task-pipeline-skill 1.85.2 → 1.86.3

package/CHANGELOG.md

@@ -1,3 +1,90 @@
+## v1.86.3 — the release declares the stamp it does not carry, eighth time
+
+`v1.86.2` was tagged and refused by its own release workflow: `npm run test:all` against
+the tag's tree found the version named nowhere in `retro.md`'s `## Releases that carry no
+stamp`. Nothing published under it — the tag exists, the release does not, npm never
+served it. The tree had passed `npm test` locally and CI's `validate` job; the release
+runs `test:all`, and `R-010` says to run exactly that against the tree you are about to
+tag. Read that evening, skipped that evening.
+
+The v1.86.2 payload is unchanged. This release adds the declaration for both versions.
+
+## v1.86.2 — the filter this skill exported filtered nothing
+
+Claude Code 2.1.270 started printing `hooks.json: unknown key "if" … ignored` at session
+start for a sibling plugin. The same shape has been in this skill's one shipped template
+since 2026-08-03, and every project that copied it into `.claude/settings.json` got a
+documentation gate that ran on **every** Bash call — a red gate refused `ls`, not commits.
+
+Guards: 429 → **429**, property checks 15 → **15** — the regression for this release is
+`test/audit_regressions/fix-hk-02.py`, run by `npm test`, and NOT a workflow step:
+`validate.yml` sits at 511,941 of GitHub's 512,000 bytes (#91), and a 59-byte headroom holds
+no step. It plants the old shape into a copy and requires the validator to refuse it by name.
+
+- **`"if": "Bash(git commit *)"` sat beside `matcher`, and a matcher group is only
+  `matcher` + `hooks`.** Read out of the 2.1.270 binary's schema: `if` exists on a command
+  handler only. Moved there in `templates/hooks.example.json`; the group's `_note` moved to
+  a top-level `_filter_note` for the same reason, since the block is copied verbatim into a
+  settings file.
+- **`references/hooks.md` said "beside `matcher`" and now says "inside the handler,
+  beside `type` and `command`"** — the worked example too; the evidence-docs mirror was
+  regenerated with `fix-ed-01.01.py --sync`. The dated 2026-08-03 documentation-track plan
+  keeps its wording.
+- **A new validator check refuses any key the hook schema does not know** at either level
+  and requires exactly one handler-level `Bash(git commit *)`; `fix-hk-02.py` plants the
+  pre-v1.86.2 shape back and watches the check fire. `claude plugin validate
+  --strict` passes the defective file, so a repo gate is the only place this fails before a
+  session start.
+
+## v1.86.1 — the release declares the stamp it does not carry
+
+`v1.86.0` was tagged and refused: the run-stamp gate reads the tag's own tree, a
+branch push cannot see a tag that does not exist yet, and the declaration was not
+in the tree when the tag was cut. Nothing published under it — the tag exists,
+the release does not, npm never served it.
+
+This is the seventh instance of a mechanism this repository's `retro.md` names
+six times, and `R-010` already held the rule: run the suite the RELEASE runs,
+against the tree you are about to tag. The lesson was written and read past,
+which is what its own retirement condition — "it becomes a mechanical pre-push
+hook" — exists to end.
+
+The v1.86.0 payload is unchanged. This release adds the declaration.
+
+## v1.86.0 — the audit closes, and three guards stop passing on a wording
+
+Sherlock external-v3 (37 findings) plus the context-ready handoff (PR #85),
+each finding carrying its own executable regression.
+
+Guards: 429 → **429**, property checks 15 → **15** — no guard was added or
+removed. Three plants were REPOINTED to follow their subjects to the wording
+those subjects had moved to, and the conditionals check became a script when
+the workflow hit GitHub's size limit. A repointed plant is the same guard
+proving the same thing about a sentence that moved.
+
+- **A guard keyed to a wording had silently stopped running.** The retrospective
+  gained rule CLASSES — a cold rule is marked review-needed rather than deleted,
+  and the trigger reads *five exposure opportunities* instead of *five run
+  stamps*. The check requiring the condition to name BOTH units was keyed to the
+  old words, so its corpus predicate matched nothing, every surface dropped out
+  of scope, and it passed everything. Found only because a NEGATIVE SELF-TEST
+  refused to plant. The discovery predicate and the assertion are now built from
+  one pattern, and the failure message no longer names a unit — naming one is
+  what tied it to a wording.
+- **A property check pinned a count.**  went red when the graph
+  schema gained a fourth conditional, all four correctly behind a . It
+  compares the refs against the entries now, so inlining one still fails at any
+  number of rules.
+- Explaining that fix inline pushed  past
+  GitHub's 512,000-byte limit — above which the workflow stays `active`, creates
+  no runs, and `gh pr checks` says "no checks reported". The size guard names its
+  own remedy, and taking it moved the check into `test/property_graph_conditionals.py`.
+- The doctrine map moved to `references/doctrine-map.md` when the body breached
+  the 5000-token budget; the reachability walker is transitive, so every
+  reference it names is still reachable. `evidence-docs/references/GENERATED.md`
+  — the note saying those copies are generated — was reachable from nothing, so
+  the agent most likely to edit a copy never read it.
+
 ## v1.85.2 — the two-merge protocol, followed this time
 
 **v1.85.1 is a burned tag** — the third of this wave's choreography lessons, and

package/CONTRIBUTING.md

@@ -315,7 +315,7 @@ was neither strict nor lenient but **unreadable**. A list capped at ten whose re
 condition cannot be read fills up and stops being pruned. The calendar is the unit nothing can
 stall, which is why it is not belt-and-braces. Entry **rotation** ("entries older than five
 stamps move to the archive") is a different mechanism and is deliberately out of scope.
-*(guard: `states the cold-retirement condition as five run stamp`)*
+*(guard: `states the cold-retirement condition in one unit only`)*
 
 **38. Every worked GATE verdict prints both disclosures.** `abstained` — what the run
 declined to claim — and `unlooked` — what a check never looked at. Without them a `PASS`
@@ -372,7 +372,7 @@ rule and the command. Every miss was found by a reader or a sweep, never by the
 **nobody notices a corpus that is too small, because everything inside it passes.**
 Exclusions are allowed and must each carry a reason in the code: a changelog narrates
 old formats, `docs/evidence/specs/` are point-in-time records.
-*(guard: `a worked GATE verdict omits ` and `states the cold-retirement condition as` — both now run over corpora walked from disk, so a new surface joins by existing)*
+*(guard: `a worked GATE verdict omits ` and `states the cold-retirement condition in one unit only` — both now run over corpora walked from disk, so a new surface joins by existing)*
 
 **44. A carry-over row still `open` names a board id, and the board row names it back.**
 `docs/evidence/backlog.md` is the project's queue between runs; the ledger's `open`

package/README.md

@@ -587,7 +587,7 @@ must say so.
 ### Held to Anthropic's own Skill authoring guidance
 
 Audited against the four Agent Skills pages. Most of it already held — `name`
-13/64 chars, `description` 903/1024 chars, `SKILL.md` 262/500 lines, all 38 references
+13/64 chars, `description` 903/1024 chars, `SKILL.md` 279/500 lines, all 39 references
 linked **directly** from `SKILL.md`, and the bundle far under the 30 MB ceiling. What
 did not, now does:
 
@@ -929,6 +929,7 @@ recommendation, so you arm the whole run in one exchange. Detail:
 |---|---|
 | [`SKILL.md`](plugins/task-pipeline/skills/task-pipeline/SKILL.md) | the orchestrator: how to run, the stage table, the model decision |
 | [`references/stages.md`](plugins/task-pipeline/skills/task-pipeline/references/stages.md) | per-stage detail and the exact gate criteria |
+| [`references/doctrine-map.md`](plugins/task-pipeline/skills/task-pipeline/references/doctrine-map.md) | which reference owns which stage — the map SKILL.md used to carry inline |
 | [`references/artifacts.md`](plugins/task-pipeline/skills/task-pipeline/references/artifacts.md) | the canonical document layout each stage writes to |
 | [`references/conventions.md`](plugins/task-pipeline/skills/task-pipeline/references/conventions.md) | how stages 6–10 read the host project's `CLAUDE.md`, and how the documentation regime is detected |
 | [`references/documentation.md`](plugins/task-pipeline/skills/task-pipeline/references/documentation.md) | the doc system: the inventory, registers and ids, SSOT, the Doc Loop, supersede semantics, the propagation matrix, intent vs as-built |

package/SKILL-CARD.md

@@ -12,7 +12,7 @@ harmless.
 |---|---|
 | **Purpose** | Runs a substantial task through ten gated delivery stages — intake grill, docs study, brainstorm, spec, plan, subagent build, tests, lint/deploy, post-deploy, docs+registers, acceptance — refusing to advance until each gate passes |
 | **Owner** | ssheleg ([github.com/ssheleg/task-pipeline](https://github.com/ssheleg/task-pipeline)) |
-| **Version** | 1.85.2 |
+| **Version** | 1.86.3 |
 | **Surface** | Claude Code (filesystem skill + plugin) and the vercel `skills` CLI. **Not** uploaded to the Skills API; custom Skills do not sync across surfaces |
 | **Dependencies** | None required. Optional: `context7` (MCP), `figma` (MCP), super-ux, agent-sync, graphify, obsidian-wiki, and **one of two browser channels** — `playwright` (CLI or MCP) or `chrome-devtools` (MCP); either satisfies the browser step and neither is required. Every stage's doctrine ships in-repo; the one conditional requirement is super-ux for the stage-3 UX track on a user-facing task |
 | **Evaluation status** | Suite authored, 5 categories. One recorded run, **self-observed by the author**; **zero blind runs on zero of three models** — the split, and the numbers, live in [`evals/RESULTS.md`](evals/RESULTS.md) and are computed by `evals/run.py` |

package/bin/task-pipeline.js

@@ -50,16 +50,58 @@ function copyDir(src, dest) {
   }
 }
 
+function verifyTree(src, staged, isDir) {
+  if (!isDir) {
+    if (!fs.readFileSync(src).equals(fs.readFileSync(staged))) {
+      throw new Error(`staged ${path.basename(staged)} does not match its source`);
+    }
+    return;
+  }
+  for (const entry of fs.readdirSync(src, { withFileTypes: true })) {
+    const s = path.join(src, entry.name);
+    const d = path.join(staged, entry.name);
+    if (entry.isDirectory()) verifyTree(s, d, true);
+    else if (!fs.readFileSync(s).equals(fs.readFileSync(d))) {
+      throw new Error(`staged ${entry.name} does not match its source`);
+    }
+  }
+}
+
+/**
+ * A TRANSACTIONAL install (FIX-UP-05.02): the writer contract from UP-05
+ * applied to this member's installer. The old code deleted `dest` and THEN
+ * copied into it, so a crash mid-copy left nothing (with --force) or a partial
+ * tree. Now the payload is staged into a same-filesystem sibling and VERIFIED
+ * first; only then is the old install moved aside (recoverable) and the staged
+ * one renamed into place. A stage crash leaves the ACTIVE install untouched;
+ * --force=false still skips, preserving the user's bytes.
+ */
 function installOne(label, src, dest, isDir, force) {
   if (fs.existsSync(dest) && !force) {
     console.log(`skip: ${label} already installed at ${dest} (rerun with --force to overwrite)`);
     return;
   }
-  fs.rmSync(dest, { recursive: true, force: true });
   fs.mkdirSync(path.dirname(dest), { recursive: true });
-  if (isDir) copyDir(src, dest);
-  else fs.copyFileSync(src, dest);
-  console.log(`Installed ${label} -> ${dest}`);
+  const staging = `${dest}.staging-${process.pid}`;   // same fs as dest
+  const prev = `${dest}.prev-${process.pid}`;
+  fs.rmSync(staging, { recursive: true, force: true });
+  try {
+    // 1. STAGE + VERIFY, before touching the active install.
+    if (isDir) copyDir(src, staging);
+    else { fs.mkdirSync(path.dirname(staging), { recursive: true }); fs.copyFileSync(src, staging); }
+    verifyTree(src, staging, isDir);
+    // 2. SWITCH: move the old aside (recoverable), rename staged into place.
+    fs.rmSync(prev, { recursive: true, force: true });
+    if (fs.existsSync(dest)) fs.renameSync(dest, prev);
+    fs.renameSync(staging, dest);
+    fs.rmSync(prev, { recursive: true, force: true });
+    console.log(`Installed ${label} -> ${dest}`);
+  } catch (err) {
+    // Abort: leave the active install intact, remove the half-built staging.
+    fs.rmSync(staging, { recursive: true, force: true });
+    if (fs.existsSync(prev) && !fs.existsSync(dest)) fs.renameSync(prev, dest);
+    throw new Error(`install aborted, previous install intact: ${err.message}`);
+  }
 }
 
 /**
@@ -172,6 +214,20 @@ function migrateArtifacts(args) {
   return 0;
 }
 
+// The bundled HostContext resolver (FIX-UP-08.02) — one contract, a local
+// copy per member because these installers run via `npx` with no shared lib.
+// A host's config root is: an explicit root > the documented host env var >
+// the platform default `~/<dir>`. Used verbatim (spaces preserved), never
+// through a shell. Host EXISTENCE is a separate probe on the returned path.
+const HOST_ENV = { claude: 'CLAUDE_CONFIG_DIR', codex: 'CODEX_HOME', gemini: 'GEMINI_CONFIG_DIR' };
+const HOST_DIR = { claude: '.claude', codex: '.codex', gemini: '.gemini' };
+function hostRoot(agent, home, env, explicit) {
+  if (explicit) return explicit;
+  const e = (env || process.env)[HOST_ENV[agent]];
+  if (e) return e;
+  return path.join(home, HOST_DIR[agent]);
+}
+
 function main(argv) {
   const args = argv.slice(2);
   if (args.includes('--help') || args.includes('-h')) {
@@ -204,9 +260,10 @@ function main(argv) {
   // copy SHADOWS the plugin — silently serving whatever version was copied, forever.
   // The family launcher (sshlg-skills) prunes exactly these copies for that reason,
   // so creating one without saying so undoes the thing it is paired with.
+  const claude = hostRoot('claude', home, process.env);
   const pluginDirs = [
-    path.join(home, '.claude', 'plugins', 'marketplaces', 'task-pipeline'),
-    path.join(home, '.claude', 'plugins', 'cache', 'task-pipeline'),
+    path.join(claude, 'plugins', 'marketplaces', 'task-pipeline'),
+    path.join(claude, 'plugins', 'cache', 'task-pipeline'),
   ];
   if (!force && pluginDirs.some((d) => fs.existsSync(d))) {
     console.error(`refusing: task-pipeline is already installed as a Claude Code PLUGIN.
@@ -224,14 +281,14 @@ Rerun with --force if you deliberately want the plain copy instead.`);
   installOne(
     'task-pipeline skill  ',
     skillSrc,
-    path.join(home, '.claude', 'skills', 'task-pipeline'),
+    path.join(claude, 'skills', 'task-pipeline'),
     true,
     force
   );
   installOne(
     '/task-pipeline command',
     cmdSrc,
-    path.join(home, '.claude', 'commands', 'task-pipeline.md'),
+    path.join(claude, 'commands', 'task-pipeline.md'),
     false,
     force
   );
@@ -240,4 +297,8 @@ Rerun with --force if you deliberately want the plain copy instead.`);
   return 0;
 }
 
-process.exit(main(process.argv));
+if (require.main === module) {
+  process.exit(main(process.argv));
+}
+
+module.exports = { installOne, copyDir, verifyTree, hostRoot };

package/evals/cases/evidence-docs.json

@@ -0,0 +1,188 @@
+{
+ "contract": "outcome-case/1 (schemas/outcome-case.schema.json + test/outcome_harness.py in ssheleg/sshlg-skills)",
+ "note": "Outcome corpus for evidence-docs (FIX-EV-01.09). Judged on ARTIFACTS via the family harness: the runner records the actual output oracle verdict AND the raw result per case; with/without-skill arms are the harness's baseline contract. Nothing in the production skill was changed for grader convenience.",
+ "arms": {
+  "baseline": "same prompts, skill absent",
+  "current": "same prompts, skill installed"
+ },
+ "cases": [
+  {
+   "schema_version": "outcome-case/1",
+   "id": "ED-OUT-001-positive-receipt-per-claim",
+   "skill": "evidence-docs",
+   "prompt": {
+    "text": "Document what test/validate.py checks, and attach a receipt to each claim — a file:line, a command and its output, or a test name; write claims-doc.md."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "9496eb52cebe5fe634295e2d6f92954b1a656f0b57fb85021e4f5471e333ec97"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [
+      "evidence-docs"
+     ],
+     "expect_not_loaded": []
+    },
+    "outcome": [
+     {
+      "name": "doc exists",
+      "kind": "artifact-exists",
+      "target": "claims-doc.md"
+     },
+     {
+      "name": "each claim carries a receipt (a runnable command)",
+      "kind": "artifact-contains",
+      "target": "claims-doc.md",
+      "expect": "$"
+     }
+    ]
+   }
+  },
+  {
+   "schema_version": "outcome-case/1",
+   "id": "ED-OUT-002-negative-routing",
+   "skill": "evidence-docs",
+   "prompt": {
+    "text": "Explain in two sentences what a webhook is."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "a5da94aa03520bb6226ea88328a75ab6d7e3985c73a0e90a1379bf168fead57e"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [],
+     "expect_not_loaded": [
+      "evidence-docs"
+     ]
+    },
+    "outcome": [
+     {
+      "name": "no evidence-doc artifact appears",
+      "kind": "command-exit-0",
+      "target": "test ! -f claims-doc.md"
+     }
+    ]
+   }
+  },
+  {
+   "schema_version": "outcome-case/1",
+   "id": "ED-OUT-003-unsupported-claim-refused",
+   "skill": "evidence-docs",
+   "prompt": {
+    "text": "State in a doc that 'docs are in sync' and back it — do not assert it on your word; write sync-claim.md that either shows the exit code proving it or says the claim is unsupported."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "84f9c3bfc90e1eba9a74c97eda8577fe2081d4cc9f500864d971e195cd2aa1c1"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [
+      "evidence-docs"
+     ],
+     "expect_not_loaded": []
+    },
+    "outcome": [
+     {
+      "name": "the claim is proven by an exit code or marked unsupported",
+      "kind": "artifact-contains",
+      "target": "sync-claim.md",
+      "expect": "exit"
+     }
+    ]
+   }
+  },
+  {
+   "schema_version": "outcome-case/1",
+   "id": "ED-OUT-004-noop-chat-answer",
+   "skill": "evidence-docs",
+   "prompt": {
+    "text": "In this chat, roughly how many test suites does the repo have? Just answer me here."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "c29650fd684f6cf9cf0dd8c6db4a23d79c40ee4812b19bce1ccd257238e3e0b7"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [],
+     "expect_not_loaded": [
+      "evidence-docs"
+     ]
+    },
+    "outcome": [
+     {
+      "name": "a chat answer writes no evidence document",
+      "kind": "command-exit-0",
+      "target": "test ! -f claims-doc.md"
+     }
+    ]
+   }
+  },
+  {
+   "schema_version": "outcome-case/1",
+   "id": "ED-OUT-005-dependency-unavailable-is-named",
+   "skill": "evidence-docs",
+   "prompt": {
+    "text": "Resolve every reference this doc names against a clean checkout with the neighbouring task-pipeline dependency ABSENT; where a link cannot resolve, print 'capability unavailable' rather than claiming all links resolve; write link-report.md."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "bf4961dfbbc8904814d771bb6e649df0e278d93611c75b563f63ba57d2d23569"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [
+      "evidence-docs"
+     ],
+     "expect_not_loaded": []
+    },
+    "outcome": [
+     {
+      "name": "an unresolvable dependency prints capability unavailable (ED-01)",
+      "kind": "artifact-contains",
+      "target": "link-report.md",
+      "expect": "capability unavailable"
+     }
+    ]
+   }
+  }
+ ]
+}

package/evals/cases/project-audit.json

@@ -0,0 +1,188 @@
+{
+ "contract": "outcome-case/1 (schemas/outcome-case.schema.json + test/outcome_harness.py in ssheleg/sshlg-skills)",
+ "note": "Outcome corpus for project-audit (FIX-EV-01.10). Judged on ARTIFACTS via the family harness: the runner records the actual output oracle verdict AND the raw result per case; with/without-skill arms are the harness's baseline contract. The HTML report is OPTIONAL — a run without --report writes no HTML and still completes. Nothing in the production skill was changed for grader convenience.",
+ "arms": {
+  "baseline": "same prompts, skill absent",
+  "current": "same prompts, skill installed"
+ },
+ "cases": [
+  {
+   "schema_version": "outcome-case/1",
+   "id": "PA-OUT-001-adr-does-not-excuse-a-defect",
+   "skill": "project-audit",
+   "prompt": {
+    "text": "An ADR permits logging the refresh token. Audit the project and report the exposure anyway, LINKED to the ADR (a documented decision does not make a leak safe); write audit.json."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "28a695d37f9c244535c0d968e6ba870e37b1af5e87d94d4d83eb01591f76a805"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [
+      "project-audit"
+     ],
+     "expect_not_loaded": []
+    },
+    "outcome": [
+     {
+      "name": "the audit exists",
+      "kind": "artifact-exists",
+      "target": "audit.json"
+     },
+     {
+      "name": "the exposure is a finding linked to the ADR (PA-01)",
+      "kind": "artifact-contains",
+      "target": "audit.json",
+      "expect": "exposure"
+     }
+    ]
+   }
+  },
+  {
+   "schema_version": "outcome-case/1",
+   "id": "PA-OUT-002-negative-routing",
+   "skill": "project-audit",
+   "prompt": {
+    "text": "Explain in two sentences what a webhook is."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "a5da94aa03520bb6226ea88328a75ab6d7e3985c73a0e90a1379bf168fead57e"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [],
+     "expect_not_loaded": [
+      "project-audit"
+     ]
+    },
+    "outcome": [
+     {
+      "name": "no audit artifact appears",
+      "kind": "command-exit-0",
+      "target": "test ! -f audit.json"
+     }
+    ]
+   }
+  },
+  {
+   "schema_version": "outcome-case/1",
+   "id": "PA-OUT-003-reproduced-mechanism-is-a-finding",
+   "skill": "project-audit",
+   "prompt": {
+    "text": "A race is reproduced locally; production occurrence is unknown. Record it as a finding with observation scope and time in race.json — a zero production sample is not zero risk (PA-02)."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "bd8a19a50cbf700b10f9d220c8fb01bea9dbdcd53757e2869b82e7facb162001"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [
+      "project-audit"
+     ],
+     "expect_not_loaded": []
+    },
+    "outcome": [
+     {
+      "name": "the reproduced mechanism stays a finding (PA-02)",
+      "kind": "artifact-contains",
+      "target": "race.json",
+      "expect": "production"
+     }
+    ]
+   }
+  },
+  {
+   "schema_version": "outcome-case/1",
+   "id": "PA-OUT-004-noop-no-report-completes",
+   "skill": "project-audit",
+   "prompt": {
+    "text": "Run the project audit WITHOUT --report; confirm no HTML is created and the run is still complete; note it in run-note.md."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "e358282127ba3f0a59888caadf7d6aa47485b17e7e9d63a4e56f62e40747065d"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [
+      "project-audit"
+     ],
+     "expect_not_loaded": []
+    },
+    "outcome": [
+     {
+      "name": "the run completes with no HTML (PA-03)",
+      "kind": "command-exit-0",
+      "target": "test ! -f report.html"
+     }
+    ]
+   }
+  },
+  {
+   "schema_version": "outcome-case/1",
+   "id": "PA-OUT-005-report-requires-existing-html",
+   "skill": "project-audit",
+   "prompt": {
+    "text": "Run the audit WITH --report and record that the HTML exists, its links are safe, and its inspect/render status is reported in report-check.md."
+   },
+   "environment": {
+    "model": "inherit",
+    "host": "any",
+    "case_digest": "fd603f6d516148da4411d34d408af5677b0b64570ae55cb81439ae7273202325"
+   },
+   "checks": {
+    "tool": [
+     {
+      "name": "python3 present",
+      "command": "python3 -c 'pass'"
+     }
+    ],
+    "load_trace": {
+     "expect_loaded": [
+      "project-audit"
+     ],
+     "expect_not_loaded": []
+    },
+    "outcome": [
+     {
+      "name": "with --report the HTML is required to exist (PA-03)",
+      "kind": "artifact-contains",
+      "target": "report-check.md",
+      "expect": "render"
+     }
+    ]
+   }
+  }
+ ]
+}