wicked-garden 12.29.1 → 12.31.0

package/.claude-plugin/components.json

@@ -2,8 +2,8 @@
   "_comment": "Issue #328: Component declarations for wicked-garden plugin. Claude Code plugin.json does not yet support inline component declarations beyond path overrides. This manifest documents all components for tooling, validation, and future schema support. When plugin.json gains a 'components' field, merge this data into plugin.json. The plugin is skills-only: former commands/ became actions of consolidated per-domain skills, and former agents/ became standalone context:fork worker skills (enumerated under fork_skills). Regenerate derived blocks with scripts/ci/sync_components.py.",
   "domains": ["agentic", "crew", "data", "engineering", "jam", "mem", "persona", "platform", "product", "qe", "search", "smaht"],
   "summary": {
-    "skills": 99,
-    "fork_skills": 38,
+    "skills": 141,
+    "fork_skills": 78,
     "hooks": 13,
     "specialists": 7
   },
@@ -35,7 +35,9 @@
     "jam": ["jam"],
     "jam-brainstorm-facilitator": ["jam-brainstorm-facilitator"],
     "jam-council": ["jam-council"],
-    "multi-model": ["multi-model"],
+    "mem": ["mem"],
+    "mem-capture": ["mem-capture"],
+    "mem-ingest": ["mem-ingest"],
     "persona": ["persona"],
     "persona-agent": ["persona-agent"],
     "platform": ["audit", "compliance", "errors", "gate-benchmark-rebaseline", "gh-cli", "github-actions", "gitlab-ci", "glab-cli", "health", "observability", "peer-health", "platform", "prereq-doctor"],
@@ -49,7 +51,47 @@
     "product-ux-designer": ["product-ux-designer"],
     "product-value-strategist": ["product-value-strategist"],
     "prove": ["prove"],
+    "qe": ["qe"],
+    "qe-a11y-test-engineer": ["qe-a11y-test-engineer"],
+    "qe-acceptance-test-executor": ["qe-acceptance-test-executor"],
+    "qe-acceptance-test-reviewer": ["qe-acceptance-test-reviewer"],
+    "qe-acceptance-test-writer": ["qe-acceptance-test-writer"],
+    "qe-ai-feature-test-engineer": ["qe-ai-feature-test-engineer"],
+    "qe-chaos-test-engineer": ["qe-chaos-test-engineer"],
+    "qe-code-analyzer": ["qe-code-analyzer"],
+    "qe-compliance-test-engineer": ["qe-compliance-test-engineer"],
+    "qe-contract-testing-engineer": ["qe-contract-testing-engineer"],
+    "qe-coverage-archaeologist": ["qe-coverage-archaeologist"],
+    "qe-data-quality-tester": ["qe-data-quality-tester"],
+    "qe-e2e-orchestrator": ["qe-e2e-orchestrator"],
+    "qe-exploratory-tester": ["qe-exploratory-tester"],
+    "qe-flaky-test-hunter": ["qe-flaky-test-hunter"],
+    "qe-fuzz-property-engineer": ["qe-fuzz-property-engineer"],
+    "qe-iac-test-engineer": ["qe-iac-test-engineer"],
+    "qe-incident-to-scenario-synthesizer": ["qe-incident-to-scenario-synthesizer"],
+    "qe-integration-test-engineer": ["qe-integration-test-engineer"],
+    "qe-load-performance-engineer": ["qe-load-performance-engineer"],
+    "qe-localization-test-engineer": ["qe-localization-test-engineer"],
+    "qe-mutation-test-engineer": ["qe-mutation-test-engineer"],
+    "qe-observability-test-engineer": ["qe-observability-test-engineer"],
+    "qe-production-quality-engineer": ["qe-production-quality-engineer"],
+    "qe-release-readiness-engineer": ["qe-release-readiness-engineer"],
+    "qe-requirements-quality-analyst": ["qe-requirements-quality-analyst"],
+    "qe-risk-assessor": ["qe-risk-assessor"],
+    "qe-scenario-executor": ["qe-scenario-executor"],
+    "qe-security-test-engineer": ["qe-security-test-engineer"],
     "qe-semantic-reviewer": ["qe-semantic-reviewer"],
+    "qe-snapshot-hygiene-auditor": ["qe-snapshot-hygiene-auditor"],
+    "qe-test-automation-engineer": ["qe-test-automation-engineer"],
+    "qe-test-code-quality-auditor": ["qe-test-code-quality-auditor"],
+    "qe-test-data-manager": ["qe-test-data-manager"],
+    "qe-test-designer": ["qe-test-designer"],
+    "qe-test-impact-analyzer": ["qe-test-impact-analyzer"],
+    "qe-test-oracle": ["qe-test-oracle"],
+    "qe-test-strategist": ["qe-test-strategist"],
+    "qe-testability-reviewer": ["qe-testability-reviewer"],
+    "qe-ui-component-test-engineer": ["qe-ui-component-test-engineer"],
+    "qe-visual-regression-engineer": ["qe-visual-regression-engineer"],
     "runtime-exec": ["runtime-exec"],
     "search": ["codebase-narrator", "search"],
     "smaht": ["discovery", "intent", "propose-skills", "smaht"],
@@ -58,7 +100,7 @@
     "workflow": ["workflow"],
     "worktrees": ["worktrees"]
   },
-  "fork_skills": ["wicked-garden-agentic-architect", "wicked-garden-agentic-performance-analyst", "wicked-garden-agentic-safety-reviewer", "wicked-garden-archetype", "wicked-garden-classify", "wicked-garden-crew-implementer", "wicked-garden-crew-researcher", "wicked-garden-crew-reviewer", "wicked-garden-data-engineer", "wicked-garden-domain-coverage", "wicked-garden-domain-extractor", "wicked-garden-domain-modeler", "wicked-garden-engineering-api-documentarian", "wicked-garden-engineering-conformance-reviewer", "wicked-garden-engineering-debugging", "wicked-garden-engineering-migration-engineer", "wicked-garden-engineering-solution-architect", "wicked-garden-ground", "wicked-garden-integration-discovery", "wicked-garden-jam-brainstorm-facilitator", "wicked-garden-jam-council", "wicked-garden-multi-model", "wicked-garden-persona-agent", "wicked-garden-platform-compliance-officer", "wicked-garden-platform-privacy-expert", "wicked-garden-platform-security-engineer", "wicked-garden-product-a11y-expert", "wicked-garden-product-requirements-analyst", "wicked-garden-product-ui-reviewer", "wicked-garden-product-ux-designer", "wicked-garden-product-value-strategist", "wicked-garden-qe-semantic-reviewer", "wicked-garden-runtime-exec", "wicked-garden-smaht", "wicked-garden-swarm", "wicked-garden-wickedizer", "wicked-garden-workflow", "wicked-garden-worktrees"],
+  "fork_skills": ["wicked-garden-agentic-architect", "wicked-garden-agentic-performance-analyst", "wicked-garden-agentic-safety-reviewer", "wicked-garden-archetype", "wicked-garden-classify", "wicked-garden-crew-implementer", "wicked-garden-crew-researcher", "wicked-garden-crew-reviewer", "wicked-garden-data-engineer", "wicked-garden-domain-coverage", "wicked-garden-domain-extractor", "wicked-garden-domain-modeler", "wicked-garden-engineering-api-documentarian", "wicked-garden-engineering-conformance-reviewer", "wicked-garden-engineering-debugging", "wicked-garden-engineering-migration-engineer", "wicked-garden-engineering-solution-architect", "wicked-garden-ground", "wicked-garden-integration-discovery", "wicked-garden-jam-brainstorm-facilitator", "wicked-garden-jam-council", "wicked-garden-mem-capture", "wicked-garden-mem-ingest", "wicked-garden-persona-agent", "wicked-garden-platform-compliance-officer", "wicked-garden-platform-privacy-expert", "wicked-garden-platform-security-engineer", "wicked-garden-product-a11y-expert", "wicked-garden-product-requirements-analyst", "wicked-garden-product-ui-reviewer", "wicked-garden-product-ux-designer", "wicked-garden-product-value-strategist", "wicked-garden-qe-a11y-test-engineer", "wicked-garden-qe-acceptance-test-executor", "wicked-garden-qe-acceptance-test-reviewer", "wicked-garden-qe-acceptance-test-writer", "wicked-garden-qe-ai-feature-test-engineer", "wicked-garden-qe-chaos-test-engineer", "wicked-garden-qe-code-analyzer", "wicked-garden-qe-compliance-test-engineer", "wicked-garden-qe-contract-testing-engineer", "wicked-garden-qe-coverage-archaeologist", "wicked-garden-qe-data-quality-tester", "wicked-garden-qe-e2e-orchestrator", "wicked-garden-qe-exploratory-tester", "wicked-garden-qe-flaky-test-hunter", "wicked-garden-qe-fuzz-property-engineer", "wicked-garden-qe-iac-test-engineer", "wicked-garden-qe-incident-to-scenario-synthesizer", "wicked-garden-qe-integration-test-engineer", "wicked-garden-qe-load-performance-engineer", "wicked-garden-qe-localization-test-engineer", "wicked-garden-qe-mutation-test-engineer", "wicked-garden-qe-observability-test-engineer", "wicked-garden-qe-production-quality-engineer", "wicked-garden-qe-release-readiness-engineer", "wicked-garden-qe-requirements-quality-analyst", "wicked-garden-qe-risk-assessor", "wicked-garden-qe-scenario-executor", "wicked-garden-qe-security-test-engineer", "wicked-garden-qe-semantic-reviewer", "wicked-garden-qe-snapshot-hygiene-auditor", "wicked-garden-qe-test-automation-engineer", "wicked-garden-qe-test-code-quality-auditor", "wicked-garden-qe-test-data-manager", "wicked-garden-qe-test-designer", "wicked-garden-qe-test-impact-analyzer", "wicked-garden-qe-test-oracle", "wicked-garden-qe-test-strategist", "wicked-garden-qe-testability-reviewer", "wicked-garden-qe-ui-component-test-engineer", "wicked-garden-qe-visual-regression-engineer", "wicked-garden-runtime-exec", "wicked-garden-smaht", "wicked-garden-swarm", "wicked-garden-wickedizer", "wicked-garden-workflow", "wicked-garden-worktrees"],
   "hooks": ["SessionStart", "UserPromptSubmit", "PreToolUse", "PostToolUse", "PostToolUseFailure", "TaskCompleted", "SubagentStart", "SubagentStop", "PermissionRequest", "Notification", "PreCompact", "Stop", "SessionEnd"],
   "specialists": [
     {

package/.claude-plugin/marketplace.json

@@ -7,9 +7,9 @@
     {
       "name": "wicked-garden",
       "source": "./",
-      "description": "Your coding agent already plans and swarms \u2014 Wicked Garden is the curated toolkit for what it can't: proof-not-claims gates, code links grep can't see, deterministic refactor, cross-session memory, real multi-model second opinions. Don't fight the harness; fill its gaps. The gate needs wicked-vault (auto-installed via wicked-testing) and re-derives through garden's built-in engine; testing/brain/bus are opt-in layers.",
-      "version": "12.29.1"
+      "description": "Your coding agent already plans and swarms \u2014 Wicked Garden is the curated toolkit for what it can't: proof-not-claims gates, code links grep can't see, deterministic refactor, cross-session memory, real multi-model second opinions. Don't fight the harness; fill its gaps. The gate needs wicked-vault (a self-contained infra peer, installed directly) and re-derives through garden's built-in engine; testing/brain/bus are opt-in layers.",
+      "version": "12.31.0"
     }
   ],
-  "version": "12.29.1"
+  "version": "12.31.0"
 }

package/.claude-plugin/plugin.json

@@ -1,9 +1,9 @@
 {
   "name": "wicked-garden",
-  "version": "12.29.1",
-  "description": "Your coding agent's harness already plans and swarms; Wicked Garden is the curated toolkit for what it can't do alone. Proof, not claims \u2014 gates re-derive 'done' through the internal loom engine (fail-closed, independently attested via wicked-vault), so a self-asserted pass can't lie its way green. Relationships grep can't see \u2014 codegraph + injected bus/dispatch/capability edges power blast-radius & lineage. Plus deterministic multi-file refactor (wicked-patch), cross-session memory (wicked-brain), real multi-model second opinions (jam:council), portable expertise as on-demand skill-refs, and evidence-gated testing (wicked-testing). It reads the shape of your work to apply the right rigor \u2014 steering, not a pipeline \u2014 then gets out of the way. The compiler stamps a self-contained evidence gate into any repo that runs with no wicked-garden installed. Don't fight the harness; fill its gaps. The evidence gate requires wicked-vault (installed automatically via wicked-testing); wicked-testing, wicked-brain, and wicked-bus are opt-in layers \u2014 install what you'll use, the toolkit works without the rest.",
-  "wicked_testing_version": "^0.8.0",
-  "wicked_vault_version": "^0.4.0",
+  "version": "12.31.0",
+  "description": "Your coding agent's harness already plans and swarms; Wicked Garden is the curated toolkit for what it can't do alone. Proof, not claims — gates re-derive 'done' through the internal loom engine (fail-closed, independently attested via wicked-vault), so a self-asserted pass can't lie its way green. Relationships grep can't see — the wicked-estate code graph + injected bus/dispatch/capability/archetype edges power blast-radius & lineage. Plus deterministic multi-file refactor (wicked-patch), cross-session memory + knowledge (the mem domain over wicked-estate), real multi-model second opinions (jam:council), portable expertise as on-demand skill-refs, and evidence-gated testing (the in-catalog qe domain). It reads the shape of your work to apply the right rigor — steering, not a pipeline — then gets out of the way. The compiler stamps a self-contained evidence gate into any repo that runs with no wicked-garden installed. Don't fight the harness; fill its gaps. The evidence gate requires wicked-vault, a self-contained infra peer wicked-garden installs directly; wicked-bus is an opt-in layer — install what you'll use, the toolkit works without the rest.",
+  "wicked_vault_version": "^0.5.0",
+  "wicked_ledger_version": "^0.2.0",
   "wicked_brain_version": "^0.18.0",
   "wicked_bus_version": "^2.0.0",
   "author": {

package/.claude-plugin/specialist.json

@@ -23,7 +23,7 @@
     {
       "name": "qe",
       "role": "quality-engineering",
-      "description": "Quality Engineering specialist powered by wicked-testing peer plugin. Crew dispatches QE agents by their wicked-testing:* subagent_type names. Covers test strategy, scenario generation, testability review, semantic alignment, risk assessment, test automation, and shift-left quality practices. Requires wicked-testing ^0.2 installed.",
+      "description": "Quality Engineering specialist — in-catalog qe domain (Phase 6b). Crew dispatches QE workers by their wicked-garden-qe-* skill names (router: wicked-garden-qe). Covers test strategy, scenario generation, testability review, semantic alignment, risk assessment, test automation, evidence-gated acceptance testing, and shift-left quality practices.",
       "enhances": ["clarify", "design", "qe", "build", "review", "operate", "*"]
     },
     {

package/.product/DES-001-technical-design.md

@@ -182,9 +182,10 @@ wicked-patch is the deterministic multi-file transformation engine. It is expose
 
 ```
 Developer invokes patch action: /wicked-garden-engineering patch-plan OldName
-  → engineering-patch skill reads codegraph from wicked-brain:
-      .codegraph/codegraph.db (structural graph, tree-sitter)
-      + injected edges (bus producer→consumer, dispatch, capability)
+  → engineering-patch skill reads the wicked-estate graph (ADR 0005):
+      built by `wicked-estate index` (75-language tree-sitter, in-binary),
+      adapted to the patch schema via estate_db.py (.codegraph/estate.db)
+      + injected edges (bus producer→consumer, dispatch, capability, archetype)
   → computes full affected file set:
       direct references (grep-visible)
       + injected-edge references (not grep-visible)
@@ -203,7 +204,7 @@ Developer invokes apply: /wicked-garden-engineering apply <patch-file>
 
 New language support: `/wicked-garden-engineering new-generator` creates a generator for an additional language. Generators implement a documented interface; adding one requires no change to the patch core.
 
-wicked-patch and wicked-brain share the same codegraph database (`.codegraph/codegraph.db`). The `wicked-garden-search index` action refreshes both layers — brain (semantic) and codegraph (structural).
+wicked-patch and the `wicked-garden-search` actions read the same wicked-estate graph. The `wicked-garden-search index` action (`wicked-estate index <path>`) refreshes the static graph and re-applies the injected-edge rules in one pass (ADR 0005).
 
 ---
 
@@ -254,9 +255,9 @@ Per-session ephemeral shared state. Not persisted across process restarts. Used
 
 wicked-bus integration. Emits events in 4-segment format (`wicked.<domain>.<noun>.<past-tense-verb>`). The bus provides at-least-once delivery, append-only event records, and FTS5 search via the wicked-bus backing store.
 
-### codegraph.db
+### estate graph
 
-Structural code graph built and maintained by wicked-brain at `.codegraph/codegraph.db`. Consumed by wicked-patch. The `search:index` action refreshes it.
+Structural code graph built and maintained by wicked-estate (`wicked-estate index <path>`; DB at `.wicked-estate/graph.db` by default, patch adapter DB at `.codegraph/estate.db`). Includes garden's injected archetype edges via `.wicked-estate-extractors/archetype.toml`. Consumed by wicked-patch and the search skill's actions. The `search:index` action refreshes it (ADR 0005).
 
 ---
 
@@ -304,6 +305,6 @@ Skills check for daemon availability before dispatching to it. If the daemon is
 | wicked-testing | `scripts/qe/` (acceptance pipeline) | Installed peer; invoked by acceptance skills |
 | wicked-brain | `scripts/crew/`, search/smaht skills | Brain server on port 4243; auto-starts on skill invocation |
 | wicked-bus | `scripts/_bus.py` | Installed peer; event emit/consume |
-| codegraph | `.codegraph/codegraph.db` | Built by wicked-brain; consumed by patch skill |
+| wicked-estate | `wicked-estate index` / estate MCP tools | `WICKED_ESTATE_BIN` env → PATH → `~/.local/bin`; consumed by search + patch skills |
 
 All peers degrade gracefully on absence — except the evidence gate, which fails closed when vault or loom is unreachable. A transient peer outage never invents a pass.

package/.product/RAID.md

@@ -16,7 +16,7 @@ review-required: true
 |----|------|-----------|--------|------------|
 | RISK-001 | Archetype detection accuracy degrades for ambiguous or very short prompts | Medium | Medium | Detector returns confidence score; low-confidence prompts prompt for clarification. Multi-archetype output handles mixed-intent work. |
 | RISK-002 | wicked-loom/wicked-vault peer absent → evidence gate fails closed | High (setup) | Low (expected) | Failing closed is the intended behavior. `/wg-check` validates peers at setup; setup skill guides installation. |
-| RISK-003 | codegraph not built → blast-radius/lineage/wicked-patch unavailable | High (optional) | Medium | codegraph is explicitly opt-in; skills degrade gracefully to text-search when graph is absent. |
+| RISK-003 | wicked-estate graph not built → blast-radius/lineage/wicked-patch unavailable | High (optional) | Medium | wicked-estate is explicitly opt-in; skills degrade gracefully to text-search when the graph is absent (and flag that injected relationships are missing). |
 | RISK-004 | Plugin not loaded in `claude -p` non-interactive mode | Medium | High | Documented mitigation: user must add `--plugin-dir` via clis.toml override (garden#994 resolution). Long-term fix: persistent worker sessions (core#13). |
 | RISK-005 | Council seat (Antigravity/Codex) unavailable or returns garbage | Medium | Low | Council aggregation tolerates partial failures; the skill surfaces which seats failed. |
 | RISK-006 | Hook scripts fail on Windows without correct Python fallback | Low | High | All scripts use cross-platform patterns (tempfile.gettempdir, python fallback chain). CI must include Windows runner. |
@@ -30,7 +30,7 @@ review-required: true
 |----|-----------|
 | ASS-001 | The host harness (Claude Code, Codex, Cursor, …) handles all planning, parallelism, and LLM calls. wicked-garden does not re-implement harness capabilities. |
 | ASS-002 | Users install the required peers (`wicked-testing`/`wicked-vault`, `wicked-loom`) before using the evidence gate. The setup skill validates this. |
-| ASS-003 | The codegraph (`.codegraph/codegraph.db`) is built and up-to-date when blast-radius/lineage/wicked-patch are used. |
+| ASS-003 | The wicked-estate graph (`wicked-estate index <path>`) is built and up-to-date when blast-radius/lineage/wicked-patch are used. |
 | ASS-004 | Harness plugins are loaded in interactive mode; non-interactive (`claude -p`) mode requires explicit plugin-dir configuration. |
 | ASS-005 | The `WICKED_VAULT_ACTOR` environment variable is set to a meaningful, stable actor identity for hard-gate evidence recording (not OS `$USER`). |
 | ASS-006 | wicked-bus is optional; garden emits events fail-open when bus is unavailable. |
@@ -55,8 +55,8 @@ review-required: true
 | wicked-vault ≥ 0.4.0 | Runtime | Yes (for evidence gate) | Evidence backend. `0.4.0` introduced fail-closed `attest` on weak identity. |
 | wicked-loom | Runtime | Yes (for evidence gate) | Gate/resolve engine. Resolved via `WICKED_LOOM_BIN` → config → PATH → `npx`. |
 | wicked-testing | Runtime | Yes (for acceptance) | The acceptance pipeline is the standard gate mechanism. |
-| wicked-brain | Runtime | Optional | Cross-session memory + codegraph. Required for blast-radius, lineage, wicked-patch. |
+| wicked-brain | Runtime | Optional | Cross-session memory + semantic search. |
 | wicked-bus | Runtime | Optional | Event audit trail. Garden emits events fail-open without it. |
-| codegraph (`@colbymchenry/codegraph`) | Runtime | Optional | Static graph builder. Powers blast-radius/lineage/wicked-patch. |
+| wicked-estate | Runtime | Optional | Code-graph owner (ADR 0005): `wicked-estate index` + MCP tools. Powers blast-radius/lineage/hotspots/wicked-patch. Resolved via `WICKED_ESTATE_BIN` → PATH → `~/.local/bin`. |
 | Python ≥ 3.9 | Runtime | Yes | Required for all hook scripts and CLI tools. |
 | node.js ≥ 18 | Runtime | Yes | Required for npm peer installs and wicked-vault/loom. |

package/.product/REQ-001-application-overview.md

@@ -15,7 +15,7 @@ review-required: true
 wicked-garden is a Claude Code plugin (v12.28.1) that fills the gaps modern coding-agent harnesses cannot close alone. The premise is direct: harnesses — Claude Code, Codex, Cursor, Aider, OpenCode, Zed/ACP, and others — already plan, parallelize, and execute well. wicked-garden does not compete with that; it adds only what a planner-executor genuinely cannot do on its own:
 
 - **Evidence-gated done** — re-derives "done" from recorded evidence via the internal loom engine and wicked-vault; a self-asserted "tests pass" cannot lie its way green.
-- **Relationships grep cannot see** — codegraph + injected event-bus/dispatch/capability edges power blast-radius and lineage analysis.
+- **Relationships grep cannot see** — the wicked-estate code graph + injected event-bus/dispatch/capability/archetype edges power blast-radius and lineage analysis (ADR 0005).
 - **Deterministic multi-file refactor** — wicked-patch applies graph-driven renames and field additions across an entire codebase without leaving silent half-applied states.
 - **Cross-session memory** — wicked-brain persists decisions, patterns, and gotchas across sessions; knowledge that only lives in chat history does not exist.
 - **Real multi-model second opinions** — the jam:council skill convenes external LLM CLIs (Claude Code, Antigravity, Codex, local models) for independent evaluation; it is not the model talking to itself.
@@ -86,7 +86,7 @@ The plugin installs via `/plugin install wicked-garden` into any Claude Code ses
 
 1. A developer needs to rename a domain type across a large codebase — source files, tests, migration files, configuration, and documentation.
 2. They invoke the patch skill: `/wicked-garden-engineering rename OldName NewName`.
-3. The `wicked-garden-engineering-patch` nested skill reads the codegraph from wicked-brain (`.codegraph/codegraph.db`), identifies all nodes referencing `OldName`, and computes the full set of affected files including injected edges (bus producer→consumer, dispatch links) that grep cannot see.
+3. The `wicked-garden-engineering-patch` nested skill reads the wicked-estate graph (built by `wicked-estate index`, adapted via `scripts/engineering/patch/estate_db.py`), identifies all nodes referencing `OldName`, and computes the full set of affected files including injected edges (bus producer→consumer, dispatch links) that grep cannot see.
 4. The skill shows the patch plan (files affected, kinds of change, risk surface). The developer approves or scopes the change.
 5. On approval, the patch applies deterministically using the language-specific generator for each file type. Generators exist out of the box for Python, TypeScript, Java, Go, SQL, Rust, Kotlin, C#, PHP, and Ruby. A `new-generator` action lets contributors add additional languages.
 6. The result is a complete, consistent rename across every file that references the symbol — including the relationships grep cannot see.

package/.product/REQ-002-technology-constraints.md

@@ -42,10 +42,10 @@ Three additional peers are opt-in:
 | Peer | npm Package | Required Version | Role |
 |------|-------------|-----------------|------|
 | wicked-testing | `wicked-testing` | `^0.8.0` | Acceptance testing gate; also installs wicked-vault as a transitive dependency |
-| wicked-brain | `wicked-brain` | `^0.18.0` | Cross-session memory, code graph, semantic search |
+| wicked-brain | `wicked-brain` | `^0.18.0` | Cross-session memory, semantic search (the code graph moved to wicked-estate, ADR 0005) |
 | wicked-bus | `wicked-bus` | `^2.0.0` | Event audit trail, append-only event store, FTS5 search |
 
-wicked-understanding (repo playbooks from HEAD) and codegraph (structural code intelligence) are additional optional integrations.
+wicked-understanding (repo playbooks from HEAD) and wicked-estate (structural code intelligence — the code graph, ADR 0005) are additional optional integrations.
 
 ---
 
@@ -57,7 +57,7 @@ wicked-understanding (repo playbooks from HEAD) and codegraph (structural code i
 
 **SessionState** (`scripts/_session.py`) — per-session ephemeral shared state. Does not persist across process restarts.
 
-**codegraph.db** — wicked-brain builds and maintains this structural code graph at `.codegraph/codegraph.db`. wicked-patch consumes it for multi-file refactor operations.
+**estate graph** — wicked-estate builds and maintains the structural code graph (`wicked-estate index <path>`, DB at `.wicked-estate/graph.db` by default; the patch adapter materializes `.codegraph/estate.db`). wicked-patch consumes it for multi-file refactor operations (ADR 0005).
 
 ---
 

package/.product/REQ-003-domain-model.md

@@ -184,7 +184,7 @@ Compiler
   → emitted gate resolves wicked-vault via npx (no wicked-garden runtime required)
 
 wicked-patch
-  → reads codegraph.db (wicked-brain structural graph + injected edges)
+  → reads the wicked-estate graph (structural graph + injected edges, ADR 0005)
   → computes affected file set (including injected edges grep cannot see)
   → applies language-specific generator per file
   → produces deterministic multi-file change

package/.product/REQ-005-dod-criteria.md

@@ -1,8 +1,8 @@
 ---
 name: REQ-005-dod-criteria
 title: wicked-garden — Definition of Done Criteria
-status: partially-verified
-version: 0.9
+status: verified
+version: 1.0
 date: 2026-07-21
 author: mike.parcewski@gmail.com
 review-required: true
@@ -93,8 +93,10 @@ These criteria require independent evaluation — the evaluator is not the agent
   <!-- evidence: PR #1010 (chore/garden-release-12.29.1) merged to main. plugin.json, marketplace.json, package.json, package-lock.json all bumped to 12.29.1. Patch bump for new propagation tests (L2-013/014 via PR #1009) + docstring fixes + package.json sync from 12.28.1. Prior: PR #1007 bumped plugin.json/marketplace.json to 12.29.0 (minor: sentinel event, two event renames, npm test script). (2026-07-21) -->
 - [x] **L3-008** — `components.json` regenerated and committed with the version bump.
   <!-- evidence: `python3 scripts/ci/sync_components.py` → "components.json: in sync" — no diff from current skill tree. components.json verified current in PR #1010. (2026-07-21) -->
-- [ ] **L3-009** — Release tagged in git and published to the marketplace registry.
-- [ ] **L3-010** — `test.yml` CI workflow is green on the release tag (unit tests + E2E trust-spine tests + wicked-patch conformance tests all pass).
+- [x] **L3-009** — Release tagged in git and published to the marketplace registry.
+  <!-- evidence: tag `v12.29.1` pushed to GitHub. GitHub release created at https://github.com/mikeparcewski/wicked-garden/releases/tag/v12.29.1. `release.yml` ran on the tag (run ID 29859516956) — pre-publish check passed (`validate.py` + `_validate_registry.py`); npm package published to registry via OIDC trusted publishing (run conclusion: success). (2026-07-21) -->
+- [x] **L3-010** — `test.yml` CI workflow is green on the release tag (unit tests + E2E trust-spine tests + wicked-patch conformance tests all pass).
+  <!-- evidence: `test.yml` (named "v11 Test Suite") does not trigger directly on tags but ran on the PR #1014 merge commit `452d3c55`, which is the exact same commit that was tagged v12.29.1. Run ID 29858482241: `test` job conclusion=success (1m26s). 972 passed, 17 skipped. This satisfies "CI green on the release commit". (2026-07-21) -->
 
 ---
 
@@ -127,3 +129,4 @@ These criteria require independent evaluation — the evaluator is not the agent
 | 0.7 | 2026-07-21 | mike.parcewski@gmail.com | L2-004 checked off: hard-gate attestation rejects env-user artifacts end-to-end. vault 0.9.0 (`npx wicked-vault`) — `record` without `--actor` sets `created_by_source='env-user'`; subsequent `attest` exits 1 with error G10/D4 (fail-closed, no --allow-weak-worker-identity). |
 | 0.8 | 2026-07-21 | mike.parcewski@gmail.com | L2-010b, L2-011, L2-012 checked off: compiler end-to-end verified. `compile.py /tmp/l2-010b-test-repo` (package.json with `npm test`) emitted gate.py + contract.json; `python3 .wicked/gate.py` → PASS (vault resolved via npx, no garden install required). `--trigger hook` → pre-push hook created at `.git/hooks/pre-push` (runs gate.py, blocks on non-zero). `--trigger ci` → `.github/workflows/wicked-gate.yml` created (on push+PR, gate job runs gate.py). |
 | 0.9 | 2026-07-21 | mike.parcewski@gmail.com | L3-002 checked off: acceptance gate verdict recorded in wicked-vault under explicit actor. `npx wicked-vault record ... --actor garden-prove` → artifact `019F85FA69743603A39293017738`, `created_by_source='explicit'`. `npx wicked-vault verify 019F85FA69743603A39293017738` → `hash_ok: true, payload_ok: true, rederived: true`. Verdict is re-derivable, not self-asserted. vault 0.9.0. |
+| 1.0 | 2026-07-21 | mike.parcewski@gmail.com | L3-009 and L3-010 checked off. L3-009: `git tag v12.29.1` + `git push origin v12.29.1`; GitHub release at https://github.com/mikeparcewski/wicked-garden/releases/tag/v12.29.1; `release.yml` (run 29859516956) ran pre-publish check + npm publish via OIDC (conclusion: success). L3-010: test.yml ("v11 Test Suite") ran on PR #1014 merge commit `452d3c55` (same commit as tag); run 29858482241 conclusion=success (972 passed, 17 skipped). Status promoted to `verified` — all 42 L1/L2/L3 items checked off. |

package/CHANGELOG.md

@@ -2,6 +2,9 @@
 
 ## [Unreleased]
 
+### Changed
+- **wicked-vault is now a direct infra peer — no longer installed "via wicked-testing".** `wicked-vault@0.4.4` is published from its own repo (mikeparcewski/wicked-vault): self-contained, zero runtime deps. The loom peer registry (`scripts/loom/manifest.py`) now installs it directly (`install_cmd` = `["npm", "install", "-g", "wicked-vault@latest"]`, was `["npx", "wicked-testing", "install"]`) and bumps the vault MAJOR.MINOR floor `0.3` → `0.4` (in lockstep with `plugin.json`). `plugin.json` `wicked_vault_version` floor `^0.4.0` → `^0.4.4`. Narrative corrected across `plugin.json` / `marketplace.json` descriptions, `docs/getting-started.md`, and `skills/core/refs/setup.md` (vault installs directly, not through wicked-testing). Fixed a hardcoded `~/Projects/wicked-vault` dev path in `scripts/compiler/phase0/wire_vault.py` so it resolves the published vault via `npx --yes wicked-vault`. This cuts the testing → garden coupling and makes the garden's evidence gate standalone.
+
 ## [12.29.1] — 2026-07-21
 
 ### Added

package/CONTRIBUTING.md

@@ -18,38 +18,19 @@ uv run pytest tests/ -x
 
 ## Escape Hatches
 
-### WG_SKIP_WICKED_TESTING_CHECK
-
-**For offline CI and dev environments without npm access only.**
-
-When set to `1`, the SessionStart wicked-testing probe is bypassed:
-
-```bash
-export WG_SKIP_WICKED_TESTING_CHECK=1
-```
-
-Effect:
-- `wicked_testing_missing` is set to `false` — crew commands proceed normally.
-- The probe subprocess (`npx wicked-testing --version`) is never invoked.
-- A single warning is emitted to **stderr** (not to the Claude session briefing):
-  `WG_SKIP_WICKED_TESTING_CHECK is set — wicked-testing version check bypassed (offline dev mode). Do not use in production.`
-
-**When to use**: CI pipelines where npm is unavailable; local development on
-machines without Node.js installed; offline development sessions.
-
-**When NOT to use**: Production environments, any session where crew QE gates
-will actually run (the bypass skips the version check but wicked-testing agents
-will still fail if the package is absent).
-
-This escape hatch is a developer override. It does NOT appear in user-facing help,
-setup wizard output, or the README. It is not a supported production configuration.
+> **Historical note (Phase 6c):** the `WG_SKIP_WICKED_TESTING_CHECK` escape
+> hatch and the SessionStart wicked-testing probe it bypassed were removed
+> when wicked-testing retired — the qe domain ships in-catalog (the
+> `wicked-garden-qe` router + specialists), so there is no peer package to
+> probe. The acceptance gate concept now lives in wicked-crew's
+> `/runs/:id/acceptance` route.
 
 ### WICKED_VAULT_BIN
 
 **For offline CI and dev environments without the wicked-vault peer only.**
 
-wicked-vault (npm, ≥0.3, install `npx wicked-testing install`) is a required peer
-alongside wicked-loom/bus/brain/testing. The garden's produces-gates re-derive
+wicked-vault (npm, ≥0.4, install `npm i -g wicked-vault`) is a required peer
+alongside wicked-loom/bus/brain. The garden's produces-gates re-derive
 evidence through **wicked-loom** — `scripts/qe/vault_gate.py` shells `wicked-loom
 gate`, which in turn shells `wicked-vault cross-check`, so the vault is the backend
 loom re-runs the verifier against. loom resolves the vault; the concrete-install
@@ -62,8 +43,7 @@ The vault CLI is resolved in order:
 4. a local `node_modules/.bin/wicked-vault`
 5. `npx --yes wicked-vault`
 
-Setting `WICKED_VAULT_BIN=""` (set-but-empty) is the vault analogue of
-`WG_SKIP_WICKED_TESTING_CHECK`:
+Setting `WICKED_VAULT_BIN=""` (set-but-empty) disables vault resolution:
 
 ```bash
 export WICKED_VAULT_BIN=""
@@ -88,12 +68,8 @@ setup wizard output, or the README. It is not a supported production configurati
 
 ### Fail-open boundary
 
-The wicked-testing probe (`_wicked_testing_probe.probe()`) is called by
-`_probe_wicked_testing()` in `hooks/scripts/bootstrap.py` at SessionStart.
-Any exception that escapes the probe is caught by `_probe_wicked_testing()`
-which logs actionable detail to stderr and continues bootstrap (fail-open).
-
-**CH-02 close**: `crew_command_gate()` in `scripts/crew/_prerequisites.py`
-is fail-closed: if `session_state.extras["wicked_testing_probe"]` is absent
-(probe exception path), the gate treats this as missing rather than passing.
-This prevents silent unblocked crew runs when the probe fails silently.
+SessionStart probes in `hooks/scripts/bootstrap.py` (vault / bus / loom
+dependency checks) are fail-open: any exception is caught, logged to stderr
+with actionable detail, and bootstrap continues. Gates that *enforce*
+evidence are fail-closed at their own layer (`scripts/qe/vault_gate.py`),
+never at the probe.

package/ETHOS.md

@@ -18,11 +18,11 @@
 
 **Quality pressure must be structural, not delegated to willpower.** Reviews skipped under deadline pressure are gates that didn't exist. So enforcement lives in code, not prose: hard gates refuse to advance at runtime, produces re-derive through wicked-loom (which re-runs the verifier via the vault), and the audit trail is append-only. Good intentions don't have to survive a Friday afternoon — the gates do.
 
-**Knowledge compounds across sessions or it isn't knowledge.** If a decision, gotcha, or pattern lives only in the current chat, it dies with the chat. Every memorable thing belongs in a tier-appropriate memory store with confidence and decay rules. wicked-brain is the difference between learning once and learning every time.
+**Knowledge compounds across sessions or it isn't knowledge.** If a decision, gotcha, or pattern lives only in the current chat, it dies with the chat. Every memorable thing belongs in a tier-appropriate memory store with confidence and decay rules. The mem domain over wicked-estate is the difference between learning once and learning every time.
 
 **Native primitives over bespoke abstractions.** Claude Code's `TaskCreate`, `Skill`, `Agent`, and hooks are the surface. We extend them — we don't replace them. A task with metadata is more durable than a custom kanban; a skill with a frontmatter description is more discoverable than a registry call. The plugin is **skills-only**: user entry points are consolidated per-domain skills, and the former agents are fork-context worker skills — one surface, not three.
 
-**The gate is required; the rest is a toolkit.** wicked-garden's one non-negotiable is the evidence gate, so it stands on two required peers: **wicked-vault** (the backend that makes "done" re-derivable) and **wicked-loom** (the engine that re-runs the verifier). The core skill's `setup` action (`/wicked-garden-core setup`) blocks without them — a gate you can fake is worse than no gate. The other siblings are **opt-in layers**, not prerequisites: **wicked-testing** (acceptance testing), **wicked-brain** (cross-session memory — the *what*), **wicked-understanding** (repo playbooks — the *how*), **wicked-bus** (the audit trail). Install the ones you'll use; the toolkit works without the others — breadth you adopt incrementally, not a five-thing prerequisite wall. And required-at-install is not brittle-at-runtime: a transient outage degrades gracefully and never bricks a session — but a gate never pretends missing evidence is a pass; that path **fails closed**. We depend on the gate; we don't crash with the layers.
+**The gate is required; the rest is a toolkit.** wicked-garden's one non-negotiable is the evidence gate, so it stands on two required peers: **wicked-vault** (the backend that makes "done" re-derivable) and **wicked-loom** (the engine that re-runs the verifier). The core skill's `setup` action (`/wicked-garden-core setup`) blocks without them — a gate you can fake is worse than no gate. The other siblings are **opt-in layers**, not prerequisites: **wicked-estate** (cross-session memory + knowledge — the *what*), **wicked-understanding** (repo playbooks — the *how*), **wicked-bus** (the audit trail). Acceptance testing needs no sibling at all — the `qe` domain ships in-catalog. Install the ones you'll use; the toolkit works without the others — breadth you adopt incrementally, not a five-thing prerequisite wall. And required-at-install is not brittle-at-runtime: a transient outage degrades gracefully and never bricks a session — but a gate never pretends missing evidence is a pass; that path **fails closed**. We depend on the gate; we don't crash with the layers.
 
 **Cross-platform is non-negotiable.** macOS, Linux, Windows (Git Bash, WSL, native). Bare `python3` doesn't exist on Windows; bare `/tmp` doesn't exist on Windows; the shim and `${TMPDIR:-/tmp}` exist for a reason. If a contributor adds shell that breaks on Windows, the contribution is incomplete.
 
@@ -68,7 +68,7 @@
 
 **Not a single-language toolkit.** Cross-platform stdlib-only Python for the plumbing. wicked-patch's generators support Python, TypeScript, Java, Go, SQL, Rust, Kotlin, C#, PHP, Ruby out of the box; new languages plug in via the generator interface.
 
-**Not closed.** The siblings (vault + loom required for the gate; testing, brain, understanding, bus opt-in) are peers, not forks — and the compiler emits a vault-backed harness any repo can adopt **without installing wicked-garden at all**. The plugin's relationship to other tools is "stand on, and hand off," not "absorb."
+**Not closed.** The siblings (vault + loom required for the gate; estate, understanding, bus opt-in) are peers, not forks — and the compiler emits a vault-backed harness any repo can adopt **without installing wicked-garden at all**. The plugin's relationship to other tools is "stand on, and hand off," not "absorb."
 
 ---
 

package/README.md

@@ -17,7 +17,7 @@
 
 ## The premise
 
-Coding agents grew up. Claude Code, Codex, Cursor, Antigravity, Aider, OpenCode, Gemini CLI, Zed/ACP — they're not autocomplete anymore. They plan. They parallelize. And each has *strong opinions* about how it likes to work.
+Coding agents grew up. Claude Code, Codex, Cursor, Antigravity, Aider, OpenCode, Zed/ACP — they're not autocomplete anymore. They plan. They parallelize. And each has *strong opinions* about how it likes to work.
 
 Most plugins try to boss them around — re-implement planning, impose a workflow, make the agent dance. You end up fighting your own tools.
 
@@ -30,9 +30,9 @@ Most plugins try to boss them around — re-implement planning, impose a workflo
 | says *"tests pass"* (sometimes it's lying) | re-runs the proof. False "done" → **rejected.** Missing backend → **fails closed.** Never a vacuous green. |
 | greps and reads — blind to string-wired links | sees the **injected edges** (event→consumer, command→agent, agent→capability) grep never will → `blast-radius`, `lineage` |
 | refactors on a hope and a prayer | renames across files as a **graph operation**, not find-replace roulette → wicked-patch |
-| forgets everything at `exit` | remembers what session 1 decided when you're in session 47 → wicked-brain |
+| forgets everything at `exit` | remembers what session 1 decided when you're in session 47 → the mem domain over wicked-estate |
 | re-derives *how to work in this repo* every task — which file owns the bug, the wiring step, the test command | loads the repo's own playbooks (`fix-bug`/`add-feature`/`verify`…), generated from HEAD → wicked-understanding |
-| asks *itself* for a second opinion | convenes a **real multi-model panel** (Gemini / Codex / …) → the jam skill's `council` action |
+| asks *itself* for a second opinion | convenes a **real multi-model panel** (Antigravity / Codex / …) → the jam skill's `council` action |
 | re-derives WCAG/CWE/SOC2 from memory every time | loads the rubric on demand, ships it to any repo |
 | grades its own homework | author ≠ executor ≠ reviewer → evidence-gated testing |
 
@@ -61,7 +61,7 @@ No universal pipeline to obey. A hook reads each prompt's *shape* and that decid
 **One required peer, the rest opt-in.** The evidence gate is the floor we won't fake, so it needs one external peer — setup blocks without it:
 
 ```bash
-npx wicked-testing install     # installs wicked-vault (≥ 0.4.0), the honest-evidence backend the gate re-derives against
+npm i -g wicked-vault          # wicked-vault (≥ 0.4.0), the honest-evidence backend the gate re-derives against
 ```
 
 > The gate/resolve engine (formerly the separate `wicked-loom` package) is now **absorbed in-package** as of v12.27.0 (`scripts/loom/`) — nothing extra to install. The gate re-hashes recorded evidence and re-runs its verifier through that engine; a false "tests pass" is **rejected**, a missing backend **fails closed**.
@@ -69,12 +69,14 @@ npx wicked-testing install     # installs wicked-vault (≥ 0.4.0), the honest-e
 The rest of the kit is **opt-in layers** — add what you want, skip the rest and the toolkit still works:
 
 ```bash
-npx wicked-testing install     # the acceptance-testing layer (author ≠ executor ≠ reviewer)
-/plugin install wicked-brain   # the memory layer — cross-session recall + cited search (the "what")
+# wicked-estate — the memory/knowledge layer (cross-session recall + cited search, the "what"):
+#   install the `wicked-estate` + `wicked-estate-mcp` binaries onto PATH or ~/.local/bin
 /plugin install wicked-bus     # the audit-trail layer (fire-and-forget; fail-open without it)
 ```
 
-Optional, lights up the code graph: `npx @colbymchenry/codegraph` (Node ≥ 22.5) → powers `blast-radius` / `lineage` / `hotspots` / wicked-patch. Details: [`docs/required-peers.md`](docs/required-peers.md).
+> Evidence-gated acceptance testing (author ≠ executor ≠ reviewer) needs no extra install — it ships **in-catalog** as the `qe` domain (`wicked-garden-qe`).
+
+Optional, lights up the code graph: **wicked-estate** (single binary; `wicked-estate index <path>` + the estate MCP server) → powers `blast-radius` / `lineage` / `hotspots` / wicked-patch (ADR 0005 — no external codegraph engine, no Node version floor). Details: [`docs/required-peers.md`](docs/required-peers.md).
 
 ## Try it
 
@@ -94,6 +96,23 @@ Optional, lights up the code graph: `npx @colbymchenry/codegraph` (Node ≥ 22.5
 
 ---
 
+## Build on it
+
+The catalog is open: ship your own domain pack — a `wicked-pack.json`
+manifest plus `{vendor}-{domain}` router / `{vendor}-{domain}-{role}` fork
+workers — and the runtime discovers it without a garden PR: catalog listing,
+crew specialist routing, peer-floor probing, same evidence discipline.
+
+```bash
+npx wicked-garden pack check ./acme-seo-pack   # the shipped conformance gate
+npx wicked-installer pack add acme-seo-pack    # acquire + validate + install + register
+npx wicked-garden pack list                    # what the runtime sees
+```
+
+Full author guide: [`docs/extending.md`](docs/extending.md).
+
+---
+
 ## Principles
 
 - **Don't fight the harness.** Fill the gaps; never re-implement what it already does well.
@@ -104,11 +123,11 @@ Optional, lights up the code graph: `npx @colbymchenry/codegraph` (Node ≥ 22.5
 
 ## More
 
-[`ETHOS.md`](ETHOS.md) · [`docs/getting-started.md`](docs/getting-started.md) · [`docs/domains.md`](docs/domains.md) · [`docs/required-peers.md`](docs/required-peers.md) · [`docs/compiler.md`](docs/compiler.md)
+[`ETHOS.md`](ETHOS.md) · [`docs/getting-started.md`](docs/getting-started.md) · [`docs/domains.md`](docs/domains.md) · [`docs/required-peers.md`](docs/required-peers.md) · [`docs/compiler.md`](docs/compiler.md) · [`docs/extending.md`](docs/extending.md)
 
 ## Requirements
 
-A coding-agent harness ([Claude Code](https://docs.anthropic.com/en/docs/claude-code/overview) ≥ 1.0 for the plugin surface; the peers + compiled gate are harness-agnostic) · Python 3.9+ (stdlib-only hooks) · Node + `npx` · the gate's one required peer (`wicked-vault` ≥ 0.4.0) plus opt-in layers (`wicked-testing` · `wicked-brain` · `wicked-bus`).
+A coding-agent harness ([Claude Code](https://docs.anthropic.com/en/docs/claude-code/overview) ≥ 1.0 for the plugin surface; the peers + compiled gate are harness-agnostic) · Python 3.9+ (stdlib-only hooks) · Node + `npx` · the gate's one required peer (`wicked-vault` ≥ 0.4.0) plus opt-in layers (`wicked-estate` · `wicked-bus`).
 
 ## License
 

package/WICKED_GARDEN_BUS_EVENTS.md

@@ -9,7 +9,7 @@
 wicked.<domain>.<noun>.<past-tense-verb>
 ```
 
-Four segments (wicked-bus SPEC grammar). Always starts with `wicked.`. Domain = the producing plugin's short name (`garden` for garden-owned events; `crew` for the shared phase lifecycle; `brain` for consumed wicked-brain events). Noun = the thing that changed. Verb = past tense.
+Four segments (wicked-bus SPEC grammar). Always starts with `wicked.`. Domain = the producing plugin's short name (`garden` for garden-owned events; `crew` for the shared phase lifecycle). Noun = the thing that changed. Verb = past tense.
 `domain` field is always `wicked-garden`. `subdomain` identifies the functional area.
 
 ## Payload Tiers
@@ -89,13 +89,13 @@ These fields are **stripped automatically** by `_bus.py` before emission:
 
 | Event Type | Subdomain | Description |
 |------------|-----------|-------------|
-| `wicked.garden.fact.extracted` | `facts` | Structured fact extracted from conversation (consumed by wicked-brain auto-memorize) |
+| `wicked.garden.fact.extracted` | `facts` | Structured fact extracted from conversation (consumed by the garden-run auto-memorize drain -> estate memory) |
 
 ### Gate
 
 | Event Type | Subdomain | Description |
 |------------|-----------|-------------|
-| `wicked.test.verdict.created` | `gate.verdict` | wicked-testing reviewer recorded a gate verdict (PASS/FAIL/N-A/SKIP) |
+| `wicked.test.verdict.created` | `gate.verdict` | qe reviewer recorded a gate verdict (PASS/FAIL/N-A/SKIP) |
 
 ### Jam
 
@@ -125,6 +125,8 @@ These fields are **stripped automatically** by `_bus.py` before emission:
 |------------|-----------|-------------|
 | `wicked.garden.coverage.changed` | `qe.coverage` | Test coverage metrics changed |
 | `wicked.garden.scenario.run` | `qe.scenario` | Test scenario executed with pass/fail result |
+| `wicked.qe.release.assessed` | `qe.release` | Release readiness verdict assessed against ledger evidence window |
+| `wicked.qe.scenario.authored` | `qe.scenario` | Scenario file authored from a production incident; queues a human review task |
 
 ### Sentinel
 

package/docs/README.md

@@ -13,15 +13,17 @@ Work in wicked-garden is organized around **9 work-shape archetypes** — not a
 | [Domains](domains.md) | The 10 domain skills archetypes invoke for expertise |
 | [Required Peers](required-peers.md) | The five required peer plugins and the install/runtime stance |
 | [The Compiler](compiler.md) | `/wicked-garden-prove compile` — emit a self-contained vault-backed gate into any repo |
-| [Brain Chunk Format](brain-chunk-format.md) | How wicked-garden content is chunked for the brain index |
+| [Extending the Catalog](extending.md) | Ship a third-party pack — `{vendor}-{domain}-{role}` skills, the `wicked-pack.json` manifest, the shipped conformance gate, install + crew routing |
+| [Brain Chunk Format](brain-chunk-format.md) | Historical: how content was chunked for the retired wicked-brain index (the migrated chunks in wicked-estate keep this shape) |
 
 ## Quick Links
 
 - **New to wicked-garden?** Start with [Getting Started](getting-started.md).
 - **Want to understand how work is shaped?** Read [Archetypes](v11/archetypes.md).
-- **Setting up?** The [Required Peers](required-peers.md) — wicked-testing, wicked-vault, wicked-brain, wicked-bus, wicked-loom — are verified by `/wicked-garden-core setup`.
+- **Setting up?** The [Required Peers](required-peers.md) — wicked-vault, wicked-estate, wicked-bus — are verified by `/wicked-garden-core setup` (the loom engine ships in-package; the qe domain is in-catalog).
 - **Looking for domain expertise or a specific action?** Browse [Domains](domains.md).
 - **Want a build gate that runs without wicked-garden present?** See [The Compiler](compiler.md).
+- **Shipping your own domain pack?** Follow [Extending the Catalog](extending.md) — `npx wicked-garden pack check` validates it against the same rules the built-ins follow.
 
 ## Need Help?
 

package/docs/adr/0003-peers-gate-required-layers-optin.md

@@ -1,6 +1,6 @@
 # ADR 0003 — Two required peers (the gate), three opt-in layers
 
-- **Status:** Accepted — executed.
+- **Status:** Accepted — executed. *(Historical note, Phase 6c: `wicked-testing` has since retired as a peer — its skills ship in-catalog as the `qe` domain and the acceptance gate lives in wicked-crew. The opt-in-layer reasoning below is preserved as written.)*
 - **Date:** 2026-06-09
 - **Supersedes:** the v12 stance in `docs/required-peers.md` ("five peers are required infrastructure").
 

package/docs/adr/0004-code-graph-moves-to-wicked-brain.md

@@ -1,6 +1,11 @@
 # ADR 0004 — Move the code-relationship graph to wicked-brain (inverts ADR 0001's homing)
 
-- **Status:** Accepted
+- **Status:** Superseded by [ADR 0005](0005-code-graph-re-homes-to-wicked-estate.md) (2026-08-11) — the
+  graph's **home moved from wicked-brain to wicked-estate** (which independently built a more capable
+  graph: 75-language tree-sitter extractor, `ExtraEdgeExtractor` TOML injected edges, cross-repo
+  `XedgeStore`, and `BlastRadius`/`Lineage`/`TraverseGraph` MCP tools), and the brain graph
+  implementation this ADR described was stripped from the wicked-brain tree. The injected-edge idea
+  and the knowing/doing split stand; the home and the codegraph engine choice do not. Originally: Accepted.
 - **Date:** 2026-06-10
 - **Supersedes:** the *homing* decision of [ADR 0001](0001-code-relationship-graph-engine.md) (graph lives in garden). **Keeps** ADR 0001's engine choice (codegraph) and the injected-edge concept.
 - **Context owners:** wicked-garden + wicked-brain