The cross-repo git-hygiene audit (ROADMAP item 6) found the documented canonical .claude/ block was allow-by-default and would have un-ignored a password-bearing .claude/launch.json. Switch portability.md to a deny-by-default .claude/* + allow-list block and align the two retrofit summaries. Mark item 6 done with residuals; refresh Current state.
Retrofit playbook Step 0/Step 1 and the /retrofit guide now seed every new repo
with the canonical .gitignore block and the inbox-check line, and Part 5 documents
/capture, /triage, /roundup. portability.md and the portability-checker guide now
scope the relative-symlink mandate to in-repo (committed) symlinks, so global
~/.claude/* links are no longer flagged. ROADMAP adds a high-priority cross-repo
git-hygiene audit.
Fans out a read-only reader per repo over AGENTS.md/ROADMAP.md, folds in the
standards inbox, and synthesizes one priority-grouped to-do list across all
projects (including untriaged inbox items and proposed new projects). Reads and
reports only — prioritizing across projects stays with the user.
Introduce the cross-project capture->triage->roadmap loop: /capture appends an
idea or bug to INBOX.md from any repo (new-project ideas included), /triage drains
a project's items into its AGENTS.md or ROADMAP.md. Give the standards repo its own
AGENTS.md (+ CLAUDE.md symlink) and ROADMAP.md so it follows its own standard, and
add a 'What git tracks' section to portability.md plus the canonical .gitignore
block answering what is committed vs gitignored around .claude and symlinks.
The playbook assumed one canonical chat per project. Add a merge prompt to
Step 1 for reconciling further conversations into the existing AGENTS.md/
ROADMAP.md without overwriting, and note in the retrofit guide that the
"files exist" skip can't mine other chats — that stays manual.
ROADMAP.md was named as a destination in two places but never created,
indexed, or read back. Add the convention to how-i-work.md, note it after
the README decision tree and in the loads-when table, give it a row in the
portability layer table, make the retrofit prompt create it, and have
handoff seed it and pull from it when Current state's next steps run thin.
Read-only documentation drift auditor: checks every README/instruction/HTML claim against the code and reports what no longer matches, modeled on the janitor/reviewer wrappers. Added to the full-eval suite (always-run) and to the subagents handbook roster and length budgets.
Automate the per-project retrofit (git audit, verify, scope, commit,
validate) as a main-thread slash command that asks for the judgment
calls. Step 1 (mining a past chat) stays manual — the command surfaces
which conversation to mine and hands back, since it can't resume one.
Read-only agent that hunts stale, orphaned, and superseded
docs and artifacts and reports removal candidates with evidence.
Scope is docs/artifacts only; never deletes. Adds the guide,
the Claude wrapper, and the handbook roster + length-budget lines.
Read-only subagent that audits a repo against the vendor-neutral /
hot-swap standard: AGENTS.md canonical with a CLAUDE.md symlink, scoped
guides symlinked from .claude/rules with index lines, thin wrappers, and
relative correctly-directed symlinks. Substance in guides/, thin Claude
wrapper in adapters/, catalogued in the subagents handbook.
Plain-prose guides that the Claude subagent wrappers read and follow:
evaluator, exerciser, researcher, reviewer, security-auditor,
start9-spec-checker, and the full-eval orchestration guide.
Move the handoff checklist body into guides/handoff.md as plain prose,
and replace the Claude command with a thin wrapper that reads the guide,
matching the full-eval pattern.
Keysat