One provider-neutral skill
Claude Code and Codex use the same contract while retaining native invocation and runners.
Changelog / unreleased
Every rule begins with a failure.
Repository history, not release theatre. Everything here is committed and publicly inspectable; no tagged package version is claimed yet.
Unreleased
Default branch / public source
01
Runnable refusal specimen
A redacted fixture shows false delivery blocked, honest delivery accepted, and terminal mismatch rejected.
Machine-readable proof manifest
Every public claim maps to artifacts, expected output, and a visible evidence boundary.
Seven-route discovery contract
Unique metadata, canonical URLs, crawl rules, structured-data boundaries, and evidence sources are validated locally.
Terminal-state mismatch bypass
The gate now rejects a requested terminal that conflicts with the state already recorded by the run.
Ambiguous gate invocation
Calls without exactly one phase or terminal now fail with a usage error.
Unsafe runner inputs
The runner rejects path traversal, shell syntax in slugs, and non-integer session caps.
Most useful change
The gate learned to distrust itself.
A regression preserved a contradiction the original terminal check incorrectly passed. The fixed gate now names both states and exits 1.
Inspect before and after