docguard-cli 0.41.0__tar.gz → 0.41.2__tar.gz

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/.agent/skills/docguard-fix/SKILL.md

@@ -6,10 +6,10 @@ description: AI-driven documentation repair with structured research workflow, t
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.41.0
+  version: 0.41.2
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
-<!-- docguard:version: 0.41.0 -->
+<!-- docguard:version: 0.41.2 -->
 
 # DocGuard Fix Skill
 

{docguard_cli-0.41.0/extensions/spec-kit-docguard → docguard_cli-0.41.2/.agent}/skills/docguard-guard/SKILL.md

@@ -7,10 +7,10 @@ description: Run DocGuard guard validation against Canonical-Driven Development
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.41.0
+  version: 0.41.2
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
-<!-- docguard:version: 0.41.0 -->
+<!-- docguard:version: 0.41.2 -->
 
 # DocGuard Guard Skill
 

{docguard_cli-0.41.0/extensions/spec-kit-docguard → docguard_cli-0.41.2/.agent}/skills/docguard-review/SKILL.md

@@ -6,10 +6,10 @@ description: Cross-document consistency analysis and quality assessment. Perform
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.41.0
+  version: 0.41.2
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
-<!-- docguard:version: 0.41.0 -->
+<!-- docguard:version: 0.41.2 -->
 
 # DocGuard Review Skill
 

{docguard_cli-0.41.0/extensions/spec-kit-docguard → docguard_cli-0.41.2/.agent}/skills/docguard-score/SKILL.md

@@ -6,10 +6,10 @@ description: CDD maturity assessment with category-aware improvement roadmap. Ru
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.41.0
+  version: 0.41.2
   source: extensions/spec-kit-docguard/skills/docguard-score
 ---
-<!-- docguard:version: 0.41.0 -->
+<!-- docguard:version: 0.41.2 -->
 
 # DocGuard Score Skill
 

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/.agent/skills/docguard-sync/SKILL.md

@@ -4,10 +4,10 @@ description: Keep canonical documentation ALWAYS UP TO DATE. Refreshes code-trut
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.41.0
+  version: 0.41.2
   source: extensions/spec-kit-docguard/skills/docguard-sync
 ---
-<!-- docguard:version: 0.41.0 -->
+<!-- docguard:version: 0.41.2 -->
 
 # DocGuard Sync Skill
 

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/.docguard-specs.json

@@ -8,7 +8,7 @@
       "reviewed": {
         "lifecycle": {
           "approval": "approved",
-          "delivery": "in_progress",
+          "delivery": "verified",
           "context": "current",
           "retirementReason": null,
           "storage": "working_tree",
@@ -34,8 +34,91 @@
           ]
         },
         "reconciliation": {
-          "lastReviewedRevision": null,
-          "outcomes": []
+          "lastReviewedRevision": "2ff1baaefdebfc1dd7ef2d9c5e6d1f584f8af9bb",
+          "outcomes": [
+            {
+              "revision": "c283d1b70985858db2468667e60a9f772642b1a2",
+              "reason": "Verified v0.41.0 adoption workflow integrity: PR #395 merged at f925e40; release PR #396 passed approved CI and supply-chain checks, merged at 7ec6356, and publication run 34989969217 completed npm, PyPI, GHCR, GitHub Release, extension ZIP, MCPB, and catalog sync with no accepted deviations.",
+              "evidence": [
+                "cli/assessment.mjs",
+                "cli/commands/hooks.mjs",
+                "cli/evidence/python-literal.mjs",
+                "cli/findings.mjs",
+                "cli/scanners/instruction-audit.mjs",
+                "cli/scanners/routes.mjs",
+                "cli/shared-git.mjs",
+                "cli/shared.mjs",
+                "cli/validators/traceability.mjs",
+                "docs-canonical/ARCHITECTURE.md",
+                "docs-canonical/DATA-MODEL.md",
+                "docs-canonical/REQUIREMENTS.md",
+                "docs-canonical/SECURITY.md",
+                "docs-canonical/TEST-SPEC.md",
+                "tests/adoption-workflow.test.mjs",
+                "tests/api-authority-precision.test.mjs",
+                "tests/api-write.test.mjs",
+                "tests/assessment.test.mjs",
+                "tests/doc-role-boundaries.test.mjs",
+                "tests/docguard-config-schema.test.mjs",
+                "tests/docs-sync.test.mjs",
+                "tests/environment.test.mjs",
+                "tests/evidence-python-literal.test.mjs",
+                "tests/field-context-precision.test.mjs",
+                "tests/finding-severity-config.test.mjs",
+                "tests/instruction-audit.test.mjs",
+                "tests/metrics-consistency.test.mjs",
+                "tests/npm-pack-smoke.test.mjs",
+                "tests/reconcile.test.mjs",
+                "tests/routes-express-mounts.test.mjs",
+                "tests/severity.test.mjs",
+                "tests/todo-tracking.test.mjs",
+                "tests/traceability-lifecycle.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            },
+            {
+              "revision": "2ff1baaefdebfc1dd7ef2d9c5e6d1f584f8af9bb",
+              "reason": "Durable post-merge review at 2ff1baa: taskless living-spec completion, R9 release evidence, and status-preserving maintenance passed complete reconciliation, self-guard, 1,866 tests, Node 18/20/22/24 CI, and OSV with no accepted deviations.",
+              "evidence": [
+                "cli/assessment.mjs",
+                "cli/commands/hooks.mjs",
+                "cli/evidence/python-literal.mjs",
+                "cli/findings.mjs",
+                "cli/scanners/instruction-audit.mjs",
+                "cli/scanners/routes.mjs",
+                "cli/shared-git.mjs",
+                "cli/shared.mjs",
+                "cli/validators/traceability.mjs",
+                "docs-canonical/ARCHITECTURE.md",
+                "docs-canonical/DATA-MODEL.md",
+                "docs-canonical/REQUIREMENTS.md",
+                "docs-canonical/SECURITY.md",
+                "docs-canonical/TEST-SPEC.md",
+                "tests/adoption-workflow.test.mjs",
+                "tests/api-authority-precision.test.mjs",
+                "tests/api-write.test.mjs",
+                "tests/assessment.test.mjs",
+                "tests/doc-role-boundaries.test.mjs",
+                "tests/docguard-config-schema.test.mjs",
+                "tests/docs-sync.test.mjs",
+                "tests/environment.test.mjs",
+                "tests/evidence-python-literal.test.mjs",
+                "tests/field-context-precision.test.mjs",
+                "tests/finding-severity-config.test.mjs",
+                "tests/instruction-audit.test.mjs",
+                "tests/metrics-consistency.test.mjs",
+                "tests/npm-pack-smoke.test.mjs",
+                "tests/reconcile.test.mjs",
+                "tests/routes-express-mounts.test.mjs",
+                "tests/severity.test.mjs",
+                "tests/todo-tracking.test.mjs",
+                "tests/traceability-lifecycle.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            }
+          ]
         }
       },
       "intent": {
@@ -70,7 +153,7 @@
         "artifacts": [
           {
             "path": "specs/012-adoption-workflow-integrity/spec.md",
-            "digest": "sha256:4e593b9e603496cb12ff0a06a740a607f2a01a05166ef7ff06e6746ea9692595"
+            "digest": "sha256:6f007a67be27b07599e058bd2dadc97031bc0753649ae296f95c4ea3b87ea821"
           }
         ],
         "taskCompletion": {
@@ -210,6 +293,11 @@
             "file": "tests/doc-role-boundaries.test.mjs",
             "line": 1
           },
+          {
+            "requirementId": "FR-015",
+            "file": "tests/docguard-config-schema.test.mjs",
+            "line": 1
+          },
           {
             "requirementId": "FR-015",
             "file": "tests/docs-sync.test.mjs",
@@ -311,7 +399,7 @@
           ]
         },
         "reconciliation": {
-          "lastReviewedRevision": "a384a04479103b43587a2f79470b3b4a1031d242",
+          "lastReviewedRevision": "2a47de58f155f847b318f75267c43c2ee2828fd9",
           "outcomes": [
             {
               "revision": "834e0a2299402205f5bdca7a55e353bad71bab28",
@@ -414,6 +502,74 @@
               ],
               "deviations": [],
               "successor": null
+            },
+            {
+              "revision": "7374d8c35deb68e77541525082fd94643494d802",
+              "reason": "Reviewed taskless living-contract completion and status-preserving released maintenance with paired controls; all 1,866 tests and self-guard passed with no accepted deviations.",
+              "evidence": [
+                "cli/commands/reconcile.mjs",
+                "cli/commands/retire.mjs",
+                "cli/commands/specs.mjs",
+                "cli/commands/sync.mjs",
+                "cli/docguard.mjs",
+                "cli/scanners/document-lifecycle.mjs",
+                "cli/scanners/lifecycle-context.mjs",
+                "cli/scanners/reconciliation.mjs",
+                "cli/scanners/requirement-evidence.mjs",
+                "cli/scanners/retirement-manifest.mjs",
+                "cli/scanners/spec-registry.mjs",
+                "cli/shared-sync-scope.mjs",
+                "cli/validators/traceability.mjs",
+                "cli/writers/file-transaction.mjs",
+                "cli/writers/spec-outcomes.mjs",
+                "docs-canonical/ARCHITECTURE.md",
+                "docs-canonical/DATA-MODEL.md",
+                "docs-canonical/REQUIREMENTS.md",
+                "docs-canonical/TEST-SPEC.md",
+                "tests/archive.test.mjs",
+                "tests/document-lifecycle.test.mjs",
+                "tests/file-transaction.test.mjs",
+                "tests/hooks-contract.test.mjs",
+                "tests/reconcile.test.mjs",
+                "tests/spec-completion.test.mjs",
+                "tests/spec-registry.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            },
+            {
+              "revision": "2a47de58f155f847b318f75267c43c2ee2828fd9",
+              "reason": "Durable post-merge review at 2a47de5: living-contract completion and released-maintenance behavior are anchored to main after R9's durable outcome; complete reconciliation and self-guard passed with no accepted deviations.",
+              "evidence": [
+                "cli/commands/reconcile.mjs",
+                "cli/commands/retire.mjs",
+                "cli/commands/specs.mjs",
+                "cli/commands/sync.mjs",
+                "cli/docguard.mjs",
+                "cli/scanners/document-lifecycle.mjs",
+                "cli/scanners/lifecycle-context.mjs",
+                "cli/scanners/reconciliation.mjs",
+                "cli/scanners/requirement-evidence.mjs",
+                "cli/scanners/retirement-manifest.mjs",
+                "cli/scanners/spec-registry.mjs",
+                "cli/shared-sync-scope.mjs",
+                "cli/validators/traceability.mjs",
+                "cli/writers/file-transaction.mjs",
+                "cli/writers/spec-outcomes.mjs",
+                "docs-canonical/ARCHITECTURE.md",
+                "docs-canonical/DATA-MODEL.md",
+                "docs-canonical/REQUIREMENTS.md",
+                "docs-canonical/TEST-SPEC.md",
+                "tests/archive.test.mjs",
+                "tests/document-lifecycle.test.mjs",
+                "tests/file-transaction.test.mjs",
+                "tests/hooks-contract.test.mjs",
+                "tests/reconcile.test.mjs",
+                "tests/spec-completion.test.mjs",
+                "tests/spec-registry.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
             }
           ]
         }
@@ -453,7 +609,7 @@
         "artifacts": [
           {
             "path": "specs/006-document-lifecycle/spec.md",
-            "digest": "sha256:35989fea62cfd2ce2d8022ca695ecd19d6bb466b5bc9e1ac7283b272cf67643a"
+            "digest": "sha256:d87fabd012d9e5e336cae6b80b4037ec429b5d9d826674c77fa036f65ed899f6"
           },
           {
             "path": "specs/006-document-lifecycle/plan.md",

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/.wolf/buglog.json

@@ -6145,6 +6145,60 @@
       "related_bugs": [],
       "occurrences": 1,
       "last_seen": "2026-09-15T15:30:00.000Z"
+    },
+    {
+      "id": "bug-371",
+      "timestamp": "2026-09-15T16:19:00.847Z",
+      "error_message": "An evidence-complete living verification spec could not complete without a tasks.md ledger",
+      "file": "cli/commands/specs.mjs",
+      "root_cause": "Completion treated every persistence model as a one-time implementation plan and required task boxes even when a living contract had qualified evidence for every requirement",
+      "fix": "Allow taskless completion only for living specs with complete qualified requirement evidence; retain strict non-empty complete ledgers for every declared task file and every other persistence model",
+      "tags": [
+        "spec-lifecycle",
+        "living-spec",
+        "stale-docs",
+        "false-blocker"
+      ],
+      "related_bugs": [],
+      "occurrences": 1,
+      "last_seen": "2026-09-15T16:19:00.847Z"
+    },
+    {
+      "id": "bug-372",
+      "timestamp": "2026-09-15T16:19:00.847Z",
+      "error_message": "Released living specs could not record maintenance and completion would downgrade released to verified",
+      "file": "cli/commands/specs.mjs",
+      "root_cause": "The maintenance gate recognized only verified living specs and completeSpec unconditionally assigned verified after every transaction",
+      "fix": "Accept verified and released living maintenance, emit status-preserving transitions, and preserve released delivery after a reviewed outcome",
+      "tags": [
+        "spec-lifecycle",
+        "released",
+        "maintenance",
+        "status-regression"
+      ],
+      "related_bugs": [
+        "bug-371"
+      ],
+      "occurrences": 1,
+      "last_seen": "2026-09-15T16:19:00.847Z"
+    },
+    {
+      "id": "bug-373",
+      "timestamp": "2026-09-15T16:21:14.288Z",
+      "error_message": "The packed CLI version smoke test accepted any semantic version instead of the package version",
+      "file": "tests/npm-pack-smoke.test.mjs",
+      "root_cause": "The assertion used a generic docguard vX.Y.Z regular expression and could not detect a stale but well-formed version",
+      "fix": "Read package.json from the extracted tarball and require exact equality with the extracted CLI --version output",
+      "tags": [
+        "release",
+        "npm-pack",
+        "version",
+        "false-green",
+        "test-quality"
+      ],
+      "related_bugs": [],
+      "occurrences": 1,
+      "last_seen": "2026-09-15T16:21:14.288Z"
     }
   ]
 }

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/.wolf/cerebrum.md

@@ -155,3 +155,6 @@
 
 - **2026-09-14 — Agent-context benchmark integrity:** Comparative promotion is ineligible when any trial fails at the infrastructure layer; a zero-step service exit is not an agent outcome. Bind retained observations to the exact manifest, executor, analysis, selector, and fixture digests, and keep frozen fixtures unchanged after observation. If repository governance annotations would alter them, use a reviewed historical baseline for lifecycle reconciliation instead of rewriting the benchmark evidence.
 - **2026-09-15 — Packed adoption is the release boundary.** Qualify the exact tarball through repository discovery, finding rendering, proposed remediation, and post-action verification on both clean and dirty disposable repositories. Component success and subprocess exit alone are insufficient. Compare source-status fingerprints before and after. Treat low-confidence absence as review evidence only; it must never authorize deletion, even under a force flag. Real-project replays classify warning quality and expose cross-validator composition that synthetic units miss.
+
+- **2026-09-15 — Living-spec completion and durable evidence:** A living verification contract may omit `tasks.md` only when every requirement has qualified source/test evidence; declared empty or incomplete ledgers and all other persistence models still fail closed. Maintenance of released living specs must preserve `released → released`. Because squash changes the candidate commit, durable implementation outcomes are recorded in a post-merge transaction against reachable main history; generated outcome churn cannot qualify itself.
+- **2026-09-15 — Packed version assertions:** A release smoke test that accepts any semantic version is a false-green. Execute the extracted tarball and compare `--version` exactly to that tarball's `package.json`; run registry installation probes from a fresh directory because `npx` inside the package checkout can select a stale local binary.

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/.wolf/memory.md

@@ -1333,3 +1333,4 @@
 | 14:36 | Session end: 32 writes across 9 files (dependabot.yml, CHANGELOG.md, package.json, release.yml, ci.yml) | 12 reads | ~71601 tok |
 | 14:56 | Edited .github/workflows/release.yml | expanded (+53 lines) | ~845 |
 | 14:56 | Edited README.md | expanded (+19 lines) | ~245 |
+| 12:18 | Fixed living-spec completion and released maintenance; merged PRs #398–#400; published and independently verified v0.41.1; removed 348 temp artifacts | specs lifecycle, registry, roadmap, release | 1,866 tests + Node 18/20/22/24 + OSV + all publication targets passed | ~43000 tok |

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/CHANGELOG.md

@@ -7,6 +7,49 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.41.2] - 2026-09-15
+
+Automated weekly release — batches everything merged since `v0.41.1`.
+
+### Changed
+
+- Require exact packed CLI version (#402)
+
+
+### Fixed
+
+- Require the extracted npm package's `--version` output to equal its exact
+  packed `package.json` version, preventing a plausible but stale semantic
+  version from passing release smoke tests.
+
+## [0.41.1] - 2026-09-15
+
+Automated weekly release — batches everything merged since `v0.41.0`.
+
+### Changed
+
+- Anchor lifecycle evidence to main (#400)
+- Anchor R9 lifecycle evidence to main (#399)
+- Fix living spec finalization and close R9 (#398)
+
+
+### Fixed
+
+- Allow an evidence-complete living specification to finish without creating a
+  stale `tasks.md` solely for lifecycle bookkeeping, while continuing to reject
+  missing task ledgers for other persistence models and empty or incomplete
+  ledgers wherever they are declared. Released living contracts can record later
+  maintenance without downgrading their release state.
+- Record the reviewed document-lifecycle maintenance outcome against its exact
+  source revision and qualified implementation/test evidence.
+- Close roadmap milestone R9 after independently verifying every v0.41.0
+  publication target and record the adoption workflow's reviewed outcome without
+  creating a stale task ledger.
+- Anchor the adoption workflow's final maintenance outcome to durable main commit
+  `2ff1baa` after the protected merge checks completed.
+- Anchor the document-lifecycle maintenance outcome to durable main commit
+  `2a47de5`, completing the post-merge evidence chain.
+
 ## [0.41.0] - 2026-09-15
 
 Automated weekly release — batches everything merged since `v0.40.5`.

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: docguard-cli
-Version: 0.41.0
+Version: 0.41.2
 Summary: The enforcement tool for Canonical-Driven Development (CDD). Audit, generate, and guard your project documentation. No Python dependencies (requires Node.js 18+).
 Project-URL: Homepage, https://github.com/raccioly/docguard
 Project-URL: Documentation, https://github.com/raccioly/docguard#readme

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/ROADMAP.md

@@ -13,28 +13,42 @@ structural score is useful, but it is not proof that arbitrary prose is true.
 
 ## Active roadmap
 
-### R9 — Adoption workflow integrity (in progress)
-
-Governing spec: `specs/012-adoption-workflow-integrity/spec.md`.
-
-Qualify the same installed journey that an adopter or AI agent follows, including
-existing repository state, rendered remediation, post-action verification, and
-the packed documentation surface. Fail closed when diff coverage, lifecycle
-evidence, or path resolution is incomplete. Add exact finding-code policy while
-preserving intrinsic detector severity, and label structural maturity separately
-from the combined readiness verdict.
-
-Release evidence requires the complete test suite, frozen precision benchmark,
-packed-package workflow, self-guard, and read-only replay against the reported
-web and Python adopter repositories. The milestone moves to Delivered only after
-those results are reviewed and the release artifacts are published.
+No unreleased milestone is currently committed. New work starts with a reviewed
+specification and measurable acceptance criteria rather than an evergreen task
+list that can become stale.
 
 ## Delivered roadmap
 
-R1–R8 are implemented, evidence-reviewed, and released. The maintained living
+R1–R9 are implemented, evidence-reviewed, and released. The maintained living
 specifications remain current verification contracts; historical implementation
 plans are recoverable from Git and do not create a second source of truth.
 
+### R9 — Adoption workflow integrity (released in v0.41.0)
+
+Governing spec: `specs/012-adoption-workflow-integrity/spec.md`.
+
+The installed journey now covers existing repository state, rendered
+remediation, post-action verification, and the packed documentation surface.
+Incomplete diff coverage, lifecycle evidence, and path resolution fail closed.
+Exact finding-code policy preserves intrinsic detector severity, and structural
+maturity is reported separately from the combined readiness verdict.
+
+- [x] Merge the reviewed implementation in PR #395 at `f925e40`.
+- [x] Pass the complete 1,864-test release suite, frozen precision benchmark,
+  packed-package workflow, self-guard, and read-only web/Python adopter replays.
+- [x] Pass the approved CI run `34989354122` and supply-chain run `34989355584`
+  for release PR #396.
+- [x] Merge and tag v0.41.0 at `7ec6356`.
+- [x] Complete publication run `34989969217` for npm, PyPI, GHCR, GitHub
+  Release, the Spec Kit extension ZIP, MCPB, and catalog sync.
+- [x] Re-run the expanded 1,866-test suite while finalizing the living lifecycle
+  evidence, with no failures or accepted deviations.
+
+This milestone intentionally has no `plan.md` or `tasks.md`. Its living spec and
+qualified implementation/test links are the maintained verification contract;
+the release history is retained in Git and `CHANGELOG.md` without leaving a
+one-time plan in active AI context.
+
 ### R1 — Document lifecycle foundation (released in v0.37.0)
 
 Give specifications and planning documents an explicit end of life.

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/cli/commands/specs.mjs

@@ -57,7 +57,10 @@ function archiveReadiness(spec, targetVerified = false) {
 }
 
 function completionTransition(spec) {
-  if (spec?.reviewed.lifecycle.delivery === 'verified') return 'verified→verified';
+  if (spec?.reviewed.lifecycle.persistenceModel === 'living'
+    && ['verified', 'released'].includes(spec.reviewed.lifecycle.delivery)) {
+    return `${spec.reviewed.lifecycle.delivery}→${spec.reviewed.lifecycle.delivery}`;
+  }
   return spec?.reviewed.lifecycle.delivery === 'in_progress'
     ? 'in_progress→implemented→verified'
     : 'implemented→verified';
@@ -77,14 +80,22 @@ export function planSpecCompletion(projectDir, config, flags, options = {}) {
 
   let reconcile = null;
   if (spec) {
-    const maintenance = spec.reviewed.lifecycle.delivery === 'verified'
+    const maintenance = ['verified', 'released'].includes(spec.reviewed.lifecycle.delivery)
       && spec.reviewed.lifecycle.persistenceModel === 'living';
     if (spec.reviewed.lifecycle.approval !== 'approved') blockers.push({ code: 'SPC002', message: 'Only an approved spec can become verified.' });
     if (!['in_progress', 'implemented'].includes(spec.reviewed.lifecycle.delivery) && !maintenance) {
       blockers.push({ code: 'SPC002', message: `Expected delivery=in_progress, implemented, or verified with persistenceModel=living; found ${spec.reviewed.lifecycle.delivery}/${spec.reviewed.lifecycle.persistenceModel || 'unset'}.` });
     }
     const tasks = spec.observed.taskCompletion;
-    if (!tasks.total || tasks.checked !== tasks.total) blockers.push({ code: 'SPC003', message: `All tasks must be checked (${tasks.checked}/${tasks.total}).` });
+    const hasTaskLedger = spec.observed.artifacts.some(artifact => /(?:^|\/)tasks\.md$/i.test(artifact.path));
+    if (hasTaskLedger && (!tasks.total || tasks.checked !== tasks.total)) {
+      blockers.push({ code: 'SPC003', message: `All declared tasks must be checked (${tasks.checked}/${tasks.total}).` });
+    } else if (!hasTaskLedger && spec.reviewed.lifecycle.persistenceModel !== 'living') {
+      blockers.push({
+        code: 'SPC003',
+        message: 'Completion requires a task ledger unless the approved spec is a living verification contract with qualified evidence for every requirement.',
+      });
+    }
     if (spec.observed.implementationEvidence.length === 0) blockers.push({ code: 'SPC004', message: 'At least one qualified source implementation annotation is required.' });
     if (spec.observed.testEvidence.length === 0) blockers.push({ code: 'SPC004', message: 'At least one qualified test annotation is required.' });
     const covered = new Set([...spec.observed.implementationEvidence, ...spec.observed.testEvidence].map(item => item.requirementId));
@@ -162,7 +173,7 @@ export function completeSpec(projectDir, config, flags, options = {}) {
     successor: flags.successor || null,
   };
   const specContent = appendImplementationOutcome(readFileSync(specPath, 'utf8'), outcome);
-  spec.reviewed.lifecycle.delivery = 'verified';
+  if (spec.reviewed.lifecycle.delivery !== 'released') spec.reviewed.lifecycle.delivery = 'verified';
   spec.reviewed.reconciliation.lastReviewedRevision = plan.revision;
   spec.reviewed.reconciliation.outcomes = [...spec.reviewed.reconciliation.outcomes, outcome].slice(-20);
   const artifact = spec.observed.artifacts.find(item => item.path === spec.path);

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/docs-canonical/ARCHITECTURE.md

@@ -222,4 +222,4 @@ Requirement definitions are identified by immutable spec ID plus requirement ID
 
 Validation, `trace --features`, and the spec registry share definition parsing and reference resolution. A qualified reference credits only its target document. Ambiguous bare references credit neither feature and produce a review finding for each unresolved definition. A wrong qualifier is an orphan reference and never falls back to a bare match. Registry completion evidence always requires an explicit spec ID or exact path qualifier, even when a bare ID is currently unique. Repeated mentions within one document do not create additional identities. Linkage remains evidence of a declaration, not proof of behavioral correctness.
 
-Completion also supports reviewed maintenance of a verified living spec. It reconciles from the prior reviewed revision and appends a `verified → verified` outcome when a linked source, test, canonical document, or decision changed. Eligibility comes exclusively from those reviewable changes; generated registry, active-context, and implementation-outcome updates are excluded.
+Completion also supports reviewed maintenance of a verified or released living spec. It reconciles from the prior reviewed revision and appends a status-preserving outcome when a linked source, test, canonical document, or decision changed. Eligibility comes exclusively from those reviewable changes; generated registry, active-context, and implementation-outcome updates are excluded.

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/docs-canonical/CI-RECIPES.md

@@ -99,11 +99,12 @@ matching reminders as superseded.
 Run `docguard reconcile --since <merge-base> --format json` when implementation
 may have changed approved behavior outside the original Spec Kit flow. Review
 unsupported files and intent-change classifications; write mode can refresh only
-DocGuard-owned mechanical sections. After tasks, source and test evidence, and
-affected canonical docs are reviewed, run `docguard specs complete --id <spec-id>
+DocGuard-owned mechanical sections. After declared tasks, source and test
+evidence, and affected canonical docs are reviewed, run `docguard specs complete --id <spec-id>
 --since <merge-base> --check` as the merge gate. Apply the same command with
 `--write --reason "<reviewed outcome>"` on a clean controlled checkout to record
-verification. Keep living specs current; archive only when the registry reports
+verification. A taskless living verification contract is eligible only when every
+requirement has qualified evidence. Keep living specs current; archive only when the registry reports
 that the selected persistence model is ready.
 
 ## Recipe 4 — Score (track CDD maturity over time)

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/docs-canonical/DATA-MODEL.md

@@ -151,16 +151,20 @@ duplicate identities, and archive/storage contradictions fail closed. The
 output omits timestamps and sorts unordered collections, so `specs --check`
 can compare a byte-stable result in CI.
 
-`docguard specs complete` requires a clean Git revision, checked tasks, coverage
-for every requirement through qualified implementation or test evidence,
-existing affected canonical documents, a supported reconciliation plan, and a
-guard result without errors. Its staged transaction updates the bounded outcome,
+`docguard specs complete` requires a clean Git revision, coverage for every
+requirement through qualified implementation or test evidence, existing affected
+canonical documents, a supported reconciliation plan, and a guard result without
+errors. Declared task ledgers must be non-empty and fully checked. An approved
+`living` verification contract may omit the task ledger because its qualified
+requirement evidence is the durable completion proof; other persistence models
+still require one. Its staged transaction updates the bounded outcome,
 registry, feature-spec outcome index, and `.docguard/current-context.json` as one
 validated set. The context file contains pointers and content hashes rather than
-copying governing prose, and excludes every retired spec. A verified living spec
-can append a maintenance outcome at `verified → verified` only when a new linked
-source, test, canonical document, or decision changed after the last reviewed
-revision. Generated registry and outcome updates do not satisfy that gate.
+copying governing prose, and excludes every retired spec. A verified or released
+living spec can append a status-preserving maintenance outcome only when a new
+linked source, test, canonical document, or decision changed after the last
+reviewed revision. Generated registry and outcome updates do not satisfy that
+gate.
 
 ## Task Context Packet
 

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/extensions/spec-kit-docguard/extension.yml

@@ -3,7 +3,7 @@ schema_version: "1.0"
 extension:
   id: "docguard"
   name: "DocGuard — CDD Enforcement"
-  version: "0.41.0"
+  version: "0.41.2"
   description: "Documentation integrity for AI-assisted repositories: lifecycle registry, drift validation, traceability, safe archival, SARIF/JUnit, MCP, GitHub Actions, and Spec Kit hooks."
   author: "Ricardo Accioly"
   repository: "https://github.com/raccioly/docguard"

{docguard_cli-0.41.0 → docguard_cli-0.41.2}/extensions/spec-kit-docguard/skills/docguard-fix/SKILL.md

@@ -6,10 +6,10 @@ description: AI-driven documentation repair with structured research workflow, t
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.41.0
+  version: 0.41.2
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
-<!-- docguard:version: 0.41.0 -->
+<!-- docguard:version: 0.41.2 -->
 
 # DocGuard Fix Skill
 

{docguard_cli-0.41.0/.agent → docguard_cli-0.41.2/extensions/spec-kit-docguard}/skills/docguard-guard/SKILL.md

@@ -7,10 +7,10 @@ description: Run DocGuard guard validation against Canonical-Driven Development
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.41.0
+  version: 0.41.2
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
-<!-- docguard:version: 0.41.0 -->
+<!-- docguard:version: 0.41.2 -->
 
 # DocGuard Guard Skill
 

{docguard_cli-0.41.0/.agent → docguard_cli-0.41.2/extensions/spec-kit-docguard}/skills/docguard-review/SKILL.md

@@ -6,10 +6,10 @@ description: Cross-document consistency analysis and quality assessment. Perform
 compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli or npx docguard-cli)
 metadata:
   author: docguard
-  version: 0.41.0
+  version: 0.41.2
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
-<!-- docguard:version: 0.41.0 -->
+<!-- docguard:version: 0.41.2 -->
 
 # DocGuard Review Skill