q/skills/rdap-q/playbooks/06-final-audit.md

@@ -1,7 +1,8 @@
 phase: AUDIT
 stance: disprove completion
-ask: [misread_requirement, unexercised_path, untested_failure, inferred_claim, stale_memory, false_dependency, regression, malformed_input, dependency_down, observable_errors, secrets, races, unintended_interface_change, extra_dependency, debug_or_unused, docs_match, diff_matches_scope]
-memory: [candidates, promotion_test, write_approved_only, invalidate_stale, no_secrets]
+ask: [misread_requirement, unexercised_path, untested_failure, inferred_claim, stale_memory, false_dependency, regression, malformed_input, dependency_down, observable_errors, secrets, races, unintended_interface_change, extra_dependency, debug_or_unused, docs_match, diff_matches_scope, memory_over_cap, index_stale]
+memory: [candidates, promotion_test, write_approved_only, invalidate_stale, no_secrets, under_cap, index_current]
 report: [quality, confidence, coverage, gates, defects, unknowns, history, best_remaining, aqc]
 complete_only_if: all_applicable_gates_pass
+fail_memory_gate_if: [secrets_stored, over_cap_uncompacted, index_missing_when_records_exist, bulk_memory_loaded, state_promoted_as_global]
 say: "Vibe Code Build complete."

package/plugins/rdap-q/skills/rdap-q/state/README.md

@@ -2,3 +2,5 @@ role: task state, not durable memory
 path: .rdapq/state
 create: on first write
 secrets: never
+caps: {evidence_records: 80, iteration_rounds: 20, file_bytes: 49152}
+store: ids and outcomes, not log bodies

package/rdap-q-skill/README.md

@@ -1,4 +1,4 @@
-# RDAP-Q Skill v1.2.1
+# RDAP-Q Skill v1.2.5
 
 `SKILL.md` is the instruction source. This README is not a second copy of the protocol.
 

package/rdap-q-skill/SKILL.md

@@ -4,14 +4,26 @@ description: Run the RDAP-Q evidence-first engineering protocol. Invoke with /rd
 disable-model-invocation: true
 ---
 name: rdap-q
-version: "1.2.1"
+version: "1.2.5"
 description: Evidence-first engineering protocol. Load this file, then the current phase playbook only.
 invocation: /rdapq
 home_env: RDAPQ_HOME
 home: RDAPQ_HOME else ~/.rdapq (Windows %USERPROFILE%\.rdapq)
 state: .rdapq/state
 memory: $RDAPQ_HOME/memory
+memory_index: $RDAPQ_HOME/memory/index.md
 facts: [OBSERVED, USER_SPECIFIED, VERIFIED_EXTERNAL, INFERRED, UNKNOWN]
+memory_caps:
+  load_full_records: 12
+  load_index_rows: 80
+  fact_chars: 240
+  evidence_chars: 160
+  file_bytes: 24576
+  global_active: 80
+  project_active: 40
+  state_evidence_records: 80
+  state_iteration_rounds: 20
+  state_file_bytes: 49152
 rules:
   - evidence before inference; never invent paths, APIs, versions, flags, tests, env, or architecture
   - INFERRED or UNKNOWN cannot decide implementation when verification is possible
@@ -21,12 +33,14 @@ rules:
   - task state stays in .rdapq/state; memory is reusable only; current evidence beats memory
   - never store secret values; a source plus an identifier is allowed
   - do not load manifest.json, other playbooks, diagrams, or bulk memory
+  - load memory/index.md first, then at most 12 matching full records; compact before work if over cap
+  - never bulk-read memory/ or projects/; never gzip, base64, or one-line-tarball memory
 commands:
   status: phase, quality, confidence, gates, blockers, iteration
   score: evidence-linked scorecard
   audit: adversarial final audit
-  resume: reload memory and state, then check drift
-  memory: relevant memories and status; never print secrets
+  resume: compact if over cap, reload index and hits plus state, then check drift
+  memory: relevant ACTIVE memories and status; never print secrets; never dump the store
   research: discovery
   explain: why this phase or exit
 weights: {correctness: 25, coverage: 15, verification: 15, integration: 10, security: 10, maintainability: 10, architecture: 8, operability: 7}

package/rdap-q-skill/core/controller.md

@@ -1,14 +1,14 @@
 when: whole_loop_or_ambiguous_next_state
 order:
   - resolve home; if unwritable, record it and use repo state
-  - load SKILL.md, repo root, relevant memory, then .rdapq/state if present
+  - load SKILL.md, repo root, memory index, compact if over cap, then at most 12 hits, then .rdapq/state if present
   - load the current playbook only; observe before acting
   - update facts, assumptions, evidence, risks, decisions
   - milestone: verify, review, score, gate, decide, persist
   - invalid plan -> PLAN; worthwhile fix -> iterate
   - gates pass and diminishing -> audit, then COMPLETE
   - else emit the accurate non-complete terminal state
-  - promote only durable lessons
+  - promote only durable lessons that pass write_forbid and caps
 precedence: [user_intent, direct_evidence, repo_state, project_memory, global_memory, external_for_this_version, inference]
 replan_if_changes: [scope, architecture, dependencies, sequencing, risk, verification, success_criteria]
-context: targeted reads; do not replay chat or load the whole skill tree
+context: targeted reads; do not replay chat or load the whole skill tree; never bulk-read memory/

package/rdap-q-skill/core/gates.md

@@ -8,5 +8,5 @@ gates:
   regression: [existing_tests_pass, no_known_material_regression]
   security: [no_new_material_issue, no_secrets_stored, destructive_safeguards, risk_proportional_checks]
   repository: [diff_reviewed, no_unintended_files, no_conflicts, state_understood, unrelated_work_kept]
-  memory: [no_secrets, promotion_test, stale_handled, state_not_promoted_as_global]
+  memory: [no_secrets, promotion_test, stale_handled, state_not_promoted_as_global, under_cap, index_current]
   quality: target_met_or_diminishing_returns_and_other_gates_pass

package/rdap-q-skill/core/memory.md

@@ -2,10 +2,44 @@ scopes:
   global: "$RDAPQ_HOME/memory/{engineering-preferences,tooling,lessons,patterns,constraints}.md"
   project: "$RDAPQ_HOME/projects/<id>/{project,architecture,lessons,decisions}.md"
   task: .rdapq/state
+index: "$RDAPQ_HOME/memory/index.md"
+load: index_then_hits
 promote_if_all: [durable, reusable, material, safe, grounded]
 record: {id: M-<id>, scope: "global|project:<id>", status: [ACTIVE, STALE, SUPERSEDED, INVALID], class: [USER_SPECIFIED, OBSERVED, VERIFIED_EXTERNAL, INFERRED], confidence: "0-10", verified: YYYY-MM-DD, supersedes: "id|none", superseded_by: "id|none", fact: str, evidence: str}
+index_row: {id: M-<id>, kind: str, scope: "global|project:<id>", status: str, class: str, one_line: str}
 secrets: never values; source plus identifier only
 on_conflict: trust direct evidence; mark STALE, SUPERSEDED, or INVALID; link ids; do not silent-delete
-load: relevant project, then relevant global
-memory_cmd: relevant entries, status, conflicts; never print secrets
-resume: home, project memory, repo state, last phase, inspect drift, continue at first unverified step
+load_order: relevant index rows, then matching full records, project before global
+memory_cmd: relevant ACTIVE entries, status, conflicts; never print secrets; never dump the store
+resume: home, index, compact if over cap, load hits, repo state, last phase, inspect drift, continue at first unverified step
+caps:
+  load_full_records: 12
+  load_index_rows: 80
+  fact_chars: 240
+  evidence_chars: 160
+  file_bytes: 24576
+  global_active: 80
+  project_active: 40
+  state_evidence_records: 80
+  state_iteration_rounds: 20
+  state_file_bytes: 49152
+refuse:
+  - bulk_read of memory/ or projects/
+  - diagrams (.mmd)
+  - manifest.json
+  - playbooks other than current phase
+  - gzip, base64, or one-line tarball encodings
+write_forbid:
+  - secret values
+  - command output, diffs, logs, chat
+  - INFERRED when verification was possible
+  - duplicate of an ACTIVE one_line
+  - fact longer than fact_chars
+  - evidence longer than evidence_chars
+  - promoting .rdapq/state into global memory
+on_cap:
+  stop_append: true
+  compact: [STALE, SUPERSEDED, INVALID]
+  overflow: archive to memory/archive/YYYY-MM.md
+  say: "MEMORY_CAP — compacted, not loaded"
+over_cap_without_safe_compact: stop promoting; emit MEMORY_CAP; do not keep appending

package/rdap-q-skill/install/install-unix.sh

@@ -1,7 +1,7 @@
 #!/usr/bin/env sh
 # Install the skill tree into $RDAPQ_HOME. Stage first, swap only after SKILL.md
 # is present, so a failed copy cannot delete a working install.
-# Prefer the repo installer (./install.sh or npx --yes github:coldcanuk/rdapq) when you have the full checkout.
+# Prefer the repo installer (./install.sh or npx rdap-q) when you have the full checkout.
 set -eu
 
 SOURCE_DIR="$(CDPATH= cd -- "$(dirname -- "$0")/.." && pwd)"

package/rdap-q-skill/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "rdap-q",
-  "version": "1.2.1",
+  "version": "1.2.5",
   "protocol_name": "RDAP-Q Agent Engineering Protocol",
   "entrypoint": "SKILL.md",
   "invocation": "/rdapq",

package/rdap-q-skill/memory/README.md

@@ -1,4 +1,7 @@
 role: durable memory
 path: $RDAPQ_HOME/memory
+index: $RDAPQ_HOME/memory/index.md
 schema: core/memory.md
+load: index_then_hits
 promote_if: [durable, reusable, material, safe, grounded]
+caps: SKILL.md memory_caps

package/rdap-q-skill/memory/index.md

@@ -0,0 +1,3 @@
+schema: core/memory.md
+load: index_then_hits
+records: []

package/rdap-q-skill/playbooks/00-bootstrap.md

@@ -1,7 +1,10 @@
 phase: BOOTSTRAP
 do:
   - resolve home from SKILL.md; if unwritable, record that and use repo state only
-  - read task-relevant project memory, then global memory; do not bulk-load
+  - read memory/index.md; do not bulk-load memory/ or projects/
+  - if any memory or state file exceeds SKILL.md memory_caps, compact first: archive overflow, mark STALE/SUPERSEDED out of the load set, rewrite the index
+  - if compact would require guessing, emit MEMORY_CAP, stop promoting, continue with repo state only
+  - load at most 12 matching full records (project before global, ACTIVE only)
   - inspect root, status, branch, remotes, worktrees, languages, manifests, lockfiles, test, CI
   - do not assume main, a remote, or a package manager
   - create .rdapq/state files on first write; do not preload every template
@@ -14,4 +17,4 @@ inspect:
 git_mutation: playbooks/07-git-worktree.md # worktree, commit, push, or audit cleanup only
 out: [scope, assumptions, evidence, risks, iteration-log]
 next: DISCOVERY
-forbid: [imagined_repo, destroying_unrelated_work]
+forbid: [imagined_repo, destroying_unrelated_work, bulk_memory, diagrams, gzip_memory]

package/rdap-q-skill/playbooks/06-final-audit.md

@@ -1,7 +1,8 @@
 phase: AUDIT
 stance: disprove completion
-ask: [misread_requirement, unexercised_path, untested_failure, inferred_claim, stale_memory, false_dependency, regression, malformed_input, dependency_down, observable_errors, secrets, races, unintended_interface_change, extra_dependency, debug_or_unused, docs_match, diff_matches_scope]
-memory: [candidates, promotion_test, write_approved_only, invalidate_stale, no_secrets]
+ask: [misread_requirement, unexercised_path, untested_failure, inferred_claim, stale_memory, false_dependency, regression, malformed_input, dependency_down, observable_errors, secrets, races, unintended_interface_change, extra_dependency, debug_or_unused, docs_match, diff_matches_scope, memory_over_cap, index_stale]
+memory: [candidates, promotion_test, write_approved_only, invalidate_stale, no_secrets, under_cap, index_current]
 report: [quality, confidence, coverage, gates, defects, unknowns, history, best_remaining, aqc]
 complete_only_if: all_applicable_gates_pass
+fail_memory_gate_if: [secrets_stored, over_cap_uncompacted, index_missing_when_records_exist, bulk_memory_loaded, state_promoted_as_global]
 say: "Vibe Code Build complete."

package/rdap-q-skill/state/README.md

@@ -2,3 +2,5 @@ role: task state, not durable memory
 path: .rdapq/state
 create: on first write
 secrets: never
+caps: {evidence_records: 80, iteration_rounds: 20, file_bytes: 49152}
+store: ids and outcomes, not log bodies