tribunal-kit 9.2.5 → 9.2.6

package/.agent/workflows/arch.md

@@ -0,0 +1,80 @@
+---
+description: Tribunal Architecture Intelligence — Autonomous architecture extraction, zero-trust verification, blast radius simulation, semantic diffing, and health auditing.
+---
+
+# /arch — Tribunal Architecture Intelligence
+
+Execute deterministic architecture intelligence, verification, and blast radius simulation.
+
+## Overview
+Unlike superficial diagramming tools that only generate static pictures, `/arch` treats architecture as an **executable, verifiable Evidence Graph**.
+
+```
+SOURCE CODE
+    ↓ (AST & pattern extraction)
+FACT MODEL (.agent/history/architecture-model.json)
+    ↓ (Zero-trust provenance verification)
+CONFIDENCE & CONTRADICTION GATES (L1-L5)
+    ↓ (Downstream dependency closure)
+BLAST RADIUS & RISK SIMULATION
+    ↓ (Projections: Topology, Security, Failure, Impact)
+INTERACTIVE STANDALONE EXPLORER & AUDIT REPORT
+```
+
+---
+
+## Subcommands
+
+### 1. Extract Architectural Fact Model
+```bash
+tk arch map
+# or: node .agent/scripts/architecture_extractor.js
+```
+Scans repository AST, route definitions, database models, queues, events, and auth middleware. Emits the canonical `.agent/history/architecture-model.json`.
+
+### 2. Zero-Trust Verification
+```bash
+tk arch verify [--strict]
+# or: node .agent/scripts/architecture_verifier.js
+```
+Verifies that all entity code locations, lines, symbols, and hashes match ground truth. Surfaces any architectural contradictions or drifted/stale evidence.
+
+### 3. Change Blast Radius & Impact Simulation
+```bash
+tk arch impact <component-id-or-file>
+# or: node .agent/scripts/blast_radius_engine.js <query>
+```
+Simulates the impact of changing a component: direct callers, transitive dependents across concentric depth rings, impacted API routes, affected test suites, and risk tier (LOW/MEDIUM/HIGH/CRITICAL).
+
+### 4. Semantic Architecture Diff (PR Gate)
+```bash
+tk arch diff <base-model.json> <head-model.json>
+# or: node .agent/scripts/architecture_diff.js <base> <head>
+```
+Calculates true architectural shifts:
+- Trust boundaries crossed (e.g. public route directly accessing isolated database)
+- Resilience regressions (e.g. timeouts removed from external API calls)
+- Blast radius expansions (components whose downstream impact grew >25%)
+- New external SaaS/cloud dependencies introduced
+
+### 5. Architectural Health Audit
+```bash
+tk arch audit
+# or: node .agent/scripts/architecture_health.js
+```
+Audits structural risks:
+- Circular dependencies (exact cycle chains)
+- Single Points of Failure (SPOFs / High Fan-In bottlenecks)
+- Excessive Coupling (God Modules / High Fan-Out)
+- Test coverage gaps on critical components
+
+### 6. Multi-Projection Interactive Explorer
+```bash
+tk arch project [--open]
+# or: node .agent/scripts/architecture_visualizer.js
+```
+Generates a zero-dependency, standalone HTML explorer at `.agent/history/architecture-intelligence.html` with 4 interactive projections:
+1. **Topology**: Services, routes, datastores, queues
+2. **Security**: Trust zones & authentication gates
+3. **Failure Modes**: Timeouts, retries, fallbacks
+4. **Blast Radius Simulator**: Click any node to visualize live concentric blast rings

package/.agent/workflows/assimilate.md

@@ -1,15 +1,17 @@
 ---
 name: assimilate
-description: "Trigger the learning pipeline to extract, validate, and store Tribunal Instincts."
+description: 'Trigger the learning pipeline to extract, validate, and store Tribunal Instincts.'
 version: 1.0.0
 ---
 
 # ASSIMILATE (LEARNING PIPELINE)
 
 ## Invocation
+
 `/assimilate` or `/learn`
 
 ## Behavior
+
 Instead of learning in real-time and bloating the execution path, learning is an offline batch job.
 
 1. **Extraction**: Invokes the `memory_archivist.js` which reads the most recent session logs.
@@ -18,4 +20,5 @@ Instead of learning in real-time and bloating the execution path, learning is an
 4. **Storage**: Saves the verified evidence-backed instinct into `instincts.json` where `context_broker.js` can retrieve it for future related tasks.
 
 ## Limits
+
 Do not trigger this workflow automatically after every prompt. Use it specifically after a long debugging session or a complex architectural setup to persist the hard-earned lessons.

package/.agent/workflows/audit.md

@@ -166,7 +166,6 @@ No files are modified without explicit approval.
 
 ---
 
-
 ## Harness vs Application Auditing
 
 The `/audit` command now explicitly distinguishes between Application Security (OWASP, SQLi) and Harness Security (AgentShield prompt injection, MCP configuration risks).

package/.agent/workflows/generate.md

@@ -60,10 +60,10 @@ Your request
     │
     ▼
 Context scan (MANDATORY before first line of code)
-├── Read package.json → verify all imports exist
-├── Read tsconfig.json → understand strictness, paths aliases
-├── Read referenced files → understand actual data shapes
-└── Read .env.example → know available environment variables
+├── Search package.json (via grep) → verify specifically required dependencies only. Do NOT read the entire file.
+├── Search tsconfig.json (via grep) → verify specific strictness or path aliases. Do NOT read the entire file.
+├── Read only relevant excerpts of referenced files → understand actual data shapes
+└── Search .env.example (via grep) → verify specifically required environment variables
     │
     ▼
 Maker generates at temperature 0.1
@@ -115,30 +115,36 @@ When unsure: write `// VERIFY: [specific reason]` instead of hallucinating.
 
 ## Reviewer Auto-Selection
 
-**Always active:**
+**System-1 Fast-Pass Routing (MANDATORY)**
+
+Before selecting reviewers, you MUST run `tk impact-tier` to determine the risk level:
+
+- **Tier 0 (Fast-Pass) & Tier 1 (Express Pass):** Bypass ALL LLM Tribunal Reviewers. Run deterministic scripts only. Show Human Gate (or auto-apply if configured).
+- **Tier 2 (Targeted Audit):** Run deterministic scripts + max 1-2 specialized domain reviewers.
+- **Tier 3 (Full Gauntlet):** Run full suite + Human Gate.
+
+**Always active (For Tier 2+):**
 
 ```
 precedence-reviewer→ Enforces repository Case Law and past rejections (Runs First)
-logic-reviewer     → Hallucinated methods, undefined refs, impossible logic
 security-auditor   → OWASP vulnerabilities, hardcoded secrets, injection
-complexity-reviewer→ Enforces the Dependency Ladder to prevent over-engineering
 ```
 
 **Auto-activated by keywords:**
 
-| Keyword in request                                          | Additional Reviewers                                           |
-| :---------------------------------------------------------- | :------------------------------------------------------------- |
-| `api`, `route`, `endpoint`, `handler`, `server action`      | `dependency-reviewer` + `type-safety-reviewer`                 |
-| `sql`, `query`, `database`, `prisma`, `drizzle`, `orm`      | `sql-reviewer`                                                 |
-| `component`, `hook`, `react`, `vue`, `jsx`, `tsx`           | `frontend-reviewer` + `type-safety-reviewer` + `ui-ux-auditor` |
-| `ui`, `design`, `landing`, `page`, `layout`, `style`, `css` | `ui-ux-auditor` + `accessibility-reviewer`                     |
-| `animation`, `gsap`, `framer`, `motion`, `scroll`           | `frontend-reviewer` + `performance-reviewer` + `ui-ux-auditor` |
-| `test`, `spec`, `vitest`, `jest`, `playwright`              | `test-coverage-reviewer`                                       |
-| `slow`, `optimize`, `cache`, `performance`, `bundle`        | `performance-reviewer`                                         |
-| `mobile`, `react native`, `expo`                            | `mobile-reviewer`                                              |
-| `llm`, `openai`, `anthropic`, `gemini`, `embedding`, `ai`   | `ai-code-reviewer`                                             |
-| `aria`, `wcag`, `a11y`, `accessibility`                     | `accessibility-reviewer` + `ui-ux-auditor`                     |
-| `import`, `package`, `npm`, `require`                       | `dependency-reviewer`                                          |
+| Keyword in request                                          | Additional Reviewers (Max 2 for Tier 2)        |
+| :---------------------------------------------------------- | :--------------------------------------------- |
+| `api`, `route`, `endpoint`, `handler`, `server action`      | `backend-specialist` + `type-safety-reviewer`  |
+| `sql`, `query`, `database`, `prisma`, `drizzle`, `orm`      | `sql-reviewer`                                 |
+| `component`, `hook`, `react`, `vue`, `jsx`, `tsx`           | `frontend-reviewer` + `type-safety-reviewer`   |
+| `ui`, `design`, `landing`, `page`, `layout`, `style`, `css` | `frontend-reviewer` + `accessibility-reviewer` |
+| `animation`, `gsap`, `framer`, `motion`, `scroll`           | `frontend-reviewer` + `performance-reviewer`   |
+| `test`, `spec`, `vitest`, `jest`, `playwright`              | `test-coverage-reviewer`                       |
+| `slow`, `optimize`, `cache`, `performance`, `bundle`        | `performance-reviewer`                         |
+| `mobile`, `react native`, `expo`                            | `mobile-reviewer`                              |
+| `llm`, `openai`, `anthropic`, `gemini`, `embedding`, `ai`   | `ai-code-reviewer`                             |
+| `aria`, `wcag`, `a11y`, `accessibility`                     | `accessibility-reviewer`                       |
+| `import`, `package`, `npm`, `require`                       | `dependency-reviewer`                          |
 
 > For maximum safety on critical code: use `/tribunal-full` for all 28 reviewers simultaneously.
 
@@ -210,7 +216,6 @@ Write to disk?  Y = approve | N = discard | R = revise with feedback
 /generate an OpenAI structured output call with Zod schema validation
 ```
 
-
 ## Brain-Hands Separation & Durable Logging
 
 During code generation, the model (Brain) issues tool requests, and the harness (Hands) executes them. Every tool execution is recorded in the durable log. Verification must complete before Human Gate approval.

package/.agent/workflows/htop.md

@@ -1,22 +1,26 @@
 ---
 name: htop
-description: "Inspect active agent execution metrics, task telemetry, and syscall status."
+description: 'Inspect active agent execution metrics, task telemetry, and syscall status.'
 version: 1.0.0
 ---
 
 # HTOP (SYSCALL MONITOR)
 
 ## Invocation
+
 `/htop` or `/syscall-monitor`
 
 ## Behavior
+
 Provides a real-time (or checkpointed) readout of the agent harness execution state.
 
 When invoked, the system reads from `session_logger.js` and `harness_manager.js` to report:
+
 1. **Active Syscalls**: Which commands are currently executing in the background.
 2. **Token Usage**: Aggregate token consumption for the current session.
 3. **Task Status**: Which nodes in the DAG orchestrator are `PENDING`, `RUNNING`, or `DONE`.
 4. **Timeouts**: Any tools approaching their 5-minute kill threshold.
 
 ## Usage
+
 Use this command when a marathon agent appears to be stuck, to inspect whether it is waiting on a slow `npm install` or if it has entered an infinite loop.

package/.agent/workflows/marathon.md

@@ -285,7 +285,6 @@ node .agent/scripts/marathon_harness.js reset
 
 ---
 
-
 ## Long-Running State & Interruption
 
 Marathon workflows maintain long-running task state via frequent checkpoints. If interrupted, the workflow can be restarted cleanly using `/resume` without losing validated state.

package/.agent/workflows/resume.md

@@ -1,15 +1,17 @@
 ---
 name: resume
-description: "Resume a recoverable Tribunal Kit session from the durable event log."
+description: 'Resume a recoverable Tribunal Kit session from the durable event log.'
 version: 1.0.0
 ---
 
 # RESUME WORKFLOW
 
 ## Invocation
+
 `/resume [session_id]`
 
 ## Behavior
+
 Tribunal Kit now uses a durable JSONL event log via `session_logger.js`. If a process is killed (OOM, timeout, user interrupt), the state is not lost.
 
 1. **Validation**: Locates the session events in `.agent_session.json`.
@@ -17,4 +19,5 @@ Tribunal Kit now uses a durable JSONL event log via `session_logger.js`. If a pr
 3. **Resumption**: Skips over completed tasks and automatically restarts the task that was interrupted, pulling in the precise context needed for that specific wave.
 
 ## Safety Boundaries
-The `/resume` workflow will NEVER blindly replay non-idempotent side effects (e.g., executing a POST request or DROP TABLE) without Human Gate confirmation. 
+
+The `/resume` workflow will NEVER blindly replay non-idempotent side effects (e.g., executing a POST request or DROP TABLE) without Human Gate confirmation.

package/.agent/workflows/skill-enhancement-engine.md

@@ -59,7 +59,7 @@ node runners/skill_enhancement_engine.js --skill <skill-name> --fix
 # Enhance all skills within a domain cluster (motion, frontend, backend, security, devops, database, testing, mobile)
 node runners/skill_enhancement_engine.js --domain motion --fix
 
-# Enhance all 185 skills and mirror changes to workspace root
+# Enhance all 235 skills and mirror changes to workspace root
 node runners/skill_enhancement_engine.js --all --fix --sync-to-root
 
 # Validate payload and SDO triggers

package/.agent/workflows/team-mode.md

@@ -1,15 +1,17 @@
 ---
 name: team-mode
-description: "Enable dynamic multi-agent task execution, DAG routing, and parallel reviews."
+description: 'Enable dynamic multi-agent task execution, DAG routing, and parallel reviews.'
 version: 1.0.0
 ---
 
 # TEAM MODE (DAG ORCHESTRATION)
 
 ## Invocation
+
 `/team-mode [task_prompt]`
 
 ## Behavior
+
 Activates the `swarm_dispatcher.js` using the `--mode dag` flag to execute highly complex, multi-domain tasks.
 
 1. **Decomposition**: The Orchestrator agent splits the `task_prompt` into a Topological DAG.
@@ -19,4 +21,5 @@ Activates the `swarm_dispatcher.js` using the `--mode dag` flag to execute highl
 5. **Review**: The entire output is passed through `/tribunal-full` before being marked complete.
 
 ## Guardrails
+
 Team Mode cannot bypass the Human Gate. If any subagent proposes a destructive action, the entire DAG is paused, and the Human Gate Negotiator is summoned.

package/.agent/workflows/tribunal-backend.md

@@ -8,9 +8,13 @@ required-skills:
   - nodejs-best-practices
   - api-patterns
 scripts-binding:
+  - .agent/scripts/backend_audit.js
   - .agent/scripts/security_scan.js
   - .agent/scripts/dependency_analyzer.js
   - .agent/scripts/schema_validator.js
+  - .agent/scripts/cross_agent_correlator.js
+  - .agent/scripts/validation_engine.js
+  - .agent/scripts/backend_report_generator.js
 ---
 
 # /tribunal-backend — Backend Code Audit
@@ -27,10 +31,17 @@ Before auditing backend routes or server logic, you MUST inspect:
 2. Dependencies & Environment (`package.json`, `.env.example`) → Check backend framework versions, secret key placeholders, and ORM schemas
 3. 28-Reviewer Parallel Gate → Execute logic-reviewer, security-auditor, dependency-analyzer, type-safety, resilience-reviewer, and schema-reviewer before approving diffs
 
-4. Required Skills → Before executing, load and follow procedural rules from:
-   - `backend-security-expert` (.agent/skills/backend-security-expert/SKILL.md): Server-side security, auth, JWT, ORM injection, RBAC
-   - `nodejs-best-practices` (.agent/skills/nodejs-best-practices/SKILL.md): Node.js patterns, async handling, and error management
-   - `api-patterns` (.agent/skills/api-patterns/SKILL.md): REST/GraphQL API design, versioning, and error contracts
+4. Required Skills → Before executing, run \`.agent/scripts/backend_audit.js\` to detect the backend stack (Python, FastAPI, Node.js, databases) and load the specific dynamically recommended skills from the script output.
+   - You MUST load every skill output by \`backend_audit.js\`.
+   - Examples of dynamically loaded skills include \`fastapi-pro\`, \`backend-postgresql\`, \`backend-architecture-auditor\`, etc.
+
+5. Backend Correlation & Validation Pipeline →
+   - Output all your findings across agents into Evidence-First JSON format.
+   - Save to files (e.g., `findings_sec.json`, `findings_db.json`).
+   - Run \`.agent/scripts/cross_agent_correlator.js findings_sec.json findings_db.json --out=correlated.json\`.
+   - Run \`.agent/scripts/validation_engine.js --in=correlated.json --out=validated.json\`.
+   - Run \`.agent/scripts/backend_report_generator.js --in=validated.json --out=backend_report.md\`.
+   - Present \`backend_report.md\` to the user as the final outcome.
 
 ---
 
@@ -46,13 +57,13 @@ Before auditing backend routes or server logic, you MUST inspect:
 
 ---
 
-## 6 Active Reviewers (All Run Simultaneously)
+## 8 Active Reviewers (All Run Simultaneously)
 
 ### precedence-reviewer → Checks local repo Case Law for past rejections
 
-logic-reviewer
+### logic-reviewer
 
-- Hallucinated Express/Hono/Fastify methods
+- Hallucinated Express/Hono/Fastify/FastAPI methods
 - Missing awaits on async operations
 - Unreachable code after return statements
 - Race conditions in sequential state mutations
@@ -143,6 +154,7 @@ const payload = jwt.verify(token, secret); // Correct
 | :--------------------------- | :------------------------------------------------ |
 | All checks pass              | → `/deploy` or merge code                         |
 | Reviewers reject with fixes  | → Apply fixes, then run `/tribunal-backend` again |
+| Architecture concerns raised | → `/plan` to propose a structural refactor        |
 | Performance concerns raised  | → `/tribunal-performance` for deep profiling      |
 | Need test coverage for logic | → `/test` to generate backend tests               |
 

package/.agent/workflows/tribunal-frontend.md

@@ -96,6 +96,12 @@ Before auditing React components or frontend UI logic, you MUST inspect:
 - Elements appearing from `scale(0)` instead of `0.95`
 - Non-interruptible motion or missing hover/active states
 
+### anti-slop-auditor (Wave 3)
+
+- Enforces the Purpose-Gate (requires explicit reason for gradients, glassmorphism, etc.)
+- Enforces the Liveliness Dials (Energy, Rhythm, Motion must be declared)
+- Rejects generic AI clichés, fake statistics, and card-in-card mud
+
 ---
 
 ## Verdict System

package/.agent/workflows/tribunal-ui.md

@@ -86,6 +86,11 @@ Before executing dedicated UI/UX audits or design-system reviews, you MUST inspe
 - **Focus:** Screenshot or DOM layout verification.
 - **Check:** Checks vertical overflow, layout shifts (CLS), alignment shifts, and contrast ratios.
 
+### 8. anti-slop-auditor (Wave 3)
+
+- **Focus:** Enforcing Purpose-Gates and Liveliness Dials.
+- **Check:** Rejects generic AI clichés and blocks Purpose-Gated techniques (gradients, glassmorphism) if a justification is missing.
+
 ---
 
 ## Verdict System

package/.agents/skills/12-principles-of-animation/SKILL.md

@@ -1,26 +1,51 @@
----
-name: 12-principles-of-animation
-description: "Use when Application of Disney's 12 Principles of Animation (Squash & Stretch, Anticipation, Staging, Follow Through, Slow In & Slow Out, Arc, Secondary Action, Timing, Exaggeration, Solid Drawing, Appeal) to modern web UI motion."
-version: 5.0.0
-last-updated: 2026-09-13
-skills:
-  - motion-engineering
-  - 60fps-animation
-  - accessible-animation
-tools: Read, Grep, Glob, Bash, Edit, Write
-scripts-binding:
-  - .agent/scripts/lint_runner.js
-  - .agent/scripts/verify_all.js
----
-
-# 12 Principles of Animation — Web UI Motion Theory
-
----
-
-## 🛠️ Technical Architecture & Reference Recipes
-
+---
+name: 12-principles-of-animation
+description: "Use when implementing, optimizing, and timing 60fps/120fps 12 principles of animation animations, transitions, gesture physics, and reduced-motion fallbacks."
+version: 6.0.0
+last-updated: 2026-09-29
+skills:
+  - motion-engineering
+  - 60fps-animation
+  - accessible-animation
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
+---
+
+# 12 Principles of Animation — Web UI Motion Theory
+
+## Mandatory Pre-Flight Context Inspection
+Before reading, generating, or refactoring code in the `12-principles-of-animation` domain, inspect these 5 critical parameters:
+1. **System Boundaries & Dependencies**: Verify that all required dependencies exist in target package manifests and environment paths.
+2. **Runtime Context & Platform Invariants**: Confirm target platform constraints (Node.js, Browser, Mobile OS, Edge runtime) before applying APIs.
+3. **Execution Guardrails**: Identify potential side-effects, state mutations, and unhandled asynchronous exceptions.
+4. **Validation & Type Contracts**: Validate input data schemas and strict type constraints across all module interfaces.
+5. **Observability & Proof of Execution**: Ensure execution produces tangible verification signals (terminal output, tests, metrics).
+
+
+## Activation Boundaries
+- **Activate when:** Use when implementing, optimizing, and timing 60fps/120fps 12 principles of animation animations, transitions, gesture physics, and reduced-motion fallbacks.
+- **DO NOT activate when:** The task falls outside the `12-principles-of-animation` domain or is managed by a different dedicated specialist agent.
+
+
+## 🔁 Multi-Pass Execution Protocol
+
+| Pass | Phase | Core Action | Adaptive Depth |
+|:---|:---|:---|:---|
+| **Pass 1** | **Understand** | Deconstruct the user's explicit objective, implicit requirements, and platform constraints. | Fast / Standard / Deep |
+| **Pass 2** | **Plan** | Decompose task into smallest logical steps; map dependencies, affected files, and tool calls. | Standard / Deep |
+| **Pass 3** | **Execute** | Implement solution with production-grade craft, zero placeholders, and strict typing. | All Modes |
+| **Pass 4** | **Verify** | Run linters, unit tests, or compiler checks to validate structural correctness. | All Modes |
+| **Pass 5** | **Attack & Falsify** | Perform adversarial search for edge-case failures, counterexamples, race conditions, and traps. | Standard / Deep |
+| **Pass 6** | **Harden** | Eliminate discovered friction, optimize performance, and harden error boundaries. | Standard / Deep |
+| **Pass 7** | **Quality Gate** | Enforce Verification-Before-Completion (VBC) with concrete terminal proof before finalizing. | All Modes |
+
+
 ---
 
+## 🛠️ Technical Architecture & Reference Recipes
+
 ---
 
 ## The 6 Essential Web Principles
@@ -48,4 +73,49 @@ scripts-binding:
 
 ### 6. Follow Through & Overlapping Action
 
-- Secondary elements (e.g. badge text inside a sliding card) lag slightly behind the main container (stagger delay 30ms - 50ms), creating organic physical realism.
+- Secondary elements (e.g. badge text inside a sliding card) lag slightly behind the main container (stagger delay 30ms - 50ms), creating organic physical realism.
+
+## 🚨 Edge-Case & Failure Mode Matrix
+
+| Scenario | Risk | Production Mitigation |
+|:---|:---|:---|
+| **Empty or Null Inputs** | Unhandled exception or unexpected rendering collapse | Enforce fallback guards, optional chaining, and explicit empty state handlers |
+| **Network Timeout / Latency** | Hanging operations or duplicate side-effects | Implement bounded abort controllers, exponential backoff, and idempotency keys |
+| **Concurrency / Race Conditions** | Stale state overwrite or inconsistent data mutations | Use atomic transactions, mutex locking, or cancel-on-resubmit controls |
+| **Invalid Schema / Malformed Payload** | Downstream runtime errors or security injection | Validate boundary payloads with Zod/Pydantic schemas prior to execution |
+| **Resource / Memory Saturation** | OOM errors, frame drops, or memory leaks | Clean up listeners, cancel active timers, and enforce pagination/virtualization |
+
+
+## 🤖 LLM-Specific Traps Table
+
+| Anti-Pattern | What AI Commonly Does Wrong | What Is Actually Correct |
+|:---|:---|:---|
+| **The Instant Pop Trap** | Conditionally unmounting elements without animated interpolation | Use AnimatePresence or coordinate morphs with continuous geometry |
+| **Layout Thrashing** | Animating width, height, top, or left inside animation loops | Animate composite-only transform (translate3d, scale) and opacity |
+| **Sluggish Duration** | Setting micro-interaction transitions to 600ms+ causing interface lag | Cap interactive feedback at 160ms–240ms with snappy ease-out curves |
+
+
+## 🏛️ Tribunal Verification & Guardrails
+
+**Active Reviewers:** `frontend-reviewer` · `motion-reviewer` · `ui-ux-auditor`
+**Slash Command:** `/review` or `/tribunal-full`
+
+### 🔬 Evidence Standard (Tri-State Verification)
+Every finding, audit statement, or completion claim must classify its factual certainty:
+- **`[OBSERVED]`**: Directly confirmed in the codebase or verified via executed terminal command.
+- **`[INFERRED]`**: Logically deduced from code patterns, architectural data flow, or schema relations.
+- **`[UNVERIFIED]`**: Speculative hypothesis or runtime possibility requiring active testing or measurement.
+
+### ✅ Pre-Flight Self-Audit Checklist
+```
+✅ Does animation maintain 60fps/120fps using transform (translate3d, scale) and opacity?
+✅ Is optical mass conserved across state interpolations without volume collapse?
+✅ Is duration capped within micro-interaction budgets (150ms–280ms)?
+✅ Is prefers-reduced-motion respected with graceful instant fallbacks?
+✅ Did I prevent layout thrashing and continuous geometry mutations?
+```
+
+### 🛑 Verification-Before-Completion (VBC) Protocol
+**CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
+- ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
+- ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing test suites, compiler success, or equivalent operational proof) that your output works as intended.

package/.agents/skills/60fps-animation/SKILL.md

@@ -1,30 +1,51 @@
----
-name: 60fps-animation
-description: "Use when Web animation performance guidance for avoiding layout thrashing, achieving 60/120fps motion, and using GPU compositor-friendly properties (transform, opacity)."
-version: 5.0.0
-last-updated: 2026-09-13
-skills:
-  - motion-engineering
-  - accessible-animation
-  - fixing-motion-performance
-tools: Read, Grep, Glob, Bash, Edit, Write
-scripts-binding:
-  - .agent/scripts/lint_runner.js
-  - .agent/scripts/verify_all.js
----
-
-# 60fps Animation — GPU Compositor & High-Performance Motion
-
----
-
-## 🛠️ Technical Architecture & Reference Recipes
-
----
-
-## 🛠️ Technical Architecture & Reference Recipes
-
+---
+name: 60fps-animation
+description: "Use when implementing, optimizing, and timing 60fps/120fps 60fps animation animations, transitions, gesture physics, and reduced-motion fallbacks."
+version: 6.0.0
+last-updated: 2026-09-29
+skills:
+  - motion-engineering
+  - accessible-animation
+  - fixing-motion-performance
+tools: Read, Grep, Glob, Bash, Edit, Write
+scripts-binding:
+  - .agent/scripts/lint_runner.js
+  - .agent/scripts/verify_all.js
+---
+
+# 60fps Animation — GPU Compositor & High-Performance Motion
+
+## Mandatory Pre-Flight Context Inspection
+Before reading, generating, or refactoring code in the `60fps-animation` domain, inspect these 5 critical parameters:
+1. **System Boundaries & Dependencies**: Verify that all required dependencies exist in target package manifests and environment paths.
+2. **Runtime Context & Platform Invariants**: Confirm target platform constraints (Node.js, Browser, Mobile OS, Edge runtime) before applying APIs.
+3. **Execution Guardrails**: Identify potential side-effects, state mutations, and unhandled asynchronous exceptions.
+4. **Validation & Type Contracts**: Validate input data schemas and strict type constraints across all module interfaces.
+5. **Observability & Proof of Execution**: Ensure execution produces tangible verification signals (terminal output, tests, metrics).
+
+
+## Activation Boundaries
+- **Activate when:** Use when implementing, optimizing, and timing 60fps/120fps 60fps animation animations, transitions, gesture physics, and reduced-motion fallbacks.
+- **DO NOT activate when:** The task falls outside the `60fps-animation` domain or is managed by a different dedicated specialist agent.
+
+
+## 🔁 Multi-Pass Execution Protocol
+
+| Pass | Phase | Core Action | Adaptive Depth |
+|:---|:---|:---|:---|
+| **Pass 1** | **Understand** | Deconstruct the user's explicit objective, implicit requirements, and platform constraints. | Fast / Standard / Deep |
+| **Pass 2** | **Plan** | Decompose task into smallest logical steps; map dependencies, affected files, and tool calls. | Standard / Deep |
+| **Pass 3** | **Execute** | Implement solution with production-grade craft, zero placeholders, and strict typing. | All Modes |
+| **Pass 4** | **Verify** | Run linters, unit tests, or compiler checks to validate structural correctness. | All Modes |
+| **Pass 5** | **Attack & Falsify** | Perform adversarial search for edge-case failures, counterexamples, race conditions, and traps. | Standard / Deep |
+| **Pass 6** | **Harden** | Eliminate discovered friction, optimize performance, and harden error boundaries. | Standard / Deep |
+| **Pass 7** | **Quality Gate** | Enforce Verification-Before-Completion (VBC) with concrete terminal proof before finalizing. | All Modes |
+
+
 ---
 
+## 🛠️ Technical Architecture & Reference Recipes
+
 ## 2026 Motion Performance & GPU Invariants
 
 1. **CSS `@starting-style` Native Transitions**:
@@ -88,4 +109,40 @@ Instead of animating `width: 100px` to `200px`:
 
 ### 4. Layout Thrashing Prevention in JS
 
-- Never interleave DOM reads (`element.offsetHeight`) with DOM writes (`element.style.height = ...`) inside requestAnimationFrame or scroll handlers. Batch all reads first, then perform all writes.
+- Never interleave DOM reads (`element.offsetHeight`) with DOM writes (`element.style.height = ...`) inside requestAnimationFrame or scroll handlers. Batch all reads first, then perform all writes.
+
+## 🚨 Edge-Case & Failure Mode Matrix
+
+| Scenario | Risk | Production Mitigation |
+|:---|:---|:---|
+| **Empty or Null Inputs** | Unhandled exception or unexpected rendering collapse | Enforce fallback guards, optional chaining, and explicit empty state handlers |
+| **Network Timeout / Latency** | Hanging operations or duplicate side-effects | Implement bounded abort controllers, exponential backoff, and idempotency keys |
+| **Concurrency / Race Conditions** | Stale state overwrite or inconsistent data mutations | Use atomic transactions, mutex locking, or cancel-on-resubmit controls |
+| **Invalid Schema / Malformed Payload** | Downstream runtime errors or security injection | Validate boundary payloads with Zod/Pydantic schemas prior to execution |
+| **Resource / Memory Saturation** | OOM errors, frame drops, or memory leaks | Clean up listeners, cancel active timers, and enforce pagination/virtualization |
+
+
+## 🏛️ Tribunal Verification & Guardrails
+
+**Active Reviewers:** `frontend-reviewer` · `motion-reviewer` · `ui-ux-auditor`
+**Slash Command:** `/review` or `/tribunal-full`
+
+### 🔬 Evidence Standard (Tri-State Verification)
+Every finding, audit statement, or completion claim must classify its factual certainty:
+- **`[OBSERVED]`**: Directly confirmed in the codebase or verified via executed terminal command.
+- **`[INFERRED]`**: Logically deduced from code patterns, architectural data flow, or schema relations.
+- **`[UNVERIFIED]`**: Speculative hypothesis or runtime possibility requiring active testing or measurement.
+
+### ✅ Pre-Flight Self-Audit Checklist
+```
+✅ Does animation maintain 60fps/120fps using transform (translate3d, scale) and opacity?
+✅ Is optical mass conserved across state interpolations without volume collapse?
+✅ Is duration capped within micro-interaction budgets (150ms–280ms)?
+✅ Is prefers-reduced-motion respected with graceful instant fallbacks?
+✅ Did I prevent layout thrashing and continuous geometry mutations?
+```
+
+### 🛑 Verification-Before-Completion (VBC) Protocol
+**CRITICAL:** You must follow a strict "evidence-based closeout" state machine.
+- ❌ **Forbidden:** Declaring a task complete because the output "looks correct."
+- ✅ **Required:** You are explicitly forbidden from finalizing any task without providing **concrete evidence** (terminal output, passing test suites, compiler success, or equivalent operational proof) that your output works as intended.