audit-pass: four design/shipped contract contradictions in rerun-contract.md, plus PLAN.md phase drift

[kyle-sexton]

This was generated by AI from a fresh-context verification round during PR #1886; none of these were caused by that PR, so they were recorded rather than fixed there.

Context

The design doc docs/topics/audit-pass/design/rerun-contract.md (path may have drifted; locate by
filename) and the shipped contract
plugins/claude-config/skills/audit-pass/reference/run-contract.md contradict each other on four
points. PR #1886 already fixed the two staleness cases it was scoped to (adopting the shipped
fix-comparable and scan-baseline state digest vocabulary); these four remain.

The four contradictions

1. Inline suppression markers — the design doc (around its line 424 at time of writing)
   mandates inline suppression markers, while the shipped contract states "suppression is always
   central. There is no inline marker, at any target" and records the inline form "was specified and
   withdrawn… so it is not re-proposed." This one will break any implementation that follows the
   design doc. Shipped contract is the authority.
2. Redirect refusal — existence-only vs name-based refusal criteria disagree between the two.
3. Lock reclamation fallback — the two describe different fallback behavior; the shipped
   contract's boot-identity + liveness + hard-ceiling shape (post fix(claude-config,source-control): close five stranded findings from #1318/#1320/#1405 #1848) is current.
4. Closure dispositions — shipped contract has four dispositions, design doc has three.

Additional drift

PLAN.md for the audit-pass topic marks Phases 6, 8, 9 TODO while audit-pass ships a more
advanced run contract — implementation ran ahead of the plan; the plan no longer describes reality.

Acceptance criteria

• Each of the four contradictions is reconciled with the shipped contract as the default
  authority, or the divergence deliberately decided the other way with the decision recorded.
• The audit-pass PLAN.md phase status reflects what actually shipped.

Related

Refs #1886
No linked issue is closed by this report.

[kyle-sexton]

Batch-4 filing note. #2280 files what #2228–#2231 left standing in audit-pass, and two of its rows touch surfaces this issue also touches:

• F3/F5/F12 — 1,547 lines of SKILL.md + reference/*.md specifying leases, heartbeats, owner_epoch fencing and append-only partials, with no scripts/ directory at all (the only audit skill in claude-config without one). This issue's own reasoning — declining to specify further mechanism in prose "against an artifact nobody has written" — is the same observation from the other side.
• F9 — SKILL.md:42-43 still expresses the default target as a ${CLAUDE_PROJECT_DIR}-"when set" condition, which fix(claude-config): audit-prompting-postures report path has no project dimension, so any other root overwrites it #2250 has since forbidden in writing in a sibling skill of the same plugin.

report-location-and-schema.md is the shared surface between this issue's redirect-refusal contradiction and #2280's F12. Coordinate if both land in the same window.

[kyle-sexton]

Claimed by cloud agent; Fixes PR incoming from branch cursor/*-63e1.