docguard-cli 0.44.1__tar.gz → 0.44.2__tar.gz

{docguard_cli-0.44.1 → docguard_cli-0.44.2/.agent}/commands/docguard.fix.md

@@ -16,7 +16,7 @@ You are an AI agent responsible for maintaining documentation quality using DocG
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## Step 1: Mechanical fixes first (no AI judgment needed)

{docguard_cli-0.44.1 → docguard_cli-0.44.2}/.agent/commands/docguard.guard.md

@@ -16,7 +16,7 @@ You are an AI agent enforcing Canonical-Driven Development (CDD) compliance usin
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## Step 1: Run Guard (machine-readable)

{docguard_cli-0.44.1 → docguard_cli-0.44.2/.agent}/commands/docguard.review.md

@@ -16,7 +16,7 @@ You are an AI agent reviewing documentation quality and detecting drift between
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## Step 1: Run Diagnostics

{docguard_cli-0.44.1 → docguard_cli-0.44.2}/.agent/commands/docguard.score.md

@@ -19,7 +19,7 @@ Calculate and display the project's Canonical-Driven Development maturity score
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## What to do

{docguard_cli-0.44.1 → docguard_cli-0.44.2}/.agent/skills/docguard-fix/SKILL.md

@@ -3,20 +3,20 @@ name: docguard-fix
 description: AI-driven documentation repair with structured research workflow, template-aware
   generation, and quality validation loops. Generates or fixes canonical documentation
   by researching the actual codebase, not using placeholders. Iterates until guard passes.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.1)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
 metadata:
   author: docguard
-  version: 0.44.1
+  version: 0.44.2
   source: extensions/spec-kit-docguard/skills/docguard-fix
 ---
-<!-- docguard:version: 0.44.1 -->
+<!-- docguard:version: 0.44.2 -->
 
 # DocGuard Fix Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.1/extensions/spec-kit-docguard → docguard_cli-0.44.2/.agent}/skills/docguard-guard/SKILL.md

@@ -4,20 +4,20 @@ description: Run DocGuard guard validation against Canonical-Driven Development
   Parses output, triages severity, suggests targeted fixes, and optionally chains to
   docguard-fix for automated remediation. Use as a quality gate before commits or after
   implementation phases.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.1)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
 metadata:
   author: docguard
-  version: 0.44.1
+  version: 0.44.2
   source: extensions/spec-kit-docguard/skills/docguard-guard
 ---
-<!-- docguard:version: 0.44.1 -->
+<!-- docguard:version: 0.44.2 -->
 
 # DocGuard Guard Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.1 → docguard_cli-0.44.2}/.agent/skills/docguard-review/SKILL.md

@@ -3,20 +3,20 @@ name: docguard-review
 description: Cross-document consistency analysis and quality assessment. Performs read-only
   analysis across all canonical docs, identifies drift, coverage gaps, and quality issues.
   Produces a structured report with severity-ranked findings. Modeled after speckit-analyze.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.1)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
 metadata:
   author: docguard
-  version: 0.44.1
+  version: 0.44.2
   source: extensions/spec-kit-docguard/skills/docguard-review
 ---
-<!-- docguard:version: 0.44.1 -->
+<!-- docguard:version: 0.44.2 -->
 
 # DocGuard Review Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.1 → docguard_cli-0.44.2}/.agent/skills/docguard-score/SKILL.md

@@ -3,20 +3,20 @@ name: docguard-score
 description: CDD maturity assessment with category-aware improvement roadmap. Runs scoring
   engine, analyzes category breakdown, identifies highest-impact improvements, and
   generates a before/after improvement plan with projected score gains.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.1)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
 metadata:
   author: docguard
-  version: 0.44.1
+  version: 0.44.2
   source: extensions/spec-kit-docguard/skills/docguard-score
 ---
-<!-- docguard:version: 0.44.1 -->
+<!-- docguard:version: 0.44.2 -->
 
 # DocGuard Score Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.1 → docguard_cli-0.44.2}/.agent/skills/docguard-sync/SKILL.md

@@ -1,20 +1,20 @@
 ---
 name: docguard-sync
 description: Keep canonical documentation ALWAYS UP TO DATE. Refreshes code-truth doc sections in place (mechanical, idempotent, preserves human prose) and flags the prose sections you must review when code changes.
-compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.1)
+compatibility: Requires DocGuard CLI installed (npm i -g docguard-cli, or npx --yes docguard-cli@0.44.2)
 metadata:
   author: docguard
-  version: 0.44.1
+  version: 0.44.2
   source: extensions/spec-kit-docguard/skills/docguard-sync
 ---
-<!-- docguard:version: 0.44.1 -->
+<!-- docguard:version: 0.44.2 -->
 
 # DocGuard Sync Skill
 
 ## Running DocGuard
 
 Run `docguard` from PATH when it is installed. Otherwise run
-`npx --yes docguard-cli@0.44.1`, the release these instructions ship with, in its
+`npx --yes docguard-cli@0.44.2`, the release these instructions ship with, in its
 place. Every `docguard …` command below means one of the two.
 
 ## User Input

{docguard_cli-0.44.1 → docguard_cli-0.44.2}/.docguard-specs.json

@@ -5540,7 +5540,7 @@
       "reviewed": {
         "lifecycle": {
           "approval": "approved",
-          "delivery": "implemented",
+          "delivery": "verified",
           "context": "current",
           "retirementReason": null,
           "storage": "working_tree",
@@ -5563,8 +5563,28 @@
           ]
         },
         "reconciliation": {
-          "lastReviewedRevision": null,
-          "outcomes": []
+          "lastReviewedRevision": "bc28a68109745855fd96156f822f490706864f61",
+          "outcomes": [
+            {
+              "revision": "bc28a68109745855fd96156f822f490706864f61",
+              "reason": "Reviewed at main after #545 and #551: hooks, setup and upgrade --pr refuse or roll back as specified; tests/hooks-repo-scope.test.mjs passes under a real failing global core.hooksPath, the full suite passes on Node 18-24 and in the hostile-config CI job, and the peer session confirmed hooks/--force leave a global folder untouched. Deviations: none.",
+              "evidence": [
+                "cli/commands/hooks.mjs",
+                "cli/commands/setup.mjs",
+                "cli/commands/upgrade.mjs",
+                "cli/shared-git.mjs",
+                "docs-canonical/ARCHITECTURE.md",
+                "docs-canonical/REQUIREMENTS.md",
+                "tests/field-report-followups.test.mjs",
+                "tests/hook-fail-open.test.mjs",
+                "tests/hooks-contract.test.mjs",
+                "tests/hooks-repo-scope.test.mjs",
+                "tests/hooks.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            }
+          ]
         }
       },
       "intent": {
@@ -5583,7 +5603,7 @@
         "artifacts": [
           {
             "path": "specs/065-hooks-repo-scope/spec.md",
-            "digest": "sha256:b5dad772f702b8a8ad068762dfd95db11c709f4853472c9d40325a906c3b57a3"
+            "digest": "sha256:521fe4a9e9d70515e2d99227da44481227f62352b202db4b7aed4ab632f2a303"
           },
           {
             "path": "specs/065-hooks-repo-scope/plan.md",
@@ -6909,7 +6929,7 @@
       "reviewed": {
         "lifecycle": {
           "approval": "approved",
-          "delivery": "implemented",
+          "delivery": "verified",
           "context": "current",
           "retirementReason": null,
           "storage": "working_tree",
@@ -6931,8 +6951,26 @@
           ]
         },
         "reconciliation": {
-          "lastReviewedRevision": null,
-          "outcomes": []
+          "lastReviewedRevision": "bc28a68109745855fd96156f822f490706864f61",
+          "outcomes": [
+            {
+              "revision": "bc28a68109745855fd96156f822f490706864f61",
+              "reason": "Reviewed at main after #547: auto-merge admits only 1-10 added tests/<name>.test.mjs files at the verified head; triage, preflight and the three routines are tested (tests/jules-policy.test.mjs); the Jules UI now runs .jules/setup.sh (snapshot green) and the three routines are active; the removal of .jules-setup.sh is attributed by spec 069. Deviations: test-only Jules PRs merge without a CHANGELOG entry, as recorded in the plan.",
+              "evidence": [
+                ".github/scripts/jules-policy.mjs",
+                ".github/scripts/jules-triage.mjs",
+                ".github/workflows/auto-merge.yml",
+                ".github/workflows/jules-triage.yml",
+                ".jules/preflight.mjs",
+                ".jules/setup.sh",
+                "docs-canonical/ARCHITECTURE.md",
+                "docs-canonical/TEST-SPEC.md",
+                "tests/jules-policy.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            }
+          ]
         }
       },
       "intent": {
@@ -6958,7 +6996,7 @@
         "artifacts": [
           {
             "path": "specs/067-jules-policy/spec.md",
-            "digest": "sha256:2fca2cc6f2bb155fa2c0bce1ad55ba0374395ba71aee4c9e7edf8e9284ad5c3b"
+            "digest": "sha256:d5f588dbb16edb417c7ee9d0bb9f6c6915c6561b5edb1c7aecef2d37ba93720c"
           },
           {
             "path": "specs/067-jules-policy/plan.md",
@@ -8397,7 +8435,7 @@
           {
             "requirementId": "FR-004",
             "file": ".github/workflows/ci.yml",
-            "line": 287
+            "line": 290
           },
           {
             "requirementId": "FR-004",
@@ -10538,6 +10576,191 @@
         ]
       }
     },
+    {
+      "specId": "docguard.release-least-privilege",
+      "path": "specs/068-release-least-privilege/spec.md",
+      "reviewed": {
+        "lifecycle": {
+          "approval": "approved",
+          "delivery": "verified",
+          "context": "current",
+          "retirementReason": null,
+          "storage": "working_tree",
+          "persistenceModel": "living"
+        },
+        "relations": {
+          "extends": [
+            "docguard.jules-policy",
+            "docguard.release-dispatch-window",
+            "docguard.release-readiness",
+            "docguard.tokenless-scheduled-releases"
+          ],
+          "duplicates": [],
+          "conflictsWith": [],
+          "supersedes": [],
+          "supersededBy": []
+        },
+        "scope": {
+          "canonicalDocs": [
+            "docs-canonical/CI-RECIPES.md",
+            "docs-canonical/SECURITY.md",
+            "docs-canonical/TEST-SPEC.md"
+          ]
+        },
+        "reconciliation": {
+          "lastReviewedRevision": "bc28a68109745855fd96156f822f490706864f61",
+          "outcomes": [
+            {
+              "revision": "bc28a68109745855fd96156f822f490706864f61",
+              "reason": "Reviewed at main after #549: every workflow defaults to contents: read; no job runs tests, package managers or build tools beside a repository write token (tests/workflow-permissions.test.mjs, 0 violations, 16 before); the scheduled cut/verify/open-pr split was replayed locally to an identical 44-file commit. Deviations: none; the next release run is the end-to-end check.",
+              "evidence": [
+                ".github/workflows/release.yml",
+                ".github/workflows/scheduled-release.yml",
+                "docs-canonical/CI-RECIPES.md",
+                "docs-canonical/SECURITY.md",
+                "docs-canonical/TEST-SPEC.md",
+                "tests/workflow-permissions.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            }
+          ]
+        }
+      },
+      "intent": {
+        "requirements": [
+          "docguard.release-least-privilege#FR-001",
+          "docguard.release-least-privilege#FR-002",
+          "docguard.release-least-privilege#FR-003",
+          "docguard.release-least-privilege#FR-004",
+          "docguard.release-least-privilege#FR-005",
+          "docguard.release-least-privilege#FR-006",
+          "docguard.release-least-privilege#FR-007",
+          "docguard.release-least-privilege#FR-008",
+          "docguard.release-least-privilege#SC-001",
+          "docguard.release-least-privilege#SC-002"
+        ]
+      },
+      "observed": {
+        "artifacts": [
+          {
+            "path": "specs/068-release-least-privilege/spec.md",
+            "digest": "sha256:00a7611511222e6de599de68473da44cc8e3a43f8eced4449ccdd022cc968ae2"
+          },
+          {
+            "path": "specs/068-release-least-privilege/plan.md",
+            "digest": "sha256:d19c8888dc00e19d6d53d7d5d9357b23329ea81fcf1dbaf5bf5c89c2f9e66480"
+          },
+          {
+            "path": "specs/068-release-least-privilege/tasks.md",
+            "digest": "sha256:6dbe278792a336a2d7cf9b8eb73de0b92f29056968b44f4000d2c83d6d6fb586"
+          }
+        ],
+        "taskCompletion": {
+          "checked": 6,
+          "total": 6
+        },
+        "implementationEvidence": [
+          {
+            "requirementId": "FR-001",
+            "file": ".github/workflows/release.yml",
+            "line": 25
+          },
+          {
+            "requirementId": "FR-001",
+            "file": ".github/workflows/scheduled-release.yml",
+            "line": 43
+          },
+          {
+            "requirementId": "FR-002",
+            "file": ".github/workflows/release.yml",
+            "line": 93
+          },
+          {
+            "requirementId": "FR-004",
+            "file": ".github/workflows/release.yml",
+            "line": 181
+          },
+          {
+            "requirementId": "FR-004",
+            "file": ".github/workflows/release.yml",
+            "line": 277
+          },
+          {
+            "requirementId": "FR-004",
+            "file": ".github/workflows/release.yml",
+            "line": 312
+          },
+          {
+            "requirementId": "FR-004",
+            "file": ".github/workflows/release.yml",
+            "line": 491
+          },
+          {
+            "requirementId": "FR-005",
+            "file": ".github/workflows/scheduled-release.yml",
+            "line": 44
+          },
+          {
+            "requirementId": "FR-006",
+            "file": ".github/workflows/release.yml",
+            "line": 240
+          }
+        ],
+        "testEvidence": [
+          {
+            "requirementId": "FR-001",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 9
+          },
+          {
+            "requirementId": "FR-002",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 10
+          },
+          {
+            "requirementId": "FR-003",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 11
+          },
+          {
+            "requirementId": "FR-004",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 12
+          },
+          {
+            "requirementId": "FR-005",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 13
+          },
+          {
+            "requirementId": "FR-006",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 14
+          },
+          {
+            "requirementId": "FR-007",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 15
+          },
+          {
+            "requirementId": "FR-008",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 16
+          },
+          {
+            "requirementId": "SC-001",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 17
+          },
+          {
+            "requirementId": "SC-002",
+            "file": "tests/workflow-permissions.test.mjs",
+            "line": 18
+          }
+        ]
+      }
+    },
     {
       "specId": "docguard.release-readiness",
       "path": "specs/026-release-readiness/spec.md",
@@ -10637,7 +10860,7 @@
           {
             "requirementId": "FR-002",
             "file": ".github/workflows/scheduled-release.yml",
-            "line": 124
+            "line": 140
           },
           {
             "requirementId": "FR-003",
@@ -10667,12 +10890,12 @@
           {
             "requirementId": "FR-004",
             "file": ".github/workflows/release.yml",
-            "line": 66
+            "line": 72
           },
           {
             "requirementId": "FR-004",
             "file": ".github/workflows/release.yml",
-            "line": 284
+            "line": 344
           },
           {
             "requirementId": "FR-005",
@@ -10729,6 +10952,130 @@
         ]
       }
     },
+    {
+      "specId": "docguard.removed-file-attribution",
+      "path": "specs/069-removed-file-attribution/spec.md",
+      "reviewed": {
+        "lifecycle": {
+          "approval": "approved",
+          "delivery": "verified",
+          "context": "current",
+          "retirementReason": null,
+          "storage": "working_tree",
+          "persistenceModel": "living"
+        },
+        "relations": {
+          "extends": [
+            "docguard.asset-path-attribution",
+            "docguard.document-lifecycle"
+          ],
+          "duplicates": [],
+          "conflictsWith": [],
+          "supersedes": [],
+          "supersededBy": []
+        },
+        "scope": {
+          "canonicalDocs": [
+            "docs-canonical/ARCHITECTURE.md"
+          ]
+        },
+        "reconciliation": {
+          "lastReviewedRevision": "bc28a68109745855fd96156f822f490706864f61",
+          "outcomes": [
+            {
+              "revision": "bc28a68109745855fd96156f822f490706864f61",
+              "reason": "Reviewed at main after #552: a deleted file links only to a current, approved spec naming its exact path or a fully removed directory; modified, re-added, near-miss and draft-spec cases stay unresolved (tests/removed-file-attribution.test.mjs); specs 065-068 completed with it. Deviations: none.",
+              "evidence": [
+                "cli/scanners/reconciliation.mjs",
+                "docs-canonical/ARCHITECTURE.md",
+                "tests/removed-file-attribution.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            }
+          ]
+        }
+      },
+      "intent": {
+        "requirements": [
+          "docguard.removed-file-attribution#FR-001",
+          "docguard.removed-file-attribution#FR-002",
+          "docguard.removed-file-attribution#FR-003",
+          "docguard.removed-file-attribution#FR-004",
+          "docguard.removed-file-attribution#SC-001",
+          "docguard.removed-file-attribution#SC-002"
+        ]
+      },
+      "observed": {
+        "artifacts": [
+          {
+            "path": "specs/069-removed-file-attribution/spec.md",
+            "digest": "sha256:30b57c6765a4f7ae83b370e1768d3ac078e3c4ea9f96d177daabf5ec1cd5389a"
+          },
+          {
+            "path": "specs/069-removed-file-attribution/plan.md",
+            "digest": "sha256:bd8b28694b896971e4411dbcf370d31a6ba1efc380c9eaf7defb080ed71611eb"
+          },
+          {
+            "path": "specs/069-removed-file-attribution/tasks.md",
+            "digest": "sha256:4c397cad1384ec7ae27e792493ade44c16ae393ed9262cea433a60b43f9ad2b6"
+          }
+        ],
+        "taskCompletion": {
+          "checked": 3,
+          "total": 3
+        },
+        "implementationEvidence": [
+          {
+            "requirementId": "FR-001",
+            "file": "cli/scanners/reconciliation.mjs",
+            "line": 9
+          },
+          {
+            "requirementId": "FR-002",
+            "file": "cli/scanners/reconciliation.mjs",
+            "line": 10
+          },
+          {
+            "requirementId": "FR-003",
+            "file": "cli/scanners/reconciliation.mjs",
+            "line": 11
+          }
+        ],
+        "testEvidence": [
+          {
+            "requirementId": "FR-001",
+            "file": "tests/removed-file-attribution.test.mjs",
+            "line": 5
+          },
+          {
+            "requirementId": "FR-002",
+            "file": "tests/removed-file-attribution.test.mjs",
+            "line": 6
+          },
+          {
+            "requirementId": "FR-003",
+            "file": "tests/removed-file-attribution.test.mjs",
+            "line": 7
+          },
+          {
+            "requirementId": "FR-004",
+            "file": "tests/removed-file-attribution.test.mjs",
+            "line": 8
+          },
+          {
+            "requirementId": "SC-001",
+            "file": "tests/removed-file-attribution.test.mjs",
+            "line": 9
+          },
+          {
+            "requirementId": "SC-002",
+            "file": "tests/removed-file-attribution.test.mjs",
+            "line": 10
+          }
+        ]
+      }
+    },
     {
       "specId": "docguard.spec-first-gate",
       "path": "specs/015-spec-first-gate/spec.md",
@@ -12338,7 +12685,7 @@
       "reviewed": {
         "lifecycle": {
           "approval": "approved",
-          "delivery": "implemented",
+          "delivery": "verified",
           "context": "current",
           "retirementReason": null,
           "storage": "working_tree",
@@ -12359,8 +12706,22 @@
           ]
         },
         "reconciliation": {
-          "lastReviewedRevision": null,
-          "outcomes": []
+          "lastReviewedRevision": "bc28a68109745855fd96156f822f490706864f61",
+          "outcomes": [
+            {
+              "revision": "bc28a68109745855fd96156f822f490706864f61",
+              "reason": "Reviewed at main after #546 and #551: npm test passes under the hostile global git config (0 of 3,310 failing, down from 189) and normally; the CI hermeticity job proves the config bites before running the suite; docguard demo commits past global hooks. The 31 converted tests carry a reconciliation-only @implements reference. Deviations: none.",
+              "evidence": [
+                ".github/workflows/ci.yml",
+                "benchmarks/agent-context/run.mjs",
+                "cli/commands/demo.mjs",
+                "docs-canonical/TEST-SPEC.md",
+                "tests/test-git-hermeticity.test.mjs"
+              ],
+              "deviations": [],
+              "successor": null
+            }
+          ]
         }
       },
       "intent": {
@@ -12381,7 +12742,7 @@
         "artifacts": [
           {
             "path": "specs/066-test-git-hermeticity/spec.md",
-            "digest": "sha256:edca5c329d61332aabd17c639038b31bcf7968582370e2ce8babb015be7ef5a3"
+            "digest": "sha256:ed5321c7c7f4647102a6755a6c956f75b47d1932885c0fc1fc31909f32f86574"
           },
           {
             "path": "specs/066-test-git-hermeticity/plan.md",
@@ -12410,7 +12771,7 @@
           {
             "requirementId": "FR-006",
             "file": ".github/workflows/ci.yml",
-            "line": 205
+            "line": 206
           }
         ],
         "testEvidence": [