task-pipeline-skill 1.27.0 → 1.28.0

package/CHANGELOG.md

@@ -1,5 +1,49 @@
 # Changelog
 
+## v1.28.0
+
+### Eight ways to say "I don't know", and no way to count them
+
+This bundle has eight vocabularies for declining to claim — `partial`, `unknown`,
+`cannot verify from diff`, `review`, `dormant`, `skip`, `recalled`, `ungated` — spread
+across sixteen reference files. Only one of them, `unknown`, blocks anything. **None of
+them appeared beside a verdict**, and `grep` for a counter returned zero.
+
+So `PASS` read as *verified*. It never read as *"green, and here is what nobody claimed
+and what nothing looked at"*, which is the only thing a gate can honestly mean.
+
+**The obvious fix is a ratchet, and it is wrong.** A ratchet may only shrink. A count of
+abstentions under that rule puts pressure on exactly one thing: **claiming more**. A run
+that reaches `abstained: 0` is not more careful — it has stopped saying *I don't know*,
+which is the cheapest way to make the number fall. Refusals and wrong answers are
+communicating vessels; squeeze one column and it reappears in the other, silently, because
+a wrong claim looks like a claim.
+
+`gates.md` therefore gains a second kind of counted set — a **disclosure**. Printed beside
+the verdict exactly like a ratchet, and carrying the opposite rule: **no floor, no
+direction, and never a target.** A target on an abstention count is an instruction to guess.
+
+Two of them, kept apart because they are different facts:
+
+| | Counts | How to read it |
+|---|---|---|
+| `abstained` | claims the run **declined to make** — `partial`, `unknown`, `cannot verify from diff` | a **choice**. Rising can mean the work got harder or the run got honest |
+| `unlooked` | checks that **did not look** — `dormant`, `skip` | a **state of the corpus**, not a decision; it falls as the project grows the inputs |
+
+`recalled` and `ungated` are deliberately not counted: the first is a property of one claim
+and already lives in the ledger, the second a property of the whole run and said once in
+words. Collapsing all eight into one number would be the false precision this change exists
+to avoid — a figure nobody can act on.
+
+Both print beside every worked verdict in the doctrine, both are required by the stage-6 and
+stage-10 gates, and a guard holds the four verdict formats together — one statement on four
+surfaces is this repository's most recurrent defect.
+
+**Where this came from.** The programme that produced it started from a review of the
+hallucination-mitigation literature, whose one directly importable idea was that
+*uncertain refusals* belong in the results table **next to** factual errors, because the two
+trade off. Everything else in that literature the doctrine already had. This is the import.
+
 ## v1.27.0
 
 ### A retirement trigger whose counter only some work moves

package/CONTRIBUTING.md

@@ -317,7 +317,19 @@ stall, which is why it is not belt-and-braces. Entry **rotation** ("entries olde
 stamps move to the archive") is a different mechanism and is deliberately out of scope.
 *(guard: `states the cold-retirement condition as five run stamp`)*
 
-**38. Every invariant above names the guard that enforces it, and that guard exists.**This list claims to be *what the validator enforces*; it was eight guards behind when
+**38. Every worked GATE verdict prints both disclosures.** `abstained` — what the run
+declined to claim — and `unlooked` — what a check never looked at. Without them a `PASS`
+reads as *verified* rather than as *"green, and here is what nobody claimed"*. They are
+**not** ratchets and the distinction is load-bearing: a ratchet may only shrink, and an
+abstention count under that rule pressures exactly one thing — claiming more. A run
+reporting `abstained: 0` is not more careful; it stopped saying *I don't know*. Refusals
+and wrong answers are communicating vessels, so a disclosure has no floor, no direction,
+and **may never be given a target** — a target on an abstention count is an instruction to
+guess. This repository had eight vocabularies for declining to claim and, until v1.28.0,
+zero counters.
+*(guard: `a worked GATE verdict omits `)*
+
+**39. Every invariant above names the guard that enforces it, and that guard exists.**This list claims to be *what the validator enforces*; it was eight guards behind when
 an audit measured it. A claim of enforcement is now checked like any other claim.
 *(guard: `whose message does not appear in`)* — and a cited literal must lie inside
 a **single** string in `test/validate.py`: the check reads that file as text, so a

package/SKILL-CARD.md

@@ -12,7 +12,7 @@ harmless.
 |---|---|
 | **Purpose** | Runs a substantial task through ten gated delivery stages — intake grill, docs study, brainstorm, spec, plan, subagent build, tests, lint/deploy, post-deploy, docs+registers, acceptance — refusing to advance until each gate passes |
 | **Owner** | ssheleg ([github.com/ssheleg/task-pipeline](https://github.com/ssheleg/task-pipeline)) |
-| **Version** | 1.27.0 |
+| **Version** | 1.28.0 |
 | **Surface** | Claude Code (filesystem skill + plugin) and the vercel `skills` CLI. **Not** uploaded to the Skills API; custom Skills do not sync across surfaces |
 | **Dependencies** | None required. Optional: `context7` (MCP), `figma` (MCP), super-ux, agent-sync, graphify, obsidian-wiki. Every stage's doctrine ships in-repo; the one conditional requirement is super-ux for the stage-3 UX track on a user-facing task |
 | **Evaluation status** | Suite authored, 5 categories. One recorded run, **self-observed by the author**; **zero blind runs on zero of three models** — the split, and the numbers, live in [`evals/RESULTS.md`](evals/RESULTS.md) and are computed by `evals/run.py` |

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "task-pipeline-skill",
-  "version": "1.27.0",
+  "version": "1.28.0",
   "description": "Full-cycle delivery pipeline for coding agents: a mandatory built-in intake grill, then 10 gated stages (docs, brainstorm+decompose, spec, plan, build, tests, lint/deploy, post-deploy, docs/wiki, acceptance). Every stage's doctrine ships inside the skill — no companion plugin required. This package is the installer CLI.",
   "bin": {
     "task-pipeline": "bin/task-pipeline.js"

package/plugins/task-pipeline/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "name": "task-pipeline",
   "displayName": "Task Pipeline",
   "description": "Runs a substantial task through a mandatory built-in intake grill, then 10 gated stages (docs, brainstorm+decompose, spec, plan, subagent build, tests, lint/deploy, post-deploy, docs/wiki, acceptance). Every stage's doctrine is built into the skill — no companion plugin required — with typed auto/manual gates, a frozen requirement spine that must close with evidence, a loop guard that breaks churn, one provider-agnostic model confirmed up front, and an optional super-ux UX track for user-facing work.",
-  "version": "1.27.0",
+  "version": "1.28.0",
   "author": {
     "name": "ssheleg",
     "url": "https://x.com/sshlg93"

package/plugins/task-pipeline/skills/task-pipeline/SKILL.md

@@ -269,7 +269,7 @@ capable available — see `references/model-tiering.md`).
 | 7 | Lint + deploy | host lint → deploy per host convention | lint clean + suite green before deploy; deploy needs a go (or the brief's specific standing authorization) | manual |
 | 8 | Post-deploy | tail deploy logs / health-check | clean boot or honest degradation report; **a deployed web target is opened, not curled** — a `200` proves the server answered and says nothing about a 404'd bundle or a console full of errors on load (`chrome-devtools`; absent → call it an HTTP response, which is its honest name) | auto |
 | 9 | Docs + wiki | host module docs/runbook rules → `wiki-update` ([obsidian-wiki](https://github.com/ar9av/obsidian-wiki), recommended) → `/graphify . --update` ([`references/knowledge-graph.md`](references/knowledge-graph.md), recommended) | every stale row of the stage-0 source ledger updated; **the propagation matrix walked for every change type this run produced** — the ledger names what you read, the matrix names what you owe — every settled thing recorded with an id, every answered question resolved, and **the documentation gate green with its ratchet counts printed**; docs synced; wiki synced; **the code graph refreshed where one exists** and checked against the docs (a hub no doc names, a doc naming a node the graph lost); **every number computed rather than restated, every named command or file resolvable** ([`references/learned.md`](references/learned.md)); the carry-over count printed beside the verdict | auto |
-| 10 | **Acceptance** | built in: [`references/audit.md`](references/audit.md) (ladder walk) → [`references/acceptance.md`](references/acceptance.md) (coverage table) → [`references/retrospective.md`](references/retrospective.md) (retro: stamp, prune, entry) | ladder walk ran, its absences became REQ rows; every REQ accounted for with evidence from a check seen failing once; ledger has no unresolved row; **axis rotation recorded** (new findings vs self-inflicted, rule 1 of [`references/learned.md`](references/learned.md)), **every closure verified against the artefact rather than the document describing it**, **each correction swept across its class**, **every deferral a printed ratchet rather than a TODO**; **in a multi-repository project, every repository is clean, pushed and pointed at** (below); operator signs off; **every check this close-out leans on — the documentation gate included — has been seen failing once against a planted defect, and its ratchet counts are printed beside the verdict**; **the retrospective written last, and in order — the run stamped with its commit FIRST (the cold-retirement trigger reads that stamp), then the prune with the list at or under its cap and every deletion logged, then the entry; every deletion and every entry carrying its commit, entries older than five stamps rotated into the archive, counts printed** | manual |
+| 10 | **Acceptance** | built in: [`references/audit.md`](references/audit.md) (ladder walk) → [`references/acceptance.md`](references/acceptance.md) (coverage table) → [`references/retrospective.md`](references/retrospective.md) (retro: stamp, prune, entry) | ladder walk ran, its absences became REQ rows; every REQ accounted for with evidence from a check seen failing once; ledger has no unresolved row; **axis rotation recorded** (new findings vs self-inflicted, rule 1 of [`references/learned.md`](references/learned.md)), **every closure verified against the artefact rather than the document describing it**, **each correction swept across its class**, **every deferral a printed ratchet rather than a TODO**; **in a multi-repository project, every repository is clean, pushed and pointed at** (below); operator signs off; **every check this close-out leans on — the documentation gate included — has been seen failing once against a planted defect, and its ratchet counts are printed beside the verdict**; **the retrospective written last, and in order — the run stamped with its commit FIRST (the cold-retirement trigger reads that stamp), then the prune with the list at or under its cap and every deletion logged, then the entry; every deletion and every entry carrying its commit, entries older than five stamps rotated into the archive, counts printed** ; **both disclosures printed beside the verdict** — `abstained` (what the run declined to claim) and `unlooked` (what a check never looked at), neither a ratchet, neither with a floor, neither ever a target ([`references/gates.md`](references/gates.md) → *Disclosures*) | manual |
 
 
 ### Stage 10 in a project of several repositories

package/plugins/task-pipeline/skills/task-pipeline/references/acceptance.md

@@ -198,6 +198,7 @@ ledger's, so a list that quietly grew back is visible at the moment it happened:
 ```
 GATE 10 acceptance: PASS — 14/14 REQ verified
   carry-over: 0 unresolved · retro: 7 standing (was 9) · retired 3 · added 1
+  abstained: 2 (1 partial · 1 cannot-verify) · unlooked: 3 dormant
 ```
 
 ## GATE (manual)
@@ -222,6 +223,13 @@ All of:
    ledger or here) and, for `deferred`, a tracker entry.
 7. **No carry-over row is left `unresolved`** — every one has a home, and the
    ledger's counts are printed with this verdict, not just filed.
+7a. **Both disclosures are printed** ([`gates.md`](gates.md) → *Disclosures*):
+   `abstained` — every REQ closing `partial`, every `unknown`, every ⚠️ *cannot verify
+   from diff* the controller could not resolve — and `unlooked`, every check that
+   reported `dormant` or `skip`. They are **not** ratchets: no floor, no direction, and
+   a movement either way wants one sentence. A run reporting `abstained: 0` is claiming
+   it knew everything, which is a stronger statement than any run this stage has ever
+   seen close honestly.
 8. **Every repository is closed, the parent included** — `git submodule status`
    shows no `+`, and each repo is clean and pushed. A submodule is finished when
    its parent points at it.

package/plugins/task-pipeline/skills/task-pipeline/references/audit.md

@@ -310,6 +310,7 @@ beside the verdict**:
 ```
 GATE 6 tests: PASS — full suite green (247 tests)
   carry-over: 4 open (was 6) · unresolved: 0 · audit findings deferred: 2
+  abstained: 1 (1 cannot-verify) · unlooked: 2 dormant
 ```
 
 The difference from a TODO is not bookkeeping. A TODO is invisible until somebody

package/plugins/task-pipeline/skills/task-pipeline/references/gates.md

@@ -32,6 +32,7 @@ elsewhere and is not restated here:
 - Probing — plant, run, restore
 - The false-positive budget
 - Ratchets
+- Disclosures — counted like a ratchet, and deliberately not monotone
 - Where a gate runs
 - Adding a check to an existing gate
 - Rationalizations
@@ -300,10 +301,58 @@ A **ratchet** is a named, counted set that may only shrink, printed on every run
 
 ```
 GATE 9 docs: PASS — propagation backlog: 121 (was 162) · unmarked residue: 0
+  abstained: 0 · unlooked: 4 (3 dormant · 1 skip — no submodules in this repo)
 ```
 
 A ratchet nobody prints is a TODO with a better name.
 
+## Disclosures — counted like a ratchet, and deliberately not monotone
+
+A ratchet may only shrink. **Some numbers must not be**, and printing them under a
+ratchet's discipline inverts the thing they measure.
+
+**Abstention is the case that matters.** This bundle has eight vocabularies for declining
+to claim — `partial`, `unknown`, `cannot verify from diff`, `review`, `dormant`, `skip`,
+`recalled`, `ungated` — and until they were counted, none of them appeared beside a
+verdict. So `PASS` read as *verified* rather than as *"green, and here is what nobody
+claimed"*.
+
+The obvious fix is a ratchet, and it is wrong. A count of abstentions that may only shrink
+puts pressure on exactly one thing: **claiming more**. A run reaching `abstained: 0` is not
+more careful; it is a run that stopped saying *I don't know*, which is the cheapest way to
+make the number fall. Refusals and wrong answers are communicating vessels — squeeze one
+column and it reappears in the other, silently, because a wrong claim looks like a claim.
+
+So a **disclosure** is printed beside the verdict like a ratchet and carries the opposite
+rule: **no floor, no direction, and a movement in either direction wants one sentence.**
+
+Two disclosures, kept separate because they are different facts:
+
+| Disclosure | Counts | Reading it |
+|---|---|---|
+| `abstained: N` | claims the run **declined to make** — `partial`, `unknown`, `cannot verify from diff` | a *choice*. Rising can mean the work got harder or the run got honest; falling can mean either the reverse |
+| `unlooked: N` | checks that **did not look** — `dormant`, `skip` | a *state of the corpus*, not a decision. It falls as the project grows the inputs those checks need |
+
+Three are deliberately **not** counted, and saying which is part of the disclosure:
+
+- **`review`** — *no check can decide this* — is an abstention, and it is the one this
+  section first listed and then forgot, which is exactly the failure it exists to catch.
+  It stays out of `abstained` because it is not a claim the run declined: it is a rule
+  that **declined to be mechanical**, recorded once at rung 2 with its reason (→ *Axis B*).
+  Counted per run it would report the same standing number every time and say nothing
+  about the run.
+- **`recalled`** — a property of one claim, already carried in the ledger beside the
+  command that would re-derive it.
+- **`ungated`** — a property of the whole run, said once, in words.
+
+A vocabulary that is named and then left out of every bucket is the one that goes
+uncounted forever. So each gets its line, including the one that got missed here.
+
+**What makes a disclosure honest rather than decorative** is the same thing that makes a
+ratchet honest: it is *computed*, and it is printed whether or not anyone likes the
+number. What makes it different is that **nobody may set a target for it.** A target on an
+abstention count is an instruction to guess.
+
 ---
 
 ## Where a gate runs

package/plugins/task-pipeline/skills/task-pipeline/references/retrospective.md

@@ -196,6 +196,7 @@ does ([`audit.md`](audit.md) → *What can't be fixed now becomes a ratchet, nev
 ```
 GATE 10 acceptance: PASS — 14/14 REQ verified
   carry-over: 0 unresolved · retro: 7 standing (was 9) · retired 3 · added 1
+  abstained: 2 · unlooked: 3
 ```
 
 A pruned list that nobody prints is a list that quietly grows back.

package/plugins/task-pipeline/skills/task-pipeline/references/stages.md

@@ -330,7 +330,10 @@ never that the work was skipped quietly.
   is covered; no `skip`/`xfail` smuggling a red suite past the gate. Never advance
   to deploy on a red or partial run. **The carry-over count is printed beside this
   verdict** — a ratchet nobody prints is a TODO with a better name
-  ([`audit.md`](audit.md)).
+  ([`audit.md`](audit.md)) — **and so are the two disclosures**, `abstained` and
+  `unlooked` ([`gates.md`](gates.md) → *Disclosures*): what the run declined to claim,
+  and what a check never looked at. Neither has a floor and neither may be targeted; a
+  target on an abstention count is an instruction to guess.
 - **Web front end? Then the surface is checked in a browser, not in the diff.**
   A passing suite proves the code does what its assertions say. It does not prove the
   page rendered — a component can be correct and land under a fixed header, a request
@@ -513,7 +516,10 @@ never that the work was skipped quietly.
   a messy run is the failure the file exists to stop. Stage 0 reads the standing
   instructions in full next time, which is why the cap is not negotiable.
 - **GATE (manual):** the ladder walk ran and its absences became REQ rows before
-  the table was written; **the retrospective is written — stamped first, then pruned, then the entry; the
+  the table was written; **both disclosures printed beside the verdict** — `abstained` (what the run declined
+  to claim) and `unlooked` (what a check never looked at), neither a ratchet, neither
+  with a floor, neither ever a target ([`gates.md`](gates.md) → *Disclosures*); **the
+  retrospective is written — stamped first, then pruned, then the entry; the
   list at or under its cap, every deletion logged in the archive with its commit,
   entries older than five run stamps rotated into `docs/superpowers/retro/`, the run
   stamped with its commit, every SHA in either file resolvable, and the

package/plugins/task-pipeline/skills/task-pipeline/templates/carryover.md

@@ -36,6 +36,7 @@ set that may only shrink, and it is printed beside every gate verdict:**
 ```
 GATE 6 tests: PASS — full suite green (247 tests)
   carry-over: 4 open (was 6) · unresolved: 0 · audit findings deferred: 2
+  abstained: 1 (1 cannot-verify) · unlooked: 2 dormant
 ```
 
 That one line is the whole mechanism. Without it, `PASS` reads as *verified*; with