riskrails 3.0.0 → 3.1.0

package/skills/project-update/history/blobs/fae3064e648cdc55be4aeb1177525b302a5e34ebd752e4a904f47dc0f4557b96

@@ -0,0 +1,71 @@
+# Safety policy
+
+This is the file every agent reads first. It is short on purpose. It binds every
+agent in every runtime — Claude Code and Codex alike.
+
+## The one rule
+
+**Production behaviour is the source of truth until proven otherwise.** Code that
+looks wrong, dead, or badly written may be load-bearing. The repository's history
+is evidence; your intuition about how the code "should" look is not.
+
+## What an agent must never do
+
+- Change application code that the current task did not ask about.
+- Rename, move, reorganise or "clean up" anything as a side effect.
+- Remove code because it looks unused. Find the callers first; if there are none,
+  say so in the report and leave the code alone.
+- Combine a refactoring with a feature change in the same step.
+- Modify database schemas, dependencies or framework versions outside a task that
+  is explicitly about that.
+- Weaken a test, a linter rule or a static-analysis level to make a check pass.
+- Commit, push, merge or deploy on its own initiative.
+- Read production secrets or customer data into the model context.
+
+If you find a problem outside the current task: **write it down, do not fix it.**
+Unrelated findings are recorded with `state.py memory risk add` (in files mode it
+writes `.ai/project/known-risks.md`) or go into the report's "observations"
+section, and the human decides whether they become their own task.
+
+The compact record is the human's to switch: `state.py memory enable`, `disable`,
+`cleanup`, `pack`, `redact` and `migrate --move-logs` take the human route, as
+`approve` does, and `.ai/memory/` and `.ai/local/memory/` are written by
+`state.py` alone — an agent never edits them (`state.py memory --help`; the
+plugin's `docs/local-memory.md`).
+
+## Scope
+
+Every implementation step names the files it may touch. Editing anything else is
+refused by `ai-scope-guard` and must be answered with `SCOPE_CHANGE_REQUIRED`:
+stop, say which file you need and why, and let the plan be amended. A step whose
+scope keeps growing is a step that was planned wrong.
+
+`ai-git-guard`, `ai-path-guard` and `ai-scope-guard` all run in both runtimes. A
+multi-file edit in one call — Codex's `apply_patch` — is checked path by path, so
+a single out-of-scope or protected file rejects the whole patch. What a guard
+refuses is not a hint: do not reword the command to get past it.
+
+A guard is a backstop, not the policy. Some checks exist in only one runtime —
+Codex has no hookable read tool, so the large-read cap is Claude-only there — and
+an agent that behaves correctly only because a hook is watching is not behaving
+correctly. The rules above hold whether or not a hook enforces them.
+
+## Evidence labels
+
+Anything an agent writes into `.ai/project/` carries one of four labels:
+
+- **KNOWN FACT** — read from the code, a config file, a migration or a test.
+  Cite `file:line`.
+- **INFERENCE** — a conclusion drawn from facts. Say what it is drawn from.
+- **UNKNOWN** — something that matters and could not be determined. Say what
+  would answer it.
+- **RISK** — something that looks dangerous. Say what could go wrong.
+
+Never present an inference as a fact. When documentation and code disagree,
+record both under "Documented behaviour" and "Observed behaviour", with the
+evidence for each, and let the human decide which is the bug.
+
+## When in doubt
+
+Stop and ask. An agent that pauses costs a message; an agent that guesses on a
+payment path costs an incident.

package/skills/project-update/history/index.json

@@ -9,7 +9,9 @@
   "31bb922076c8dadb4a84bb6a03d331dafc7157893aaf2f92b13792270fbece9b",
   "a13cb0db5372c3ce3e71470165c17a2db76e7a2415717ba27fccd1b0593c61c4",
   "54eefe3d8cd6cd1ed56764e7bd412a4c919a28fc64b56b69dcafeecd7a921678",
-  "fe513647c66e8883b326ea884a7e9cb045ce54c49b03d2e75a0b73c4756c423e"
+  "fe513647c66e8883b326ea884a7e9cb045ce54c49b03d2e75a0b73c4756c423e",
+  "8b3ef9586491a426767c01da5d01bdd6b0655c576c68c4cc6dfb093367817dc0",
+  "774b1e3a04ef0d49d33c44a2cfecd92eb6f6b738a12b6a681103ba7fc13e7b86"
  ],
  "ai-init/.ai/VERSION": [
   "4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865",
@@ -19,7 +21,9 @@
   "f0b5c2c2211c8d67ed15e75e656c7862d086e9245420892a7de62cd9ec582a06",
   "06e9d52c1720fca412803e3b07c4b228ff113e303f4c7ab94665319d832bbfb7",
   "10159baf262b43a92d95db59dae1f72c645127301661e0a3ce4e38b295a97c58",
-  "aa67a169b0bba217aa0aa88a65346920c84c42447c36ba5f7ea65f422c1fe5d8"
+  "aa67a169b0bba217aa0aa88a65346920c84c42447c36ba5f7ea65f422c1fe5d8",
+  "917df3320d778ddbaa5c5c7742bc4046bf803c36ed2b050f30844ed206783469",
+  "25d4f2a86deb5e2574bb3210b67bb24fcc4afb19f93a7b65a057daa874a9d18e"
  ],
  "ai-init/.ai/agents/context.md": [
   "a213099429aff491b00e885c8d556465be2405072efbb9a3a297890a15a5b4ca",
@@ -87,6 +91,9 @@
  "ai-init/.ai/policies/database.md": [
   "894a37936b769203bbb880ff842cc0a04e62d53e01deb07af83179f6b1359cf4"
  ],
+ "ai-init/.ai/policies/dialog.json": [
+  "164cd34c182de88c33de7df35beb29200d792419e1c13a5f0b2104f944e57be7"
+ ],
  "ai-init/.ai/policies/git.md": [
   "6bbcb8ea55726cdd49e0544725d224ac6d728cd1db757a269399342da92677ca"
  ],
@@ -102,24 +109,29 @@
   "9a16ec8f5762032e4dc009974dfca5ed1dd0eae6d84391cbed872c83d7a4e75f",
   "14f19a6745af0196f9be0ed8fe854e882bf90157b20b2bf680de909222f87138",
   "a09b8d9154feeabaefced51d8b06b9cb794b3e41501c8b326771771b9a70a3ff",
-  "8b98d001f90f838f19fc7998792fc39a00e4264e594d557a338ef7393f5795e5"
+  "8b98d001f90f838f19fc7998792fc39a00e4264e594d557a338ef7393f5795e5",
+  "286187dbf77173f86c91d8a1ba8e8de68b7723d684aa47b4cb86feb507a3c7c1"
  ],
  "ai-init/.ai/policies/path-guard.json": [
   "099f3debfe1ce808502661de4a31c3a349f149f5fe7246691d41a4966179a63c"
  ],
  "ai-init/.ai/policies/production.md": [
-  "13340bdd5d85314a2f7a9bac1776951178f9840cb8b75479d762a8082ab45d3a"
+  "13340bdd5d85314a2f7a9bac1776951178f9840cb8b75479d762a8082ab45d3a",
+  "a48fe8ac621456fc41362559f6caf3296bfa0bf7752dd8f287354a3b5d8c4a65"
  ],
  "ai-init/.ai/policies/release.md": [
   "7afd6c68d910439c19c1c190868be7596f487d30f867a1593d2084da6feea3bf",
-  "f6e7e18b3d6ad24bd87897d3a535020285cb98e7b8f41cfb2eb88f5a9d68a6fd"
+  "f6e7e18b3d6ad24bd87897d3a535020285cb98e7b8f41cfb2eb88f5a9d68a6fd",
+  "9909aed673a3135238dccb7e218f4a8ffc1fb98324686d3f73cfb604a7ce74c0"
  ],
  "ai-init/.ai/policies/review-economy.md": [
   "38b7363f9cd84c3bd0a82e48aa6dd19f9911fd212a08a5a8084706e45295be89",
   "9984ac1e1b1edb7217df58e256002ae09913fdc598da6f7773f1c01e5a3e55e2",
   "c392fd585241389355958099a95bd85358a80d9a10310301a430219f83c8962e",
   "edecd502e22395300781a3c653b56c3587b1b894ce4b96f60e19c601a5cdae46",
-  "91e924527f51c8c36fa1156a8f30af4c07adab2d324b8c5a879145a1641c413a"
+  "91e924527f51c8c36fa1156a8f30af4c07adab2d324b8c5a879145a1641c413a",
+  "6a3f34706c31fc91fdace8ea8729bd7a74065f983032204f5aad3ec80cf13ce0",
+  "e1d3ac77700faee38d7f9ddd34679b8917418cffc5caf5f3e0ff66fe71890cf8"
  ],
  "ai-init/.ai/policies/risk-tiers.json": [
   "01c32f8ff038787e49070b8b0eb160eb4b4704a020b050678292051fc73a4fc6",
@@ -154,14 +166,18 @@
  ],
  "ai-init/.ai/policies/safety.md": [
   "0f00cbb216a20c7f67749ffb88835bcaaa29cc1a4c15d468edb3c6039bd291d3",
-  "ae9a22907ba9acbb7e80fac1ba4e3d1ff09e5f1df5c4456afb9099d7090fcaa6"
+  "ae9a22907ba9acbb7e80fac1ba4e3d1ff09e5f1df5c4456afb9099d7090fcaa6",
+  "fae3064e648cdc55be4aeb1177525b302a5e34ebd752e4a904f47dc0f4557b96",
+  "e9adb7a9905eb719ac78ab96671f055da53e5001810f5ad6d6c94306b0323fe7",
+  "ae5ce131d6bae401199ff32d8c3dc4d8aec188010a9111624ac64506e2116ff4"
  ],
  "ai-init/.ai/policies/security.md": [
   "cc808d5b940109f1703abfb3ca0334a3fcfd34267feefb2323627d0decc8b89a",
   "40ac73f706ba7d2578627f420076cdb9fa6aa146e16d0da6c6a5c63f65c2b03c",
   "4e67b352e2d7a29a83c4fa9f80a0d3ed9272da0f976a084c344b55e349f741b2",
   "1fdc406be22d9ea39f41e738c6bbd36a31ef4adc84ece06cfceebddaa86c9798",
-  "1a8995e5f7e51b5be74fca82551e5d9e4d970c546d9fd6eecb6809a7f6af8821"
+  "1a8995e5f7e51b5be74fca82551e5d9e4d970c546d9fd6eecb6809a7f6af8821",
+  "6a3be0e624e5ad91e44d08857b7183ee53b7903e1e8d56ff196dbc9dde271e4a"
  ],
  "ai-init/.ai/policies/testing.md": [
   "930ccfac4ba1306341e32279278410b451246a52223c42e0597b5ee83706ff00",
@@ -169,16 +185,20 @@
   "cb8b8328efd818835822dc60537e3ecdb648d4ca04e21a7c47c88bf1198a5474",
   "dd174b27e5b3a2414d0605484f4e92423e2553931263f05ef15677b4aa389bab",
   "3a492555cac3198136e239539466fb768cf672d5a972f5afd7d57c038d3cfed6",
-  "8ad13d2ca4504cfd8e4ab7fe3a49129b228d9979461f0f758a71daeec78b6ae1"
+  "8ad13d2ca4504cfd8e4ab7fe3a49129b228d9979461f0f758a71daeec78b6ae1",
+  "0ef4a360c76da290173dea0f8073949cb0f8113710a38df95acae5d96bdd1286",
+  "00289f98434fed230eebe768dfb3425f83d737866a3aebc97aa95167c4fa0c6e"
  ],
  "ai-init/.ai/policies/tooling.md": [
   "2c6afb3518714d35eaf0119bf2ae2154782bbece632dfdbd68988351abde61f5"
  ],
  "ai-init/.ai/policies/weight.json": [
-  "7f3859c34035fe32abf937eebdd7240ac72ab32d254286cff7d939cf0cf6eaef"
+  "7f3859c34035fe32abf937eebdd7240ac72ab32d254286cff7d939cf0cf6eaef",
+  "5353ca529c46f2443e12947ec205a6887fb594a4de1f87f0eb1c0e6c0f826133"
  ],
  "ai-init/.ai/policies/weight.md": [
-  "e639e99d3f59015dc21472de081ca7766231135399ac3a6f439e841e458251f4"
+  "e639e99d3f59015dc21472de081ca7766231135399ac3a6f439e841e458251f4",
+  "5f65bc7ab3fc3c4e75ae05d49eaf4331fafc398c661abe33c69f7380a720344c"
  ],
  "ai-init/.ai/project/architecture.md": [
   "5cbaaabe2c8d0e24582877aab05eeaaf4d53cb5e9515e81cd18368d13d2fe79e"
@@ -222,7 +242,9 @@
   "962fd396da83337c3fadcc642d45e98429b18e79bb81f58915baaf2b9bffd3c5",
   "d7b96902bf9d2078df1e09901327b02f565b174777af34a2b24be660cad81d01",
   "ad4c4f81855725f7fe6e0e3d8f557df0de5fc063465d428546f69c54020c69d9",
-  "19b1a6390e96136619d23bc2ef9afed8f15e62107de7c1052bc5ea23e5bb5692"
+  "19b1a6390e96136619d23bc2ef9afed8f15e62107de7c1052bc5ea23e5bb5692",
+  "23a42febbacaa7b52a802d428033a99c0694391c81d51fe3b6e1dff608a641d5",
+  "7ee99edafe7cec45ff577376c0d0178fdb2690134d4656488f46e129aba3cc5a"
  ],
  "ai-init/.ai/templates/architecture-decision.md": [
   "78619b522826ba8f5f0422e9deb7359c8002553d1aeb29a3719da5ab11ff13a1"
@@ -246,7 +268,8 @@
   "515df0eab178b5f53b50f95bec2671e861efef35b487a6e65d80e80de42c4d0d"
  ],
  "ai-init/.ai/using-riskrails.md": [
-  "03282999978b2bfb5f65135e1884f9447f8a71021a88895d5436d377797b9acb"
+  "03282999978b2bfb5f65135e1884f9447f8a71021a88895d5436d377797b9acb",
+  "25d08ff01a4ab2069b0dd4e5ec52e888d33e00091dc467dd10d63f10223b6f80"
  ],
  "ai-init/.ai/workflows.md": [
   "500d93714106b1c4e21b13f248f7175c86073a9bcb6e0a849845f61f49b5a66d"
@@ -310,7 +333,10 @@
   "815d78ce95d18454cf0842335f81755bf3aceb87ee9d2197e121d3ff734cd2b5",
   "de0685f9bc2ac22c1b0178d6a1fc8d07fa23451f29d0c36571cbf85c69716fc2",
   "c735911eb1a744f78213a9f7577b425c1605843f6d05fed798d7f41b47fa1e0c",
-  "7eee4ea9f6e778ff691c263621e717c021505b86386034cc64f8ebbfc9d8fe65"
+  "7eee4ea9f6e778ff691c263621e717c021505b86386034cc64f8ebbfc9d8fe65",
+  "ca4499d829268c8766fb3b825a515e88dc55c237e9d202816b50959b4dac031f",
+  "7170553410bba904ffb7edb4b231e3b3579b85542d84de717299980938f82c9d",
+  "48d9950f16e31d55475f566a80dc95f64b35f1c804d2f51729e313a4f29bac8d"
  ],
  "ai-init/AGENTS.minimal.md": [
   "b7b697fc987617449ba10634f12f70326281cc182f8b7f20f9e047a75f3f182b",
@@ -324,7 +350,10 @@
   "3775eed295a794dda73b14f88af70bc2c99b5590f81da53f165423e4337dceed",
   "ee7c8321fff228d967c5d200c316967195d93a26196383f57f474e837b1b3d33",
   "da848b831443484c831fa630666c004e07c1c9669dd247e8e4066979c8599080",
-  "c076d603cffc731823d2acf096bcc17cca1d99eee24b0aa313776d7d01571b4f"
+  "c076d603cffc731823d2acf096bcc17cca1d99eee24b0aa313776d7d01571b4f",
+  "1d1d907449ec74594d0ee923ac142ae746b9aedf0a1eda9469f075a44d23e3d7",
+  "07ff7fa6f93d471ff533f553b4e523e4105ccde1f3dab70132c5237728f68422",
+  "7f063e79195a5c85c37b7260dd20c184d3b9bea85e37202e0bbca73ad84bba49"
  ],
  "ai-init/CLAUDE.minimal.md": [
   "7578025c0ce0a64dd37fe4c999541db5681199763df8b373ed0bfba11e2f581e",
@@ -335,20 +364,27 @@
   "e8df28f07cb784d768bcafbced70fd15771afa61dbec7dc4c1c3f858f9002fec",
   "c9ddacab2a6943af94c927799ba314877c1f19d40949e927c2d3825689005288",
   "4d1f9073276936834747199393159f1badc0277b5bb394f78f408d52c36c4e35",
-  "65acd4be95c695d0cc20cb5f4faffe0f44e0873b385c124140b223c41328cb56"
+  "65acd4be95c695d0cc20cb5f4faffe0f44e0873b385c124140b223c41328cb56",
+  "935af1019931058ec3a0b834fe230e127ec914f75edcc4a6c589cfe733b0b979",
+  "e120ff4e32b2e950fc94ada4e787d57dc9c790da37223e5a202d74f7e3aadf80",
+  "c8573ca1f810ce6c4ac49456a4c1725b93e0d3b74c54ce95d46d8747777895f0"
  ],
  "ai-init/GEMINI.minimal.md": [
   "933629cd5c872a11837046b13051a9b02bbc1033e3ba74f41966af2ed4edee5d"
  ],
  "ai-init/gitignore.snippet": [
   "5c0619c1ee059477c9d92cf70b72da5d238d9176fc27ab0d38104ecba795624c",
-  "a00db51859bb7943174017a34b4a100f98e53d6c3b32f73d8f87d6072016a709"
+  "a00db51859bb7943174017a34b4a100f98e53d6c3b32f73d8f87d6072016a709",
+  "5a93f78b4ed4d416c171139b2ce610a117f9c1dd46fbb56ca86729cb4c53d10c"
  ],
  "ai-init/junie-guidelines.block.md": [
   "e8df28f07cb784d768bcafbced70fd15771afa61dbec7dc4c1c3f858f9002fec",
   "c9ddacab2a6943af94c927799ba314877c1f19d40949e927c2d3825689005288",
   "4d1f9073276936834747199393159f1badc0277b5bb394f78f408d52c36c4e35",
-  "65acd4be95c695d0cc20cb5f4faffe0f44e0873b385c124140b223c41328cb56"
+  "65acd4be95c695d0cc20cb5f4faffe0f44e0873b385c124140b223c41328cb56",
+  "935af1019931058ec3a0b834fe230e127ec914f75edcc4a6c589cfe733b0b979",
+  "e120ff4e32b2e950fc94ada4e787d57dc9c790da37223e5a202d74f7e3aadf80",
+  "c8573ca1f810ce6c4ac49456a4c1725b93e0d3b74c54ce95d46d8747777895f0"
  ],
  "ai-init/junie-guidelines.minimal.md": [
   "5551499579a0bceb74a79731d30213b1ddf9168b92f6d3dd0aecad91d8aff464"
@@ -371,7 +407,9 @@
   "a349aaad234825ea429df33cafb7928579c0cb5b1801f0a237e103aa8d159642"
  ],
  "project-init/constitution.md": [
-  "5e38d93c4f82300cc5d331f4ce3022d2872db15d108ae23bf33e2169a19b42f2"
+  "5e38d93c4f82300cc5d331f4ce3022d2872db15d108ae23bf33e2169a19b42f2",
+  "7be527cd648b27cca6e267de30f8e33a2ce17d5631a82694f23ae5c0623efe1f",
+  "18c7a2753ce9cb6f6d3d1e9d5d1125d75950b879d56b7325225b200869631b29"
  ],
  "project-init/gitignore.snippet": [
   "965a03be82000866cb5275acda18ebb2172c9a50f0011df2fa475f74a1124c35",
@@ -402,7 +440,9 @@
   "17f88e362fa19b7f2741ea1393164dc75b9c300b8727322f91fe205a985e088f"
  ],
  "project-init/sdlc-README.md": [
-  "a8cf15b33301a76e1d899064d5cb95914cc49412ab223f00394b702c4a4508f1"
+  "a8cf15b33301a76e1d899064d5cb95914cc49412ab223f00394b702c4a4508f1",
+  "079a91f976ad69b5cf49ccb9a28849576e4735ddd9485fc26599e528a69fd2f4",
+  "d6e5b34d475e7187d2a8cb2aac7e7f1a427142baf6461bda387d70ceb4d8a8c1"
  ],
  "project-init/spec.md": [
   "61d0e67d59802a695f546e0a77e11a4daf1fafe77f50bead5f94bc7f08fb8457"

package/skills/project-update/migrations/0009_state_file.py

@@ -0,0 +1,25 @@
+"""0009: the task's state file is `.ai/state/state.json`.
+
+R34's contract half. 0008 shipped the expand half: the guards and state.py of
+3.4b read `.ai/state/state.json` first and `current.json` otherwise, and write
+the file where it is. This migration, run once such a version is installed,
+moves a task in flight from `current.json` to `state.json`, and `state.py start`
+opens every new task in `state.json`.
+
+  * The move goes through MOVES like any other: no task in flight means no
+    file, and nothing happens; a project that already holds `state.json` keeps
+    it (a `current.json` beside it is a conflict for a human, not overwritten).
+  * The file's bytes are not touched: every field of the task survives.
+  * Reverting to 3.4b after the move still guards the task, because that
+    version reads `state.json`.
+"""
+
+VERSION = 9
+TITLE = "the task's state file is state.json"
+STATE_LEGACY = ".ai/state/current.json"
+STATE_NEW = ".ai/state/state.json"
+MOVES = [(STATE_LEGACY, STATE_NEW)]
+
+
+def plan(ctx):
+    ctx.move(STATE_LEGACY, STATE_NEW)

package/skills/project-update/migrations/0010_dialog_switch.py

@@ -0,0 +1,30 @@
+"""0010: the command-choice dialog is on (R36.1).
+
+`.ai/policies/dialog.json` is the project's switch for the dialog: the human
+picks a commit, push or approval command in the runtime's dialog and the agent
+runs that command, verbatim and once. This migration writes the switch, on, as
+the scaffold does for a new project.
+
+  * A project that already has the file keeps it, whatever it says: `create`
+    does not overwrite, and a human's `"enabled": false` stays off.
+  * A second run finds the file and does nothing, and prints nothing.
+  * The task's state is not touched: a task in flight survives.
+"""
+
+VERSION = 10
+TITLE = "the command-choice dialog switch"
+SWITCH = ".ai/policies/dialog.json"
+MOVES = []
+
+
+def plan(ctx):
+    if ctx.exists(SWITCH):
+        return
+    ctx.create(SWITCH, ctx.template(SWITCH))
+    ctx.hint("%s is new and the command-choice dialog is on; set \"enabled\": false in it to turn the dialog off"
+             % SWITCH)
+    ctx.hint("docs/sdlc/constitution.md C5 still says no agent commits, merges or deploys: if you keep the dialog "
+             "on, amend C5 to the new sentence (skills/project-init/templates/constitution.md, C5)")
+    if ctx.state is not None:
+        ctx.hint("a task is in flight: the dialog switch takes effect for it too; set \"enabled\": false in %s "
+                 "to turn it off" % SWITCH)

package/skills/project-update/migrations/0011_retire_risk_tiers.py

@@ -0,0 +1,37 @@
+"""0011: the old tier policy is retired (register #20, #50, #58, #62).
+
+`.ai/policies/risk-tiers.json` and its generated mirror `risk-tiers.md` were
+replaced by `.ai/policies/weight.json` (migration 0007 converted the project's
+edits) and nothing in the plugin reads them any more. The plugin stops shipping
+both, and this migration proposes deleting the project's copies.
+
+  * Each file the project has is proposed for deletion: a `delete?` item that
+    waits for --apply --confirm-delete NAME, with the original kept under
+    `.ai/reports/project-update-<date>/original/`. Git is the rollback.
+  * A copy the project edited is proposed too, and the reason says it was
+    edited: the human decides, and may keep the file by never confirming (the
+    schema then stays at 10) or by copying what they need into weight.json first.
+  * A project without the files gets nothing, and so does a second run.
+  * The templates are retired in `migrations.RETIRED`, so the template walk never
+    re-creates a deleted file.
+"""
+
+VERSION = 11
+TITLE = "retire risk-tiers.json and risk-tiers.md (weight.json replaced them)"
+MOVES = []
+
+PATHS = (".ai/policies/risk-tiers.json", ".ai/policies/risk-tiers.md")
+REASON = "replaced by .ai/policies/weight.json; nothing reads it any more"
+EDITED = REASON + " — your project edited this copy, check weight.json holds what you need"
+
+
+def plan(ctx):
+    for path in PATHS:
+        if not ctx.exists(path):
+            continue
+        why = ctx.unsafe_target(path)
+        if why:
+            ctx.hint("%s: %s, so this update never deletes it — remove it by hand once weight.json holds "
+                     "what you need" % (path, why))
+            continue
+        ctx.delete(path, REASON if ctx.is_shipped(path, ctx.read(path)) else EDITED)

package/skills/project-update/migrations/README.md

@@ -16,7 +16,8 @@ this directory, named `NNNN_slug.py`, numbered contiguously from `0001`, with
 - A migration that deletes must retire the template in the same release,
   otherwise the next run re-creates the file.
 - `ctx.patch_state` is the only way to change a task in flight, and the only
-  writer of `.ai/state/current.json` other than `state.py`. A migration that
+  writer of the task's state file (`.ai/state/state.json`, `current.json` in a
+  project not yet at schema 9) other than `state.py`. A migration that
   moves a path a task's step may touch must patch it, or the scope guard will
   stop that task on a file that no longer exists.
 - Operations are planned, never written: the dry run must list everything.

package/skills/project-update/migrations/__init__.py

@@ -29,7 +29,12 @@ NAME_RE = re.compile(r"(\d{4})_[a-z0-9_]+\.py")
 # A successor key here joins the rename chain, so an edited file still merges
 # against the version it was installed from. None means the template is simply
 # gone: the key is not an orphan, and there is nothing to merge against.
-RETIRED = {}
+RETIRED = {
+    # Migration 0011: weight.json replaced the tier policy; the project's copies
+    # are proposed for deletion and the plugin no longer ships either file.
+    "ai-init/.ai/policies/risk-tiers.json": None,
+    "ai-init/.ai/policies/risk-tiers.md": None,
+}
 
 
 class SchemaError(Exception):

package/skills/project-update/render_instructions.py

@@ -166,7 +166,7 @@ def vocabulary(source, runtime):
 
 # The budgets an installed plugin uses: install.sh copies skills/, not
 # instructions/, so runtimes.json is only there in a checkout. Kept equal to
-# `_budgets` in instructions/runtimes.json by tests/test-project-update.sh.
+# `_budgets` in instructions/runtimes.json by tests/test_project_update.py.
 DEFAULT_BUDGETS = {"global": 2560, "project": 2048, "skeleton": 2048, "skeleton-sdlc": 2048}