feat(autonomy): generated identity-and-prerequisite emission with drift gate (#2723)

plugins/autonomy/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "autonomy",
-  "version": "0.19.1",
+  "version": "0.20.0",
   "description": "Governed autonomous agent operation: role-topology, binding-seam, wiring-vs-advisor, telemetry, return-accounting, trigger-dispatch, per-work-class guardrail-matrix, standing-routine-catalog, and design-only runner-charter contracts for climbing the AI-adoption ladder, plus a guided-setup skill that discovers an adopting org's state, writes its schema-versioned binding, wires standards-pinned OTLP emission with a zero-cost file-artifact default, wires human-attested return capture at the task boundary, wires signal adapters with one governed dispatch entrypoint, binds the five-class guardrail matrix to an org's isolation substrates with an in-boundary live-validation probe before recording each fail-closed binding, and stands up standing-routine-catalog classes as scheduled temporal signal adapters behind the one governed queue with free scheduling defaults wired as reviewable changes and each routine's work-class mapping homed on the security surface.",
   "author": {
     "name": "Melodic Software",

plugins/autonomy/CHANGELOG.md

@@ -3,6 +3,20 @@
 All notable changes to the `autonomy` plugin are documented here. Format follows
 [Keep a Changelog](https://keepachangelog.com/en/1.1.0/); this plugin uses semantic versioning.
 
+## [0.20.0]
+
+### Added
+
+- **Generated identity-and-prerequisite emission with drift gate** (#2723).
+  `skills/setup/scripts/generate-identity-prerequisites.mjs` derives
+  `generated/identity-prerequisites.json` from every `v1` leaf's `## Prerequisites`
+  section — one machine-readable record per identity (Access class, isolation floor,
+  connector entitlements + rung, structured `needs` with probe class / seam) — so the
+  resolver reads structure, never leaf prose. Leaves remain the authored single home;
+  `--check` fails CI on drift (wired through `scripts/validate-plugins.sh`). Co-located
+  `*.test.sh` + manifest cover clean `--check`, a hand-edited drift fixture, leaf↔emission
+  parity, and posture divergence (`dependency-update-wave` L2 vs L3).
+
 ## [0.19.1]
 
 ### Changed

plugins/autonomy/README.md

@@ -48,7 +48,9 @@ state and records that binding.
 - **Routine prerequisite resolution** (`reference/prerequisite-resolution.md`): fail-closed,
   per-identity-per-surface verdicts (`supported` / `conditional` / `unsupported` / `unknown`) for
   which catalog identities can run against a repository, composing owning seams rather than a new
-  prober — with `deferred-class` marking `join:` rows that have no identities yet.
+  prober — with `deferred-class` marking `join:` rows that have no identities yet. Per-identity
+  facts live in each `v1` leaf; `generated/identity-prerequisites.json` is the drift-gated
+  emission derived from those leaves (generator under `skills/setup/scripts/`).
 - **Runner design pack** (`reference/runner.md`): the architect-ready design contract for the
   autonomous-drain runner — the composition spine and its eight seams, the lifecycle state
   model, the two-family stop-criteria taxonomy with terminal-handoff escalation and

plugins/autonomy/generated/identity-prerequisites.json

@@ -0,0 +1,314 @@
+{
+  "_comment": "GENERATED — do not hand-edit. Regenerate with plugins/autonomy/skills/setup/scripts/generate-identity-prerequisites.mjs",
+  "schema_version": 1,
+  "identities": [
+    {
+      "identity": "advisory-cve-triage",
+      "class": "advisory-cve-triage",
+      "posture": null,
+      "leaf": "reference/routines/advisory-cve-triage.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "advisory_database",
+          "probe_class": "harness-context"
+        },
+        {
+          "id": "dependency_manifests",
+          "probe_class": "repo-file"
+        }
+      ]
+    },
+    {
+      "identity": "backlog-readiness-check",
+      "class": "backlog-readiness-check",
+      "posture": null,
+      "leaf": "reference/routines/backlog-readiness-check.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "ci-health-review/advisory",
+      "class": "ci-health-review",
+      "posture": "advisory",
+      "leaf": "reference/routines/ci-health-review.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "ci_config",
+          "probe_class": "repo-file",
+          "owner": "resolution-contract"
+        },
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "ci-health-review/ci-config-change",
+      "class": "ci-health-review",
+      "posture": "ci-config-change",
+      "leaf": "reference/routines/ci-health-review.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "ci_config",
+          "probe_class": "repo-file",
+          "owner": "resolution-contract"
+        },
+        {
+          "id": "merge_path",
+          "probe_class": "harness-context"
+        },
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "dependency-update-wave/changelog-informed",
+      "class": "dependency-update-wave",
+      "posture": "changelog-informed",
+      "leaf": "reference/routines/dependency-update-wave.md",
+      "access_class": "repo",
+      "isolation_floor": "L3",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "ci_config",
+          "probe_class": "repo-file",
+          "owner": "resolution-contract"
+        },
+        {
+          "id": "dependency_manifests",
+          "probe_class": "repo-file"
+        },
+        {
+          "id": "ecosystems",
+          "probe_class": "repo-file",
+          "seam": "toolchain"
+        },
+        {
+          "id": "upstream_changelog",
+          "probe_class": "harness-context"
+        }
+      ]
+    },
+    {
+      "identity": "dependency-update-wave/mechanical",
+      "class": "dependency-update-wave",
+      "posture": "mechanical",
+      "leaf": "reference/routines/dependency-update-wave.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "ci_config",
+          "probe_class": "repo-file",
+          "owner": "resolution-contract"
+        },
+        {
+          "id": "dependency_manifests",
+          "probe_class": "repo-file"
+        },
+        {
+          "id": "ecosystems",
+          "probe_class": "repo-file",
+          "seam": "toolchain"
+        }
+      ]
+    },
+    {
+      "identity": "doc-freshness-sweep/advisory",
+      "class": "doc-freshness-sweep",
+      "posture": "advisory",
+      "leaf": "reference/routines/doc-freshness-sweep.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "documentation_corpus",
+          "probe_class": "repo-file"
+        },
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "doc-freshness-sweep/docs-change",
+      "class": "doc-freshness-sweep",
+      "posture": "docs-change",
+      "leaf": "reference/routines/doc-freshness-sweep.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "documentation_corpus",
+          "probe_class": "repo-file"
+        },
+        {
+          "id": "merge_path",
+          "probe_class": "harness-context"
+        },
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "duplicate-detection-sweep",
+      "class": "duplicate-detection-sweep",
+      "posture": null,
+      "leaf": "reference/routines/duplicate-detection-sweep.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "eng-metrics-digest",
+      "class": "eng-metrics-digest",
+      "posture": null,
+      "leaf": "reference/routines/eng-metrics-digest.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "activity_signals",
+          "probe_class": "repo-file"
+        },
+        {
+          "id": "ci_config",
+          "probe_class": "repo-file",
+          "owner": "resolution-contract"
+        },
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "issue-triage-sweep",
+      "class": "issue-triage-sweep",
+      "posture": null,
+      "leaf": "reference/routines/issue-triage-sweep.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "pr-queue-tending",
+      "class": "pr-queue-tending",
+      "posture": null,
+      "leaf": "reference/routines/pr-queue-tending.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "ci_config",
+          "probe_class": "repo-file",
+          "owner": "resolution-contract"
+        },
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    },
+    {
+      "identity": "tech-debt-sweep",
+      "class": "tech-debt-sweep",
+      "posture": null,
+      "leaf": "reference/routines/tech-debt-sweep.md",
+      "access_class": "repo",
+      "isolation_floor": "L2",
+      "connector_entitlements": [],
+      "connector_entitlement_rung": null,
+      "executor_class_merge_cap": "security-binding",
+      "needs": [
+        {
+          "id": "ecosystems",
+          "probe_class": "repo-file",
+          "seam": "toolchain"
+        },
+        {
+          "id": "source_tree",
+          "probe_class": "repo-file"
+        },
+        {
+          "id": "tracker",
+          "probe_class": "repo-file",
+          "seam": "work-item-tracker"
+        }
+      ]
+    }
+  ]
+}