Merge origin/main into the docs-hygiene sweep branch

main landed a repo-wide behavior-preserving simplification sweep (#3379) across
203 files, which collided with this branch on 43 of them: one plugin.json and
one CHANGELOG.md for each of 23 plugins.

This conflict is why CI went quiet rather than red. GitHub schedules
pull_request workflows against the computed merge commit, and it could not
compute one, so ci, pr-title, claude-review and claude-security-review stopped
being created for the last two heads while the pull_request_target workflows
(do-not-merge, pr-issue-linkage) kept firing normally against the base. A
missing run reads exactly like a slow one, which is what made it worth chasing.

Every collision is the same shape. main took the next patch after the base
version for its sweep entry, and this branch had already used that same number
for a different change. Resolution rule: main's entry is released and keeps its
number; this branch's entries are unreleased and renumber above it, with the
manifest ending at the highest. So docs-hygiene's 0.21.12 through 0.21.16 become
0.21.13 through 0.21.17, main's 0.21.12 stays, and the manifest reads 0.21.17.

Resolved by script rather than by hand across 43 files, and the script refuses
rather than guesses: it requires main's new entries to be contiguous patches
sitting directly on the base version, and reports anything else for a human. It
refused three plugins on the first pass, correctly, because ai-briefing,
repo-fleet-hygiene and testing had both sides land on the same version number,
so their manifests never conflicted and the slice boundary cut inside our own
block. Anchoring that boundary on the base entry rather than on main's newest
fixed it, and all 23 then resolved.

Verified: no conflict markers anywhere in the tree, every one of the 23
manifests agrees with its changelog's top entry, both changelog gates pass
including the duplicate-version check that this collision would have tripped,
markdownlint clean at 1358 files, typos, editorconfig, the plugin-options gate,
plugin contracts across 3018 files, and the contract-slice prune gate.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01FTVH5ZRVph75kvxzUAnb6q

Author: claude

plugins/ai-briefing/CHANGELOG.md

@@ -3,7 +3,7 @@
 All notable changes to the `ai-briefing` plugin are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this plugin uses semantic versioning.
 
-## [0.7.9]
+## [0.7.10]
 
 ### Changed
 
@@ -25,6 +25,20 @@ All notable changes to the `ai-briefing` plugin are documented here. Format foll
   those were folded into `SKILL.md` before the file went, and the rest was already stated there.
   The `context/` directory held nothing else and was removed with it.
 
+## [0.7.9]
+
+### Changed
+
+- **Behavior-preserving simplification pass (repo-wide batch-simplify).** Removed the dead
+  `collectLinks()` helper from `output/build/lib/parse-briefing.js` (defined, never called);
+  removed a false sentence from `output/build/lib/emit-slides.js`'s `balanceTiers` doc comment
+  that described a nonexistent explicit-tier-marker override; deduplicated `output/build/validate.js`'s
+  twice-inlined render-settle and section-overflow-scan snippets into shared `settleRender` and
+  `collectSectionOverflows` helpers passed to `page.evaluate`, and corrected its stale
+  `Screenshots:` summary line to name the `section-*.png` / `responsive-*.png` files it actually
+  writes. No artifact bytes, exit codes, or contracts changed; suite 35/35 green, plus an
+  independent refutation pass with a live Playwright smoke of the serialized helpers.
+
 ## [0.7.8]
 
 ### Changed

plugins/ai-briefing/skills/generate/output/build/lib/emit-slides.js

@@ -272,8 +272,7 @@ function sortTiersByDate(normalized) {
 
 /** Mutate `normalized` to apply tier auto-balance:
  *   - HIGH > 7 → demote weakest (last) item to MED until HIGH ≤ 7
- *   - MED ≥ 5 AND HIGH < 3 → promote first MED item to HIGH until balance
- *   Authoring intent always wins for explicit tier markers in headlines (e.g. "[STATE: GA]"). */
+ *   - MED ≥ 5 AND HIGH < 3 → promote first MED item to HIGH until balance */
 function balanceTiers(normalized) {
   for (const bucket of Object.keys(normalized)) {
     const data = normalized[bucket];

plugins/ai-briefing/skills/generate/output/build/lib/parse-briefing.js

@@ -39,13 +39,6 @@ function flattenInline(nodes) {
   return out;
 }
 
-/** Collect all link nodes inside a subtree. */
-function collectLinks(node) {
-  const urls = [];
-  visit(node, "link", (n) => urls.push(n.url));
-  return urls;
-}
-
 function stripMetadataLabel(text, label) {
   return text.replace(new RegExp(`^${label}:\\s*`, "i"), "").trim();
 }

plugins/ai-briefing/skills/generate/output/build/validate.js

@@ -50,6 +50,24 @@ await fs.mkdir(SHOTS_DIR, { recursive: true });
 
 const issues = { blocking: [], warnings: [] };
 
+// Runs inside the page: settle web fonts + two rAFs so layout is stable.
+const settleRender = async () => {
+  await document.fonts.ready;
+  await new Promise((resolve) =>
+    requestAnimationFrame(() => requestAnimationFrame(resolve)),
+  );
+};
+
+// Runs inside the page: sections with horizontal overflow.
+// Skips decorative orb-overflow sections (open, qa) — orb gradients are intentionally
+// transform-translated past edges; overflow:hidden clips them visually but scrollWidth
+// still reports the layout extent. Pure cosmetic, no scrollbar appears.
+const collectSectionOverflows = () =>
+  [...document.querySelectorAll("main#deck > section.section")]
+    .filter((s) => !["open", "qa"].includes(s.id))
+    .filter((s) => s.scrollWidth > s.clientWidth + 4)
+    .map((s) => ({ id: s.id, sw: s.scrollWidth, cw: s.clientWidth }));
+
 // ────────────────────────────────────────────────────────────────────
 // Gate 1: Zod schema
 // ────────────────────────────────────────────────────────────────────
@@ -81,12 +99,7 @@ await page.route(/^https?:\/\//, (route) => {
 
 await page.goto(pathToFileURL(HTML).href, { waitUntil: "load" });
 await page.waitForSelector("main#deck");
-await page.evaluate(async () => {
-  await document.fonts.ready;
-  await new Promise((resolve) =>
-    requestAnimationFrame(() => requestAnimationFrame(resolve)),
-  );
-});
+await page.evaluate(settleRender);
 
 // Section-based audit (sectioned-scroll deck). One screenshot per <section>.
 // Page-wide URL/headline coverage check (vs old per-slide approach).
@@ -113,15 +126,9 @@ const pageData = await page.evaluate(() => {
   return {
     urls: Array.from(document.querySelectorAll(".news-url")).map((a) => a.href),
     headlines: Array.from(document.querySelectorAll(".news-headline, .flair-headline, .pattern-headline")).map((s) => s.innerText.trim()),
-    // Skip decorative orb-overflow sections (open, qa) — orb gradients are intentionally
-    // transform-translated past edges; overflow:hidden clips them visually but scrollWidth
-    // still reports the layout extent. Pure cosmetic, no scrollbar appears.
-    sectionOverflows: [...document.querySelectorAll("main#deck > section.section")]
-      .filter((s) => !["open", "qa"].includes(s.id))
-      .filter((s) => s.scrollWidth > s.clientWidth + 4)
-      .map((s) => ({ id: s.id, sw: s.scrollWidth, cw: s.clientWidth })),
   };
 });
+pageData.sectionOverflows = await page.evaluate(collectSectionOverflows);
 
 await browser.close();
 
@@ -263,20 +270,10 @@ try {
     await p2.goto(pathToFileURL(HTML).href, { waitUntil: "load" });
     await p2.waitForSelector("main#deck");
     await p2.evaluate((z) => { document.documentElement.style.zoom = String(z); }, m.zoom);
-    await p2.evaluate(async () => {
-      await document.fonts.ready;
-      await new Promise((resolve) =>
-        requestAnimationFrame(() => requestAnimationFrame(resolve)),
-      );
-    });
+    await p2.evaluate(settleRender);
 
     // Per-section overflow check
-    const overflows = await p2.evaluate(() => {
-      return [...document.querySelectorAll("main#deck > section.section")]
-        .filter((s) => !["open", "qa"].includes(s.id))
-        .filter((s) => s.scrollWidth > s.clientWidth + 4)
-        .map((s) => ({ id: s.id, sw: s.scrollWidth, cw: s.clientWidth }));
-    });
+    const overflows = await p2.evaluate(collectSectionOverflows);
 
     // Single full-page screenshot per matrix combo (decks can be long; cap height)
     const shotPath = path.join(SHOTS_DIR, `responsive-${m.name}.png`);
@@ -328,7 +325,7 @@ issues.blocking.forEach((m) => console.log(`    ✗ ${m}`));
 console.log(`  Warnings:        ${issues.warnings.length}`);
 issues.warnings.forEach((m) => console.log(`    ⚠ ${m}`));
 console.log(`  Audit JSON:      ${path.join(SHOTS_DIR, "audit.json")}`);
-console.log(`  Screenshots:     ${SHOTS_DIR}/slide-*.png`);
+console.log(`  Screenshots:     ${SHOTS_DIR}/section-*.png + responsive-*.png`);
 
 if (issues.blocking.length) {
   console.log(`\n✗ VALIDATION FAILED — blocking issues present.`);

plugins/autonomy/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "autonomy",
-  "version": "0.22.11",
+  "version": "0.22.12",
   "description": "Governed autonomous agent operation: role-topology, binding-seam, wiring-vs-advisor, telemetry, return-accounting, trigger-dispatch, per-work-class guardrail-matrix, standing-routine-catalog, and design-only runner-charter contracts for climbing the AI-adoption ladder, plus a guided-setup skill that discovers an adopting org's state, writes its schema-versioned binding, wires standards-pinned OTLP emission with a zero-cost file-artifact default, wires human-attested return capture at the task boundary, wires signal adapters with one governed dispatch entrypoint, binds the five-class guardrail matrix to an org's isolation substrates with an in-boundary live-validation probe before recording each fail-closed binding, and stands up standing-routine-catalog classes as scheduled temporal signal adapters behind the one governed queue with free scheduling defaults wired as reviewable changes and each routine's work-class mapping homed on the security surface.",
   "author": {
     "name": "Melodic Software",
@@ -25,7 +25,7 @@
     "lane_stop_gate_enabled": {
       "type": "boolean",
       "title": "lane-stop gate",
-      "description": "Opt an autonomous lane into the deterministic Stop-hook completion gate. Default OFF — a Stop-blocking hook must never engage for an interactive session. Honored from user or managed settings only (the gate reads those files itself); per-session lanes are armed by the claude-ops lane launcher instead. The env mirror is never authority (#1784).",
+      "description": "Opt an autonomous lane into the deterministic Stop-hook completion gate. Default OFF \u2014 a Stop-blocking hook must never engage for an interactive session. Honored from user or managed settings only (the gate reads those files itself); per-session lanes are armed by the claude-ops lane launcher instead. The env mirror is never authority (#1784).",
       "default": false
     },
     "lane_stop_gate_sentinel": {
@@ -43,7 +43,7 @@
     "lane_stop_gate_arm_id": {
       "type": "string",
       "title": "lane-stop gate arm id (launcher-managed)",
-      "description": "Written by the lane launcher at launch: names this session's arm record in the plugin's own data directory (hooks/lane-stop-gate-arm.sh). A capability pointer, never authority by itself — the gate validates it, honors only a record in its install-derived store, and binds it to the first presenting session. Not set by hand.",
+      "description": "Written by the lane launcher at launch: names this session's arm record in the plugin's own data directory (hooks/lane-stop-gate-arm.sh). A capability pointer, never authority by itself \u2014 the gate validates it, honors only a record in its install-derived store, and binds it to the first presenting session. Not set by hand.",
       "default": ""
     },
     "lane_notify_enabled": {
@@ -67,13 +67,13 @@
     "verification_lens_pool": {
       "type": "string",
       "title": "verification lens pool",
-      "description": "Ordered, comma-separated pool of verification lenses the model-adjudicated checker slots draw from — one distinct lens per slot, in pool order. Tokens come from the closed vocabulary in the verification-topology contract leaf; an unrecognized token is recorded as unresolved and draws no lens, and a pool shorter than a class's model-adjudicated slot count leaves the remaining slots unlensed rather than repeating a lens. The pool contributes to no count: how many checkers a class runs, how they must differ, and whether one must be cross-vendor are floors on the org's security binding, outside this setting's reach.",
+      "description": "Ordered, comma-separated pool of verification lenses the model-adjudicated checker slots draw from \u2014 one distinct lens per slot, in pool order. Tokens come from the closed vocabulary in the verification-topology contract leaf; an unrecognized token is recorded as unresolved and draws no lens, and a pool shorter than a class's model-adjudicated slot count leaves the remaining slots unlensed rather than repeating a lens. The pool contributes to no count: how many checkers a class runs, how they must differ, and whether one must be cross-vendor are floors on the org's security binding, outside this setting's reach.",
       "default": "specification,adversarial,contract,regression,evidence"
     },
     "visual_narration_enabled": {
       "type": "boolean",
       "title": "advisory visual narration lane",
-      "description": "Run the advisory visual narration lane: strictly downstream of deterministic detection, it writes a plain-language account of a difference the deterministic layer already found and attaches it to the run record for the human gate. Advisory only — it emits no verdict, fills no checker slot, is counted by no floor, and never gates a transition; no cell anywhere names it as authority. Default OFF: it is inert without an upstream deterministic comparator, and each narrated artifact is a metered vision-model call.",
+      "description": "Run the advisory visual narration lane: strictly downstream of deterministic detection, it writes a plain-language account of a difference the deterministic layer already found and attaches it to the run record for the human gate. Advisory only \u2014 it emits no verdict, fills no checker slot, is counted by no floor, and never gates a transition; no cell anywhere names it as authority. Default OFF: it is inert without an upstream deterministic comparator, and each narrated artifact is a metered vision-model call.",
       "default": false
     }
   }

plugins/autonomy/CHANGELOG.md

@@ -3,7 +3,7 @@
 All notable changes to the `autonomy` plugin are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this plugin uses semantic versioning.
 
-## [0.22.11]
+## [0.22.12]
 
 ### Changed
 
@@ -14,7 +14,7 @@ All notable changes to the `autonomy` plugin are documented here. Format follows
   in-page anchors re-based for the extra directory level. Docs-hygiene sweep,
   L2-progressive-disclosure.
 
-## [0.22.10]
+## [0.22.11]
 
 ### Changed
 
@@ -24,7 +24,7 @@ All notable changes to the `autonomy` plugin are documented here. Format follows
   entry in this file already carries, and names the positive path instead: arm a lane through the
   launcher. Docs-hygiene sweep, L8-write-for-humans.
 
-## [0.22.9]
+## [0.22.10]
 
 ### Changed
 
@@ -33,6 +33,20 @@ All notable changes to the `autonomy` plugin are documented here. Format follows
   write-for-humans style rule that the phrase is just `to`. The generated options
   block in `README.md` regenerated with the shorter wording; no other change.
 
+## [0.22.9]
+
+### Changed
+
+- **Behavior-preserving simplification pass (repo-wide batch-simplify).** In
+  `skills/setup/scripts/resolve-prerequisites.mjs`, collapsed `probeMcp`'s presence ternary
+  (two object literals differing only in `result`) into one literal and removed the dead
+  `ran` key from `resolveNeed`'s return (its sole consumer projects fields explicitly, so
+  the key never reached output); in `apply-prerequisite-resolution.mjs`, hoisted the
+  twice-computed non-interactive check into one const; removed a stale comment in
+  `check-prerequisite-resolution-slice.test.sh`. Emitted JSON is byte-identical (56
+  old-vs-new differential runs across fixtures, surfaces, and synthetic `.mcp.json` repos);
+  suites green (22 + 4).
+
 ## [0.22.8]
 
 ### Changed

plugins/autonomy/skills/setup/scripts/apply-prerequisite-resolution.mjs

@@ -255,22 +255,22 @@ function main() {
     const proposals = proseProposals(args.repo);
     const orgStops = orgRungStops(check);
     const enablement = narrowingAdvice(check);
+    const nonInteractive = args.nonInteractive || !process.stdin.isTTY;
 
     const report = {
       schema_version: 1,
       action: "apply-propose",
-      non_interactive: args.nonInteractive || !process.stdin.isTTY,
+      non_interactive: nonInteractive,
       reconcile_findings: findings,
       prose_proposals: proposals,
       org_rung_stops: orgStops,
       enablement_advice: enablement,
       security_binding_writes: false,
-      assumptions:
-        args.nonInteractive || !process.stdin.isTTY
-          ? [
-              "non-interactive context: skipped ask-and-persist rungs; proposals reported as assumptions",
-            ]
-          : [],
+      assumptions: nonInteractive
+        ? [
+            "non-interactive context: skipped ask-and-persist rungs; proposals reported as assumptions",
+          ]
+        : [],
       note: "Human must ratify via --ratify --proposal; slice never auto-writes org-rung or security axes",
       check,
     };

plugins/autonomy/skills/setup/scripts/check-prerequisite-resolution-slice.test.sh

@@ -159,7 +159,6 @@ fs.writeFileSync(p, JSON.stringify(b, null, 2) + "\n");
 if node "$ENVELOPE" "$tmp/envelope.md" --binding "$tmp/repo/.claude/autonomy/binding.json" >/dev/null 2>"$tmp/env.err"; then
   ok "envelope: binding with prerequisite_resolution section passes"
 else
-  # Print for diagnosis but still allow known work_class-related failures?
   fail "envelope: $(cat "$tmp/env.err")"
 fi
 

plugins/autonomy/skills/setup/scripts/resolve-prerequisites.mjs

@@ -578,25 +578,15 @@ function probeMcp(repoRoot) {
     }
   }
   return {
-    presence: presence
-      ? {
-          result: "present",
-          ran: true,
-          provenance: {
-            kind: "probe",
-            probe_class: "harness-context",
-            path: ".mcp.json",
-          },
-        }
-      : {
-          result: "absent",
-          ran: true,
-          provenance: {
-            kind: "probe",
-            probe_class: "harness-context",
-            path: ".mcp.json",
-          },
-        },
+    presence: {
+      result: presence ? "present" : "absent",
+      ran: true,
+      provenance: {
+        kind: "probe",
+        probe_class: "harness-context",
+        path: ".mcp.json",
+      },
+    },
     enablement: {
       result: enablement.result,
       ran: enablement.ran,
@@ -817,7 +807,6 @@ function resolveNeed(need, identity, ctx) {
     need: need.id,
     probe_class: need.probe_class,
     result: effective,
-    ran: probe.ran,
     provenance,
     findings,
   };

plugins/claude-config/.claude-plugin/plugin.json

@@ -1,8 +1,8 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "claude-config",
-  "version": "0.40.5",
-  "description": "Nine configuration-health skills (plus setup) for a repo's Claude Code configuration: audit (settings.json / .mcp.json / hooks / plugins / permissions drift), audit-automation-gaps (evidence-gated verdicts on automation gaps), audit-permission-grants (allow-rule / allowed-tools grants for auto-mode durability and portability), audit-permission-state (the permission rules actually in effect — every settings scope merged with per-rule provenance, what auto mode drops on entry, config written where nothing reads it, and which managed intents are enforced versus loosenable), draft-auto-mode-rules (interview and draft a paste-ready autoMode classifier block; prints only, never writes), audit-instructions (locally-owned instruction surfaces vs current model capability — proposes removals/rewrites of instructions the model no longer needs, and detects cross-surface instruction conflicts), audit-prompting-postures (the additive lane — posture guidance the prompting guide says a component's purpose needs but the component does not carry), audit-pass (one coordinated, ordered, resumable pass over a named target — three-scope inventory, run-time-derived exclusion set, stable finding identity, suppression memory, resume, one human gate — delegating every check to the plugin that owns it), and unhobble (the empirical bare-baseline experiment: reversibly strip a repo's standing instructions, log real stumbles against the current model, re-add only what evidence earns).",
+  "version": "0.40.6",
+  "description": "Nine configuration-health skills (plus setup) for a repo's Claude Code configuration: audit (settings.json / .mcp.json / hooks / plugins / permissions drift), audit-automation-gaps (evidence-gated verdicts on automation gaps), audit-permission-grants (allow-rule / allowed-tools grants for auto-mode durability and portability), audit-permission-state (the permission rules actually in effect \u2014 every settings scope merged with per-rule provenance, what auto mode drops on entry, config written where nothing reads it, and which managed intents are enforced versus loosenable), draft-auto-mode-rules (interview and draft a paste-ready autoMode classifier block; prints only, never writes), audit-instructions (locally-owned instruction surfaces vs current model capability \u2014 proposes removals/rewrites of instructions the model no longer needs, and detects cross-surface instruction conflicts), audit-prompting-postures (the additive lane \u2014 posture guidance the prompting guide says a component's purpose needs but the component does not carry), audit-pass (one coordinated, ordered, resumable pass over a named target \u2014 three-scope inventory, run-time-derived exclusion set, stable finding identity, suppression memory, resume, one human gate \u2014 delegating every check to the plugin that owns it), and unhobble (the empirical bare-baseline experiment: reversibly strip a repo's standing instructions, log real stumbles against the current model, re-add only what evidence earns).",
   "author": {
     "name": "Melodic Software",
     "email": "info@melodicsoftware.com"